last executing test programs:

2.418705542s ago: executing program 2 (id=141):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000540)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030109025c0002011120050904000001020d00000524060001052400df000d240f0101000000000003000504241a01041409058103ff030604050904010000020d00000904010102020d0000090582020004f10209090503022000260007"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
socket$inet6_sctp(0xa, 0x5, 0x84)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000040)=0x6, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0)
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14)
recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2881)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xbf, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8)

2.174835428s ago: executing program 0 (id=152):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, 0x0, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x2c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000)

2.143788268s ago: executing program 0 (id=154):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x24, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x5)
ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000001c0)={0xffbfff41, 0x4000403, 0xfffffffb, 0x14, 0x7, "ffffff7f87680000000000001000007fcb3678", 0x4, 0x200})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r5, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37)
sendfile(r5, r4, 0x0, 0x3ffff)
sendfile(r5, r4, 0x0, 0x7fffeffd)

1.833383984s ago: executing program 4 (id=155):
r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x4, 0x400080)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
unshare(0x22020400)
open(0x0, 0x0, 0x0)
flock(r1, 0xa)
connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x20000000000000e8, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0xffffffffffffff39)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010000304fcffffff02dcdf250000090097b34bbd6bca7b7132619fdbe547de024664c643f8259d869293109f1a1bd4f49457cc0f8c68ddc6d874133d0c98542584ab1b204063a281a9bcd4a0550edbd20558962ebfdc04a983c3f726a9f14be3cf124fc75bfea6f5334abfc8c8e8235c135124f0baf6c99e1def07166a980cec76b173bf4c1d8fec7a8bf1b43ad63143e10dfcef277df7e6a01bf72c1b8f461eab7bd0ab502455a3cb20210c9db00fa55b3082bb9cc3d2a60cbae54e456e1ead0387ae003f5b1bc13dae755e6fa1e1c7168f1971", @ANYRES32=0x0, @ANYBLOB="0008000007500500140012800b00010062726964676500000400028008001b0000000034050011000e000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x44044080)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./cgroup\x00', 0x0, 0x10}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r2, &(0x7f0000000780)}, 0x20)
socket$kcm(0x29, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r7}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0)

1.816016165s ago: executing program 4 (id=156):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0xfd45}}, 0x0)

1.378163373s ago: executing program 3 (id=162):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0128000000000000000000000000000000000080", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fcffffff00"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
mount(0x0, 0x0, 0x0, 0x208c, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
pipe2$9p(0x0, 0x800)
write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
link(0x0, 0x0)
r2 = syz_io_uring_setup(0x1e1f, &(0x7f0000000200)={0x0, 0xae0d, 0x10100, 0x3, 0xa7}, &(0x7f0000002000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r2, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0)
prlimit64(0x0, 0x8, &(0x7f0000002000)={0x0, 0x7}, 0x0)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
syz_emit_ethernet(0xf3, &(0x7f0000000300)={@empty, @link_local={0x7}, @void, {@mpls_uc={0x8847, {[{0xe76d}], @llc={@snap={0xaa, 0x0, "9748", "dd18b2", 0x15, "25cd20bff9d27c30a1e8209d3c1320f817945bf2e65511bb365c859b83a71b24e9f223f0568bab0ab8c5cb15d86281818bafa3a3f70e89967c69534840df46c335ef631f682c1c089f7dbfac4e935345aca4fdac54356f3595d6a53ac9f95def92f13f0b5430c57644a9aee55995b30bf7b0efb7dbaa2b15c6460b432206a52fb28aa3dadaa404ecdd3f36134622915dd8e8784ee669cc029797d714223af0170d496971fdd32f4fc131aa1d5f0a8fcb0a9348314b33546b09ab64808cbeb9b1b2f795bff37b06b99fae8ebb50fa6130263e0f2b8bff69bb"}}}}}}, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=0x0], 0x3c}}, 0x20000080)

1.056335779s ago: executing program 1 (id=167):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000b00)={@multicast, @broadcast, @val={@void, {0x8100, 0x5, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0xf, 0x2c, 0x65, 0x0, 0x6, 0x11, 0x0, @local, @empty}, {0x4e23, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x8}}}}}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x78, 0x6}, 0x4)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x8, 0x6}]}, 0x10)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20)

1.00880682s ago: executing program 1 (id=168):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
ioctl$TUNSETOFFLOAD(r3, 0x541b, 0x4000000000000000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffc}, 0x4c)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_getattr(0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="fc", 0x1}], 0x1}, 0x0)
sendmsg$tipc(r5, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004800}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbca, &(0x7f0000000600)="$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")
r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r6, 0x3000)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f00000001c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dd74f779630a313c9ac985a413c2c277239a207aa4b686ca6875c0b270c4254132005198baffaa8ce3f4d0d13edb5086169b5c7b9dbc137af4eb3a4b5a1418eecd1bbfe77e9e512e4254399d1e9007ef12e669e3d23a0e5c6d7cc8eaaa7c52ed542127bc79e628a18615b765f9cbbcc6674d51bdd8b26500f8fb70cfc8a49ffd31a1a0677aaac7fb2c3", @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',version=9p2000.u,\x00'])
fallocate(r6, 0x0, 0x0, 0x1000f4)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

947.130871ms ago: executing program 4 (id=169):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0xc80c4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xd}, 0x1c)
sendto$inet6(r2, &(0x7f0000001cc0), 0x0, 0x8000, 0x0, 0x0)

886.086353ms ago: executing program 4 (id=170):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000008000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20)

885.757363ms ago: executing program 4 (id=171):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x16, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0)

870.405873ms ago: executing program 0 (id=172):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r1}, 0x18)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10)
sendmsg$can_bcm(r2, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000003e80)=ANY=[@ANYBLOB="01000000020800000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0300004001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x200060d0)

846.521383ms ago: executing program 2 (id=173):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000880)={[{@journal_path={'journal_path', 0x3d, './file1'}}, {@dax_never}, {@grpid}, {@nojournal_checksum}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@uid_gt}, {@subj_type={'subj_type', 0x3d, '\x92&.:@\x00'}}]}, 0x1, 0x47e, &(0x7f0000000100)="$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")

781.747344ms ago: executing program 4 (id=174):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000540)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030109025c0002011120050904000001020d00000524060001052400df000d240f0101000000000003000504241a01041409058103ff030604050904010000020d00000904010102020d0000090582020004f10209090503022000260007"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
socket$inet6_sctp(0xa, 0x5, 0x84)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000040)=0x6, 0x2)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0)
close(r3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14)
recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2881)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xbf, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8)

777.976325ms ago: executing program 0 (id=175):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x70, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8132599c0aa1f00}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x44000)

708.520946ms ago: executing program 1 (id=176):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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")

706.590736ms ago: executing program 2 (id=177):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='schedstat\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x826c, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r6}, 0x18)
r7 = socket$kcm(0x21, 0x2, 0x2)
recvmsg$kcm(r7, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r10 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
socket$packet(0x11, 0x3, 0x300)
r11 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r8)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000500)='batadv_slave_0\x00', 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})

654.352257ms ago: executing program 0 (id=178):
syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c20000000180c200000e86dd6cbdc6f500006cff00000000000000000000000000000000ff02000000000000000000000000000157"], 0x0)

619.922938ms ago: executing program 0 (id=179):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0xfd45}}, 0x0)

606.658818ms ago: executing program 2 (id=180):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0xc80c4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xd}, 0x1c)
sendto$inet6(r2, &(0x7f0000001cc0), 0x0, 0x8000, 0x0, 0x0)

597.308228ms ago: executing program 1 (id=181):
syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c20000000180c200000e86dd6cbdc6f500006cff00000000000000000000000000000000ff02000000000000000000000000000157"], 0x0)

534.776599ms ago: executing program 2 (id=182):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20)

534.325509ms ago: executing program 2 (id=183):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41)
openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x24, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x5)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r5, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37)
sendfile(r5, r4, 0x0, 0x3ffff)
sendfile(r5, r4, 0x0, 0x7fffeffd)

486.27753ms ago: executing program 3 (id=184):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRESOCT=0x0], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRESDEC=0x0, @ANYRES16=r1, @ANYRES8=r0, @ANYBLOB="dac35a4aec0b64e2d00b3c26fdbfae50afb1287a269f0d4678be2950d0550826c9223c1df960ca69596d78dcac4a0e6764066fbd7f20366251bd281185fdb9c577c3c3a14e17042b403fe18893a3fa9be624444a22503e2b50b5e23efe9ab36d8d9a1e7321c91e64faa5b925962c7c7fcb8d8723c432573ac8bce00a4c19a2b74f7cb5f0e747c2d9d8c29f46a4b09ad851cfceb0f944a96fbd26ecbf43640e6bffeebd90e6f1654b716a134ccf0be4543313dc7311b9bf3bd80325477fb10b5ad4e4df6fc2", @ANYBLOB="8dac76c21788068097753ffd441e17436a1d256baec41e4a29491285637cae30206dec5eb560e58cede43ee2fc9bba2196a50888059afdc3f78db80fab0dd827af29d26bc1613a8844f4b79592f3293ec8fc4f2145cf469704c7fba01425e0c939e5ddd934faf460896c4cb27a460f8fff01eeca51ba2d281ee2ccef96352b5b9027435fb1a9d04316f5ff2a1fa63f10a377462d3e24b57f028d3b6ebcf957b3", @ANYRES64=r1, @ANYRESHEX=r1, @ANYRES16=r1], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x18)
socket$kcm(0xa, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x800}, [@call={0x85, 0x0, 0x0, 0x6c}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x7, &(0x7f0000000400)=""/7, 0x41100, 0x12, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000480)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000680)=[r2, r2], &(0x7f00000006c0)=[{0x0, 0x1, 0x7, 0x5}, {0x0, 0x2, 0x4, 0x8}, {0x3, 0x1, 0x0, 0x2}, {0x4, 0x2, 0x0, 0x1}, {0x3, 0x4, 0x0, 0x8}, {0x1, 0x2, 0x8, 0x9}, {0x0, 0x2, 0x8, 0x1}, {0x1, 0x5, 0xe, 0x1}, {0x1, 0x2, 0x1, 0x5}], 0x10, 0x8000}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00"/13], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r4}, 0x18)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)

479.116811ms ago: executing program 1 (id=185):
unshare(0xc020680)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x2}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_read_part_table(0x5eb, &(0x7f0000000f00)="$eJzs2zFo1FccB/DfxRwHSnFxclIHKcVFcfQoKnenohBOsxQpBhQRbzpBOOlBig56FMUbxG4uVrhF7ZTLDZkSEsjUIYQMKYEMWVqSJZClV+7yCm1KSq8kBeHz4eDHe//f/33fO976Dz5pQ/Frt9vNRET3p4gDA7492ioULx8bOV++EZGJmxHx9fef/9B7kkkd3dx2PZHGy2n89s3BzrONS9nW0vXNk7emG0N/LDne/8Whd+3RPTge++x9fubw4yfV0vNa/t5iqb76dGH+2of1Qrl9tdH8eCV78Xbqm011ONUHUYtHcT/GYji+jTtR3WX97wbMf91aOZ09WmpN3D23Vey8mDrT7xr0Xv97vfz+hY2IXv7D4y+/atYvnPrxyKuztcm58lqKruR2vjm2b3sCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/y8bM4cdPqqXntfy9xVJ99enC/LUP64Vy+2qj+fFK9uLt1Deb6nCqD6IWj+J+jEUlKnEnqrsmfPbnQW7n0/f5v+a/bq2c/u1oqTVx99xWsfNi6kzqG9mj8/5DfreX//D4yy+b9Qunckdena1NzpXXDmz3Vf628+j/ewAAAAAAAAAAAAAAAAAAALAXCsXLx0bOl29EZOJmRHzxyzdDvflu+t49k/pOpLqc5t++Odh5tnEp21q6vnny1nTj5zQ/HpkYj4hD79qj//thGNjvAQAA//8Pi5HU")
unshare(0x10c80)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000002}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r4}, 0x10)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r7 = syz_io_uring_setup(0x58e, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=<r8=>0x0, &(0x7f0000000340)=<r9=>0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
timer_getoverrun(0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000})
io_uring_enter(r7, 0x1c3a, 0xe176, 0x22, 0x0, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x80000000000007}, 0x18)
prctl$PR_SET_IO_FLUSHER(0x39, 0xfffffffbbffffffe)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x502, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4008, r0}, 0x18)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r11, {}, {0xb, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8}]}}]}, 0x38}}, 0x0)

312.464464ms ago: executing program 3 (id=186):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000880)={[{@journal_path={'journal_path', 0x3d, './file1'}}, {@dax_never}, {@grpid}, {@nojournal_checksum}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@uid_gt}, {@subj_type={'subj_type', 0x3d, '\x92&.:@\x00'}}]}, 0x1, 0x47e, &(0x7f0000000100)="$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")

275.241304ms ago: executing program 3 (id=187):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect(r1, &(0x7f0000000180)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x80)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', r0, 0x4000, r1}, 0x18)

256.538145ms ago: executing program 3 (id=188):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000880)={[{@journal_path={'journal_path', 0x3d, './file1'}}, {@dax_never}, {@grpid}, {@nojournal_checksum}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@uid_gt}, {@subj_type={'subj_type', 0x3d, '\x92&.:@\x00'}}]}, 0x1, 0x47e, &(0x7f0000000100)="$eJzs3c9vFFUcAPDv7G75Da2IKIiKopH4o6UFlYMXTUw8aGKiBzzWUgiyUENrIqSxxRC8mCgJd2PixcS/wJMnIp5MvOLdkBDDBdTLmmFnl93tbtnudrvgfj7J0Hmdt/u+35l5O29mmG0AA2tv+k8SsSUirkXEcETkaitsLE9pvds356f+vjk/lUSp9P5fSfqyuHVzfqpSNcl+bi4XCukb5S4kMdKk3dmz505OFovTZ7Ly2NypT8Zmz557+cSpyePTx6dPTxw+fOjg+GuvTryyKnmmMd3a/fnMnl1vf3jp3akjlz66+mM53lLp8pUDdXmsjqGImK+uk0bPrW5jfbe1Zj4p9DEQVmR9RBSyvfVaDEf+wrbqsuF464u+Bgf0VKlUKk20XrxYAv7Hkuh3BEB/VA706flvZaodAPzb2+FH3914o3wClOZ9O5vKSwpxPqsz1HB+u5r2RsSRxX++TadouJ4CANALP6fjn5eajP9GInbW1NuW3RsaiYiHImJ7RDwcETsi4pEo1300Ih5bYft7G8pLxz+5651l1p50/Pd6dm+rfvxXvQs2ks9KW+/kP5QcO1GcPpCtk/0xtD4tjzd99yRiMf35+9et2q8d/6VT2n5lLJjFcb2wvv41RyfnJrtOPHPjfMTuQrP8kyjczSJ2RcTuDts48cIPe+p/k6/O3Tv/ZazCfabSdxHPl7f/YjTkX5Esf39ybEMUpw+MVfaKpX797eJ7rdrvKv8NK053iXT7b2q6/1fzH0lq79fOLnmLdfdq4+IfX7Y8p+l0/1+XfFDX+GeTc3NnxiPWJe8s/X3NBe5KuVI/zX//vub9f3vcXROPR0S6Ez8REU9GxFNZ7E9HxDMRsW+Z/H9589mPO8+/t9L8F1a0/Vc+kz955adW7be3/Q9VCneCaufzr90Au1l3AAAA8KDIRcSWSHKj1flcbnS0/P/ld8SmXHFmdu7FYzOfnj5afkZgJIZylStdwzXXQ8eza8OV8kRWXsjKB7PrxpfzG++UR6dmikf7nTwMuM0t+n/qz3y/owN6zvNaMLj0fxhcnfd/nxzwoLtHL86tVRzA2nMUh8HVrP8v9CEOYO05/sPgqvb/b9qoXPO4V+PDm8CDx/EfBpf+DwOp2bPxVzt+0r8PM/F9xPJ1kmaLNnb5nQY9n/mqm5cX1iDCyN0fK2oNZybyEX0Mo9Dut1rE2dJC143WfUzsbPV3LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO53/wUAAP//ISLnvg==")

175.057406ms ago: executing program 3 (id=189):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r3, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x2c}}, 0x0)

0s ago: executing program 1 (id=190):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, 0x0, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x2c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts.
[   27.566744][   T29] audit: type=1400 audit(1757916699.214:62): avc:  denied  { mounton } for  pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   27.567915][ T3290] cgroup: Unknown subsys name 'net'
[   27.589600][   T29] audit: type=1400 audit(1757916699.214:63): avc:  denied  { mount } for  pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.616906][   T29] audit: type=1400 audit(1757916699.254:64): avc:  denied  { unmount } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.750140][ T3290] cgroup: Unknown subsys name 'cpuset'
[   27.756417][ T3290] cgroup: Unknown subsys name 'rlimit'
[   27.867573][   T29] audit: type=1400 audit(1757916699.514:65): avc:  denied  { setattr } for  pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   27.890979][   T29] audit: type=1400 audit(1757916699.514:66): avc:  denied  { create } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.911524][   T29] audit: type=1400 audit(1757916699.514:67): avc:  denied  { write } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.931948][   T29] audit: type=1400 audit(1757916699.514:68): avc:  denied  { read } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.933732][ T3296] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   27.952286][   T29] audit: type=1400 audit(1757916699.514:69): avc:  denied  { mounton } for  pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   27.985589][   T29] audit: type=1400 audit(1757916699.514:70): avc:  denied  { mount } for  pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   28.006544][ T3290] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   28.008840][   T29] audit: type=1400 audit(1757916699.624:71): avc:  denied  { relabelto } for  pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   29.901107][ T3303] chnl_net:caif_netlink_parms(): no params data found
[   29.922457][ T3314] chnl_net:caif_netlink_parms(): no params data found
[   29.963425][ T3315] chnl_net:caif_netlink_parms(): no params data found
[   29.984725][ T3305] chnl_net:caif_netlink_parms(): no params data found
[   30.031788][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.039117][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.046231][ T3314] bridge_slave_0: entered allmulticast mode
[   30.052729][ T3314] bridge_slave_0: entered promiscuous mode
[   30.059530][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.066593][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.073707][ T3314] bridge_slave_1: entered allmulticast mode
[   30.080043][ T3314] bridge_slave_1: entered promiscuous mode
[   30.094487][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.101560][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.108698][ T3303] bridge_slave_0: entered allmulticast mode
[   30.115248][ T3303] bridge_slave_0: entered promiscuous mode
[   30.141118][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.148271][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.155567][ T3303] bridge_slave_1: entered allmulticast mode
[   30.162054][ T3303] bridge_slave_1: entered promiscuous mode
[   30.193246][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.202450][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.209692][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.216813][ T3315] bridge_slave_0: entered allmulticast mode
[   30.223281][ T3315] bridge_slave_0: entered promiscuous mode
[   30.238797][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.251087][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.261330][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.275518][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.282593][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.289782][ T3315] bridge_slave_1: entered allmulticast mode
[   30.296104][ T3315] bridge_slave_1: entered promiscuous mode
[   30.317821][ T3311] chnl_net:caif_netlink_parms(): no params data found
[   30.346964][ T3314] team0: Port device team_slave_0 added
[   30.353419][ T3303] team0: Port device team_slave_0 added
[   30.363704][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.372904][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.380022][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.387097][ T3305] bridge_slave_0: entered allmulticast mode
[   30.393532][ T3305] bridge_slave_0: entered promiscuous mode
[   30.400890][ T3314] team0: Port device team_slave_1 added
[   30.407207][ T3303] team0: Port device team_slave_1 added
[   30.416309][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.425542][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.432736][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.440029][ T3305] bridge_slave_1: entered allmulticast mode
[   30.446479][ T3305] bridge_slave_1: entered promiscuous mode
[   30.493995][ T3315] team0: Port device team_slave_0 added
[   30.500580][ T3315] team0: Port device team_slave_1 added
[   30.511229][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.518255][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.544261][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.555418][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.562407][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.588324][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.608318][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.617795][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.624785][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.650861][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.662014][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.668946][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.695019][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.709005][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.723372][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.730380][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.756344][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.792699][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.799687][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.825651][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.850260][ T3305] team0: Port device team_slave_0 added
[   30.856118][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.863197][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.870517][ T3311] bridge_slave_0: entered allmulticast mode
[   30.876967][ T3311] bridge_slave_0: entered promiscuous mode
[   30.890633][ T3314] hsr_slave_0: entered promiscuous mode
[   30.896644][ T3314] hsr_slave_1: entered promiscuous mode
[   30.903420][ T3305] team0: Port device team_slave_1 added
[   30.909203][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.916292][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.923514][ T3311] bridge_slave_1: entered allmulticast mode
[   30.930082][ T3311] bridge_slave_1: entered promiscuous mode
[   30.943938][ T3303] hsr_slave_0: entered promiscuous mode
[   30.949931][ T3303] hsr_slave_1: entered promiscuous mode
[   30.955777][ T3303] debugfs: 'hsr0' already exists in 'hsr'
[   30.961522][ T3303] Cannot create hsr debugfs directory
[   31.013280][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.020293][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.046316][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.058453][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.068786][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.085548][ T3315] hsr_slave_0: entered promiscuous mode
[   31.091444][ T3315] hsr_slave_1: entered promiscuous mode
[   31.097241][ T3315] debugfs: 'hsr0' already exists in 'hsr'
[   31.103013][ T3315] Cannot create hsr debugfs directory
[   31.114333][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.121421][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.147362][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.194097][ T3311] team0: Port device team_slave_0 added
[   31.201183][ T3311] team0: Port device team_slave_1 added
[   31.243126][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.250129][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.276064][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.295854][ T3305] hsr_slave_0: entered promiscuous mode
[   31.303213][ T3305] hsr_slave_1: entered promiscuous mode
[   31.309006][ T3305] debugfs: 'hsr0' already exists in 'hsr'
[   31.314776][ T3305] Cannot create hsr debugfs directory
[   31.324903][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.332029][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.358024][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.439093][ T3311] hsr_slave_0: entered promiscuous mode
[   31.445556][ T3311] hsr_slave_1: entered promiscuous mode
[   31.451500][ T3311] debugfs: 'hsr0' already exists in 'hsr'
[   31.457232][ T3311] Cannot create hsr debugfs directory
[   31.519889][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   31.536260][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   31.555791][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   31.566671][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   31.604904][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   31.617916][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   31.630588][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   31.643374][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   31.665416][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   31.674469][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   31.685773][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   31.702031][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   31.732963][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   31.748910][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.757773][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   31.767694][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   31.776855][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   31.800290][ T3314] 8021q: adding VLAN 0 to HW filter on device team0
[   31.817502][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.824694][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.842268][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   31.853101][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   31.862126][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   31.876254][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   31.891695][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.898735][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.927299][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.945292][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   31.976053][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.983149][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.998692][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.008834][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.015908][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.032980][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.059652][ T3315] 8021q: adding VLAN 0 to HW filter on device team0
[   32.069804][ T3311] 8021q: adding VLAN 0 to HW filter on device team0
[   32.082667][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.102188][   T54] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.109342][   T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.120264][   T54] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.127399][   T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.137563][   T54] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.144690][   T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.183154][   T54] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.190346][   T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.222063][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   32.233705][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.247925][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.255120][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.273800][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.280999][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.339940][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.365309][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.401406][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.457355][ T3314] veth0_vlan: entered promiscuous mode
[   32.465593][ T3314] veth1_vlan: entered promiscuous mode
[   32.481008][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.496144][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.504868][ T3314] veth0_macvtap: entered promiscuous mode
[   32.528556][ T3314] veth1_macvtap: entered promiscuous mode
[   32.571511][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.585464][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.609865][ T3315] veth0_vlan: entered promiscuous mode
[   32.617594][ T3315] veth1_vlan: entered promiscuous mode
[   32.626832][ T3303] veth0_vlan: entered promiscuous mode
[   32.643698][ T3315] veth0_macvtap: entered promiscuous mode
[   32.650143][   T54] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.670651][   T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.680065][ T3315] veth1_macvtap: entered promiscuous mode
[   32.694657][   T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.703907][   T29] kauditd_printk_skb: 9 callbacks suppressed
[   32.703923][   T29] audit: type=1400 audit(1757916704.354:81): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/root/syzkaller.y3m9GF/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   32.721820][ T3311] veth0_vlan: entered promiscuous mode
[   32.734294][   T29] audit: type=1400 audit(1757916704.354:82): avc:  denied  { mount } for  pid=3314 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   32.761760][   T29] audit: type=1400 audit(1757916704.354:83): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/root/syzkaller.y3m9GF/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   32.764897][ T3311] veth1_vlan: entered promiscuous mode
[   32.786925][   T29] audit: type=1400 audit(1757916704.354:84): avc:  denied  { mount } for  pid=3314 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   32.798066][ T3303] veth1_vlan: entered promiscuous mode
[   32.814185][   T29] audit: type=1400 audit(1757916704.354:85): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/root/syzkaller.y3m9GF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   32.826962][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.848288][   T29] audit: type=1400 audit(1757916704.354:86): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/root/syzkaller.y3m9GF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   32.874447][   T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.880882][   T29] audit: type=1400 audit(1757916704.364:87): avc:  denied  { unmount } for  pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   32.896507][ T3311] veth0_macvtap: entered promiscuous mode
[   32.923918][   T29] audit: type=1400 audit(1757916704.514:88): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   32.932060][ T3311] veth1_macvtap: entered promiscuous mode
[   32.946826][   T29] audit: type=1400 audit(1757916704.514:89): avc:  denied  { mount } for  pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=3788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   32.960599][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.991581][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   32.992061][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.017102][   T29] audit: type=1400 audit(1757916704.664:90): avc:  denied  { read write } for  pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   33.020383][ T3303] veth0_macvtap: entered promiscuous mode
[   33.052485][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.075411][ T3303] veth1_macvtap: entered promiscuous mode
[   33.084926][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.101868][ T3305] veth0_vlan: entered promiscuous mode
[   33.110153][ T3305] veth1_vlan: entered promiscuous mode
[   33.117201][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.128944][   T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.129348][ T3469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'.
[   33.137844][   T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.162882][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.172282][   T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.191046][ T3469] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   33.207153][   T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.246261][   T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.256439][ T3305] veth0_macvtap: entered promiscuous mode
[   33.289591][ T3305] veth1_macvtap: entered promiscuous mode
[   33.297340][   T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.310980][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.318779][   T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.340208][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.360719][ T3481] loop3: detected capacity change from 0 to 1024
[   33.389464][   T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.408943][ T3481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.412547][ T3488] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9'.
[   33.445778][   T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.461082][   T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.472876][   T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.482502][   T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.485041][ T3481] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   33.492562][   T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.509459][ T1774] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.559746][ T3501] loop0: detected capacity change from 0 to 512
[   33.566474][ T3501] journal_path: Non-blockdev passed as './file1'
[   33.572963][ T3501] EXT4-fs: error: could not find journal device path
[   33.588947][ T1774] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.707873][ T3513] netlink: '+}[@': attribute type 1 has an invalid length.
[   33.714081][ T3378] IPVS: starting estimator thread 0...
[   33.715240][ T3513] netlink: 224 bytes leftover after parsing attributes in process `+}[@'.
[   33.764075][ T3520] loop1: detected capacity change from 0 to 512
[   33.772478][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.783358][ T3520] EXT4-fs: Ignoring removed bh option
[   33.791561][ T3520] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   33.801140][ T3520] EXT4-fs (loop1): 1 truncate cleaned up
[   33.807545][ T3520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.820111][ T3517] IPVS: using max 2448 ests per chain, 122400 per kthread
[   33.870536][ T3528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'.
[   33.894316][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.935935][ T3535] FAULT_INJECTION: forcing a failure.
[   33.935935][ T3535] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   33.949213][ T3535] CPU: 0 UID: 0 PID: 3535 Comm: syz.3.17 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   33.949245][ T3535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   33.949298][ T3535] Call Trace:
[   33.949303][ T3535]  <TASK>
[   33.949309][ T3535]  __dump_stack+0x1d/0x30
[   33.949400][ T3535]  dump_stack_lvl+0xe8/0x140
[   33.949423][ T3535]  dump_stack+0x15/0x1b
[   33.949493][ T3535]  should_fail_ex+0x265/0x280
[   33.949591][ T3535]  should_fail+0xb/0x20
[   33.949609][ T3535]  should_fail_usercopy+0x1a/0x20
[   33.949632][ T3535]  strncpy_from_user+0x25/0x230
[   33.949670][ T3535]  strncpy_from_bpfptr+0x43/0x50
[   33.949756][ T3535]  bpf_prog_load+0x884/0x1070
[   33.949790][ T3535]  ? security_bpf+0x2b/0x90
[   33.949806][ T3535]  __sys_bpf+0x462/0x7b0
[   33.949871][ T3535]  __x64_sys_bpf+0x41/0x50
[   33.949902][ T3535]  x64_sys_call+0x2aea/0x2ff0
[   33.949955][ T3535]  do_syscall_64+0xd2/0x200
[   33.949993][ T3535]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   33.950078][ T3535]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   33.950187][ T3535]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   33.950209][ T3535] RIP: 0033:0x7ffac9eeeba9
[   33.950225][ T3535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   33.950310][ T3535] RSP: 002b:00007ffac8957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   33.950334][ T3535] RAX: ffffffffffffffda RBX: 00007ffaca135fa0 RCX: 00007ffac9eeeba9
[   33.950404][ T3535] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005
[   33.950496][ T3535] RBP: 00007ffac8957090 R08: 0000000000000000 R09: 0000000000000000
[   33.950508][ T3535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   33.950520][ T3535] R13: 00007ffaca136038 R14: 00007ffaca135fa0 R15: 00007ffc126bd5a8
[   33.950539][ T3535]  </TASK>
[   33.955751][ T3536] loop4: detected capacity change from 0 to 512
[   34.100311][ T3548] FAULT_INJECTION: forcing a failure.
[   34.100311][ T3548] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   34.112429][ T3536] journal_path: Non-blockdev passed as './file1'
[   34.113353][ T3548] CPU: 0 UID: 0 PID: 3548 Comm: syz.1.27 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   34.113442][ T3548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   34.113467][ T3548] Call Trace:
[   34.113475][ T3548]  <TASK>
[   34.113505][ T3548]  __dump_stack+0x1d/0x30
[   34.113607][ T3548]  dump_stack_lvl+0xe8/0x140
[   34.113634][ T3548]  dump_stack+0x15/0x1b
[   34.113657][ T3548]  should_fail_ex+0x265/0x280
[   34.113691][ T3548]  should_fail+0xb/0x20
[   34.113800][ T3548]  should_fail_usercopy+0x1a/0x20
[   34.113906][ T3548]  _copy_to_user+0x20/0xa0
[   34.113950][ T3548]  simple_read_from_buffer+0xb5/0x130
[   34.113981][ T3548]  proc_fail_nth_read+0x10e/0x150
[   34.114079][ T3548]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   34.114116][ T3548]  vfs_read+0x1a8/0x770
[   34.114145][ T3548]  ? __rcu_read_unlock+0x4f/0x70
[   34.114246][ T3548]  ? __fget_files+0x184/0x1c0
[   34.114285][ T3548]  ksys_read+0xda/0x1a0
[   34.114316][ T3548]  __x64_sys_read+0x40/0x50
[   34.114347][ T3548]  x64_sys_call+0x27bc/0x2ff0
[   34.114423][ T3548]  do_syscall_64+0xd2/0x200
[   34.114481][ T3548]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   34.114572][ T3548]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   34.114612][ T3548]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   34.114674][ T3548] RIP: 0033:0x7f9e60d3d5bc
[   34.114694][ T3548] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   34.114755][ T3548] RSP: 002b:00007f9e5f79f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   34.114782][ T3548] RAX: ffffffffffffffda RBX: 00007f9e60f85fa0 RCX: 00007f9e60d3d5bc
[   34.114800][ T3548] RDX: 000000000000000f RSI: 00007f9e5f79f0a0 RDI: 0000000000000003
[   34.114817][ T3548] RBP: 00007f9e5f79f090 R08: 0000000000000000 R09: 0000000000000000
[   34.114833][ T3548] R10: 0000000000000083 R11: 0000000000000246 R12: 0000000000000001
[   34.114850][ T3548] R13: 00007f9e60f86038 R14: 00007f9e60f85fa0 R15: 00007ffe67b471a8
[   34.114920][ T3548]  </TASK>
[   34.365021][ T3536] EXT4-fs: error: could not find journal device path
[   34.479197][ T3550] netlink: 'syz.1.28': attribute type 3 has an invalid length.
[   34.592811][ T3562] loop0: detected capacity change from 0 to 2048
[   34.599845][ T3562] EXT4-fs: Ignoring removed i_version option
[   34.623783][ T3562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.636142][ T3562] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.732032][ T3566] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   34.858132][ T3550] loop1: detected capacity change from 0 to 128
[   34.875479][ T3566] capability: warning: `syz.2.32' uses deprecated v2 capabilities in a way that may be insecure
[   34.974505][ T3550] FAT-fs (loop1): bogus number of reserved sectors
[   34.981200][ T3550] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   34.990609][ T3550] FAT-fs (loop1): Can't find a valid FAT filesystem
[   35.047402][ T3569] loop2: detected capacity change from 0 to 1024
[   35.075622][ T3571] loop3: detected capacity change from 0 to 512
[   35.092836][ T3569] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   35.103789][ T3569] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   35.126889][ T3571] EXT4-fs: Ignoring removed mblk_io_submit option
[   35.185782][ T3571] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   35.198977][ T3571] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   35.230719][ T3569] JBD2: no valid journal superblock found
[   35.236557][ T3569] EXT4-fs (loop2): Could not load journal inode
[   35.294536][ T3571] EXT4-fs (loop3): 1 truncate cleaned up
[   35.323576][ T3571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.340435][ T3575] loop1: detected capacity change from 0 to 2048
[   35.421019][ T3575]  loop1: p1 < > p4
[   35.425954][ T3575] loop1: p4 size 8388608 extends beyond EOD, truncated
[   35.480950][ T2995]  loop1: p1 < > p4
[   35.504303][ T2995] loop1: p4 size 8388608 extends beyond EOD, truncated
[   35.566031][ T3588] loop2: detected capacity change from 0 to 512
[   35.609217][ T3586] syz.4.39 uses obsolete (PF_INET,SOCK_PACKET)
[   35.634001][ T3588] journal_path: Non-blockdev passed as './file1'
[   35.640477][ T3588] EXT4-fs: error: could not find journal device path
[   35.718506][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   35.739246][ T3524] udevd[3524]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   35.951914][ T3601] loop2: detected capacity change from 0 to 512
[   35.977410][ T3601] journal_path: Non-blockdev passed as './file1'
[   35.983902][ T3601] EXT4-fs: error: could not find journal device path
[   36.002721][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.072318][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.097912][ T3612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3612 comm=syz.1.52
[   36.112172][ T3612] netlink: 'syz.1.52': attribute type 2 has an invalid length.
[   36.136438][ T3615] !
: renamed from dummy0 (while UP)
[   36.137133][ T3616] loop4: detected capacity change from 0 to 512
[   36.163761][ T3615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'.
[   36.176700][ T3616] EXT4-fs: Ignoring removed mblk_io_submit option
[   36.184271][ T3620] loop2: detected capacity change from 0 to 512
[   36.194632][ T3616] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   36.205108][ T3620] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   36.235079][ T3616] EXT4-fs (loop4): 1 truncate cleaned up
[   36.245310][ T3615] team0 (unregistering): Port device team_slave_0 removed
[   36.251926][ T3616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.273456][ T3620] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.54: Failed to acquire dquot type 1
[   36.286490][ T3615] team0 (unregistering): Port device team_slave_1 removed
[   36.291210][ T3628] loop1: detected capacity change from 0 to 512
[   36.302117][ T3628] EXT4-fs: Ignoring removed mblk_io_submit option
[   36.316775][ T3628] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   36.317332][ T3620] EXT4-fs (loop2): 1 truncate cleaned up
[   36.334938][ T3620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.338267][ T3620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.359553][ T3628] EXT4-fs (loop1): 1 truncate cleaned up
[   36.366003][ T3628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.557024][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.640508][ T3639] netlink: 'syz.2.59': attribute type 10 has an invalid length.
[   36.648229][ T3639] ipvlan0: entered allmulticast mode
[   36.653540][ T3639] veth0_vlan: entered allmulticast mode
[   36.660466][ T3639] team0: Device ipvlan0 failed to register rx_handler
[   36.987730][ T3629] +}[@ (3629) used greatest stack depth: 10688 bytes left
[   37.050037][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.482624][ T3649] loop1: detected capacity change from 0 to 512
[   37.507307][ T3649] EXT4-fs: Ignoring removed mblk_io_submit option
[   37.529370][ T3649] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   37.551737][ T3649] EXT4-fs (loop1): 1 truncate cleaned up
[   37.557805][ T3649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.616391][ T3657] loop2: detected capacity change from 0 to 512
[   37.627037][ T3661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3661 comm=syz.3.66
[   37.650215][ T3657] journal_path: Non-blockdev passed as './file1'
[   37.656646][ T3657] EXT4-fs: error: could not find journal device path
[   37.679303][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.688397][ T3667] loop0: detected capacity change from 0 to 512
[   37.698032][ T3666] loop4: detected capacity change from 0 to 512
[   37.711223][ T3667] journal_path: Non-blockdev passed as './file1'
[   37.717706][ T3667] EXT4-fs: error: could not find journal device path
[   37.733448][ T3666] EXT4-fs: Ignoring removed mblk_io_submit option
[   37.758521][ T3666] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   37.765187][ T3669] loop1: detected capacity change from 0 to 512
[   37.775585][ T3666] EXT4-fs (loop4): 1 truncate cleaned up
[   37.781934][ T3666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.801797][   T29] kauditd_printk_skb: 318 callbacks suppressed
[   37.801812][   T29] audit: type=1400 audit(1757916709.454:407): avc:  denied  { mount } for  pid=3670 comm="syz.2.71" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   37.860372][   T29] audit: type=1400 audit(1757916709.454:408): avc:  denied  { connect } for  pid=3674 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   37.872473][ T3675] batadv1: entered promiscuous mode
[   37.888216][ T3669] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.67: bg 0: block 393: padding at end of block bitmap is not set
[   37.911426][ T3669] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   37.944384][ T3669] EXT4-fs (loop1): 2 truncates cleaned up
[   37.957589][ T3669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.109893][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.141559][ T3687] loop0: detected capacity change from 0 to 512
[   38.202645][ T3690] netlink: 'syz.2.75': attribute type 10 has an invalid length.
[   38.211898][ T3690] team0: Device ipvlan0 failed to register rx_handler
[   38.471415][ T3687] EXT4-fs: Ignoring removed mblk_io_submit option
[   38.507587][ T3687] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   38.576213][ T3687] EXT4-fs (loop0): 1 truncate cleaned up
[   38.615900][ T3687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.666630][ T3699] loop3: detected capacity change from 0 to 2048
[   38.721952][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.732585][ T3699] EXT4-fs: Ignoring removed i_version option
[   38.744333][ T3699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.745566][ T3699] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.138361][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.160595][ T3728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3728 comm=syz.4.79
[   39.166491][ T3690] syz.2.75 (3690) used greatest stack depth: 10656 bytes left
[   39.248022][ T3734] loop0: detected capacity change from 0 to 512
[   39.272508][ T3734] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.80: bg 0: block 393: padding at end of block bitmap is not set
[   39.288048][ T3734] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   39.304489][ T3734] EXT4-fs (loop0): 2 truncates cleaned up
[   39.320543][ T3734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.401394][ T3737] loop2: detected capacity change from 0 to 512
[   39.448200][   T29] audit: type=1400 audit(1757916711.084:409): avc:  denied  { read } for  pid=3745 comm="syz.4.84" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   39.471043][   T29] audit: type=1400 audit(1757916711.084:410): avc:  denied  { open } for  pid=3745 comm="syz.4.84" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   39.494228][   T29] audit: type=1326 audit(1757916711.084:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3745 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1caeeba9 code=0x7ffc0000
[   39.517398][   T29] audit: type=1326 audit(1757916711.084:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3745 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f1caeeba9 code=0x7ffc0000
[   39.540811][   T29] audit: type=1326 audit(1757916711.084:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3745 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1caeeba9 code=0x7ffc0000
[   39.564069][   T29] audit: type=1326 audit(1757916711.084:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3745 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5f1caeeba9 code=0x7ffc0000
[   39.587237][   T29] audit: type=1326 audit(1757916711.084:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3745 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1caeeba9 code=0x7ffc0000
[   39.597519][ T3737] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   39.610438][   T29] audit: type=1326 audit(1757916711.084:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3745 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1caeeba9 code=0x7ffc0000
[   39.712676][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.721720][ T3750] loop4: detected capacity change from 0 to 512
[   39.734623][ T3750] journal_path: Non-blockdev passed as './file1'
[   39.737477][ T3754] netlink: 'syz.1.88': attribute type 13 has an invalid length.
[   39.741017][ T3750] EXT4-fs: error: could not find journal device path
[   39.830614][ T3737] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   39.889616][ T3760] loop4: detected capacity change from 0 to 512
[   39.896577][ T3754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   39.901229][ T3760] journal_path: Non-blockdev passed as './file1'
[   39.916677][ T3737] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.81: bg 0: block 248: padding at end of block bitmap is not set
[   39.918362][ T3760] EXT4-fs: error: could not find journal device path
[   39.951387][ T3765] loop0: detected capacity change from 0 to 512
[   40.009117][ T3765] EXT4-fs: Ignoring removed mblk_io_submit option
[   40.015988][ T3765] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   40.029759][ T3765] EXT4-fs (loop0): 1 truncate cleaned up
[   40.036015][ T3765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.051386][ T3767] loop1: detected capacity change from 0 to 512
[   40.052044][ T3737] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.81: Failed to acquire dquot type 1
[   40.076536][ T3767] EXT4-fs: Ignoring removed mblk_io_submit option
[   40.083899][ T3767] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   40.106316][ T3770] loop4: detected capacity change from 0 to 512
[   40.137392][ T3770] EXT4-fs: Ignoring removed mblk_io_submit option
[   40.142421][ T3767] EXT4-fs (loop1): 1 truncate cleaned up
[   40.158624][ T3737] EXT4-fs (loop2): 1 truncate cleaned up
[   40.189385][ T3770] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   40.200160][ T3767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.211430][ T3737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   40.235798][ T3770] EXT4-fs (loop4): 1 truncate cleaned up
[   40.249585][ T3770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.328709][ T3731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.81'.
[   40.337948][ T3731] netem: change failed
[   40.629357][ T3737] syz.2.81 (3737) used greatest stack depth: 9200 bytes left
[   40.727764][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   40.890800][ T3779] loop2: detected capacity change from 0 to 512
[   40.892659][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.897545][ T3779] journal_path: Non-blockdev passed as './file1'
[   40.912616][ T3779] EXT4-fs: error: could not find journal device path
[   40.917928][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.985698][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.002554][ T3783] loop2: detected capacity change from 0 to 512
[   41.039505][ T3783] journal_path: Non-blockdev passed as './file1'
[   41.045942][ T3783] EXT4-fs: error: could not find journal device path
[   41.212137][ T3793] netlink: 'syz.0.97': attribute type 10 has an invalid length.
[   41.219864][ T3793] ipvlan0: entered allmulticast mode
[   41.225161][ T3793] veth0_vlan: entered allmulticast mode
[   41.232239][ T3793] team0: Device ipvlan0 failed to register rx_handler
[   41.527537][ T3802] loop1: detected capacity change from 0 to 512
[   41.546307][ T3802] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.104: bg 0: block 393: padding at end of block bitmap is not set
[   41.575574][ T3802] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   41.597227][ T3802] EXT4-fs (loop1): 2 truncates cleaned up
[   41.610842][ T3802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.899901][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.062813][ T3807] loop4: detected capacity change from 0 to 512
[   42.079686][ T3807] EXT4-fs: Ignoring removed mblk_io_submit option
[   42.096607][ T3807] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   42.118944][ T3807] EXT4-fs (loop4): 1 truncate cleaned up
[   42.126507][ T3807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.174951][ T3812] loop2: detected capacity change from 0 to 512
[   42.181575][ T3812] journal_path: Non-blockdev passed as './file1'
[   42.187935][ T3812] EXT4-fs: error: could not find journal device path
[   42.219958][ T3810] netlink: 'syz.1.105': attribute type 4 has an invalid length.
[   42.254095][ T3814] loop0: detected capacity change from 0 to 512
[   42.262965][ T3810] netlink: 'syz.1.105': attribute type 4 has an invalid length.
[   42.280128][ T3814] journal_path: Non-blockdev passed as './file1'
[   42.286495][ T3814] EXT4-fs: error: could not find journal device path
[   42.443951][ T3820] loop2: detected capacity change from 0 to 512
[   42.456271][ T3822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.112'.
[   42.463744][ T3820] journal_path: Non-blockdev passed as './file1'
[   42.471601][ T3820] EXT4-fs: error: could not find journal device path
[   42.579984][ T3830] loop2: detected capacity change from 0 to 1024
[   42.588239][ T3830] =======================================================
[   42.588239][ T3830] WARNING: The mand mount option has been deprecated and
[   42.588239][ T3830]          and is ignored by this kernel. Remove the mand
[   42.588239][ T3830]          option from the mount to silence this warning.
[   42.588239][ T3830] =======================================================
[   42.663289][ T3830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.714809][ T3830] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.115: Allocating blocks 385-513 which overlap fs metadata
[   42.811695][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.813310][ T3830] EXT4-fs (loop2): pa ffff8881076573f0: logic 16, phys. 129, len 24
[   42.828928][ T3830] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[   42.853347][ T3843] loop3: detected capacity change from 0 to 512
[   42.872682][ T3843] EXT4-fs: Ignoring removed mblk_io_submit option
[   42.891459][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.914144][ T3843] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   42.931117][   T29] kauditd_printk_skb: 99 callbacks suppressed
[   42.931131][   T29] audit: type=1400 audit(1757916714.584:514): avc:  denied  { create } for  pid=3844 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   42.966456][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.986003][ T3843] EXT4-fs (loop3): 1 truncate cleaned up
[   43.016537][ T3843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.029316][ T3849] loop4: detected capacity change from 0 to 512
[   43.029575][ T3849] journal_path: Non-blockdev passed as './file1'
[   43.029609][ T3849] EXT4-fs: error: could not find journal device path
[   43.065276][ T3855] netlink: 'syz.1.124': attribute type 13 has an invalid length.
[   43.097585][ T3855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   43.100202][ T3857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.125'.
[   43.115557][ T3857] team0 (unregistering): Port device team_slave_0 removed
[   43.120723][ T3857] team0 (unregistering): Port device team_slave_1 removed
[   43.230840][ T3863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.126'.
[   43.231239][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.253662][ T3865] loop4: detected capacity change from 0 to 512
[   43.260311][   T29] audit: type=1400 audit(1757916714.924:515): avc:  denied  { bind } for  pid=3862 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   43.291768][   T29] audit: type=1326 audit(1757916714.944:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efab2eba9 code=0x7ffc0000
[   43.325354][   T29] audit: type=1326 audit(1757916714.974:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2efab2eba9 code=0x7ffc0000
[   43.348688][   T29] audit: type=1326 audit(1757916714.974:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efab2eba9 code=0x7ffc0000
[   43.372058][   T29] audit: type=1326 audit(1757916714.974:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2efab2eba9 code=0x7ffc0000
[   43.395364][   T29] audit: type=1326 audit(1757916714.974:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efab2eba9 code=0x7ffc0000
[   43.418831][   T29] audit: type=1326 audit(1757916714.974:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efab2eba9 code=0x7ffc0000
[   43.442197][   T29] audit: type=1326 audit(1757916714.974:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2efab2eba9 code=0x7ffc0000
[   43.465665][   T29] audit: type=1326 audit(1757916714.974:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efab2eba9 code=0x7ffc0000
[   43.521880][ T3876] bridge0: entered allmulticast mode
[   43.527510][ T3876] IPVS: length: 4096 != 8
[   43.552386][ T3880] loop2: detected capacity change from 0 to 1024
[   43.580577][ T3880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.580665][ T3885] loop3: detected capacity change from 0 to 512
[   43.582656][ T3885] EXT4-fs: Ignoring removed mblk_io_submit option
[   43.601250][ T3880] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.133: Allocating blocks 385-513 which overlap fs metadata
[   43.620878][ T3885] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   43.653033][ T3880] EXT4-fs (loop2): pa ffff888107657460: logic 16, phys. 129, len 24
[   43.653721][ T3889] netlink: 96 bytes leftover after parsing attributes in process `syz.1.136'.
[   43.661098][ T3880] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[   43.670039][ T3889] FAULT_INJECTION: forcing a failure.
[   43.670039][ T3889] name failslab, interval 1, probability 0, space 0, times 1
[   43.683004][ T3885] EXT4-fs (loop3): 1 truncate cleaned up
[   43.692649][ T3889] CPU: 1 UID: 0 PID: 3889 Comm: syz.1.136 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   43.692749][ T3889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   43.692764][ T3889] Call Trace:
[   43.692773][ T3889]  <TASK>
[   43.692782][ T3889]  __dump_stack+0x1d/0x30
[   43.692807][ T3889]  dump_stack_lvl+0xe8/0x140
[   43.692831][ T3889]  dump_stack+0x15/0x1b
[   43.692891][ T3889]  should_fail_ex+0x265/0x280
[   43.692921][ T3889]  should_failslab+0x8c/0xb0
[   43.692952][ T3889]  kmem_cache_alloc_node_noprof+0x57/0x320
[   43.693059][ T3889]  ? __alloc_skb+0x101/0x320
[   43.693087][ T3889]  __alloc_skb+0x101/0x320
[   43.693111][ T3889]  ? __rcu_read_unlock+0x4f/0x70
[   43.693149][ T3889]  __neigh_notify+0x5b/0x110
[   43.693241][ T3889]  __neigh_update+0x10f4/0x15d0
[   43.693283][ T3889]  neigh_add+0x879/0xa70
[   43.693387][ T3889]  ? __pfx_neigh_add+0x10/0x10
[   43.693412][ T3889]  rtnetlink_rcv_msg+0x65a/0x6d0
[   43.693455][ T3889]  netlink_rcv_skb+0x120/0x220
[   43.693529][ T3889]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   43.693579][ T3889]  rtnetlink_rcv+0x1c/0x30
[   43.693633][ T3889]  netlink_unicast+0x5c0/0x690
[   43.693663][ T3889]  netlink_sendmsg+0x58b/0x6b0
[   43.693737][ T3889]  ? __pfx_netlink_sendmsg+0x10/0x10
[   43.693771][ T3889]  __sock_sendmsg+0x142/0x180
[   43.693811][ T3889]  __sys_sendto+0x268/0x330
[   43.693848][ T3889]  __x64_sys_sendto+0x76/0x90
[   43.693940][ T3889]  x64_sys_call+0x2d05/0x2ff0
[   43.693958][ T3889]  do_syscall_64+0xd2/0x200
[   43.694047][ T3889]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   43.694077][ T3889]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   43.694104][ T3889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.694132][ T3889] RIP: 0033:0x7f9e60d3eba9
[   43.694152][ T3889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.694249][ T3889] RSP: 002b:00007f9e5f79f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   43.694270][ T3889] RAX: ffffffffffffffda RBX: 00007f9e60f85fa0 RCX: 00007f9e60d3eba9
[   43.694285][ T3889] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000003
[   43.694300][ T3889] RBP: 00007f9e5f79f090 R08: 0000000000000000 R09: 0000000000000000
[   43.694314][ T3889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.694329][ T3889] R13: 00007f9e60f86038 R14: 00007f9e60f85fa0 R15: 00007ffe67b471a8
[   43.694351][ T3889]  </TASK>
[   43.875722][ T3894] loop1: detected capacity change from 0 to 512
[   43.885525][ T3885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.919374][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.925794][ T3894] EXT4-fs: Ignoring removed mblk_io_submit option
[   43.973026][ T3896] 9pnet_fd: Insufficient options for proto=fd
[   43.979540][ T3894] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   43.997835][ T3894] EXT4-fs (loop1): 1 truncate cleaned up
[   44.004906][ T3894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.038837][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.237440][ T3920] loop0: detected capacity change from 0 to 512
[   44.246943][ T3920] journal_path: Non-blockdev passed as './file1'
[   44.253353][ T3920] EXT4-fs: error: could not find journal device path
[   44.256651][ T3922] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.151'.
[   44.307239][ T3922] Zero length message leads to an empty skb
[   44.323038][ T3929] FAULT_INJECTION: forcing a failure.
[   44.323038][ T3929] name failslab, interval 1, probability 0, space 0, times 0
[   44.335779][ T3929] CPU: 1 UID: 0 PID: 3929 Comm: syz.1.153 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   44.335811][ T3929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   44.335826][ T3929] Call Trace:
[   44.335833][ T3929]  <TASK>
[   44.335841][ T3929]  __dump_stack+0x1d/0x30
[   44.335866][ T3929]  dump_stack_lvl+0xe8/0x140
[   44.335885][ T3929]  dump_stack+0x15/0x1b
[   44.335901][ T3929]  should_fail_ex+0x265/0x280
[   44.335936][ T3929]  ? legacy_init_fs_context+0x31/0x80
[   44.335966][ T3929]  should_failslab+0x8c/0xb0
[   44.335997][ T3929]  __kmalloc_cache_noprof+0x4c/0x320
[   44.336062][ T3929]  legacy_init_fs_context+0x31/0x80
[   44.336091][ T3929]  alloc_fs_context+0x3ef/0x4e0
[   44.336119][ T3929]  fs_context_for_mount+0x22/0x30
[   44.336160][ T3929]  do_new_mount+0xe9/0x5e0
[   44.336209][ T3929]  ? security_capable+0x83/0x90
[   44.336241][ T3929]  path_mount+0x4a4/0xb20
[   44.336265][ T3929]  ? user_path_at+0x109/0x130
[   44.336305][ T3929]  __se_sys_mount+0x28f/0x2e0
[   44.336334][ T3929]  ? fput+0x8f/0xc0
[   44.336460][ T3929]  __x64_sys_mount+0x67/0x80
[   44.336549][ T3929]  x64_sys_call+0x2b4d/0x2ff0
[   44.336577][ T3929]  do_syscall_64+0xd2/0x200
[   44.336667][ T3929]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   44.336698][ T3929]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   44.336768][ T3929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.336794][ T3929] RIP: 0033:0x7f9e60d3eba9
[   44.336811][ T3929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   44.336831][ T3929] RSP: 002b:00007f9e5f79f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   44.336852][ T3929] RAX: ffffffffffffffda RBX: 00007f9e60f85fa0 RCX: 00007f9e60d3eba9
[   44.336866][ T3929] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000
[   44.336880][ T3929] RBP: 00007f9e5f79f090 R08: 0000200000000240 R09: 0000000000000000
[   44.336894][ T3929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   44.336984][ T3929] R13: 00007f9e60f86038 R14: 00007f9e60f85fa0 R15: 00007ffe67b471a8
[   44.337004][ T3929]  </TASK>
[   44.588511][ T3932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3932 comm=syz.4.155
[   44.612735][ T3932] netlink: 36 bytes leftover after parsing attributes in process `syz.4.155'.
[   44.660484][ T3937] loop0: detected capacity change from 0 to 512
[   44.668514][ T3937] EXT4-fs: Ignoring removed mblk_io_submit option
[   44.696122][ T3937] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   44.702004][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.725889][ T3937] EXT4-fs (loop0): 1 truncate cleaned up
[   44.727436][ T3940] IPVS: Error connecting to the multicast addr
[   44.732314][ T3937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.769756][ T3940] bond1: entered promiscuous mode
[   44.774824][ T3940] bond1: entered allmulticast mode
[   44.780285][ T3940] 8021q: adding VLAN 0 to HW filter on device bond1
[   44.794379][ T3940] bond1 (unregistering): Released all slaves
[   44.803767][ T3948] FAULT_INJECTION: forcing a failure.
[   44.803767][ T3948] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   44.816933][ T3948] CPU: 1 UID: 0 PID: 3948 Comm: syz.3.159 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   44.816958][ T3948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   44.816969][ T3948] Call Trace:
[   44.816990][ T3948]  <TASK>
[   44.816997][ T3948]  __dump_stack+0x1d/0x30
[   44.817022][ T3948]  dump_stack_lvl+0xe8/0x140
[   44.817068][ T3948]  dump_stack+0x15/0x1b
[   44.817089][ T3948]  should_fail_ex+0x265/0x280
[   44.817119][ T3948]  should_fail+0xb/0x20
[   44.817141][ T3948]  should_fail_usercopy+0x1a/0x20
[   44.817226][ T3948]  _copy_from_iter+0xd2/0xe80
[   44.817256][ T3948]  ? __build_skb_around+0x1a0/0x200
[   44.817281][ T3948]  ? __alloc_skb+0x223/0x320
[   44.817305][ T3948]  netlink_sendmsg+0x471/0x6b0
[   44.817353][ T3948]  ? __pfx_netlink_sendmsg+0x10/0x10
[   44.817380][ T3948]  __sock_sendmsg+0x142/0x180
[   44.817454][ T3948]  ____sys_sendmsg+0x31e/0x4e0
[   44.817484][ T3948]  ___sys_sendmsg+0x17b/0x1d0
[   44.817525][ T3948]  __x64_sys_sendmsg+0xd4/0x160
[   44.817593][ T3948]  x64_sys_call+0x191e/0x2ff0
[   44.817615][ T3948]  do_syscall_64+0xd2/0x200
[   44.817649][ T3948]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   44.817674][ T3948]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   44.817772][ T3948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.817868][ T3948] RIP: 0033:0x7ffac9eeeba9
[   44.817931][ T3948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   44.817961][ T3948] RSP: 002b:00007ffac8957038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   44.817979][ T3948] RAX: ffffffffffffffda RBX: 00007ffaca135fa0 RCX: 00007ffac9eeeba9
[   44.817990][ T3948] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005
[   44.818071][ T3948] RBP: 00007ffac8957090 R08: 0000000000000000 R09: 0000000000000000
[   44.818110][ T3948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   44.818121][ T3948] R13: 00007ffaca136038 R14: 00007ffaca135fa0 R15: 00007ffc126bd5a8
[   44.818139][ T3948]  </TASK>
[   45.185246][ T3961] loop1: detected capacity change from 0 to 512
[   45.202290][ T3961] journal_path: Non-blockdev passed as './file1'
[   45.208742][ T3961] EXT4-fs: error: could not find journal device path
[   45.295155][ T3966] loop1: detected capacity change from 0 to 1024
[   45.310816][ T3966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.361565][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.585259][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.594738][ T3972] loop1: detected capacity change from 0 to 4096
[   45.616327][ T3972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.666895][ T3981] loop2: detected capacity change from 0 to 512
[   45.686618][ T3981] journal_path: Non-blockdev passed as './file1'
[   45.693111][ T3981] EXT4-fs: error: could not find journal device path
[   45.710562][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.754332][ T3989] loop1: detected capacity change from 0 to 512
[   45.766376][ T3989] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.176: bg 0: block 393: padding at end of block bitmap is not set
[   45.781025][ T3989] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   45.815125][ T3989] EXT4-fs (loop1): 2 truncates cleaned up
[   45.822533][ T3989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.860974][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.927674][ T4008] loop2: detected capacity change from 0 to 512
[   45.934382][ T4008] EXT4-fs: Ignoring removed mblk_io_submit option
[   45.941872][ T4008] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   45.977454][ T4008] EXT4-fs (loop2): 1 truncate cleaned up
[   45.983581][ T4008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.995485][ T4011] SELinux:  Context Ü is not valid (left unmapped).
[   46.032374][ T4013] loop1: detected capacity change from 0 to 2048
[   46.124402][ T3294]  loop1: unable to read partition table
[   46.133992][ T4017] loop3: detected capacity change from 0 to 512
[   46.136490][ T3294] loop1: partition table beyond EOD, truncated
[   46.155195][ T4017] journal_path: Non-blockdev passed as './file1'
[   46.161716][ T4017] EXT4-fs: error: could not find journal device path
[   46.221652][ T4023] loop3: detected capacity change from 0 to 512
[   46.230345][ T4023] journal_path: Non-blockdev passed as './file1'
[   46.236748][ T4023] EXT4-fs: error: could not find journal device path
[   46.350809][ T4013]  loop1: unable to read partition table
[   46.356832][ T4013] loop1: partition table beyond EOD, truncated
[   46.363154][ T4013] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
[   46.541610][ T4014] ==================================================================
[   46.549767][ T4014] BUG: KCSAN: data-race in filemap_splice_read / page_cache_sync_ra
[   46.557784][ T4014] 
[   46.560227][ T4014] write to 0xffff888115c638e8 of 8 bytes by task 4018 on cpu 0:
[   46.567873][ T4014]  filemap_splice_read+0x4f4/0x740
[   46.573002][ T4014]  ext4_file_splice_read+0x8f/0xb0
[   46.578134][ T4014]  splice_direct_to_actor+0x26f/0x680
[   46.583525][ T4014]  do_splice_direct+0xda/0x150
[   46.588295][ T4014]  do_sendfile+0x380/0x650
[   46.592744][ T4014]  __x64_sys_sendfile64+0x105/0x150
[   46.597972][ T4014]  x64_sys_call+0x2bb0/0x2ff0
[   46.602668][ T4014]  do_syscall_64+0xd2/0x200
[   46.607207][ T4014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.613120][ T4014] 
[   46.615456][ T4014] read to 0xffff888115c638e8 of 8 bytes by task 4014 on cpu 1:
[   46.623011][ T4014]  page_cache_sync_ra+0x326/0x6c0
[   46.628070][ T4014]  filemap_get_pages+0x2d0/0x1150
[   46.633108][ T4014]  filemap_splice_read+0x3a9/0x740
[   46.638232][ T4014]  ext4_file_splice_read+0x8f/0xb0
[   46.643367][ T4014]  splice_direct_to_actor+0x26f/0x680
[   46.648760][ T4014]  do_splice_direct+0xda/0x150
[   46.653552][ T4014]  do_sendfile+0x380/0x650
[   46.658008][ T4014]  __x64_sys_sendfile64+0x105/0x150
[   46.663242][ T4014]  x64_sys_call+0x2bb0/0x2ff0
[   46.667925][ T4014]  do_syscall_64+0xd2/0x200
[   46.672458][ T4014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.678364][ T4014] 
[   46.680683][ T4014] value changed: 0x0000000000005b9a -> 0x0000000000005bd1
[   46.687793][ T4014] 
[   46.690116][ T4014] Reported by Kernel Concurrency Sanitizer on:
[   46.696273][ T4014] CPU: 1 UID: 0 PID: 4014 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) 
[   46.705474][ T4014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   46.715554][ T4014] ==================================================================
[   46.792437][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.