last executing test programs:

1m41.501185483s ago: executing program 32 (id=513):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffff001}, 0x18)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109)
sendfile(r0, r0, 0x0, 0xb)

1m40.20562896s ago: executing program 33 (id=517):
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0xffb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x42cd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
syz_clone3(&(0x7f0000000400)={0x4000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000008500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x2263, 0x41)
connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0xe41, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, 0x0, 0x2, 0x4}}, 0x20)
syz_io_uring_setup(0x3359, &(0x7f0000000180)={0x0, 0x29e3, 0x40, 0x2, 0x4a, 0x0, r4}, &(0x7f0000000580), &(0x7f0000000200))
sendto(r2, &(0x7f0000000780)="860ff58f8536d414af1754fa6584cf2573d0b5cbb3fe3b25442b83959bd1d7c65d78c61398401622838ae4ebc5964f6c2e2d245b6b70269621a7c0833c8551d140986a78ea632392fc1bff1a50c237bcfa46563cf4ad398d", 0x58, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0)
r5 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x200)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10)
read$usbmon(r5, 0x0, 0x0)

1m34.185629115s ago: executing program 4 (id=567):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20)
mkdir(&(0x7f0000000400)='./file0\x00', 0x4)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[], [], 0x6b}})

1m34.052378002s ago: executing program 4 (id=570):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a)

1m33.990233124s ago: executing program 4 (id=573):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timer_delete(0x0)
writev(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000880)="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", 0x107}, {&(0x7f0000000300)="f720545dd3b03efebdc5e0fccd4ebd5a12deb78fb2c5b13465656b6d7bbd6359c662bc2d12228e8af99d9f1012e0d43912798e5d1291ed84aeef6e", 0x3b}, {&(0x7f0000000cc0)="2d7c05b661ed61dbb0ff95a0f7db1d70a1e8cbe5d67df0ffe7d7234e5c2579ff67a6588289a685d19db6d2e3b65b96e2bf4119a62a932b6770b873c79f6a9117acd583f0365093cd871d5c369eaff34d0513b222e38fcdce7b1f2b0d86e04b3eaea9966d878e96502cc03f40ae98e68f030c88e146e7747eeba91c67349f0dcbf6fd725760b2ec1a7b4c9fcbcea37f6c34a94105e43dac4871cde933f9fad5c9410ca97fe8726ed54b6ab6d9135623c3665e4cecfbf24d3921df819808ea845530ce7a9ec53ed7c09278de85a2a240fba90e366e860ad2645c317dba94345eb7e24274b21a58b7870ebaab92d8d5f52637b3d8ff40f30ad4a26a7fa562350711e70d011c16e3569b5d732a83cf2753de6f57d1591cd3dbe3b0782d02bf3a510902653e5abf26a08a51cfc9bf1947b68ad772cd56de456fcdfdea6cd15b275ada41ea95e8679d885dca32cc8bbc749a71ea850c2be65a3e0f5cb22ca88a1b0c5a54115a6890e82db80e5299f6e652291787fb8bf2298344219e9d893429707258f679bc60c9fae25cb986e39e47ef9929e177ce63fd520d3b5e72c5f4d00a76477980d9d5a61e03b3a25b255cf8895d6439671676e2463d947d7f8ecc79672bc248a3d81958eeb6620aefc534fb1121d1f72e1fb81d64dc54ccf19808ae2f4135f221ee70c2b66a6935622cc9a2c9f8fdf5fbc44f8bd3423c7a65a65ffaca932bfe3610deb25c07a5a1162f95f559555c6ebabe3f1ad3a937982ac2e8dee2060a6d211c838d823847512b36915c869d0e361588cde4b9c43f9b64b09df82bc044e8e903badb8c34dd344538ab75e37bc68bfc1cec94fde22be64919672e23a2c8eef03b6e19fe0f91abfebfbaa7531eaa5d8df44335c4ee8b335e093bffdffe0764ee00fe1b1255b6f9add179687fdc825f11c7ca42b6f0b139ef78e2da1d89a784132bdaa4e25ebbd6aa5e8e21c4408266c69dd6999dc2cf7d5041650577", 0x2be}], 0x3)
sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffeff9)

1m33.845718971s ago: executing program 4 (id=577):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18)
open(&(0x7f0000000740)='./bus\x00', 0x163361, 0x501c998c4dfcafcd)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {@mblk_io_submit}, {@barrier}, {@nodiscard}, {@nogrpid}, {@bh}]}, 0x0, 0x55a, &(0x7f0000001980)="$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")
syz_open_procfs$pagemap(0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0)

1m32.616856024s ago: executing program 4 (id=586):
alarm(0x10000)
r0 = eventfd(0x2)
read$eventfd(r0, &(0x7f00000012c0), 0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2)
r3 = dup(r2)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x2, 0x9, 0x0, 0x0, 0x0})
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x84)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000600)="53fc7a528ef2ea08005c43c6", 0xffeb}], 0x1}, 0x40)
r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r11=>0x0})
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r13=>0x0})
setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f0000000000)={r13, 0x1, 0x6}, 0x10)
setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f00000001c0)={r13, 0x1, 0x6, @random="f85c3132d479"}, 0x10)
setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f0000000240)={r13, 0x1, 0x6, @random='\x00Q\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB="00000000000000001000"/20, @ANYRES32=r11, @ANYRES32, @ANYBLOB="0000000002000000000000000000"], 0x50)

1m30.352146974s ago: executing program 4 (id=601):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a)

1m30.351722654s ago: executing program 34 (id=601):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a)

1m14.519596903s ago: executing program 5 (id=741):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r2, 0xffffffffffffffff, 0x18, 0x0, @void}, 0x10)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
syz_emit_ethernet(0xd2, &(0x7f0000000540)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x9c, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "1dff92fa761d6a4183d004fcb25a18f1fe9ed0370b3cc1a6c15fd072c8cdb5c8", "d1bbd0b4e4c368d55300fc392d7591db8e69175542981a9f60985f8571217db2123da2b086d8b073974aa30585dc7648", "ce70dd7e03da79bdceed6fb00a1a3c6889e802f5ab6cca1c1618d667", {"afde38cb1f53fca4221ae808defb7a46", "46ba978e9c3a83b320e3c5654bf8d17d"}}}}}}}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0)=0x1, 0x4)
lsetxattr(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='b[rgs4}%.'], 0x0, 0x0, 0x3)
mprotect(&(0x7f0000378000/0x3000)=nil, 0x3000, 0x1)
ioctl$TIOCCBRK(r0, 0x5428)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)

1m14.424031857s ago: executing program 5 (id=744):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000000101030000000000000000000a00000306001240000200004000018006000340000300002c0001"], 0x5c}}, 0x4000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c)
syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
fsopen(&(0x7f0000000040)='btrfs\x00', 0x1)

1m14.203422657s ago: executing program 6 (id=748):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x0, 0x0})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
ioprio_get$uid(0x3, 0x0)

1m14.199522668s ago: executing program 5 (id=749):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@grpjquota}, {@resgid}, {@nojournal_checksum}, {@discard}, {@nobh}, {@inlinecrypt}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@dioread_nolock}]}, 0x1, 0x565, &(0x7f00000003c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x0, 0x8000c62)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143442, 0x0)
pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)

1m14.105843721s ago: executing program 6 (id=751):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x204000, &(0x7f0000001600)={[{@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x4ab}}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@discard}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x715a4c9e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r3 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2})
sendmmsg$inet(r3, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000300)="894c22cbf51c0dff89b9a66c8b26efc3488657afe84c6e899f5edbc79fd95624d5013c069d4eda24382ff3fef34d87fa2c9dbfd31cf24c35ee8949a9e3a1d56d093345e9f9e5857700"/83, 0x53}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}], 0x1, 0x0)

1m13.91862234s ago: executing program 5 (id=753):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18)
open(&(0x7f0000000740)='./bus\x00', 0x163361, 0x501c998c4dfcafcd)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {@mblk_io_submit}, {@barrier}, {@nodiscard}, {@nogrpid}, {@bh}]}, 0x0, 0x55a, &(0x7f0000001980)="$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")
syz_open_procfs$pagemap(0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='sched_switch\x00', r7, 0x0, 0x10}, 0x18)
sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xe, 0xc0, 0x0, 0xd, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_sa2={0x2, 0x13, 0x7f, 0x0, 0x0, 0x70bd25}, @sadb_lifetime={0x4, 0x3, 0x63c9, 0x7, 0x402, 0x1}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_x_sa2={0x2, 0x13, 0x8, 0x0, 0x0, 0x70bd27, 0x3506}, @sadb_sa={0x2, 0x1, 0x4d4, 0x8, 0x7, 0xe8, 0x2, 0x40000000}]}, 0x68}}, 0x801)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

1m13.850912162s ago: executing program 6 (id=754):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
ioprio_set$pid(0x1, 0x0, 0x6000)

1m13.771419486s ago: executing program 6 (id=755):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18)
open(&(0x7f0000000740)='./bus\x00', 0x163361, 0x501c998c4dfcafcd)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {@mblk_io_submit}, {@barrier}, {@nodiscard}, {@nogrpid}, {@bh}]}, 0x0, 0x55a, &(0x7f0000001980)="$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")
syz_open_procfs$pagemap(0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='sched_switch\x00', r7, 0x0, 0x10}, 0x18)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

1m12.937786143s ago: executing program 5 (id=758):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e00000065000000500000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000e80)='kmem_cache_free\x00', r0, 0x0, 0x2a34}, 0x18)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)

1m12.879271876s ago: executing program 6 (id=759):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)

1m11.299617685s ago: executing program 6 (id=772):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3})
write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffdf, 0x3, 0x21}, 0x14005})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x41fa, 0x0, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000e80)='kmem_cache_free\x00', r2, 0x0, 0x2a34}, 0x18)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00')
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r4)
r5 = socket$tipc(0x1e, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c6e8d73697a653d30783073fd13693e303037666666666666662c000000000000000000"])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
sendmmsg$inet(r6, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4)

1m11.296754335s ago: executing program 35 (id=772):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3})
write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffdf, 0x3, 0x21}, 0x14005})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x41fa, 0x0, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000e80)='kmem_cache_free\x00', r2, 0x0, 0x2a34}, 0x18)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00')
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r4)
r5 = socket$tipc(0x1e, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c6e8d73697a653d30783073fd13693e303037666666666666662c000000000000000000"])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
sendmmsg$inet(r6, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4)

1m11.242956738s ago: executing program 5 (id=775):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20)
mkdir(&(0x7f0000000400)='./file0\x00', 0x4)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[], [], 0x6b}})

1m11.17822434s ago: executing program 36 (id=775):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20)
mkdir(&(0x7f0000000400)='./file0\x00', 0x4)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[], [], 0x6b}})

1m4.897568588s ago: executing program 8 (id=773):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18)
open(&(0x7f0000000740)='./bus\x00', 0x163361, 0x501c998c4dfcafcd)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {@mblk_io_submit}, {@barrier}, {@nodiscard}, {@nogrpid}, {@bh}]}, 0x0, 0x55a, &(0x7f0000001980)="$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")
syz_open_procfs$pagemap(0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x10}, 0x18)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m3.273212379s ago: executing program 8 (id=835):
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1})
close(r3)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
timer_create(0x0, 0x0, &(0x7f0000bbdffc)=<r5=>0x0)
timer_getoverrun(r5)
syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)

1m1.467210659s ago: executing program 8 (id=851):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10)
sendmsg$tipc(r3, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0)

1m1.466856389s ago: executing program 37 (id=851):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10)
sendmsg$tipc(r3, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0)

40.12187192s ago: executing program 9 (id=1071):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x63, 0xa, 0xff04}, [@call={0x44, 0x0, 0x0, 0x2000000}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
stat(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
quotactl$Q_GETINFO(0xffffffff80000502, 0x0, r5, &(0x7f00000003c0))
mount$9p_rdma(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80, &(0x7f0000000580)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@access_uid={'access', 0x3d, r5}}, {@rq={'rq', 0x3d, 0x9}}, {@timeout={'timeout', 0x3d, 0x7}}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8)

39.935819159s ago: executing program 9 (id=1073):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18)
setreuid(0x0, 0xee00)
unshare(0x22020600)

39.877198581s ago: executing program 9 (id=1074):
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0000000300"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)

39.729342988s ago: executing program 9 (id=1075):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f0000001180)}, 0x20)
r2 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140), 0x0)
r3 = socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x7, &(0x7f0000000640)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x83}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xb5}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000011c0)={[{@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nomblk_io_submit}, {@nodiscard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@bh}, {@grpid}]}, 0x81, 0x553, &(0x7f0000000a40)="$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")
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000840)={0x84, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0xc800}, 0x40020)
r5 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)
fallocate(r5, 0x0, 0x0, 0x8800000)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0xa10408, &(0x7f00000001c0)={[{@nojournal_checksum}, {@dioread_lock}, {@mblk_io_submit}, {}, {@noload}, {@inlinecrypt}, {@debug}, {@usrjquota}]}, 0x3, 0x581, &(0x7f0000000c00)="$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")
r6 = open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e)
mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r7 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0)
r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]})
write$binfmt_misc(r7, &(0x7f0000000340)="be", 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x9, 0x6, 0x1000, 0x2, r6, 0xffffffff, '\x00', 0x0, r5, 0x1, 0x0, 0x1}, 0x50)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="0100000002", 0x5, 0xffffffffffffffff)
dup(r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r9}, 0x38)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000070000b7c47a6306b78e1f0f00000000ca2f3f31c2321a3b0007020000f8ffffffb703000008000010b70400a8722cd00000008500"/73], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10, 0x0, 0xfffffffffffffffe}, 0x18)

38.850218946s ago: executing program 9 (id=1086):
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0000000300"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)

38.589708948s ago: executing program 9 (id=1090):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
timer_delete(0x0)
writev(r1, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x7fffeff9)

38.589454888s ago: executing program 38 (id=1090):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
timer_delete(0x0)
writev(r1, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x7fffeff9)

2.699351261s ago: executing program 7 (id=1615):
syz_open_dev$tty20(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x8)
fchdir(r1)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000300)={[{@usrquota}, {@noblock_validity}, {@mblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a0000000400000008f3000008000000000000", @ANYRES32, @ANYBLOB="9b5800"/20, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r4, 0xb29, 0x0, 0x0, {{}, {@val={0x5}, @void}}}, 0x1c}}, 0x2404c044)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="b1921d91d43adc04000000", @ANYRES16=r4, @ANYBLOB="200029bd7000fedbdf2544000000040070000a0018000303030303030000"], 0x24}, 0x1, 0x0, 0x0, 0x4004084}, 0x4008080)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)

1.929837875s ago: executing program 2 (id=1622):
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="330000000000980b537b8c00003e418fd58cc222f1bc8240579e68534b104f6f7d22f7d067bb42bf48baf6cb3aca06000000000000"], 0x8)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_MTU={0x8, 0x4, 0x3f9}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x20040017)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0xf)
close(r5)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x4, &(0x7f0000000680)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000)
pipe(&(0x7f0000000080))
pipe(&(0x7f00000000c0))
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x8)
r10 = dup(r9)
sendfile(r10, r8, 0x0, 0x8000fffffffc)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0x1, @dev={0xfe, 0x80, '\x00', 0x32}, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x5000)

1.827753129s ago: executing program 7 (id=1624):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
open(&(0x7f0000000740)='./bus\x00', 0x163361, 0x501c998c4dfcafcd)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {@mblk_io_submit}, {@barrier}, {@nodiscard}, {@nogrpid}, {@bh}]}, 0x0, 0x55a, &(0x7f0000001980)="$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")
syz_open_procfs$pagemap(0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x10}, 0x18)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.605825759s ago: executing program 1 (id=1630):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x104b0d, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$eJzs3c9rI2UYwPEnbX5MWrbJQRQF6YNe9DK01bMaZBfEgEt3I+4Kwux2oiFjUmZCJCK2N6/izX9AcNnjgocF9R/oxdt68eLJXgRBFxFH5leapJMfjSmb7n4/0OZJ3veZed/84nkDeXP83pcfN+ueWbc6smKoZEREHoqUZUUSmegiLykO5eX1Px48f+3Gzbcr1erlXdUrleuv7Kjqxub3n3xWjLvdL8hR+YNjMX49evro2eN/r3/U8LThaavdUUtvtX/pWLccW/caXtNUverYlmdro+XZbtTejtrrTnt/v6dWa+/S2r5re55arZ427Z522tpxe2p9aDVaapqmXlpLG+5jzJgjp3Znd9eqzHnC23PmYdH+9n1/QrPrVqxVEbN4qqV251zHBQAAltJI/f91UiOUZaVfUGbitUA+jIeXAUH9n8Rh/R8sFk7q/7sv/NhZf/feRlz/38+n1f+v/hzlD9X/wdkXXv9/O3L9dEV04R2cpfP/qv+xHDaHX5G/nazYY0H9H7wa+iv63Pt3t8KA+h8AAAAAAAAAAAAAAAAAAAAAgIvgoe+XfN8vJZfJ38lXCOLrybVJXzTGhTPu8S/EOwr0nw94LF27cVOM8It72Q0R54turVuLLuP2pOOWlOSf8PkQizacOAwbNVCWH5yDbi0XJ6yG/ysiKo7Ysi0lKQ/lh/GVt6qXtzUS5YfnP+jWMtm1IL8ujTB/R0ryVHr+Tmp+Xl56cSDflJL8dFva4she/D6W5H++rfrmO9WR/GLYL83r5/uQAAAAAACwcKaqES+fy8Pr32j9bpqqae3BWl4G1+enPx/or6+3Utfn2dJz2Uc7dwAAAAAAnhRe/tOm5Ti26/XGBkWZ1qcQH22kKStTjhwE2Rn6DAUPwiA3qc/qwAxnPXI+/gWNWYfhej2ZecxJ8GdBUu/MZAvXoSYj/V6dMUjmP0Nn46wPgeutnH3ututtBuPRuaYzECQfG43rI1fnPfK4INk5d1rnZ7765q/5TpGJd+0dbHrtnjFlpmGQGbnlcMqT9nffD17UE8eTS3+3+G6eH5kBAAAAsCSSor/oJbe8MSVj/fwHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAADAE2ah26SNCR71HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBl8V8AAAD//1f39NU=")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r1, 0x205, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x3c}}, 0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
io_setup(0x7d, &(0x7f0000000600)=<r4=>0x0)
io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r3}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff}])

1.315185082s ago: executing program 1 (id=1633):
syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)

1.263984455s ago: executing program 1 (id=1634):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e}, [@IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000)

1.183406698s ago: executing program 1 (id=1635):
syz_open_dev$tty20(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x8)
fchdir(r1)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000300)={[{@usrquota}, {@noblock_validity}, {@mblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a0000000400000008f3000008000000000000", @ANYRES32, @ANYBLOB="9b5800"/20, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r4, 0xb29, 0x0, 0x0, {{}, {@val={0x5}, @void}}}, 0x1c}}, 0x2404c044)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="b1921d91d43adc04000000", @ANYRES16=r4, @ANYBLOB="200029bd7000fedbdf2544000000040070000a0018000303030303030000"], 0x24}, 0x1, 0x0, 0x0, 0x4004084}, 0x4008080)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)

1.021671455s ago: executing program 2 (id=1636):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f00000e9000/0x4000)=nil, 0x4000, 0x1000000, 0x810, r0, 0x2000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x8403, 0x1000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x18}, @IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008850}, 0x4008040)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd29, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x840)
write$binfmt_script(r2, &(0x7f0000000680)={'#! ', '.', [], 0xa, "c6"}, 0x6)
mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x6000)=nil, 0x6000, 0x4, 0x88012, r2, 0x0)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x5}, 0x1, 0x265, 0xc28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x20000, &(0x7f00000002c0)={[], [{@fowner_lt={'fowner<', r7}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r9, 0x0, 0x40008003}, 0x18)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896)
r10 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r10)

947.958288ms ago: executing program 7 (id=1637):
alarm(0x10000)
r0 = eventfd(0x2)
read$eventfd(r0, &(0x7f00000012c0), 0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2)
r3 = dup(r2)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x2, 0x9, 0x0, 0x0, 0x0})
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x84)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000600)="53fc7a528ef2ea08005c43c6", 0xffeb}], 0x1}, 0x40)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'})
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r10=>0x0})
setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000000)={r10, 0x1, 0x6}, 0x10)

838.242893ms ago: executing program 7 (id=1638):
r0 = syz_io_uring_setup(0x4b6, &(0x7f0000010400)={0x0, 0x86e5, 0x1000, 0x8, 0x1f3}, &(0x7f0000000340), &(0x7f0000000300))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)

726.675638ms ago: executing program 2 (id=1642):
r0 = syz_io_uring_setup(0x4b6, &(0x7f0000010400)={0x0, 0x86e5, 0x1000, 0x8, 0x1f3}, &(0x7f0000000340), &(0x7f0000000300))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)

712.006329ms ago: executing program 3 (id=1643):
socket$inet6(0xa, 0x800000000000002, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x6, 0x2, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0)
r2 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x1, 0x503fa, 0x1dc})
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

680.98553ms ago: executing program 7 (id=1644):
syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)

607.834714ms ago: executing program 7 (id=1645):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r2, 0xffffffffffffffff, 0x18, 0x0, @void}, 0x10)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
syz_emit_ethernet(0xd2, &(0x7f0000000540)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x9c, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "1dff92fa761d6a4183d004fcb25a18f1fe9ed0370b3cc1a6c15fd072c8cdb5c8", "d1bbd0b4e4c368d55300fc392d7591db8e69175542981a9f60985f8571217db2123da2b086d8b073974aa30585dc7648", "ce70dd7e03da79bdceed6fb00a1a3c6889e802f5ab6cca1c1618d667", {"afde38cb1f53fca4221ae808defb7a46", "46ba978e9c3a83b320e3c5654bf8d17d"}}}}}}}}, 0x0)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x3e, &(0x7f00000000c0)=0x1, 0x4)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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")
lsetxattr(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='b[rgs4}%.'], 0x0, 0x0, 0x3)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mprotect(&(0x7f0000378000/0x3000)=nil, 0x3000, 0x1)
ioctl$TIOCCBRK(r0, 0x5428)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x4, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
setsockopt$packet_int(r5, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r7, 0x400, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)

604.569364ms ago: executing program 2 (id=1646):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x63, 0xa, 0xff04}, [@call={0x44, 0x0, 0x0, 0x2000000}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
stat(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, r5, &(0x7f00000003c0))
mount$9p_rdma(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80, &(0x7f0000000580)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@access_uid={'access', 0x3d, r5}}, {@rq={'rq', 0x3d, 0x9}}, {@timeout={'timeout', 0x3d, 0x7}}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8)

537.796876ms ago: executing program 3 (id=1647):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a)

513.843587ms ago: executing program 2 (id=1648):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r0, 0x0, 0xfffffffffffff001}, 0x18)
add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0)
recvmmsg$unix(r1, 0x0, 0x0, 0x0, 0x0)
write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10)

511.886248ms ago: executing program 3 (id=1649):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x6, 0x2, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0)
r2 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x1, 0x503fa, 0x1dc})
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

469.33423ms ago: executing program 2 (id=1650):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setrlimit(0x8, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0xa, [@enum={0x2, 0x9, 0x0, 0x6, 0x4, [{0x10, 0x7710}, {0x4, 0x5}, {0x9, 0x7}, {0x6, 0x3ff}, {0x2, 0x7}, {0x5, 0x9}, {0x10, 0x9}, {0x9, 0x6}, {0x1}]}, @fwd={0xb}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x2}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x3ff}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x902}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x270b4000}}]}, {0x0, [0x30, 0x61, 0x30, 0x0, 0x2e, 0x2e, 0x30, 0x2e]}}, &(0x7f0000000800)=""/243, 0xe2, 0xf3, 0x0, 0x601}, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_AIE_ON(r4, 0x7001)
ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000780), 0x3ff, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x7, r0}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x111, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ee, @empty, 0x1}, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0x108}, r6, 0xb}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r6}}, 0x18)

252.580319ms ago: executing program 1 (id=1653):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e00000065"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000e80)='kmem_cache_free\x00', r0, 0x0, 0x2a34}, 0x18)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00')
preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/83, 0x53}], 0x1, 0x8f, 0x3b16)

236.2499ms ago: executing program 1 (id=1654):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c)
r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
r3 = dup(r2)
fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000), 0x0, 0x0, 0x2)
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4, 0x273, &(0x7f0000000680)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x4000)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000)
munlock(&(0x7f0000daf000/0x1000)=nil, 0x1000)
munlockall()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = eventfd2(0x0, 0x0)
read$eventfd(r6, &(0x7f0000000040), 0x8)
mq_notify(r4, &(0x7f0000000540)={0x0, 0x5, 0x0, @thr={&(0x7f0000000480)="9bc74e148e336ed4da3f201626971269292232f9c2dfa06a168f8c9d13bdbcfd7fc0101dd8b7e70c90c82d88aae8169f8a7f4bc885b2097fbcc8256dff68c8c5c4fbd1bb5f4d07875be872e692c178dd9b885975063558411ed5a47a7cb6c9f481c8ae6b7d1be748c3eb930b33a95f443baca754470410dad167acc2218e1d0eb073e2f7b6d804ba74664886c2213e8d68df3b115361c02fd4531f3f8fb2cf68a29b8803aa52ef5cf10c429900271baeef57bf77aa21207fa961a1a0", &(0x7f0000000400)="1a74a7eb17e77a5130cb27e879871cf0687fc4253a27c8933a3d07d62cccd73fc5e8acedabb29fb22bef1ec45dd150c46b2c3f5614b3148d77e3c6e8"}})
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_access\x00')
fsopen(&(0x7f0000000040)='btrfs\x00', 0x1)

229.8126ms ago: executing program 3 (id=1655):
r0 = syz_io_uring_setup(0x4b6, &(0x7f0000010400)={0x0, 0x86e5, 0x1000, 0x8, 0x1f3}, &(0x7f0000000340), &(0x7f0000000300))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)

199.165011ms ago: executing program 0 (id=1656):
syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)

198.085051ms ago: executing program 0 (id=1657):
r0 = syz_io_uring_setup(0x4b6, &(0x7f0000010400)={0x0, 0x86e5, 0x1000, 0x8, 0x1f3}, &(0x7f0000000340), &(0x7f0000000300))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)

125.861994ms ago: executing program 0 (id=1658):
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="330000000000980b537b8c00003e418fd58cc222f1bc8240579e68534b104f6f7d22f7d067bb42bf48baf6cb3aca06000000000000"], 0x8)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_MTU={0x8, 0x4, 0x3f9}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x20040017)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0xf)
close(r5)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x4, &(0x7f0000000680)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0x1, @dev={0xfe, 0x80, '\x00', 0x32}, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x5000)

123.042474ms ago: executing program 3 (id=1659):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x63, 0xa, 0xff04}, [@call={0x44, 0x0, 0x0, 0x2000000}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
stat(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, r5, &(0x7f00000003c0))
mount$9p_rdma(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80, &(0x7f0000000580)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@access_uid={'access', 0x3d, r5}}, {@rq={'rq', 0x3d, 0x9}}, {@timeout={'timeout', 0x3d, 0x7}}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8)

48.470818ms ago: executing program 0 (id=1660):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a)

25.031179ms ago: executing program 0 (id=1661):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)={0x28, r1, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xcb, 0x49}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffbff}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x80)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x538, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x330, 0x358, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x598)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00'})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f00000001c0)='.\x00', 0x1ac8431, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, &(0x7f00000001c0))

5.95995ms ago: executing program 3 (id=1662):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f00000e9000/0x4000)=nil, 0x4000, 0x1000000, 0x810, r0, 0x2000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x8403, 0x1000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x18}, @IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008850}, 0x4008040)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd29, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x840)
write$binfmt_script(r2, &(0x7f0000000680)={'#! ', '.', [], 0xa, "c6"}, 0x6)
mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x6000)=nil, 0x6000, 0x4, 0x88012, r2, 0x0)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x5}, 0x1, 0x265, 0xc28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x20000, &(0x7f00000002c0)={[], [{@fowner_lt={'fowner<', r7}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896)
r9 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r9)

0s ago: executing program 0 (id=1663):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f00000e9000/0x4000)=nil, 0x4000, 0x1000000, 0x810, r0, 0x2000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x8403, 0x1000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x18}, @IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008850}, 0x4008040)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd29, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x840)
write$binfmt_script(r2, &(0x7f0000000680)={'#! ', '.', [], 0xa, "c6"}, 0x6)
mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x6000)=nil, 0x6000, 0x4, 0x88012, r2, 0x0)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x5}, 0x1, 0x265, 0xc28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x20000, &(0x7f00000002c0)={[], [{@fowner_lt={'fowner<', r7}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896)
r9 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r9)

kernel console output (not intermixed with test programs):

ce
[  135.396600][ T7897] loop2: rw=2049, sector=194, nr_sectors = 6 limit=128
[  135.415715][ T7897] Buffer I/O error on dev loop2, logical block 99, lost async page write
[  135.426406][ T7897] Buffer I/O error on dev loop2, logical block 100, lost async page write
[  135.446047][ T5563] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.452541][ T7897] Buffer I/O error on dev loop2, logical block 87, lost async page write
[  135.465189][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.474820][ T7897] Buffer I/O error on dev loop2, logical block 88, lost async page write
[  135.484102][ T7913] EXT4-fs: Ignoring removed nomblk_io_submit option
[  135.490869][ T7913] EXT4-fs: Ignoring removed bh option
[  135.526240][ T7913] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.548637][ T7913] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.1075: Allocating blocks 385-513 which overlap fs metadata
[  135.557946][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1078'.
[  135.571511][ T7921] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1078'.
[  135.640500][ T7926] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  135.653910][ T7926] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  135.670301][ T7913] EXT4-fs (loop9): pa ffff888107e2d7e0: logic 16, phys. 129, len 24
[  135.678431][ T7913] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8
[  135.733847][ T7913] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 129)
[  135.745220][ T7913] EXT4-fs (loop9): failed to convert unwritten extents to written extents -- potential data loss!  (inode 15, error -5)
[  135.757863][ T7913] Buffer I/O error on device loop9, logical block 129
[  135.827193][ T7935] FAULT_INJECTION: forcing a failure.
[  135.827193][ T7935] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.840581][ T7935] CPU: 1 UID: 0 PID: 7935 Comm: syz.2.1082 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  135.840611][ T7935] Tainted: [W]=WARN
[  135.840615][ T7935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  135.840622][ T7935] Call Trace:
[  135.840628][ T7935]  <TASK>
[  135.840634][ T7935]  __dump_stack+0x1d/0x30
[  135.840721][ T7935]  dump_stack_lvl+0xe8/0x140
[  135.840755][ T7935]  dump_stack+0x15/0x1b
[  135.840765][ T7935]  should_fail_ex+0x265/0x280
[  135.840780][ T7935]  should_fail+0xb/0x20
[  135.840825][ T7935]  should_fail_usercopy+0x1a/0x20
[  135.840840][ T7935]  _copy_from_user+0x1c/0xb0
[  135.840856][ T7935]  __sys_bpf+0x183/0x7c0
[  135.840873][ T7935]  __x64_sys_bpf+0x41/0x50
[  135.840882][ T7935]  x64_sys_call+0x28e1/0x3000
[  135.840945][ T7935]  do_syscall_64+0xd8/0x2a0
[  135.840971][ T7935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.840984][ T7935] RIP: 0033:0x7f54befbf749
[  135.841058][ T7935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.841077][ T7935] RSP: 002b:00007f54bda27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  135.841096][ T7935] RAX: ffffffffffffffda RBX: 00007f54bf215fa0 RCX: 00007f54befbf749
[  135.841109][ T7935] RDX: 0000000000000050 RSI: 0000200000000680 RDI: 000000000000000a
[  135.841116][ T7935] RBP: 00007f54bda27090 R08: 0000000000000000 R09: 0000000000000000
[  135.841202][ T7935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.841214][ T7935] R13: 00007f54bf216038 R14: 00007f54bf215fa0 R15: 00007ffe22dfc958
[  135.841287][ T7935]  </TASK>
[  136.163441][ T7943] EXT4-fs: Ignoring removed mblk_io_submit option
[  136.171190][ T7943] EXT4-fs: Ignoring removed bh option
[  136.194887][ T7943] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  136.203407][ T7943] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042e018, mo2=0002]
[  136.212473][ T7943] System zones: 0-1, 15-15, 18-18, 34-34
[  136.220107][ T7943] EXT4-fs (loop2): orphan cleanup on readonly fs
[  136.236285][ T7943] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1083: bg 0: block 15: invalid block bitmap
[  136.254754][ T7943] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  136.267425][ T7943] EXT4-fs (loop2): 1 truncate cleaned up
[  136.279965][ T7943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  136.298924][ T7943] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1083'.
[  136.303705][ T6359] EXT4-fs error (device loop9): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /52/file1: bad entry in directory: directory entry overrun - offset=0, inode=17104912, rec_len=158052, size=1024 fake=0
[  136.341623][ T6359] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.477137][  T415] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  136.528630][ T3501] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.546686][ T7952] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7952 comm=syz.7.1087
[  136.616133][ T3501] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.635958][   T29] kauditd_printk_skb: 203 callbacks suppressed
[  136.635971][   T29] audit: type=1326 audit(1765219898.813:11679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7955 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  136.666460][   T29] audit: type=1326 audit(1765219898.813:11680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7955 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  136.690026][   T29] audit: type=1326 audit(1765219898.823:11681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7955 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  136.722416][   T29] audit: type=1326 audit(1765219898.823:11682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7955 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  136.746431][   T29] audit: type=1326 audit(1765219898.823:11683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7955 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  136.770107][   T29] audit: type=1326 audit(1765219898.903:11684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7955 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  136.794444][   T29] audit: type=1326 audit(1765219898.903:11685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7955 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  136.818988][   T29] audit: type=1326 audit(1765219898.903:11686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7955 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  136.842658][   T29] audit: type=1326 audit(1765219898.903:11687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7955 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  136.866226][   T29] audit: type=1326 audit(1765219898.903:11688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7955 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  136.922785][ T7964] vhci_hcd vhci_hcd.3: invalid port number 9
[  136.928832][ T7964] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[  136.938959][ T6786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.954734][ T3501] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.973495][ T7964] batadv_slave_0: entered promiscuous mode
[  136.983722][ T7962] batadv_slave_0: left promiscuous mode
[  137.022282][ T3501] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.033333][ T7975] FAULT_INJECTION: forcing a failure.
[  137.033333][ T7975] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  137.046662][ T7975] CPU: 0 UID: 0 PID: 7975 Comm: syz.1.1096 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  137.046752][ T7975] Tainted: [W]=WARN
[  137.046760][ T7975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  137.046773][ T7975] Call Trace:
[  137.046781][ T7975]  <TASK>
[  137.046788][ T7975]  __dump_stack+0x1d/0x30
[  137.046815][ T7975]  dump_stack_lvl+0xe8/0x140
[  137.046908][ T7975]  dump_stack+0x15/0x1b
[  137.046996][ T7975]  should_fail_ex+0x265/0x280
[  137.047133][ T7975]  should_fail+0xb/0x20
[  137.047154][ T7975]  should_fail_usercopy+0x1a/0x20
[  137.047176][ T7975]  strncpy_from_user+0x27/0x260
[  137.047205][ T7975]  getname_flags+0xae/0x3b0
[  137.047394][ T7975]  user_path_at+0x28/0x130
[  137.047423][ T7975]  do_sys_truncate+0x5c/0x130
[  137.047446][ T7975]  __x64_sys_truncate+0x31/0x40
[  137.047462][ T7975]  x64_sys_call+0x1864/0x3000
[  137.047545][ T7975]  do_syscall_64+0xd8/0x2a0
[  137.047616][ T7975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.047638][ T7975] RIP: 0033:0x7ff84399f749
[  137.047654][ T7975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.047672][ T7975] RSP: 002b:00007ff842407038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  137.047691][ T7975] RAX: ffffffffffffffda RBX: 00007ff843bf5fa0 RCX: 00007ff84399f749
[  137.047741][ T7975] RDX: 0000000000000000 RSI: 000000000008fff5 RDI: 0000200000000180
[  137.047830][ T7975] RBP: 00007ff842407090 R08: 0000000000000000 R09: 0000000000000000
[  137.047843][ T7975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  137.047856][ T7975] R13: 00007ff843bf6038 R14: 00007ff843bf5fa0 R15: 00007ffce3ed3d28
[  137.047875][ T7975]  </TASK>
[  137.049112][ T7977] set_capacity_and_notify: 15 callbacks suppressed
[  137.049127][ T7977] loop2: detected capacity change from 0 to 128
[  137.233694][ T7982] loop1: detected capacity change from 0 to 512
[  137.237534][ T7977] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  137.295458][ T7977] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  137.297278][ T7982] EXT4-fs: Ignoring removed mblk_io_submit option
[  137.326096][ T7982] EXT4-fs: Ignoring removed bh option
[  137.444816][ T7957] chnl_net:caif_netlink_parms(): no params data found
[  137.491194][ T7982] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  137.500478][ T7982] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042e018, mo2=0002]
[  137.533262][ T7982] System zones: 0-1, 15-15, 18-18, 34-34
[  137.541137][ T7982] EXT4-fs (loop1): orphan cleanup on readonly fs
[  137.556091][ T7982] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1099: bg 0: block 15: invalid block bitmap
[  137.573176][ T7957] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.580248][ T7957] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.590278][ T7982] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  137.600167][ T7957] bridge_slave_0: entered allmulticast mode
[  137.607435][ T7957] bridge_slave_0: entered promiscuous mode
[  137.616145][ T7982] EXT4-fs (loop1): 1 truncate cleaned up
[  137.628235][ T7957] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.635590][ T7957] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.655850][ T7982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  137.669331][ T7957] bridge_slave_1: entered allmulticast mode
[  137.678516][ T7957] bridge_slave_1: entered promiscuous mode
[  137.809926][ T3501] bridge_slave_1: left allmulticast mode
[  137.816019][ T3501] bridge_slave_1: left promiscuous mode
[  137.821936][ T3501] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.872921][ T3501] bridge_slave_0: left allmulticast mode
[  137.878682][ T3501] bridge_slave_0: left promiscuous mode
[  137.884498][ T3501] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.927113][  T415] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  138.102404][ T3501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.126942][ T8030] loop2: detected capacity change from 0 to 512
[  138.140010][ T8029] loop0: detected capacity change from 0 to 1024
[  138.148427][ T8029] EXT4-fs: Ignoring removed bh option
[  138.155622][ T3501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.168953][ T8029] EXT4-fs: inline encryption not supported
[  138.180549][ T3501] bond0 (unregistering): Released all slaves
[  138.188463][ T8029] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  138.216004][ T8029] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  138.218110][ T7957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.235717][ T7982] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1099'.
[  138.235909][ T8029] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.1105: lblock 2 mapped to illegal pblock 2 (length 1)
[  138.279599][ T7957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.293776][ T8030] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  138.301947][ T8030] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  138.321451][ T8029] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.1105: lblock 0 mapped to illegal pblock 48 (length 1)
[  138.332094][ T8030] System zones: 0-1, 15-15, 18-18, 34-34
[  138.338582][ T8029] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1105: Failed to acquire dquot type 0
[  138.353138][ T8030] EXT4-fs (loop2): orphan cleanup on readonly fs
[  138.362246][ T8030] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1104: bg 0: block 15: invalid block bitmap
[  138.376861][ T8030] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  138.385891][ T3501] hsr_slave_0: left promiscuous mode
[  138.386133][ T8030] EXT4-fs (loop2): 1 truncate cleaned up
[  138.396150][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.405924][ T8029] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  138.406044][ T3501] hsr_slave_1: left promiscuous mode
[  138.415793][ T8029] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.1105: mark_inode_dirty error
[  138.435642][ T8029] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  138.445906][ T8029] EXT4-fs (loop0): 1 orphan inode deleted
[  138.453908][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.461311][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.468736][   T12] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  138.484111][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.491743][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.506517][   T12] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0
[  138.519181][ T3501] veth1_macvtap: left promiscuous mode
[  138.525566][ T3501] veth0_macvtap: left promiscuous mode
[  138.531150][ T8021] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  138.539949][ T3501] veth1_vlan: left promiscuous mode
[  138.545477][ T3501] veth0_vlan: left promiscuous mode
[  138.576843][ T8042] loop1: detected capacity change from 0 to 1024
[  138.598159][ T8042] EXT4-fs: Ignoring removed bh option
[  138.610245][ T8042] EXT4-fs: inline encryption not supported
[  138.617065][ T8042] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  138.620811][ T8044] loop0: detected capacity change from 0 to 1024
[  138.643530][ T8044] EXT4-fs: Ignoring removed mblk_io_submit option
[  138.647489][ T8042] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  138.658516][ T8044] EXT4-fs: inline encryption not supported
[  138.658984][ T8042] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.1108: lblock 2 mapped to illegal pblock 2 (length 1)
[  138.672594][ T8044] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  138.680004][ T8042] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.1108: lblock 0 mapped to illegal pblock 48 (length 1)
[  138.689083][ T3501] team0 (unregistering): Port device team_slave_1 removed
[  138.704591][ T8042] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1108: Failed to acquire dquot type 0
[  138.722424][ T3501] team0 (unregistering): Port device team_slave_0 removed
[  138.722998][ T8044] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  138.739624][ T8044] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.1109: lblock 2 mapped to illegal pblock 2 (length 1)
[  138.754194][ T8042] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  138.764226][ T8042] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.1108: mark_inode_dirty error
[  138.775653][ T8044] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.1109: lblock 0 mapped to illegal pblock 48 (length 1)
[  138.775818][ T8042] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  138.792629][ T7957] team0: Port device team_slave_0 added
[  138.800737][ T8042] EXT4-fs (loop1): 1 orphan inode deleted
[  138.812434][ T8023] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1104'.
[  138.823856][  T483] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  138.833340][ T8044] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1109: Failed to acquire dquot type 0
[  138.838554][  T483] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0
[  138.867206][ T7957] team0: Port device team_slave_1 added
[  138.872379][ T8044] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  138.882689][ T8044] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.1109: mark_inode_dirty error
[  138.894198][ T8044] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  138.904738][ T8044] EXT4-fs (loop0): 1 orphan inode deleted
[  138.911595][  T483] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  138.926876][ T7957] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.934169][ T7957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  138.961449][ T7957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.972474][  T483] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0
[  138.990786][ T8044] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.1109: Invalid inode table block 1 in block_group 0
[  139.004069][ T8041] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  139.012691][ T8044] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  139.023272][ T8044] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz.0.1109: mark_inode_dirty error
[  139.034008][ T7957] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.041414][ T7957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  139.067409][ T7957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.136101][ T7957] hsr_slave_0: entered promiscuous mode
[  139.161777][ T8044] loop0: detected capacity change from 0 to 2048
[  139.181534][ T7957] hsr_slave_1: entered promiscuous mode
[  139.206345][ T7957] debugfs: 'hsr0' already exists in 'hsr'
[  139.212207][ T7957] Cannot create hsr debugfs directory
[  139.262921][ T8044] netlink: 'syz.0.1109': attribute type 3 has an invalid length.
[  139.504603][ T8054] netlink: 131740 bytes leftover after parsing attributes in process `syz.7.1112'.
[  139.535069][ T8054] net_ratelimit: 11 callbacks suppressed
[  139.535090][ T8054] netlink: zone id is out of range
[  139.545991][ T8054] netlink: zone id is out of range
[  139.577334][ T8054] netlink: zone id is out of range
[  139.582550][ T8054] netlink: zone id is out of range
[  139.587934][ T8054] netlink: zone id is out of range
[  139.623589][ T8079] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1115'.
[  139.648439][ T8054] netlink: zone id is out of range
[  139.662918][ T8054] netlink: del zone limit has 8 unknown bytes
[  139.689827][ T8087] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1116'.
[  139.771277][ T8091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  139.969215][ T8098] loop1: detected capacity change from 0 to 512
[  139.992551][ T8098] EXT4-fs: Ignoring removed mblk_io_submit option
[  140.001451][ T8098] EXT4-fs: Ignoring removed bh option
[  140.041418][ T8098] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  140.055860][ T8098] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042e018, mo2=0002]
[  140.064651][ T8098] System zones: 0-1, 15-15, 18-18, 34-34
[  140.071888][ T8098] EXT4-fs (loop1): orphan cleanup on readonly fs
[  140.086214][ T8098] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1119: bg 0: block 15: invalid block bitmap
[  140.103875][ T8098] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  140.116631][ T8098] EXT4-fs (loop1): 1 truncate cleaned up
[  140.134339][ T8098] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1119'.
[  140.279795][ T8118] loop2: detected capacity change from 0 to 128
[  140.294477][ T7957] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  140.295210][ T8118] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  140.315527][ T8118] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  140.324385][ T7957] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  140.348814][ T7957] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  140.385757][ T7957] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  140.477179][ T7957] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.489631][ T8140] loop0: detected capacity change from 0 to 1024
[  140.499298][ T8140] EXT4-fs: Ignoring removed mblk_io_submit option
[  140.513248][ T7957] 8021q: adding VLAN 0 to HW filter on device team0
[  140.532867][ T8140] EXT4-fs: inline encryption not supported
[  140.544925][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.552753][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.564380][ T8140] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  140.577077][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.584191][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.593284][ T8140] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  140.611921][ T8140] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.1125: lblock 2 mapped to illegal pblock 2 (length 1)
[  140.646678][ T8140] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.1125: lblock 0 mapped to illegal pblock 48 (length 1)
[  140.688389][ T8140] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1125: Failed to acquire dquot type 0
[  140.738683][ T8140] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  140.758218][ T8140] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.1125: mark_inode_dirty error
[  140.765183][ T7957] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.779488][ T8140] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  140.833174][ T8140] EXT4-fs (loop0): 1 orphan inode deleted
[  140.850426][   T31] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  140.885074][   T31] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0
[  140.910179][ T8140] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.1125: Invalid inode table block 1 in block_group 0
[  140.961326][ T8140] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  140.974113][ T8140] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz.0.1125: mark_inode_dirty error
[  141.037189][ T7957] veth0_vlan: entered promiscuous mode
[  141.075235][ T7957] veth1_vlan: entered promiscuous mode
[  141.076386][ T8193] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  141.128145][ T7957] veth0_macvtap: entered promiscuous mode
[  141.160169][ T7957] veth1_macvtap: entered promiscuous mode
[  141.163733][ T8140] netlink: 'syz.0.1125': attribute type 3 has an invalid length.
[  141.190357][ T8193] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  141.190438][ T7957] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.229247][ T8177] EXT4-fs: Ignoring removed mblk_io_submit option
[  141.236614][ T8177] EXT4-fs: Ignoring removed bh option
[  141.276261][ T8204] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  141.299171][ T7957] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.322907][ T8204] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  141.323883][ T8177] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  141.340674][ T8177] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042e018, mo2=0002]
[  141.373053][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.384216][ T8177] System zones: 0-1, 15-15, 18-18, 34-34
[  141.391583][ T8177] EXT4-fs (loop7): orphan cleanup on readonly fs
[  141.485073][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.530234][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.575558][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.615988][ T8224] FAULT_INJECTION: forcing a failure.
[  141.615988][ T8224] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  141.629238][ T8224] CPU: 1 UID: 0 PID: 8224 Comm: syz.0.1134 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  141.629269][ T8224] Tainted: [W]=WARN
[  141.629321][ T8224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  141.629332][ T8224] Call Trace:
[  141.629338][ T8224]  <TASK>
[  141.629346][ T8224]  __dump_stack+0x1d/0x30
[  141.629371][ T8224]  dump_stack_lvl+0xe8/0x140
[  141.629391][ T8224]  dump_stack+0x15/0x1b
[  141.629409][ T8224]  should_fail_ex+0x265/0x280
[  141.629460][ T8224]  should_fail+0xb/0x20
[  141.629490][ T8224]  should_fail_usercopy+0x1a/0x20
[  141.629515][ T8224]  _copy_to_user+0x20/0xa0
[  141.629584][ T8224]  simple_read_from_buffer+0xb5/0x130
[  141.629604][ T8224]  proc_fail_nth_read+0x10e/0x150
[  141.629678][ T8224]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  141.629774][ T8224]  vfs_read+0x1a8/0x770
[  141.629792][ T8224]  ? __rcu_read_unlock+0x4f/0x70
[  141.629813][ T8224]  ? __fget_files+0x184/0x1c0
[  141.629836][ T8224]  ? mutex_lock+0x58/0x90
[  141.629911][ T8224]  ksys_read+0xda/0x1a0
[  141.629931][ T8224]  __x64_sys_read+0x40/0x50
[  141.629951][ T8224]  x64_sys_call+0x2889/0x3000
[  141.630057][ T8224]  do_syscall_64+0xd8/0x2a0
[  141.630150][ T8224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.630213][ T8224] RIP: 0033:0x7ff39cf1e15c
[  141.630227][ T8224] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  141.630242][ T8224] RSP: 002b:00007ff39b97f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  141.630259][ T8224] RAX: ffffffffffffffda RBX: 00007ff39d175fa0 RCX: 00007ff39cf1e15c
[  141.630272][ T8224] RDX: 000000000000000f RSI: 00007ff39b97f0a0 RDI: 0000000000000006
[  141.630282][ T8224] RBP: 00007ff39b97f090 R08: 0000000000000000 R09: 0000000000000003
[  141.630321][ T8224] R10: 0000000000007c00 R11: 0000000000000246 R12: 0000000000000001
[  141.630332][ T8224] R13: 00007ff39d176038 R14: 00007ff39d175fa0 R15: 00007ffd72070ff8
[  141.630349][ T8224]  </TASK>
[  141.828336][   T29] kauditd_printk_skb: 310 callbacks suppressed
[  141.828351][   T29] audit: type=1400 audit(1765219903.803:11987): avc:  denied  { audit_write } for  pid=8219 comm="syz.3.1091" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  141.834898][ T8177] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1128: bg 0: block 15: invalid block bitmap
[  141.856198][   T29] audit: type=1107 audit(1765219903.803:11988): pid=8219 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='›!mÓݧ,…=Þ*¬oŽL/>9¹nà„ü–á‘2NiÐ
¦ÕÈ«‹M‚°Ä2°� Ç8Ž…ȹÂÒÕr iëæÂâ´V…<ÇáÇó§èfPH}e<‡`V¹:‹„†i{.Š…ÞÈ0 ÕÊúŸ
]î%üŠý”(£Hh‚'
[  141.856234][   T29] audit: type=1326 audit(1765219903.823:11989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4572f749 code=0x7ffc0000
[  141.856261][   T29] audit: type=1326 audit(1765219903.823:11990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4572f749 code=0x7ffc0000
[  141.856289][   T29] audit: type=1326 audit(1765219903.823:11991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c4572f749 code=0x7ffc0000
[  141.856358][   T29] audit: type=1326 audit(1765219903.823:11992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4572f749 code=0x7ffc0000
[  141.856383][   T29] audit: type=1326 audit(1765219903.823:11993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4572f749 code=0x7ffc0000
[  141.856442][   T29] audit: type=1326 audit(1765219903.823:11994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c4572f749 code=0x7ffc0000
[  141.856470][   T29] audit: type=1326 audit(1765219903.823:11995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4572f749 code=0x7ffc0000
[  141.856498][   T29] audit: type=1326 audit(1765219903.823:11996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c4572f749 code=0x7ffc0000
[  142.137952][ T8177] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  142.216819][   T31] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  142.230678][ T8177] EXT4-fs (loop7): 1 truncate cleaned up
[  142.648659][ T8267] set_capacity_and_notify: 4 callbacks suppressed
[  142.648678][ T8267] loop3: detected capacity change from 0 to 512
[  142.667947][ T8269] loop1: detected capacity change from 0 to 256
[  142.706708][ T8267] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1141: bg 0: block 248: padding at end of block bitmap is not set
[  142.739080][ T8277] loop2: detected capacity change from 0 to 1024
[  142.746083][ T8277] EXT4-fs: Ignoring removed mblk_io_submit option
[  142.752839][ T8277] EXT4-fs: inline encryption not supported
[  142.759048][ T8277] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  142.770028][ T8267] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1141: Failed to acquire dquot type 1
[  142.794985][ T8267] EXT4-fs (loop3): 1 truncate cleaned up
[  142.801524][ T8267] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.813978][ T8277] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  142.823386][ T8277] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.1143: lblock 2 mapped to illegal pblock 2 (length 1)
[  142.838331][ T8277] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.1143: lblock 0 mapped to illegal pblock 48 (length 1)
[  142.854136][ T8277] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1143: Failed to acquire dquot type 0
[  142.876211][ T8277] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  142.886535][ T8277] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.1143: mark_inode_dirty error
[  142.902333][ T8277] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  142.916767][ T8277] EXT4-fs (loop2): 1 orphan inode deleted
[  142.925268][ T7581] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1)
[  142.969940][ T7581] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 0
[  143.002861][ T8277] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.1143: Invalid inode table block 1 in block_group 0
[  143.028492][ T8277] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  143.038208][ T8292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  143.038287][ T8288] loop1: detected capacity change from 0 to 512
[  143.045430][ T8292] IPv6: NLM_F_CREATE should be set when creating new route
[  143.045455][ T8292] IPv6: NLM_F_CREATE should be set when creating new route
[  143.066100][ T8292] IPv6: NLM_F_CREATE should be set when creating new route
[  143.104111][ T8277] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz.2.1143: mark_inode_dirty error
[  143.123791][ T8288] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1146: bg 0: block 248: padding at end of block bitmap is not set
[  143.200117][ T8288] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1146: Failed to acquire dquot type 1
[  143.214638][ T8277] loop2: detected capacity change from 0 to 2048
[  143.264805][ T8307] loop3: detected capacity change from 0 to 128
[  143.281928][ T8307] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  143.297792][ T8288] EXT4-fs (loop1): 1 truncate cleaned up
[  143.318763][ T8307] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  143.351768][ T8314] loop7: detected capacity change from 0 to 128
[  143.353336][ T8288] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.362128][ T8314] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  143.369229][ T8277] netlink: 'syz.2.1143': attribute type 3 has an invalid length.
[  143.393458][ T8314] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  143.671452][ T8335] loop1: detected capacity change from 0 to 512
[  143.719267][ T8335] EXT4-fs: Ignoring removed mblk_io_submit option
[  143.727099][ T8335] EXT4-fs: Ignoring removed bh option
[  143.734884][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1154'.
[  143.743872][ T8341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1154'.
[  143.760037][ T8335] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  143.772956][ T8335] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042e018, mo2=0002]
[  143.805050][ T8335] System zones: 0-1, 15-15, 18-18, 34-34
[  143.858781][ T8347] loop2: detected capacity change from 0 to 1024
[  143.869778][ T8335] EXT4-fs (loop1): orphan cleanup on readonly fs
[  143.891035][ T8347] EXT4-fs: Ignoring removed bh option
[  143.902694][ T8335] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1150: bg 0: block 15: invalid block bitmap
[  143.919852][ T8335] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  143.929340][ T8347] EXT4-fs: inline encryption not supported
[  143.937695][ T8347] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  143.971440][ T8335] EXT4-fs (loop1): 1 truncate cleaned up
[  143.992960][ T8347] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  144.009363][ T8335] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1150'.
[  144.012523][ T8347] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.1155: lblock 2 mapped to illegal pblock 2 (length 1)
[  144.087669][ T8347] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.1155: lblock 0 mapped to illegal pblock 48 (length 1)
[  144.139450][ T8347] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1155: Failed to acquire dquot type 0
[  144.171234][ T8347] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  144.194179][  T352] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  144.224532][ T8347] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.1155: mark_inode_dirty error
[  144.258802][ T8347] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  144.282133][ T8347] EXT4-fs (loop2): 1 orphan inode deleted
[  144.302312][  T352] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  144.332793][  T352] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0
[  144.365702][ T8347] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  144.507135][ T8392] loop2: detected capacity change from 0 to 128
[  144.639442][ T8392] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  144.682332][ T8392] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  144.763465][ T8400] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1158'.
[  144.815240][ T8422] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1165: bg 0: block 248: padding at end of block bitmap is not set
[  144.832499][ T8422] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1165: Failed to acquire dquot type 1
[  144.874485][ T8422] EXT4-fs (loop7): 1 truncate cleaned up
[  144.889506][ T8422] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.038070][ T8443] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  145.079067][ T8443] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  145.122638][ T8448] EXT4-fs: Ignoring removed bh option
[  145.143184][ T8448] EXT4-fs: inline encryption not supported
[  145.159527][ T8448] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  145.180279][ T8448] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  145.203937][ T8448] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.1168: lblock 2 mapped to illegal pblock 2 (length 1)
[  145.225810][ T8448] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.1168: lblock 0 mapped to illegal pblock 48 (length 1)
[  145.385983][ T8448] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1168: Failed to acquire dquot type 0
[  145.412453][ T8448] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  145.424258][ T8448] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.1168: mark_inode_dirty error
[  145.452687][ T8448] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  145.463011][ T8448] EXT4-fs (loop7): 1 orphan inode deleted
[  145.473159][ T7581] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1)
[  145.505069][ T7581] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 0
[  145.546773][ T8448] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  145.614948][ T8478] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  145.652830][ T8478] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  145.846751][  T352] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  145.867477][ T8492] SELinux: failed to load policy
[  146.067937][ T8506] EXT4-fs: Ignoring removed mblk_io_submit option
[  146.074539][ T8506] EXT4-fs: Ignoring removed bh option
[  146.113836][ T8506] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  146.121764][ T8506] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042e018, mo2=0002]
[  146.146229][ T8506] System zones: 0-1, 15-15, 18-18, 34-34
[  146.180037][ T8506] EXT4-fs (loop2): orphan cleanup on readonly fs
[  146.199769][ T8506] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1180: bg 0: block 15: invalid block bitmap
[  146.222115][ T8506] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  146.232823][ T8506] EXT4-fs (loop2): 1 truncate cleaned up
[  146.239035][ T8510] netlink: 'syz.7.1184': attribute type 1 has an invalid length.
[  146.256360][ T8513] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  146.264189][ T8506] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1180'.
[  146.294661][ T8515] vhci_hcd vhci_hcd.3: invalid port number 9
[  146.300858][ T8515] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[  146.337841][ T8515] batadv_slave_0: entered promiscuous mode
[  146.344541][ T8514] batadv_slave_0: left promiscuous mode
[  146.499515][ T8524] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  146.511800][ T8524] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  146.680020][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'.
[  146.689096][ T8526] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1190'.
[  146.833955][   T29] kauditd_printk_skb: 718 callbacks suppressed
[  146.833970][   T29] audit: type=1326 audit(1765219909.023:12700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.0.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff39cf165e7 code=0x7ffc0000
[  146.895566][   T29] audit: type=1326 audit(1765219909.053:12701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.0.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff39cebb829 code=0x7ffc0000
[  146.920297][   T29] audit: type=1326 audit(1765219909.053:12702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.0.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff39cf165e7 code=0x7ffc0000
[  146.944259][   T29] audit: type=1326 audit(1765219909.053:12703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.0.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff39cebb829 code=0x7ffc0000
[  146.967873][   T29] audit: type=1326 audit(1765219909.053:12704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.0.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  146.991313][   T29] audit: type=1326 audit(1765219909.063:12705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.0.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff39cf165e7 code=0x7ffc0000
[  147.003628][ T8539] audit: audit_backlog=65 > audit_backlog_limit=64
[  147.015613][   T29] audit: type=1326 audit(1765219909.063:12706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.0.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff39cebb829 code=0x7ffc0000
[  147.022059][ T8539] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  147.022074][ T8539] audit: backlog limit exceeded
[  147.054085][ T8540] FAULT_INJECTION: forcing a failure.
[  147.054085][ T8540] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  147.071257][ T8540] CPU: 1 UID: 0 PID: 8540 Comm: syz.2.1193 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  147.071288][ T8540] Tainted: [W]=WARN
[  147.071294][ T8540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  147.071305][ T8540] Call Trace:
[  147.071312][ T8540]  <TASK>
[  147.071319][ T8540]  __dump_stack+0x1d/0x30
[  147.071378][ T8540]  dump_stack_lvl+0xe8/0x140
[  147.071421][ T8540]  dump_stack+0x15/0x1b
[  147.071437][ T8540]  should_fail_ex+0x265/0x280
[  147.071463][ T8540]  should_fail+0xb/0x20
[  147.071478][ T8540]  should_fail_usercopy+0x1a/0x20
[  147.071498][ T8540]  _copy_from_user+0x1c/0xb0
[  147.071567][ T8540]  __sys_sendto+0x19e/0x330
[  147.071596][ T8540]  __x64_sys_sendto+0x76/0x90
[  147.071620][ T8540]  x64_sys_call+0x29a7/0x3000
[  147.071640][ T8540]  do_syscall_64+0xd8/0x2a0
[  147.071667][ T8540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.071700][ T8540] RIP: 0033:0x7f54befbf749
[  147.071715][ T8540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.071730][ T8540] RSP: 002b:00007f54bda06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  147.071747][ T8540] RAX: ffffffffffffffda RBX: 00007f54bf216090 RCX: 00007f54befbf749
[  147.071759][ T8540] RDX: ffffffffffffff58 RSI: 0000200000000140 RDI: 0000000000000007
[  147.071770][ T8540] RBP: 00007f54bda06090 R08: 0000200000000100 R09: 0000000000000010
[  147.071781][ T8540] R10: 0000000020008005 R11: 0000000000000246 R12: 0000000000000001
[  147.071863][ T8540] R13: 00007f54bf216128 R14: 00007f54bf216090 R15: 00007ffe22dfc958
[  147.071878][ T8540]  </TASK>
[  147.337142][  T483] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  147.486221][ T8555] EXT4-fs: Ignoring removed mblk_io_submit option
[  147.493688][ T8555] EXT4-fs: Ignoring removed bh option
[  147.528121][ T8555] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  147.537011][ T8555] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042e018, mo2=0002]
[  147.581450][ T8561] EXT4-fs: Ignoring removed mblk_io_submit option
[  147.591133][ T8561] EXT4-fs: Ignoring removed bh option
[  147.599525][ T8555] System zones: 0-1, 15-15, 18-18, 34-34
[  147.606315][ T8555] EXT4-fs (loop1): orphan cleanup on readonly fs
[  147.645828][ T8555] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1199: bg 0: block 15: invalid block bitmap
[  147.662234][ T8561] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  147.670763][ T8561] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042e018, mo2=0002]
[  147.686445][ T8555] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  147.697339][ T8555] EXT4-fs (loop1): 1 truncate cleaned up
[  147.699948][ T8561] System zones: 0-1, 15-15, 18-18, 34-34
[  147.721523][ T8561] EXT4-fs (loop3): orphan cleanup on readonly fs
[  147.735955][ T8561] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1202: bg 0: block 15: invalid block bitmap
[  147.752257][ T8561] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  147.793451][ T8561] EXT4-fs (loop3): 1 truncate cleaned up
[  147.847960][ T8561] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1202'.
[  147.916360][ T8574] set_capacity_and_notify: 8 callbacks suppressed
[  147.916393][ T8574] loop2: detected capacity change from 0 to 128
[  147.931292][ T8574] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  147.957568][ T8574] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  148.287866][ T8587] loop2: detected capacity change from 0 to 128
[  148.319008][ T8587] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  148.355867][ T8587] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  148.385649][ T8591] loop3: detected capacity change from 0 to 1024
[  148.410714][ T8591] EXT4-fs: Ignoring removed bh option
[  148.432670][ T8591] EXT4-fs: inline encryption not supported
[  148.457241][ T8591] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  148.479856][ T8591] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  148.501829][ T8591] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.1212: lblock 2 mapped to illegal pblock 2 (length 1)
[  148.541617][ T8591] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.1212: lblock 0 mapped to illegal pblock 48 (length 1)
[  148.548978][ T8585] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.1209'.
[  148.565681][ T8591] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1212: Failed to acquire dquot type 0
[  148.585382][ T8585] netlink: zone id is out of range
[  148.590618][ T8585] netlink: zone id is out of range
[  148.596098][ T8585] netlink: zone id is out of range
[  148.601220][ T8585] netlink: zone id is out of range
[  148.601222][ T8591] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  148.606445][ T8585] netlink: zone id is out of range
[  148.606775][ T8585] netlink: zone id is out of range
[  148.627271][ T8585] netlink: del zone limit has 8 unknown bytes
[  148.656018][ T8591] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.1212: mark_inode_dirty error
[  148.709185][ T8591] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  148.747142][ T8591] EXT4-fs (loop3): 1 orphan inode deleted
[  148.762586][ T7581] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1)
[  148.791944][ T7581] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 0
[  148.816263][ T8609] loop1: detected capacity change from 0 to 1024
[  148.826550][ T8609] EXT4-fs: Ignoring removed bh option
[  148.832003][ T8609] EXT4-fs: inline encryption not supported
[  148.839669][ T8609] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  148.851153][ T8591] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  148.870625][ T8609] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  148.892360][ T8608] SELinux: failed to load policy
[  148.903957][ T8609] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.1219: lblock 2 mapped to illegal pblock 2 (length 1)
[  148.945952][ T8612] loop3: detected capacity change from 0 to 128
[  148.977274][ T8612] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  148.992809][ T8609] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.1219: lblock 0 mapped to illegal pblock 48 (length 1)
[  149.014131][ T8609] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1219: Failed to acquire dquot type 0
[  149.054487][ T8609] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  149.086376][ T8612] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  149.100329][ T8609] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.1219: mark_inode_dirty error
[  149.140435][ T7581] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  149.150044][ T8609] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  149.180029][ T8609] EXT4-fs (loop1): 1 orphan inode deleted
[  149.196591][  T352] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  149.217622][  T352] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0
[  149.233586][ T8609] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  149.299611][ T8636] loop1: detected capacity change from 0 to 1024
[  149.315229][ T8636] EXT4-fs: Ignoring removed bh option
[  149.327731][ T8636] EXT4-fs: inline encryption not supported
[  149.339446][ T8636] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  149.376944][ T8636] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  149.386282][ T8636] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.1230: lblock 2 mapped to illegal pblock 2 (length 1)
[  149.400891][ T8636] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.1230: lblock 0 mapped to illegal pblock 48 (length 1)
[  149.415615][ T8636] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1230: Failed to acquire dquot type 0
[  149.429137][ T8647] loop2: detected capacity change from 0 to 128
[  149.440701][ T8636] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  149.451339][ T8647] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  149.452477][ T8636] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.1230: mark_inode_dirty error
[  149.476225][ T8636] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  149.486875][ T8636] EXT4-fs (loop1): 1 orphan inode deleted
[  149.502227][  T415] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  149.549039][ T8651] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  149.572364][  T415] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0
[  149.602523][ T8647] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  149.642230][ T8636] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  149.709432][ T8660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8660 comm=syz.3.1240
[  149.871374][ T8674] loop3: detected capacity change from 0 to 128
[  149.901312][ T8678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  149.923103][ T8674] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  149.980081][ T8674] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  150.034668][ T8684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  150.295028][ T8694] loop3: detected capacity change from 0 to 1024
[  150.330198][ T8694] EXT4-fs: Ignoring removed mblk_io_submit option
[  150.359330][ T8694] EXT4-fs: inline encryption not supported
[  150.372887][ T8694] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  150.395336][ T8703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8703 comm=syz.2.1258
[  150.409798][ T8694] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  150.419780][ T8694] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.1254: lblock 2 mapped to illegal pblock 2 (length 1)
[  150.450007][ T8694] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.1254: lblock 0 mapped to illegal pblock 48 (length 1)
[  150.465031][ T8694] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1254: Failed to acquire dquot type 0
[  150.482281][ T8694] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  150.485939][ T8707] loop1: detected capacity change from 0 to 512
[  150.498368][ T8694] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.1254: mark_inode_dirty error
[  150.522916][ T8694] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  150.554572][ T8707] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1259: bg 0: block 248: padding at end of block bitmap is not set
[  150.573857][ T8694] EXT4-fs (loop3): 1 orphan inode deleted
[  150.590228][ T8707] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1259: Failed to acquire dquot type 1
[  150.601999][ T6625] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1)
[  150.612630][ T8707] EXT4-fs (loop1): 1 truncate cleaned up
[  150.623619][ T6625] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:14: Failed to release dquot type 0
[  150.635935][ T8707] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.657238][ T8694] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.1254: Invalid inode table block 1 in block_group 0
[  150.722534][ T8694] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  150.772255][ T8694] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz.3.1254: mark_inode_dirty error
[  150.929551][ T8694] netlink: 'syz.3.1254': attribute type 3 has an invalid length.
[  151.134120][ T8758] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  151.146481][ T8758] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  151.241950][ T8771] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  151.254958][ T8771] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  151.494771][ T8786] EXT4-fs: Ignoring removed bh option
[  151.524670][ T8786] EXT4-fs: inline encryption not supported
[  151.540303][ T8786] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  151.551880][ T8786] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  151.579583][ T8786] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.1288: lblock 2 mapped to illegal pblock 2 (length 1)
[  151.605887][ T8786] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.1288: lblock 0 mapped to illegal pblock 48 (length 1)
[  151.645312][ T8786] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1288: Failed to acquire dquot type 0
[  151.656950][ T8786] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  151.666654][ T8786] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.1288: mark_inode_dirty error
[  151.678685][ T8786] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  151.689990][ T8796] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  151.709785][ T8786] EXT4-fs (loop3): 1 orphan inode deleted
[  151.716197][ T8796] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  151.722165][ T5442] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1)
[  151.754339][ T5442] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 0
[  151.773134][ T8791] EXT4-fs: Ignoring removed mblk_io_submit option
[  151.780619][ T8791] EXT4-fs: Ignoring removed bh option
[  151.813064][ T8786] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  151.823982][ T8791] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  151.833119][ T8791] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042e018, mo2=0002]
[  151.862595][   T29] kauditd_printk_skb: 1125 callbacks suppressed
[  151.862612][   T29] audit: type=1326 audit(1765219914.033:13815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8807 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54befbf749 code=0x7ffc0000
[  151.880154][ T8791] System zones: 
[  151.892974][   T29] audit: type=1326 audit(1765219914.033:13816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8807 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54befbf749 code=0x7ffc0000
[  151.893083][   T29] audit: type=1326 audit(1765219914.033:13817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8807 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54befbf749 code=0x7ffc0000
[  151.893110][   T29] audit: type=1326 audit(1765219914.033:13818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8807 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54befbf749 code=0x7ffc0000
[  151.893136][   T29] audit: type=1326 audit(1765219914.033:13819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8807 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54befbf749 code=0x7ffc0000
[  151.893219][   T29] audit: type=1326 audit(1765219914.033:13820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8807 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54befbf749 code=0x7ffc0000
[  151.893243][   T29] audit: type=1326 audit(1765219914.033:13821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8807 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54befbf749 code=0x7ffc0000
[  151.893268][   T29] audit: type=1326 audit(1765219914.033:13822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8807 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54befbf749 code=0x7ffc0000
[  151.893353][   T29] audit: type=1326 audit(1765219914.033:13823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8807 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54befbf749 code=0x7ffc0000
[  151.893380][   T29] audit: type=1326 audit(1765219914.033:13824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8807 comm="syz.2.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f54befbf749 code=0x7ffc0000
[  152.163090][ T8791] 0-1, 15-15, 18-18, 34-34
[  152.194399][ T8791] EXT4-fs (loop7): orphan cleanup on readonly fs
[  152.238380][ T8791] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1287: bg 0: block 15: invalid block bitmap
[  152.238894][ T8824] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  152.266687][ T8791] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  152.283952][ T8824] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  152.310694][ T8791] EXT4-fs (loop7): 1 truncate cleaned up
[  152.332287][ T8825] EXT4-fs: Ignoring removed mblk_io_submit option
[  152.339504][ T8825] EXT4-fs: inline encryption not supported
[  152.362468][ T8825] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  152.376389][ T8825] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  152.394878][ T8825] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.1296: lblock 2 mapped to illegal pblock 2 (length 1)
[  152.439940][ T8825] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.1296: lblock 0 mapped to illegal pblock 48 (length 1)
[  152.485290][ T8825] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1296: Failed to acquire dquot type 0
[  152.532247][ T8825] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  152.557576][ T8825] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.1296: mark_inode_dirty error
[  152.570686][ T8825] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  152.638854][ T8825] EXT4-fs (loop1): 1 orphan inode deleted
[  152.650215][ T5442] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1)
[  152.682235][ T5442] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 0
[  152.687276][ T8842] EXT4-fs: Ignoring removed mblk_io_submit option
[  152.702184][ T8842] EXT4-fs: Ignoring removed bh option
[  152.723379][ T8825] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.1296: Invalid inode table block 1 in block_group 0
[  152.738825][ T8825] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  152.757253][ T8825] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz.1.1296: mark_inode_dirty error
[  152.824751][ T8842] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  152.836361][ T8842] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042e018, mo2=0002]
[  152.872443][ T8842] System zones: 0-1, 15-15, 18-18, 34-34
[  152.914070][ T8825] netlink: 'syz.1.1296': attribute type 3 has an invalid length.
[  152.916664][ T8842] EXT4-fs (loop3): orphan cleanup on readonly fs
[  152.923573][ T8850] vhci_hcd vhci_hcd.3: invalid port number 9
[  152.935105][ T8850] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[  152.958230][ T8850] batadv_slave_0: entered promiscuous mode
[  152.973158][ T8849] batadv_slave_0: left promiscuous mode
[  152.987815][ T8842] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1301: bg 0: block 15: invalid block bitmap
[  153.004215][ T8842] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  153.016833][ T8842] EXT4-fs (loop3): 1 truncate cleaned up
[  153.044318][ T8842] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1301'.
[  153.218915][ T8863] set_capacity_and_notify: 11 callbacks suppressed
[  153.218934][ T8863] loop1: detected capacity change from 0 to 128
[  153.253526][ T8863] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  153.299741][ T8863] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  153.434747][ T8877] loop1: detected capacity change from 0 to 1024
[  153.446589][ T8877] EXT4-fs: Ignoring removed bh option
[  153.453241][ T8877] EXT4-fs: inline encryption not supported
[  153.463567][ T8877] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  153.472116][ T8880] netlink: 'syz.0.1316': attribute type 3 has an invalid length.
[  153.484539][ T8884] loop3: detected capacity change from 0 to 512
[  153.556212][ T8877] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  153.566811][ T8884] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1315: bg 0: block 248: padding at end of block bitmap is not set
[  153.599141][ T8877] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.1312: lblock 2 mapped to illegal pblock 2 (length 1)
[  153.638028][ T8884] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1315: Failed to acquire dquot type 1
[  153.781965][ T8877] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.1312: lblock 0 mapped to illegal pblock 48 (length 1)
[  153.812671][ T8884] EXT4-fs (loop3): 1 truncate cleaned up
[  153.825403][ T8884] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.836318][ T8877] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1312: Failed to acquire dquot type 0
[  153.854865][ T8877] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  153.855797][ T8896] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.1320'.
[  153.875017][ T8877] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.1312: mark_inode_dirty error
[  153.882017][ T8896] netlink: zone id is out of range
[  153.890034][ T8877] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  153.891551][ T8896] netlink: zone id is out of range
[  153.902390][ T8877] EXT4-fs (loop1): 1 orphan inode deleted
[  153.907900][ T8896] netlink: zone id is out of range
[  153.918694][  T415] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  153.918805][ T8896] netlink: zone id is out of range
[  153.933503][  T415] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0
[  153.937966][ T8896] netlink: zone id is out of range
[  153.937974][ T8896] netlink: zone id is out of range
[  153.964678][ T8896] netlink: zone id is out of range
[  153.974178][ T8877] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  153.996423][ T8896] netlink: zone id is out of range
[  154.001611][ T8896] netlink: zone id is out of range
[  154.006813][ T8896] netlink: zone id is out of range
[  154.164630][ T8906] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1321'.
[  154.468217][ T8904] loop2: detected capacity change from 0 to 512
[  154.515115][ T8904] EXT4-fs: Ignoring removed mblk_io_submit option
[  154.522675][ T8904] EXT4-fs: Ignoring removed bh option
[  154.528958][ T8914] loop1: detected capacity change from 0 to 512
[  154.546624][ T8931] loop7: detected capacity change from 0 to 128
[  154.553662][ T8931] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  154.558406][ T8914] EXT4-fs: Ignoring removed mblk_io_submit option
[  154.575744][ T8914] EXT4-fs: Ignoring removed bh option
[  154.601278][ T8931] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  154.655418][ T8914] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  154.665428][ T8914] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042e018, mo2=0002]
[  154.680453][ T8904] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  154.690284][ T8904] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042e018, mo2=0002]
[  154.707173][ T8914] System zones: 0-1, 15-15, 18-18, 34-34
[  154.719054][ T8914] EXT4-fs (loop1): orphan cleanup on readonly fs
[  154.723523][ T8904] System zones: 0-1, 15-15, 18-18, 34-34
[  154.736934][ T8914] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1326: bg 0: block 15: invalid block bitmap
[  154.751627][ T8914] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  154.762916][ T8914] EXT4-fs (loop1): 1 truncate cleaned up
[  154.779129][ T8904] EXT4-fs (loop2): orphan cleanup on readonly fs
[  154.793950][  T415] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  154.816088][ T8914] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1326'.
[  154.830084][ T8904] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1322: bg 0: block 15: invalid block bitmap
[  154.906810][ T8904] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  155.006083][ T8904] EXT4-fs (loop2): 1 truncate cleaned up
[  155.160175][ T8904] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1322'.
[  155.417753][ T8903] syz.3.1321 (8903) used greatest stack depth: 7408 bytes left
[  155.683561][ T8956] loop7: detected capacity change from 0 to 1024
[  155.687831][ T8956] EXT4-fs: Ignoring removed mblk_io_submit option
[  155.687939][ T8956] EXT4-fs: inline encryption not supported
[  155.688718][ T8956] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  155.714124][ T8956] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  155.724956][ T8956] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.1338: lblock 2 mapped to illegal pblock 2 (length 1)
[  155.725101][ T8956] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.1338: lblock 0 mapped to illegal pblock 48 (length 1)
[  155.725230][ T8956] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1338: Failed to acquire dquot type 0
[  155.725328][ T8956] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  155.725471][ T8956] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.1338: mark_inode_dirty error
[  155.725629][ T8956] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  155.725672][ T8956] EXT4-fs (loop7): 1 orphan inode deleted
[  155.752206][  T415] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  155.754811][  T415] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0
[  155.862376][ T8968] FAULT_INJECTION: forcing a failure.
[  155.862376][ T8968] name failslab, interval 1, probability 0, space 0, times 0
[  155.862427][ T8968] CPU: 1 UID: 0 PID: 8968 Comm: syz.2.1342 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  155.862456][ T8968] Tainted: [W]=WARN
[  155.862463][ T8968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  155.862475][ T8968] Call Trace:
[  155.862481][ T8968]  <TASK>
[  155.862489][ T8968]  __dump_stack+0x1d/0x30
[  155.862512][ T8968]  dump_stack_lvl+0xe8/0x140
[  155.862539][ T8968]  dump_stack+0x15/0x1b
[  155.862557][ T8968]  should_fail_ex+0x265/0x280
[  155.862580][ T8968]  should_failslab+0x8c/0xb0
[  155.862615][ T8968]  __kmalloc_cache_noprof+0x65/0x4c0
[  155.862637][ T8968]  ? __se_sys_memfd_create+0x1d6/0x6b0
[  155.862736][ T8968]  __se_sys_memfd_create+0x1d6/0x6b0
[  155.862775][ T8968]  __x64_sys_memfd_create+0x31/0x40
[  155.862807][ T8968]  x64_sys_call+0x28cb/0x3000
[  155.862864][ T8968]  do_syscall_64+0xd8/0x2a0
[  155.862894][ T8968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.862912][ T8968] RIP: 0033:0x7f54befbf749
[  155.862926][ T8968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.862997][ T8968] RSP: 002b:00007f54bda26e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  155.863014][ T8968] RAX: ffffffffffffffda RBX: 0000000000000484 RCX: 00007f54befbf749
[  155.863026][ T8968] RDX: 00007f54bda26ef0 RSI: 0000000000000000 RDI: 00007f54bf044960
[  155.863039][ T8968] RBP: 0000200000001500 R08: 00007f54bda26bb7 R09: 00007f54bda26e40
[  155.863052][ T8968] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0
[  155.863065][ T8968] R13: 00007f54bda26ef0 R14: 00007f54bda26eb0 R15: 0000200000000080
[  155.863127][ T8968]  </TASK>
[  155.928686][ T8956] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz.7.1338: Invalid inode table block 1 in block_group 0
[  155.937058][ T8956] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  155.937178][ T8956] EXT4-fs error (device loop7): ext4_quota_off:7270: inode #3: comm syz.7.1338: mark_inode_dirty error
[  156.055509][ T8981] SELinux: failed to load policy
[  156.095193][ T8989] loop1: detected capacity change from 0 to 1024
[  156.095865][ T8989] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  156.095890][ T8989] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  156.096619][ T8989] JBD2: no valid journal superblock found
[  156.096635][ T8989] EXT4-fs (loop1): Could not load journal inode
[  156.152245][ T8956] loop7: detected capacity change from 0 to 2048
[  156.329864][ T9011] loop2: detected capacity change from 0 to 512
[  156.330341][ T9011] EXT4-fs: dax option not supported
[  156.331291][ T9009] FAULT_INJECTION: forcing a failure.
[  156.331291][ T9009] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  156.331319][ T9009] CPU: 1 UID: 0 PID: 9009 Comm: syz.1.1355 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  156.331345][ T9009] Tainted: [W]=WARN
[  156.331351][ T9009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  156.331364][ T9009] Call Trace:
[  156.331381][ T9009]  <TASK>
[  156.331467][ T9009]  __dump_stack+0x1d/0x30
[  156.331490][ T9009]  dump_stack_lvl+0xe8/0x140
[  156.331522][ T9009]  dump_stack+0x15/0x1b
[  156.331539][ T9009]  should_fail_ex+0x265/0x280
[  156.331562][ T9009]  should_fail+0xb/0x20
[  156.331580][ T9009]  should_fail_usercopy+0x1a/0x20
[  156.331644][ T9009]  _copy_from_user+0x1c/0xb0
[  156.331670][ T9009]  ___sys_sendmsg+0xc1/0x1d0
[  156.331755][ T9009]  __sys_sendmmsg+0x178/0x300
[  156.331813][ T9009]  __x64_sys_sendmmsg+0x57/0x70
[  156.331890][ T9009]  x64_sys_call+0x1e28/0x3000
[  156.331914][ T9009]  do_syscall_64+0xd8/0x2a0
[  156.331946][ T9009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.331969][ T9009] RIP: 0033:0x7ff84399f749
[  156.331985][ T9009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.332034][ T9009] RSP: 002b:00007ff842407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  156.332053][ T9009] RAX: ffffffffffffffda RBX: 00007ff843bf5fa0 RCX: 00007ff84399f749
[  156.332065][ T9009] RDX: 0000000000000062 RSI: 0000200000002940 RDI: 0000000000000003
[  156.332156][ T9009] RBP: 00007ff842407090 R08: 0000000000000000 R09: 0000000000000000
[  156.332169][ T9009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  156.332181][ T9009] R13: 00007ff843bf6038 R14: 00007ff843bf5fa0 R15: 00007ffce3ed3d28
[  156.332202][ T9009]  </TASK>
[  156.406377][ T8956] netlink: 'syz.7.1338': attribute type 3 has an invalid length.
[  156.425267][ T9019] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  156.764466][ T9029] EXT4-fs: Ignoring removed mblk_io_submit option
[  157.079994][ T9029] EXT4-fs: Ignoring removed bh option
[  157.088795][   T29] kauditd_printk_skb: 827 callbacks suppressed
[  157.088811][   T29] audit: type=1326 audit(1765219919.273:14641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54befbf749 code=0x7ffc0000
[  157.122734][ T9059] FAULT_INJECTION: forcing a failure.
[  157.122734][ T9059] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  157.130330][   T29] audit: type=1326 audit(1765219919.293:14642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f54befbf749 code=0x7ffc0000
[  157.136005][ T9059] CPU: 0 UID: 0 PID: 9059 Comm: syz.7.1366 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  157.136091][ T9059] Tainted: [W]=WARN
[  157.136099][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  157.136112][ T9059] Call Trace:
[  157.136120][ T9059]  <TASK>
[  157.136130][ T9059]  __dump_stack+0x1d/0x30
[  157.136169][ T9059]  dump_stack_lvl+0xe8/0x140
[  157.136221][ T9059]  dump_stack+0x15/0x1b
[  157.136240][ T9059]  should_fail_ex+0x265/0x280
[  157.136276][ T9059]  should_fail+0xb/0x20
[  157.136295][ T9059]  should_fail_usercopy+0x1a/0x20
[  157.136319][ T9059]  _copy_from_iter+0xcf/0xe70
[  157.136396][ T9059]  ? fixup_exception+0x742/0xcf0
[  157.136433][ T9059]  ? lockref_put_return+0xf7/0x130
[  157.136576][ T9059]  copy_page_from_iter+0x178/0x2a0
[  157.136651][ T9059]  tun_get_user+0x679/0x2670
[  157.136679][ T9059]  ? ref_tracker_alloc+0x1f2/0x2f0
[  157.136706][ T9059]  tun_chr_write_iter+0x15e/0x210
[  157.136734][ T9059]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  157.136810][ T9059]  vfs_write+0x52a/0x960
[  157.136835][ T9059]  ksys_write+0xda/0x1a0
[  157.136855][ T9059]  __x64_sys_write+0x40/0x50
[  157.136874][ T9059]  x64_sys_call+0x2847/0x3000
[  157.136898][ T9059]  do_syscall_64+0xd8/0x2a0
[  157.137001][ T9059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.137022][ T9059] RIP: 0033:0x7f2790e2e1ff
[  157.137039][ T9059] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  157.137057][ T9059] RSP: 002b:00007f278f88f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  157.137140][ T9059] RAX: ffffffffffffffda RBX: 00007f2791085fa0 RCX: 00007f2790e2e1ff
[  157.137153][ T9059] RDX: 000000000000002e RSI: 0000200000000240 RDI: 00000000000000c8
[  157.137187][ T9059] RBP: 00007f278f88f090 R08: 0000000000000000 R09: 0000000000000000
[  157.137253][ T9059] R10: 000000000000002e R11: 0000000000000293 R12: 0000000000000001
[  157.137275][ T9059] R13: 00007f2791086038 R14: 00007f2791085fa0 R15: 00007ffc1a5942d8
[  157.137299][ T9059]  </TASK>
[  157.353914][ T9029] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  157.356669][   T29] audit: type=1326 audit(1765219919.293:14643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54befbf749 code=0x7ffc0000
[  157.356703][   T29] audit: type=1326 audit(1765219919.293:14644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f54befbf749 code=0x7ffc0000
[  157.356732][   T29] audit: type=1326 audit(1765219919.293:14645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54befbf749 code=0x7ffc0000
[  157.356839][   T29] audit: type=1326 audit(1765219919.293:14646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54befbf749 code=0x7ffc0000
[  157.356867][   T29] audit: type=1326 audit(1765219919.293:14647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54befbf749 code=0x7ffc0000
[  157.365142][ T9029] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042e018, mo2=0002]
[  157.367879][   T29] audit: type=1326 audit(1765219919.293:14648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f54befbf749 code=0x7ffc0000
[  157.367951][   T29] audit: type=1326 audit(1765219919.293:14649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54befbf749 code=0x7ffc0000
[  157.368047][   T29] audit: type=1326 audit(1765219919.293:14650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54befbf749 code=0x7ffc0000
[  157.381612][ T9029] System zones: 0-1, 15-15, 18-18, 34-34
[  157.597891][ T9029] EXT4-fs (loop1): orphan cleanup on readonly fs
[  157.609854][ T9029] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1361: bg 0: block 15: invalid block bitmap
[  157.651058][ T9029] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  157.666109][ T9029] EXT4-fs (loop1): 1 truncate cleaned up
[  157.713076][ T9029] EXT4-fs mount: 74 callbacks suppressed
[  157.713191][ T9029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  157.715499][ T9081] vhci_hcd vhci_hcd.3: invalid port number 9
[  157.737104][ T9081] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[  157.743569][ T9029] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1361'.
[  157.769534][ T9081] batadv_slave_0: entered promiscuous mode
[  157.775851][ T9080] batadv_slave_0: left promiscuous mode
[  157.885885][ T9092] SELinux: failed to load policy
[  158.282585][ T9106] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.1380'.
[  158.292359][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.393206][ T9117] FAULT_INJECTION: forcing a failure.
[  158.393206][ T9117] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  158.406462][ T9117] CPU: 0 UID: 0 PID: 9117 Comm: syz.2.1383 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  158.406529][ T9117] Tainted: [W]=WARN
[  158.406533][ T9117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  158.406541][ T9117] Call Trace:
[  158.406546][ T9117]  <TASK>
[  158.406553][ T9117]  __dump_stack+0x1d/0x30
[  158.406571][ T9117]  dump_stack_lvl+0xe8/0x140
[  158.406692][ T9117]  dump_stack+0x15/0x1b
[  158.406782][ T9117]  should_fail_ex+0x265/0x280
[  158.406796][ T9117]  should_fail+0xb/0x20
[  158.406855][ T9117]  should_fail_usercopy+0x1a/0x20
[  158.406870][ T9117]  _copy_from_user+0x1c/0xb0
[  158.406974][ T9117]  ___sys_sendmsg+0xc1/0x1d0
[  158.406999][ T9117]  __x64_sys_sendmsg+0xd4/0x160
[  158.407016][ T9117]  x64_sys_call+0x17ba/0x3000
[  158.407029][ T9117]  do_syscall_64+0xd8/0x2a0
[  158.407062][ T9117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.407110][ T9117] RIP: 0033:0x7f54befbf749
[  158.407149][ T9117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.407160][ T9117] RSP: 002b:00007f54bda27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  158.407172][ T9117] RAX: ffffffffffffffda RBX: 00007f54bf215fa0 RCX: 00007f54befbf749
[  158.407179][ T9117] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004
[  158.407186][ T9117] RBP: 00007f54bda27090 R08: 0000000000000000 R09: 0000000000000000
[  158.407194][ T9117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.407264][ T9117] R13: 00007f54bf216038 R14: 00007f54bf215fa0 R15: 00007ffe22dfc958
[  158.407276][ T9117]  </TASK>
[  158.623638][ T9120] vhci_hcd vhci_hcd.3: invalid port number 9
[  158.629740][ T9120] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[  158.643276][ T9120] batadv_slave_0: entered promiscuous mode
[  158.649404][ T9119] batadv_slave_0: left promiscuous mode
[  158.767715][ T9129] set_capacity_and_notify: 2 callbacks suppressed
[  158.767734][ T9129] loop7: detected capacity change from 0 to 512
[  158.788550][ T9131] loop2: detected capacity change from 0 to 256
[  158.805408][ T9129] /dev/loop7: Can't open blockdev
[  158.929636][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1393'.
[  158.957716][ T9140] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1393'.
[  158.966844][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1393'.
[  159.350726][ T9159] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1400'.
[  159.590252][ T9163] loop3: detected capacity change from 0 to 256
[  159.916797][ T9173] FAULT_INJECTION: forcing a failure.
[  159.916797][ T9173] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  159.929932][ T9173] CPU: 0 UID: 0 PID: 9173 Comm: syz.2.1405 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  159.930038][ T9173] Tainted: [W]=WARN
[  159.930044][ T9173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  159.930055][ T9173] Call Trace:
[  159.930061][ T9173]  <TASK>
[  159.930070][ T9173]  __dump_stack+0x1d/0x30
[  159.930097][ T9173]  dump_stack_lvl+0xe8/0x140
[  159.930120][ T9173]  dump_stack+0x15/0x1b
[  159.930171][ T9173]  should_fail_ex+0x265/0x280
[  159.930194][ T9173]  should_fail+0xb/0x20
[  159.930212][ T9173]  should_fail_usercopy+0x1a/0x20
[  159.930235][ T9173]  _copy_to_user+0x20/0xa0
[  159.930282][ T9173]  simple_read_from_buffer+0xb5/0x130
[  159.930302][ T9173]  proc_fail_nth_read+0x10e/0x150
[  159.930330][ T9173]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  159.930355][ T9173]  vfs_read+0x1a8/0x770
[  159.930420][ T9173]  ? __rcu_read_unlock+0x4f/0x70
[  159.930441][ T9173]  ? __fget_files+0x184/0x1c0
[  159.930464][ T9173]  ? mutex_lock+0x58/0x90
[  159.930491][ T9173]  ksys_read+0xda/0x1a0
[  159.930563][ T9173]  __x64_sys_read+0x40/0x50
[  159.930581][ T9173]  x64_sys_call+0x2889/0x3000
[  159.930676][ T9173]  do_syscall_64+0xd8/0x2a0
[  159.930710][ T9173]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.930733][ T9173] RIP: 0033:0x7f54befbe15c
[  159.930750][ T9173] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  159.930784][ T9173] RSP: 002b:00007f54bda06030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  159.930804][ T9173] RAX: ffffffffffffffda RBX: 00007f54bf216090 RCX: 00007f54befbe15c
[  159.930853][ T9173] RDX: 000000000000000f RSI: 00007f54bda060a0 RDI: 0000000000000008
[  159.930865][ T9173] RBP: 00007f54bda06090 R08: 0000000000000000 R09: 0000000000000000
[  159.930878][ T9173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.930890][ T9173] R13: 00007f54bf216128 R14: 00007f54bf216090 R15: 00007ffe22dfc958
[  159.930951][ T9173]  </TASK>
[  159.939569][ T9177] loop7: detected capacity change from 0 to 128
[  160.005249][ T9179] loop2: detected capacity change from 0 to 128
[  160.018332][ T9177] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  160.088162][ T9179] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  160.171738][ T9177] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  160.181038][ T9179] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  160.200406][ T9181] batadv_slave_0: entered promiscuous mode
[  160.207663][ T9180] batadv_slave_0: left promiscuous mode
[  160.252242][ T9189] loop2: detected capacity change from 0 to 256
[  160.348215][ T9198] loop2: detected capacity change from 0 to 512
[  160.379008][ T9198] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1415: bg 0: block 248: padding at end of block bitmap is not set
[  160.394970][ T9198] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1415: Failed to acquire dquot type 1
[  160.407084][ T9198] EXT4-fs (loop2): 1 truncate cleaned up
[  160.414455][ T9198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.427527][ T9198] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.453412][ T6786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.665456][ T9217] loop7: detected capacity change from 0 to 128
[  160.687152][ T9217] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  160.722116][ T9217] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  160.741375][ T9215] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1419'.
[  160.853623][ T9227] vhci_hcd vhci_hcd.3: invalid port number 9
[  160.859750][ T9227] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[  160.886121][ T9230] loop7: detected capacity change from 0 to 1024
[  160.893300][ T9230] EXT4-fs: Ignoring removed bh option
[  160.910687][ T9230] EXT4-fs: inline encryption not supported
[  160.918710][ T9227] batadv_slave_0: entered promiscuous mode
[  160.926592][ T9230] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  160.938078][ T9226] batadv_slave_0: left promiscuous mode
[  160.948887][ T9230] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  160.958054][ T9230] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.1429: lblock 2 mapped to illegal pblock 2 (length 1)
[  160.982833][ T9230] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.1429: lblock 0 mapped to illegal pblock 48 (length 1)
[  161.002798][ T9230] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1429: Failed to acquire dquot type 0
[  161.034063][ T9230] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  161.044606][ T9230] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.1429: mark_inode_dirty error
[  161.064250][ T9230] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  161.079213][ T9230] EXT4-fs (loop7): 1 orphan inode deleted
[  161.086420][ T9230] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.099258][ T3933] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1)
[  161.114003][ T3933] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0
[  161.128482][ T9230] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  161.165671][ T5563] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.204508][ T9247] FAULT_INJECTION: forcing a failure.
[  161.204508][ T9247] name failslab, interval 1, probability 0, space 0, times 0
[  161.217317][ T9247] CPU: 1 UID: 0 PID: 9247 Comm: syz.1.1435 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  161.217415][ T9247] Tainted: [W]=WARN
[  161.217422][ T9247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  161.217434][ T9247] Call Trace:
[  161.217440][ T9247]  <TASK>
[  161.217500][ T9247]  __dump_stack+0x1d/0x30
[  161.217531][ T9247]  dump_stack_lvl+0xe8/0x140
[  161.217592][ T9247]  dump_stack+0x15/0x1b
[  161.217613][ T9247]  should_fail_ex+0x265/0x280
[  161.217634][ T9247]  should_failslab+0x8c/0xb0
[  161.217655][ T9247]  kmem_cache_alloc_noprof+0x69/0x4b0
[  161.217726][ T9247]  ? alloc_empty_file+0x76/0x200
[  161.217751][ T9247]  ? fast_dput+0x44/0x2c0
[  161.217776][ T9247]  alloc_empty_file+0x76/0x200
[  161.217815][ T9247]  dentry_open+0x2d/0x90
[  161.217841][ T9247]  ptm_open_peer+0x109/0x1a0
[  161.217874][ T9247]  tty_ioctl+0x3bc/0xb80
[  161.217908][ T9247]  ? __pfx_tty_ioctl+0x10/0x10
[  161.217926][ T9247]  __se_sys_ioctl+0xce/0x140
[  161.218029][ T9247]  __x64_sys_ioctl+0x43/0x50
[  161.218057][ T9247]  x64_sys_call+0x14b0/0x3000
[  161.218120][ T9247]  do_syscall_64+0xd8/0x2a0
[  161.218177][ T9247]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.218199][ T9247] RIP: 0033:0x7ff84399f749
[  161.218217][ T9247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.218241][ T9247] RSP: 002b:00007ff842407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  161.218297][ T9247] RAX: ffffffffffffffda RBX: 00007ff843bf5fa0 RCX: 00007ff84399f749
[  161.218312][ T9247] RDX: 0000000000000001 RSI: 0000000000005441 RDI: 0000000000000006
[  161.218326][ T9247] RBP: 00007ff842407090 R08: 0000000000000000 R09: 0000000000000000
[  161.218340][ T9247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  161.218351][ T9247] R13: 00007ff843bf6038 R14: 00007ff843bf5fa0 R15: 00007ffce3ed3d28
[  161.218453][ T9247]  </TASK>
[  161.240790][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1436'.
[  161.423790][ T9250] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1436'.
[  161.446873][ T9253] loop3: detected capacity change from 0 to 128
[  161.492765][ T9263] vhci_hcd vhci_hcd.3: invalid port number 9
[  161.496886][ T9264] EXT4-fs: Ignoring removed bh option
[  161.498784][ T9263] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[  161.504430][ T9264] EXT4-fs: inline encryption not supported
[  161.532558][ T9264] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  161.565742][ T9264] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  161.575171][ T9265] batadv_slave_0: entered promiscuous mode
[  161.591591][ T9264] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.1438: lblock 2 mapped to illegal pblock 2 (length 1)
[  161.606988][ T9264] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.1438: lblock 0 mapped to illegal pblock 48 (length 1)
[  161.656408][ T9264] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1438: Failed to acquire dquot type 0
[  161.668115][ T9264] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  161.678898][ T9264] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.1438: mark_inode_dirty error
[  161.690980][ T9269] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1442'.
[  161.701722][ T9264] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  161.714107][ T9262] batadv_slave_0: left promiscuous mode
[  161.728726][ T9264] EXT4-fs (loop7): 1 orphan inode deleted
[  161.736427][ T9264] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.749937][ T3933] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1)
[  161.765501][ T3933] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0
[  161.779150][ T9264] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  161.836067][ T5563] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.902427][ T9278] EXT4-fs: Ignoring removed bh option
[  161.919756][ T9278] EXT4-fs: inline encryption not supported
[  161.938788][ T9278] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  161.983122][ T9278] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  161.993209][ T9278] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.1444: lblock 2 mapped to illegal pblock 2 (length 1)
[  162.040854][ T9278] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.1444: lblock 0 mapped to illegal pblock 48 (length 1)
[  162.065898][ T9278] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1444: Failed to acquire dquot type 0
[  162.110832][   T29] kauditd_printk_skb: 1129 callbacks suppressed
[  162.110850][   T29] audit: type=1326 audit(1765219924.253:15770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.3.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c45762005 code=0x7ffc0000
[  162.140924][   T29] audit: type=1326 audit(1765219924.253:15771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.3.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c45762005 code=0x7ffc0000
[  162.164521][   T29] audit: type=1326 audit(1765219924.253:15772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.3.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c45762005 code=0x7ffc0000
[  162.188182][   T29] audit: type=1326 audit(1765219924.253:15773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.3.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5c4572f749 code=0x7ffc0000
[  162.188786][ T9278] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  162.212128][   T29] audit: type=1326 audit(1765219924.253:15774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.3.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5c4572f749 code=0x7ffc0000
[  162.226445][ T9278] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.1444: mark_inode_dirty error
[  162.255144][   T29] audit: type=1326 audit(1765219924.293:15775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.0.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff39cf52005 code=0x7ffc0000
[  162.272253][ T9278] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  162.285270][   T29] audit: type=1326 audit(1765219924.443:15776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.0.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  162.314298][   T29] audit: type=1326 audit(1765219924.443:15777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.0.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  162.321045][ T9278] EXT4-fs (loop7): 1 orphan inode deleted
[  162.338330][   T29] audit: type=1326 audit(1765219924.443:15778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.0.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  162.349381][ T9278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.382511][ T3501] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1)
[  162.420117][ T3501] Quota error (device loop7): remove_tree: Can't read quota data block 1
[  162.428665][ T3501] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0
[  162.501618][ T9278] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  162.534798][ T5563] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.582777][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1459'.
[  163.649846][ T9358] tipc: Started in network mode
[  163.654860][ T9358] tipc: Node identity ac14140f, cluster identity 4711
[  163.661916][ T9358] tipc: New replicast peer: 255.255.255.255
[  163.668480][ T9358] tipc: Enabled bearer <udp:syz2>, priority 10
[  163.872345][ T9373] __nla_validate_parse: 2 callbacks suppressed
[  163.872444][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1482'.
[  163.887588][ T9373] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1482'.
[  163.917272][ T9366] SELinux: failed to load policy
[  163.954426][ T9369] netlink: 'syz.1.1481': attribute type 3 has an invalid length.
[  164.089132][ T9373] set_capacity_and_notify: 2 callbacks suppressed
[  164.089229][ T9373] loop7: detected capacity change from 0 to 128
[  164.943886][ T1081] tipc: Node number set to 2886997007
[  165.126097][ T9409] FAULT_INJECTION: forcing a failure.
[  165.126097][ T9409] name failslab, interval 1, probability 0, space 0, times 0
[  165.139012][ T9409] CPU: 0 UID: 0 PID: 9409 Comm: syz.0.1492 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  165.139043][ T9409] Tainted: [W]=WARN
[  165.139049][ T9409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  165.139060][ T9409] Call Trace:
[  165.139067][ T9409]  <TASK>
[  165.139074][ T9409]  __dump_stack+0x1d/0x30
[  165.139168][ T9409]  dump_stack_lvl+0xe8/0x140
[  165.139187][ T9409]  dump_stack+0x15/0x1b
[  165.139204][ T9409]  should_fail_ex+0x265/0x280
[  165.139226][ T9409]  should_failslab+0x8c/0xb0
[  165.139248][ T9409]  kmem_cache_alloc_noprof+0x69/0x4b0
[  165.139299][ T9409]  ? getname_flags+0x80/0x3b0
[  165.139325][ T9409]  getname_flags+0x80/0x3b0
[  165.139360][ T9409]  __se_sys_newstat+0x4b/0x280
[  165.139387][ T9409]  ? mutex_unlock+0x4f/0x90
[  165.139410][ T9409]  ? fput+0x8f/0xc0
[  165.139431][ T9409]  ? ksys_write+0x192/0x1a0
[  165.139507][ T9409]  __x64_sys_newstat+0x31/0x40
[  165.139527][ T9409]  x64_sys_call+0x7c4/0x3000
[  165.139592][ T9409]  do_syscall_64+0xd8/0x2a0
[  165.139625][ T9409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.139648][ T9409] RIP: 0033:0x7ff39cf1f749
[  165.139663][ T9409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.139680][ T9409] RSP: 002b:00007ff39b97f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  165.139756][ T9409] RAX: ffffffffffffffda RBX: 00007ff39d175fa0 RCX: 00007ff39cf1f749
[  165.139769][ T9409] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000180
[  165.139782][ T9409] RBP: 00007ff39b97f090 R08: 0000000000000000 R09: 0000000000000000
[  165.139793][ T9409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  165.139859][ T9409] R13: 00007ff39d176038 R14: 00007ff39d175fa0 R15: 00007ffd72070ff8
[  165.139875][ T9409]  </TASK>
[  165.161954][ T9390] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.1488'.
[  165.339216][ T9390] net_ratelimit: 13 callbacks suppressed
[  165.339282][ T9390] netlink: zone id is out of range
[  165.350174][ T9390] netlink: zone id is out of range
[  165.357804][ T9390] netlink: zone id is out of range
[  165.362970][ T9390] netlink: zone id is out of range
[  165.368064][ T9390] netlink: zone id is out of range
[  165.374395][ T9417] vhci_hcd vhci_hcd.3: invalid port number 9
[  165.380413][ T9417] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[  165.398792][ T9418] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[  165.409294][ T9418] SELinux: failed to load policy
[  165.421489][ T9417] batadv_slave_0: entered promiscuous mode
[  165.427613][ T9412] batadv_slave_0: left promiscuous mode
[  165.448911][ T9390] netlink: zone id is out of range
[  165.454246][ T9390] netlink: del zone limit has 8 unknown bytes
[  165.482024][ T9424] loop7: detected capacity change from 0 to 1024
[  165.505575][ T9424] EXT4-fs: Ignoring removed bh option
[  165.511193][ T9424] EXT4-fs: inline encryption not supported
[  165.538374][ T9424] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  165.549495][ T9424] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  165.621190][ T9424] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.1500: lblock 2 mapped to illegal pblock 2 (length 1)
[  165.635735][ T9424] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.1500: lblock 0 mapped to illegal pblock 48 (length 1)
[  165.650682][ T9424] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1500: Failed to acquire dquot type 0
[  165.663033][ T9424] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  165.673265][ T9424] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.1500: mark_inode_dirty error
[  165.687221][ T9424] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  165.698257][ T9424] EXT4-fs (loop7): 1 orphan inode deleted
[  165.704546][ T9424] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.717364][ T3501] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1)
[  165.733337][ T3501] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0
[  166.043133][ T9424] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  166.057080][ T9429] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1502'.
[  166.212652][ T5563] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.342707][ T9450] SELinux: failed to load policy
[  166.505588][ T9465] vhci_hcd vhci_hcd.3: invalid port number 9
[  166.511670][ T9465] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[  166.573110][ T9465] batadv_slave_0: entered promiscuous mode
[  166.612722][ T9464] batadv_slave_0: left promiscuous mode
[  166.915843][ T9477] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1520'.
[  167.266536][ T9485] FAULT_INJECTION: forcing a failure.
[  167.266536][ T9485] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  167.280089][ T9485] CPU: 1 UID: 0 PID: 9485 Comm: syz.2.1523 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  167.280124][ T9485] Tainted: [W]=WARN
[  167.280131][ T9485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  167.280200][ T9485] Call Trace:
[  167.280208][ T9485]  <TASK>
[  167.280217][ T9485]  __dump_stack+0x1d/0x30
[  167.280245][ T9485]  dump_stack_lvl+0xe8/0x140
[  167.280272][ T9485]  dump_stack+0x15/0x1b
[  167.280304][ T9485]  should_fail_ex+0x265/0x280
[  167.280324][ T9485]  should_fail+0xb/0x20
[  167.280341][ T9485]  should_fail_usercopy+0x1a/0x20
[  167.280365][ T9485]  _copy_from_user+0x1c/0xb0
[  167.280390][ T9485]  xsk_setsockopt+0x308/0x640
[  167.280471][ T9485]  ? __pfx_xsk_setsockopt+0x10/0x10
[  167.280495][ T9485]  __sys_setsockopt+0x184/0x200
[  167.280518][ T9485]  __x64_sys_setsockopt+0x64/0x80
[  167.280616][ T9485]  x64_sys_call+0x21d5/0x3000
[  167.280638][ T9485]  do_syscall_64+0xd8/0x2a0
[  167.280664][ T9485]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.280678][ T9485] RIP: 0033:0x7f54befbf749
[  167.280694][ T9485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.280705][ T9485] RSP: 002b:00007f54bda27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  167.280717][ T9485] RAX: ffffffffffffffda RBX: 00007f54bf215fa0 RCX: 00007f54befbf749
[  167.280780][ T9485] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006
[  167.280787][ T9485] RBP: 00007f54bda27090 R08: 0000000000000020 R09: 0000000000000000
[  167.280795][ T9485] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001
[  167.280803][ T9485] R13: 00007f54bf216038 R14: 00007f54bf215fa0 R15: 00007ffe22dfc958
[  167.280814][ T9485]  </TASK>
[  167.527216][ T9492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=213 sclass=netlink_route_socket pid=9492 comm=syz.7.1527
[  167.569487][   T29] kauditd_printk_skb: 1267 callbacks suppressed
[  167.569502][   T29] audit: type=1326 audit(1765219929.753:17043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.0.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  167.610736][   T29] audit: type=1326 audit(1765219929.793:17044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.0.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  167.634300][   T29] audit: type=1326 audit(1765219929.793:17045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.0.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  167.658134][   T29] audit: type=1326 audit(1765219929.793:17046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.0.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  167.681805][   T29] audit: type=1326 audit(1765219929.793:17047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.0.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  167.705499][   T29] audit: type=1326 audit(1765219929.793:17048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.0.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  167.729113][   T29] audit: type=1326 audit(1765219929.793:17049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.0.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  167.752680][   T29] audit: type=1326 audit(1765219929.793:17050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.0.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  167.776166][   T29] audit: type=1326 audit(1765219929.793:17051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.0.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  167.799829][   T29] audit: type=1326 audit(1765219929.793:17052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.0.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff39cf1f749 code=0x7ffc0000
[  168.328655][ T9516] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1533'.
[  168.342400][ T9508] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.1532'.
[  168.367904][ T9508] netlink: zone id is out of range
[  168.373075][ T9508] netlink: zone id is out of range
[  168.425521][ T9508] netlink: zone id is out of range
[  168.509899][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1536'.
[  168.511801][ T9520] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1534'.
[  168.833059][ T9532] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1538'.
[  168.953896][ T9537] SELinux: failed to load policy
[  169.326432][ T9557] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  169.501073][ T9574] SELinux: failed to load policy
[  169.601505][ T9582] vhci_hcd vhci_hcd.3: invalid port number 9
[  169.607626][ T9582] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[  169.621974][ T9582] batadv_slave_0: entered promiscuous mode
[  169.641506][ T9580] batadv_slave_0: left promiscuous mode
[  169.936661][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1563'.
[  170.107998][ T9618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1566'.
[  170.144040][ T9617] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1565'.
[  170.434011][ T9625] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1569'.
[  171.005265][ T9649] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[  171.015592][ T9649] SELinux: failed to load policy
[  171.246010][ T9674] vlan1: entered allmulticast mode
[  171.503533][ T9687] SELinux: failed to load policy
[  171.639390][ T9694] vhci_hcd vhci_hcd.3: invalid port number 9
[  171.646179][ T9694] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[  171.678086][ T9694] batadv_slave_0: entered promiscuous mode
[  171.684737][ T9693] batadv_slave_0: left promiscuous mode
[  171.730693][ T9696] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1589'.
[  171.945898][ T9714] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  171.967330][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1599'.
[  172.017083][ T9722] vhci_hcd vhci_hcd.3: invalid port number 9
[  172.023394][ T9722] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[  172.047707][ T9722] batadv_slave_0: entered promiscuous mode
[  172.089051][ T9721] batadv_slave_0: left promiscuous mode
[  172.484979][ T9751] netlink: 'syz.7.1615': attribute type 3 has an invalid length.
[  172.579532][ T9754] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1616'.
[  172.944030][   T29] kauditd_printk_skb: 414 callbacks suppressed
[  172.944070][   T29] audit: type=1326 audit(1765219935.133:17467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9759 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84399f749 code=0x7ffc0000
[  172.990019][   T29] audit: type=1326 audit(1765219935.143:17468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9759 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7ff84399f749 code=0x7ffc0000
[  173.014822][   T29] audit: type=1326 audit(1765219935.173:17469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4572f749 code=0x7ffc0000
[  173.038547][   T29] audit: type=1326 audit(1765219935.173:17470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4572f749 code=0x7ffc0000
[  173.062580][   T29] audit: type=1326 audit(1765219935.203:17471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c4572f749 code=0x7ffc0000
[  173.086407][   T29] audit: type=1326 audit(1765219935.203:17472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4572f749 code=0x7ffc0000
[  173.110116][   T29] audit: type=1326 audit(1765219935.203:17473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4572f749 code=0x7ffc0000
[  173.133713][   T29] audit: type=1326 audit(1765219935.203:17474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9759 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84399f749 code=0x7ffc0000
[  173.143127][ T9765] vhci_hcd vhci_hcd.3: invalid port number 9
[  173.157543][   T29] audit: type=1326 audit(1765219935.203:17475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9759 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84399f749 code=0x7ffc0000
[  173.172642][   T29] audit: type=1326 audit(1765219935.253:17476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c4572f749 code=0x7ffc0000
[  173.187585][ T9765] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[  173.267937][ T9764] batadv_slave_0: entered promiscuous mode
[  173.274266][ T9763] batadv_slave_0: left promiscuous mode
[  173.287468][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'.
[  173.298854][ T9767] ip6_vti0 speed is unknown, defaulting to 1000
[  173.314550][ T9767] ip6_vti0 speed is unknown, defaulting to 1000
[  173.347251][ T9767] ip6_vti0 speed is unknown, defaulting to 1000
[  173.421743][ T9784] vhci_hcd vhci_hcd.3: invalid port number 9
[  173.427875][ T9784] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[  173.446042][ T9767] infiniband syz2: set down
[  173.450641][ T9767] infiniband syz2: added ip6_vti0
[  173.455801][ T3507] ip6_vti0 speed is unknown, defaulting to 1000
[  173.487442][ T9784] batadv_slave_0: entered promiscuous mode
[  173.503370][ T9783] batadv_slave_0: left promiscuous mode
[  173.522453][ T9767] RDS/IB: syz2: added
[  173.546899][ T9767] smc: adding ib device syz2 with port count 1
[  173.560134][ T9782] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1624'.
[  173.611238][ T9767] smc:    ib device syz2 port 1 has no pnetid
[  173.617472][ T3507] ip6_vti0 speed is unknown, defaulting to 1000
[  173.625851][ T9767] ip6_vti0 speed is unknown, defaulting to 1000
[  173.670195][ T9767] ip6_vti0 speed is unknown, defaulting to 1000
[  173.739349][ T9767] ip6_vti0 speed is unknown, defaulting to 1000
[  173.792794][ T9767] ip6_vti0 speed is unknown, defaulting to 1000
[  173.942651][ T9767] ip6_vti0 speed is unknown, defaulting to 1000
[  173.945277][ T9800] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1632'.
[  173.981814][ T9767] ip6_vti0 speed is unknown, defaulting to 1000
[  174.021799][ T9800] ip6_vti0 speed is unknown, defaulting to 1000
[  174.065795][ T9805] netlink: 'syz.1.1635': attribute type 3 has an invalid length.
[  174.211370][ T9812] vhci_hcd vhci_hcd.3: invalid port number 9
[  174.217507][ T9812] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[  174.234360][ T9812] batadv_slave_0: entered promiscuous mode
[  174.240652][ T9811] batadv_slave_0: left promiscuous mode
[  174.613507][ T9830] SELinux: failed to load policy
[  174.651172][ T9837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9837 comm=syz.2.1648
[  174.694264][ T9841] FAULT_INJECTION: forcing a failure.
[  174.694264][ T9841] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  174.707462][ T9841] CPU: 0 UID: 0 PID: 9841 Comm: syz.0.1651 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  174.707561][ T9841] Tainted: [W]=WARN
[  174.707575][ T9841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  174.707634][ T9841] Call Trace:
[  174.707643][ T9841]  <TASK>
[  174.707652][ T9841]  __dump_stack+0x1d/0x30
[  174.707681][ T9841]  dump_stack_lvl+0xe8/0x140
[  174.707704][ T9841]  dump_stack+0x15/0x1b
[  174.707722][ T9841]  should_fail_ex+0x265/0x280
[  174.707762][ T9841]  should_fail+0xb/0x20
[  174.707791][ T9841]  should_fail_usercopy+0x1a/0x20
[  174.707847][ T9841]  _copy_from_user+0x1c/0xb0
[  174.707892][ T9841]  ___sys_sendmsg+0xc1/0x1d0
[  174.707927][ T9841]  __x64_sys_sendmsg+0xd4/0x160
[  174.707952][ T9841]  x64_sys_call+0x17ba/0x3000
[  174.707987][ T9841]  do_syscall_64+0xd8/0x2a0
[  174.708020][ T9841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.708042][ T9841] RIP: 0033:0x7ff39cf1f749
[  174.708059][ T9841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.708077][ T9841] RSP: 002b:00007ff39b97f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  174.708099][ T9841] RAX: ffffffffffffffda RBX: 00007ff39d175fa0 RCX: 00007ff39cf1f749
[  174.708111][ T9841] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000006
[  174.708121][ T9841] RBP: 00007ff39b97f090 R08: 0000000000000000 R09: 0000000000000000
[  174.708132][ T9841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  174.708145][ T9841] R13: 00007ff39d176038 R14: 00007ff39d175fa0 R15: 00007ffd72070ff8
[  174.708218][ T9841]  </TASK>
[  175.039708][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1658'.
[  175.053817][ T9858] rdma_rxe: rxe_newlink: failed to add ip6_vti0
[  175.127595][ T9860] SELinux: failed to load policy
[  175.149925][ T9866] ==================================================================
[  175.158037][ T9866] BUG: KCSAN: data-race in memcpy_and_pad / release_task
[  175.165163][ T9866] 
[  175.167484][ T9866] write to 0xffff888117e35748 of 8 bytes by task 3311 on cpu 1:
[  175.175108][ T9866]  release_task+0x6ef/0xb60
[  175.179602][ T9866]  wait_consider_task+0x114a/0x1660
[  175.184884][ T9866]  __do_wait+0xfa/0x510
[  175.189042][ T9866]  do_wait+0xb7/0x250
[  175.193182][ T9866]  kernel_wait4+0x16b/0x1e0
[  175.197772][ T9866]  __x64_sys_wait4+0x91/0x120
[  175.202461][ T9866]  x64_sys_call+0x28ec/0x3000
[  175.207129][ T9866]  do_syscall_64+0xd8/0x2a0
[  175.211623][ T9866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.217508][ T9866] 
[  175.219915][ T9866] read to 0xffff888117e35280 of 3264 bytes by task 9866 on cpu 0:
[  175.227883][ T9866]  memcpy_and_pad+0x48/0x80
[  175.232398][ T9866]  arch_dup_task_struct+0x2c/0x40
[  175.237443][ T9866]  dup_task_struct+0x6e/0x950
[  175.242107][ T9866]  copy_process+0x37d/0x1ef0
[  175.246772][ T9866]  kernel_clone+0x16c/0x5c0
[  175.251347][ T9866]  __se_sys_clone3+0x1c2/0x200
[  175.256613][ T9866]  __x64_sys_clone3+0x31/0x40
[  175.261274][ T9866]  x64_sys_call+0x2c0f/0x3000
[  175.265935][ T9866]  do_syscall_64+0xd8/0x2a0
[  175.270518][ T9866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.276558][ T9866] 
[  175.278891][ T9866] Reported by Kernel Concurrency Sanitizer on:
[  175.285044][ T9866] CPU: 0 UID: 0 PID: 9866 Comm: syz.3.1662 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  175.296335][ T9866] Tainted: [W]=WARN
[  175.300129][ T9866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  175.310196][ T9866] ==================================================================