last executing test programs:

2.166963647s ago: executing program 4 (id=1973):
mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000180)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9p2000,version=9p2000.L,fscontext=', @ANYBLOB="120ddb4f2a337f81c4f61421db4c3b82b9d22878eb3f38b0803e247bd353baa137ae23caeedfc8216792b32e265b6ed9a6fabb39eca350395c1445b154955771c1189b33a848132ad8011338e7c659594ca4169cd622e4479c1f52c32149aac62ab7b90ef2270cf5e69c"])
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6c6f30303030308000000000000000332c7569643d00000000000000", @ANYRESHEX=0x0, @ANYBLOB="2c63727566742c6e6f636f6d70726553732c636865636bebd0656c617865642c6d6f726e2c6d61706b2ab63d6e6f726d616c2c0000000000005faf3338e8b1a8f5d2112028c227c3f8964862bb622b4e0e01d4f2893177171d258eae7bdf53531b9df1b2d16ba9ebf0aa3a9003598573906ea1abcf21fcdd6250e17e7d6486b9a6a29f635e9fbaf58b6bb8ae79023594df8ae748fc7c60863ce9685c3d443648817d34e2fe6cb43428"], 0x5, 0x550, &(0x7f0000000800)="$eJzs3d9u01YcwPGf+2dUYWPTNiFUFTiUTSpSCU4CQRFXnnOSGhw7sh3UXqGKpqgihYkyae3VuEGbtD0Et3uIPcLeBO0RmGwnbdrmD4Um6dj3E23nxD4+53dM5J/cxLYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx7LJp5gxxHa+xqvqzy4FfG7C+09+NQ8WAcUWM+D+Zm5NL6aJL3x6svhj/b1EW0ncLMhcXc7J3/uJX976ZmepsPyCgsdjZ3Xu63mo1X5xko+nRxTNuVe05oe/UrKpWTuirUrFo3lqphKriuDpcCyNdU3agrcgP1JJ9Q+VKpYLS2TW/4VXLlqs7C+/ezJtmUd3P1rUVhL536342tFcc13W8atImXh23uRt/EB84kYq0VVNqc6vVLCilzg8KMm6UGzaTuFF+WKO8mc/ncvl8rnindOeuac4cW2AeIe0W74z0k2zOTP5Di8k6zcM38FGm2vlfXHHEk4asiur5sqUsgfhS67O+rZP/v7+l98f4rMe43fm/k+UvHayelyT/X0nfXemX//vEMr7XjuzKnjyVdWlJS5ryYuIRjfdVFS2eOBKKL47UxEqWqPYSJSUpSlFMeSQrUpFQlFTEEVe0hLImoUSik0+ULYFosSQSXwJRsiS23BAlOSlJSQqiREtW1sSXhnhSlbJYSS+bspXs90LP6PaljXIDJrLfU35Ao5Pk/3NxtjePb0L+/7875SM48OHedfJ/f7PjiwYAAAAAAIyCkfz13UhO8y8ntYrjanPSYQEAAAAAgFOUfPO/EBfJ1/yXxeD8HwAAAACAT42RXGNniEhGrqa1zpVQ/BEAAAAAAIBPRPL9/5W4yMS1q2Jw/g8AAAAAwKfm16H32A/r54y//pEgmDVe1Ve/M7atuJ21PZ1uN320x6gyb1xod5IUxZn2O1svGO27X+7fBPNtu9jsF8fnyVLDME4hAPldrqVtrm2k5UZnTTrbTMVxddb23Xs5sawLU5FejX56tvWzJNP/zatdMGRzq9XMPn7e2khieRX38mq7fQPFY/dRHBDLy+R+C8k1Fz33/GxyIUY6rvFLOq7ZPf+pdPOpE4z5WhbTNouZtMwcnv9cPGYu22/2mTSK3JGZ97x75MAorqdtri9dT4seUeT7RhEPt9Vq5ruj+KB98R5RFIbti0InitmD4U8SBQBMyuaQLGQcT/wfcJTrm907o5xKdn8tS2mbpfnkwDoz3+OIbg47opsfmdf/nD36DKR+OTYe948jWfVNvMGbvuOGbt6Id+H0y+0f5eLO7t7Nre31J80nzWf5fKFo3jbNO3mZTabRLsg9AIAehj9jZ2gL4/aQs+qv939SkJXH8lxasiHLydUGyS8OunutftnuNdP1M4TlIWetB21zsjzkrC7T9aCX929bGMO/BAAA47PYOw+fKP8vDznvPpzLB58dd+dyAAAwGjp4e69drT/KlUo5K1rRKvDtBypwylWtHC/Sgb1ieVWt6oEf+bbvxpWHTlmHKmzU634QqYofqLofOqvJk99V+9Hvoa5ZXuTYYd3VVqiV7XuRZUeq7IS2qjd+cJ1wRQfxxp1nDNpW5PieCv1GYOusUqHWXQ2dsvYip+LEVU/VA6dmBWvqoe82alqVdWgHTj3ykw73x3K8ih/UrMj5QrIT3M8AAJwlO7t7T9dbreaLEVYmPUcAAHAYWRoAAAAAAAAAAAAAAAAAAAAAgLNvHNf/Tb7yd/oUATkr8fwHK3NnI4wTVqZE5AyEMcKKMaqeJ31kAjBq/wYAAP//YbxJJw==")
r4 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x2c020400)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, 0x0, r5, &(0x7f00000002c0)='./file0\x00', 0x115)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x85)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0xbca, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x100]}}, 0x5c)
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x6, &(0x7f0000ffc000/0x2000)=nil)

2.013286204s ago: executing program 1 (id=1977):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mr_alloc\x00', r0, 0x0, 0x7}, 0x69)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x5, 0x0)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000140)='./file0\x00', 0xa4000021)
close(r4)
r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0)
writev(r5, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe1, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x4f, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f0000000800)={'ip_vti0\x00', 0x0, 0x700, 0x700, 0x8, 0xb25, {{0x43, 0x4, 0x3, 0x4, 0x10c, 0x66, 0x0, 0x9f, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0x7f, [@multicast2, @rand_addr=0x64010102, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010102, @multicast1]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x8c, 0x0, 0x5, [0x96, 0x2, 0x7, 0x8]}, @timestamp={0x44, 0x28, 0x96, 0x0, 0x7, [0x1, 0x8, 0x80, 0x0, 0x200, 0xf9, 0x3307941b, 0x8, 0x9]}, @ssrr={0x89, 0x23, 0x60, [@empty, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @private=0xa010101, @loopback]}, @timestamp_addr={0x44, 0x1c, 0x3b, 0x1, 0x9, [{@broadcast, 0x10000000}, {@multicast2}, {@private=0xa010100, 0x7f}]}, @rr={0x7, 0x2b, 0x42, [@private=0xa010102, @multicast2, @broadcast, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010102, @rand_addr=0x64010100]}, @rr={0x7, 0x17, 0x30, [@dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010102, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x30}]}, @rr={0x7, 0xf, 0x15, [@remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x700, 0x10, 0x2, 0x2, {{0x13, 0x4, 0x3, 0x2, 0x4c, 0x64, 0x0, 0xf7, 0x2f, 0x0, @broadcast, @multicast1, {[@cipso={0x86, 0x2d, 0x1, [{0x0, 0xf, "cb70ffd2968483669e35dd0a0b"}, {0x7, 0x9, "3fcb9728f9464f"}, {0x2, 0x2}, {0x0, 0x9, "faf10ad62b373c"}, {0x5, 0x4, "efac"}]}, @generic={0x94, 0x7, "e9a4e23099"}, @end]}}}}})
getpeername$packet(r3, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x14)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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")
r6 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)

1.961632486s ago: executing program 4 (id=1978):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, 0x0, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)

1.930319917s ago: executing program 0 (id=1980):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x10000, 0x30)
flock(r5, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRESOCT], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000a00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010001007000fedbdf250e000000050038000000000008003c009600000005002a0000000000cdd48e10a6b3ca28df44f692406eb167044f4c4b20ccc9b9d5cc0017a68855907c64b7ff23af3ae3ecfc4909290bc6267c16ebb972c2ea455b4c63025fe4e7bf6427289244985885039a7a2bdc6a59fda2fbe2d4c56e020890b98719c86d5e0a287b064cd2bb753b7fb81dfc02fd794b7ef1456cd12b4d354d9e39e6ad1f54ab0c9ec2fcd3a7cfb3f254a77a56b87cda9d87058d4378def85a05a8a90abe88d91c1a9a1208e9c3b0ccfe7d"], 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7)
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x2940, 0x2, 0x10}, 0x18)
fcntl$setstatus(r7, 0x4, 0x44000)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x0, 0x4, 0x28, r5, 0x9}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x18)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r10, &(0x7f0000000900)="6ae4cab5c026"}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000001480)={[{@data_journal}]}, 0x1, 0x5ad, &(0x7f0000000180)="$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")

1.8474859s ago: executing program 2 (id=1982):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00"/13], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x34}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00010000000000000c00000000000000000000000000000000000000000000000200000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f4000020000000000000800000000000000000100000000000000440005007f000001000000000000000000000000000100003c"], 0xfc}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r4, 0x6)
syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

1.807142142s ago: executing program 2 (id=1984):
r0 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0xfffffffd, 0x1000, 0xfffffffe, 0xcb}, &(0x7f00000003c0)=<r1=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r0, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330)

1.722027806s ago: executing program 2 (id=1985):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18)
r1 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0xfffffffd, 0x1000, 0xfffffffe, 0xcb}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000000))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r1, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40))
r3 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x50, 0x2, 0x3, 0x402, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x14}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xd8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x18}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x400}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5, 0x1}}]}, 0x50}}, 0x20000000)

1.501943396s ago: executing program 3 (id=1986):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYRESDEC=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$isdn_base(0x22, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x80000}, 0x18)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a300000000059085d5f3488a0b57170c69dfb0657c7db881f44e44d333b10300a611200fffcecb7655bcd2354936a30df7f57f2545bb5e6c1843e0e36231c2a102c17089635ee8c8d5bc02f96b5ab55f68e151a43d8e52e03c3a57dfc33c1b34e14ac2c7d865d47549cfc754c42a544f35963bda9abf00d1f6d4cd567bd4de912fab3c404a3d7ad2b25"], 0x34}}, 0x0)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYRES16=r0, @ANYRES16=r5, @ANYRESDEC=r6], 0x14}, 0x1, 0x40030000000000}, 0x4004)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={'ip6tnl0\x00', {0x2, 0x4e21, @rand_addr=0x64010102}})
r7 = signalfd(r1, &(0x7f0000000380)={[0x8]}, 0x8)
sendmsg$SMC_PNETID_DEL(r7, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x9c, r5, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8050)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0x0, 0x6, 0x1, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8e}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x3}, 0x4)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r9}, &(0x7f0000000800), &(0x7f0000000840)=r10}, 0x20)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000000406010400000000000000000700000405000100070000000500010007000000010007000000053b010007f0ebbd1a84195b97797a31000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4004041}, 0x840)
socket(0x11, 0x6, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r12 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r12, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"})

1.382110551s ago: executing program 3 (id=1987):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)={0x38, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @binary="98d4c0b8fd27f3a45e44e813022bd729"}]}]}, 0x38}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x80, 0x4, 0xfe, 0x0, 0x8000, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x525404fa, 0x800}, 0x6025, 0x0, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58)

1.366248381s ago: executing program 2 (id=1988):
unshare(0x20000400)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c080}, 0x4004040)
syz_emit_ethernet(0x82, &(0x7f0000001bc0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0xfc}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010188, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x14}]}]}, 0x5c}}, 0x0)
r1 = socket(0x1e, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00'], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(0x0, r1)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000b40)={0x528, r3, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x13}}}}, [@NL80211_ATTR_TX_RATES={0x150, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xe, 0x5, 0x100, 0xfe2e, 0x4, 0x448a, 0x5]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0x8}, {0x1, 0x9}, {0x4, 0x1}, {0x6, 0x2}, {0x0, 0x1}, {0x3, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x7, 0x8}, {0x5, 0x4}, {0x7, 0x5}, {0x1, 0x1}, {0x3, 0x8}, {0x3, 0xa}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x2}, {0x4, 0x1}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0xa}, {0x5, 0x3}, {0x3, 0x3}, {0x0, 0xa}, {0x7, 0x4}, {0x2, 0x8}, {0x1, 0xa}, {0x6, 0x5}, {0x3, 0xa}, {0x1, 0x2}, {0x0, 0x2}, {0x5, 0xa}, {0x6, 0x1}, {0x1, 0x7}, {0x3, 0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x2, 0x4}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x6}, {0x5, 0x8}, {0x4, 0x4}, {0x4, 0x7}, {0x7, 0x8}, {0x2, 0x1}, {0x5, 0x9}, {0x0, 0x3}, {0x7, 0x3}, {0x2, 0x3}, {0x4, 0x4}, {0x5, 0x9}, {0x2, 0x8}, {0x6}, {0x3, 0x2}, {0x1, 0x4}, {0x5}]}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x3eb66f03d6b6e35e, 0x12, 0x12, 0x30, 0xb, 0xd5, 0x24, 0x18, 0x2f71fbd71b6afc28, 0x2, 0x12, 0x5, 0x3, 0x9, 0xc, 0x2, 0x6, 0x12, 0x1b]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x4, 0x1}, {0x7, 0x8}, {0x0, 0x8}, {0x4, 0x5}, {0x7, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x2, 0x6}, {0x1, 0x1}, {0x7, 0x4}, {0x2, 0x2}, {0x5, 0x5}, {0x6, 0x9}, {0x1, 0x6}, {0x2, 0xa}, {0x3, 0x9}, {0x2, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x1, 0x3}, {0x5, 0x4}, {0x0, 0x8}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x7}, {0x5}, {0x4, 0xa}, {0x7, 0x8}, {0x4, 0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x7, 0x6}, {0x7, 0x7}, {0x4, 0xa}, {0x3, 0x1}, {0x7, 0x8}, {0x5, 0x7}, {0x6, 0x6}, {0x3, 0x8}, {0x5, 0x1}, {0x0, 0x9}, {0x5, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {}, {0x3, 0x8}, {0x0, 0x9}, {0x2}, {0x7, 0x7}, {}, {0x0, 0x5}, {0x7, 0x9}, {0x1, 0x9}, {0x7, 0x8}, {0x5, 0x9}, {0x1, 0xa}, {0x4, 0x2}, {0x4, 0x7}, {0x7, 0x4}, {0x2, 0xa}, {0x1}, {0x0, 0x6}, {0x4, 0x6}, {}, {0x4, 0x8}]}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x5, 0x4}, {0x6, 0x1}, {0x0, 0x2}, {0x5, 0x7}, {0x3, 0x1e}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0x7}, {0x0, 0x3}, {0x6, 0x8}, {0x6}, {0x1, 0x8}, {0x1, 0x6}, {0x1, 0x9}, {0x2, 0x5}, {0x4, 0xa}, {0x4, 0x9}, {0x3, 0x9}, {0x1}, {0x4, 0xa}, {0x7, 0x6}, {0x4, 0x2}, {0x5, 0x8}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0x3}, {0x2, 0x3}, {0x3, 0x5}, {0x3, 0x6}, {0x1}, {0x2, 0x6}, {0x1, 0x5}, {0x0, 0x8}, {0x7, 0x5}, {0x5}, {0x5, 0x4}, {0x5}, {0x6, 0x8}, {0x0, 0x7}, {0x6, 0x4}, {0x7, 0x1}, {0x7, 0x6}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x7}, {0x6}, {0x1, 0x2}, {0x2, 0x7}, {0x2, 0x1}, {0x0, 0x3}, {0x2, 0x7}, {0x4, 0x4}, {0x2, 0x5}, {0x5, 0x1}, {0x6, 0x6}, {0x7, 0x2}, {0x7, 0x3}, {0x0, 0x2}, {0x2, 0x4}, {0x2, 0x7}, {0x1, 0x4}, {0x3}, {0x7, 0x1}, {0x3, 0x1}, {0x4, 0x6}, {0x1, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x1, 0x3, 0x508d, 0x8, 0x3, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x2ec, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xffff, 0x5, 0xd5d, 0x1, 0x6, 0x3, 0x4]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x9, 0x6, 0x1b, 0x3, 0x2, 0xc, 0xb, 0x16, 0x3, 0x1a, 0x9, 0x6c, 0x48, 0x30, 0x24, 0x30, 0x16, 0x30, 0x60, 0x4, 0x16, 0x12, 0xc, 0x6c, 0x48, 0x6, 0x48, 0x64, 0xa, 0x30, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3, 0x4, 0x3, 0x0, 0xc22, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1, 0x1, 0x5, 0x1, 0x9, 0x478]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x6, 0x4}, {0x2, 0x7}, {0x5, 0x9}, {0x5, 0x1}, {0x5, 0x2}, {0x4}, {0x6, 0x9}, {0x0, 0x2}, {0x6, 0x6}, {0x2, 0x9}, {0x3, 0x9}, {0x3}, {0x2}, {0x0, 0x5}, {0x5, 0x4}, {0x5, 0x2}, {0x6, 0x10}, {0x5, 0x1}, {0x6}, {0x7, 0x3}, {0x1, 0x4}, {0x1, 0x9}, {0x5, 0x3}, {0x4, 0x1}, {0x4}, {0x2, 0x7}, {0x6, 0xa}, {0x1, 0x4}, {0x7, 0xa}, {0x1, 0x7}, {0x7, 0x1}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x4}, {0x1, 0x3}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x3}, {0x6, 0x3}, {0x6, 0xa}, {0x0, 0x8}, {0x6, 0x5}, {0x5}, {0x1, 0x3}, {0x0, 0x9}, {0x3, 0x4}, {0x0, 0x1}, {0x0, 0x6}, {0x0, 0x6}, {0x5}, {0x1, 0x7}, {0x5, 0x1}, {0x0, 0x4}, {0x5, 0xa}, {0x5, 0x6}, {0x0, 0x1}, {0x6, 0x1}, {0x3, 0x2}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x3, 0x60, 0x4, 0x30, 0x3, 0x6, 0x3, 0x2, 0x4, 0x18, 0x18, 0x9, 0x9, 0x30, 0x48, 0xc, 0xc, 0x6c, 0x2, 0x30, 0x24, 0x36, 0x5, 0x30, 0x3, 0x5, 0x30, 0xc, 0x1, 0x16]}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x8}, {}, {0x7, 0x2}, {0x4, 0x8}, {0x5, 0x7}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x3}, {0x5, 0x5}, {0x2, 0x2}, {0x2, 0x8}, {0x3, 0x7}, {0x6, 0x5}, {0x3, 0x7}, {0x3, 0x6}, {0x2, 0x9}, {0x1}, {0x6, 0x8}, {0x4, 0xa}, {0x1, 0x4}, {0x4, 0x6}, {0x0, 0x9}, {0x6, 0x4}, {0x1, 0xa}, {0x4, 0x1}, {0x0, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x1, 0x3}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0x6, 0x1ff, 0x6, 0xfffc, 0x81]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x5, 0x1, 0x0, 0x6, 0x9, 0x70, 0x10]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1f, 0x7, 0x40, 0x9, 0x4, 0x3, 0x3ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x3, 0x3}, {0x3, 0x3}, {0x7, 0x6}, {0x7, 0x9}, {0x7, 0x1}, {0x0, 0x8}, {0x7, 0x9}, {0x4, 0x5}, {0x3, 0x8}, {0x2, 0x6}, {0x6, 0x4}, {0x0, 0x4}, {0x0, 0x6}, {0x5, 0x9}, {0x6, 0x9}, {0x3, 0x9}, {0x6, 0x1}, {0x6}, {0x7, 0xa}, {0x2, 0x4}, {0x1, 0x5}, {0x0, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x6, 0x6}, {0x4, 0x7}, {0x6, 0x5}, {0x5, 0x2}, {0x0, 0x2}, {0x1, 0x6}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x4}, {0x1, 0x8}, {0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x93, 0x92, 0x2, 0x9, 0x455c, 0x2c6, 0x8, 0x2]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0xffff, 0x9, 0x62a, 0x1, 0x400, 0x3]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x30, 0x16, 0x60, 0x6c, 0x12, 0xc, 0x6, 0x18, 0x1, 0x1b, 0x2, 0x24]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x1}, {0x7, 0x3}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x5}, {0x5, 0x3}, {0x3, 0x5}, {0x4, 0x3}, {0x4, 0x8}, {0x0, 0x3}, {0x6, 0x8}, {0x0, 0x9}, {0x1, 0x7}, {0x2, 0x9}, {0x5, 0x5}, {0x2, 0x8}, {0x2, 0x5}, {0x4, 0x7}, {0x5, 0x4}, {0x2, 0x6}, {0x2, 0x8}, {0x1, 0xa}, {0x6, 0x5}, {0x1, 0x1}, {0x0, 0x3}, {0x4}, {0x5, 0x7}, {0x0, 0x3}, {}, {0x1, 0x7}, {0x2, 0x11}, {0x0, 0x2}, {0x7, 0x9}, {0x3, 0x8}, {0x1, 0x7}, {0x5, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9f58, 0x9, 0x1, 0xf, 0x9, 0xc, 0x1, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x6, 0x8, 0x3, 0x7fff, 0x3, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x6, 0x5, 0x2, 0x2, 0x1, 0xc, 0x9, 0x1, 0x24, 0x12, 0x60, 0x12, 0x0, 0x24, 0x9, 0x16, 0x16, 0xc, 0x9, 0x5, 0x24, 0x4, 0x4, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x76b6, 0xff, 0x1, 0x99fb, 0x28a0, 0x1, 0x4, 0x647d]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0xb5, 0xdc, 0xcbdb, 0x4, 0x9, 0x9, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x3, 0x1b, 0x0, 0x3, 0x0, 0x36, 0x16, 0x41, 0x6, 0x60, 0x2, 0x24, 0x3, 0x48, 0x6c, 0x30, 0x2, 0x24, 0x3, 0x32, 0x8]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x16, 0x24, 0x24, 0x16, 0x6, 0x12, 0x12, 0x6c]}]}]}, @NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x1, 0x6, 0x0, 0x5, 0x2e, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2f, 0x7, 0x101, 0x7, 0x6, 0x7f, 0xf152, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x3, 0x7, 0x6, 0x7, 0x40, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x8271, 0x8, 0x8000, 0x101, 0x1, 0xd0]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x38, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1b9, 0xfffa, 0x5, 0x7, 0x2, 0x0, 0x1, 0xa0b]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x528}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xff}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
connect$tipc(r1, &(0x7f0000000040)=@id, 0x10)
shutdown(r1, 0x2)

1.312814923s ago: executing program 2 (id=1989):
mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000180)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9p2000,version=9p2000.L,fscontext=', @ANYBLOB="120ddb4f2a337f81c4f61421db4c3b82b9d22878eb3f38b0803e247bd353baa137ae23caeedfc8216792b32e265b6ed9a6fabb39eca350395c1445b154955771c1189b33a848132ad8011338e7c659594ca4169cd622e4479c1f52c32149aac62ab7b90ef2270cf5e69c"])
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6c6f30303030308000000000000000332c7569643d00000000000000", @ANYRESHEX=0x0, @ANYBLOB="2c63727566742c6e6f636f6d70726553732c636865636bebd0656c617865642c6d6f726e2c6d61706b2ab63d6e6f726d616c2c0000000000005faf3338e8b1a8f5d2112028c227c3f8964862bb622b4e0e01d4f2893177171d258eae7bdf53531b9df1b2d16ba9ebf0aa3a9003598573906ea1abcf21fcdd6250e17e7d6486b9a6a29f635e9fbaf58b6bb8ae79023594df8ae748fc7c60863ce9685c3d443648817d34e2fe6cb43428"], 0x5, 0x550, &(0x7f0000000800)="$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")
r4 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x2c020400)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, 0x0, r5, &(0x7f00000002c0)='./file0\x00', 0x115)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x85)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0xbca, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x100]}}, 0x5c)
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x6, &(0x7f0000ffc000/0x2000)=nil)

1.270027466s ago: executing program 3 (id=1990):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0xfffffff7, 0x0, 0x0, 0x40f00, 0xc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x2, 0x3}]}}, 0x0, 0x26, 0x0, 0x40000001}, 0x28)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5)
ioctl$TCSBRKP(r0, 0x5425, 0x5d)

1.192002029s ago: executing program 1 (id=1991):
r0 = socket$kcm(0x10, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x200}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5871, 0x2, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x5, 0x0, 0x1, 0xe, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000006c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000002c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x2, 0x3, 0x3, 0x3, 0xc, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x7, 0xff, 0x20, 0x0, @in6={0xa, 0x4e22, 0x1a54, @empty, 0xce}}, @sadb_address={0x5, 0x7, 0xff, 0x0, 0x0, @in6={0xa, 0x4e23, 0xf4e2, @remote, 0x3}}]}, 0x60}, 0x1, 0x7}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0x7}, 0x18)
r10 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r10, 0x2285, 0x0)
writev(r10, &(0x7f0000000080)=[{&(0x7f00000000c0)="01000000c00000005a90f57f07703aefe7364ebbee07022c2277ae2a00"/42, 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc25bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, r11, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000001380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000012c0)={0x90, r11, 0x10, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4044004}, 0x200000d0)

1.16774686s ago: executing program 2 (id=1992):
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000180))
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v3={0x3000000, [{0xc, 0x3}, {0x4, 0x300}]}, 0x18, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0)
ioctl$RTC_UIE_ON(r4, 0x7003)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42, 0x11a)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x8)
pwrite64(r6, &(0x7f0000000140), 0x0, 0xe7c)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc00000002000000000020"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1.077169704s ago: executing program 4 (id=1993):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x4e21, 0x0, @private2, 0x3ff}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000004400000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000500)=ANY=[@ANYBLOB="f586569cb427744a1902890c1fce6a71752c06581d485c1621e918c5945705383ec7835b6a6409000000000000000228095eff07500f9c564680d563d8a041d2951f0b423eec41014ad8508942a15f8380f43e92650706b4cc475e431d099aff5f7182aeca0c", @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c000380"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x10, 0x4)
socket$unix(0x1, 0x5, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0x1}, {0x0, 0xf}}, [@TCA_RATE={0x6, 0x5, {0xd, 0x10}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)={0x3c, r7, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}]}]}, 0x3c}}, 0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000240)={'veth1_vlan\x00', 0x90})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r8, 0x0, 0x51}, 0x18)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xd}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10)
close(r9)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0x1}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x0, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x9}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d7a833186395a913bc2cab06e80413656b1fdb113d21f970b298ed490e3b64f75cff6780b9def0352d62fc4813385440e0c51f34ec74c02a04788fccddb7b716bf6909913e9c9487d69145e54719fba0e1c098cb650cddce0ce8eb13ef5a8185d04a486b10907be5039f216297b7d4c7690232996945d84f58", @ANYRES16=r4, @ANYBLOB="00032bbd7000fedbdf2515000000"], 0x14}, 0x1, 0x0, 0x0, 0x40804}, 0x4000044)
bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000004"], 0xc)

1.076265194s ago: executing program 0 (id=1994):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000000000000000000000080004", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16], 0x38}}, 0x10)

1.041950935s ago: executing program 1 (id=1995):
r0 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0xfffffffd, 0x1000, 0xfffffffe, 0xcb}, &(0x7f00000003c0)=<r1=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r0, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330)

1.008675346s ago: executing program 0 (id=1996):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
io_setup(0x3, 0x0)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x24, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000010c0)=0x100, 0x4)
mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r2, 0x80000000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000580)={'wg1\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1000, 0x1)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r6=>0x0)
timer_settime(r6, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000)
keyctl$get_persistent(0x16, 0xee00, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000048002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x20000000)

1.007369267s ago: executing program 1 (id=1997):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYRESDEC=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$isdn_base(0x22, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x80000}, 0x18)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a300000000059085d5f3488a0b57170c69dfb0657c7db881f44e44d333b10300a611200fffcecb7655bcd2354936a30df7f57f2545bb5e6c1843e0e36231c2a102c17089635ee8c8d5bc02f96b5ab55f68e151a43d8e52e03c3a57dfc33c1b34e14ac2c7d865d47549cfc754c42a544f35963bda9abf00d1f6d4cd567bd4de912fab3c404a3d7ad2b25"], 0x34}}, 0x0)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYRES16=r0, @ANYRES16=r5, @ANYRESDEC=r6], 0x14}, 0x1, 0x40030000000000}, 0x4004)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={'ip6tnl0\x00', {0x2, 0x4e21, @rand_addr=0x64010102}})
r7 = signalfd(r1, &(0x7f0000000380)={[0x8]}, 0x8)
sendmsg$SMC_PNETID_DEL(r7, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x9c, r5, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8050)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0x0, 0x6, 0x1, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8e}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x3}, 0x4)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r9}, &(0x7f0000000800), &(0x7f0000000840)=r10}, 0x20)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000000406010400000000000000000700000405000100070000000500010007000000010007000000053b010007f0ebbd1a84195b97797a31000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4004041}, 0x840)
socket(0x11, 0x6, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r12 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r12, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"})

970.778889ms ago: executing program 1 (id=1998):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x10000, 0x30)
flock(r4, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r5=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRESOCT=r5], 0x50)
timerfd_create(0x8, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7)
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x2940, 0x2, 0x10}, 0x18)
fcntl$setstatus(r7, 0x4, 0x44000)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x0, 0x4, 0x28, r4, 0x9}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000900)="6ae4cab5c026"}, 0x20)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000001480)={[{@data_journal}]}, 0x1, 0x5ad, &(0x7f0000000180)="$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")

590.305145ms ago: executing program 4 (id=1999):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000200), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
gettid()
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c1590c9fe92c70409533a7acaf3d7072b144c5f5c963697b3ff9bea20eba159d251d57a1"], 0x4c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x300000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, 0x1404, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
fstat(r4, &(0x7f00000004c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x4}, 0x18)
recvmmsg(r5, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a4014"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004001)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

457.501621ms ago: executing program 3 (id=2000):
unshare(0x20000400)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c080}, 0x4004040)
syz_emit_ethernet(0x82, &(0x7f0000001bc0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0xfc}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010188, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x14}]}]}, 0x5c}}, 0x0)
r1 = socket(0x1e, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00'], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(0x0, r1)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000b40)={0x500, r3, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x13}}}}, [@NL80211_ATTR_TX_RATES={0x150, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xe, 0x5, 0x100, 0xfe2e, 0x4, 0x448a, 0x5]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0x8}, {0x1, 0x9}, {0x4, 0x1}, {0x6, 0x2}, {0x0, 0x1}, {0x3, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x7, 0x8}, {0x5, 0x4}, {0x7, 0x5}, {0x1, 0x1}, {0x3, 0x8}, {0x3, 0xa}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x2}, {0x4, 0x1}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0xa}, {0x5, 0x3}, {0x3, 0x3}, {0x0, 0xa}, {0x7, 0x4}, {0x2, 0x8}, {0x1, 0xa}, {0x6, 0x5}, {0x3, 0xa}, {0x1, 0x2}, {0x0, 0x2}, {0x5, 0xa}, {0x6, 0x1}, {0x1, 0x7}, {0x3, 0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x2, 0x4}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x6}, {0x5, 0x8}, {0x4, 0x4}, {0x4, 0x7}, {0x7, 0x8}, {0x2, 0x1}, {0x5, 0x9}, {0x0, 0x3}, {0x7, 0x3}, {0x2, 0x3}, {0x4, 0x4}, {0x5, 0x9}, {0x2, 0x8}, {0x6}, {0x3, 0x2}, {0x1, 0x4}, {0x5}]}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x3eb66f03d6b6e35e, 0x12, 0x12, 0x30, 0xb, 0xd5, 0x24, 0x18, 0x2f71fbd71b6afc28, 0x2, 0x12, 0x5, 0x3, 0x9, 0xc, 0x2, 0x6, 0x12, 0x1b]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x4, 0x1}, {0x7, 0x8}, {0x0, 0x8}, {0x4, 0x5}, {0x7, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x2, 0x6}, {0x1, 0x1}, {0x7, 0x4}, {0x2, 0x2}, {0x5, 0x5}, {0x6, 0x9}, {0x1, 0x6}, {0x2, 0xa}, {0x3, 0x9}, {0x2, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x1, 0x3}, {0x5, 0x4}, {0x0, 0x8}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x7}, {0x5}, {0x4, 0xa}, {0x7, 0x8}, {0x4, 0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x7, 0x6}, {0x7, 0x7}, {0x4, 0xa}, {0x3, 0x1}, {0x7, 0x8}, {0x5, 0x7}, {0x6, 0x6}, {0x3, 0x8}, {0x5, 0x1}, {0x0, 0x9}, {0x5, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {}, {0x3, 0x8}, {0x0, 0x9}, {0x2}, {0x7, 0x7}, {}, {0x0, 0x5}, {0x7, 0x9}, {0x1, 0x9}, {0x7, 0x8}, {0x5, 0x9}, {0x1, 0xa}, {0x4, 0x2}, {0x4, 0x7}, {0x7, 0x4}, {0x2, 0xa}, {0x1}, {0x0, 0x6}, {0x4, 0x6}, {}, {0x4, 0x8}]}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x5, 0x4}, {0x6, 0x1}, {0x0, 0x2}, {0x5, 0x7}, {0x3, 0x1e}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0x7}, {0x0, 0x3}, {0x6, 0x8}, {0x6}, {0x1, 0x8}, {0x1, 0x6}, {0x1, 0x9}, {0x2, 0x5}, {0x4, 0xa}, {0x4, 0x9}, {0x3, 0x9}, {0x1}, {0x4, 0xa}, {0x7, 0x6}, {0x4, 0x2}, {0x5, 0x8}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0x3}, {0x2, 0x3}, {0x3, 0x5}, {0x3, 0x6}, {0x1}, {0x2, 0x6}, {0x1, 0x5}, {0x0, 0x8}, {0x7, 0x5}, {0x5}, {0x5, 0x4}, {0x5}, {0x6, 0x8}, {0x0, 0x7}, {0x6, 0x4}, {0x7, 0x1}, {0x7, 0x6}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x7}, {0x6}, {0x1, 0x2}, {0x2, 0x7}, {0x2, 0x1}, {0x0, 0x3}, {0x2, 0x7}, {0x4, 0x4}, {0x2, 0x5}, {0x5, 0x1}, {0x6, 0x6}, {0x7, 0x2}, {0x7, 0x3}, {0x0, 0x2}, {0x2, 0x4}, {0x2, 0x7}, {0x1, 0x4}, {0x3}, {0x7, 0x1}, {0x3, 0x1}, {0x4, 0x6}, {0x1, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x1, 0x3, 0x508d, 0x8, 0x3, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x2ec, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xffff, 0x5, 0xd5d, 0x1, 0x6, 0x3, 0x4]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x9, 0x6, 0x1b, 0x3, 0x2, 0xc, 0xb, 0x16, 0x3, 0x1a, 0x9, 0x6c, 0x48, 0x30, 0x24, 0x30, 0x16, 0x30, 0x60, 0x4, 0x16, 0x12, 0xc, 0x6c, 0x48, 0x6, 0x48, 0x64, 0xa, 0x30, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3, 0x4, 0x3, 0x0, 0xc22, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1, 0x1, 0x5, 0x1, 0x9, 0x478]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x6, 0x4}, {0x2, 0x7}, {0x5, 0x9}, {0x5, 0x1}, {0x5, 0x2}, {0x4}, {0x6, 0x9}, {0x0, 0x2}, {0x6, 0x6}, {0x2, 0x9}, {0x3, 0x9}, {0x3}, {0x2}, {0x0, 0x5}, {0x5, 0x4}, {0x5, 0x2}, {0x6, 0x10}, {0x5, 0x1}, {0x6}, {0x7, 0x3}, {0x1, 0x4}, {0x1, 0x9}, {0x5, 0x3}, {0x4, 0x1}, {0x4}, {0x2, 0x7}, {0x6, 0xa}, {0x1, 0x4}, {0x7, 0xa}, {0x1, 0x7}, {0x7, 0x1}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x4}, {0x1, 0x3}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x3}, {0x6, 0x3}, {0x6, 0xa}, {0x0, 0x8}, {0x6, 0x5}, {0x5}, {0x1, 0x3}, {0x0, 0x9}, {0x3, 0x4}, {0x0, 0x1}, {0x0, 0x6}, {0x0, 0x6}, {0x5}, {0x1, 0x7}, {0x5, 0x1}, {0x0, 0x4}, {0x5, 0xa}, {0x5, 0x6}, {0x0, 0x1}, {0x6, 0x1}, {0x3, 0x2}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x3, 0x60, 0x4, 0x30, 0x3, 0x6, 0x3, 0x2, 0x4, 0x18, 0x18, 0x9, 0x9, 0x30, 0x48, 0xc, 0xc, 0x6c, 0x2, 0x30, 0x24, 0x36, 0x5, 0x30, 0x3, 0x5, 0x30, 0xc, 0x1, 0x16]}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x8}, {}, {0x7, 0x2}, {0x4, 0x8}, {0x5, 0x7}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x3}, {0x5, 0x5}, {0x2, 0x2}, {0x2, 0x8}, {0x3, 0x7}, {0x6, 0x5}, {0x3, 0x7}, {0x3, 0x6}, {0x2, 0x9}, {0x1}, {0x6, 0x8}, {0x4, 0xa}, {0x1, 0x4}, {0x4, 0x6}, {0x0, 0x9}, {0x6, 0x4}, {0x1, 0xa}, {0x4, 0x1}, {0x0, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x1, 0x3}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0x6, 0x1ff, 0x6, 0xfffc, 0x81]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x5, 0x1, 0x0, 0x6, 0x9, 0x70, 0x10]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1f, 0x7, 0x40, 0x9, 0x4, 0x3, 0x3ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x3, 0x3}, {0x3, 0x3}, {0x7, 0x6}, {0x7, 0x9}, {0x7, 0x1}, {0x0, 0x8}, {0x7, 0x9}, {0x4, 0x5}, {0x3, 0x8}, {0x2, 0x6}, {0x6, 0x4}, {0x0, 0x4}, {0x0, 0x6}, {0x5, 0x9}, {0x6, 0x9}, {0x3, 0x9}, {0x6, 0x1}, {0x6}, {0x7, 0xa}, {0x2, 0x4}, {0x1, 0x5}, {0x0, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x6, 0x6}, {0x4, 0x7}, {0x6, 0x5}, {0x5, 0x2}, {0x0, 0x2}, {0x1, 0x6}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x4}, {0x1, 0x8}, {0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x93, 0x92, 0x2, 0x9, 0x455c, 0x2c6, 0x8, 0x2]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0xffff, 0x9, 0x62a, 0x1, 0x400, 0x3]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x30, 0x16, 0x60, 0x6c, 0x12, 0xc, 0x6, 0x18, 0x1, 0x1b, 0x2, 0x24]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x1}, {0x7, 0x3}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x5}, {0x5, 0x3}, {0x3, 0x5}, {0x4, 0x3}, {0x4, 0x8}, {0x0, 0x3}, {0x6, 0x8}, {0x0, 0x9}, {0x1, 0x7}, {0x2, 0x9}, {0x5, 0x5}, {0x2, 0x8}, {0x2, 0x5}, {0x4, 0x7}, {0x5, 0x4}, {0x2, 0x6}, {0x2, 0x8}, {0x1, 0xa}, {0x6, 0x5}, {0x1, 0x1}, {0x0, 0x3}, {0x4}, {0x5, 0x7}, {0x0, 0x3}, {}, {0x1, 0x7}, {0x2, 0x11}, {0x0, 0x2}, {0x7, 0x9}, {0x3, 0x8}, {0x1, 0x7}, {0x5, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9f58, 0x9, 0x1, 0xf, 0x9, 0xc, 0x1, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x6, 0x8, 0x3, 0x7fff, 0x3, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x6, 0x5, 0x2, 0x2, 0x1, 0xc, 0x9, 0x1, 0x24, 0x12, 0x60, 0x12, 0x0, 0x24, 0x9, 0x16, 0x16, 0xc, 0x9, 0x5, 0x24, 0x4, 0x4, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x76b6, 0xff, 0x1, 0x99fb, 0x28a0, 0x1, 0x4, 0x647d]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0xb5, 0xdc, 0xcbdb, 0x4, 0x9, 0x9, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x3, 0x1b, 0x0, 0x3, 0x0, 0x36, 0x16, 0x41, 0x6, 0x60, 0x2, 0x24, 0x3, 0x48, 0x6c, 0x30, 0x2, 0x24, 0x3, 0x32, 0x8]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x16, 0x24, 0x24, 0x16, 0x6, 0x12, 0x12, 0x6c]}]}]}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2f, 0x7, 0x101, 0x7, 0x6, 0x7f, 0xf152, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x3, 0x7, 0x6, 0x7, 0x40, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x8271, 0x8, 0x8000, 0x101, 0x1, 0xd0]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x38, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1b9, 0xfffa, 0x5, 0x7, 0x2, 0x0, 0x1, 0xa0b]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x500}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xff}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
connect$tipc(r1, &(0x7f0000000040)=@id, 0x10)
shutdown(r1, 0x2)

385.950693ms ago: executing program 3 (id=2001):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x4004880)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xf802})
r2 = socket$netlink(0x10, 0x3, 0x0)
preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x2db, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x8000f, 0xa0002f6})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r0, 0x1)
syz_emit_ethernet(0x42, &(0x7f0000000100)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x3, 0x0, 0x34, 0x0, 0x0, 0x2, 0x4, 0x0, @empty, @multicast1, {[@generic={0x4af3dca665480ba0, 0x5, "3b6d1c"}, @noop, @generic={0x0, 0x2}]}}, {0x4e23, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0xffffffff}}}}}}, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x5, 0x9bf, 0x6, 0x1, 0x8, 0x1800, 0x2, 0x6, <r4=>0x0}, &(0x7f0000000140)=0x20)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r4, 0x6}, 0x8)

265.556159ms ago: executing program 4 (id=2002):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x37c, &(0x7f0000000ec0)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)

160.333323ms ago: executing program 3 (id=2003):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x2, 0x3}]}}, 0x0, 0x26, 0x0, 0x40000001}, 0x28)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0)
writev(r5, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5)

96.350566ms ago: executing program 0 (id=2004):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)={0x170, 0x1, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_LABELS_MASK={0xc, 0x17, [0x3ff, 0x0]}, @CTA_PROTOINFO={0x1c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x18, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x100000001}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x7}]}}, @CTA_SYNPROXY={0x54, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xb5b}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5a55}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x23}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xb}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x80000000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xd}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @CTA_NAT_SRC={0x58, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8001}, @CTA_FILTER={0x44, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x916}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd0}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x512}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x5b6}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x300}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40000}, 0x4)

78.479606ms ago: executing program 1 (id=2005):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x10000, 0x30)
flock(r4, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r5=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRESOCT=r5], 0x50)
timerfd_create(0x8, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000a00)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7)
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x2940, 0x2, 0x10}, 0x18)
fcntl$setstatus(r7, 0x4, 0x44000)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x0, 0x4, 0x28, r4, 0x9}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000900)="6ae4cab5c026"}, 0x20)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000001480)={[{@data_journal}]}, 0x1, 0x5ad, &(0x7f0000000180)="$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")

49.087198ms ago: executing program 4 (id=2006):
r0 = socket$kcm(0x10, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x200}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
getrlimit(0xe, &(0x7f00000002c0))
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5871, 0x2, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x5, 0x0, 0x1, 0xe, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000006c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x2, 0x3, 0x3, 0x3, 0xc, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x7, 0xff, 0x20, 0x0, @in6={0xa, 0x4e22, 0x1a54, @empty, 0xce}}, @sadb_address={0x5, 0x7, 0xff, 0x0, 0x0, @in6={0xa, 0x4e23, 0xf4e2, @remote, 0x3}}]}, 0x60}, 0x1, 0x7}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r6, 0x0, 0x7}, 0x18)
r9 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r9, 0x2285, 0x0)
writev(r9, &(0x7f0000000080)=[{&(0x7f00000000c0)="01000000c00000005a90f57f07703aefe7364ebbee07022c2277ae2a00"/42, 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc25bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, r10, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000001380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000012c0)={0x90, r10, 0x10, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4044004}, 0x200000d0)

31.900708ms ago: executing program 0 (id=2007):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000000000000000000000080004", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16], 0x38}}, 0x10)

0s ago: executing program 0 (id=2008):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x3, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

kernel console output (not intermixed with test programs):

r parsing attributes in process `syz.1.1382'.
[  149.886784][ T7445] EXT4-fs (loop0): 1 orphan inode deleted
[  149.923473][  T839] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  149.929030][ T7445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.937785][  T839] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0
[  149.996228][ T7445] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.996727][ T7445] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.1381: Invalid inode table block 1 in block_group 0
[  149.997029][ T7445] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  149.997773][ T7445] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz.0.1381: mark_inode_dirty error
[  150.041057][ T7451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  150.065670][ T7451] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.098759][ T7451] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1383: bg 0: block 112: padding at end of block bitmap is not set
[  150.165346][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  150.188426][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1385'.
[  150.202292][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1385'.
[  150.249484][ T7465] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  150.262699][ T7465] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  150.273801][ T7465] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  150.283973][ T7465] JBD2: no valid journal superblock found
[  150.289865][ T7465] EXT4-fs (loop1): Could not load journal inode
[  150.375276][ T7471] netlink: 'syz.4.1390': attribute type 30 has an invalid length.
[  150.617174][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.857049][ T7486] set_capacity_and_notify: 4 callbacks suppressed
[  150.857063][ T7486] loop2: detected capacity change from 0 to 1024
[  150.873590][ T7486] EXT4-fs: Ignoring removed bh option
[  150.879356][ T7486] EXT4-fs: inline encryption not supported
[  150.885886][ T7486] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  150.899679][ T7495] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1399'.
[  150.912432][ T7486] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  150.925543][ T7486] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.1396: lblock 2 mapped to illegal pblock 2 (length 1)
[  150.940101][ T7486] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.1396: lblock 0 mapped to illegal pblock 48 (length 1)
[  150.954509][ T7486] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1396: Failed to acquire dquot type 0
[  150.966177][ T7486] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  150.975909][ T7486] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.1396: mark_inode_dirty error
[  150.987612][ T7486] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  150.997889][ T7486] EXT4-fs (loop2): 1 orphan inode deleted
[  151.003963][ T7486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.016712][  T839] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  151.033391][  T839] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0
[  151.046270][ T7486] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.056000][ T7486] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.1396: Invalid inode table block 1 in block_group 0
[  151.067181][ T7500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1401'.
[  151.069541][ T7486] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  151.077639][ T7500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1401'.
[  151.087532][ T7486] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz.2.1396: mark_inode_dirty error
[  151.096004][ T7500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1401'.
[  151.129120][ T7500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1401'.
[  151.138183][ T7500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1401'.
[  151.147183][ T7500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1401'.
[  151.196598][   T29] kauditd_printk_skb: 1540 callbacks suppressed
[  151.196613][   T29] audit: type=1326 audit(1765370955.761:245692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa68a022005 code=0x7ffc0000
[  151.237910][   T29] audit: type=1326 audit(1765370955.761:245693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa68a022005 code=0x7ffc0000
[  151.261909][   T29] audit: type=1326 audit(1765370955.791:245694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa68a022005 code=0x7ffc0000
[  151.285894][   T29] audit: type=1326 audit(1765370955.791:245695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa689fe65e7 code=0x7ffc0000
[  151.309724][   T29] audit: type=1326 audit(1765370955.791:245696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa689f8b829 code=0x7ffc0000
[  151.333532][   T29] audit: type=1326 audit(1765370955.791:245697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa689fef749 code=0x7ffc0000
[  151.357333][   T29] audit: type=1326 audit(1765370955.791:245698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa68a022005 code=0x7ffc0000
[  151.381149][   T29] audit: type=1326 audit(1765370955.791:245699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa68a022005 code=0x7ffc0000
[  151.405025][   T29] audit: type=1326 audit(1765370955.791:245700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa68a022005 code=0x7ffc0000
[  151.428842][   T29] audit: type=1326 audit(1765370955.791:245701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa689fe65e7 code=0x7ffc0000
[  151.705089][ T7524] netlink: 'syz.2.1407': attribute type 30 has an invalid length.
[  151.706138][ T7526] netlink: 'syz.4.1408': attribute type 21 has an invalid length.
[  151.737793][ T7526] sg_write: 1 callbacks suppressed
[  151.737807][ T7526] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  151.737807][ T7526]    program syz.4.1408 not setting count and/or reply_len properly
[  151.889266][ T7522] loop0: detected capacity change from 0 to 1024
[  151.904406][ T7522] EXT4-fs: Ignoring removed bh option
[  151.914961][ T7522] EXT4-fs: inline encryption not supported
[  151.921757][ T7522] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  151.935287][ T7522] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  151.945145][ T7522] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.1406: lblock 2 mapped to illegal pblock 2 (length 1)
[  151.962970][ T7522] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.1406: lblock 0 mapped to illegal pblock 48 (length 1)
[  151.977724][ T7522] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1406: Failed to acquire dquot type 0
[  151.989635][ T7522] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  151.999619][ T7522] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.1406: mark_inode_dirty error
[  152.011434][ T7522] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  152.022073][ T7522] EXT4-fs (loop0): 1 orphan inode deleted
[  152.030256][ T7522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.042879][   T31] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  152.076017][   T31] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0
[  152.088667][ T7522] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.098534][ T7522] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.1406: Invalid inode table block 1 in block_group 0
[  152.127723][ T7522] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  152.147463][ T7522] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz.0.1406: mark_inode_dirty error
[  152.201022][ T7537] loop2: detected capacity change from 0 to 1024
[  152.207892][ T7537] EXT4-fs: Ignoring removed bh option
[  152.234194][ T7537] EXT4-fs: inline encryption not supported
[  152.240581][ T7537] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  152.254027][ T7537] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  152.264284][ T7537] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.1413: lblock 2 mapped to illegal pblock 2 (length 1)
[  152.285255][ T7537] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.1413: lblock 0 mapped to illegal pblock 48 (length 1)
[  152.307513][ T7537] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1413: Failed to acquire dquot type 0
[  152.319309][ T7537] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  152.321543][ T7557] netlink: 'syz.0.1421': attribute type 21 has an invalid length.
[  152.330857][ T7537] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.1413: mark_inode_dirty error
[  152.348694][ T7537] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  152.359159][ T7537] EXT4-fs (loop2): 1 orphan inode deleted
[  152.365539][ T7537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.368037][ T7557] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  152.368037][ T7557]    program syz.0.1421 not setting count and/or reply_len properly
[  152.395058][   T31] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  152.409931][   T31] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0
[  152.422581][ T7537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.434153][ T7537] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.1413: Invalid inode table block 1 in block_group 0
[  152.447505][ T7537] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  152.457380][ T7537] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz.2.1413: mark_inode_dirty error
[  152.502773][ T7559] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  152.994921][ T7583] netlink: 'syz.1.1432': attribute type 21 has an invalid length.
[  153.015962][ T7583] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  153.015962][ T7583]    program syz.1.1432 not setting count and/or reply_len properly
[  153.216415][ T7594] loop2: detected capacity change from 0 to 1024
[  153.231115][ T7594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  153.231198][ T7594] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.246678][ T7594] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1437: bg 0: block 112: padding at end of block bitmap is not set
[  153.279854][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  153.391674][ T7598] netlink: 'syz.2.1438': attribute type 30 has an invalid length.
[  153.473595][ T7588] loop4: detected capacity change from 0 to 1024
[  153.480662][ T7588] EXT4-fs: Ignoring removed bh option
[  153.499649][ T7588] EXT4-fs: inline encryption not supported
[  153.507451][ T7592] loop1: detected capacity change from 0 to 1024
[  153.515116][ T7588] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  153.526558][ T7592] EXT4-fs: Ignoring removed bh option
[  153.532092][ T7592] EXT4-fs: inline encryption not supported
[  153.551229][ T7588] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  153.567297][ T7592] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  153.588827][ T7588] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.1434: lblock 2 mapped to illegal pblock 2 (length 1)
[  153.608439][ T7607] loop2: detected capacity change from 0 to 1024
[  153.622336][ T7592] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  153.631961][ T7592] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.1436: lblock 2 mapped to illegal pblock 2 (length 1)
[  153.646033][ T7588] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.1434: lblock 0 mapped to illegal pblock 48 (length 1)
[  153.646207][ T7592] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.1436: lblock 0 mapped to illegal pblock 48 (length 1)
[  153.670070][ T7607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  153.674840][ T7592] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1436: Failed to acquire dquot type 0
[  153.686925][ T7607] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.708643][ T7588] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1434: Failed to acquire dquot type 0
[  153.721434][ T7588] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  153.731099][ T7588] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.1434: mark_inode_dirty error
[  153.735050][ T7607] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1441: bg 0: block 112: padding at end of block bitmap is not set
[  153.743608][ T7592] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  153.759857][ T7588] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  153.767682][ T7592] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.1436: mark_inode_dirty error
[  153.777070][ T7588] EXT4-fs (loop4): 1 orphan inode deleted
[  153.787893][ T7592] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  153.803667][ T7592] EXT4-fs (loop1): 1 orphan inode deleted
[  153.809550][   T31] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  153.810073][ T7592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.837882][ T7588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.851945][   T31] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0
[  153.865094][   T31] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  153.880179][   T31] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0
[  153.893595][ T7592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.893622][ T7588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.904845][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  153.921476][ T7592] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.1436: Invalid inode table block 1 in block_group 0
[  153.934888][ T7588] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.1434: Invalid inode table block 1 in block_group 0
[  153.953033][ T7588] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  153.959316][ T7592] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  153.964158][ T7620] SELinux: security_context_str_to_sid (�O*3���!�L;���(x�?8��>${�S��7�#����!g��.&[n٦��9�P9\E�T�Wq��3�H*�
8��YYL����G�R�!I��*���'��) failed with errno=-22
[  153.983371][ T7592] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz.1.1436: mark_inode_dirty error
[  154.000164][ T7588] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz.4.1434: mark_inode_dirty error
[  154.011576][ T7620] loop2: detected capacity change from 0 to 164
[  154.018288][ T7620] iso9660: Unknown parameter 'lo00000�'
[  154.136222][ T7622] netlink: 'syz.1.1448': attribute type 30 has an invalid length.
[  154.212773][ T7632] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  154.708321][ T7664] netlink: 'syz.1.1462': attribute type 30 has an invalid length.
[  154.813150][ T7669] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  155.059880][ T7681] netlink: 'syz.0.1469': attribute type 30 has an invalid length.
[  155.153959][ T7689] netlink: 'syz.3.1473': attribute type 21 has an invalid length.
[  155.154980][ T7690] __nla_validate_parse: 17 callbacks suppressed
[  155.154999][ T7690] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1470'.
[  155.161869][ T7689] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1473'.
[  155.168724][ T7692] SELinux: security_context_str_to_sid (�O*3���!�L;���(x�?8��>${�S��7�#����!g��.&[n٦��9�P9\E�T�Wq��3�H*�
8��YYL����G�R�!I��*���'��) failed with errno=-22
[  155.219689][ T7692] loop0: detected capacity change from 0 to 164
[  155.230854][ T7692] iso9660: Unknown parameter 'lo00000�'
[  155.280788][ T7689] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  155.280788][ T7689]    program syz.3.1473 not setting count and/or reply_len properly
[  155.343348][ T7702] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  155.441100][ T7709] loop0: detected capacity change from 0 to 1024
[  155.461313][ T7709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  155.461529][ T7709] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.475391][ T7709] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1481: bg 0: block 112: padding at end of block bitmap is not set
[  155.501740][ T7714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1482'.
[  155.519199][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  155.645867][ T7721] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1484'.
[  155.655879][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1484'.
[  155.658979][ T7720] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  155.676066][ T7720] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  155.676158][ T7720] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  155.677037][ T7720] JBD2: no valid journal superblock found
[  155.677049][ T7720] EXT4-fs (loop0): Could not load journal inode
[  156.042645][ T7728] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  156.044009][ T7726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1486'.
[  156.185358][ T7735] set_capacity_and_notify: 1 callbacks suppressed
[  156.185439][ T7735] loop1: detected capacity change from 0 to 1024
[  156.200516][ T7735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  156.200638][ T7735] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.207381][ T7735] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1489: bg 0: block 112: padding at end of block bitmap is not set
[  156.255969][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  156.300254][ T7740] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  156.447059][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1493'.
[  156.490043][   T29] kauditd_printk_skb: 861 callbacks suppressed
[  156.490066][   T29] audit: type=1326 audit(1765370961.051:246551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa689fef749 code=0x7ffc0000
[  156.520135][   T29] audit: type=1326 audit(1765370961.051:246552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa689fef749 code=0x7ffc0000
[  156.520487][ T7751] loop0: detected capacity change from 0 to 256
[  156.590552][ T7756] loop3: detected capacity change from 0 to 128
[  156.596589][   T29] audit: type=1326 audit(1765370961.051:246553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa689fef749 code=0x7ffc0000
[  156.611728][ T7751] FAT-fs (loop0): Directory bread(block 64) failed
[  156.620477][   T29] audit: type=1326 audit(1765370961.051:246554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa689fef783 code=0x7ffc0000
[  156.650954][   T29] audit: type=1326 audit(1765370961.051:246555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa689fee1ff code=0x7ffc0000
[  156.667641][ T7751] FAT-fs (loop0): Directory bread(block 65) failed
[  156.674480][   T29] audit: type=1326 audit(1765370961.051:246556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa689fef7d7 code=0x7ffc0000
[  156.704970][   T29] audit: type=1326 audit(1765370961.091:246557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa689fedf90 code=0x7ffc0000
[  156.711509][ T7751] FAT-fs (loop0): Directory bread(block 66) failed
[  156.728654][   T29] audit: type=1326 audit(1765370961.091:246558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa689fef34b code=0x7ffc0000
[  156.758974][   T29] audit: type=1326 audit(1765370961.141:246559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa689fee3aa code=0x7ffc0000
[  156.776055][ T7751] FAT-fs (loop0): Directory bread(block 67) failed
[  156.782682][   T29] audit: type=1326 audit(1765370961.141:246560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa689fee3aa code=0x7ffc0000
[  156.814690][ T7751] FAT-fs (loop0): Directory bread(block 68) failed
[  156.821616][ T7751] FAT-fs (loop0): Directory bread(block 69) failed
[  156.831634][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1499'.
[  156.843173][ T7751] FAT-fs (loop0): Directory bread(block 70) failed
[  156.853362][ T7751] FAT-fs (loop0): Directory bread(block 71) failed
[  156.861366][ T7751] FAT-fs (loop0): Directory bread(block 72) failed
[  156.868309][ T7751] FAT-fs (loop0): Directory bread(block 73) failed
[  156.974832][ T7772] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1501'.
[  156.993912][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1503'.
[  157.523025][ T7797] SELinux: security_context_str_to_sid (�O*3���!�L;���(x�?8��>${�S��7�#����!g��.&[n٦��9�P9\E�T�Wq��3�H*�
8��YYL����G�R�!I��*���'��) failed with errno=-22
[  157.564540][ T7797] loop3: detected capacity change from 0 to 164
[  157.568089][ T7797] iso9660: Unknown parameter 'lo00000�'
[  158.262906][ T7842] loop2: detected capacity change from 0 to 256
[  158.295341][ T7845] netlink: 'syz.1.1529': attribute type 30 has an invalid length.
[  158.308916][ T7842] FAT-fs (loop2): Directory bread(block 64) failed
[  158.315970][ T7842] FAT-fs (loop2): Directory bread(block 65) failed
[  158.316023][ T7842] FAT-fs (loop2): Directory bread(block 66) failed
[  158.316048][ T7842] FAT-fs (loop2): Directory bread(block 67) failed
[  158.316109][ T7842] FAT-fs (loop2): Directory bread(block 68) failed
[  158.316132][ T7842] FAT-fs (loop2): Directory bread(block 69) failed
[  158.316162][ T7842] FAT-fs (loop2): Directory bread(block 70) failed
[  158.316182][ T7842] FAT-fs (loop2): Directory bread(block 71) failed
[  158.316206][ T7842] FAT-fs (loop2): Directory bread(block 72) failed
[  158.316302][ T7842] FAT-fs (loop2): Directory bread(block 73) failed
[  158.453922][ T7855] netlink: 'syz.1.1533': attribute type 30 has an invalid length.
[  158.800539][ T7877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  158.800556][ T7877] IPv6: NLM_F_CREATE should be set when creating new route
[  158.843837][ T7879] pim6reg1: entered promiscuous mode
[  158.843860][ T7879] pim6reg1: entered allmulticast mode
[  158.856791][ T7881] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  158.900524][ T7886] netlink: 'syz.3.1546': attribute type 30 has an invalid length.
[  158.961155][ T7891] loop0: detected capacity change from 0 to 1024
[  158.971198][ T7892] netlink: 'syz.2.1548': attribute type 30 has an invalid length.
[  158.995772][ T7891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  158.995877][ T7891] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.997066][ T7891] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1549: bg 0: block 112: padding at end of block bitmap is not set
[  159.066585][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  159.258562][ T7923] netlink: 'syz.4.1560': attribute type 21 has an invalid length.
[  159.284965][ T7923] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  159.284965][ T7923]    program syz.4.1560 not setting count and/or reply_len properly
[  159.303651][ T7930] loop0: detected capacity change from 0 to 1024
[  159.329248][ T7930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  159.341692][ T7930] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.363186][ T7930] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1562: bg 0: block 112: padding at end of block bitmap is not set
[  159.390807][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  159.403026][ T7937] loop4: detected capacity change from 0 to 256
[  159.426208][ T7937] FAT-fs (loop4): Directory bread(block 64) failed
[  159.435155][ T7937] FAT-fs (loop4): Directory bread(block 65) failed
[  159.443367][ T7937] FAT-fs (loop4): Directory bread(block 66) failed
[  159.450019][ T7937] FAT-fs (loop4): Directory bread(block 67) failed
[  159.457205][ T7937] FAT-fs (loop4): Directory bread(block 68) failed
[  159.463909][ T7937] FAT-fs (loop4): Directory bread(block 69) failed
[  159.470793][ T7937] FAT-fs (loop4): Directory bread(block 70) failed
[  159.478379][ T7937] FAT-fs (loop4): Directory bread(block 71) failed
[  159.485101][ T7937] FAT-fs (loop4): Directory bread(block 72) failed
[  159.505432][ T7937] FAT-fs (loop4): Directory bread(block 73) failed
[  159.704664][ T7952] netlink: 'syz.4.1569': attribute type 21 has an invalid length.
[  159.750046][ T7952] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  159.750046][ T7952]    program syz.4.1569 not setting count and/or reply_len properly
[  159.857653][ T7957] FAULT_INJECTION: forcing a failure.
[  159.857653][ T7957] name failslab, interval 1, probability 0, space 0, times 0
[  159.857687][ T7957] CPU: 0 UID: 0 PID: 7957 Comm: syz.0.1571 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  159.857792][ T7957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  159.857805][ T7957] Call Trace:
[  159.857812][ T7957]  <TASK>
[  159.857819][ T7957]  __dump_stack+0x1d/0x30
[  159.857859][ T7957]  dump_stack_lvl+0xe8/0x140
[  159.857959][ T7957]  dump_stack+0x15/0x1b
[  159.857984][ T7957]  should_fail_ex+0x265/0x280
[  159.858015][ T7957]  should_failslab+0x8c/0xb0
[  159.858045][ T7957]  kmem_cache_alloc_noprof+0x69/0x4b0
[  159.858132][ T7957]  ? getname_flags+0x80/0x3b0
[  159.858165][ T7957]  getname_flags+0x80/0x3b0
[  159.858261][ T7957]  __se_sys_quotactl+0x16a/0x670
[  159.858412][ T7957]  __x64_sys_quotactl+0x55/0x70
[  159.858436][ T7957]  x64_sys_call+0x19a4/0x3000
[  159.858503][ T7957]  do_syscall_64+0xd8/0x2a0
[  159.858609][ T7957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.858639][ T7957] RIP: 0033:0x7fa689fef749
[  159.858666][ T7957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.858693][ T7957] RSP: 002b:00007fa688a4f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[  159.858736][ T7957] RAX: ffffffffffffffda RBX: 00007fa68a245fa0 RCX: 00007fa689fef749
[  159.858754][ T7957] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffff80000201
[  159.858772][ T7957] RBP: 00007fa688a4f090 R08: 0000000000000000 R09: 0000000000000000
[  159.858790][ T7957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.858812][ T7957] R13: 00007fa68a246038 R14: 00007fa68a245fa0 R15: 00007ffd4b7b6168
[  159.858840][ T7957]  </TASK>
[  159.888432][ T7959] SELinux: security_context_str_to_sid (�O*3���!�L;���(x�?8��>${�S��7�#����!g��.&[n٦��9�P9\E�T�Wq��3�H*�
8��YYL����G�R�!I��*���'��) failed with errno=-22
[  159.893167][ T7959] loop4: detected capacity change from 0 to 164
[  159.894760][ T7959] iso9660: Unknown parameter 'lo00000�'
[  160.008098][ T7967] netlink: 'syz.0.1576': attribute type 21 has an invalid length.
[  160.037281][ T7967] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  160.037281][ T7967]    program syz.0.1576 not setting count and/or reply_len properly
[  160.199817][ T7980] FAULT_INJECTION: forcing a failure.
[  160.199817][ T7980] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  160.237463][ T7980] CPU: 1 UID: 0 PID: 7980 Comm: syz.0.1582 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  160.237494][ T7980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  160.237510][ T7980] Call Trace:
[  160.237517][ T7980]  <TASK>
[  160.237526][ T7980]  __dump_stack+0x1d/0x30
[  160.237591][ T7980]  dump_stack_lvl+0xe8/0x140
[  160.237669][ T7980]  dump_stack+0x15/0x1b
[  160.237699][ T7980]  should_fail_ex+0x265/0x280
[  160.237733][ T7980]  should_fail+0xb/0x20
[  160.237803][ T7980]  should_fail_usercopy+0x1a/0x20
[  160.237836][ T7980]  _copy_from_user+0x1c/0xb0
[  160.237941][ T7980]  ___sys_sendmsg+0xc1/0x1d0
[  160.238003][ T7980]  __x64_sys_sendmsg+0xd4/0x160
[  160.238103][ T7980]  x64_sys_call+0x17ba/0x3000
[  160.238139][ T7980]  do_syscall_64+0xd8/0x2a0
[  160.238188][ T7980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.238218][ T7980] RIP: 0033:0x7fa689fef749
[  160.238239][ T7980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.238287][ T7980] RSP: 002b:00007fa688a4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  160.238313][ T7980] RAX: ffffffffffffffda RBX: 00007fa68a245fa0 RCX: 00007fa689fef749
[  160.238332][ T7980] RDX: 0000000000000840 RSI: 0000200000002ec0 RDI: 0000000000000004
[  160.238369][ T7980] RBP: 00007fa688a4f090 R08: 0000000000000000 R09: 0000000000000000
[  160.238386][ T7980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  160.238404][ T7980] R13: 00007fa68a246038 R14: 00007fa68a245fa0 R15: 00007ffd4b7b6168
[  160.238432][ T7980]  </TASK>
[  160.508921][ T7999] __nla_validate_parse: 15 callbacks suppressed
[  160.508942][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1588'.
[  160.548858][ T8009] netlink: 'syz.4.1592': attribute type 21 has an invalid length.
[  160.556833][ T8009] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1592'.
[  160.580397][ T8009] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  160.580397][ T8009]    program syz.4.1592 not setting count and/or reply_len properly
[  160.660350][ T8018] loop4: detected capacity change from 0 to 128
[  160.692312][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1594'.
[  160.838850][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1599'.
[  161.158752][ T8030] netlink: 'syz.0.1600': attribute type 30 has an invalid length.
[  161.279638][ T8036] loop0: detected capacity change from 0 to 256
[  161.317502][ T8036] FAT-fs (loop0): Directory bread(block 64) failed
[  161.317535][ T8036] FAT-fs (loop0): Directory bread(block 65) failed
[  161.317568][ T8036] FAT-fs (loop0): Directory bread(block 66) failed
[  161.317596][ T8036] FAT-fs (loop0): Directory bread(block 67) failed
[  161.317664][ T8036] FAT-fs (loop0): Directory bread(block 68) failed
[  161.317700][ T8036] FAT-fs (loop0): Directory bread(block 69) failed
[  161.317724][ T8036] FAT-fs (loop0): Directory bread(block 70) failed
[  161.317749][ T8036] FAT-fs (loop0): Directory bread(block 71) failed
[  161.317842][ T8036] FAT-fs (loop0): Directory bread(block 72) failed
[  161.317864][ T8036] FAT-fs (loop0): Directory bread(block 73) failed
[  161.348703][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1604'.
[  161.432247][ T8045] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1607'.
[  161.432352][ T8045] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  161.432365][ T8045] IPv6: NLM_F_CREATE should be set when creating new route
[  161.460592][ T8047] loop0: detected capacity change from 0 to 1024
[  161.486902][ T8047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  161.487078][ T8047] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.488004][ T8047] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1606: bg 0: block 112: padding at end of block bitmap is not set
[  161.504839][   T29] kauditd_printk_skb: 2188 callbacks suppressed
[  161.504855][   T29] audit: type=1326 audit(1765370966.061:248749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcad72965e7 code=0x7ffc0000
[  161.504937][   T29] audit: type=1326 audit(1765370966.061:248750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcad723b829 code=0x7ffc0000
[  161.504974][   T29] audit: type=1326 audit(1765370966.061:248751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcad729f749 code=0x7ffc0000
[  161.525120][   T29] audit: type=1326 audit(1765370966.091:248752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcad72965e7 code=0x7ffc0000
[  161.525237][   T29] audit: type=1326 audit(1765370966.091:248753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcad723b829 code=0x7ffc0000
[  161.525371][   T29] audit: type=1326 audit(1765370966.091:248754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcad729f749 code=0x7ffc0000
[  161.698037][   T29] audit: type=1326 audit(1765370966.101:248755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcad72965e7 code=0x7ffc0000
[  161.698133][   T29] audit: type=1326 audit(1765370966.101:248756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcad723b829 code=0x7ffc0000
[  161.698161][   T29] audit: type=1326 audit(1765370966.101:248757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcad729f749 code=0x7ffc0000
[  161.698204][   T29] audit: type=1326 audit(1765370966.101:248758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcad729f749 code=0x7ffc0000
[  161.724333][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  161.846210][ T8063] netlink: 'syz.2.1614': attribute type 30 has an invalid length.
[  161.895330][ T8066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1611'.
[  161.908845][ T8066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1611'.
[  162.031413][ T8061] lo speed is unknown, defaulting to 1000
[  162.175606][ T8086] loop2: detected capacity change from 0 to 1024
[  162.181031][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1620'.
[  162.201274][ T8086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  162.243834][ T8086] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.281345][ T8086] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1621: bg 0: block 112: padding at end of block bitmap is not set
[  162.325766][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  162.362217][ T8103] netlink: 'syz.0.1628': attribute type 30 has an invalid length.
[  162.400986][ T8105] loop3: detected capacity change from 0 to 1024
[  162.409683][ T8105] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  162.420441][ T8105] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  162.420467][ T8105] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  162.421714][ T8105] JBD2: no valid journal superblock found
[  162.447416][ T8105] EXT4-fs (loop3): Could not load journal inode
[  162.461159][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1629'.
[  162.770640][ T8118] SELinux: failed to load policy
[  162.779618][ T8118] blktrace: Concurrent blktraces are not allowed on loop0
[  162.807713][ T8118] FAULT_INJECTION: forcing a failure.
[  162.807713][ T8118] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  162.807769][ T8118] CPU: 0 UID: 0 PID: 8118 Comm: syz.0.1632 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  162.807798][ T8118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  162.807816][ T8118] Call Trace:
[  162.807825][ T8118]  <TASK>
[  162.807834][ T8118]  __dump_stack+0x1d/0x30
[  162.807887][ T8118]  dump_stack_lvl+0xe8/0x140
[  162.807950][ T8118]  dump_stack+0x15/0x1b
[  162.807976][ T8118]  should_fail_ex+0x265/0x280
[  162.808007][ T8118]  should_fail+0xb/0x20
[  162.808081][ T8118]  should_fail_usercopy+0x1a/0x20
[  162.808145][ T8118]  _copy_to_user+0x20/0xa0
[  162.808179][ T8118]  simple_read_from_buffer+0xb5/0x130
[  162.808213][ T8118]  proc_fail_nth_read+0x10e/0x150
[  162.808259][ T8118]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  162.808342][ T8118]  vfs_read+0x1a8/0x770
[  162.808410][ T8118]  ? __rcu_read_unlock+0x4f/0x70
[  162.808440][ T8118]  ? __fget_files+0x184/0x1c0
[  162.808473][ T8118]  ? mutex_lock+0x58/0x90
[  162.808510][ T8118]  ksys_read+0xda/0x1a0
[  162.808538][ T8118]  __x64_sys_read+0x40/0x50
[  162.808566][ T8118]  x64_sys_call+0x2889/0x3000
[  162.808672][ T8118]  do_syscall_64+0xd8/0x2a0
[  162.808719][ T8118]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.808805][ T8118] RIP: 0033:0x7fa689fee15c
[  162.808827][ T8118] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  162.808852][ T8118] RSP: 002b:00007fa688a4f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  162.808879][ T8118] RAX: ffffffffffffffda RBX: 00007fa68a245fa0 RCX: 00007fa689fee15c
[  162.808906][ T8118] RDX: 000000000000000f RSI: 00007fa688a4f0a0 RDI: 0000000000000007
[  162.808991][ T8118] RBP: 00007fa688a4f090 R08: 0000000000000000 R09: 0000000000000000
[  162.809003][ T8118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  162.809015][ T8118] R13: 00007fa68a246038 R14: 00007fa68a245fa0 R15: 00007ffd4b7b6168
[  162.809053][ T8118]  </TASK>
[  163.081579][ T8134] loop0: detected capacity change from 0 to 1024
[  163.082021][ T8134] EXT4-fs: Ignoring removed nomblk_io_submit option
[  163.102103][ T8134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.660761][ T8141] loop3: detected capacity change from 0 to 1024
[  163.661000][ T8141] EXT4-fs: Ignoring removed bh option
[  163.661038][ T8141] EXT4-fs: inline encryption not supported
[  163.667088][ T8141] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  163.667846][ T8141] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  163.668632][ T8141] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.1640: lblock 2 mapped to illegal pblock 2 (length 1)
[  163.668744][ T8141] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.1640: lblock 0 mapped to illegal pblock 48 (length 1)
[  163.669965][ T8161] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[  163.670006][ T8161] SELinux: failed to load policy
[  163.670103][ T8141] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1640: Failed to acquire dquot type 0
[  163.670693][ T8141] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  163.772407][ T8161] blktrace: Concurrent blktraces are not allowed on loop2
[  163.806552][ T8141] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.1640: mark_inode_dirty error
[  163.806731][ T8141] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  163.806783][ T8141] EXT4-fs (loop3): 1 orphan inode deleted
[  163.807389][ T8141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.807739][ T2000] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1)
[  163.807937][ T2000] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0
[  163.809251][ T8141] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.896177][ T8141] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.1640: Invalid inode table block 1 in block_group 0
[  163.896639][ T8141] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  163.896729][ T8141] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz.3.1640: mark_inode_dirty error
[  163.952991][ T8171] netlink: 'syz.1.1649': attribute type 30 has an invalid length.
[  164.088332][ T8175] loop4: detected capacity change from 0 to 256
[  164.119466][ T8175] FAT-fs (loop4): Directory bread(block 64) failed
[  164.119501][ T8175] FAT-fs (loop4): Directory bread(block 65) failed
[  164.119531][ T8175] FAT-fs (loop4): Directory bread(block 66) failed
[  164.119547][ T8175] FAT-fs (loop4): Directory bread(block 67) failed
[  164.119569][ T8175] FAT-fs (loop4): Directory bread(block 68) failed
[  164.119588][ T8175] FAT-fs (loop4): Directory bread(block 69) failed
[  164.119695][ T8175] FAT-fs (loop4): Directory bread(block 70) failed
[  164.119712][ T8175] FAT-fs (loop4): Directory bread(block 71) failed
[  164.119746][ T8175] FAT-fs (loop4): Directory bread(block 72) failed
[  164.119768][ T8175] FAT-fs (loop4): Directory bread(block 73) failed
[  164.180293][ T8133] syz.0.1638 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=1000
[  164.180376][ T8133] CPU: 1 UID: 0 PID: 8133 Comm: syz.0.1638 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  164.180404][ T8133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  164.180420][ T8133] Call Trace:
[  164.180429][ T8133]  <TASK>
[  164.180439][ T8133]  __dump_stack+0x1d/0x30
[  164.180470][ T8133]  dump_stack_lvl+0xe8/0x140
[  164.180511][ T8133]  dump_stack+0x15/0x1b
[  164.180533][ T8133]  dump_header+0x81/0x240
[  164.180553][ T8133]  oom_kill_process+0x295/0x350
[  164.180577][ T8133]  out_of_memory+0x97b/0xb80
[  164.180602][ T8133]  try_charge_memcg+0x610/0xa10
[  164.180640][ T8133]  obj_cgroup_charge_pages+0xa6/0x150
[  164.180738][ T8133]  obj_cgroup_charge_account+0x73/0x1a0
[  164.180775][ T8133]  __memcg_slab_post_alloc_hook+0x397/0x530
[  164.180818][ T8133]  kmem_cache_alloc_noprof+0x2c5/0x4b0
[  164.180921][ T8133]  ? alloc_buffer_head+0x35/0x1f0
[  164.180954][ T8133]  alloc_buffer_head+0x35/0x1f0
[  164.181034][ T8133]  folio_alloc_buffers+0x14a/0x310
[  164.181062][ T8133]  create_empty_buffers+0x2c/0x200
[  164.181171][ T8133]  __block_write_begin_int+0x1d4/0xf90
[  164.181220][ T8133]  ? __list_add_valid_or_report+0x38/0xe0
[  164.181258][ T8133]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[  164.181294][ T8133]  ? inode_io_list_move_locked+0x1d0/0x2d0
[  164.181330][ T8133]  ? _raw_spin_unlock+0x26/0x50
[  164.181435][ T8133]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[  164.181502][ T8133]  block_page_mkwrite+0x1a8/0x3d0
[  164.181581][ T8133]  ext4_page_mkwrite+0x859/0xb90
[  164.181613][ T8133]  ? folio_unlock+0xd9/0x120
[  164.181641][ T8133]  handle_mm_fault+0x1601/0x2c60
[  164.181674][ T8133]  ? mt_find+0x21b/0x330
[  164.181786][ T8133]  do_user_addr_fault+0x3fe/0x1080
[  164.181830][ T8133]  exc_page_fault+0x62/0xa0
[  164.181951][ T8133]  asm_exc_page_fault+0x26/0x30
[  164.181974][ T8133] RIP: 0033:0x7fa689ecf8c2
[  164.181994][ T8133] Code: 0f 1f 84 00 00 00 00 00 be 08 00 00 00 48 89 df e8 f3 95 fe ff 48 8b 53 38 48 8d 42 f8 48 89 43 38 8b 43 28 83 c0 08 89 43 28 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 8d 00 00 00 41 89 d6 48 8b
[  164.182017][ T8133] RSP: 002b:00007ffd4b7b6210 EFLAGS: 00010202
[  164.182037][ T8133] RAX: 000000000001f008 RBX: 00007fa68ad75720 RCX: 0000000000000000
[  164.182049][ T8133] RDX: 0000001b34005000 RSI: 0000000000000008 RDI: 00007fa68ad75720
[  164.182112][ T8133] RBP: 0000000000000923 R08: 00007fa689a57050 R09: 00007fa68a232000
[  164.182128][ T8133] R10: 00007fa689a57008 R11: 0000000000000004 R12: ffffffff82917071
[  164.182145][ T8133] R13: 00007fa68a246038 R14: 0000000000000134 R15: fffffffffffe1000
[  164.182163][ T8133]  ? scsi_mq_set_rq_budget_token+0x11/0x30
[  164.182202][ T8133]  </TASK>
[  164.182211][ T8133] memory: usage 307200kB, limit 307200kB, failcnt 480
[  164.182234][ T8133] memory+swap: usage 307912kB, limit 9007199254740988kB, failcnt 0
[  164.182271][ T8133] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[  164.182284][ T8133] Memory cgroup stats for /syz0:
[  164.182535][ T8133] cache 12288
[  164.182547][ T8133] rss 0
[  164.182555][ T8133] shmem 0
[  164.182563][ T8133] mapped_file 0
[  164.182572][ T8133] dirty 0
[  164.182580][ T8133] writeback 0
[  164.182644][ T8133] workingset_refault_anon 797
[  164.182655][ T8133] workingset_refault_file 802
[  164.182664][ T8133] swap 729088
[  164.182671][ T8133] swapcached 0
[  164.182741][ T8133] pgpgin 123686
[  164.182751][ T8133] pgpgout 123683
[  164.182761][ T8133] pgfault 148481
[  164.182770][ T8133] pgmajfault 131
[  164.182780][ T8133] inactive_anon 0
[  164.182789][ T8133] active_anon 0
[  164.182798][ T8133] inactive_file 12288
[  164.182842][ T8133] active_file 0
[  164.182849][ T8133] unevictable 0
[  164.182856][ T8133] hierarchical_memory_limit 314572800
[  164.182866][ T8133] hierarchical_memsw_limit 9223372036854771712
[  164.182878][ T8133] total_cache 12288
[  164.183009][ T8133] total_rss 0
[  164.183015][ T8133] total_shmem 0
[  164.183022][ T8133] total_mapped_file 0
[  164.183032][ T8133] total_dirty 0
[  164.183039][ T8133] total_writeback 0
[  164.183046][ T8133] total_workingset_refault_anon 797
[  164.183127][ T8133] total_workingset_refault_file 802
[  164.183137][ T8133] total_swap 729088
[  164.183147][ T8133] total_swapcached 0
[  164.183156][ T8133] total_pgpgin 123686
[  164.183165][ T8133] total_pgpgout 123683
[  164.183216][ T8133] total_pgfault 148481
[  164.183224][ T8133] total_pgmajfault 131
[  164.183231][ T8133] total_inactive_anon 0
[  164.183255][ T8133] total_active_anon 0
[  164.183262][ T8133] total_inactive_file 12288
[  164.183272][ T8133] total_active_file 0
[  164.183282][ T8133] total_unevictable 0
[  164.183332][ T8133] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1638,pid=8133,uid=0
[  164.183563][ T8133] Memory cgroup out of memory: Killed process 8133 (syz.0.1638) total-vm:96016kB, anon-rss:1188kB, file-rss:22364kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  164.186399][ T8134] syz.0.1638 (8134) used greatest stack depth: 7256 bytes left
[  164.188111][ T8179] loop3: detected capacity change from 0 to 128
[  164.237906][ T8181] loop1: detected capacity change from 0 to 1024
[  164.239972][ T8181] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  164.240212][ T8181] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  164.240242][ T8181] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  164.241871][ T8181] JBD2: no valid journal superblock found
[  164.241884][ T8181] EXT4-fs (loop1): Could not load journal inode
[  164.253908][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.324309][ T8185] loop0: detected capacity change from 0 to 1024
[  164.366697][ T8185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  164.366767][ T8185] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.367488][ T8185] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1655: bg 0: block 112: padding at end of block bitmap is not set
[  164.414093][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  165.079658][ T8205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  165.079711][ T8205] IPv6: NLM_F_CREATE should be set when creating new route
[  165.113391][ T8208] netlink: 'syz.3.1660': attribute type 21 has an invalid length.
[  165.324380][ T8208] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  165.324380][ T8208]    program syz.3.1660 not setting count and/or reply_len properly
[  165.352580][ T8219] iso9660: Unknown parameter 'lo00000�'
[  165.578390][ T8229] __nla_validate_parse: 9 callbacks suppressed
[  165.578407][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1668'.
[  165.595088][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1670'.
[  165.655653][ T8240] SELinux: security_context_str_to_sid (�O*3���!�L;���(x�?8��>${�S��7�#����!g��.&[n٦��9�P9\E�T�Wq��3�H*�
8��YYL����G�R�!I��*���'��) failed with errno=-22
[  165.712376][ T8240] iso9660: Unknown parameter 'lo00000�'
[  165.723241][ T8238] FAT-fs (loop2): Directory bread(block 64) failed
[  165.749765][ T8238] FAT-fs (loop2): Directory bread(block 65) failed
[  165.768632][ T8238] FAT-fs (loop2): Directory bread(block 66) failed
[  165.775230][ T8238] FAT-fs (loop2): Directory bread(block 67) failed
[  165.784850][ T8238] FAT-fs (loop2): Directory bread(block 68) failed
[  165.794445][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1675'.
[  165.805217][ T8238] FAT-fs (loop2): Directory bread(block 69) failed
[  165.829461][ T8238] FAT-fs (loop2): Directory bread(block 70) failed
[  165.836436][ T8238] FAT-fs (loop2): Directory bread(block 71) failed
[  165.845036][ T8238] FAT-fs (loop2): Directory bread(block 72) failed
[  165.851780][ T8251] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1677'.
[  165.859459][ T8238] FAT-fs (loop2): Directory bread(block 73) failed
[  165.862656][ T8253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1678'.
[  165.952096][ T8262] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1682'.
[  165.998859][ T8264] FAULT_INJECTION: forcing a failure.
[  165.998859][ T8264] name failslab, interval 1, probability 0, space 0, times 0
[  166.011808][ T8264] CPU: 0 UID: 0 PID: 8264 Comm: syz.2.1683 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  166.011835][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  166.011851][ T8264] Call Trace:
[  166.011860][ T8264]  <TASK>
[  166.011869][ T8264]  __dump_stack+0x1d/0x30
[  166.011901][ T8264]  dump_stack_lvl+0xe8/0x140
[  166.011980][ T8264]  dump_stack+0x15/0x1b
[  166.012001][ T8264]  should_fail_ex+0x265/0x280
[  166.012030][ T8264]  should_failslab+0x8c/0xb0
[  166.012058][ T8264]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[  166.012131][ T8264]  ? __alloc_skb+0x324/0x4d0
[  166.012162][ T8264]  __alloc_skb+0x324/0x4d0
[  166.012187][ T8264]  ? __alloc_skb+0x24d/0x4d0
[  166.012241][ T8264]  _sctp_make_chunk+0x59/0x210
[  166.012274][ T8264]  sctp_make_abort_user+0x4c/0x3a0
[  166.012305][ T8264]  sctp_sendmsg_check_sflags+0x17e/0x1e0
[  166.012337][ T8264]  sctp_sendmsg+0x75f/0x18d0
[  166.012407][ T8264]  ? __pfx_sctp_sendmsg+0x10/0x10
[  166.012444][ T8264]  inet_sendmsg+0xc5/0xd0
[  166.012490][ T8264]  __sock_sendmsg+0x102/0x180
[  166.012516][ T8264]  ____sys_sendmsg+0x345/0x4a0
[  166.012558][ T8264]  ___sys_sendmsg+0x17b/0x1d0
[  166.012667][ T8264]  __sys_sendmmsg+0x178/0x300
[  166.012717][ T8264]  __x64_sys_sendmmsg+0x57/0x70
[  166.012828][ T8264]  x64_sys_call+0x1e28/0x3000
[  166.012861][ T8264]  do_syscall_64+0xd8/0x2a0
[  166.012901][ T8264]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.012927][ T8264] RIP: 0033:0x7f3e311ff749
[  166.013019][ T8264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  166.013041][ T8264] RSP: 002b:00007f3e2fc5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  166.013060][ T8264] RAX: ffffffffffffffda RBX: 00007f3e31455fa0 RCX: 00007f3e311ff749
[  166.013072][ T8264] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000005
[  166.013100][ T8264] RBP: 00007f3e2fc5f090 R08: 0000000000000000 R09: 0000000000000000
[  166.013116][ T8264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  166.013132][ T8264] R13: 00007f3e31456038 R14: 00007f3e31455fa0 R15: 00007ffe435f42f8
[  166.013157][ T8264]  </TASK>
[  166.244599][ T8260] EXT4-fs: Ignoring removed bh option
[  166.250500][ T8260] EXT4-fs: inline encryption not supported
[  166.257126][ T8260] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  166.270419][ T8260] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  166.280408][ T8260] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.1681: lblock 2 mapped to illegal pblock 2 (length 1)
[  166.294756][ T8260] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.1681: lblock 0 mapped to illegal pblock 48 (length 1)
[  166.311945][ T8260] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1681: Failed to acquire dquot type 0
[  166.324161][ T8260] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  166.325361][ T8268] netlink: 'syz.2.1684': attribute type 30 has an invalid length.
[  166.334591][ T8260] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.1681: mark_inode_dirty error
[  166.353677][ T8260] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  166.364349][ T8260] EXT4-fs (loop4): 1 orphan inode deleted
[  166.370706][ T8260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.383412][   T31] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  166.398043][   T31] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0
[  166.425666][ T8260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.437171][ T8260] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.1681: Invalid inode table block 1 in block_group 0
[  166.451396][ T8260] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  166.462186][ T8260] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz.4.1681: mark_inode_dirty error
[  166.516093][   T29] kauditd_printk_skb: 1478 callbacks suppressed
[  166.516160][   T29] audit: type=1400 audit(1765370971.071:250231): avc:  denied  { create } for  pid=8273 comm="syz.0.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  166.542576][   T29] audit: type=1400 audit(1765370971.071:250232): avc:  denied  { create } for  pid=8271 comm="syz.3.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  166.587857][   T29] audit: type=1400 audit(1765370971.151:250233): avc:  denied  { create } for  pid=8276 comm="syz.4.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  166.618817][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1686'.
[  166.630836][ T8282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1690'.
[  166.633402][   T29] audit: type=1400 audit(1765370971.151:250234): avc:  denied  { write } for  pid=8276 comm="syz.4.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  166.642220][ T8279] set_capacity_and_notify: 5 callbacks suppressed
[  166.642243][ T8279] loop2: detected capacity change from 0 to 1024
[  166.661040][   T29] audit: type=1400 audit(1765370971.151:250235): avc:  denied  { read } for  pid=8276 comm="syz.4.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  166.668302][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1688'.
[  166.674113][   T29] audit: type=1400 audit(1765370971.151:250236): avc:  denied  { module_request } for  pid=8276 comm="syz.4.1688" kmod="netdev-batadv0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  166.697003][ T8279] EXT4-fs: Ignoring removed nomblk_io_submit option
[  166.703782][   T29] audit: type=1400 audit(1765370971.181:250237): avc:  denied  { read } for  pid=8271 comm="syz.3.1686" dev="nsfs" ino=4026532511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  166.730819][ T8285] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1686'.
[  166.732821][   T29] audit: type=1400 audit(1765370971.181:250238): avc:  denied  { open } for  pid=8271 comm="syz.3.1686" path="net:[4026532511]" dev="nsfs" ino=4026532511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  166.787250][   T29] audit: type=1400 audit(1765370971.181:250239): avc:  denied  { ioctl } for  pid=8271 comm="syz.3.1686" path="socket:[20771]" dev="sockfs" ino=20771 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  166.812343][   T29] audit: type=1400 audit(1765370971.181:250240): avc:  denied  { create } for  pid=8271 comm="syz.3.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  166.901996][ T8279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.919801][ T8291] loop0: detected capacity change from 0 to 1024
[  167.018542][ T8291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  167.041999][ T8291] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.071158][ T8291] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1691: bg 0: block 112: padding at end of block bitmap is not set
[  167.194288][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  167.194345][ T8309] FAULT_INJECTION: forcing a failure.
[  167.194345][ T8309] name failslab, interval 1, probability 0, space 0, times 0
[  167.215959][ T8309] CPU: 1 UID: 0 PID: 8309 Comm: syz.1.1697 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  167.215992][ T8309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  167.216008][ T8309] Call Trace:
[  167.216018][ T8309]  <TASK>
[  167.216029][ T8309]  __dump_stack+0x1d/0x30
[  167.216058][ T8309]  dump_stack_lvl+0xe8/0x140
[  167.216081][ T8309]  dump_stack+0x15/0x1b
[  167.216100][ T8309]  should_fail_ex+0x265/0x280
[  167.216129][ T8309]  should_failslab+0x8c/0xb0
[  167.216161][ T8309]  kmem_cache_alloc_noprof+0x69/0x4b0
[  167.216194][ T8309]  ? vm_area_alloc+0x2c/0xb0
[  167.216229][ T8309]  vm_area_alloc+0x2c/0xb0
[  167.216262][ T8309]  mmap_region+0xadf/0x1410
[  167.216330][ T8309]  do_mmap+0x9b3/0xbe0
[  167.216367][ T8309]  vm_mmap_pgoff+0x17a/0x2e0
[  167.216399][ T8309]  ksys_mmap_pgoff+0xc2/0x310
[  167.216428][ T8309]  ? __x64_sys_mmap+0x49/0x70
[  167.216465][ T8309]  x64_sys_call+0x16bb/0x3000
[  167.216503][ T8309]  do_syscall_64+0xd8/0x2a0
[  167.216541][ T8309]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.216567][ T8309] RIP: 0033:0x7f210562f783
[  167.216587][ T8309] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7
[  167.216608][ T8309] RSP: 002b:00007f2104096e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  167.216628][ T8309] RAX: ffffffffffffffda RBX: 0000000000000568 RCX: 00007f210562f783
[  167.216640][ T8309] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
[  167.216652][ T8309] RBP: 00002000000015c2 R08: 00000000ffffffff R09: 0000000000000000
[  167.216664][ T8309] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000009
[  167.216678][ T8309] R13: 00007f2104096ef0 R14: 00007f2104096eb0 R15: 00002000000005c0
[  167.216700][ T8309]  </TASK>
[  167.640075][ T8293] loop3: detected capacity change from 0 to 1024
[  167.657037][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.690669][ T8293] EXT4-fs: Ignoring removed bh option
[  167.696212][ T8293] EXT4-fs: inline encryption not supported
[  167.736760][ T8293] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  167.767054][ T8293] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  167.785550][ T8293] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.1693: lblock 2 mapped to illegal pblock 2 (length 1)
[  167.807176][ T8293] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.1693: lblock 0 mapped to illegal pblock 48 (length 1)
[  167.836966][ T8293] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1693: Failed to acquire dquot type 0
[  167.855787][ T8293] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  167.875534][ T8293] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.1693: mark_inode_dirty error
[  167.887062][ T8293] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  167.897363][ T8293] EXT4-fs (loop3): 1 orphan inode deleted
[  167.903806][ T8293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.916405][   T37] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  167.937474][   T37] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 0
[  167.960913][ T8293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.972902][ T8315] loop4: detected capacity change from 0 to 1024
[  167.982389][ T8315] EXT4-fs: Ignoring removed bh option
[  167.989677][ T8293] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.1693: Invalid inode table block 1 in block_group 0
[  168.006156][ T8315] EXT4-fs: inline encryption not supported
[  168.012716][ T8315] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  168.023244][ T8293] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  168.041189][ T8293] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz.3.1693: mark_inode_dirty error
[  168.045952][ T8315] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  168.078752][ T8315] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.1699: lblock 2 mapped to illegal pblock 2 (length 1)
[  168.096562][ T8315] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.1699: lblock 0 mapped to illegal pblock 48 (length 1)
[  168.111076][ T8315] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1699: Failed to acquire dquot type 0
[  168.122648][ T8315] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  168.132502][ T8315] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.1699: mark_inode_dirty error
[  168.144891][ T8315] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  168.155174][ T8315] EXT4-fs (loop4): 1 orphan inode deleted
[  168.161452][ T8315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.174449][   T52] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  168.189297][   T52] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 0
[  168.215521][ T8315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.224991][ T8315] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.1699: Invalid inode table block 1 in block_group 0
[  168.237938][ T8315] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  168.247770][ T8315] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz.4.1699: mark_inode_dirty error
[  168.340552][ T8352] netlink: 'syz.4.1711': attribute type 30 has an invalid length.
[  168.382799][ T8356] loop1: detected capacity change from 0 to 1024
[  168.398708][ T8356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  168.411459][ T8356] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.423950][ T8356] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1713: bg 0: block 112: padding at end of block bitmap is not set
[  168.454207][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  168.499118][ T8364] netlink: 'syz.4.1716': attribute type 30 has an invalid length.
[  168.529444][ T8366] loop1: detected capacity change from 0 to 256
[  168.545040][ T8366] FAT-fs (loop1): Directory bread(block 64) failed
[  168.552023][ T8366] FAT-fs (loop1): Directory bread(block 65) failed
[  168.559462][ T8366] FAT-fs (loop1): Directory bread(block 66) failed
[  168.566231][ T8366] FAT-fs (loop1): Directory bread(block 67) failed
[  168.581625][ T8366] FAT-fs (loop1): Directory bread(block 68) failed
[  168.607727][ T8366] FAT-fs (loop1): Directory bread(block 69) failed
[  168.614552][ T8366] FAT-fs (loop1): Directory bread(block 70) failed
[  168.628584][ T8366] FAT-fs (loop1): Directory bread(block 71) failed
[  168.642542][ T8366] FAT-fs (loop1): Directory bread(block 72) failed
[  168.649709][ T8366] FAT-fs (loop1): Directory bread(block 73) failed
[  168.663372][ T8372] loop4: detected capacity change from 0 to 256
[  168.679848][ T8372] FAT-fs (loop4): Directory bread(block 64) failed
[  168.695427][ T8372] FAT-fs (loop4): Directory bread(block 65) failed
[  168.704004][ T8372] FAT-fs (loop4): Directory bread(block 66) failed
[  168.713970][ T8372] FAT-fs (loop4): Directory bread(block 67) failed
[  168.721955][ T8372] FAT-fs (loop4): Directory bread(block 68) failed
[  168.729564][ T8372] FAT-fs (loop4): Directory bread(block 69) failed
[  168.752445][ T8372] FAT-fs (loop4): Directory bread(block 70) failed
[  168.766684][ T8372] FAT-fs (loop4): Directory bread(block 71) failed
[  168.783590][ T8372] FAT-fs (loop4): Directory bread(block 72) failed
[  168.793539][ T8372] FAT-fs (loop4): Directory bread(block 73) failed
[  168.964804][ T8392] loop4: detected capacity change from 0 to 1024
[  168.999957][ T8392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  169.022778][ T8392] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.038045][ T8392] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1729: bg 0: block 112: padding at end of block bitmap is not set
[  169.040523][ T8376] loop1: detected capacity change from 0 to 1024
[  169.063599][ T8376] EXT4-fs: Ignoring removed bh option
[  169.069348][ T8376] EXT4-fs: inline encryption not supported
[  169.076756][ T8376] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  169.091832][ T8376] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  169.101902][ T8376] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.1722: lblock 2 mapped to illegal pblock 2 (length 1)
[  169.102215][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  169.116730][ T8376] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.1722: lblock 0 mapped to illegal pblock 48 (length 1)
[  169.139754][ T8376] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1722: Failed to acquire dquot type 0
[  169.151633][ T8376] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  169.167324][ T8376] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.1722: mark_inode_dirty error
[  169.178934][ T8376] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  169.190014][ T8376] EXT4-fs (loop1): 1 orphan inode deleted
[  169.196230][ T8376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.209134][   T52] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  169.232467][   T52] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 0
[  169.250491][ T8376] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.265173][ T8376] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.1722: Invalid inode table block 1 in block_group 0
[  169.287922][ T8376] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  169.299957][ T8376] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz.1.1722: mark_inode_dirty error
[  169.451881][ T8426] loop1: detected capacity change from 0 to 128
[  169.962853][ T8437] FAT-fs (loop3): Directory bread(block 64) failed
[  169.962885][ T8437] FAT-fs (loop3): Directory bread(block 65) failed
[  169.962938][ T8437] FAT-fs (loop3): Directory bread(block 66) failed
[  169.962973][ T8437] FAT-fs (loop3): Directory bread(block 67) failed
[  169.963020][ T8437] FAT-fs (loop3): Directory bread(block 68) failed
[  169.963165][ T8437] FAT-fs (loop3): Directory bread(block 69) failed
[  169.963193][ T8437] FAT-fs (loop3): Directory bread(block 70) failed
[  169.963212][ T8437] FAT-fs (loop3): Directory bread(block 71) failed
[  169.963233][ T8437] FAT-fs (loop3): Directory bread(block 72) failed
[  169.963411][ T8437] FAT-fs (loop3): Directory bread(block 73) failed
[  170.048350][ T8439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  170.048406][ T8439] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.049144][ T8439] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1744: bg 0: block 112: padding at end of block bitmap is not set
[  170.106606][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  170.196785][ T8449] SELinux: security_context_str_to_sid (�O*3���!�L;���(x�?8��>${�S��7�#����!g��.&[n٦��9�P9\E�T�Wq��3�H*�
8��YYL����G�R�!I��*���'��) failed with errno=-22
[  170.218755][ T8449] iso9660: Unknown parameter 'lo00000�'
[  170.297569][ T8454] FAT-fs (loop3): Directory bread(block 64) failed
[  170.304323][ T8454] FAT-fs (loop3): Directory bread(block 65) failed
[  170.304434][ T8454] FAT-fs (loop3): Directory bread(block 66) failed
[  170.304457][ T8454] FAT-fs (loop3): Directory bread(block 67) failed
[  170.304524][ T8454] FAT-fs (loop3): Directory bread(block 68) failed
[  170.304546][ T8454] FAT-fs (loop3): Directory bread(block 69) failed
[  170.304575][ T8454] FAT-fs (loop3): Directory bread(block 70) failed
[  170.304652][ T8454] FAT-fs (loop3): Directory bread(block 71) failed
[  170.304675][ T8454] FAT-fs (loop3): Directory bread(block 72) failed
[  170.304696][ T8454] FAT-fs (loop3): Directory bread(block 73) failed
[  170.530341][ T8466] FAT-fs (loop0): Directory bread(block 64) failed
[  170.537171][ T8466] FAT-fs (loop0): Directory bread(block 65) failed
[  170.543839][ T8466] FAT-fs (loop0): Directory bread(block 66) failed
[  170.550930][ T8466] FAT-fs (loop0): Directory bread(block 67) failed
[  170.557820][ T8466] FAT-fs (loop0): Directory bread(block 68) failed
[  170.567653][ T8466] FAT-fs (loop0): Directory bread(block 69) failed
[  170.574298][ T8466] FAT-fs (loop0): Directory bread(block 70) failed
[  170.581305][ T8466] FAT-fs (loop0): Directory bread(block 71) failed
[  170.592869][ T8466] FAT-fs (loop0): Directory bread(block 72) failed
[  170.599825][ T8466] FAT-fs (loop0): Directory bread(block 73) failed
[  170.650848][ T8474] __nla_validate_parse: 22 callbacks suppressed
[  170.650903][ T8474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1758'.
[  170.672051][ T8478] SELinux: security_context_str_to_sid (�O*3���!�L;���(x�?8��>${�S��7�#����!g��.&[n٦��9�P9\E�T�Wq��3�H*�
8��YYL����G�R�!I��*���'��) failed with errno=-22
[  170.697318][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1758'.
[  170.709738][ T8478] iso9660: Unknown parameter 'lo00000�'
[  170.720742][ T8476] FAT-fs (loop3): Directory bread(block 64) failed
[  170.740956][ T8476] FAT-fs (loop3): Directory bread(block 65) failed
[  170.772811][ T8476] FAT-fs (loop3): Directory bread(block 66) failed
[  170.796747][ T8476] FAT-fs (loop3): Directory bread(block 67) failed
[  170.803372][ T8476] FAT-fs (loop3): Directory bread(block 68) failed
[  170.821754][ T8476] FAT-fs (loop3): Directory bread(block 69) failed
[  170.828458][ T8476] FAT-fs (loop3): Directory bread(block 70) failed
[  170.846751][ T8488] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  170.846912][ T8476] FAT-fs (loop3): Directory bread(block 71) failed
[  170.864178][ T8476] FAT-fs (loop3): Directory bread(block 72) failed
[  170.871454][ T8476] FAT-fs (loop3): Directory bread(block 73) failed
[  170.924350][ T8494] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  170.954346][ T8494] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  170.965365][ T8494] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  170.980589][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'.
[  170.994789][ T8494] JBD2: no valid journal superblock found
[  171.000811][ T8494] EXT4-fs (loop0): Could not load journal inode
[  171.012896][ T8502] FAT-fs (loop3): Directory bread(block 64) failed
[  171.020699][ T8502] FAT-fs (loop3): Directory bread(block 65) failed
[  171.027865][ T8502] FAT-fs (loop3): Directory bread(block 66) failed
[  171.035021][ T8502] FAT-fs (loop3): Directory bread(block 67) failed
[  171.043728][ T8502] FAT-fs (loop3): Directory bread(block 68) failed
[  171.055146][ T8502] FAT-fs (loop3): Directory bread(block 69) failed
[  171.066120][ T8502] FAT-fs (loop3): Directory bread(block 70) failed
[  171.074554][ T8502] FAT-fs (loop3): Directory bread(block 71) failed
[  171.081554][ T8502] FAT-fs (loop3): Directory bread(block 72) failed
[  171.088586][ T8502] FAT-fs (loop3): Directory bread(block 73) failed
[  171.148820][ T8509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1771'.
[  171.169323][ T8509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1771'.
[  171.216482][ T8513] netlink: 'syz.3.1772': attribute type 21 has an invalid length.
[  171.224361][ T8513] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1772'.
[  171.255060][ T8513] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  171.255060][ T8513]    program syz.3.1772 not setting count and/or reply_len properly
[  171.261897][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1773'.
[  171.309887][ T8518] SELinux: security_context_str_to_sid (�O*3���!�L;���(x�?8��>${�S��7�#����!g��.&[n٦��9�P9\E�T�Wq��3�H*�
8��YYL����G�R�!I��*���'��) failed with errno=-22
[  171.334368][ T8518] iso9660: Unknown parameter 'lo00000�'
[  171.448634][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1779'.
[  171.548409][ T8534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  171.568821][ T8534] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.580638][ T8534] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1780: bg 0: block 112: padding at end of block bitmap is not set
[  171.614444][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  171.634269][   T29] kauditd_printk_skb: 1428 callbacks suppressed
[  171.634288][   T29] audit: type=1326 audit(1765370976.191:251660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.2.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e311ff749 code=0x7ffc0000
[  171.664964][   T29] audit: type=1326 audit(1765370976.211:251661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.2.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e311ff749 code=0x7ffc0000
[  171.688922][   T29] audit: type=1326 audit(1765370976.211:251662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.2.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e311ff749 code=0x7ffc0000
[  171.712749][   T29] audit: type=1326 audit(1765370976.211:251663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.2.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e311ff749 code=0x7ffc0000
[  171.736632][   T29] audit: type=1326 audit(1765370976.211:251664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.2.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e311ff749 code=0x7ffc0000
[  171.760537][   T29] audit: type=1326 audit(1765370976.211:251665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.2.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e311ff749 code=0x7ffc0000
[  171.761926][ T8541] netlink: 'syz.2.1783': attribute type 21 has an invalid length.
[  171.784421][   T29] audit: type=1326 audit(1765370976.211:251666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.2.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e311ff749 code=0x7ffc0000
[  171.792124][ T8541] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1783'.
[  171.825415][   T29] audit: type=1326 audit(1765370976.211:251667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.2.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e311ff749 code=0x7ffc0000
[  171.849468][   T29] audit: type=1326 audit(1765370976.211:251668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.2.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e311ff749 code=0x7ffc0000
[  171.873391][   T29] audit: type=1326 audit(1765370976.211:251669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.2.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e311ff749 code=0x7ffc0000
[  171.922455][ T8541] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  171.922455][ T8541]    program syz.2.1783 not setting count and/or reply_len properly
[  172.008154][ T8556] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  172.031306][ T8557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1787'.
[  172.349510][ T8571] set_capacity_and_notify: 11 callbacks suppressed
[  172.349570][ T8571] loop2: detected capacity change from 0 to 1024
[  172.369409][ T8571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  172.369496][ T8571] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.370243][ T8571] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1793: bg 0: block 112: padding at end of block bitmap is not set
[  172.387164][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  172.488727][ T8578] bridge: RTM_NEWNEIGH with invalid ether address
[  172.500457][ T8578] loop3: detected capacity change from 0 to 512
[  172.500898][ T8578] EXT4-fs: dax option not supported
[  172.509512][ T8580] loop2: detected capacity change from 0 to 128
[  172.521021][ T8578] loop3: detected capacity change from 0 to 512
[  172.545549][ T8578] EXT4-fs: dax option not supported
[  172.888883][ T8592] loop0: detected capacity change from 0 to 256
[  172.897535][ T8593] netlink: 'syz.1.1800': attribute type 21 has an invalid length.
[  172.903967][ T8592] FAT-fs (loop0): Directory bread(block 64) failed
[  172.920721][ T8592] FAT-fs (loop0): Directory bread(block 65) failed
[  172.928275][ T8592] FAT-fs (loop0): Directory bread(block 66) failed
[  172.930277][ T8593] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  172.930277][ T8593]    program syz.1.1800 not setting count and/or reply_len properly
[  172.935243][ T8592] FAT-fs (loop0): Directory bread(block 67) failed
[  172.961845][ T8592] FAT-fs (loop0): Directory bread(block 68) failed
[  172.968788][ T8592] FAT-fs (loop0): Directory bread(block 69) failed
[  172.975566][ T8592] FAT-fs (loop0): Directory bread(block 70) failed
[  172.982317][ T8592] FAT-fs (loop0): Directory bread(block 71) failed
[  172.989319][ T8592] FAT-fs (loop0): Directory bread(block 72) failed
[  172.996054][ T8592] FAT-fs (loop0): Directory bread(block 73) failed
[  173.134593][ T8604] netlink: 'syz.0.1805': attribute type 30 has an invalid length.
[  173.284106][ T8613] loop4: detected capacity change from 0 to 128
[  173.671791][ T8621] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  173.738330][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811b7f3e00: rx timeout, send abort
[  173.738412][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b7f3e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  173.820887][ T8627] loop3: detected capacity change from 0 to 256
[  173.838749][ T8627] FAT-fs (loop3): Directory bread(block 64) failed
[  173.838773][ T8627] FAT-fs (loop3): Directory bread(block 65) failed
[  173.838796][ T8627] FAT-fs (loop3): Directory bread(block 66) failed
[  173.838817][ T8627] FAT-fs (loop3): Directory bread(block 67) failed
[  173.839077][ T8627] FAT-fs (loop3): Directory bread(block 68) failed
[  173.874148][ T8627] FAT-fs (loop3): Directory bread(block 69) failed
[  173.874241][ T8627] FAT-fs (loop3): Directory bread(block 70) failed
[  173.874265][ T8627] FAT-fs (loop3): Directory bread(block 71) failed
[  173.874373][ T8627] FAT-fs (loop3): Directory bread(block 72) failed
[  173.874398][ T8627] FAT-fs (loop3): Directory bread(block 73) failed
[  174.125372][ T8640] loop1: detected capacity change from 0 to 256
[  174.144421][ T8640] FAT-fs (loop1): Directory bread(block 64) failed
[  174.159236][ T8640] FAT-fs (loop1): Directory bread(block 65) failed
[  174.174556][ T8640] FAT-fs (loop1): Directory bread(block 66) failed
[  174.186115][ T8642] loop3: detected capacity change from 0 to 256
[  174.190324][ T8640] FAT-fs (loop1): Directory bread(block 67) failed
[  174.200564][ T8640] FAT-fs (loop1): Directory bread(block 68) failed
[  174.207763][ T8640] FAT-fs (loop1): Directory bread(block 69) failed
[  174.217073][ T8640] FAT-fs (loop1): Directory bread(block 70) failed
[  174.235810][ T8640] FAT-fs (loop1): Directory bread(block 71) failed
[  174.246208][ T8644] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  174.259181][ T8642] FAT-fs (loop3): Directory bread(block 64) failed
[  174.265732][ T8642] FAT-fs (loop3): Directory bread(block 65) failed
[  174.273691][ T8640] FAT-fs (loop1): Directory bread(block 72) failed
[  174.282817][ T8640] FAT-fs (loop1): Directory bread(block 73) failed
[  174.295963][ T8642] FAT-fs (loop3): Directory bread(block 66) failed
[  174.305516][ T8648] loop2: detected capacity change from 0 to 2048
[  174.305567][ T8642] FAT-fs (loop3): Directory bread(block 67) failed
[  174.319923][ T8648] EXT4-fs: Ignoring removed oldalloc option
[  174.325185][ T8642] FAT-fs (loop3): Directory bread(block 68) failed
[  174.326223][ T8648] ext4: Unknown parameter 'noacl'
[  174.332864][ T8642] FAT-fs (loop3): Directory bread(block 69) failed
[  174.344618][ T8642] FAT-fs (loop3): Directory bread(block 70) failed
[  174.378579][ T8642] FAT-fs (loop3): Directory bread(block 71) failed
[  174.385734][ T8642] FAT-fs (loop3): Directory bread(block 72) failed
[  174.403047][ T8642] FAT-fs (loop3): Directory bread(block 73) failed
[  174.448297][ T8657] FAT-fs (loop4): Directory bread(block 64) failed
[  174.459105][ T8657] FAT-fs (loop4): Directory bread(block 65) failed
[  174.476889][ T8657] FAT-fs (loop4): Directory bread(block 66) failed
[  174.489813][ T8657] FAT-fs (loop4): Directory bread(block 67) failed
[  174.503569][ T8657] FAT-fs (loop4): Directory bread(block 68) failed
[  174.503976][ T8657] FAT-fs (loop4): Directory bread(block 69) failed
[  174.504199][ T8657] FAT-fs (loop4): Directory bread(block 70) failed
[  174.504218][ T8657] FAT-fs (loop4): Directory bread(block 71) failed
[  174.504245][ T8657] FAT-fs (loop4): Directory bread(block 72) failed
[  174.504268][ T8657] FAT-fs (loop4): Directory bread(block 73) failed
[  174.554031][ T8665] netlink: 'syz.3.1830': attribute type 21 has an invalid length.
[  174.580839][ T8665] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  174.580839][ T8665]    program syz.3.1830 not setting count and/or reply_len properly
[  174.640280][ T8675] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  174.700605][ T8680] netlink: 'syz.4.1835': attribute type 30 has an invalid length.
[  174.764594][ T8682] FAULT_INJECTION: forcing a failure.
[  174.764594][ T8682] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  174.765292][ T8684] SELinux: security_context_str_to_sid (�O*3���!�L;���(x�?8��>${�S��7�#����!g��.&[n٦��9�P9\E�T�Wq��3�H*�
8��YYL����G�R�!I��*���'��) failed with errno=-22
[  174.777855][ T8682] CPU: 0 UID: 0 PID: 8682 Comm: syz.0.1837 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  174.777893][ T8682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  174.777911][ T8682] Call Trace:
[  174.777923][ T8682]  <TASK>
[  174.777934][ T8682]  __dump_stack+0x1d/0x30
[  174.777971][ T8682]  dump_stack_lvl+0xe8/0x140
[  174.778044][ T8682]  dump_stack+0x15/0x1b
[  174.778084][ T8682]  should_fail_ex+0x265/0x280
[  174.778186][ T8682]  should_fail+0xb/0x20
[  174.778213][ T8682]  should_fail_usercopy+0x1a/0x20
[  174.778303][ T8682]  _copy_from_user+0x1c/0xb0
[  174.778341][ T8682]  addrconf_add_ifaddr+0x93/0x270
[  174.778386][ T8682]  inet6_ioctl+0xb0/0x190
[  174.778424][ T8682]  ? ioctl_has_perm+0x255/0x2a0
[  174.778519][ T8682]  sock_do_ioctl+0x73/0x220
[  174.778574][ T8682]  sock_ioctl+0x41b/0x610
[  174.778621][ T8682]  ? __pfx_sock_ioctl+0x10/0x10
[  174.778663][ T8682]  __se_sys_ioctl+0xce/0x140
[  174.778754][ T8682]  __x64_sys_ioctl+0x43/0x50
[  174.778804][ T8682]  x64_sys_call+0x14b0/0x3000
[  174.778839][ T8682]  do_syscall_64+0xd8/0x2a0
[  174.778946][ T8682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.778977][ T8682] RIP: 0033:0x7fa689fef749
[  174.778998][ T8682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.779086][ T8682] RSP: 002b:00007fa688a4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  174.779120][ T8682] RAX: ffffffffffffffda RBX: 00007fa68a245fa0 RCX: 00007fa689fef749
[  174.779167][ T8682] RDX: 0000200000005b80 RSI: 0000000000008916 RDI: 0000000000000003
[  174.779184][ T8682] RBP: 00007fa688a4f090 R08: 0000000000000000 R09: 0000000000000000
[  174.779202][ T8682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  174.779219][ T8682] R13: 00007fa68a246038 R14: 00007fa68a245fa0 R15: 00007ffd4b7b6168
[  174.779245][ T8682]  </TASK>
[  174.984218][ T8685] iso9660: Unknown parameter 'lo00000�'
[  175.109884][ T8698] netlink: 'syz.4.1842': attribute type 21 has an invalid length.
[  175.131119][ T8698] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  175.131119][ T8698]    program syz.4.1842 not setting count and/or reply_len properly
[  175.186923][ T8703] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  175.197085][ T8703] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  175.197120][ T8703] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  175.218844][ T8703] JBD2: no valid journal superblock found
[  175.218860][ T8703] EXT4-fs (loop2): Could not load journal inode
[  175.423003][ T8702] EXT4-fs: Ignoring removed bh option
[  175.438312][ T8702] EXT4-fs: inline encryption not supported
[  175.454114][ T8702] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  175.470156][ T8702] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  175.480493][ T8702] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.1844: lblock 2 mapped to illegal pblock 2 (length 1)
[  175.495525][ T8702] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.1844: lblock 0 mapped to illegal pblock 48 (length 1)
[  175.509938][ T8702] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1844: Failed to acquire dquot type 0
[  175.521824][ T8702] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  175.531515][ T8702] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.1844: mark_inode_dirty error
[  175.543484][ T8702] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  175.555519][ T8702] EXT4-fs (loop4): 1 orphan inode deleted
[  175.562275][ T8702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.569270][ T8715] SELinux: security_context_str_to_sid (�O*3���!�L;���(x�?8��>${�S��7�#����!g��.&[n٦��9�P9\E�T�Wq��3�H*�
8��YYL����G�R�!I��*���'��) failed with errno=-22
[  175.592674][ T1620] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1)
[  175.608830][ T8705] EXT4-fs: Ignoring removed bh option
[  175.613589][ T8715] iso9660: Unknown parameter 'lo00000�'
[  175.614425][ T8705] EXT4-fs: inline encryption not supported
[  175.626833][ T1620] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0
[  175.639937][ T8705] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  175.653530][ T8702] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.664244][ T8705] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  175.681846][ T8705] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.1845: lblock 2 mapped to illegal pblock 2 (length 1)
[  175.696456][ T8705] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.1845: lblock 0 mapped to illegal pblock 48 (length 1)
[  175.701387][ T8702] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.1844: Invalid inode table block 1 in block_group 0
[  175.724347][ T8705] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1845: Failed to acquire dquot type 0
[  175.736373][ T8705] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  175.736522][ T8702] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  175.746151][ T8705] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.1845: mark_inode_dirty error
[  175.756501][ T8702] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz.4.1844: mark_inode_dirty error
[  175.777972][ T8705] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  175.792725][ T8705] EXT4-fs (loop0): 1 orphan inode deleted
[  175.810047][   T53] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  175.832260][ T8705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.845559][   T53] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0
[  175.971556][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.981855][ T3322] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0
[  176.013545][ T3322] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  176.038167][ T3322] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error
[  176.060475][ T8727] netlink: 'syz.1.1854': attribute type 21 has an invalid length.
[  176.068500][ T8727] __nla_validate_parse: 12 callbacks suppressed
[  176.068580][ T8727] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1854'.
[  176.121195][ T8730] FAT-fs (loop2): Directory bread(block 64) failed
[  176.130191][ T8727] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  176.130191][ T8727]    program syz.1.1854 not setting count and/or reply_len properly
[  176.147124][ T8730] FAT-fs (loop2): Directory bread(block 65) failed
[  176.147171][ T8730] FAT-fs (loop2): Directory bread(block 66) failed
[  176.175468][ T8730] FAT-fs (loop2): Directory bread(block 67) failed
[  176.194380][ T8730] FAT-fs (loop2): Directory bread(block 68) failed
[  176.201275][ T8730] FAT-fs (loop2): Directory bread(block 69) failed
[  176.225043][ T8739] netlink: 'syz.1.1857': attribute type 30 has an invalid length.
[  176.236700][ T8730] FAT-fs (loop2): Directory bread(block 70) failed
[  176.245575][ T8730] FAT-fs (loop2): Directory bread(block 71) failed
[  176.252874][ T8730] FAT-fs (loop2): Directory bread(block 72) failed
[  176.259802][ T8730] FAT-fs (loop2): Directory bread(block 73) failed
[  176.497757][ T8754] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  176.509013][ T8754] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  176.520002][ T8754] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  176.530288][ T8754] JBD2: no valid journal superblock found
[  176.536098][ T8754] EXT4-fs (loop0): Could not load journal inode
[  176.637260][   T29] kauditd_printk_skb: 2844 callbacks suppressed
[  176.637276][   T29] audit: type=1326 audit(1765370981.201:254508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.3.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b79452005 code=0x7ffc0000
[  176.668338][   T29] audit: type=1326 audit(1765370981.201:254510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.3.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b79452005 code=0x7ffc0000
[  176.692109][   T29] audit: type=1326 audit(1765370981.201:254509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.3.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b794165e7 code=0x7ffc0000
[  176.715659][   T29] audit: type=1326 audit(1765370981.201:254511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.3.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b793bb829 code=0x7ffc0000
[  176.739421][   T29] audit: type=1326 audit(1765370981.201:254512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.3.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f8b7941f749 code=0x7ffc0000
[  176.762872][   T29] audit: type=1326 audit(1765370981.201:254513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.3.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b79452005 code=0x7ffc0000
[  176.786480][   T29] audit: type=1326 audit(1765370981.201:254514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8731 comm="syz.4.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad729f749 code=0x7ffc0000
[  176.810082][   T29] audit: type=1326 audit(1765370981.201:254515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.3.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b79452005 code=0x7ffc0000
[  176.833710][   T29] audit: type=1326 audit(1765370981.201:254516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.3.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b79452005 code=0x7ffc0000
[  176.857364][   T29] audit: type=1326 audit(1765370981.201:254517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.3.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b79452005 code=0x7ffc0000
[  176.983119][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1866'.
[  176.998764][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1866'.
[  177.235407][ T8772] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1868'.
[  177.261236][ T8774] 9p: Bad value for 'source'
[  177.367911][ T8782] set_capacity_and_notify: 9 callbacks suppressed
[  177.367926][ T8782] loop1: detected capacity change from 0 to 256
[  177.405813][ T8782] FAT-fs (loop1): Directory bread(block 64) failed
[  177.414312][ T8786] netlink: 'syz.3.1874': attribute type 21 has an invalid length.
[  177.421971][ T8784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1875'.
[  177.422210][ T8786] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1874'.
[  177.453023][ T8782] FAT-fs (loop1): Directory bread(block 65) failed
[  177.460759][ T8786] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  177.460759][ T8786]    program syz.3.1874 not setting count and/or reply_len properly
[  177.477883][ T8782] FAT-fs (loop1): Directory bread(block 66) failed
[  177.477909][ T8782] FAT-fs (loop1): Directory bread(block 67) failed
[  177.477938][ T8782] FAT-fs (loop1): Directory bread(block 68) failed
[  177.478006][ T8782] FAT-fs (loop1): Directory bread(block 69) failed
[  177.478029][ T8782] FAT-fs (loop1): Directory bread(block 70) failed
[  177.478045][ T8782] FAT-fs (loop1): Directory bread(block 71) failed
[  177.478071][ T8782] FAT-fs (loop1): Directory bread(block 72) failed
[  177.478100][ T8782] FAT-fs (loop1): Directory bread(block 73) failed
[  177.502842][ T8784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1875'.
[  177.706261][ T8798] netlink: 'syz.0.1879': attribute type 21 has an invalid length.
[  177.706280][ T8798] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1879'.
[  177.710023][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1880'.
[  177.713999][ T8799] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1880'.
[  177.742400][ T8798] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  177.742400][ T8798]    program syz.0.1879 not setting count and/or reply_len properly
[  177.798746][ T8801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8801 comm=syz.1.1878
[  177.834023][ T8801] lo speed is unknown, defaulting to 1000
[  178.329646][ T8815] loop4: detected capacity change from 0 to 128
[  178.365367][ T8818] 8021q: adding VLAN 0 to HW filter on device bond1
[  178.471075][ T8826] netlink: 'syz.3.1888': attribute type 21 has an invalid length.
[  178.497284][ T8823] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  178.509772][ T8828] loop1: detected capacity change from 0 to 256
[  178.534337][ T8826] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  178.534337][ T8826]    program syz.3.1888 not setting count and/or reply_len properly
[  178.560209][ T8828] FAT-fs (loop1): Directory bread(block 64) failed
[  178.580233][ T8828] FAT-fs (loop1): Directory bread(block 65) failed
[  178.593899][ T8828] FAT-fs (loop1): Directory bread(block 66) failed
[  178.601357][ T8828] FAT-fs (loop1): Directory bread(block 67) failed
[  178.608564][ T8828] FAT-fs (loop1): Directory bread(block 68) failed
[  178.615348][ T8828] FAT-fs (loop1): Directory bread(block 69) failed
[  178.622556][ T8828] FAT-fs (loop1): Directory bread(block 70) failed
[  178.629292][ T8828] FAT-fs (loop1): Directory bread(block 71) failed
[  178.636012][ T8828] FAT-fs (loop1): Directory bread(block 72) failed
[  178.643345][ T8828] FAT-fs (loop1): Directory bread(block 73) failed
[  178.709292][ T8838] loop1: detected capacity change from 0 to 1024
[  178.728271][ T8838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  178.740919][ T8838] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.752735][ T8838] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1893: bg 0: block 112: padding at end of block bitmap is not set
[  178.786552][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  178.797732][ T8843] loop3: detected capacity change from 0 to 1024
[  178.806242][ T8843] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  178.841100][ T8843] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  178.852117][ T8843] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  178.875057][ T8843] JBD2: no valid journal superblock found
[  178.881020][ T8843] EXT4-fs (loop3): Could not load journal inode
[  178.903710][ T8849] loop1: detected capacity change from 0 to 1024
[  178.915972][ T8849] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  178.934611][ T8849] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  178.945626][ T8849] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  178.964169][ T8849] JBD2: no valid journal superblock found
[  178.970019][ T8849] EXT4-fs (loop1): Could not load journal inode
[  178.990698][ T8851] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  179.077711][ T8857] netlink: 'syz.2.1900': attribute type 30 has an invalid length.
[  179.222581][ T8867] loop0: detected capacity change from 0 to 256
[  179.237259][ T8867] FAT-fs (loop0): Directory bread(block 64) failed
[  179.243965][ T8867] FAT-fs (loop0): Directory bread(block 65) failed
[  179.250869][ T8867] FAT-fs (loop0): Directory bread(block 66) failed
[  179.257755][ T8867] FAT-fs (loop0): Directory bread(block 67) failed
[  179.264583][ T8867] FAT-fs (loop0): Directory bread(block 68) failed
[  179.271372][ T8867] FAT-fs (loop0): Directory bread(block 69) failed
[  179.278182][ T8867] FAT-fs (loop0): Directory bread(block 70) failed
[  179.284782][ T8867] FAT-fs (loop0): Directory bread(block 71) failed
[  179.291479][ T8867] FAT-fs (loop0): Directory bread(block 72) failed
[  179.298061][ T8867] FAT-fs (loop0): Directory bread(block 73) failed
[  179.363556][ T8874] loop2: detected capacity change from 0 to 256
[  179.384746][ T8874] FAT-fs (loop2): Directory bread(block 64) failed
[  179.391632][ T8874] FAT-fs (loop2): Directory bread(block 65) failed
[  179.398517][ T8874] FAT-fs (loop2): Directory bread(block 66) failed
[  179.405193][ T8874] FAT-fs (loop2): Directory bread(block 67) failed
[  179.411880][ T8874] FAT-fs (loop2): Directory bread(block 68) failed
[  179.419023][ T8874] FAT-fs (loop2): Directory bread(block 69) failed
[  179.425636][ T8874] FAT-fs (loop2): Directory bread(block 70) failed
[  179.432254][ T8874] FAT-fs (loop2): Directory bread(block 71) failed
[  179.438870][ T8874] FAT-fs (loop2): Directory bread(block 72) failed
[  179.445441][ T8874] FAT-fs (loop2): Directory bread(block 73) failed
[  179.512801][ T8880] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  179.559974][ T8887] netlink: 'syz.4.1912': attribute type 30 has an invalid length.
[  179.604840][ T8891] netlink: 'syz.3.1913': attribute type 30 has an invalid length.
[  179.761411][ T8905] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  179.761411][ T8905]    program syz.1.1918 not setting count and/or reply_len properly
[  179.781436][ T8909] loop4: detected capacity change from 0 to 256
[  179.798910][ T8909] FAT-fs (loop4): Directory bread(block 64) failed
[  179.812055][ T8909] FAT-fs (loop4): Directory bread(block 65) failed
[  179.819682][ T8909] FAT-fs (loop4): Directory bread(block 66) failed
[  179.829354][ T8909] FAT-fs (loop4): Directory bread(block 67) failed
[  179.836590][ T8909] FAT-fs (loop4): Directory bread(block 68) failed
[  179.849808][ T8914] FAULT_INJECTION: forcing a failure.
[  179.849808][ T8914] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  179.863104][ T8914] CPU: 0 UID: 0 PID: 8914 Comm: syz.2.1922 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  179.863131][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  179.863143][ T8914] Call Trace:
[  179.863151][ T8914]  <TASK>
[  179.863229][ T8914]  __dump_stack+0x1d/0x30
[  179.863254][ T8914]  dump_stack_lvl+0xe8/0x140
[  179.863283][ T8914]  dump_stack+0x15/0x1b
[  179.863338][ T8914]  should_fail_ex+0x265/0x280
[  179.863369][ T8914]  should_fail+0xb/0x20
[  179.863393][ T8914]  should_fail_usercopy+0x1a/0x20
[  179.863485][ T8914]  _copy_from_user+0x1c/0xb0
[  179.863520][ T8914]  ___sys_sendmsg+0xc1/0x1d0
[  179.863590][ T8914]  __x64_sys_sendmsg+0xd4/0x160
[  179.863626][ T8914]  x64_sys_call+0x17ba/0x3000
[  179.863658][ T8914]  do_syscall_64+0xd8/0x2a0
[  179.863741][ T8914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.863766][ T8914] RIP: 0033:0x7f3e311ff749
[  179.863786][ T8914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.863809][ T8914] RSP: 002b:00007f3e2fc5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  179.863949][ T8914] RAX: ffffffffffffffda RBX: 00007f3e31455fa0 RCX: 00007f3e311ff749
[  179.863966][ T8914] RDX: 00000000000440b0 RSI: 0000200000000280 RDI: 0000000000000005
[  179.864026][ T8914] RBP: 00007f3e2fc5f090 R08: 0000000000000000 R09: 0000000000000000
[  179.864042][ T8914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  179.864056][ T8914] R13: 00007f3e31456038 R14: 00007f3e31455fa0 R15: 00007ffe435f42f8
[  179.864078][ T8914]  </TASK>
[  179.864996][ T8909] FAT-fs (loop4): Directory bread(block 69) failed
[  180.030596][ T8909] FAT-fs (loop4): Directory bread(block 70) failed
[  180.037218][ T8909] FAT-fs (loop4): Directory bread(block 71) failed
[  180.044257][ T8909] FAT-fs (loop4): Directory bread(block 72) failed
[  180.050911][ T8909] FAT-fs (loop4): Directory bread(block 73) failed
[  180.074659][ T8920] loop2: detected capacity change from 0 to 128
[  180.238500][ T8930] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  180.238531][ T8930] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  180.239123][ T8930] EXT4-fs (loop3): 1 truncate cleaned up
[  180.239694][ T8930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.256140][ T8930] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 4: comm syz.3.1928: lblock 0 mapped to illegal pblock 4 (length 1)
[  180.256712][ T8930] EXT4-fs (loop3): Remounting filesystem read-only
[  180.305799][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.414722][ T8944] netlink: 'syz.4.1931': attribute type 30 has an invalid length.
[  180.429227][ T8942] netlink: 'syz.3.1932': attribute type 21 has an invalid length.
[  180.503143][ T8942] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  180.503143][ T8942]    program syz.3.1932 not setting count and/or reply_len properly
[  180.599937][ T8949] FAT-fs (loop4): Directory bread(block 64) failed
[  180.618608][ T8949] FAT-fs (loop4): Directory bread(block 65) failed
[  180.625303][ T8949] FAT-fs (loop4): Directory bread(block 66) failed
[  180.638727][ T8949] FAT-fs (loop4): Directory bread(block 67) failed
[  180.654406][ T8949] FAT-fs (loop4): Directory bread(block 68) failed
[  180.657371][ T8952] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  180.657371][ T8952]    program syz.3.1935 not setting count and/or reply_len properly
[  180.666675][ T8949] FAT-fs (loop4): Directory bread(block 69) failed
[  180.688167][ T8949] FAT-fs (loop4): Directory bread(block 70) failed
[  180.695346][ T8949] FAT-fs (loop4): Directory bread(block 71) failed
[  180.702483][ T8949] FAT-fs (loop4): Directory bread(block 72) failed
[  180.715687][ T8949] FAT-fs (loop4): Directory bread(block 73) failed
[  181.058337][ T8964] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  181.078362][ T8964] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  181.089558][ T8964] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  181.099827][ T8964] JBD2: no valid journal superblock found
[  181.105745][ T8964] EXT4-fs (loop1): Could not load journal inode
[  181.464589][ T8970] __nla_validate_parse: 19 callbacks suppressed
[  181.464605][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1942'.
[  181.563944][ T8977] netlink: 'syz.4.1945': attribute type 30 has an invalid length.
[  181.588832][ T8978] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1944'.
[  181.606281][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1944'.
[  181.624253][ T8980] EXT4-fs (loop3): inodes count not valid: 0 vs 32
[  181.651689][   T29] kauditd_printk_skb: 2325 callbacks suppressed
[  181.651707][   T29] audit: type=1326 audit(1765370986.211:256843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.2.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f3e311ff749 code=0x7ffc0000
[  181.661764][   T29] audit: type=1326 audit(1765370986.221:256844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.2.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f3e311ff749 code=0x7ffc0000
[  181.671845][   T29] audit: type=1326 audit(1765370986.231:256845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.2.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f3e311ff749 code=0x7ffc0000
[  181.681947][   T29] audit: type=1326 audit(1765370986.241:256846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.2.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f3e311ff749 code=0x7ffc0000
[  181.776167][   T29] audit: type=1326 audit(1765370986.341:256847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.2.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f3e311ff749 code=0x7ffc0000
[  181.801778][   T29] audit: type=1326 audit(1765370986.371:256848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.2.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f3e311ff749 code=0x7ffc0000
[  181.825514][   T29] audit: type=1400 audit(1765370986.371:256849): avc:  denied  { create } for  pid=8982 comm="syz.4.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  181.825957][   T29] audit: type=1326 audit(1765370986.371:256850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8984 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7941f749 code=0x7ffc0000
[  181.826027][   T29] audit: type=1326 audit(1765370986.371:256851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8984 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7941f749 code=0x7ffc0000
[  181.826202][   T29] audit: type=1326 audit(1765370986.391:256852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.2.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f3e311ff749 code=0x7ffc0000
[  182.004506][ T8985] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  182.004506][ T8985]    program syz.3.1948 not setting count and/or reply_len properly
[  182.601633][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1951'.
[  182.669887][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1955'.
[  182.811957][ T9018] netlink: 'syz.4.1958': attribute type 30 has an invalid length.
[  182.992442][ T9026] netlink: 'syz.3.1962': attribute type 21 has an invalid length.
[  183.000492][ T9026] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1962'.
[  183.044578][ T9026] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  183.044578][ T9026]    program syz.3.1962 not setting count and/or reply_len properly
[  183.108573][ T9029] netlink: 'syz.1.1963': attribute type 30 has an invalid length.
[  183.147296][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1964'.
[  183.602275][ T9050] set_capacity_and_notify: 4 callbacks suppressed
[  183.602290][ T9050] loop2: detected capacity change from 0 to 1024
[  183.632953][ T9050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  183.657771][ T9050] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.677455][ T9050] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1972: bg 0: block 112: padding at end of block bitmap is not set
[  183.693138][ T9059] SELinux: security_context_str_to_sid (�O*3���!�L;���(x�?8��>${�S��7�#����!g��.&[n٦��9�P9\E�T�Wq��3�H*�
8��YYL����G�R�!I��*���'��) failed with errno=-22
[  183.717378][ T9059] loop4: detected capacity change from 0 to 164
[  183.728522][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  183.738286][ T9059] iso9660: Unknown parameter 'lo00000�'
[  183.802756][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1976'.
[  183.853929][ T9071] netlink: 'syz.3.1979': attribute type 21 has an invalid length.
[  183.861881][ T9071] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1979'.
[  183.890159][ T9071] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  183.890159][ T9071]    program syz.3.1979 not setting count and/or reply_len properly
[  183.919492][ T9075] loop0: detected capacity change from 0 to 1024
[  183.960156][ T9075] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  183.987933][ T9075] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  183.999029][ T9075] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  184.030877][ T9075] JBD2: no valid journal superblock found
[  184.036722][ T9075] EXT4-fs (loop0): Could not load journal inode
[  184.101399][ T9062] loop1: detected capacity change from 0 to 1024
[  184.161772][ T9062] EXT4-fs: Ignoring removed bh option
[  184.170672][ T9062] EXT4-fs: inline encryption not supported
[  184.185927][ T9062] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  184.227269][ T9062] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  184.238859][ T9062] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.1977: lblock 2 mapped to illegal pblock 2 (length 1)
[  184.261831][ T9062] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.1977: lblock 0 mapped to illegal pblock 48 (length 1)
[  184.291917][ T9062] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1977: Failed to acquire dquot type 0
[  184.311757][ T9062] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  184.322141][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1986'.
[  184.331987][ T9062] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.1977: mark_inode_dirty error
[  184.343950][ T9062] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  184.359962][ T9062] EXT4-fs (loop1): 1 orphan inode deleted
[  184.370837][ T9062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.383503][  T344] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  184.402315][  T344] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0
[  184.443970][ T9062] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.454691][ T9062] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.1977: Invalid inode table block 1 in block_group 0
[  184.468008][ T9062] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  184.486542][ T9062] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz.1.1977: mark_inode_dirty error
[  184.494941][ T9099] SELinux: security_context_str_to_sid (�O*3���!�L;���(x�?8��>${�S��7�#����!g��.&[n٦��9�P9\E�T�Wq��3�H*�
8��YYL����G�R�!I��*���'��) failed with errno=-22
[  184.519614][ T9099] loop2: detected capacity change from 0 to 164
[  184.526676][ T9099] iso9660: Unknown parameter 'lo00000�'
[  184.605852][ T9101] netlink: 'syz.1.1991': attribute type 21 has an invalid length.
[  184.630091][ T9101] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  184.630091][ T9101]    program syz.1.1991 not setting count and/or reply_len properly
[  184.748138][ T9105] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  184.887486][ T9118] loop1: detected capacity change from 0 to 1024
[  184.905008][ T9118] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  184.928954][ T9118] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  184.940038][ T9118] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  184.950281][ T9118] JBD2: no valid journal superblock found
[  184.956172][ T9118] EXT4-fs (loop1): Could not load journal inode
[  184.993178][ T9119] loop2: detected capacity change from 0 to 1024
[  185.026932][ T9119] EXT4-fs: inline encryption not supported
[  185.057760][ T9119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.075910][ T9119] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1992: Allocating blocks 497-513 which overlap fs metadata
[  185.529628][ T9132] loop4: detected capacity change from 0 to 256
[  185.549720][ T9132] FAT-fs (loop4): Directory bread(block 64) failed
[  185.556854][ T9132] FAT-fs (loop4): Directory bread(block 65) failed
[  185.563678][ T9132] FAT-fs (loop4): Directory bread(block 66) failed
[  185.571100][ T9132] FAT-fs (loop4): Directory bread(block 67) failed
[  185.577995][ T9132] FAT-fs (loop4): Directory bread(block 68) failed
[  185.585039][ T9132] FAT-fs (loop4): Directory bread(block 69) failed
[  185.592050][ T9132] FAT-fs (loop4): Directory bread(block 70) failed
[  185.598960][ T9132] FAT-fs (loop4): Directory bread(block 71) failed
[  185.605669][ T9132] FAT-fs (loop4): Directory bread(block 72) failed
[  185.613194][ T9132] FAT-fs (loop4): Directory bread(block 73) failed
[  185.664436][ T9102] EXT4-fs (loop2): pa ffff888107aa4700: logic 256, phys. 369, len 9
[  185.672697][ T9102] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1
[  185.773626][ T9141] netlink: 'syz.4.2006': attribute type 21 has an invalid length.
[  185.794452][ T3005] ==================================================================
[  185.802599][ T3005] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath
[  185.810639][ T3005] 
[  185.812990][ T3005] write to 0xffff88811b0f8f30 of 8 bytes by task 5843 on cpu 1:
[  185.820644][ T3005]  dentry_unlink_inode+0x65/0x260
[  185.825714][ T3005]  d_delete+0x164/0x180
[  185.829920][ T3005]  d_delete_notify+0x32/0x100
[  185.834623][ T3005]  vfs_unlink+0x32c/0x440
[  185.838973][ T3005]  do_unlinkat+0x1cd/0x4b0
[  185.841758][ T9145] netlink: 'syz.0.2008': attribute type 30 has an invalid length.
[  185.843408][ T3005]  __x64_sys_unlink+0x2e/0x40
[  185.843440][ T3005]  x64_sys_call+0x2f48/0x3000
[  185.860685][ T3005]  do_syscall_64+0xd8/0x2a0
[  185.863828][ T9141] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  185.863828][ T9141]    program syz.4.2006 not setting count and/or reply_len properly
[  185.865220][ T3005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.865252][ T3005] 
[  185.865259][ T3005] read to 0xffff88811b0f8f30 of 8 bytes by task 3005 on cpu 0:
[  185.897910][ T3005]  step_into_slowpath+0x113/0x480
[  185.903052][ T3005]  path_lookupat+0x330/0x500
[  185.907702][ T3005]  filename_lookup+0x147/0x340
[  185.912488][ T3005]  do_readlinkat+0x7d/0x320
[  185.917009][ T3005]  __x64_sys_readlink+0x47/0x60
[  185.921878][ T3005]  x64_sys_call+0x2af1/0x3000
[  185.926570][ T3005]  do_syscall_64+0xd8/0x2a0
[  185.931099][ T3005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.937002][ T3005] 
[  185.939328][ T3005] value changed: 0xffff88811bc2cf08 -> 0x0000000000000000
[  185.946435][ T3005] 
[  185.948761][ T3005] Reported by Kernel Concurrency Sanitizer on:
[  185.954910][ T3005] CPU: 0 UID: 0 PID: 3005 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) 
[  185.964210][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  185.974376][ T3005] ==================================================================
[  185.983817][ T9146] loop1: detected capacity change from 0 to 1024
[  185.996157][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.005360][ T9146] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  186.006690][ T9146] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  186.026350][ T9146] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  186.039357][ T9146] JBD2: no valid journal superblock found
[  186.045335][ T9146] EXT4-fs (loop1): Could not load journal inode