last executing test programs:

4m41.875921213s ago: executing program 1 (id=4575):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b3", 0x8f, 0x0, 0x0, 0x0)

4m41.43641282s ago: executing program 1 (id=4577):
socket$inet6(0xa, 0x1, 0x84)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES32=<r2=>r0, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0xd)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x18}, 0x2000c084)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0)
write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ff00"})
r5 = syz_open_pts(r4, 0x0)
dup3(r5, r4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYBLOB="ff74fb97ce9e19a6a4cdc3df79e94ec6cf9b5ba2b5181a981296dfb46f196c40f9cbd31c8cc9cf67ed8ee9962fafd90ab7537477a4a2ea9b07403a6c452baffe2db42f2592797a43f6f0131ef2bd08512730ad2702400d40a3c294b6006fc0375c5348184854c1de5cbaecf1e81b311ac418bb3c", @ANYRESHEX=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='kfree\x00', r6, 0x0, 0x9}, 0x64)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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")

4m40.457896075s ago: executing program 1 (id=4585):
pipe2$9p(0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedreceive(r2, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0)

4m39.582639859s ago: executing program 1 (id=4602):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r1 = socket$inet6(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10)
sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0, 0x2000000}, 0x10)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xb, 0xb76a}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x20000261, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10)
r9 = dup(r4)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES32, @ANYBLOB="2c1d867e3c1ac589b6cd85253b776664790e6e6f3d", @ANYRESHEX=r9, @ANYBLOB=',k'])
creat(&(0x7f0000000000)='./file0\x00', 0x1e)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)
r10 = eventfd(0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
writev(r10, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}, {&(0x7f0000002180)="27a8104ce45cd4d5", 0x8}], 0x8)
socket$inet6_sctp(0xa, 0x1, 0x84)

4m39.079892588s ago: executing program 1 (id=4609):
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40)
write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0x32600)

4m38.515746326s ago: executing program 1 (id=4616):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000500000002"], 0x48)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x7ff}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket(0x10, 0x3, 0x6)
r5 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

4m38.515332826s ago: executing program 32 (id=4616):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000500000002"], 0x48)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x7ff}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket(0x10, 0x3, 0x6)
r5 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

4m33.427360177s ago: executing program 3 (id=4712):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'ipvlan1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x200, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x879b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x10180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x4000006, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x3, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x22, 0x5, 0x8, 0x40000000, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fa, 0xc5c, 0xffffffff]}})
pipe2$9p(&(0x7f0000000040), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac14140008000200ac1414bb0c0002800500010000000000240002801400018008000100ac14140008000200ac1414aa0c000280050001000000000008000740000000002c000e"], 0x90}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'gre0\x00', 0x100})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f3100000800"], 0xe8}}, 0x0)
close(r3)
syz_open_dev$loop(&(0x7f0000000080), 0x400, 0x4000)
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0x10, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18)
r8 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r8, 0x0, 0x0, 0x6, 0x0)
mq_timedreceive(r8, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0)
r9 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r9, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)="89", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x240008d9)
close(r9)
socket$kcm(0x2, 0x3, 0x84)

4m33.406765518s ago: executing program 3 (id=4714):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

4m33.391698418s ago: executing program 3 (id=4716):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0)

4m33.335902909s ago: executing program 3 (id=4719):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r2 = syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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")
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYRES64=r1], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x1}, 0x18)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40)
write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0x32600)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x480, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file2\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r11}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r10}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x60, &(0x7f0000000140)=<r12=>0x0)
io_submit(r12, 0x1, &(0x7f0000001400)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0xffffffeb}])
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x51, {0x2, 0x4e24, @dev}, 'vcan0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r13 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
writev(r13, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2)

4m33.193254381s ago: executing program 3 (id=4721):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'ipvlan1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x200, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x879b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x10180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x4000006, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x3, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x22, 0x5, 0x8, 0x40000000, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fa, 0xc5c, 0xffffffff]}})
pipe2$9p(&(0x7f0000000040), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac14140008000200ac1414bb0c0002800500010000000000240002801400018008000100ac14140008000200ac1414aa0c000280050001000000000008000740000000002c000e"], 0x90}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'gre0\x00', 0x100})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f3100000800"], 0xe8}}, 0x0)
close(r3)
syz_open_dev$loop(&(0x7f0000000080), 0x400, 0x4000)
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0x10, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18)
r8 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r8, 0x0, 0x0, 0x6, 0x0)
mq_timedreceive(r8, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0)
r9 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r9, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)="89", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x240008d9)
close(r9)
socket$kcm(0x2, 0x3, 0x84)

4m32.822278597s ago: executing program 3 (id=4724):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'ipvlan1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x200, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x879b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x10180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x4000006, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x3, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x22, 0x5, 0x8, 0x40000000, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fa, 0xc5c, 0xffffffff]}})
pipe2$9p(&(0x7f0000000040), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac14140008000200ac1414bb0c0002800500010000000000240002801400018008000100ac14140008000200ac1414aa0c000280050001000000000008000740000000002c000e"], 0x90}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'gre0\x00', 0x100})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
close(r3)
syz_open_dev$loop(&(0x7f0000000080), 0x400, 0x4000)
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0x10, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18)
r8 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r8, 0x0, 0x0, 0x6, 0x0)
mq_timedreceive(r8, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0)
r9 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r9, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)="89", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x240008d9)
close(r9)
socket$kcm(0x2, 0x3, 0x84)

4m32.764322788s ago: executing program 33 (id=4724):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'ipvlan1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x200, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x879b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x10180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x4000006, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x3, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x22, 0x5, 0x8, 0x40000000, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fa, 0xc5c, 0xffffffff]}})
pipe2$9p(&(0x7f0000000040), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac14140008000200ac1414bb0c0002800500010000000000240002801400018008000100ac14140008000200ac1414aa0c000280050001000000000008000740000000002c000e"], 0x90}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'gre0\x00', 0x100})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
close(r3)
syz_open_dev$loop(&(0x7f0000000080), 0x400, 0x4000)
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0x10, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18)
r8 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r8, 0x0, 0x0, 0x6, 0x0)
mq_timedreceive(r8, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0)
r9 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r9, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)="89", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x240008d9)
close(r9)
socket$kcm(0x2, 0x3, 0x84)

4m32.268845666s ago: executing program 5 (id=4733):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'ipvlan1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x200, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x879b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x10180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x4000006, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x3, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x22, 0x5, 0x8, 0x40000000, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fa, 0xc5c, 0xffffffff]}})
pipe2$9p(&(0x7f0000000040), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac14140008000200ac1414bb0c0002800500010000000000240002801400018008000100ac14140008000200ac1414aa0c000280050001000000000008000740000000002c00"], 0x90}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'gre0\x00', 0x100})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
close(r3)
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0x10, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18)
r8 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedreceive(r8, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)="89", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x240008d9)
close(0xffffffffffffffff)

4m32.0528279s ago: executing program 5 (id=4735):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x8000)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32], 0x4)

4m31.964895101s ago: executing program 5 (id=4736):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = pidfd_getfd(r2, r2, 0x0)
setns(r3, 0x20000000)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50)
r4 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0)

4m31.964291681s ago: executing program 5 (id=4737):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r2 = syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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")
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYRES64=r1], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x1}, 0x18)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40)
write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0x32600)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x480, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file2\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r10}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r9}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x60, &(0x7f0000000140)=<r11=>0x0)
io_submit(r11, 0x1, &(0x7f0000001400)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0xffffffeb}])
r12 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
writev(r12, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2)

4m31.802542494s ago: executing program 5 (id=4740):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x9, 0x20, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152}, 0x94)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$eJzs28FrXEUcB/BfkqapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfkLYEVsXry6t8hggjeBPGml1z8DwRvuXisID7JrrZd3RVWQjfI53PZH8z7zs7ssAuzzBy+8tn7O9tVtp13Y3ZmJmZ3I9LdFClm4y8fxwsvf//DM9dv3rq63mxuXEvpyvqN1ZdSSsvPfvvWh18891337JtfL3+zEAcrbx/+svbzwfmDC4e/33ivVaVWldqdbsrT7U6nm98ui7TVqnaylN4oi7wqUqtdFXtD7dtlZ3e3l/L21tLi7l5RVSlv99JO0UvdTuru9VL+bt5qpyzL0tJiMLlT96rNz+/WdR1R1/NxOuq6rh+JxTgbj8ZSLEcjVuKxeDyeiHPxZJyPp+Lp+OqnL3tHCQAAAAAAAAAAAAAAAAAAAOD4THr//0L/qWmPGgAAAAAAAAAAAAAAAAAAAP5frt+8dXW92dy4ltKZiPLT/c39zcHroH19O1pRRhGXoxG/Rf/2/8CgvvJac+Ny6luJT8o7f+bv7G/ODedXoxEvjs6vDvJpOL8Qiw/m16IR50bl52NtZP5MXHr+gXwWjfjxnehEGVtxlL3//h+tpvTq682/5S/2nxtv7mEsDwAAAByLLN0zcv+eZePaB/kJ/h8Y2l8fZS+emurUiYiq98FOXpbFnmJkcelkDKNfnD7ODucjYrLUr3VdT/9DmFIx/puyEBH/ueeZiDgZE/xHMe1fJh6G+4s+7ZEAAAAAAAAAAAAwibHHABf+7YTg3ETHCac9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//0AbP3Q==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ftruncate(r0, 0x2000009)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000800)=[{&(0x7f0000000f80)="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", 0x11d}, {&(0x7f0000000280)="09ec8b684fbd9f0a18960e84defd08b28dc2f98b5aad5cfeb075441d6d15233b802af831523479391b7297416ddff60a6500da9864b052a3105e6fa49014cb2ce5f295aaff14d9077735f34eaec042e8252a6456999297ed02a01da56a3809f0c58184192ebf4bead7e8618412536273bf08e0f6847e436dc74fd4450e8ff88199f35a0c759aff55639834dc4c945dfb330a7b92b049700cb67e0f14337d8390091514253c2f2d4499d89b5f04759319e2c7b6856f03c69029b689f0be37093c79e8ff2405eb93cbfe5487143a294c3e61b0c9be8323cd4d01c37e5f5d4bf94546d02d4dc988db", 0xe7}, {&(0x7f0000000080)="6a5b3986af4597e55298f14c7f201f060fe2bafbdf16a0ace97ea54e624ac84ccc7fc7f393c4ece5273773faa8c63f157edf2a0d41a7c6340c630b50b30c42d156fa375b30d31bf6a611fd29e60958434b6f597e0bb9ec6731ad3c9b2ee1dc975565bc1d534aae4c0693aebccc5caa31bf5b1c194f52f632", 0x78}, {&(0x7f0000000380)}, {&(0x7f0000001f80)="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", 0x170}, {&(0x7f0000000680)="23c8f8e7bb8d0b8cbeae874b769afbb97c7f46c8969c2772e02e5d80add492fdba14dee6fbc6f2cdc93b86fb8199b61a03a801c262c343c6bbf5856dc1d3c7dd7eeb196ddcf13456cff2810000953060a280f32e718b432d2031c73f6ca657519e04cf1b39497f7d785fff277a", 0x6d}], 0x6, 0x8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r1, 0x0, r3, 0x0, 0x2000000002ffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841)
recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1)
recvmsg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x32050)
pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1)

4m31.229683623s ago: executing program 5 (id=4750):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r1 = socket$inet6(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

4m31.207819913s ago: executing program 34 (id=4750):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r1 = socket$inet6(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

17.806571835s ago: executing program 6 (id=9131):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757818"], 0x65)

17.733020657s ago: executing program 6 (id=9132):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1d, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x13)
ptrace(0x10, r1)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000480)='.\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x200ea, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x4000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc4, &(0x7f0000000540), 0x0, 0x10, &(0x7f0000000000), &(0x7f00000005c0), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)

17.417368121s ago: executing program 6 (id=9140):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$kcm(0x2, 0xa, 0x2)
writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}, {&(0x7f0000000440)='FA', 0x2}], 0x2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000280)=0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kfree\x00'}, 0x18)

17.221436235s ago: executing program 6 (id=9144):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x2010, r1, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x116)
accept4$unix(r0, 0x0, 0x0, 0x80800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xbc, 0x0, 0x7ffc0002}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x200000000000006}, 0x18)
modify_ldt$read(0x2000000, 0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6)

17.144063986s ago: executing program 6 (id=9145):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8)
r4 = dup(r3)
r5 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)

16.016357524s ago: executing program 6 (id=9158):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e3ffffff7f000000000000000000"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = fsopen(&(0x7f00000000c0)='devpts\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000001c0)='\x00', &(0x7f0000001800)='#[', 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x4}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x4}, 0x50)
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
socket$netlink(0x10, 0x3, 0x1) (async)
socket$netlink(0x10, 0x3, 0x1)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000000000000000000000c850000006d00000095"], &(0x7f0000001800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000000)={0xfff, 0x1, 0x9, 0xfffffff9}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='9p_protocol_dump\x00', r3}, 0x10)
pipe2$9p(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
dup(r5) (async)
r6 = dup(r5)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) (async)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}})

2.231551174s ago: executing program 0 (id=9407):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$kcm(0x2, 0xa, 0x2)
writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}, {&(0x7f0000000440)='FA', 0x2}], 0x2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000280)=0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kfree\x00'}, 0x18)

2.017181288s ago: executing program 0 (id=9412):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x945}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[], 0xb4}}, 0x0)

2.001512137s ago: executing program 2 (id=9413):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), &(0x7f0000001c40)=r1}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
setreuid(0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

1.996002768s ago: executing program 0 (id=9414):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
syz_io_uring_setup(0x10f, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x3}, &(0x7f00000001c0), &(0x7f0000000280))
pause()

1.21892472s ago: executing program 7 (id=9432):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

1.21856369s ago: executing program 4 (id=9433):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$kcm(0x2, 0xa, 0x2)
writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}, {&(0x7f0000000440)='FA', 0x2}], 0x2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000280)=0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kfree\x00'}, 0x18)

1.134483472s ago: executing program 7 (id=9434):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x24, &(0x7f0000000000)={0x0, 0x1, 0xfffffffffffffffc})

1.127234132s ago: executing program 4 (id=9435):
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095", @ANYRESHEX, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xf}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000003f28001280140001800c000100636f756e7465720004000280100001800c000100636f756e7465720008000340000001"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20050800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}, 0x0, 0x1}}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9, 0x0, 0x4, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xa97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0xfffffffd, 0x400000, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb484, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dfd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x72, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000, 0x0, 0x5, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd]}]}}]}, 0x45c}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000300)={[{@init_itable_val={'init_itable', 0x3d, 0x80000001}}]}, 0x1, 0xbac, &(0x7f0000002380)="$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")
r10 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r10, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

1.075941633s ago: executing program 7 (id=9436):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x9, 0x20, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152}, 0x94)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ftruncate(r0, 0x2000009)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000800)=[{&(0x7f0000000f80)="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", 0x11d}, {&(0x7f0000000280)="09ec8b684fbd9f0a18960e84defd08b28dc2f98b5aad5cfeb075441d6d15233b802af831523479391b7297416ddff60a6500da9864b052a3105e6fa49014cb2ce5f295aaff14d9077735f34eaec042e8252a6456999297ed02a01da56a3809f0c58184192ebf4bead7e8618412536273bf08e0f6847e436dc74fd4450e8ff88199f35a0c759aff55639834dc4c945dfb330a7b92b049700cb67e0f14337d8390091514253c2f2d4499d89b5f04759319e2c7b6856f03c69029b689f0be37093c79e8ff2405eb93cbfe5487143a294c3e61b0c9be8323cd4d01c37e5f5d4bf94546d02d4dc988db", 0xe7}, {&(0x7f0000000080)="6a5b3986af4597e55298f14c7f201f060fe2bafbdf16a0ace97ea54e624ac84ccc7fc7f393c4ece5273773faa8c63f157edf2a0d41a7c6340c630b50b30c42d156fa375b30d31bf6a611fd29e60958434b6f597e0bb9ec6731ad3c9b2ee1dc975565bc1d534aae4c0693aebccc5caa31bf5b1c194f52f63257b81e71d68ab2fd", 0x80}, {&(0x7f0000000380)}, {&(0x7f0000001f80)="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", 0x170}, {&(0x7f0000000680)="23c8f8e7bb8d0b8cbeae874b769afbb97c7f46c8969c2772e02e5d80add492fdba14dee6fbc6f2cdc93b86fb8199b61a03a801c262c343c6bbf5856dc1d3c7dd7eeb196ddcf13456cff2810000953060a280f32e718b432d2031c73f6ca657519e04cf1b39497f", 0x67}], 0x6, 0x8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r1, 0x0, r3, 0x0, 0x2000000002ffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841)
recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)}], 0x1}, 0x1)
pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1)
statfs(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=""/28)

1.074028373s ago: executing program 0 (id=9437):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x4}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x40000)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.010864094s ago: executing program 2 (id=9438):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)

1.003473223s ago: executing program 0 (id=9439):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}}, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f00000001c0)=0xc000, 0x12)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000180), &(0x7f0000000200), 0x2, 0x2)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4e21, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x93}}], 0x18}, 0x40c0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRESHEX=r4, @ANYBLOB="a0b72dcadafcf63628da8cce58d971b98be867166006da0752826e2d5316d659146c6489d492b7d1442c81a12fd385eb4f13faa59349061fec4be5616daf169d11c03839dcc92ab262a4ff6054852a7d", @ANYRES8, @ANYRESDEC=r3, @ANYRESDEC=r0, @ANYRESHEX=r3, @ANYRES32=r1], 0x48)
r6 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0xa77}, 0x1c)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000b0000000b0000000000791100006d00f2ff18110000fd8cad7f5436d235006de93bf55fbc6de8018aa42d8911bc0c1604593bb0690c6d699e7c23c0eb6016830d8572c622295e2c2d5e4797af28cf14b48b0d0545bd578d9c5244a24754df866caa16dd9cc7726915c68995ca78fe2267a88290b06de3e4e82f997c7bbc16a99e221abbf5e8fbd92fd4afbcf39590724d2d1a018d164af78ab295ec6ca838c4c910c9f973", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x3}, 0x18)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r8=>0x0]}, &(0x7f0000000600)=0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2000000000000000840000000200000005000400280000000b0000820ea23f1fb58c1173dd6493a630", @ANYRES32=r8], 0x20, 0x2400e044}, 0x0)

900.745065ms ago: executing program 2 (id=9440):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x1, 0x1}}}]}}]}]}]}}]}, 0x70}}, 0x20040054)

877.830876ms ago: executing program 7 (id=9450):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)

825.873196ms ago: executing program 4 (id=9441):
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x20048005)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)

735.990498ms ago: executing program 4 (id=9442):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socket$inet6(0xa, 0x80001, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000280)={0x4c, 0x5f, 0x6, 0x3, 0x7, "00da900eaf7919c635d4a15ac41e3100", 0x80000000, 0x7fe})
r3 = dup(r2)
mknodat(r3, &(0x7f0000000080)='./file0\x00', 0x20, 0x4)
write$UHID_INPUT(r3, &(0x7f0000000300)={0xd, {"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", 0x1000}}, 0x1006)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x28, 0x1, 0x4, 0x25dfdbf8, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

731.636228ms ago: executing program 2 (id=9443):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x1, 0x1}}}]}}]}]}]}}]}, 0x70}}, 0x20040054)

730.642398ms ago: executing program 7 (id=9444):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

676.757028ms ago: executing program 4 (id=9445):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$kcm(0x2, 0xa, 0x2)
writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}, {&(0x7f0000000440)='FA', 0x2}], 0x2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000280)=0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kfree\x00'}, 0x18)

666.610329ms ago: executing program 2 (id=9446):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x24, &(0x7f0000000000)={0x0, 0x1, 0xfffffffffffffffc})

593.6105ms ago: executing program 2 (id=9447):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
syz_io_uring_setup(0x10f, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x3}, &(0x7f00000001c0), &(0x7f0000000280))
pause()

562.46635ms ago: executing program 7 (id=9448):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), &(0x7f0000001c40)=r1}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
setreuid(0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0)

524.998491ms ago: executing program 4 (id=9449):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0})
io_uring_enter(r2, 0x40f9, 0x217, 0x48, 0x0, 0x0)
dup3(r2, r0, 0x80000)

0s ago: executing program 0 (id=9451):
timer_create(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000200007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
read$hiddev(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73c1bd07}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r7, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
timer_create(0x0, 0x0, 0x0)
sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r7, 0x1, 0x0, 0x6, @local}, 0x14)
r8 = socket$netlink(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

kernel console output (not intermixed with test programs):

000-0000-000000000000.
[  480.770364][T31818] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #2: block 16: comm syz.6.8501: lblock 0 mapped to illegal pblock 16 (length 1)
[  480.786375][T21134] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0
[  480.810186][T21134] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  480.825863][T28574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.844341][T21134] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  480.873983][T31851] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8510'.
[  481.052959][T31885] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8515'.
[  481.114971][T31893] loop4: detected capacity change from 0 to 764
[  481.192451][T31907] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  481.202536][T31909] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8521'.
[  481.219733][T31907] SELinux: failed to load policy
[  481.448365][T31904] loop4: detected capacity change from 0 to 1024
[  481.448655][T31933] loop6: detected capacity change from 0 to 8192
[  481.467678][T31904] EXT4-fs: Ignoring removed bh option
[  481.474671][T31904] EXT4-fs: inline encryption not supported
[  481.493923][T31904] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  481.521292][T31904] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  481.553632][T31904] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.8520: lblock 2 mapped to illegal pblock 2 (length 1)
[  481.572741][T31904] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.8520: lblock 0 mapped to illegal pblock 48 (length 1)
[  481.600259][T31904] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.8520: Failed to acquire dquot type 0
[  481.734740][T31904] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  481.763278][T31904] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.8520: mark_inode_dirty error
[  481.778261][T31904] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  481.789588][T31904] EXT4-fs (loop4): 1 orphan inode deleted
[  481.799249][T31904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  481.817124][ T9228] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:60: lblock 1 mapped to illegal pblock 1 (length 1)
[  481.831998][ T9228] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:60: Failed to release dquot type 0
[  481.846158][T31904] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  481.876057][T21134] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.935518][T31980] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8533'.
[  482.142876][T31998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8539'.
[  482.251955][T32021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8539'.
[  482.361462][T32046] loop7: detected capacity change from 0 to 512
[  482.375031][T32046] journal_path: Non-blockdev passed as './bus'
[  482.381282][T32046] EXT4-fs: error: could not find journal device path
[  482.500582][T32070] loop4: detected capacity change from 0 to 164
[  482.512564][T32035] loop2: detected capacity change from 0 to 1024
[  482.551361][T32035] EXT4-fs: Ignoring removed bh option
[  482.563083][T32069] loop6: detected capacity change from 0 to 8192
[  482.568936][T32035] EXT4-fs: inline encryption not supported
[  482.594913][T32035] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  482.646195][T32035] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  482.664552][T32035] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.8543: lblock 2 mapped to illegal pblock 2 (length 1)
[  482.683386][T32035] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.8543: lblock 0 mapped to illegal pblock 48 (length 1)
[  482.699750][T32035] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.8543: Failed to acquire dquot type 0
[  482.712984][T32035] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  482.728232][T32035] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.8543: mark_inode_dirty error
[  482.785738][T32035] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  482.836751][T32093] loop4: detected capacity change from 0 to 1024
[  482.846422][T32093] EXT4-fs: Ignoring removed bh option
[  482.852099][T32093] EXT4-fs: inline encryption not supported
[  482.857957][T32035] EXT4-fs (loop2): 1 orphan inode deleted
[  482.866666][ T9228] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:60: lblock 1 mapped to illegal pblock 1 (length 1)
[  482.867836][T32093] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  482.884613][T32035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  482.920170][ T9228] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:60: Failed to release dquot type 0
[  482.938587][T32093] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  482.971446][T32093] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.8551: lblock 2 mapped to illegal pblock 2 (length 1)
[  482.993584][T32093] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.8551: lblock 0 mapped to illegal pblock 48 (length 1)
[  483.010433][T32093] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.8551: Failed to acquire dquot type 0
[  483.023411][T32093] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  483.034284][T32093] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.8551: mark_inode_dirty error
[  483.046553][T32093] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  483.060752][T32093] EXT4-fs (loop4): 1 orphan inode deleted
[  483.070321][T32093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  483.083016][ T4266] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1)
[  483.097980][ T4266] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:25: Failed to release dquot type 0
[  483.125504][T32035] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  483.125893][T32093] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  483.155174][T32093] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 16: comm syz.4.8551: lblock 0 mapped to illegal pblock 16 (length 1)
[  483.176079][T20556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.226273][T21134] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.236585][T32128] loop7: detected capacity change from 0 to 1024
[  483.239637][T32138] vlan1: entered allmulticast mode
[  483.244980][T32128] EXT4-fs: Ignoring removed bh option
[  483.253928][T32128] EXT4-fs: inline encryption not supported
[  483.263452][T32128] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  483.282003][T32128] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  483.293157][T32128] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 2: comm syz.7.8555: lblock 2 mapped to illegal pblock 2 (length 1)
[  483.307336][T32128] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 48: comm syz.7.8555: lblock 0 mapped to illegal pblock 48 (length 1)
[  483.321883][T32128] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.8555: Failed to acquire dquot type 0
[  483.335565][T32128] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  483.346344][T32128] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.8555: mark_inode_dirty error
[  483.421777][T32128] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  483.432033][T32128] EXT4-fs (loop7): 1 orphan inode deleted
[  483.438605][T32128] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  483.451810][ T3687] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1)
[  483.483997][T32155] 9pnet_fd: Insufficient options for proto=fd
[  483.496753][ T3687] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 0
[  483.522485][T32128] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  483.578319][T27525] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.591033][T32166] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8562'.
[  484.377434][T32270] loop6: detected capacity change from 0 to 8192
[  484.441433][T32283] vlan2: entered allmulticast mode
[  484.552999][T32292] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  484.558447][T32295] loop7: detected capacity change from 0 to 1024
[  484.568843][T32295] EXT4-fs: Ignoring removed bh option
[  484.576734][T32295] EXT4-fs: inline encryption not supported
[  484.582754][T32292] SELinux: failed to load policy
[  484.590341][T32295] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  484.609323][T32295] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  484.625317][T32295] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 2: comm syz.7.8577: lblock 2 mapped to illegal pblock 2 (length 1)
[  484.640417][T32295] __quota_error: 300 callbacks suppressed
[  484.640429][T32295] Quota error (device loop7): qtree_write_dquot: dquota write failed
[  484.664275][T32295] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 48: comm syz.7.8577: lblock 0 mapped to illegal pblock 48 (length 1)
[  484.694790][T32295] Quota error (device loop7): v2_write_file_info: Can't write info structure
[  484.703608][T32295] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.8577: Failed to acquire dquot type 0
[  484.742833][T32305] loop2: detected capacity change from 0 to 1024
[  484.751023][T32295] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  484.751402][T32305] EXT4-fs: Ignoring removed bh option
[  484.767199][T32305] EXT4-fs: inline encryption not supported
[  484.773979][T32295] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.8577: mark_inode_dirty error
[  484.785816][T32305] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  484.786894][T32295] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  484.806699][T32295] EXT4-fs (loop7): 1 orphan inode deleted
[  484.812937][T32295] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  484.833207][ T9220] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:53: lblock 1 mapped to illegal pblock 1 (length 1)
[  484.847418][T32305] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  484.865678][T32305] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.8580: lblock 2 mapped to illegal pblock 2 (length 1)
[  484.868187][ T9220] Quota error (device loop7): remove_tree: Can't read quota data block 1
[  484.885543][T32305] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  484.888404][ T9220] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:53: Failed to release dquot type 0
[  484.909416][T32305] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.8580: lblock 0 mapped to illegal pblock 48 (length 1)
[  484.910223][T32305] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  484.910265][T32305] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.8580: Failed to acquire dquot type 0
[  484.946064][T32305] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  484.947485][T32295] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  484.957920][T32305] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.8580: mark_inode_dirty error
[  485.025730][T32305] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  485.046401][T32305] EXT4-fs (loop2): 1 orphan inode deleted
[  485.059493][ T9220] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:53: lblock 1 mapped to illegal pblock 1 (length 1)
[  485.082202][ T9220] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  485.088198][T32305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  485.090728][ T9220] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:53: Failed to release dquot type 0
[  485.121776][T27525] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.247777][T32305] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  485.312435][T20556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.334885][T32352] vlan1: entered allmulticast mode
[  485.610739][T32361] loop6: detected capacity change from 0 to 1024
[  485.624435][T32361] EXT4-fs: Ignoring removed bh option
[  485.644951][T32361] EXT4-fs: inline encryption not supported
[  485.659123][T32361] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  485.711316][T32361] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  485.738402][T32361] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.8588: lblock 2 mapped to illegal pblock 2 (length 1)
[  485.762731][T32361] Quota error (device loop6): qtree_write_dquot: dquota write failed
[  485.787246][T32361] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 48: comm syz.6.8588: lblock 0 mapped to illegal pblock 48 (length 1)
[  485.810681][T32361] Quota error (device loop6): v2_write_file_info: Can't write info structure
[  485.820227][T32361] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.8588: Failed to acquire dquot type 0
[  485.843727][T32361] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  485.900486][T32361] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.8588: mark_inode_dirty error
[  485.964956][T32361] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  485.992438][T32361] EXT4-fs (loop6): 1 orphan inode deleted
[  486.009108][ T4266] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1)
[  486.031239][T32361] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  486.046181][ T4266] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  486.054657][ T4266] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:25: Failed to release dquot type 0
[  486.084241][T32361] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  486.119173][T28574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.234506][T32476] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  486.243094][T32476] SELinux: failed to load policy
[  486.398723][T32494] loop7: detected capacity change from 0 to 8192
[  486.523107][T32489] loop6: detected capacity change from 0 to 1024
[  486.534772][T32489] EXT4-fs: Ignoring removed bh option
[  486.540737][T32489] EXT4-fs: inline encryption not supported
[  486.556200][T32489] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  486.585365][T32531] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8602'.
[  486.596429][T32489] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  486.622636][T32489] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.8598: lblock 2 mapped to illegal pblock 2 (length 1)
[  486.639045][T32489] Quota error (device loop6): qtree_write_dquot: dquota write failed
[  486.735458][T32489] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 48: comm syz.6.8598: lblock 0 mapped to illegal pblock 48 (length 1)
[  486.772141][T32489] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.8598: Failed to acquire dquot type 0
[  486.837896][T32542] loop2: detected capacity change from 0 to 1024
[  486.847619][T32542] EXT4-fs: Ignoring removed bh option
[  486.853547][T32542] EXT4-fs: inline encryption not supported
[  486.874185][T32489] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  486.887579][T32542] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  486.893335][T32573] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  486.907505][T32489] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.8598: mark_inode_dirty error
[  486.910626][T32573] SELinux: failed to load policy
[  486.924687][T32489] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  486.937288][T32542] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  486.973852][T32580] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  486.980887][T32542] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.8606: lblock 2 mapped to illegal pblock 2 (length 1)
[  486.982550][T32580] SELinux: failed to load policy
[  487.000127][T32489] EXT4-fs (loop6): 1 orphan inode deleted
[  487.020467][T32489] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  487.037278][ T9220] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:53: lblock 1 mapped to illegal pblock 1 (length 1)
[  487.061060][T32542] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.8606: lblock 0 mapped to illegal pblock 48 (length 1)
[  487.104190][ T9220] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:53: Failed to release dquot type 0
[  487.116231][T32542] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.8606: Failed to acquire dquot type 0
[  487.133524][T32489] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  487.147395][T32542] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  487.169231][T28574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.185710][T32576] loop4: detected capacity change from 0 to 1024
[  487.198482][T32542] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.8606: mark_inode_dirty error
[  487.219354][T32576] EXT4-fs: Ignoring removed bh option
[  487.225704][T32576] EXT4-fs: inline encryption not supported
[  487.233539][T32594] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8614'.
[  487.255316][T32542] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  487.259649][T32576] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  487.269652][T32542] EXT4-fs (loop2): 1 orphan inode deleted
[  487.290961][T32576] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  487.299200][ T9228] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:60: lblock 1 mapped to illegal pblock 1 (length 1)
[  487.314894][ T9228] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:60: Failed to release dquot type 0
[  487.317247][T32542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  487.337292][T32576] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.8607: lblock 2 mapped to illegal pblock 2 (length 1)
[  487.362523][T32576] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.8607: lblock 0 mapped to illegal pblock 48 (length 1)
[  487.392405][T32576] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.8607: Failed to acquire dquot type 0
[  487.444351][T32542] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  487.463065][T32576] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  487.492828][T20556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.522299][T32576] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.8607: mark_inode_dirty error
[  487.546108][T32653] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  487.554854][T32576] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  487.556367][T32653] SELinux: failed to load policy
[  487.594930][T32576] EXT4-fs (loop4): 1 orphan inode deleted
[  487.609028][T32576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  487.625809][ T9228] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:60: lblock 1 mapped to illegal pblock 1 (length 1)
[  487.643121][ T9228] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:60: Failed to release dquot type 0
[  487.697940][T32576] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  487.758055][T32674] loop2: detected capacity change from 0 to 1024
[  487.770797][T32674] EXT4-fs: Ignoring removed bh option
[  487.778726][T32674] EXT4-fs: inline encryption not supported
[  487.787828][T21134] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.788049][T32674] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  487.813166][T32674] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  487.827007][T32685] vlan1: entered allmulticast mode
[  487.830136][T32674] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.8622: lblock 2 mapped to illegal pblock 2 (length 1)
[  487.849891][T32674] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.8622: lblock 0 mapped to illegal pblock 48 (length 1)
[  487.866822][T32674] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.8622: Failed to acquire dquot type 0
[  487.883921][T32674] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  487.931842][T32674] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.8622: mark_inode_dirty error
[  487.945760][T32674] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  487.957010][T32674] EXT4-fs (loop2): 1 orphan inode deleted
[  487.990190][ T3687] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1)
[  488.010754][ T3687] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 0
[  488.039386][T20556] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0
[  488.056195][T32708] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  488.056904][T20556] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  488.078498][T20556] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  488.134584][T32717] loop2: detected capacity change from 0 to 8192
[  488.171216][T32710] loop4: detected capacity change from 0 to 8192
[  488.280261][T32735] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8637'.
[  488.612398][T32741] loop6: detected capacity change from 0 to 1024
[  488.622812][T32741] EXT4-fs: Ignoring removed bh option
[  488.628931][T32741] EXT4-fs: inline encryption not supported
[  488.638990][T32741] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  488.689981][T32741] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  488.706302][T32741] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.8639: lblock 2 mapped to illegal pblock 2 (length 1)
[  488.725483][T32741] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 48: comm syz.6.8639: lblock 0 mapped to illegal pblock 48 (length 1)
[  488.750906][T32741] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.8639: Failed to acquire dquot type 0
[  488.763963][T32741] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  488.775420][T32741] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.8639: mark_inode_dirty error
[  488.788255][T32741] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  488.799919][T32741] EXT4-fs (loop6): 1 orphan inode deleted
[  488.822047][ T9228] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:60: lblock 1 mapped to illegal pblock 1 (length 1)
[  488.870784][ T9228] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:60: Failed to release dquot type 0
[  488.885448][T28574] EXT4-fs error (device loop6): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0
[  488.924116][T28574] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  488.952279][T28574] EXT4-fs error (device loop6): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  489.184226][  T344] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  489.216741][  T344] SELinux: failed to load policy
[  489.250693][  T350] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  489.437310][  T381] loop6: detected capacity change from 0 to 8192
[  489.511985][  T354] loop4: detected capacity change from 0 to 1024
[  489.520588][  T354] EXT4-fs: Ignoring removed bh option
[  489.553162][  T354] EXT4-fs: inline encryption not supported
[  489.564298][  T354] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  489.588618][  T354] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  489.653621][  T385] loop7: detected capacity change from 0 to 1024
[  489.661133][  T387] loop2: detected capacity change from 0 to 1024
[  489.663644][  T387] EXT4-fs: Ignoring removed bh option
[  489.672348][  T354] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.8655: lblock 2 mapped to illegal pblock 2 (length 1)
[  489.674190][  T387] EXT4-fs: inline encryption not supported
[  489.687121][  T385] EXT4-fs: Ignoring removed bh option
[  489.701940][  T385] EXT4-fs: inline encryption not supported
[  489.709648][  T354] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.8655: lblock 0 mapped to illegal pblock 48 (length 1)
[  489.722407][  T387] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  489.750140][  T354] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.8655: Failed to acquire dquot type 0
[  489.770080][  T387] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  489.779402][  T385] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  489.792367][  T354] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  489.796059][  T387] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.8661: lblock 2 mapped to illegal pblock 2 (length 1)
[  489.816503][  T354] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.8655: mark_inode_dirty error
[  489.819943][  T387] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.8661: lblock 0 mapped to illegal pblock 48 (length 1)
[  489.831521][  T385] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  489.844970][  T387] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.8661: Failed to acquire dquot type 0
[  489.865052][  T354] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  489.875741][  T354] EXT4-fs (loop4): 1 orphan inode deleted
[  489.888907][  T387] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  489.903945][ T3687] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1)
[  489.918818][  T387] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.8661: mark_inode_dirty error
[  489.933259][  T385] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 2: comm syz.7.8660: lblock 2 mapped to illegal pblock 2 (length 1)
[  489.948501][  T385] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 48: comm syz.7.8660: lblock 0 mapped to illegal pblock 48 (length 1)
[  489.963867][ T3687] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 0
[  489.977476][  T385] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.8660: Failed to acquire dquot type 0
[  489.991506][  T385] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  490.001859][  T385] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.8660: mark_inode_dirty error
[  490.015788][  T385] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  490.026966][  T385] EXT4-fs (loop7): 1 orphan inode deleted
[  490.061985][ T3687] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1)
[  490.063592][  T387] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  490.087588][  T387] EXT4-fs (loop2): 1 orphan inode deleted
[  490.100392][ T3687] __quota_error: 110 callbacks suppressed
[  490.100407][ T3687] Quota error (device loop7): remove_tree: Can't read quota data block 1
[  490.114721][ T3687] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 0
[  490.127730][ T3687] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1)
[  490.164452][ T3687] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  490.172959][ T3687] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 0
[  490.185053][T21134] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0
[  490.186554][  T385] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  490.199491][  T387] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  490.215634][T21134] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  490.226539][T21134] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  490.305398][  T387] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #2: block 16: comm syz.2.8661: lblock 0 mapped to illegal pblock 16 (length 1)
[  490.406528][  T435] vlan1: entered allmulticast mode
[  490.571588][  T471] loop4: detected capacity change from 0 to 1024
[  490.586277][  T471] EXT4-fs: Ignoring removed bh option
[  490.615932][  T471] EXT4-fs: inline encryption not supported
[  490.643298][  T471] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  490.701865][  T515] vlan2: entered allmulticast mode
[  490.711433][  T471] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  490.739749][  T471] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.8677: lblock 2 mapped to illegal pblock 2 (length 1)
[  490.792258][  T471] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  490.822535][  T471] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.8677: lblock 0 mapped to illegal pblock 48 (length 1)
[  490.858420][  T471] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  490.867237][  T471] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.8677: Failed to acquire dquot type 0
[  490.885436][  T471] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  490.896442][  T500] loop7: detected capacity change from 0 to 1024
[  490.905601][  T500] EXT4-fs: Ignoring removed bh option
[  490.911832][  T500] EXT4-fs: inline encryption not supported
[  490.932015][  T500] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  490.943306][  T471] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.8677: mark_inode_dirty error
[  490.978129][  T471] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  491.001083][  T500] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  491.009104][  T524] loop6: detected capacity change from 0 to 1024
[  491.021445][  T524] EXT4-fs: Ignoring removed bh option
[  491.027890][  T524] EXT4-fs: inline encryption not supported
[  491.030866][  T500] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 2: comm syz.7.8679: lblock 2 mapped to illegal pblock 2 (length 1)
[  491.035302][  T471] EXT4-fs (loop4): 1 orphan inode deleted
[  491.052544][  T524] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  491.066764][ T3687] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1)
[  491.104433][ T3687] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  491.112931][ T3687] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 0
[  491.115158][   T29] audit: type=1400 audit(999.149:29146): avc:  denied  { setcheckreqprot } for  pid=537 comm="syz.0.8684" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  491.124569][  T500] Quota error (device loop7): qtree_write_dquot: dquota write failed
[  491.161581][  T524] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  491.176326][  T471] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  491.200426][  T500] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 48: comm syz.7.8679: lblock 0 mapped to illegal pblock 48 (length 1)
[  491.229364][  T524] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.8681: lblock 2 mapped to illegal pblock 2 (length 1)
[  491.250570][  T524] Quota error (device loop6): qtree_write_dquot: dquota write failed
[  491.266185][  T524] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 48: comm syz.6.8681: lblock 0 mapped to illegal pblock 48 (length 1)
[  491.281257][  T500] Quota error (device loop7): v2_write_file_info: Can't write info structure
[  491.291831][  T500] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.8679: Failed to acquire dquot type 0
[  491.305353][  T500] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  491.316767][  T524] Quota error (device loop6): v2_write_file_info: Can't write info structure
[  491.327082][  T524] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.8681: Failed to acquire dquot type 0
[  491.331598][  T536] loop2: detected capacity change from 0 to 1024
[  491.340894][  T551] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  491.347486][  T500] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.8679: mark_inode_dirty error
[  491.354112][  T524] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  491.356871][  T524] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.8681: mark_inode_dirty error
[  491.364128][  T536] EXT4-fs: Ignoring removed bh option
[  491.393344][  T500] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  491.401685][  T524] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  491.430175][  T551] batman_adv: batadv0: Interface deactivated: macvlan0
[  491.437506][  T500] EXT4-fs (loop7): 1 orphan inode deleted
[  491.448054][  T524] EXT4-fs (loop6): 1 orphan inode deleted
[  491.455781][  T551] batman_adv: batadv0: Removing interface: macvlan0
[  491.462448][   T51] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  491.462607][   T51] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0
[  491.477118][  T536] EXT4-fs: inline encryption not supported
[  491.499165][   T51] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  491.515977][   T51] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0
[  491.525654][  T536] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  491.530254][  T524] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  491.551295][T27525] EXT4-fs error (device loop7): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0
[  491.558382][  T524] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #2: block 16: comm syz.6.8681: lblock 0 mapped to illegal pblock 16 (length 1)
[  491.566578][  T536] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  491.588797][T27525] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  491.598692][T27525] EXT4-fs error (device loop7): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  491.617949][  T536] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.8683: lblock 2 mapped to illegal pblock 2 (length 1)
[  491.633896][  T536] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.8683: lblock 0 mapped to illegal pblock 48 (length 1)
[  491.650374][  T536] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.8683: Failed to acquire dquot type 0
[  491.663967][  T536] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  491.674675][  T536] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.8683: mark_inode_dirty error
[  491.696282][  T536] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  491.707406][  T536] EXT4-fs (loop2): 1 orphan inode deleted
[  491.726162][  T589] loop7: detected capacity change from 0 to 8192
[  491.747196][ T9228] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:60: lblock 1 mapped to illegal pblock 1 (length 1)
[  491.781830][  T599] syzkaller1: entered promiscuous mode
[  491.787340][  T599] syzkaller1: entered allmulticast mode
[  491.794979][ T9228] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:60: Failed to release dquot type 0
[  491.834047][  T536] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  491.852145][  T606] vlan0: entered allmulticast mode
[  492.086634][  T655] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8701'.
[  492.129547][  T652] loop2: detected capacity change from 0 to 1024
[  492.139068][  T652] EXT4-fs: Ignoring removed bh option
[  492.145069][  T652] EXT4-fs: inline encryption not supported
[  492.152932][  T652] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  492.190603][  T652] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  492.214589][  T652] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.8700: lblock 2 mapped to illegal pblock 2 (length 1)
[  492.244298][  T652] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.8700: lblock 0 mapped to illegal pblock 48 (length 1)
[  492.263410][  T652] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.8700: Failed to acquire dquot type 0
[  492.276922][  T652] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  492.302886][  T652] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.8700: mark_inode_dirty error
[  492.380962][  T652] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  492.395368][  T693] 9pnet_fd: Insufficient options for proto=fd
[  492.414363][  T652] EXT4-fs (loop2): 1 orphan inode deleted
[  492.435387][ T4268] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 1)
[  492.484125][ T4268] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:27: Failed to release dquot type 0
[  492.521111][T20556] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0
[  492.537802][T20556] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  492.567382][T20556] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  492.580097][  T691] loop4: detected capacity change from 0 to 1024
[  492.598857][  T691] EXT4-fs: Ignoring removed bh option
[  492.622531][  T691] EXT4-fs: inline encryption not supported
[  492.650676][  T691] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  492.677026][  T691] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  492.702354][  T691] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.8704: lblock 2 mapped to illegal pblock 2 (length 1)
[  492.728523][  T691] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.8704: lblock 0 mapped to illegal pblock 48 (length 1)
[  492.747238][  T691] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.8704: Failed to acquire dquot type 0
[  492.758368][  T723] tipc: Started in network mode
[  492.763478][  T723] tipc: Node identity 4, cluster identity 4711
[  492.763490][  T723] tipc: Node number set to 4
[  492.776067][  T691] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  492.789613][  T691] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.8704: mark_inode_dirty error
[  492.803063][  T691] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  492.821349][  T691] EXT4-fs (loop4): 1 orphan inode deleted
[  492.840519][ T9220] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:53: lblock 1 mapped to illegal pblock 1 (length 1)
[  492.857997][ T9220] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:53: Failed to release dquot type 0
[  492.881627][  T738] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8713'.
[  492.908039][  T691] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  492.948693][  T750] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8715'.
[  492.973265][  T758] 9pnet_fd: Insufficient options for proto=fd
[  493.079533][  T764] loop4: detected capacity change from 0 to 8192
[  493.090424][  T771] loop2: detected capacity change from 0 to 1024
[  493.131119][  T771] EXT4-fs: Ignoring removed orlov option
[  493.186867][  T776] loop7: detected capacity change from 0 to 8192
[  493.234409][  T788] loop6: detected capacity change from 0 to 1024
[  493.260276][  T788] EXT4-fs: Ignoring removed bh option
[  493.267319][  T788] EXT4-fs: inline encryption not supported
[  493.285430][  T788] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  493.309054][  T788] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  493.367606][  T788] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.8722: lblock 2 mapped to illegal pblock 2 (length 1)
[  493.378470][  T788] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 48: comm syz.6.8722: lblock 0 mapped to illegal pblock 48 (length 1)
[  493.452071][  T788] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.8722: Failed to acquire dquot type 0
[  493.470695][  T805] loop2: detected capacity change from 0 to 1024
[  493.477629][  T805] EXT4-fs: Ignoring removed orlov option
[  493.483928][  T788] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  493.515944][  T788] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.8722: mark_inode_dirty error
[  493.527803][  T788] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  493.539640][  T788] EXT4-fs (loop6): 1 orphan inode deleted
[  493.553003][ T4268] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 1)
[  493.568244][ T4268] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:27: Failed to release dquot type 0
[  493.581158][  T788] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  493.627841][  T815] 9pnet_fd: Insufficient options for proto=fd
[  493.756836][  T819] loop6: detected capacity change from 0 to 1024
[  493.768007][  T819] EXT4-fs: Ignoring removed bh option
[  493.775245][  T819] EXT4-fs: inline encryption not supported
[  493.783337][  T819] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  493.810497][  T819] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  493.921079][  T819] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.8728: lblock 2 mapped to illegal pblock 2 (length 1)
[  493.945363][  T819] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 48: comm syz.6.8728: lblock 0 mapped to illegal pblock 48 (length 1)
[  493.977962][  T819] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.8728: Failed to acquire dquot type 0
[  493.999019][  T855] loop4: detected capacity change from 0 to 164
[  494.008171][  T819] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  494.051272][  T819] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.8728: mark_inode_dirty error
[  494.052478][  T819] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  494.052722][  T819] EXT4-fs (loop6): 1 orphan inode deleted
[  494.070201][ T4266] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1)
[  494.077832][ T4266] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:25: Failed to release dquot type 0
[  494.100064][  T819] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  494.103680][  T819] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #2: block 16: comm syz.6.8728: lblock 0 mapped to illegal pblock 16 (length 1)
[  494.361857][  T921] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  494.397424][  T921] SELinux: failed to load policy
[  494.539723][  T911] loop7: detected capacity change from 0 to 1024
[  494.553323][  T911] EXT4-fs: Ignoring removed bh option
[  494.559331][  T911] EXT4-fs: inline encryption not supported
[  494.584376][  T911] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  494.605532][  T911] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  494.629593][  T911] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 2: comm syz.7.8736: lblock 2 mapped to illegal pblock 2 (length 1)
[  494.657094][  T911] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 48: comm syz.7.8736: lblock 0 mapped to illegal pblock 48 (length 1)
[  494.677234][  T911] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.8736: Failed to acquire dquot type 0
[  494.691921][  T911] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  494.709484][  T911] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.8736: mark_inode_dirty error
[  494.725578][  T911] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  494.736571][  T911] EXT4-fs (loop7): 1 orphan inode deleted
[  494.752903][ T4268] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 1)
[  494.770387][ T4268] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:27: Failed to release dquot type 0
[  494.784163][  T911] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  494.826373][  T972] vlan2: entered allmulticast mode
[  494.974129][  T993] loop7: detected capacity change from 0 to 8192
[  495.395168][ T1079] loop2: detected capacity change from 0 to 512
[  495.395910][ T1079] EXT4-fs: Ignoring removed orlov option
[  495.396160][ T1079] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  495.399381][ T1079] EXT4-fs (loop2): 1 truncate cleaned up
[  495.504848][ T1085] loop6: detected capacity change from 0 to 8192
[  495.539770][ T1099] 9pnet_fd: Insufficient options for proto=fd
[  495.587570][ T1077] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8752'.
[  495.605926][   T29] kauditd_printk_skb: 110 callbacks suppressed
[  495.605951][   T29] audit: type=1326 audit(1003.358:29237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1076 comm="syz.0.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c459ee9a9 code=0x7ffc0000
[  495.653358][   T29] audit: type=1326 audit(1003.377:29238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1076 comm="syz.0.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c459ee9a9 code=0x7ffc0000
[  495.676434][   T29] audit: type=1326 audit(1003.386:29239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1076 comm="syz.0.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f1c459ee9a9 code=0x7ffc0000
[  495.699443][   T29] audit: type=1326 audit(1003.386:29240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1076 comm="syz.0.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c459ee9a9 code=0x7ffc0000
[  495.722613][   T29] audit: type=1326 audit(1003.386:29241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1076 comm="syz.0.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c459ee9a9 code=0x7ffc0000
[  495.745569][   T29] audit: type=1326 audit(1003.395:29242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1076 comm="syz.0.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1c459ee9a9 code=0x7ffc0000
[  495.768684][   T29] audit: type=1326 audit(1003.395:29243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1076 comm="syz.0.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1c459ee9e3 code=0x7ffc0000
[  495.791548][   T29] audit: type=1326 audit(1003.395:29244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1076 comm="syz.0.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1c459ed45f code=0x7ffc0000
[  495.814408][   T29] audit: type=1326 audit(1003.395:29245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1076 comm="syz.0.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1c459eea37 code=0x7ffc0000
[  495.837341][   T29] audit: type=1326 audit(1003.395:29246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1076 comm="syz.0.8752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c459ed310 code=0x7ffc0000
[  495.925883][ T1123] loop4: detected capacity change from 0 to 1024
[  495.932845][ T1123] EXT4-fs: Ignoring removed bh option
[  495.938301][ T1123] EXT4-fs: inline encryption not supported
[  495.966576][ T1123] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  495.992958][ T1123] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  496.004501][ T1123] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.8760: lblock 2 mapped to illegal pblock 2 (length 1)
[  496.018765][ T1123] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.8760: lblock 0 mapped to illegal pblock 48 (length 1)
[  496.034223][ T1123] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.8760: Failed to acquire dquot type 0
[  496.051708][ T1123] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  496.067534][ T1123] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.8760: mark_inode_dirty error
[  496.081144][ T1139] loop7: detected capacity change from 0 to 164
[  496.107756][ T1123] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  496.132176][ T1123] EXT4-fs (loop4): 1 orphan inode deleted
[  496.150874][ T4266] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1)
[  496.165262][ T4266] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:25: Failed to release dquot type 0
[  496.184513][ T1123] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  496.300654][ T1156] loop4: detected capacity change from 0 to 8192
[  496.397170][ T1173] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  496.397266][ T1173] SELinux: failed to load policy
[  496.490052][ T1185] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8769'.
[  496.684302][ T1199] loop7: detected capacity change from 0 to 1024
[  496.691226][ T1199] EXT4-fs: Ignoring removed bh option
[  496.696949][ T1199] EXT4-fs: inline encryption not supported
[  496.712206][ T1199] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  496.728499][ T1187] loop2: detected capacity change from 0 to 1024
[  496.740427][ T1187] EXT4-fs: Ignoring removed bh option
[  496.746827][ T1187] EXT4-fs: inline encryption not supported
[  496.753518][ T1199] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  496.763644][ T1199] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 2: comm syz.7.8775: lblock 2 mapped to illegal pblock 2 (length 1)
[  496.776542][ T1187] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  496.790359][ T1199] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 48: comm syz.7.8775: lblock 0 mapped to illegal pblock 48 (length 1)
[  496.812436][ T1187] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  496.830213][ T1199] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.8775: Failed to acquire dquot type 0
[  496.858679][ T1199] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  496.870234][ T1187] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.8770: lblock 2 mapped to illegal pblock 2 (length 1)
[  496.872462][ T1199] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.8775: mark_inode_dirty error
[  496.896616][ T1199] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  496.907797][ T1199] EXT4-fs (loop7): 1 orphan inode deleted
[  496.926227][ T4266] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1)
[  496.941148][ T1187] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.8770: lblock 0 mapped to illegal pblock 48 (length 1)
[  496.957234][ T1187] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.8770: Failed to acquire dquot type 0
[  496.975569][ T4266] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:25: Failed to release dquot type 0
[  496.987824][ T1187] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  497.001471][ T1187] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.8770: mark_inode_dirty error
[  497.014897][ T1187] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  497.016195][ T1199] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  497.033700][ T1187] EXT4-fs (loop2): 1 orphan inode deleted
[  497.052435][ T4268] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 1)
[  497.083629][ T1240] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  497.092385][ T4268] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:27: Failed to release dquot type 0
[  497.104601][ T1240] SELinux: failed to load policy
[  497.189082][T20556] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0
[  497.219691][T20556] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  497.252283][T20556] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  497.286478][ T1282] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8781'.
[  497.358523][ T1294] loop4: detected capacity change from 0 to 764
[  497.375538][ T1294] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  497.396611][ T1298] FAULT_INJECTION: forcing a failure.
[  497.396611][ T1298] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  497.409811][ T1298] CPU: 0 UID: 0 PID: 1298 Comm: syz.2.8789 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) 
[  497.409843][ T1298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  497.409923][ T1298] Call Trace:
[  497.409929][ T1298]  <TASK>
[  497.409938][ T1298]  __dump_stack+0x1d/0x30
[  497.409963][ T1298]  dump_stack_lvl+0xe8/0x140
[  497.409988][ T1298]  dump_stack+0x15/0x1b
[  497.410070][ T1298]  should_fail_ex+0x265/0x280
[  497.410108][ T1298]  should_fail+0xb/0x20
[  497.410141][ T1298]  should_fail_usercopy+0x1a/0x20
[  497.410177][ T1298]  _copy_from_user+0x1c/0xb0
[  497.410269][ T1298]  ___sys_sendmsg+0xc1/0x1d0
[  497.410325][ T1298]  __x64_sys_sendmsg+0xd4/0x160
[  497.410378][ T1298]  x64_sys_call+0x2999/0x2fb0
[  497.410462][ T1298]  do_syscall_64+0xd2/0x200
[  497.410484][ T1298]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  497.410515][ T1298]  ? clear_bhb_loop+0x40/0x90
[  497.410632][ T1298]  ? clear_bhb_loop+0x40/0x90
[  497.410660][ T1298]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.410684][ T1298] RIP: 0033:0x7fab4968e9a9
[  497.410699][ T1298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  497.410718][ T1298] RSP: 002b:00007fab47cf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  497.410757][ T1298] RAX: ffffffffffffffda RBX: 00007fab498b5fa0 RCX: 00007fab4968e9a9
[  497.410772][ T1298] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004
[  497.410787][ T1298] RBP: 00007fab47cf7090 R08: 0000000000000000 R09: 0000000000000000
[  497.410801][ T1298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  497.410817][ T1298] R13: 0000000000000000 R14: 00007fab498b5fa0 R15: 00007fffac4d7858
[  497.410840][ T1298]  </TASK>
[  497.514718][ T1291] loop7: detected capacity change from 0 to 1024
[  497.607573][ T1291] EXT4-fs: Ignoring removed bh option
[  497.618047][ T1291] EXT4-fs: inline encryption not supported
[  497.625867][ T1314] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  497.635479][ T1291] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  497.637987][ T1310] vlan2: entered allmulticast mode
[  497.650304][ T1291] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  497.664578][ T1313] loop4: detected capacity change from 0 to 1024
[  497.667112][ T1291] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 2: comm syz.7.8787: lblock 2 mapped to illegal pblock 2 (length 1)
[  497.685925][ T1313] EXT4-fs: Ignoring removed bh option
[  497.685969][ T1313] EXT4-fs: inline encryption not supported
[  497.686298][ T1313] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  497.695422][ T1313] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  497.699865][ T1291] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 48: comm syz.7.8787: lblock 0 mapped to illegal pblock 48 (length 1)
[  497.711173][ T1314] SELinux: failed to load policy
[  497.720375][ T1313] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.8792: lblock 2 mapped to illegal pblock 2 (length 1)
[  497.742353][ T1291] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.8787: Failed to acquire dquot type 0
[  497.766545][ T1291] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  497.779010][ T1313] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.8792: lblock 0 mapped to illegal pblock 48 (length 1)
[  497.785597][ T1291] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.8787: mark_inode_dirty error
[  497.813025][ T1313] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.8792: Failed to acquire dquot type 0
[  497.824512][ T1313] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  497.835520][ T1313] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.8792: mark_inode_dirty error
[  497.848311][ T1313] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  497.859106][ T1313] EXT4-fs (loop4): 1 orphan inode deleted
[  497.873126][ T1291] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  497.886492][ T4268] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 1)
[  497.906657][ T4268] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:27: Failed to release dquot type 0
[  497.919664][ T1291] EXT4-fs (loop7): 1 orphan inode deleted
[  497.940046][ T4268] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 1)
[  497.984770][ T4268] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:27: Failed to release dquot type 0
[  498.018152][T27525] EXT4-fs error (device loop7): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0
[  498.031379][ T1313] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  498.045683][ T1355] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8797'.
[  498.048203][T27525] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  498.076935][T27525] EXT4-fs error (device loop7): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  498.256749][ T1349] loop2: detected capacity change from 0 to 1024
[  498.285646][ T1380] loop6: detected capacity change from 0 to 8192
[  498.298724][ T1349] EXT4-fs: Ignoring removed bh option
[  498.309336][ T1349] EXT4-fs: inline encryption not supported
[  498.323673][ T1349] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  498.351393][ T1349] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  498.368622][ T1369] loop7: detected capacity change from 0 to 1024
[  498.378632][ T1369] EXT4-fs: Ignoring removed bh option
[  498.384786][ T1369] EXT4-fs: inline encryption not supported
[  498.394360][ T1369] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  498.415212][ T1369] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  498.420395][ T1349] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.8796: lblock 2 mapped to illegal pblock 2 (length 1)
[  498.430518][ T1369] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 2: comm syz.7.8803: lblock 2 mapped to illegal pblock 2 (length 1)
[  498.456955][ T1349] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.8796: lblock 0 mapped to illegal pblock 48 (length 1)
[  498.459813][ T1349] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.8796: Failed to acquire dquot type 0
[  498.487965][ T1369] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 48: comm syz.7.8803: lblock 0 mapped to illegal pblock 48 (length 1)
[  498.508977][ T1369] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.8803: Failed to acquire dquot type 0
[  498.522519][ T1369] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  498.533982][ T1349] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  498.536389][ T1349] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.8796: mark_inode_dirty error
[  498.546435][ T1349] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  498.547522][ T1349] EXT4-fs (loop2): 1 orphan inode deleted
[  498.583040][ T1369] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.8803: mark_inode_dirty error
[  498.614492][ T3687] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1)
[  498.647888][ T3687] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 0
[  498.648001][ T1369] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  498.675713][ T1369] EXT4-fs (loop7): 1 orphan inode deleted
[  498.701420][ T3687] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1)
[  498.720638][ T3687] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 0
[  498.808635][ T1369] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  498.822675][ T1349] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  499.011922][ T1443] loop7: detected capacity change from 0 to 512
[  499.018477][ T1443] EXT4-fs: Ignoring removed orlov option
[  499.024868][ T1443] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  499.065493][ T1443] EXT4-fs (loop7): 1 truncate cleaned up
[  499.249599][ T1472] delete_channel: no stack
[  499.254211][ T1472] delete_channel: no stack
[  499.258946][ T1472] delete_channel: no stack
[  499.264941][ T1472] delete_channel: no stack
[  499.270231][ T1472] delete_channel: no stack
[  499.274719][ T1472] delete_channel: no stack
[  499.279216][ T1472] delete_channel: no stack
[  499.283735][ T1472] delete_channel: no stack
[  499.300872][ T1472] delete_channel: no stack
[  499.305512][ T1472] delete_channel: no stack
[  499.313708][ T1472] delete_channel: no stack
[  499.318245][ T1472] delete_channel: no stack
[  499.322834][ T1472] delete_channel: no stack
[  499.327293][ T1472] delete_channel: no stack
[  499.331986][ T1472] delete_channel: no stack
[  499.336606][ T1472] delete_channel: no stack
[  499.343416][ T1472] delete_channel: no stack
[  499.407461][ T1507] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  499.416179][ T1507] SELinux: failed to load policy
[  499.431352][ T1505] loop7: detected capacity change from 0 to 8192
[  499.583065][ T1511] loop6: detected capacity change from 0 to 1024
[  499.593969][ T1511] EXT4-fs: Ignoring removed bh option
[  499.610384][ T1511] EXT4-fs: inline encryption not supported
[  499.621841][ T1511] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  499.660610][ T1511] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  499.699828][ T1511] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.8837: lblock 2 mapped to illegal pblock 2 (length 1)
[  499.763760][ T1554] FAULT_INJECTION: forcing a failure.
[  499.763760][ T1554] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  499.777069][ T1554] CPU: 0 UID: 0 PID: 1554 Comm: syz.4.8842 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) 
[  499.777101][ T1554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  499.777115][ T1554] Call Trace:
[  499.777121][ T1554]  <TASK>
[  499.777130][ T1554]  __dump_stack+0x1d/0x30
[  499.777178][ T1554]  dump_stack_lvl+0xe8/0x140
[  499.777202][ T1554]  dump_stack+0x15/0x1b
[  499.777222][ T1554]  should_fail_ex+0x265/0x280
[  499.777305][ T1554]  should_fail_alloc_page+0xf2/0x100
[  499.777335][ T1554]  __alloc_frozen_pages_noprof+0xff/0x360
[  499.777378][ T1554]  alloc_pages_mpol+0xb3/0x250
[  499.777466][ T1554]  folio_alloc_mpol_noprof+0x39/0x80
[  499.777503][ T1554]  shmem_get_folio_gfp+0x3cf/0xd60
[  499.777545][ T1554]  shmem_fallocate+0x57c/0x840
[  499.777574][ T1554]  vfs_fallocate+0x410/0x450
[  499.777639][ T1554]  __x64_sys_fallocate+0x7a/0xd0
[  499.777733][ T1554]  x64_sys_call+0x2b88/0x2fb0
[  499.777756][ T1554]  do_syscall_64+0xd2/0x200
[  499.777774][ T1554]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  499.777806][ T1554]  ? clear_bhb_loop+0x40/0x90
[  499.777832][ T1554]  ? clear_bhb_loop+0x40/0x90
[  499.777889][ T1554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.777912][ T1554] RIP: 0033:0x7f9f6ddee9a9
[  499.777930][ T1554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  499.777952][ T1554] RSP: 002b:00007f9f6c457038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[  499.777971][ T1554] RAX: ffffffffffffffda RBX: 00007f9f6e015fa0 RCX: 00007f9f6ddee9a9
[  499.777987][ T1554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  499.778002][ T1554] RBP: 00007f9f6c457090 R08: 0000000000000000 R09: 0000000000000000
[  499.778017][ T1554] R10: 0000000002000402 R11: 0000000000000246 R12: 0000000000000001
[  499.778032][ T1554] R13: 0000000000000000 R14: 00007f9f6e015fa0 R15: 00007ffd1a8cee68
[  499.778057][ T1554]  </TASK>
[  499.781332][ T1511] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 48: comm syz.6.8837: lblock 0 mapped to illegal pblock 48 (length 1)
[  500.022961][ T1511] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.8837: Failed to acquire dquot type 0
[  500.041009][ T1511] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  500.051305][ T1511] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.8837: mark_inode_dirty error
[  500.063980][ T1511] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  500.085383][ T1511] EXT4-fs (loop6): 1 orphan inode deleted
[  500.099366][ T3687] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1)
[  500.116134][ T1511] EXT4-fs mount: 50 callbacks suppressed
[  500.116167][ T1511] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  500.118536][ T3687] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 0
[  500.170918][ T1511] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  500.202152][T28574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  500.349120][ T1621] random: crng reseeded on system resumption
[  500.379723][ T1623] vlan2: entered allmulticast mode
[  500.484170][ T1621] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8853'.
[  500.592014][ T1665] loop7: detected capacity change from 0 to 164
[  500.787040][ T1695] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8863'.
[  500.901250][ T1698] 8021q: adding VLAN 0 to HW filter on device bond1
[  500.962433][   T29] kauditd_printk_skb: 442 callbacks suppressed
[  500.962449][   T29] audit: type=1326 audit(1008.362:29665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1575 comm="syz.2.8846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fab49685967 code=0x7ffc0000
[  500.991524][   T29] audit: type=1326 audit(1008.362:29666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1575 comm="syz.2.8846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fab4962ab89 code=0x7ffc0000
[  501.014473][   T29] audit: type=1326 audit(1008.362:29667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1575 comm="syz.2.8846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fab4968e9a9 code=0x7ffc0000
[  501.088380][   T29] audit: type=1326 audit(1008.447:29668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1575 comm="syz.2.8846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fab49685967 code=0x7ffc0000
[  501.111336][   T29] audit: type=1326 audit(1008.447:29669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1575 comm="syz.2.8846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fab4962ab89 code=0x7ffc0000
[  501.111367][   T29] audit: type=1326 audit(1008.447:29670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1575 comm="syz.2.8846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fab4968e9a9 code=0x7ffc0000
[  501.157287][   T29] audit: type=1326 audit(1008.447:29671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1575 comm="syz.2.8846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fab49685967 code=0x7ffc0000
[  501.180157][   T29] audit: type=1326 audit(1008.447:29672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1575 comm="syz.2.8846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fab4962ab89 code=0x7ffc0000
[  501.203134][   T29] audit: type=1326 audit(1008.447:29673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1575 comm="syz.2.8846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fab4968e9a9 code=0x7ffc0000
[  501.710009][ T1856] netlink: 'syz.6.8881': attribute type 1 has an invalid length.
[  501.725793][ T1856] loop6: detected capacity change from 0 to 512
[  501.754119][ T1856] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  501.809075][T28574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.853205][ T1888] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  501.861743][ T1888] SELinux: failed to load policy
[  501.930224][ T1897] vlan2: entered allmulticast mode
[  502.110531][ T1928] loop6: detected capacity change from 0 to 1024
[  502.139195][ T1928] EXT4-fs: Ignoring removed bh option
[  502.154102][ T1928] EXT4-fs: inline encryption not supported
[  502.167158][ T1928] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  502.180177][ T1944] loop7: detected capacity change from 0 to 2048
[  502.194610][ T1928] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  502.203947][ T1928] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.8890: lblock 2 mapped to illegal pblock 2 (length 1)
[  502.219526][ T1928] Quota error (device loop6): qtree_write_dquot: dquota write failed
[  502.228421][ T1928] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 48: comm syz.6.8890: lblock 0 mapped to illegal pblock 48 (length 1)
[  502.246288][ T1944] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  502.264476][ T1928] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.8890: Failed to acquire dquot type 0
[  502.276032][ T1928] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  502.286881][ T1928] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.8890: mark_inode_dirty error
[  502.318080][ T1928] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  502.343731][ T1928] EXT4-fs (loop6): 1 orphan inode deleted
[  502.355310][ T9228] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:60: lblock 1 mapped to illegal pblock 1 (length 1)
[  502.379426][ T1928] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  502.391968][ T9228] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:60: Failed to release dquot type 0
[  502.411976][ T1928] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  502.431015][T28574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  502.504489][ T1985] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8895'.
[  502.824918][ T2012] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  502.853284][ T2012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8900'.
[  502.980275][ T2012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8900'.
[  503.107506][T27525] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.427323][ T2062] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  503.449128][ T2062] SELinux: failed to load policy
[  503.531617][ T2066] netlink: 'syz.2.8906': attribute type 27 has an invalid length.
[  503.701406][ T2068] loop7: detected capacity change from 0 to 1024
[  503.727283][ T2068] EXT4-fs: Ignoring removed bh option
[  503.746400][ T2068] EXT4-fs: inline encryption not supported
[  503.767534][ T2066] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.767560][ T2068] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  503.776437][ T2066] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.776473][ T2066] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.776539][ T2066] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.819636][ T2066] geneve1: left promiscuous mode
[  503.866428][ T2066] hsr1: left promiscuous mode
[  503.875247][ T2068] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  503.891481][ T2069] 8021q: adding VLAN 0 to HW filter on device bond0
[  503.899757][ T2069] 8021q: adding VLAN 0 to HW filter on device team0
[  503.910496][ T2069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  503.954689][ T2068] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 2: comm syz.7.8907: lblock 2 mapped to illegal pblock 2 (length 1)
[  503.997580][ T2068] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 48: comm syz.7.8907: lblock 0 mapped to illegal pblock 48 (length 1)
[  504.023440][ T2068] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.8907: Failed to acquire dquot type 0
[  504.036986][ T2068] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  504.047330][ T2068] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.8907: mark_inode_dirty error
[  504.060307][ T2068] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  504.072671][ T2068] EXT4-fs (loop7): 1 orphan inode deleted
[  504.095920][ T4266] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1)
[  504.099994][ T2068] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  504.124605][ T2094] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  504.133365][ T4266] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:25: Failed to release dquot type 0
[  504.153582][ T2094] SELinux: failed to load policy
[  504.153954][ T2096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2096 comm=syz.2.8918
[  504.172825][ T2068] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  504.184964][ T2068] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #2: block 16: comm syz.7.8907: lblock 0 mapped to illegal pblock 16 (length 1)
[  504.314618][T27525] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  504.363116][ T2120] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8922'.
[  504.595189][ T2128] loop6: detected capacity change from 0 to 512
[  504.608667][ T2128] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  504.662413][ T2139] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  504.678930][ T2139] SELinux: failed to load policy
[  505.116486][ T2160] netlink: 'syz.4.8938': attribute type 1 has an invalid length.
[  505.288959][ T2173] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  505.308770][ T2173] SELinux: failed to load policy
[  505.496507][ T2189] FAULT_INJECTION: forcing a failure.
[  505.496507][ T2189] name failslab, interval 1, probability 0, space 0, times 0
[  505.509228][ T2189] CPU: 1 UID: 0 PID: 2189 Comm: syz.4.8946 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) 
[  505.509260][ T2189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  505.509274][ T2189] Call Trace:
[  505.509281][ T2189]  <TASK>
[  505.509289][ T2189]  __dump_stack+0x1d/0x30
[  505.509313][ T2189]  dump_stack_lvl+0xe8/0x140
[  505.509402][ T2189]  dump_stack+0x15/0x1b
[  505.509421][ T2189]  should_fail_ex+0x265/0x280
[  505.509456][ T2189]  should_failslab+0x8c/0xb0
[  505.509481][ T2189]  kmem_cache_alloc_noprof+0x50/0x310
[  505.509542][ T2189]  ? getname_flags+0x80/0x3b0
[  505.509569][ T2189]  getname_flags+0x80/0x3b0
[  505.509594][ T2189]  __x64_sys_rename+0x33/0x70
[  505.509614][ T2189]  x64_sys_call+0x2aee/0x2fb0
[  505.509716][ T2189]  do_syscall_64+0xd2/0x200
[  505.509738][ T2189]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  505.509771][ T2189]  ? clear_bhb_loop+0x40/0x90
[  505.509795][ T2189]  ? clear_bhb_loop+0x40/0x90
[  505.509865][ T2189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.509890][ T2189] RIP: 0033:0x7f9f6ddee9a9
[  505.509907][ T2189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  505.509955][ T2189] RSP: 002b:00007f9f6c457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  505.509977][ T2189] RAX: ffffffffffffffda RBX: 00007f9f6e015fa0 RCX: 00007f9f6ddee9a9
[  505.509990][ T2189] RDX: 0000000000000000 RSI: 0000200000001300 RDI: 0000200000000040
[  505.510003][ T2189] RBP: 00007f9f6c457090 R08: 0000000000000000 R09: 0000000000000000
[  505.510016][ T2189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  505.510087][ T2189] R13: 0000000000000000 R14: 00007f9f6e015fa0 R15: 00007ffd1a8cee68
[  505.510145][ T2189]  </TASK>
[  505.848876][ T2234] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  505.870268][ T2234] SELinux: failed to load policy
[  505.985786][ T2218] loop6: detected capacity change from 0 to 1024
[  506.006579][ T2218] EXT4-fs: Ignoring removed bh option
[  506.028971][ T2218] EXT4-fs: inline encryption not supported
[  506.040596][ T2218] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  506.072168][ T2261] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8960'.
[  506.085081][ T2218] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  506.170406][ T2218] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.8948: lblock 2 mapped to illegal pblock 2 (length 1)
[  506.214054][ T2218] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 48: comm syz.6.8948: lblock 0 mapped to illegal pblock 48 (length 1)
[  506.269032][ T2218] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.8948: Failed to acquire dquot type 0
[  506.317381][ T2218] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  506.363386][ T2218] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.8948: mark_inode_dirty error
[  506.392131][ T2218] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  506.417742][ T2218] EXT4-fs (loop6): 1 orphan inode deleted
[  506.427418][ T2291] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  506.438857][ T2291] SELinux: failed to load policy
[  506.438859][ T9225] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:58: lblock 1 mapped to illegal pblock 1 (length 1)
[  506.449348][ T2218] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  506.479710][ T9225] __quota_error: 32 callbacks suppressed
[  506.479725][ T9225] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  506.493957][ T9225] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:58: Failed to release dquot type 0
[  506.553714][ T2218] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  506.626856][T28574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  506.820277][   T29] audit: type=1326 audit(1013.844:29699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2338 comm="syz.6.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09089e9a9 code=0x7ffc0000
[  506.822771][ T2339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8975'.
[  506.863076][   T29] audit: type=1326 audit(1013.844:29700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2338 comm="syz.6.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fd09089e9a9 code=0x7ffc0000
[  506.886101][   T29] audit: type=1326 audit(1013.844:29701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2338 comm="syz.6.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09089e9a9 code=0x7ffc0000
[  506.909335][   T29] audit: type=1326 audit(1013.844:29702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2338 comm="syz.6.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd09089e9a9 code=0x7ffc0000
[  506.932267][   T29] audit: type=1326 audit(1013.844:29703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2338 comm="syz.6.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09089e9a9 code=0x7ffc0000
[  506.955320][   T29] audit: type=1326 audit(1013.844:29704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2338 comm="syz.6.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fd09089e9a9 code=0x7ffc0000
[  506.978336][   T29] audit: type=1326 audit(1013.844:29705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2338 comm="syz.6.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09089e9a9 code=0x7ffc0000
[  507.001357][   T29] audit: type=1326 audit(1013.844:29706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2338 comm="syz.6.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fd09089e9a9 code=0x7ffc0000
[  507.024377][   T29] audit: type=1326 audit(1013.844:29707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2338 comm="syz.6.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09089e9a9 code=0x7ffc0000
[  507.157341][ T2372] loop7: detected capacity change from 0 to 8192
[  507.476513][ T2397] netlink: 'syz.2.8983': attribute type 1 has an invalid length.
[  507.555556][ T2407] loop7: detected capacity change from 0 to 1024
[  507.564566][ T2407] EXT4-fs: Ignoring removed bh option
[  507.570596][ T2407] EXT4-fs: inline encryption not supported
[  507.578708][ T2407] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  507.593213][ T2407] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  507.608446][ T2407] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 2: comm syz.7.8984: lblock 2 mapped to illegal pblock 2 (length 1)
[  507.625192][ T2407] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 48: comm syz.7.8984: lblock 0 mapped to illegal pblock 48 (length 1)
[  507.643895][ T2407] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.8984: Failed to acquire dquot type 0
[  507.656845][ T2407] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  507.668382][ T2407] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.8984: mark_inode_dirty error
[  507.680723][ T2407] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  507.692269][ T2442] FAULT_INJECTION: forcing a failure.
[  507.692269][ T2442] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  507.692300][ T2442] CPU: 1 UID: 0 PID: 2442 Comm: syz.2.8988 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) 
[  507.692397][ T2442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  507.692443][ T2442] Call Trace:
[  507.692450][ T2442]  <TASK>
[  507.692458][ T2442]  __dump_stack+0x1d/0x30
[  507.692483][ T2442]  dump_stack_lvl+0xe8/0x140
[  507.692503][ T2442]  dump_stack+0x15/0x1b
[  507.692523][ T2442]  should_fail_ex+0x265/0x280
[  507.692636][ T2442]  should_fail+0xb/0x20
[  507.692742][ T2442]  should_fail_usercopy+0x1a/0x20
[  507.692779][ T2442]  _copy_from_user+0x1c/0xb0
[  507.692801][ T2442]  get_timespec64+0x4c/0x100
[  507.692850][ T2442]  __x64_sys_clock_settime+0x116/0x190
[  507.692889][ T2442]  x64_sys_call+0x2870/0x2fb0
[  507.692914][ T2442]  do_syscall_64+0xd2/0x200
[  507.692935][ T2442]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  507.693004][ T2442]  ? clear_bhb_loop+0x40/0x90
[  507.693065][ T2442]  ? clear_bhb_loop+0x40/0x90
[  507.693090][ T2442]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.693229][ T2442] RIP: 0033:0x7fab4968e9a9
[  507.693246][ T2442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  507.693347][ T2442] RSP: 002b:00007fab47cf7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3
[  507.693368][ T2442] RAX: ffffffffffffffda RBX: 00007fab498b5fa0 RCX: 00007fab4968e9a9
[  507.693383][ T2442] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  507.693458][ T2442] RBP: 00007fab47cf7090 R08: 0000000000000000 R09: 0000000000000000
[  507.693514][ T2442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  507.693528][ T2442] R13: 0000000000000000 R14: 00007fab498b5fa0 R15: 00007fffac4d7858
[  507.693550][ T2442]  </TASK>
[  507.890971][ T2407] EXT4-fs (loop7): 1 orphan inode deleted
[  507.899308][ T2407] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  507.916208][ T9225] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:58: lblock 1 mapped to illegal pblock 1 (length 1)
[  507.941990][ T9225] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:58: Failed to release dquot type 0
[  507.957280][ T2407] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  507.970448][ T2407] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #2: block 16: comm syz.7.8984: lblock 0 mapped to illegal pblock 16 (length 1)
[  508.008334][T27525] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.009141][ T2454] vlan1: entered allmulticast mode
[  508.298079][ T2524] netlink: 'syz.4.9008': attribute type 1 has an invalid length.
[  508.325862][ T2533] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9010'.
[  508.335764][ T2533] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9010'.
[  508.377785][ T2533] syz_tun: entered promiscuous mode
[  508.396618][ T2533] syz_tun: left promiscuous mode
[  508.617796][ T2595] netlink: 'syz.7.9025': attribute type 1 has an invalid length.
[  508.659541][ T2612] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  508.681979][ T2612] SELinux: failed to load policy
[  509.000349][ T2674] netlink: 'syz.7.9039': attribute type 1 has an invalid length.
[  509.052870][ T2689] FAULT_INJECTION: forcing a failure.
[  509.052870][ T2689] name failslab, interval 1, probability 0, space 0, times 0
[  509.065609][ T2689] CPU: 1 UID: 0 PID: 2689 Comm: syz.0.9040 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) 
[  509.065715][ T2689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  509.065730][ T2689] Call Trace:
[  509.065736][ T2689]  <TASK>
[  509.065743][ T2689]  __dump_stack+0x1d/0x30
[  509.065772][ T2689]  dump_stack_lvl+0xe8/0x140
[  509.065796][ T2689]  dump_stack+0x15/0x1b
[  509.065816][ T2689]  should_fail_ex+0x265/0x280
[  509.065850][ T2689]  should_failslab+0x8c/0xb0
[  509.065876][ T2689]  __kmalloc_noprof+0xa5/0x3e0
[  509.065975][ T2689]  ? rds_message_alloc+0x45/0x120
[  509.066037][ T2689]  rds_message_alloc+0x45/0x120
[  509.066060][ T2689]  rds_sendmsg+0x860/0x14a0
[  509.066125][ T2689]  ? __pfx_rds_sendmsg+0x10/0x10
[  509.066155][ T2689]  __sock_sendmsg+0x142/0x180
[  509.066189][ T2689]  __sys_sendto+0x268/0x330
[  509.066315][ T2689]  __x64_sys_sendto+0x76/0x90
[  509.066362][ T2689]  x64_sys_call+0x2eb6/0x2fb0
[  509.066387][ T2689]  do_syscall_64+0xd2/0x200
[  509.066405][ T2689]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  509.066436][ T2689]  ? clear_bhb_loop+0x40/0x90
[  509.066487][ T2689]  ? clear_bhb_loop+0x40/0x90
[  509.066575][ T2689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.066599][ T2689] RIP: 0033:0x7f1c459ee9a9
[  509.066615][ T2689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  509.066637][ T2689] RSP: 002b:00007f1c44057038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  509.066658][ T2689] RAX: ffffffffffffffda RBX: 00007f1c45c15fa0 RCX: 00007f1c459ee9a9
[  509.066726][ T2689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[  509.066739][ T2689] RBP: 00007f1c44057090 R08: 0000000000000000 R09: 0000000000000000
[  509.066754][ T2689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  509.066769][ T2689] R13: 0000000000000000 R14: 00007f1c45c15fa0 R15: 00007ffecec13a38
[  509.066792][ T2689]  </TASK>
[  509.483992][ T2746] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  509.509500][ T2746] SELinux: failed to load policy
[  509.618261][ T2771] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9049'.
[  510.069134][ T2831] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  510.095350][ T2831] SELinux: failed to load policy
[  510.138852][ T2833] netlink: 'syz.6.9064': attribute type 1 has an invalid length.
[  510.594122][ T2872] vlan2: entered allmulticast mode
[  510.621648][ T2876] netlink: 'syz.4.9077': attribute type 1 has an invalid length.
[  511.251739][ T2947] vlan2: entered allmulticast mode
[  511.261398][ T2945] binfmt_misc: register: failed to install interpreter file ./file2
[  511.820372][ T3018] FAULT_INJECTION: forcing a failure.
[  511.820372][ T3018] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  511.833456][ T3018] CPU: 0 UID: 0 PID: 3018 Comm: syz.4.9103 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) 
[  511.833544][ T3018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  511.833559][ T3018] Call Trace:
[  511.833566][ T3018]  <TASK>
[  511.833575][ T3018]  __dump_stack+0x1d/0x30
[  511.833600][ T3018]  dump_stack_lvl+0xe8/0x140
[  511.833624][ T3018]  dump_stack+0x15/0x1b
[  511.833643][ T3018]  should_fail_ex+0x265/0x280
[  511.833696][ T3018]  should_fail+0xb/0x20
[  511.833726][ T3018]  should_fail_usercopy+0x1a/0x20
[  511.833760][ T3018]  _copy_from_user+0x1c/0xb0
[  511.833782][ T3018]  do_sock_getsockopt+0xf1/0x240
[  511.833902][ T3018]  __x64_sys_getsockopt+0x11e/0x1a0
[  511.833971][ T3018]  x64_sys_call+0x12aa/0x2fb0
[  511.834073][ T3018]  do_syscall_64+0xd2/0x200
[  511.834220][ T3018]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  511.834254][ T3018]  ? clear_bhb_loop+0x40/0x90
[  511.834281][ T3018]  ? clear_bhb_loop+0x40/0x90
[  511.834308][ T3018]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.834370][ T3018] RIP: 0033:0x7f9f6ddee9a9
[  511.834385][ T3018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  511.834451][ T3018] RSP: 002b:00007f9f6c457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  511.834474][ T3018] RAX: ffffffffffffffda RBX: 00007f9f6e015fa0 RCX: 00007f9f6ddee9a9
[  511.834487][ T3018] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003
[  511.834500][ T3018] RBP: 00007f9f6c457090 R08: 0000200000000080 R09: 0000000000000000
[  511.834512][ T3018] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  511.834525][ T3018] R13: 0000000000000000 R14: 00007f9f6e015fa0 R15: 00007ffd1a8cee68
[  511.834545][ T3018]  </TASK>
[  511.834943][   T29] kauditd_printk_skb: 78 callbacks suppressed
[  511.834983][   T29] audit: type=1400 audit(1018.530:29783): avc:  denied  { name_connect } for  pid=3016 comm="syz.4.9103" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  512.348038][ T3034] vlan2: entered allmulticast mode
[  512.707740][ T3091] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  512.716976][ T3091] SELinux: failed to load policy
[  513.428474][ T3233] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  513.446406][ T3233] SELinux: failed to load policy
[  514.016706][   T29] audit: type=1326 audit(1020.579:29784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3356 comm="syz.6.9144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09089e9a9 code=0x7ffc0000
[  514.039758][   T29] audit: type=1326 audit(1020.579:29785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3356 comm="syz.6.9144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd09089e9a9 code=0x7ffc0000
[  514.062840][   T29] audit: type=1326 audit(1020.579:29786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3356 comm="syz.6.9144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09089e9a9 code=0x7ffc0000
[  514.085934][   T29] audit: type=1326 audit(1020.579:29787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3356 comm="syz.6.9144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd09089e9a9 code=0x7ffc0000
[  514.109028][   T29] audit: type=1326 audit(1020.579:29788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3356 comm="syz.6.9144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09089e9a9 code=0x7ffc0000
[  514.132002][   T29] audit: type=1326 audit(1020.579:29789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3356 comm="syz.6.9144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd09089e9a9 code=0x7ffc0000
[  514.155038][   T29] audit: type=1326 audit(1020.579:29790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3356 comm="syz.6.9144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09089e9a9 code=0x7ffc0000
[  514.178026][   T29] audit: type=1326 audit(1020.579:29791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3356 comm="syz.6.9144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fd09089e9a9 code=0x7ffc0000
[  514.201001][   T29] audit: type=1326 audit(1020.579:29792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3356 comm="syz.6.9144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09089e9a9 code=0x7ffc0000
[  514.274018][ T3398] vlan1: entered allmulticast mode
[  514.376261][ T3423] vlan2: entered allmulticast mode
[  515.186673][ T3533] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  515.212856][ T3533] SELinux: failed to load policy
[  515.239463][ T3545] tmpfs: Bad value for 'mpol'
[  515.421035][ T3581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9165'.
[  516.001923][ T3668] netlink: 72 bytes leftover after parsing attributes in process `syz.7.9181'.
[  516.610853][ T3732] vlan0: entered allmulticast mode
[  517.184103][ T3859] vlan0: entered allmulticast mode
[  517.209637][ T3867] netlink: 'syz.7.9207': attribute type 29 has an invalid length.
[  517.226042][ T3867] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  517.261381][   T29] kauditd_printk_skb: 62 callbacks suppressed
[  517.261395][   T29] audit: type=1400 audit(1023.619:29855): avc:  denied  { read } for  pid=3877 comm="syz.4.9210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  517.316892][ T3888] audit: audit_lost=19 audit_rate_limit=0 audit_backlog_limit=64
[  517.324718][ T3888] audit: out of memory in audit_log_start
[  517.327333][   T29] audit: type=1326 audit(1023.675:29856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.7.9213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74dd5e9a9 code=0x7ffc0000
[  517.355296][   T29] audit: type=1326 audit(1023.703:29857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.7.9213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb74dd5e9a9 code=0x7ffc0000
[  517.378359][   T29] audit: type=1326 audit(1023.703:29858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.7.9213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74dd5e9a9 code=0x7ffc0000
[  517.401386][   T29] audit: type=1326 audit(1023.703:29859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.7.9213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74dd5e9a9 code=0x7ffc0000
[  517.424417][   T29] audit: type=1326 audit(1023.703:29860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.7.9213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb74dd5e9a9 code=0x7ffc0000
[  517.447492][   T29] audit: type=1326 audit(1023.703:29861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.7.9213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74dd5e9a9 code=0x7ffc0000
[  517.470442][   T29] audit: type=1326 audit(1023.703:29862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.7.9213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb74dd5e9a9 code=0x7ffc0000
[  517.593906][ T3904] smc: net device bond0 erased user defined pnetid SYZ2
[  517.618542][ T3904] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9217'.
[  517.627634][ T3904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9217'.
[  517.636657][ T3904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9217'.
[  518.254371][ T3951] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9226'.
[  519.150188][ T4057] 9pnet: Unknown protocol version 9p2000
[  519.216950][ T4060] 9pnet_fd: Insufficient options for proto=fd
[  519.830807][ T4069] macvlan1: entered promiscuous mode
[  519.837178][ T4069] ipvlan0: entered promiscuous mode
[  519.842889][ T4069] ipvlan0: left promiscuous mode
[  519.848045][ T4069] macvlan1: left promiscuous mode
[  521.039383][ T4294] smc: net device bond0 applied user defined pnetid SYZ0
[  521.048241][ T4294] smc: net device bond0 erased user defined pnetid SYZ0
[  521.077656][ T4294] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9267'.
[  521.086875][ T4294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9267'.
[  521.095854][ T4294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9267'.
[  521.146481][ T5028] Process accounting resumed
[  521.412632][ T4340] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9280'.
[  521.421567][ T4340] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9280'.
[  521.430488][ T4340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9280'.
[  521.439656][ T4340] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9280'.
[  521.679224][ T4374] netlink: 5 bytes leftover after parsing attributes in process `syz.7.9293'.
[  521.688305][ T4374] netlink: 5 bytes leftover after parsing attributes in process `syz.7.9293'.
[  521.697208][ T4374] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9293'.
[  521.828824][ T4384] SELinux: failed to load policy
[  522.149200][ T4420] smc: net device bond0 applied user defined pnetid SYZ0
[  522.156601][ T4420] smc: net device bond0 erased user defined pnetid SYZ0
[  522.201829][ T4426] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  522.210726][ T4426] SELinux: failed to load policy
[  522.978145][ T4558] smc: net device bond0 applied user defined pnetid SYZ0
[  522.986646][ T4558] smc: net device bond0 erased user defined pnetid SYZ0
[  523.164151][ T4511] chnl_net:caif_netlink_parms(): no params data found
[  523.239405][ T4511] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.246561][ T4511] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.261109][ T4511] bridge_slave_0: entered allmulticast mode
[  523.268701][ T4511] bridge_slave_0: entered promiscuous mode
[  523.275422][ T4511] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.282534][ T4511] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.289757][ T4511] bridge_slave_1: entered allmulticast mode
[  523.296353][ T4511] bridge_slave_1: entered promiscuous mode
[  523.316749][ T4511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  523.327179][ T4511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  523.359151][ T4511] team0: Port device team_slave_0 added
[  523.365927][ T4511] team0: Port device team_slave_1 added
[  523.390327][ T4511] batman_adv: batadv0: Adding interface: batadv_slave_0
[  523.397327][ T4511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  523.423333][ T4511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  523.437796][ T4511] batman_adv: batadv0: Adding interface: batadv_slave_1
[  523.444745][ T4511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  523.470755][ T4511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  523.525596][ T4511] hsr_slave_0: entered promiscuous mode
[  523.531808][ T4511] hsr_slave_1: entered promiscuous mode
[  523.537817][ T4511] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  523.545503][ T4511] Cannot create hsr debugfs directory
[  523.890043][   T29] kauditd_printk_skb: 176 callbacks suppressed
[  523.890059][   T29] audit: type=1326 audit(1029.811:30039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.7.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74dd5e9a9 code=0x7ffc0000
[  523.920042][   T29] audit: type=1326 audit(1029.811:30040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.7.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb74dd5e9a9 code=0x7ffc0000
[  523.943089][   T29] audit: type=1326 audit(1029.811:30041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.7.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74dd5e9a9 code=0x7ffc0000
[  523.966051][   T29] audit: type=1326 audit(1029.811:30042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.7.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb74dd5e9a9 code=0x7ffc0000
[  523.989197][   T29] audit: type=1326 audit(1029.811:30043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.7.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74dd5e9a9 code=0x7ffc0000
[  524.012337][   T29] audit: type=1326 audit(1029.811:30044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.7.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74dd5e9a9 code=0x7ffc0000
[  524.035380][   T29] audit: type=1326 audit(1029.811:30045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.7.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb74dd5e9a9 code=0x7ffc0000
[  524.058439][   T29] audit: type=1326 audit(1029.811:30046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.7.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74dd5e9a9 code=0x7ffc0000
[  524.081396][   T29] audit: type=1326 audit(1029.811:30047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.7.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fb74dd5e9a9 code=0x7ffc0000
[  524.110932][ T4962] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  524.151647][ T4511] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  524.162735][ T4511] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  524.175043][ T4511] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  524.184195][ T4511] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  524.228290][ T4511] 8021q: adding VLAN 0 to HW filter on device bond0
[  524.241473][ T4511] 8021q: adding VLAN 0 to HW filter on device team0
[  524.251696][ T3687] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.258743][ T3687] bridge0: port 1(bridge_slave_0) entered forwarding state
[  524.271485][ T3687] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.278563][ T3687] bridge0: port 2(bridge_slave_1) entered forwarding state
[  524.300326][ T4511] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  524.310772][ T4511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  524.382953][ T4511] 8021q: adding VLAN 0 to HW filter on device batadv0
[  524.466104][ T4511] veth0_vlan: entered promiscuous mode
[  524.474429][ T4511] veth1_vlan: entered promiscuous mode
[  524.496160][ T4511] veth0_macvtap: entered promiscuous mode
[  524.510847][ T4511] veth1_macvtap: entered promiscuous mode
[  524.530782][ T4511] batman_adv: batadv0: Interface activated: batadv_slave_0
[  524.541187][ T4511] batman_adv: batadv0: Interface activated: batadv_slave_1
[  524.602514][ T4511] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  524.611333][ T4511] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  524.620205][ T4511] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  524.628972][ T4511] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  524.836052][ T5048] FAULT_INJECTION: forcing a failure.
[  524.836052][ T5048] name failslab, interval 1, probability 0, space 0, times 0
[  524.848727][ T5048] CPU: 0 UID: 0 PID: 5048 Comm: syz.7.9362 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) 
[  524.848762][ T5048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  524.848778][ T5048] Call Trace:
[  524.848786][ T5048]  <TASK>
[  524.848795][ T5048]  __dump_stack+0x1d/0x30
[  524.848866][ T5048]  dump_stack_lvl+0xe8/0x140
[  524.848891][ T5048]  dump_stack+0x15/0x1b
[  524.848913][ T5048]  should_fail_ex+0x265/0x280
[  524.849049][ T5048]  should_failslab+0x8c/0xb0
[  524.849078][ T5048]  kmem_cache_alloc_noprof+0x50/0x310
[  524.849112][ T5048]  ? security_file_alloc+0x32/0x100
[  524.849232][ T5048]  security_file_alloc+0x32/0x100
[  524.849281][ T5048]  init_file+0x5c/0x1d0
[  524.849312][ T5048]  alloc_empty_file+0x8b/0x200
[  524.849410][ T5048]  alloc_file_pseudo+0xc6/0x160
[  524.849444][ T5048]  anon_inode_getfile+0xa0/0x120
[  524.849475][ T5048]  bpf_link_prime+0xfc/0x1d0
[  524.849509][ T5048]  bpf_uprobe_multi_link_attach+0x88d/0x8f0
[  524.849618][ T5048]  link_create+0x666/0x6c0
[  524.849642][ T5048]  __sys_bpf+0x4c7/0x790
[  524.849740][ T5048]  __x64_sys_bpf+0x41/0x50
[  524.849772][ T5048]  x64_sys_call+0x2478/0x2fb0
[  524.849796][ T5048]  do_syscall_64+0xd2/0x200
[  524.849872][ T5048]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  524.849900][ T5048]  ? clear_bhb_loop+0x40/0x90
[  524.849979][ T5048]  ? clear_bhb_loop+0x40/0x90
[  524.850022][ T5048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  524.850081][ T5048] RIP: 0033:0x7fb74dd5e9a9
[  524.850099][ T5048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  524.850122][ T5048] RSP: 002b:00007fb74c3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  524.850145][ T5048] RAX: ffffffffffffffda RBX: 00007fb74df85fa0 RCX: 00007fb74dd5e9a9
[  524.850160][ T5048] RDX: 000000000000003c RSI: 00002000000005c0 RDI: 000000000000001c
[  524.850173][ T5048] RBP: 00007fb74c3c7090 R08: 0000000000000000 R09: 0000000000000000
[  524.850187][ T5048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  524.850283][ T5048] R13: 0000000000000000 R14: 00007fb74df85fa0 R15: 00007ffcbbb292f8
[  524.850308][ T5048]  </TASK>
[  525.352668][ T5045] chnl_net:caif_netlink_parms(): no params data found
[  525.456031][ T4268] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  525.465891][ T4268] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.505864][ T5045] bridge0: port 1(bridge_slave_0) entered blocking state
[  525.513046][ T5045] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.537364][ T5045] bridge_slave_0: entered allmulticast mode
[  525.557688][ T5045] bridge_slave_0: entered promiscuous mode
[  525.583255][ T4268] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  525.593077][ T4268] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.631569][ T5045] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.638637][ T5045] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.668703][ T5045] bridge_slave_1: entered allmulticast mode
[  525.682510][ T5045] bridge_slave_1: entered promiscuous mode
[  525.728586][ T5045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  525.741605][ T4268] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  525.751472][ T4268] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.770982][ T5045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  525.814780][ T4268] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  525.824749][ T4268] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.855397][ T5045] team0: Port device team_slave_0 added
[  525.870999][ T5045] team0: Port device team_slave_1 added
[  525.918104][ T5045] batman_adv: batadv0: Adding interface: batadv_slave_0
[  525.925085][ T5045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  525.951125][ T5045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  525.966420][ T5045] batman_adv: batadv0: Adding interface: batadv_slave_1
[  525.973416][ T5045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  525.999432][ T5045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  526.059883][ T5045] hsr_slave_0: entered promiscuous mode
[  526.066065][ T5045] hsr_slave_1: entered promiscuous mode
[  526.073713][ T5045] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  526.081426][ T5045] Cannot create hsr debugfs directory
[  526.117601][ T4268] bridge_slave_1: left allmulticast mode
[  526.117621][ T4268] bridge_slave_1: left promiscuous mode
[  526.128980][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.163486][ T4268] bridge_slave_0: left promiscuous mode
[  526.163584][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.326589][ T4268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  526.338198][ T4268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  526.348143][ T4268] bond0 (unregistering): Released all slaves
[  526.357634][ T4268] bond1 (unregistering): Released all slaves
[  526.371417][ T4268] bond2 (unregistering): Released all slaves
[  526.435566][ T4268] tipc: Disabling bearer <udp:ree>
[  526.439870][ T5461] __nla_validate_parse: 8 callbacks suppressed
[  526.439883][ T5461] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9372'.
[  526.440698][ T4268] tipc: Disabling bearer <udp:syz0>
[  526.461275][ T4268] tipc: Disabling bearer <udp:£>
[  526.466212][ T4268] tipc: Left network mode
[  526.501166][ T4268] hsr_slave_0: left promiscuous mode
[  526.517947][ T4268] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  526.525382][ T4268] batman_adv: batadv0: Removing interface: batadv_slave_0
[  526.533775][ T4268] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  526.541216][ T4268] batman_adv: batadv0: Removing interface: batadv_slave_1
[  526.606973][ T4268] veth0_macvtap: left promiscuous mode
[  526.652089][ T4268] team0 (unregistering): Port device team_slave_1 removed
[  526.661417][ T4268] team0 (unregistering): Port device team_slave_0 removed
[  526.936551][ T5045] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  526.945682][ T5045] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  526.955382][ T5045] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  526.964211][ T5045] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  527.002619][ T5045] 8021q: adding VLAN 0 to HW filter on device bond0
[  527.013965][ T5045] 8021q: adding VLAN 0 to HW filter on device team0
[  527.023207][ T9225] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.030295][ T9225] bridge0: port 1(bridge_slave_0) entered forwarding state
[  527.042585][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.049673][ T4268] bridge0: port 2(bridge_slave_1) entered forwarding state
[  527.105431][ T5045] 8021q: adding VLAN 0 to HW filter on device batadv0
[  527.195593][ T5045] veth0_vlan: entered promiscuous mode
[  527.203499][ T5045] veth1_vlan: entered promiscuous mode
[  527.218413][ T5045] veth0_macvtap: entered promiscuous mode
[  527.225796][ T5045] veth1_macvtap: entered promiscuous mode
[  527.236641][ T5045] batman_adv: batadv0: Interface activated: batadv_slave_0
[  527.247312][ T5045] batman_adv: batadv0: Interface activated: batadv_slave_1
[  527.256795][ T5045] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  527.265550][ T5045] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  527.274240][ T5045] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  527.283011][ T5045] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  527.748463][ T5582] FAULT_INJECTION: forcing a failure.
[  527.748463][ T5582] name failslab, interval 1, probability 0, space 0, times 0
[  527.761187][ T5582] CPU: 1 UID: 0 PID: 5582 Comm: syz.2.9386 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) 
[  527.761290][ T5582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  527.761337][ T5582] Call Trace:
[  527.761343][ T5582]  <TASK>
[  527.761350][ T5582]  __dump_stack+0x1d/0x30
[  527.761371][ T5582]  dump_stack_lvl+0xe8/0x140
[  527.761423][ T5582]  dump_stack+0x15/0x1b
[  527.761441][ T5582]  should_fail_ex+0x265/0x280
[  527.761472][ T5582]  should_failslab+0x8c/0xb0
[  527.761558][ T5582]  kmem_cache_alloc_noprof+0x50/0x310
[  527.761589][ T5582]  ? getname_flags+0x80/0x3b0
[  527.761612][ T5582]  getname_flags+0x80/0x3b0
[  527.761638][ T5582]  __x64_sys_rename+0x33/0x70
[  527.761661][ T5582]  x64_sys_call+0x2aee/0x2fb0
[  527.761731][ T5582]  do_syscall_64+0xd2/0x200
[  527.761753][ T5582]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  527.761856][ T5582]  ? clear_bhb_loop+0x40/0x90
[  527.761878][ T5582]  ? clear_bhb_loop+0x40/0x90
[  527.761901][ T5582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.761922][ T5582] RIP: 0033:0x7f4b856fe9a9
[  527.761939][ T5582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  527.761996][ T5582] RSP: 002b:00007f4b83d5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  527.762019][ T5582] RAX: ffffffffffffffda RBX: 00007f4b85925fa0 RCX: 00007f4b856fe9a9
[  527.762032][ T5582] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000180
[  527.762047][ T5582] RBP: 00007f4b83d5f090 R08: 0000000000000000 R09: 0000000000000000
[  527.762116][ T5582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  527.762128][ T5582] R13: 0000000000000000 R14: 00007f4b85925fa0 R15: 00007ffc4da1a8e8
[  527.762151][ T5582]  </TASK>
[  528.346301][ T5612] smc: net device bond0 applied user defined pnetid SYZ0
[  528.353494][ T5612] smc: net device bond0 erased user defined pnetid SYZ0
[  528.730275][   T29] audit: type=1400 audit(1034.348:30048): avc:  denied  { ioctl } for  pid=5619 comm="syz.4.9402" path="socket:[97329]" dev="sockfs" ino=97329 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  529.321328][ T5682] smc: net device bond0 applied user defined pnetid SYZ0
[  529.328661][ T5682] smc: net device bond0 erased user defined pnetid SYZ0
[  530.181830][ T5765] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  530.281830][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9439'.
[  530.290870][ T5782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9439'.
[  530.311309][   T29] audit: type=1400 audit(1035.826:30049): avc:  denied  { setattr } for  pid=5778 comm="syz.0.9439" name="SCTPv6" dev="sockfs" ino=97500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  531.170870][ T5820] netlink: 'syz.0.9451': attribute type 7 has an invalid length.
[  531.178819][ T5820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9451'.
[  531.194883][ T5820] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.232768][ T5820] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.287456][ T5820] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.339928][ T5820] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.350633][ T9228] ==================================================================
[  531.358712][ T9228] BUG: KCSAN: data-race in copy_process / free_pid
[  531.365213][ T9228] 
[  531.367524][ T9228] read-write to 0xffffffff868608e0 of 4 bytes by task 5829 on cpu 0:
[  531.375602][ T9228]  free_pid+0x77/0x180
[  531.379659][ T9228]  free_pids+0x7a/0xb0
[  531.383716][ T9228]  release_task+0x9a9/0xb60
[  531.388219][ T9228]  do_exit+0xd81/0x1590
[  531.392372][ T9228]  call_usermodehelper_exec_async+0x247/0x250
[  531.398446][ T9228]  ret_from_fork+0xda/0x150
[  531.402941][ T9228]  ret_from_fork_asm+0x1a/0x30
[  531.407706][ T9228] 
[  531.410019][ T9228] read to 0xffffffff868608e0 of 4 bytes by task 9228 on cpu 1:
[  531.417555][ T9228]  copy_process+0x1790/0x1f90
[  531.422228][ T9228]  kernel_clone+0x16c/0x5b0
[  531.426731][ T9228]  user_mode_thread+0x7d/0xb0
[  531.431418][ T9228]  call_usermodehelper_exec_work+0x41/0x160
[  531.437319][ T9228]  process_scheduled_works+0x4cb/0x9d0
[  531.442779][ T9228]  worker_thread+0x582/0x770
[  531.447373][ T9228]  kthread+0x489/0x510
[  531.451433][ T9228]  ret_from_fork+0xda/0x150
[  531.455927][ T9228]  ret_from_fork_asm+0x1a/0x30
[  531.460685][ T9228] 
[  531.462996][ T9228] value changed: 0x8000019a -> 0x80000199
[  531.468697][ T9228] 
[  531.471004][ T9228] Reported by Kernel Concurrency Sanitizer on:
[  531.477139][ T9228] CPU: 1 UID: 0 PID: 9228 Comm: kworker/u8:60 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) 
[  531.489803][ T9228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  531.499853][ T9228] Workqueue: events_unbound call_usermodehelper_exec_work
[  531.506968][ T9228] ==================================================================
[  531.568851][ T5820] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  531.580088][ T5820] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  531.593508][ T5820] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  531.606686][ T5820] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0