last executing test programs:

44.393064053s ago: executing program 2 (id=5149):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
socket$inet6(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0)
r4 = epoll_create(0x802)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000300))
ioctl$FS_IOC_GETFLAGS(r3, 0x5437, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r2}, 0x38)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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")

44.04812031s ago: executing program 2 (id=5152):
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsmount(0xffffffffffffffff, 0xc1442c52324ba44a, 0x82)
getpeername$llc(r1, &(0x7f0000000280), &(0x7f00000003c0)=0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22400049, &(0x7f0000000180)={[{@dioread_nolock}, {@noinit_itable}, {@nomblk_io_submit}, {@noblock_validity}, {@data_err_abort}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x1, 0x48e, &(0x7f0000000a00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x41009432, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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")
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex@De', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r4 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304010000000000000000000000000a14"], 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000)

43.819041914s ago: executing program 2 (id=5153):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/schedstat\x00', 0x0, 0x0) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}) (async)
r3 = dup(r1) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r3], 0xfdef) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
getgroups(0x0, 0x0) (async)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r9, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40)
shutdown(r9, 0x1) (async)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7d, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0xe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000280)=0x84)

43.572561359s ago: executing program 2 (id=5157):
prlimit64(0x0, 0xa, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
syz_emit_ethernet(0x80, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000001}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000e4ffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0xb)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fedbdf2501000000180001801409b2bb85f5c7bfd20b66ee1fe3f0000200645a823d3c15995947cf79813e82766d727031000000000000000000002329892dbae8a4f0589b96205d8a9e6aabc93597840405c5d22001596e7da6d94a7a130fe810c00931dccaa5e0f42d80a99455ce3ef951850fe5f6eb36097b4f3a3f539f34aae754eadc04c34a3aee035a1837432bddd7c3c4d7e030e7c7ed5bb4f5d06e14185e57a2868226e324a247c2e8338ca753d4ba7b"], 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000480)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@nojournal_checksum}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000080)={0x0, 0x2000003})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4000)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x1)
socket(0x10, 0x3, 0x0)

42.692839976s ago: executing program 2 (id=5165):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000200))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x109a88, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioperm(0x3c, 0x0, 0x8)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ftruncate(r0, 0x2000009)
r1 = openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0)
pwritev2(r1, 0x0, 0x0, 0xe7b, 0x0, 0x1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x44, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x61}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9e7c9cfaa587"}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x48011)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x4016)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2}, 0x18)
readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000800)=""/249, 0xf9}], 0x1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000005, 0x32, 0x0, 0x471ac000)
write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xd, 0x0, &(0x7f0000000300), 0x0, 0x2, 0x18, &(0x7f0000000380)=""/24, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x3, 0x2, 0x9, 0x85}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

41.406543651s ago: executing program 2 (id=5176):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x3fffffd}, 0x18)
r3 = io_uring_setup(0x167c, &(0x7f0000000440)={0x0, 0x800000, 0x1, 0x2, 0x12c})
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000300)={0x0}, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
time(0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket(0x10, 0x2, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)
write$binfmt_script(r7, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40)
writev(r7, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
close_range(r6, r7, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000240))
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x1)

41.406242841s ago: executing program 32 (id=5176):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x3fffffd}, 0x18)
r3 = io_uring_setup(0x167c, &(0x7f0000000440)={0x0, 0x800000, 0x1, 0x2, 0x12c})
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000300)={0x0}, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
time(0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket(0x10, 0x2, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)
write$binfmt_script(r7, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40)
writev(r7, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
close_range(r6, r7, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000240))
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x1)

3.101734509s ago: executing program 3 (id=5580):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000c00)={{r0}, "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"})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa3d8855cce9260d0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = getpgid(0x0)
r4 = syz_pidfd_open(r3, 0x0)
pidfd_getfd(r4, r4, 0x0)
add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$set_reqkey_keyring(0xe, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x3000010, &(0x7f00000002c0)={[{@jqfmt_vfsv0}, {@nobh}]}, 0x1, 0x512, &(0x7f0000001c00)="$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")
r6 = perf_event_open(0x0, 0x0, 0x3, r2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c0012802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c00014000000000000000010c000180080001006475700008000340000001"], 0xc8}}, 0x20050800)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e20, 0x1b, @local, 0x3}, 0x1c)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000008, 0x8010, r5, 0xce2b9000)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24040, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xbc}, 0x4110, 0x0, 0x0, 0x1}, 0x0, 0x0, r6, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x32, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000000)
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250)

2.938966272s ago: executing program 0 (id=5582):
r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0xa80d, 0x1, 0x3}, &(0x7f0000010080), &(0x7f0000000000))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r2}, 0x18)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2)

2.851180664s ago: executing program 0 (id=5583):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x2, 0x12, r6, 0xfffff000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
sendmmsg$inet(r7, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000180012800e00010077697265677561726400"], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x100, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_emit_ethernet(0x83, 0x0, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r10, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r11, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r3}, 0x18)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r13}, 0x10)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)

2.652734708s ago: executing program 1 (id=5584):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20000023896)
close(r2)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x12, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000001}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x8001, 0xa5, &(0x7f0000000600)=""/165, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0x1, 0x886, 0x400}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x0, 0x5, 0x6}, {0x0, 0x1, 0x2, 0x4}, {0x3, 0x4, 0x4, 0x7}, {0x4, 0x3, 0xa, 0x2}]}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000540), 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x2, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xf7fffffe, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @fallback=0xe0ac652e8b8089fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r5}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x14, 0xffff, 0x1}}, 0x80, 0x0, 0x44}, 0x4048850)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005234538ba55"], 0xfe33)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="800004000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)

2.102796979s ago: executing program 1 (id=5589):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40510, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, @perf_bp={0x0, 0x8}, 0xb008, 0x10000, 0x1, 0x1, 0x8, 0x20003, 0x2b, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone3(&(0x7f0000000340)={0x42107480, &(0x7f00000003c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
sendmsg(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000280)='5', 0x1}], 0x1}, 0x4040005)
close(r3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x3}, 0x4)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c)
r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x40)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r10, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r11}, 0x10)

2.057582829s ago: executing program 5 (id=5590):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)

2.02948592s ago: executing program 0 (id=5591):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x32)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)

1.860382364s ago: executing program 0 (id=5592):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034888a809003200030030"], 0xfdef)

1.856978394s ago: executing program 5 (id=5593):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r0], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000fefffdff00000000000000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940))
open$dir(&(0x7f0000000180)='./file0\x00', 0x2842, 0xc0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x1}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r6, @ANYRESHEX=r1, @ANYRES16=r0, @ANYRES64=r0, @ANYRES16=r5], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES8=r6], &(0x7f0000000c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000740)='kfree\x00', r8}, 0x18)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r10, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r11], 0x3c}}, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000d00)='rpcgss_update_slack\x00', r13}, 0x18)
syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local, {[@noop, @generic={0x86, 0x4, "c045"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{}, {@empty}, {@local}, {@private}, {@multicast2, 0x9}]}]}}}}}}}, 0x0)
r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r15 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0xe, &(0x7f0000000340)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x800}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x5}], &(0x7f00000005c0)='GPL\x00', 0x7fffffff, 0xfe, &(0x7f0000000780)=""/254, 0x41000, 0x28, '\x00', r10, 0x0, r2, 0x8, &(0x7f00000006c0)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000a40)=[r7, r3, r15], &(0x7f0000000a80)=[{0x5, 0x1, 0x5, 0x7}, {0x3, 0x2, 0x8, 0x2}, {0x2, 0x5, 0x4, 0x4}, {0x4, 0x2, 0xd, 0x6}, {0x1, 0x2, 0x4, 0x3}, {0x5, 0x3, 0x10, 0x6}, {0x5, 0x3, 0x2, 0xa}, {0x3, 0x1, 0x7, 0xc}, {0x2, 0x5, 0x2, 0xb}], 0x10, 0x10}, 0x94)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r16, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x4c, r14, 0x505, 0x0, 0x25dfdbfb, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r10, {0xffe0}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0)

1.843313344s ago: executing program 3 (id=5594):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000002004000"], 0x48)

1.741137126s ago: executing program 3 (id=5595):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000340))
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x50)
setresuid(0xee01, 0xee01, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x4)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

1.56075102s ago: executing program 1 (id=5596):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x1, 0x0, 0x7, 0x510, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xe8, 0xdaf3}, 0x0, 0x10000, 0x0, 0x0, 0xd8b2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1500000028000000", @ANYRES32, @ANYBLOB="f919a26717d65c2ce02c3ec37c2269cb011626ca2a4f14b80dba71e3f11f782c51d1c7e4442fa459a4fe3b7ee59aa750a950774360ebb2bfde7abc274b71636b", @ANYRES32=0x0, @ANYRES64=0x0], 0x20)
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0xc, 0xb, 0xfffd}, 0x8, 0x3, 0x8, 0x0, 0x2, 0x20000, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x510, &(0x7f0000000740)="$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")
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1, 0x0, 0x6}, 0x18)
ppoll(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10)
syz_emit_ethernet(0x1f, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffff07000000000000000000001142"], 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r5}, 0x10)
rt_sigpending(0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'gre0\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000300)={0x11, 0x1b, r7, 0x1, 0xfc, 0x6, @local}, 0x14)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x9, 0xc3, 0x0, 0x7fff8000}]})

1.501061401s ago: executing program 0 (id=5597):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90)
write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff)
removexattr(&(0x7f0000000000)='./file0/file1\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00')
unlink(&(0x7f0000000100)='./file0/file1\x00')
unshare(0x78000500)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100}, 0x94)
r1 = syz_io_uring_setup(0x10b, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000280))
io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x33, 0x0, @val=@netfilter={0x7, 0x1, 0x6}}, 0x20)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
accept4$unix(r0, &(0x7f0000000440)=@abs, &(0x7f0000000240)=0x6e, 0x800)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000120001000300000000000c000000000000000000000008004100ac1414bb0000000000"], 0x28}], 0x1, 0x0, 0x0, 0x40801}, 0x4000800)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r2, 0x0, 0x24000000)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x8, 0x8000, 0x3, 0x6, {{0xa, 0x4, 0x1, 0x8, 0x28, 0x464, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x7, 0x6, "15592fe1"}, @noop, @timestamp_prespec={0x44, 0xc, 0xf0, 0x3, 0x8, [{@empty, 0x18000}]}]}}}}})
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
chdir(&(0x7f0000000540)='./cgroup\x00')
syz_clone3(&(0x7f0000000340)={0x42107480, &(0x7f00000003c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1.307256394s ago: executing program 5 (id=5598):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x90, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/route\x00')
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0)
lseek(r1, 0x80, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xff}, 0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x0, 0x9, 0x8000, 0xffffffff, 0x8, 0x8, 0x8000, 0x9, 0x8000, 0x8, 0x716, 0x953, 0x896, 0x5, 0x5, 0x6a, 0x2, 0x5, 0x9840, 0x80, 0x93cd, 0x5, 0x9, 0x400, 0x6, 0x6, 0x1ec6c5d1, 0x2, 0x7f, 0x200, 0xfffffffc, 0x9, 0x0, 0x8, 0x6, 0x4, 0x10001, 0x3003, 0x9, 0x8d, 0x1, 0x6, 0xf3bd, 0x0, 0x4, 0x67a, 0x6, 0x8, 0x1, 0x7, 0x7, 0xffffff6e, 0xfa7, 0xc, 0x6, 0x6, 0x200, 0x2, 0x10, 0x8, 0x7, 0x8, 0x4, 0x9, 0xff, 0x8001, 0x95df, 0x2, 0x0, 0x3, 0x1, 0xffffffff, 0x2, 0x8000, 0x80, 0xff, 0x101, 0x68, 0x2, 0x3c, 0x101, 0x1, 0xffffff7f, 0x5, 0xfffffffa, 0x7, 0x1000000, 0xfffffffb, 0x6b, 0x8, 0x1, 0xe7c, 0xe, 0x80000001, 0x2, 0x6, 0x4, 0x2, 0x3, 0xfffffffc, 0x5, 0x4, 0x6, 0xfffff2fb, 0xd129, 0x7, 0x5, 0x6, 0x4672, 0x40, 0x0, 0x157d197d, 0x8, 0xfff, 0x4e2c, 0xfffffff1, 0x2, 0x7f, 0x4, 0x2, 0x6, 0x7fff, 0x7, 0x4, 0x5, 0xfffffff8, 0x0, 0x2, 0x5, 0x3, 0xf, 0x9, 0x2, 0x7, 0xffffff1d, 0x1, 0x800, 0x0, 0x1010001, 0x1, 0x6, 0xfffffbff, 0x4, 0x4, 0x5, 0x1, 0x100, 0x5, 0x0, 0x200, 0x8, 0x4, 0x8, 0xa, 0xbb, 0x800, 0x4, 0x0, 0x1, 0x6, 0x2, 0x1, 0x7, 0x4, 0x2, 0x7fff, 0x2, 0x6, 0x5, 0xfffffff8, 0x2, 0x4, 0x2, 0x5, 0x3, 0x1, 0x6, 0x6, 0x4, 0x9, 0x4, 0x1, 0x3, 0x0, 0xa, 0x9, 0x4, 0xc, 0x7fff, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x70f8, 0x7, 0x1, 0x5, 0x3, 0x4, 0x0, 0x3, 0x3, 0x3, 0x4, 0x0, 0x5, 0x8, 0xffffffff, 0x9, 0xe, 0xc, 0x9, 0xdbd, 0x1, 0x9, 0x6, 0x100, 0xffff0001, 0x35f0, 0x5, 0x6, 0x1ff, 0x7, 0xfffffff8, 0xa, 0x6, 0x67d3, 0x4, 0x7, 0xfffffff8, 0xe39c, 0xd, 0x0, 0x5, 0x7f, 0x4, 0x4, 0x8, 0x10001, 0x10, 0x7, 0x3, 0x4, 0x1, 0xfffffff1, 0x5, 0x40, 0x4b, 0xf, 0x8e, 0x3, 0x8]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x1041}, 0x0)

1.189951647s ago: executing program 5 (id=5599):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20000023896)
close(r2)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x12, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000001}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x8001, 0xa5, &(0x7f0000000600)=""/165, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0x1, 0x886, 0x400}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x0, 0x5, 0x6}, {0x0, 0x1, 0x2, 0x4}, {0x3, 0x4, 0x4, 0x7}, {0x4, 0x3, 0xa, 0x2}]}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000540), 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x2, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xf7fffffe, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @fallback=0xe0ac652e8b8089fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r5}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x14, 0xffff, 0x1}}, 0x80, 0x0, 0x44}, 0x4048850)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005234538ba55"], 0xfe33)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="800004000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)

691.285827ms ago: executing program 5 (id=5602):
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0xfffffffffffffffd, 0x40000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x5, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[], 0x48)

651.310818ms ago: executing program 1 (id=5603):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x32)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)

543.79343ms ago: executing program 1 (id=5604):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r2}, 0x18)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00ffffffffffffff810000000c0000800800", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0)

517.83906ms ago: executing program 4 (id=5605):
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
syz_io_uring_setup(0x33b3, &(0x7f00000003c0)={0x0, 0x11, 0x20, 0x2, 0x27d}, 0x0, 0x0)

481.163321ms ago: executing program 1 (id=5606):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000200))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x109a88, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioperm(0x3c, 0x0, 0x8)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ftruncate(r0, 0x2000009)
r1 = openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0)
pwritev2(r1, 0x0, 0x0, 0xe7b, 0x0, 0x1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x44, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x61}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9e7c9cfaa587"}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x48011)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x4016)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2}, 0x18)
readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000800)=""/249, 0xf9}], 0x1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000005, 0x32, 0x0, 0x471ac000)
write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xd, 0x0, &(0x7f0000000300), 0x0, 0x2, 0x18, &(0x7f0000000380)=""/24, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x3, 0x2, 0x9, 0x85}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

472.243831ms ago: executing program 4 (id=5607):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034888a809003200030030"], 0xfdef)

383.125183ms ago: executing program 4 (id=5608):
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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")
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
readv(r0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffe1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad1f50ad32d3fd25dfd73a015e0ca6a0f68a7d007f15451dfb265a0e3ccae669e173a64bc1cfd5587d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661ca3dbe74bd09de8793dbcceef76b2e5feecf9c66c54c3b3ffe1b4ce25d7c983c044c06cd0a48dfe3e26e7a23129d6606fd28a69989d552af6d9a9df2c3af36e0360050011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a13ed38ae82f87925bfacba83109753f541cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b70a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba73c31b05c00fba8a4aee676d7c45bb29671a68ee2e60da7b01a2e5785a238afa4aba70c07fcd95bf8b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf334178b04963d67dd5a5707e618a1ef9057fec00f9e930219fa8d30e716de8cde9c60f0000000c3b64d10f0939b42b788daa7075fa542242b00f6bf9b64ad460e386b6f388351fbdacb3ad074574ee9d450f9dcfaef1be95ff3c449e6482e4403174618c20e887d6f320616d31d78a0e5421d5742cc52509fd90cf2df6d1404f6b8f810d7b94d421971b77a3270153a0d57cccfe27872f3e8e44480f93c33421986a7737842627301fb2fee8cabab074adaa2024ff57e609ba2f4d83b3bbf52309484532416f48f43b31395c6f45fee8f1682a4e8d5e3b9ae634ed24fb0e8b5fadaf5cb7eea62b7bb4264e72950c9dc791d771acc24c08cdb6ef24c813d082a86d9b879bdf5aefdfd905a2bd4ea36b0b54915a68fe149db154a8340017e1855511e9"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005900)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x9}, @TCA_FLOW_KEYS={0x8, 0x1, 0xba37}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xffffffd2}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xd, 0xb}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x5c}}, 0x24040084)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffc, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r4)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000000000000000000000001400200000000000000000"], 0x6c}}, 0x0)

326.205654ms ago: executing program 5 (id=5609):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000200))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x109a88, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioperm(0x3c, 0x0, 0x8)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$eJzs28FrXEUcB/BfkqapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfkLYEVsXry6t8hggjeBPGml1z8DwRvuXisID7JrrZd3RVWQjfI53PZH8z7zs7ssAuzzBy+8tn7O9tVtp13Y3ZmJmZ3I9LdFClm4y8fxwsvf//DM9dv3rq63mxuXEvpyvqN1ZdSSsvPfvvWh18891337JtfL3+zEAcrbx/+svbzwfmDC4e/33ivVaVWldqdbsrT7U6nm98ui7TVqnaylN4oi7wqUqtdFXtD7dtlZ3e3l/L21tLi7l5RVSlv99JO0UvdTuru9VL+bt5qpyzL0tJiMLlT96rNz+/WdR1R1/NxOuq6rh+JxTgbj8ZSLEcjVuKxeDyeiHPxZJyPp+Lp+OqnL3tHCQAAAAAAAAAAAAAAAAAAAOD4THr//0L/qWmPGgAAAAAAAAAAAAAAAAAAAP5frt+8dXW92dy4ltKZiPLT/c39zcHroH19O1pRRhGXoxG/Rf/2/8CgvvJac+Ny6luJT8o7f+bv7G/ODedXoxEvjs6vDvJpOL8Qiw/m16IR50bl52NtZP5MXHr+gXwWjfjxnehEGVtxlL3//h+tpvTq682/5S/2nxtv7mEsDwAAAByLLN0zcv+eZePaB/kJ/h8Y2l8fZS+emurUiYiq98FOXpbFnmJkcelkDKNfnD7ODucjYrLUr3VdT/9DmFIx/puyEBH/ueeZiDgZE/xHMe1fJh6G+4s+7ZEAAAAAAAAAAAAwibHHABf+7YTg3ETHCac9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//0AbP3Q==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ftruncate(r0, 0x2000009)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x44, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x61}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9e7c9cfaa587"}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x48011)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x4016)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x18)
readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000800)=""/249, 0xf9}], 0x1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd\x00')
write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xd, 0x0, &(0x7f0000000300), 0x0, 0x2, 0x18, &(0x7f0000000380)=""/24, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x3, 0x2, 0x9, 0x85}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

312.253774ms ago: executing program 4 (id=5610):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)

276.470055ms ago: executing program 3 (id=5611):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28)

119.128918ms ago: executing program 0 (id=5612):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x1, 0x0, 0x7, 0x510, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xe8, 0xdaf3}, 0x0, 0x10000, 0x0, 0x0, 0xd8b2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1500000028000000", @ANYRES32, @ANYBLOB="f919a26717d65c2ce02c3ec37c2269cb011626ca2a4f14b80dba71e3f11f782c51d1c7e4442fa459a4fe3b7ee59aa750a950774360ebb2bfde7abc274b71636b", @ANYRES32=0x0, @ANYRES64=0x0], 0x20)
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0xc, 0xb, 0xfffd}, 0x8, 0x3, 0x8, 0x0, 0x2, 0x20000, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x510, &(0x7f0000000740)="$eJzs3c9vG1kdAPDvOHZp2mSTBQ6wEsvCLkorqJ1s2N2Iw1IkBKdKQLmXkDhRFCeOYqdtogpS8QcgIQRInODCBYk/AAlV4sIRIVWCMwgQCEELBw7QQbbHaZraidsaOxt/PtLLvDc//H3P0YznzTzNBDCyXouIqxHxKE3TyxExlc3PZSn2W6mx3sMHd5YaKYk0vf73JJJsXvuzkmx6MdvsfER85YsRX0+ejlvb3VtfrFTK21m5VN/YKtV2966sbSyullfLm/Pzc28vvLPw1sJsX9o5GRHvfv7P3/v2T77w7i8+desPN/566RuNak1kyw+34xnlj1vYanqh+V0c3mD7OYOdRvlmCzPjndYYa2cm25m7A6gXAABPa5zjvz8iPh4Rl2Mqxo45nT030JoBAAAA/ZJ+diL+k0SknZ3rMh8AAAB4D8k1x8AmuWI2FmAicrlisTWG94NxIVep1uqfXKnubC63xspORyG3slYpz2ZjhaejkDTKc8384/KbR8rzEfFyRHx3arxZLi5VK8vDvvgBAAAAI+Likf7/v6Za/X8AAADgjJkedgUAAACA/zv9fwAAADj79P8BAADgTPvStWuNlLbff718c3dnvXrzynK5tl7c2FkqLlW3t4qr1epq85l9Gyd9XqVa3fp0bO7cLtXLtXqptrt3Y6O6s1m/sfbEK7ABAACAAXr5o/d+l0TE/mfGmyl6f89/j6sBp1X+IJdk0w679e9fak3/NKBKAQMxNuwKAEOTH3YFgKEpDLsCwNAlJyzvOnjn19n0Y/2tDwAA0H8zH+5+/z937Jb7xy8GTj07MYwu9/9hdDXv//c6ktfJApwpBWcAMPJe+P7/idL0mSoEAAD03UQzJblidnlvInK5YjFisvlagEKyslYpz0bESxHx26nC+xrlueaWyYl9BgAAAAAAAAAAAAAAAAAAAAAAAACgJU2TSAEAAIAzLSL3l+SXrWf5z0y9MXH0+sC55N9Tkb0i9NYPr3//9mK9vj3XmP+Pg/n1H2Tz3xzGFQwAAAAYCc/0Av92P73djwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfnr44M5SOw0y7t8+FxHTneLn43xzej4KEXHhn0nkD22XRMRYH+KPN/58qFP8pFGtg5Cd4o/3If7+3WPjx3T2LXSKf7EP8WGU3Wscf6522v9y8Vpz2nn/y0c8UX5e3Y9/cXD8G+uy/0/2GOOV+z8rdY1/N+KVfOfjTzt+0iX+6z3G/9pX9/a6LUt/FDHT8fcneSJWqb6xVart7l1Z21hcLa+WN+fn595eeGfhrYXZ0spapZz97RjjOx/5+aPj2n+hS/zpE9r/Ro/t/+/92w8+0MoWOsW/9HqH+L/6cbbG0/Fz2W/fJ7J8Y/lMO7/fyh/26k9/8+px7V/u0v6T/v+Xemz/5S9/6489rgoADEBtd299sVIpb5/ZTKOXfgqqIXMKM9/s6wemaZo29qkX+JwkTsPX0swM+8gEAAD02+OT/mHXBAAAAAAAAAAAAAAAAAAAAEbXIB4ndjTm/kEu6ccjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+uJ/AQAA///Vu9lo")
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1, 0x0, 0x6}, 0x18)
ppoll(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10)
syz_emit_ethernet(0x1f, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffff07000000000000000000001142"], 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r5}, 0x10)
rt_sigpending(0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x9, 0xc3, 0x0, 0x7fff8000}]})

118.543028ms ago: executing program 3 (id=5613):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r3, 0x0, 0xfffffffffffff001}, 0x18)
sendfile(r1, r0, 0x0, 0x207b)

95.588248ms ago: executing program 4 (id=5614):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x4190, 0xaea}, 0x4105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24000811}, 0x0)

52.816829ms ago: executing program 3 (id=5615):
r0 = socket$inet(0x2, 0x3, 0x8a)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000280)={0x4c, 0x5f, 0x6, 0x3, 0x7, "00da900eaf7919c635d4a15ac41e3100", 0x80000000, 0x7fe})
r2 = socket$netlink(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x16, 0x4)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x59be386d9135c8f, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x7ff7}, {0xfff3, 0xd}, {0xa, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r3 = dup(r1)
write$UHID_INPUT(r3, &(0x7f0000000300)={0xd, {"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", 0x1000}}, 0x1006)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x61000080)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001480)=@IORING_OP_UNLINKAT={0x24, 0xd, 0x0, r3, 0x0, &(0x7f0000001440)='./file0\x00'})
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
r7 = gettid()
process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000040)=ANY=[], 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={<r8=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@float={0x4, 0x0, 0x0, 0x10, 0xe}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000340)=""/10, 0x28, 0xa, 0x0, 0x4bb3}, 0x28)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f0000000580)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @alu={0x7, 0x0, 0x2, 0x2, 0x1, 0xfffffffffffffff8, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x4, 0x0, 0xa, 0x9, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f00000005c0)='GPL\x00', 0x5, 0x6, &(0x7f0000000640)=""/6, 0x41000, 0x4, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x5, 0x0, 0xe5f}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000700)=[r4, r4, r4, r4, r4, r4, r4, r4, r4], &(0x7f0000000780)=[{0x4, 0x2, 0x10, 0x9}, {0x5, 0x2, 0x0, 0x9}], 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3ade0b01aa493f91, 0x4, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000080)='syzkaller\x00', 0x10001, 0x5e, &(0x7f0000000180)=""/94, 0x40f00, 0x2, '\x00', r8, @fallback=0x1d, r9, 0x8, &(0x7f0000000540)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r10, 0x2, &(0x7f00000007c0)=[r4, r0, r4, r4, r4, r4, r6, r4], &(0x7f0000000900)=[{0x0, 0x5, 0x3, 0x9}, {0x2, 0x3, 0x3}], 0x10, 0x28}, 0x94)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x0, r8})
r11 = socket(0xa, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r12 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r12, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0xffff, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000280)=ANY=[], 0x28}}], 0x1, 0x2404c0c0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b00)=@o_path={&(0x7f0000000ac0)='./file0\x00', 0x0, 0x8, r11}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl(r11, 0x8936, &(0x7f0000000000))

0s ago: executing program 4 (id=5616):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r2}, 0x18)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00ffffffffffffff810000000c0000800800", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0)

kernel console output (not intermixed with test programs):

 no destination available
[  334.970531][T19060] chnl_net:caif_netlink_parms(): no params data found
[  335.110343][T19098] loop0: detected capacity change from 0 to 512
[  335.117438][T19098] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  335.131496][T19098] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  335.149209][T19098] EXT4-fs (loop0): 1 truncate cleaned up
[  335.155511][T19060] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.162653][T19060] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.170051][T19060] bridge_slave_0: entered allmulticast mode
[  335.176767][T19060] bridge_slave_0: entered promiscuous mode
[  335.183784][T19060] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.190967][T19060] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.198460][T19060] bridge_slave_1: entered allmulticast mode
[  335.205285][T19060] bridge_slave_1: entered promiscuous mode
[  335.215587][T19101] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5187'.
[  335.247260][T19103] FAULT_INJECTION: forcing a failure.
[  335.247260][T19103] name failslab, interval 1, probability 0, space 0, times 0
[  335.260026][T19103] CPU: 0 UID: 0 PID: 19103 Comm: syz.0.5188 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  335.260063][T19103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  335.260080][T19103] Call Trace:
[  335.260088][T19103]  <TASK>
[  335.260098][T19103]  __dump_stack+0x1d/0x30
[  335.260126][T19103]  dump_stack_lvl+0xe8/0x140
[  335.260229][T19103]  dump_stack+0x15/0x1b
[  335.260249][T19103]  should_fail_ex+0x265/0x280
[  335.260278][T19103]  should_failslab+0x8c/0xb0
[  335.260308][T19103]  kmem_cache_alloc_noprof+0x50/0x310
[  335.260360][T19103]  ? getname_flags+0x80/0x3b0
[  335.260394][T19103]  getname_flags+0x80/0x3b0
[  335.260430][T19103]  __x64_sys_lgetxattr+0xfd/0x140
[  335.260476][T19103]  x64_sys_call+0x2fa4/0x2ff0
[  335.260573][T19103]  do_syscall_64+0xd2/0x200
[  335.260636][T19103]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  335.260668][T19103]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  335.260706][T19103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.260777][T19103] RIP: 0033:0x7f535ee7eec9
[  335.260795][T19103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  335.260839][T19103] RSP: 002b:00007f535d8e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0
[  335.260863][T19103] RAX: ffffffffffffffda RBX: 00007f535f0d5fa0 RCX: 00007f535ee7eec9
[  335.260906][T19103] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000000
[  335.260918][T19103] RBP: 00007f535d8e7090 R08: 0000000000000000 R09: 0000000000000000
[  335.260930][T19103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  335.260942][T19103] R13: 00007f535f0d6038 R14: 00007f535f0d5fa0 R15: 00007ffd28c39208
[  335.261013][T19103]  </TASK>
[  335.269183][T19060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  335.456839][T19060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  335.498800][T19060] team0: Port device team_slave_0 added
[  335.505564][T19060] team0: Port device team_slave_1 added
[  335.550612][T19111] loop4: detected capacity change from 0 to 8192
[  335.637215][T19060] batman_adv: batadv0: Adding interface: batadv_slave_0
[  335.644201][T19060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  335.670255][T19060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  335.682182][T19060] batman_adv: batadv0: Adding interface: batadv_slave_1
[  335.689249][T19060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  335.715534][T19060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  335.788103][   T29] kauditd_printk_skb: 148 callbacks suppressed
[  335.788122][   T29] audit: type=1400 audit(1758594145.340:16141): avc:  denied  { create } for  pid=19123 comm="syz.3.5196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  335.842020][T19060] hsr_slave_0: entered promiscuous mode
[  335.848642][T19060] hsr_slave_1: entered promiscuous mode
[  335.854562][T19060] debugfs: 'hsr0' already exists in 'hsr'
[  335.860374][T19060] Cannot create hsr debugfs directory
[  335.895197][   T29] audit: type=1326 audit(1758594145.440:16142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19127 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f74156e5d67 code=0x7ffc0000
[  335.918175][   T29] audit: type=1326 audit(1758594145.440:16143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19127 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f741568af79 code=0x7ffc0000
[  335.941154][   T29] audit: type=1326 audit(1758594145.440:16144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19127 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f74156e5d67 code=0x7ffc0000
[  335.964193][   T29] audit: type=1326 audit(1758594145.440:16145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19127 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f741568af79 code=0x7ffc0000
[  335.966593][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  335.987260][   T29] audit: type=1326 audit(1758594145.440:16146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19127 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74156eeec9 code=0x7ffc0000
[  336.017057][   T29] audit: type=1326 audit(1758594145.440:16147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19127 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74156eeec9 code=0x7ffc0000
[  336.116196][   T29] audit: type=1400 audit(1758594145.650:16148): avc:  denied  { ioctl } for  pid=19123 comm="syz.3.5196" path="socket:[64619]" dev="sockfs" ino=64619 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  336.141187][   T29] audit: type=1326 audit(1758594145.650:16149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19123 comm="syz.3.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf027deec9 code=0x7ffc0000
[  336.165052][   T29] audit: type=1326 audit(1758594145.650:16150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19123 comm="syz.3.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf027deec9 code=0x7ffc0000
[  336.451472][T19060] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  336.484437][T19060] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  336.510940][T19060] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  336.532324][T19060] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  336.710918][T19060] 8021q: adding VLAN 0 to HW filter on device bond0
[  336.728064][T19060] 8021q: adding VLAN 0 to HW filter on device team0
[  336.757655][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.764778][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.784025][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.791158][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  336.804410][T19132] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  336.810658][T19060] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  336.821436][T19060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  336.894969][T19060] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.924966][T19158] loop0: detected capacity change from 0 to 128
[  336.977808][T19163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5205'.
[  336.992406][T19163] bond_slave_0: entered promiscuous mode
[  336.996596][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  336.998126][T19163] bond_slave_1: entered promiscuous mode
[  337.025389][T19163] macvtap4: entered promiscuous mode
[  337.030825][T19163] bond0: entered promiscuous mode
[  337.036115][T19163] bridge_slave_1: entered promiscuous mode
[  337.040636][T19166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5205'.
[  337.042431][T19163] macvtap4: entered allmulticast mode
[  337.056388][T19163] bond0: entered allmulticast mode
[  337.061652][T19163] bond_slave_0: entered allmulticast mode
[  337.067442][T19163] bond_slave_1: entered allmulticast mode
[  337.073181][T19163] bridge_slave_1: entered allmulticast mode
[  337.079760][T19167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5202'.
[  337.080400][T19163] 8021q: adding VLAN 0 to HW filter on device macvtap4
[  337.102746][T19166] bond0: left allmulticast mode
[  337.107723][T19166] bond_slave_0: left allmulticast mode
[  337.113249][T19166] bond_slave_1: left allmulticast mode
[  337.118746][T19166] bridge_slave_1: left allmulticast mode
[  337.124486][T19166] bond0: left promiscuous mode
[  337.129444][T19166] bridge_slave_1: left promiscuous mode
[  337.135212][T19166] bond_slave_0: left promiscuous mode
[  337.140621][T19166] bond_slave_1: left promiscuous mode
[  337.187147][T19169] hub 6-0:1.0: USB hub found
[  337.196878][T19169] hub 6-0:1.0: 8 ports detected
[  337.417565][T19060] veth0_vlan: entered promiscuous mode
[  337.426719][T19060] veth1_vlan: entered promiscuous mode
[  337.457800][T19060] veth0_macvtap: entered promiscuous mode
[  337.465637][T19060] veth1_macvtap: entered promiscuous mode
[  337.485118][T19060] batman_adv: batadv0: Interface activated: batadv_slave_0
[  337.509693][T19184] loop3: detected capacity change from 0 to 8192
[  337.525027][T19060] batman_adv: batadv0: Interface activated: batadv_slave_1
[  337.771672][ T3432] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  337.825997][ T3432] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  337.882210][ T3432] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  337.918734][ T3432] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  337.965365][T19194] loop0: detected capacity change from 0 to 512
[  337.989503][T19194] EXT4-fs: Ignoring removed nobh option
[  338.026568][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  338.051669][T19194] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  338.206590][T19194] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.5210: corrupted inode contents
[  338.226754][T19194] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.5210: mark_inode_dirty error
[  338.295723][T19194] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.5210: corrupted inode contents
[  338.337783][T19194] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.5210: mark_inode_dirty error
[  338.361685][T19194] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.5210: Failed to acquire dquot type 0
[  338.419056][T19194] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5210: corrupted inode contents
[  338.446952][T19194] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.5210: mark_inode_dirty error
[  338.477101][T19194] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5210: corrupted inode contents
[  338.495797][T19194] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.5210: mark_inode_dirty error
[  338.510114][T19194] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5210: corrupted inode contents
[  338.528325][T19194] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  338.538803][T19223] syz0: rxe_newlink: already configured on bond_slave_0
[  338.546352][T19194] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5210: corrupted inode contents
[  338.564037][T19194] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.5210: mark_inode_dirty error
[  338.579821][T19194] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  338.593384][T19194] EXT4-fs (loop0): 1 truncate cleaned up
[  338.612377][T19194] ext4 filesystem being mounted at /449/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  338.818442][T19240] pim6reg: entered allmulticast mode
[  338.890835][T19240] pim6reg: left allmulticast mode
[  338.921014][T19248] pim6reg: entered allmulticast mode
[  338.927244][T19248] pim6reg: left allmulticast mode
[  338.980153][T19251] pim6reg: entered allmulticast mode
[  339.005121][T19251] pim6reg: left allmulticast mode
[  339.068727][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  339.162728][T19257] loop4: detected capacity change from 0 to 512
[  339.185040][T19262] syz0: rxe_newlink: already configured on bond_slave_0
[  339.234201][T19257] ext4 filesystem being mounted at /381/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  339.309641][T19268] hub 6-0:1.0: USB hub found
[  339.314382][T19268] hub 6-0:1.0: 8 ports detected
[  339.357746][T19276] loop4: detected capacity change from 0 to 128
[  339.370918][T19276] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5232'.
[  339.463350][T19266] loop1: detected capacity change from 0 to 8192
[  339.687779][T19280] loop4: detected capacity change from 0 to 8192
[  340.116564][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  340.524187][T19293] loop4: detected capacity change from 0 to 512
[  340.559110][T19293] EXT4-fs: Ignoring removed nobh option
[  340.582596][T19293] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  340.654197][T19293] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.5235: corrupted inode contents
[  340.705876][T19293] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.5235: mark_inode_dirty error
[  340.758670][T19293] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.5235: corrupted inode contents
[  340.773204][T19300] loop3: detected capacity change from 0 to 512
[  340.783096][T19300] EXT4-fs: Ignoring removed nobh option
[  340.797432][T19300] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  340.816918][T19293] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.5235: mark_inode_dirty error
[  340.843119][   T29] kauditd_printk_skb: 82 callbacks suppressed
[  340.843215][   T29] audit: type=1400 audit(1758594150.390:16231): avc:  denied  { read } for  pid=19301 comm="syz.0.5238" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  340.845190][T19293] Quota error (device loop4): write_blk: dquota write failed
[  340.849413][   T29] audit: type=1400 audit(1758594150.390:16232): avc:  denied  { open } for  pid=19301 comm="syz.0.5238" path="/dev/usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  340.897589][   T29] audit: type=1400 audit(1758594150.430:16233): avc:  denied  { bind } for  pid=19301 comm="syz.0.5238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  340.912881][T19293] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  340.939724][T19303] netlink: 'syz.0.5238': attribute type 10 has an invalid length.
[  340.985166][T19300] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.5237: corrupted inode contents
[  341.025487][T19306] loop1: detected capacity change from 0 to 512
[  341.041944][T19300] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.5237: mark_inode_dirty error
[  341.054791][T19308] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  341.074773][T19293] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5235: Failed to acquire dquot type 0
[  341.092537][T19306] EXT4-fs: Ignoring removed nobh option
[  341.124786][T19300] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.5237: corrupted inode contents
[  341.142299][T19306] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  341.152831][T19293] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5235: corrupted inode contents
[  341.156571][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  341.175083][T19300] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.5237: mark_inode_dirty error
[  341.184163][   T29] audit: type=1326 audit(1758594150.720:16234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19309 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535ee7eec9 code=0x7ffc0000
[  341.212984][T19293] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.5235: mark_inode_dirty error
[  341.227281][T19310] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  341.233819][T19310] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  341.241532][T19310] vhci_hcd vhci_hcd.0: Device attached
[  341.252829][T19300] Quota error (device loop3): write_blk: dquota write failed
[  341.258286][T19293] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5235: corrupted inode contents
[  341.274027][T19300] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  341.274237][T19300] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.5237: Failed to acquire dquot type 0
[  341.274766][   T29] audit: type=1326 audit(1758594150.760:16235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19309 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535ee7eec9 code=0x7ffc0000
[  341.274830][   T29] audit: type=1326 audit(1758594150.760:16236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19309 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f535ee80e1a code=0x7ffc0000
[  341.294284][T19318] loop5: detected capacity change from 0 to 128
[  341.329176][T19293] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.5235: mark_inode_dirty error
[  341.357778][T19300] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.5237: corrupted inode contents
[  341.379215][T19318] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5243'.
[  341.389338][T19306] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.5239: corrupted inode contents
[  341.403528][T19306] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.5239: mark_inode_dirty error
[  341.416623][T19300] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.5237: mark_inode_dirty error
[  341.432969][T19293] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5235: corrupted inode contents
[  341.441272][T19306] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.5239: corrupted inode contents
[  341.448097][T19300] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.5237: corrupted inode contents
[  341.471906][T19300] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.5237: mark_inode_dirty error
[  341.483885][T19293] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  341.486417][T19300] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.5237: corrupted inode contents
[  341.493733][T19306] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.5239: mark_inode_dirty error
[  341.518636][T19300] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  341.520063][T19300] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.5237: corrupted inode contents
[  341.541058][ T3385] usb 1-1: new low-speed USB device number 2 using vhci_hcd
[  341.549845][T19311] vhci_hcd: connection reset by peer
[  341.559226][ T1569] vhci_hcd: stop threads
[  341.561315][T19321] loop5: detected capacity change from 0 to 512
[  341.563538][ T1569] vhci_hcd: release socket
[  341.563557][ T1569] vhci_hcd: disconnect device
[  341.565215][T19300] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.5237: mark_inode_dirty error
[  341.571626][T19293] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5235: corrupted inode contents
[  341.573511][T19293] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.5235: mark_inode_dirty error
[  341.587550][T19306] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.5239: Failed to acquire dquot type 0
[  341.605648][T19293] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  341.610390][T19300] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  341.628130][T19293] EXT4-fs (loop4): 1 truncate cleaned up
[  341.641354][T19306] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.5239: corrupted inode contents
[  341.653231][T19321] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  341.674925][T19293] ext4 filesystem being mounted at /385/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  341.682007][T19306] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.5239: mark_inode_dirty error
[  341.709618][T19306] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.5239: corrupted inode contents
[  341.710929][T19300] EXT4-fs (loop3): 1 truncate cleaned up
[  341.749452][T19306] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.5239: mark_inode_dirty error
[  341.760367][T19300] ext4 filesystem being mounted at /447/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  341.777987][T19306] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.5239: corrupted inode contents
[  341.795000][T19306] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  341.809360][T19306] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.5239: corrupted inode contents
[  341.825844][T19306] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.5239: mark_inode_dirty error
[  341.841226][T19306] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  341.856074][T19306] EXT4-fs (loop1): 1 truncate cleaned up
[  341.875095][T19306] ext4 filesystem being mounted at /416/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  341.993763][T19341] netlink: 'syz.4.5246': attribute type 10 has an invalid length.
[  342.128556][T19349] netlink: 'syz.0.5250': attribute type 10 has an invalid length.
[  342.179516][T19351] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  342.186581][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  342.231524][T19359] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  342.340916][T19376] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5260'.
[  342.379296][T19381] netlink: 'syz.4.5261': attribute type 10 has an invalid length.
[  342.450169][T19392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5258'.
[  342.564292][T19404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5267'.
[  342.578567][T19404] bond_slave_0: entered promiscuous mode
[  342.584267][T19404] bond_slave_1: entered promiscuous mode
[  342.603758][T19404] macvtap5: entered promiscuous mode
[  342.609168][T19404] bond0: entered promiscuous mode
[  342.614500][T19404] bridge_slave_1: entered promiscuous mode
[  342.620704][T19404] macvtap5: entered allmulticast mode
[  342.626093][T19404] bond0: entered allmulticast mode
[  342.631387][T19404] bond_slave_0: entered allmulticast mode
[  342.637153][T19404] bond_slave_1: entered allmulticast mode
[  342.642886][T19404] bridge_slave_1: entered allmulticast mode
[  342.655394][T19406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5268'.
[  342.659344][T19404] 8021q: adding VLAN 0 to HW filter on device macvtap5
[  342.671663][T19407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5267'.
[  342.683930][T19406] vxcan1: entered promiscuous mode
[  342.689292][T19406] vxcan1: entered allmulticast mode
[  342.697909][T19406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5268'.
[  342.729575][T19407] bond0: left allmulticast mode
[  342.734520][T19407] bond_slave_0: left allmulticast mode
[  342.740264][T19407] bond_slave_1: left allmulticast mode
[  342.745765][T19407] bridge_slave_1: left allmulticast mode
[  342.751661][T19407] bond0: left promiscuous mode
[  342.756638][T19407] bridge_slave_1: left promiscuous mode
[  342.762380][T19407] bond_slave_0: left promiscuous mode
[  342.767806][T19407] bond_slave_1: left promiscuous mode
[  342.820330][T19401] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  342.857290][T19424] netlink: 'syz.3.5272': attribute type 10 has an invalid length.
[  343.178828][T19453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5280'.
[  343.236564][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  343.252746][T19459] loop0: detected capacity change from 0 to 1024
[  343.253204][T19460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5282'.
[  343.270523][T19459] EXT4-fs: Ignoring removed bh option
[  343.276233][T19459] EXT4-fs: Ignoring removed orlov option
[  343.278823][T19460] bond_slave_0: entered promiscuous mode
[  343.282024][T19459] EXT4-fs: Ignoring removed nomblk_io_submit option
[  343.287623][T19460] bond_slave_1: entered promiscuous mode
[  343.311723][T19460] macvtap7: entered promiscuous mode
[  343.317208][T19460] bond0: entered promiscuous mode
[  343.322582][T19460] bridge_slave_1: entered promiscuous mode
[  343.328769][T19460] macvtap7: entered allmulticast mode
[  343.334159][T19460] bond0: entered allmulticast mode
[  343.339361][T19460] bond_slave_0: entered allmulticast mode
[  343.345091][T19460] bond_slave_1: entered allmulticast mode
[  343.350880][T19460] bridge_slave_1: entered allmulticast mode
[  343.358278][T19460] 8021q: adding VLAN 0 to HW filter on device macvtap7
[  343.370617][T19459] EXT4-fs mount: 20 callbacks suppressed
[  343.370637][T19459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  343.391245][T19462] bond0: left allmulticast mode
[  343.396145][T19462] bond_slave_0: left allmulticast mode
[  343.401683][T19462] bond_slave_1: left allmulticast mode
[  343.407218][T19462] bridge_slave_1: left allmulticast mode
[  343.412914][T19462] bond0: left promiscuous mode
[  343.417926][T19462] bridge_slave_1: left promiscuous mode
[  343.423739][T19462] bond_slave_0: left promiscuous mode
[  343.429222][T19462] bond_slave_1: left promiscuous mode
[  343.552504][T12708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.753358][T19479] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  343.775758][T19481] hub 6-0:1.0: USB hub found
[  343.780555][T19481] hub 6-0:1.0: 8 ports detected
[  344.276553][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  344.389148][T19517] netlink: 'syz.3.5291': attribute type 2 has an invalid length.
[  344.396947][T19517] __nla_validate_parse: 3 callbacks suppressed
[  344.396962][T19517] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.5291'.
[  344.558375][T19516] loop4: detected capacity change from 0 to 512
[  344.576189][T19516] EXT4-fs: Ignoring removed nobh option
[  344.598551][T19516] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  344.731526][T19516] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.5292: corrupted inode contents
[  344.794186][T19516] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.5292: mark_inode_dirty error
[  344.828790][T19516] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.5292: corrupted inode contents
[  344.860283][T19516] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.5292: mark_inode_dirty error
[  344.878887][T19516] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5292: Failed to acquire dquot type 0
[  344.904005][T19516] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5292: corrupted inode contents
[  344.919920][T19516] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.5292: mark_inode_dirty error
[  344.932834][T19550] netlink: 'syz.5.5296': attribute type 10 has an invalid length.
[  344.941080][ T3384] IPVS: starting estimator thread 0...
[  344.950042][T19516] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5292: corrupted inode contents
[  344.983587][T19516] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.5292: mark_inode_dirty error
[  345.001995][T19550] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.023006][T19550] bridge_slave_1: left allmulticast mode
[  345.028516][T19516] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5292: corrupted inode contents
[  345.029074][T19550] bridge_slave_1: left promiscuous mode
[  345.029189][T19550] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.057978][T19552] IPVS: using max 2304 ests per chain, 115200 per kthread
[  345.067842][T19516] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  345.078325][T19550] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  345.093852][T19516] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5292: corrupted inode contents
[  345.111843][T19516] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.5292: mark_inode_dirty error
[  345.125943][T19516] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  345.142805][T19570] loop0: detected capacity change from 0 to 512
[  345.144825][T19516] EXT4-fs (loop4): 1 truncate cleaned up
[  345.149950][T19570] EXT4-fs: Ignoring removed nomblk_io_submit option
[  345.164280][T19570] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  345.172277][T19570] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002]
[  345.178668][T19516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  345.188655][T19570] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80)
[  345.202741][T19570] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features
[  345.212175][T19516] ext4 filesystem being mounted at /400/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  345.212224][T19570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  345.270692][T19570] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19570 comm=syz.0.5301
[  345.306561][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  345.314000][T12708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.375703][T12909] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.427438][T19596] netlink: 'syz.4.5304': attribute type 2 has an invalid length.
[  345.435427][T19596] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.5304'.
[  345.614339][T19606] loop0: detected capacity change from 0 to 8192
[  345.741666][T19618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5307'.
[  346.052968][T19634] loop4: detected capacity change from 0 to 512
[  346.070672][T19629] loop5: detected capacity change from 0 to 8192
[  346.079859][T19634] EXT4-fs: Ignoring removed nomblk_io_submit option
[  346.106174][T19634] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  346.114215][T19634] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002]
[  346.210736][T19634] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80)
[  346.220303][T19634] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features
[  346.346577][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  346.380595][T19634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  346.452886][T19634] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19634 comm=syz.4.5314
[  346.475993][   T29] kauditd_printk_skb: 203 callbacks suppressed
[  346.476021][   T29] audit: type=1107 audit(1758594156.010:16436): pid=19633 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  346.527255][T12909] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.688889][ T3385] usb 1-1: enqueue for inactive port 0
[  346.694765][ T3385] usb 1-1: enqueue for inactive port 0
[  346.703506][T19653] netlink: 'syz.0.5318': attribute type 10 has an invalid length.
[  346.909035][ T3385] vhci_hcd: vhci_device speed not set
[  346.983886][T19674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5322'.
[  347.149188][T19674] bond_slave_0: entered promiscuous mode
[  347.154903][T19674] bond_slave_1: entered promiscuous mode
[  347.202447][T19676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5322'.
[  347.232166][   T29] audit: type=1400 audit(1758594156.780:16437): avc:  denied  { create } for  pid=19677 comm="syz.5.5323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  347.263931][T19674] macvtap8: entered promiscuous mode
[  347.269488][T19674] bond0: entered promiscuous mode
[  347.274879][T19674] bridge_slave_1: entered promiscuous mode
[  347.280990][T19674] macvtap8: entered allmulticast mode
[  347.286380][T19674] bond0: entered allmulticast mode
[  347.291526][T19674] bond_slave_0: entered allmulticast mode
[  347.297322][T19674] bond_slave_1: entered allmulticast mode
[  347.303128][T19674] bridge_slave_1: entered allmulticast mode
[  347.316107][T19678] loop5: detected capacity change from 0 to 164
[  347.324583][T19678] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  347.339968][T19678] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  347.350169][   T29] audit: type=1400 audit(1758594156.880:16438): avc:  denied  { mount } for  pid=19677 comm="syz.5.5323" name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  347.379312][T19674] 8021q: adding VLAN 0 to HW filter on device macvtap8
[  347.396573][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  347.407982][T19678] team0 (unregistering): Port device team_slave_0 removed
[  347.418813][T19678] team0 (unregistering): Port device team_slave_1 removed
[  347.434984][T19676] bond0: left allmulticast mode
[  347.439969][T19676] bond_slave_0: left allmulticast mode
[  347.445456][T19676] bond_slave_1: left allmulticast mode
[  347.450966][T19676] bridge_slave_1: left allmulticast mode
[  347.456666][T19676] bond0: left promiscuous mode
[  347.461536][T19676] bridge_slave_1: left promiscuous mode
[  347.467384][T19676] bond_slave_0: left promiscuous mode
[  347.472826][T19676] bond_slave_1: left promiscuous mode
[  347.518464][   T29] audit: type=1400 audit(1758594157.070:16439): avc:  denied  { append } for  pid=19680 comm="syz.0.5324" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  347.688308][T19679] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5323'.
[  347.720061][   T29] audit: type=1400 audit(1758594157.100:16440): avc:  denied  { create } for  pid=19680 comm="syz.0.5324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  347.739859][   T29] audit: type=1400 audit(1758594157.100:16441): avc:  denied  { bind } for  pid=19680 comm="syz.0.5324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  347.759344][   T29] audit: type=1400 audit(1758594157.100:16442): avc:  denied  { name_bind } for  pid=19680 comm="syz.0.5324" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  347.780351][   T29] audit: type=1400 audit(1758594157.100:16443): avc:  denied  { node_bind } for  pid=19680 comm="syz.0.5324" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  347.848251][T19685] loop4: detected capacity change from 0 to 128
[  347.892471][T19685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5327'.
[  348.124821][   T29] audit: type=1326 audit(1758594157.410:16444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19686 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd639deeec9 code=0x7ffc0000
[  348.148034][   T29] audit: type=1326 audit(1758594157.410:16445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19686 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd639deeec9 code=0x7ffc0000
[  348.198520][T19707] loop1: detected capacity change from 0 to 512
[  348.257047][T19707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  348.308103][T19707] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  348.355860][T19707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.426889][T19726] loop4: detected capacity change from 0 to 512
[  348.436602][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  348.518457][T19726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  348.555510][T19726] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  348.881150][T19726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.917011][T19761] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  348.923578][T19761] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  348.931195][T19761] vhci_hcd vhci_hcd.0: Device attached
[  349.073875][T19762] vhci_hcd: connection closed
[  349.074058][ T3432] vhci_hcd: stop threads
[  349.083043][ T3432] vhci_hcd: release socket
[  349.087505][ T3432] vhci_hcd: disconnect device
[  349.116653][ T3413] vhci_hcd: vhci_device speed not set
[  349.376979][T19801] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  349.468466][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  349.682666][T19827] FAULT_INJECTION: forcing a failure.
[  349.682666][T19827] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  349.695928][T19827] CPU: 0 UID: 0 PID: 19827 Comm: syz.5.5366 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  349.695962][T19827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  349.695978][T19827] Call Trace:
[  349.695987][T19827]  <TASK>
[  349.695997][T19827]  __dump_stack+0x1d/0x30
[  349.696103][T19827]  dump_stack_lvl+0xe8/0x140
[  349.696139][T19821] hub 6-0:1.0: USB hub found
[  349.696163][T19827]  dump_stack+0x15/0x1b
[  349.696212][T19827]  should_fail_ex+0x265/0x280
[  349.696247][T19827]  should_fail+0xb/0x20
[  349.696279][T19827]  should_fail_usercopy+0x1a/0x20
[  349.696319][T19827]  strncpy_from_user+0x25/0x230
[  349.696530][T19827]  ? kmem_cache_alloc_noprof+0x186/0x310
[  349.696570][T19827]  ? getname_flags+0x80/0x3b0
[  349.696613][T19827]  getname_flags+0xae/0x3b0
[  349.696653][T19827]  do_sys_openat2+0x60/0x110
[  349.696736][T19827]  __x64_sys_openat+0xf2/0x120
[  349.696781][T19827]  x64_sys_call+0x2e9c/0x2ff0
[  349.696812][T19827]  do_syscall_64+0xd2/0x200
[  349.696884][T19827]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  349.696918][T19827]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  349.696961][T19827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.697071][T19827] RIP: 0033:0x7fd639deeec9
[  349.697092][T19827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  349.697118][T19827] RSP: 002b:00007fd638857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  349.697145][T19827] RAX: ffffffffffffffda RBX: 00007fd63a045fa0 RCX: 00007fd639deeec9
[  349.697163][T19827] RDX: 00000000000c6e02 RSI: 00002000000002c0 RDI: ffffffffffffff9c
[  349.697202][T19827] RBP: 00007fd638857090 R08: 0000000000000000 R09: 0000000000000000
[  349.697278][T19827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  349.697294][T19827] R13: 00007fd63a046038 R14: 00007fd63a045fa0 R15: 00007ffd3beb2d88
[  349.697321][T19827]  </TASK>
[  350.081800][T19821] hub 6-0:1.0: 8 ports detected
[  350.380655][T19838] netlink: 'syz.0.5370': attribute type 2 has an invalid length.
[  350.388475][T19838] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.5370'.
[  350.508057][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  350.642652][T19849] loop0: detected capacity change from 0 to 512
[  350.666045][T19849] EXT4-fs: Ignoring removed nobh option
[  350.710048][T19849] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  350.845903][T19849] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.5371: corrupted inode contents
[  350.942651][T19849] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.5371: mark_inode_dirty error
[  350.997436][T19861] loop5: detected capacity change from 0 to 512
[  351.016490][T19849] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.5371: corrupted inode contents
[  351.022325][T19861] EXT4-fs: Ignoring removed nobh option
[  351.064938][T19861] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  351.065101][T19849] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.5371: mark_inode_dirty error
[  351.099812][T19849] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.5371: Failed to acquire dquot type 0
[  351.135875][T19861] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.5372: corrupted inode contents
[  351.207116][T19849] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5371: corrupted inode contents
[  351.255186][T19861] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.5372: mark_inode_dirty error
[  351.282568][T19849] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.5371: mark_inode_dirty error
[  351.317517][T19861] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.5372: corrupted inode contents
[  351.355020][T19849] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5371: corrupted inode contents
[  351.375258][T19861] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.5372: mark_inode_dirty error
[  351.417392][T19849] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.5371: mark_inode_dirty error
[  351.452504][T19861] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.5372: Failed to acquire dquot type 0
[  351.467391][T19849] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5371: corrupted inode contents
[  351.504568][T19849] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  351.521065][T19861] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.5372: corrupted inode contents
[  351.547663][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  351.555194][T19849] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5371: corrupted inode contents
[  351.567958][T19861] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.5372: mark_inode_dirty error
[  351.583678][T19849] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.5371: mark_inode_dirty error
[  351.590057][T19861] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.5372: corrupted inode contents
[  351.614333][T19861] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.5372: mark_inode_dirty error
[  351.615320][T19849] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  351.644284][T19861] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.5372: corrupted inode contents
[  351.649572][T19849] EXT4-fs (loop0): 1 truncate cleaned up
[  351.657002][   T29] kauditd_printk_skb: 118 callbacks suppressed
[  351.657019][   T29] audit: type=1400 audit(1758594161.190:16560): avc:  denied  { create } for  pid=19872 comm="syz.4.5377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  351.658602][T19873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19873 comm=syz.4.5377
[  351.675116][T19849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  351.717185][T19874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5377'.
[  351.725780][T19849] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  351.727643][T19861] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  351.741871][T19861] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.5372: corrupted inode contents
[  351.776465][T19873] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5377'.
[  351.787882][   T29] audit: type=1400 audit(1758594161.320:16561): avc:  denied  { write } for  pid=19872 comm="syz.4.5377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  351.808284][   T29] audit: type=1400 audit(1758594161.320:16562): avc:  denied  { nlmsg_write } for  pid=19872 comm="syz.4.5377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  351.831854][T19861] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.5372: mark_inode_dirty error
[  351.859242][T19861] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  351.920421][T19888] loop3: detected capacity change from 0 to 512
[  351.941145][T19889] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  351.949927][T19861] EXT4-fs (loop5): 1 truncate cleaned up
[  351.966075][T19861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  351.987506][T19888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  352.002816][T19888] ext4 filesystem being mounted at /470/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  352.017030][T19861] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  352.017184][T19886] loop4: detected capacity change from 0 to 512
[  352.035822][T19886] EXT4-fs: Ignoring removed nobh option
[  352.049719][T19886] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  352.062635][T19888] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.102539][T19886] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.5381: corrupted inode contents
[  352.120249][T19886] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.5381: mark_inode_dirty error
[  352.153300][T12708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.170613][T19886] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.5381: corrupted inode contents
[  352.191100][T19886] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.5381: mark_inode_dirty error
[  352.212531][T19911] pim6reg: entered allmulticast mode
[  352.221366][T19886] Quota error (device loop4): write_blk: dquota write failed
[  352.235425][T19913] netlink: 'syz.0.5388': attribute type 2 has an invalid length.
[  352.243239][T19913] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.5388'.
[  352.254975][T19911] pim6reg: left allmulticast mode
[  352.260336][T19908] loop3: detected capacity change from 0 to 8192
[  352.267819][T19886] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  352.278941][T19886] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5381: Failed to acquire dquot type 0
[  352.332877][T19060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.345841][T19886] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5381: corrupted inode contents
[  352.380966][T19886] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.5381: mark_inode_dirty error
[  352.399360][T19886] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5381: corrupted inode contents
[  352.416601][   T29] audit: type=1326 audit(1758594161.960:16563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19925 comm="syz.5.5392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd639deeec9 code=0x7ffc0000
[  352.444085][T19886] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.5381: mark_inode_dirty error
[  352.456673][   T29] audit: type=1326 audit(1758594161.960:16564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19925 comm="syz.5.5392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd639deeec9 code=0x7ffc0000
[  352.480343][   T29] audit: type=1326 audit(1758594161.970:16565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19925 comm="syz.5.5392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd639deeec9 code=0x7ffc0000
[  352.504012][   T29] audit: type=1326 audit(1758594161.970:16566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19925 comm="syz.5.5392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd639deeec9 code=0x7ffc0000
[  352.527692][   T29] audit: type=1326 audit(1758594161.970:16567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19925 comm="syz.5.5392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd639deeec9 code=0x7ffc0000
[  352.563553][T19930] netlink: 'syz.1.5395': attribute type 10 has an invalid length.
[  352.590458][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  352.684728][T19886] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5381: corrupted inode contents
[  352.700549][T19886] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  352.730488][T19886] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5381: corrupted inode contents
[  352.765236][T19886] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.5381: mark_inode_dirty error
[  352.793968][T19886] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  352.812173][T19886] EXT4-fs (loop4): 1 truncate cleaned up
[  352.821047][T19937] loop0: detected capacity change from 0 to 512
[  352.836875][T19886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  352.852078][T19886] ext4 filesystem being mounted at /415/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  352.869461][T19937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  352.885780][T19937] ext4 filesystem being mounted at /490/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  352.897391][T19937] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.113084][T12909] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.195376][T19961] loop3: detected capacity change from 0 to 8192
[  353.269701][T19970] netlink: 'syz.1.5401': attribute type 11 has an invalid length.
[  353.337127][T19978] pim6reg: entered allmulticast mode
[  353.347476][T19978] pim6reg: left allmulticast mode
[  353.398902][T19972] loop0: detected capacity change from 0 to 512
[  353.463917][T19972] EXT4-fs: Ignoring removed nobh option
[  353.484789][T19972] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  353.574339][T19972] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.5402: corrupted inode contents
[  353.619069][T19972] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.5402: mark_inode_dirty error
[  353.632967][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  353.643202][T19986] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  353.671292][T19972] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.5402: corrupted inode contents
[  353.687366][T19972] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.5402: mark_inode_dirty error
[  353.709501][T19972] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.5402: Failed to acquire dquot type 0
[  353.740163][T19995] loop1: detected capacity change from 0 to 512
[  353.750529][T19972] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5402: corrupted inode contents
[  353.763627][T19972] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.5402: mark_inode_dirty error
[  353.777638][T19972] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5402: corrupted inode contents
[  353.779302][T19995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  353.779419][T19995] ext4 filesystem being mounted at /456/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  353.780111][T19995] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.828849][T19972] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.5402: mark_inode_dirty error
[  353.876293][T19972] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5402: corrupted inode contents
[  353.933831][T19999] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  353.942958][T19972] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  353.968228][T19972] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5402: corrupted inode contents
[  354.032436][T20007] loop1: detected capacity change from 0 to 512
[  354.042778][T20007] EXT4-fs: Ignoring removed nomblk_io_submit option
[  354.050478][T20005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5413'.
[  354.050753][T19972] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.5402: mark_inode_dirty error
[  354.086816][T20005] bond_slave_0: entered promiscuous mode
[  354.092527][T20005] bond_slave_1: entered promiscuous mode
[  354.099710][T19972] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  354.099790][T20007] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  354.099817][T20007] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002]
[  354.099905][T20007] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80)
[  354.124673][T19972] EXT4-fs (loop0): 1 truncate cleaned up
[  354.134079][T20007] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features
[  354.144126][T20005] macvtap9: entered promiscuous mode
[  354.153189][T20011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5413'.
[  354.155781][T20005] bond0: entered promiscuous mode
[  354.169914][T20005] bridge_slave_1: entered promiscuous mode
[  354.170931][T20007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  354.175934][T20005] macvtap9: entered allmulticast mode
[  354.193118][T20005] bond0: entered allmulticast mode
[  354.198253][T20005] bond_slave_0: entered allmulticast mode
[  354.204012][T20005] bond_slave_1: entered allmulticast mode
[  354.209827][T20005] bridge_slave_1: entered allmulticast mode
[  354.211754][T19972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  354.216983][T20005] 8021q: adding VLAN 0 to HW filter on device macvtap9
[  354.237969][T19972] ext4 filesystem being mounted at /492/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  354.250754][T20011] bond0: left allmulticast mode
[  354.255736][T20011] bond_slave_0: left allmulticast mode
[  354.261312][T20011] bond_slave_1: left allmulticast mode
[  354.266941][T20011] bridge_slave_1: left allmulticast mode
[  354.272620][T20011] bond0: left promiscuous mode
[  354.277669][T20011] bridge_slave_1: left promiscuous mode
[  354.283462][T20011] bond_slave_0: left promiscuous mode
[  354.288881][T20011] bond_slave_1: left promiscuous mode
[  354.304381][T20012] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20012 comm=syz.1.5414
[  354.424622][T12319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.494278][T20025] pim6reg: entered allmulticast mode
[  354.511718][T20025] pim6reg: left allmulticast mode
[  354.548188][T12708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.610899][T20055] pim6reg: entered allmulticast mode
[  354.622785][T20055] pim6reg: left allmulticast mode
[  354.667099][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  355.379061][T20073] loop5: detected capacity change from 0 to 512
[  355.392650][T20073] EXT4-fs: Ignoring removed nomblk_io_submit option
[  355.420093][T20073] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  355.428201][T20073] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002]
[  355.463733][T20073] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80)
[  355.473861][T20073] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features
[  355.483431][T20073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  355.532812][T20078] loop3: detected capacity change from 0 to 512
[  355.542849][T20078] EXT4-fs: Ignoring removed nobh option
[  355.566891][T20078] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  355.600880][T20084] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20084 comm=syz.5.5427
[  355.653559][T20078] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.5429: corrupted inode contents
[  355.689836][T20078] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.5429: mark_inode_dirty error
[  355.708649][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  355.735115][T19060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.759142][T20096] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  355.771514][T20078] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.5429: corrupted inode contents
[  355.776687][T20097] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  355.792567][T20078] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.5429: mark_inode_dirty error
[  355.806094][T20091] loop1: detected capacity change from 0 to 512
[  355.814202][T20078] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.5429: Failed to acquire dquot type 0
[  355.816688][T20097] vhci_hcd: invalid port number 253
[  355.831470][T20097] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub
[  355.835193][T20078] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.5429: corrupted inode contents
[  355.857434][T20078] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.5429: mark_inode_dirty error
[  355.866577][T20091] EXT4-fs: Ignoring removed nobh option
[  355.874306][T20078] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.5429: corrupted inode contents
[  355.877986][T20093] netlink: 'syz.0.5435': attribute type 10 has an invalid length.
[  355.893547][T20078] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.5429: mark_inode_dirty error
[  355.913870][T20078] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.5429: corrupted inode contents
[  355.932580][T20078] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  355.945719][T20078] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.5429: corrupted inode contents
[  355.946351][T20091] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  355.969630][T20097] loop4: detected capacity change from 0 to 512
[  355.969957][T20099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5438'.
[  355.986897][T20097] EXT4-fs (loop4): orphan cleanup on readonly fs
[  355.995514][T20099] bond_slave_0: entered promiscuous mode
[  355.996343][T20097] EXT4-fs error (device loop4): ext4_quota_enable:7128: comm syz.4.5436: inode #218103808: comm syz.4.5436: iget: illegal inode #
[  356.001210][T20099] bond_slave_1: entered promiscuous mode
[  356.018676][T20078] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.5429: mark_inode_dirty error
[  356.020339][T20099] bridge_slave_1: entered promiscuous mode
[  356.033938][T20097] EXT4-fs error (device loop4): ext4_quota_enable:7131: comm syz.4.5436: Bad quota inode: 218103808, type: 2
[  356.047099][T20104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5438'.
[  356.052860][T20099] macvtap1: entered promiscuous mode
[  356.065302][T20099] bond0: entered promiscuous mode
[  356.070879][T20099] macvtap1: entered allmulticast mode
[  356.076290][T20099] bond0: entered allmulticast mode
[  356.081460][T20099] bond_slave_0: entered allmulticast mode
[  356.087286][T20099] bond_slave_1: entered allmulticast mode
[  356.093024][T20099] bridge_slave_1: entered allmulticast mode
[  356.100665][T20078] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  356.107282][T20099] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  356.112013][T20097] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  356.132421][T20104] bond0: left allmulticast mode
[  356.137361][T20104] bond_slave_0: left allmulticast mode
[  356.142927][T20104] bond_slave_1: left allmulticast mode
[  356.148588][T20104] bridge_slave_1: left allmulticast mode
[  356.154276][T20104] bond0: left promiscuous mode
[  356.159498][T20104] bond_slave_0: left promiscuous mode
[  356.161591][T20078] EXT4-fs (loop3): 1 truncate cleaned up
[  356.164963][T20104] bond_slave_1: left promiscuous mode
[  356.164982][T20104] bridge_slave_1: left promiscuous mode
[  356.182951][T20097] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  356.190599][T20097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  356.213478][T20091] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.5434: corrupted inode contents
[  356.250682][T20078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  356.265696][T20078] ext4 filesystem being mounted at /476/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  356.280211][T20091] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.5434: mark_inode_dirty error
[  356.309482][T20097] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  356.333433][T20091] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.5434: corrupted inode contents
[  356.352190][T20097] EXT4-fs error (device loop4): ext4_quota_enable:7128: comm syz.4.5436: inode #218103808: comm syz.4.5436: iget: illegal inode #
[  356.376957][T20091] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.5434: mark_inode_dirty error
[  356.391699][T20097] EXT4-fs error (device loop4): ext4_quota_enable:7131: comm syz.4.5436: Bad quota inode: 218103808, type: 2
[  356.415448][T20091] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.5434: Failed to acquire dquot type 0
[  356.418908][T20097] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  356.448572][T20121] loop0: detected capacity change from 0 to 512
[  356.462875][T20121] EXT4-fs: Ignoring removed nobh option
[  356.472384][T20091] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.5434: corrupted inode contents
[  356.506869][T20121] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  356.522648][T12909] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.534589][T20091] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.5434: mark_inode_dirty error
[  356.536029][T12542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.560534][T20091] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.5434: corrupted inode contents
[  356.595440][T20091] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.5434: mark_inode_dirty error
[  356.616625][T20121] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.5442: corrupted inode contents
[  356.633032][T20091] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.5434: corrupted inode contents
[  356.652577][T20121] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.5442: mark_inode_dirty error
[  356.671164][T20091] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  356.695675][T20143] loop3: detected capacity change from 0 to 128
[  356.709636][T20091] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.5434: corrupted inode contents
[  356.723030][T20121] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.5442: corrupted inode contents
[  356.739361][T20143] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5448'.
[  356.756604][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  356.779714][T20091] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.5434: mark_inode_dirty error
[  356.812386][T20091] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  356.812391][T20121] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.5442: mark_inode_dirty error
[  356.863826][T20091] EXT4-fs (loop1): 1 truncate cleaned up
[  356.883964][T20150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5451'.
[  356.896437][T20150] bond_slave_0: entered promiscuous mode
[  356.902254][T20150] bond_slave_1: entered promiscuous mode
[  356.913031][T20121] __quota_error: 99 callbacks suppressed
[  356.913184][T20121] Quota error (device loop0): write_blk: dquota write failed
[  356.934514][T20150] macvtap6: entered promiscuous mode
[  356.939889][T20150] bond0: entered promiscuous mode
[  356.945174][T20150] bridge_slave_1: entered promiscuous mode
[  356.951449][T20150] macvtap6: entered allmulticast mode
[  356.956873][T20150] bond0: entered allmulticast mode
[  356.962004][T20150] bond_slave_0: entered allmulticast mode
[  356.967752][T20150] bond_slave_1: entered allmulticast mode
[  356.973570][T20150] bridge_slave_1: entered allmulticast mode
[  357.018965][T20151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5451'.
[  357.028835][T20121] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  357.031101][T20091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  357.054684][T20121] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.5442: Failed to acquire dquot type 0
[  357.070155][T20150] 8021q: adding VLAN 0 to HW filter on device macvtap6
[  357.083412][T20151] bond0: left allmulticast mode
[  357.083501][T20091] ext4 filesystem being mounted at /462/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  357.088365][T20151] bond_slave_0: left allmulticast mode
[  357.088388][T20151] bond_slave_1: left allmulticast mode
[  357.088517][T20151] bridge_slave_1: left allmulticast mode
[  357.088641][T20151] bond0: left promiscuous mode
[  357.088824][T20151] bridge_slave_1: left promiscuous mode
[  357.089079][T20151] bond_slave_0: left promiscuous mode
[  357.089098][T20151] bond_slave_1: left promiscuous mode
[  357.097587][T20152] hub 6-0:1.0: USB hub found
[  357.144837][T20121] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5442: corrupted inode contents
[  357.166414][T20152] hub 6-0:1.0: 8 ports detected
[  357.233539][T20121] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.5442: mark_inode_dirty error
[  357.302596][T12319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.314021][T20121] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5442: corrupted inode contents
[  357.366925][T20121] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.5442: mark_inode_dirty error
[  357.560765][T20121] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5442: corrupted inode contents
[  357.575193][T20121] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  357.589279][T20121] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5442: corrupted inode contents
[  357.605106][T20121] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.5442: mark_inode_dirty error
[  357.769432][T20121] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  357.796549][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  357.827372][T20121] EXT4-fs (loop0): 1 truncate cleaned up
[  357.934089][T20121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.060944][T20181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5458'.
[  358.091407][T20121] ext4 filesystem being mounted at /499/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  358.265845][T20181] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  358.511303][T12708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.760954][T20192] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  358.826559][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  359.016734][   T29] audit: type=1400 audit(1758594168.490:16661): avc:  denied  { accept } for  pid=20193 comm="syz.3.5461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  359.036353][   T29] audit: type=1400 audit(1758594168.490:16662): avc:  denied  { ioctl } for  pid=20193 comm="syz.3.5461" path="socket:[67629]" dev="sockfs" ino=67629 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  359.075871][T20196] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5462'.
[  359.146869][T20199] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5462'.
[  359.189881][T20196] bond_slave_0: entered promiscuous mode
[  359.195585][T20196] bond_slave_1: entered promiscuous mode
[  359.201285][T20196] bridge_slave_1: entered promiscuous mode
[  359.226820][T20196] macvtap2: entered promiscuous mode
[  359.232157][T20196] bond0: entered promiscuous mode
[  359.237551][T20196] macvtap2: entered allmulticast mode
[  359.242943][T20196] bond0: entered allmulticast mode
[  359.248184][T20196] bond_slave_0: entered allmulticast mode
[  359.253950][T20196] bond_slave_1: entered allmulticast mode
[  359.259713][T20196] bridge_slave_1: entered allmulticast mode
[  359.269144][T20196] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  359.281216][T20203] loop4: detected capacity change from 0 to 512
[  359.290850][T20204] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  359.302980][T20199] bond0: left allmulticast mode
[  359.306368][T20203] EXT4-fs: Ignoring removed bh option
[  359.307905][T20199] bond_slave_0: left allmulticast mode
[  359.307925][T20199] bond_slave_1: left allmulticast mode
[  359.324245][T20199] bridge_slave_1: left allmulticast mode
[  359.330010][T20199] bond0: left promiscuous mode
[  359.330900][T20203] ext2: Unknown parameter 'fsuuid'
[  359.335317][T20199] bond_slave_0: left promiscuous mode
[  359.345349][T20199] bond_slave_1: left promiscuous mode
[  359.350817][T20199] bridge_slave_1: left promiscuous mode
[  359.519709][T20207] loop4: detected capacity change from 0 to 8192
[  359.647026][T20221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5467'.
[  359.834149][T20228] loop3: detected capacity change from 0 to 512
[  359.859739][T20228] EXT4-fs: Ignoring removed nobh option
[  359.876565][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  359.897192][T20228] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  359.955104][T20228] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.5469: corrupted inode contents
[  359.972699][T20234] loop5: detected capacity change from 0 to 512
[  359.984218][T20228] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.5469: mark_inode_dirty error
[  360.137347][T20234] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  360.153886][T20228] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.5469: corrupted inode contents
[  360.184647][T20234] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  360.199221][T20234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.209566][T20228] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.5469: mark_inode_dirty error
[  360.281911][T20228] Quota error (device loop3): write_blk: dquota write failed
[  360.309010][T20228] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  360.351504][T20228] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.5469: Failed to acquire dquot type 0
[  360.436217][T20228] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.5469: corrupted inode contents
[  360.453466][T20228] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.5469: mark_inode_dirty error
[  360.469267][T20228] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.5469: corrupted inode contents
[  360.485752][T20228] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.5469: mark_inode_dirty error
[  360.642019][T20228] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.5469: corrupted inode contents
[  360.686875][T20228] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  360.705403][T20228] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.5469: corrupted inode contents
[  360.714981][T20251] pim6reg: entered allmulticast mode
[  360.742166][T20228] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.5469: mark_inode_dirty error
[  360.763929][T20228] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  360.765302][T20251] pim6reg: left allmulticast mode
[  360.806004][T20228] EXT4-fs (loop3): 1 truncate cleaned up
[  360.906569][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  360.919428][T20228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  361.037436][T20228] ext4 filesystem being mounted at /487/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  361.398596][T12542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.793259][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5480'.
[  361.946584][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  362.002150][T20315] pim6reg: entered allmulticast mode
[  362.044382][T20315] pim6reg: left allmulticast mode
[  362.110050][T20317] loop5: detected capacity change from 0 to 512
[  362.121167][T20317] EXT4-fs: Ignoring removed nobh option
[  362.140193][T20317] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  362.223245][T20319] loop4: detected capacity change from 0 to 8192
[  362.264059][T20328] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  362.278545][T20317] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.5484: corrupted inode contents
[  362.417792][T20317] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.5484: mark_inode_dirty error
[  362.512577][T20317] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.5484: corrupted inode contents
[  362.543476][T20317] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.5484: mark_inode_dirty error
[  362.562607][T20317] Quota error (device loop5): write_blk: dquota write failed
[  362.584183][T20317] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  362.599340][T20317] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.5484: Failed to acquire dquot type 0
[  362.625424][T20317] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.5484: corrupted inode contents
[  362.640714][T20317] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.5484: mark_inode_dirty error
[  362.666962][T20343] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  362.674543][T20343] vhci_hcd: invalid port number 253
[  362.679823][T20343] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub
[  362.688195][T20317] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.5484: corrupted inode contents
[  362.709536][T20317] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.5484: mark_inode_dirty error
[  362.731940][T20347] loop1: detected capacity change from 0 to 512
[  362.760130][T20347] EXT4-fs (loop1): orphan cleanup on readonly fs
[  362.771637][T20317] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.5484: corrupted inode contents
[  362.790543][T20347] EXT4-fs error (device loop1): ext4_quota_enable:7128: comm syz.1.5489: inode #218103808: comm syz.1.5489: iget: illegal inode #
[  362.808234][T20317] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  362.831885][T20317] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.5484: corrupted inode contents
[  362.855121][T20317] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.5484: mark_inode_dirty error
[  362.953387][T20317] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  362.968387][T20347] EXT4-fs error (device loop1): ext4_quota_enable:7131: comm syz.1.5489: Bad quota inode: 218103808, type: 2
[  362.987117][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  362.999708][T20347] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  363.020942][T20317] EXT4-fs (loop5): 1 truncate cleaned up
[  363.028707][T20347] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  363.036080][   T29] audit: type=1400 audit(1758594172.580:16663): avc:  denied  { create } for  pid=20353 comm="syz.3.5490" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  363.064323][T20317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  363.078863][T20347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  363.108754][T20343] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  363.119417][T20317] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  363.145053][T20354] netlink: 'syz.3.5490': attribute type 7 has an invalid length.
[  363.152887][T20354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5490'.
[  363.165832][   T29] audit: type=1326 audit(1758594172.710:16664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20341 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74156eeec9 code=0x7ffc0000
[  363.189249][   T29] audit: type=1326 audit(1758594172.710:16665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20341 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74156eeec9 code=0x7ffc0000
[  363.212464][   T29] audit: type=1326 audit(1758594172.710:16666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20341 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74156eeec9 code=0x7ffc0000
[  363.235695][   T29] audit: type=1326 audit(1758594172.710:16667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20341 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74156eeec9 code=0x7ffc0000
[  363.258881][   T29] audit: type=1326 audit(1758594172.710:16668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20341 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74156eeec9 code=0x7ffc0000
[  363.282038][   T29] audit: type=1326 audit(1758594172.710:16669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20341 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74156eeec9 code=0x7ffc0000
[  363.305300][   T29] audit: type=1326 audit(1758594172.710:16670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20341 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74156eeec9 code=0x7ffc0000
[  363.332519][T20343] EXT4-fs error (device loop1): ext4_quota_enable:7128: comm syz.1.5489: inode #218103808: comm syz.1.5489: iget: illegal inode #
[  363.356875][T20357] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  363.359675][T20343] EXT4-fs error (device loop1): ext4_quota_enable:7131: comm syz.1.5489: Bad quota inode: 218103808, type: 2
[  363.363519][T20357] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  363.363651][T20357] vhci_hcd vhci_hcd.0: Device attached
[  363.377603][T20343] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  363.420527][T12319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.461530][T19060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.586847][T20360] vhci_hcd: connection closed
[  363.587528][T20032] vhci_hcd: stop threads
[  363.596635][T20032] vhci_hcd: release socket
[  363.601077][T20032] vhci_hcd: disconnect device
[  363.636684][ T3385] vhci_hcd: vhci_device speed not set
[  364.026573][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  364.029476][T20379] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  364.186282][T20379] vhci_hcd: invalid port number 253
[  364.191597][T20379] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub
[  364.204124][T20381] loop1: detected capacity change from 0 to 512
[  364.213482][T20381] EXT4-fs (loop1): orphan cleanup on readonly fs
[  364.222482][T20381] EXT4-fs error (device loop1): ext4_quota_enable:7128: comm syz.1.5496: inode #218103808: comm syz.1.5496: iget: illegal inode #
[  364.244842][T20381] EXT4-fs error (device loop1): ext4_quota_enable:7131: comm syz.1.5496: Bad quota inode: 218103808, type: 2
[  364.280059][T20381] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  364.307511][T20381] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  364.314628][T20381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  364.460740][T20379] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  364.546678][T20379] EXT4-fs error (device loop1): ext4_quota_enable:7128: comm syz.1.5496: inode #218103808: comm syz.1.5496: iget: illegal inode #
[  364.643828][T20379] EXT4-fs error (device loop1): ext4_quota_enable:7131: comm syz.1.5496: Bad quota inode: 218103808, type: 2
[  364.668953][T20388] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  364.675505][T20388] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  364.683245][T20388] vhci_hcd vhci_hcd.0: Device attached
[  364.709216][T20379] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  364.821684][T12319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.877499][T20389] vhci_hcd: connection closed
[  364.877777][T20032] vhci_hcd: stop threads
[  364.886922][T20032] vhci_hcd: release socket
[  364.891343][T20032] vhci_hcd: disconnect device
[  364.936594][ T3385] vhci_hcd: vhci_device speed not set
[  364.946011][T20397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5499'.
[  364.973663][T20399] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  365.066576][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  365.303107][T20407] netlink: 'syz.3.5502': attribute type 2 has an invalid length.
[  365.311110][T20407] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.5502'.
[  365.489994][T20413] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  365.507316][T20413] vhci_hcd: invalid port number 253
[  365.512660][T20413] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub
[  365.541801][T20413] loop3: detected capacity change from 0 to 512
[  365.562170][T20413] EXT4-fs (loop3): orphan cleanup on readonly fs
[  365.578211][T20413] EXT4-fs error (device loop3): ext4_quota_enable:7128: comm syz.3.5505: inode #218103808: comm syz.3.5505: iget: illegal inode #
[  365.707067][T20413] EXT4-fs error (device loop3): ext4_quota_enable:7131: comm syz.3.5505: Bad quota inode: 218103808, type: 2
[  365.722772][T20413] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  365.747769][T20413] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  365.754962][T20413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  365.919589][T20413] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  365.981202][T20413] EXT4-fs error (device loop3): ext4_quota_enable:7128: comm syz.3.5505: inode #218103808: comm syz.3.5505: iget: illegal inode #
[  366.106560][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  366.160120][T20413] EXT4-fs error (device loop3): ext4_quota_enable:7131: comm syz.3.5505: Bad quota inode: 218103808, type: 2
[  366.281066][T20413] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  366.409827][T20435] loop1: detected capacity change from 0 to 512
[  366.618574][T20435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  366.635151][T20435] ext4 filesystem being mounted at /474/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  366.646425][T20435] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.706789][T12542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.146671][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  367.344076][T20466] netlink: 'syz.5.5523': attribute type 7 has an invalid length.
[  367.351973][T20466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5523'.
[  367.463835][T20474] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  367.471677][T20474] vhci_hcd: invalid port number 253
[  367.476997][T20474] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub
[  367.484566][T20470] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  367.488968][T20474] loop5: detected capacity change from 0 to 512
[  367.505992][T20474] EXT4-fs (loop5): orphan cleanup on readonly fs
[  367.512663][T20473] netlink: 'syz.3.5527': attribute type 7 has an invalid length.
[  367.512931][T20474] EXT4-fs error (device loop5): ext4_quota_enable:7128: comm syz.5.5526: inode #218103808: comm syz.5.5526: iget: illegal inode #
[  367.520587][T20473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5527'.
[  367.536853][T20474] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz.5.5526: Bad quota inode: 218103808, type: 2
[  367.543188][T20470] vhci_hcd: invalid port number 253
[  367.556436][T20474] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  367.560027][T20470] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub
[  367.595509][T20474] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  367.602783][T20474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  367.615455][T20476] loop4: detected capacity change from 0 to 512
[  367.652770][T20474] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  367.672825][T20476] EXT4-fs (loop4): orphan cleanup on readonly fs
[  367.680358][T20476] EXT4-fs error (device loop4): ext4_quota_enable:7128: comm syz.4.5525: inode #218103808: comm syz.4.5525: iget: illegal inode #
[  367.694327][T20476] EXT4-fs error (device loop4): ext4_quota_enable:7131: comm syz.4.5525: Bad quota inode: 218103808, type: 2
[  367.708173][T20476] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  367.724086][T20474] EXT4-fs error (device loop5): ext4_quota_enable:7128: comm syz.5.5526: inode #218103808: comm syz.5.5526: iget: illegal inode #
[  367.738003][T20474] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz.5.5526: Bad quota inode: 218103808, type: 2
[  367.774491][T20476] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  367.781324][T20474] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  367.803444][T20476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  367.821898][T20470] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  367.840748][   T29] kauditd_printk_skb: 335 callbacks suppressed
[  367.840767][   T29] audit: type=1326 audit(1758594177.390:17006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20471 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd639deeec9 code=0x7ffc0000
[  367.875622][   T29] audit: type=1326 audit(1758594177.420:17007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20471 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd639deeec9 code=0x7ffc0000
[  367.898947][   T29] audit: type=1326 audit(1758594177.420:17008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20471 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd639deeec9 code=0x7ffc0000
[  367.922165][   T29] audit: type=1326 audit(1758594177.420:17009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20471 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd639deeec9 code=0x7ffc0000
[  367.945431][   T29] audit: type=1326 audit(1758594177.420:17010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20471 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd639deeec9 code=0x7ffc0000
[  367.968898][   T29] audit: type=1326 audit(1758594177.420:17011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20471 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd639deeec9 code=0x7ffc0000
[  367.992136][   T29] audit: type=1326 audit(1758594177.420:17012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20471 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd639deeec9 code=0x7ffc0000
[  368.015293][   T29] audit: type=1326 audit(1758594177.420:17013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20471 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd639deeec9 code=0x7ffc0000
[  368.015391][   T29] audit: type=1326 audit(1758594177.420:17014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20471 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd639deeec9 code=0x7ffc0000
[  368.015416][   T29] audit: type=1326 audit(1758594177.420:17015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20471 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd639deeec9 code=0x7ffc0000
[  368.015880][T20470] EXT4-fs error (device loop4): ext4_quota_enable:7128: comm syz.4.5525: inode #218103808: comm syz.4.5525: iget: illegal inode #
[  368.016339][T20470] EXT4-fs error (device loop4): ext4_quota_enable:7131: comm syz.4.5525: Bad quota inode: 218103808, type: 2
[  368.018721][T20470] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  368.081184][T12909] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.119869][T19060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.129314][T20496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5532'.
[  368.186641][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  368.190771][T20503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5535'.
[  368.210252][T20503] macvtap6: entered promiscuous mode
[  368.263705][T20506] loop5: detected capacity change from 0 to 512
[  368.269101][T20503] bond0: entered promiscuous mode
[  368.281021][T20506] EXT4-fs: Ignoring removed nomblk_io_submit option
[  368.283248][T20503] bond_slave_0: entered promiscuous mode
[  368.291205][T20506] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  368.294618][T20503] bond_slave_1: entered promiscuous mode
[  368.301379][T20506] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002]
[  368.307086][T20503] bridge_slave_1: entered promiscuous mode
[  368.317759][T20506] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80)
[  368.320805][T20503] macvtap6: entered allmulticast mode
[  368.328337][T20506] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features
[  368.334115][T20503] bond0: entered allmulticast mode
[  368.334135][T20503] bond_slave_0: entered allmulticast mode
[  368.368654][T20503] bond_slave_1: entered allmulticast mode
[  368.368677][T20503] bridge_slave_1: entered allmulticast mode
[  368.373525][T20506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  368.390705][T20503] 8021q: adding VLAN 0 to HW filter on device macvtap6
[  368.408080][T20503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5535'.
[  368.408376][T20503] bond0: left allmulticast mode
[  368.408397][T20503] bond_slave_0: left allmulticast mode
[  368.408415][T20503] bond_slave_1: left allmulticast mode
[  368.408432][T20503] bridge_slave_1: left allmulticast mode
[  368.408462][T20503] bond0: left promiscuous mode
[  368.408478][T20503] bond_slave_0: left promiscuous mode
[  368.408616][T20503] bond_slave_1: left promiscuous mode
[  368.408687][T20503] bridge_slave_1: left promiscuous mode
[  368.445749][T20515] loop4: detected capacity change from 0 to 128
[  368.487275][T20515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5540'.
[  368.509763][T20518] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20518 comm=syz.5.5538
[  368.601511][T19060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.611734][T20523] loop4: detected capacity change from 0 to 512
[  368.626152][T20517] loop0: detected capacity change from 0 to 512
[  368.648540][T20517] EXT4-fs: Ignoring removed nobh option
[  368.659671][T20525] loop5: detected capacity change from 0 to 512
[  368.669776][T20523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  368.684122][T20523] ext4 filesystem being mounted at /442/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  368.695356][T20523] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.706912][T20525] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  368.707821][T20517] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  368.719667][T20525] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  368.742722][T20525] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.797610][T20539] FAULT_INJECTION: forcing a failure.
[  368.797610][T20539] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  368.811045][T20539] CPU: 0 UID: 0 PID: 20539 Comm: syz.1.5548 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  368.811078][T20539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  368.811094][T20539] Call Trace:
[  368.811101][T20539]  <TASK>
[  368.811119][T20539]  __dump_stack+0x1d/0x30
[  368.811140][T20539]  dump_stack_lvl+0xe8/0x140
[  368.811161][T20539]  dump_stack+0x15/0x1b
[  368.811177][T20539]  should_fail_ex+0x265/0x280
[  368.811234][T20539]  should_fail_alloc_page+0xf2/0x100
[  368.811262][T20539]  __alloc_frozen_pages_noprof+0xff/0x360
[  368.811308][T20539]  alloc_pages_mpol+0xb3/0x250
[  368.811362][T20539]  vma_alloc_folio_noprof+0x1aa/0x300
[  368.811401][T20539]  handle_mm_fault+0xec2/0x2c20
[  368.811446][T20539]  do_user_addr_fault+0x636/0x1090
[  368.811565][T20539]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  368.811593][T20539]  exc_page_fault+0x62/0xa0
[  368.811627][T20539]  asm_exc_page_fault+0x26/0x30
[  368.811651][T20539] RIP: 0033:0x7f74155ba75b
[  368.811706][T20539] Code: 00 00 00 48 8d 3d dd 39 19 00 48 89 c1 31 c0 e8 fb 3a ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 3a 19 00 48 89 34 24 48 8b 14 24 48 8b
[  368.811727][T20539] RSP: 002b:00007f7414155fb0 EFLAGS: 00010202
[  368.811742][T20539] RAX: 0000000000000000 RBX: 00007f7415945fa0 RCX: 0000000000000000
[  368.811754][T20539] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000180
[  368.811768][T20539] RBP: 00007f7414157090 R08: 0000000000000000 R09: 0000000000000000
[  368.811787][T20539] R10: 0000200000000180 R11: 0000000000000000 R12: 0000000000000001
[  368.811803][T20539] R13: 00007f7415946038 R14: 00007f7415945fa0 R15: 00007ffe7e0958e8
[  368.811827][T20539]  </TASK>
[  368.811849][T20539] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  369.009487][T20517] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.5541: corrupted inode contents
[  369.024850][T20517] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.5541: mark_inode_dirty error
[  369.041536][T20548] netlink: 'syz.5.5550': attribute type 2 has an invalid length.
[  369.045796][T20517] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.5541: corrupted inode contents
[  369.049616][T20548] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.5550'.
[  369.120308][T20555] loop1: detected capacity change from 0 to 128
[  369.129153][T20554] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  369.139043][T20554] vhci_hcd: invalid port number 253
[  369.144269][T20554] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub
[  369.157659][T20554] loop3: detected capacity change from 0 to 512
[  369.159410][T20555] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5552'.
[  369.166887][T20517] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.5541: mark_inode_dirty error
[  369.188671][T20517] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.5541: Failed to acquire dquot type 0
[  369.203346][T20554] EXT4-fs (loop3): orphan cleanup on readonly fs
[  369.211255][T20554] EXT4-fs error (device loop3): ext4_quota_enable:7128: comm syz.3.5553: inode #218103808: comm syz.3.5553: iget: illegal inode #
[  369.227165][T20554] EXT4-fs error (device loop3): ext4_quota_enable:7131: comm syz.3.5553: Bad quota inode: 218103808, type: 2
[  369.236559][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  369.249571][T20517] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5541: corrupted inode contents
[  369.263349][T20554] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  369.266153][T20517] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.5541: mark_inode_dirty error
[  369.313637][T20554] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  369.319202][T20559] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  369.320885][T20554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  369.342849][T20559] vhci_hcd: invalid port number 253
[  369.348227][T20559] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub
[  369.351823][T20561] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  369.362859][T20554] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  369.373445][T20559] loop1: detected capacity change from 0 to 512
[  369.383159][T20559] EXT4-fs (loop1): orphan cleanup on readonly fs
[  369.390398][T20517] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5541: corrupted inode contents
[  369.401870][T20559] EXT4-fs error (device loop1): ext4_quota_enable:7128: comm syz.1.5554: inode #218103808: comm syz.1.5554: iget: illegal inode #
[  369.429325][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5556'.
[  369.442365][T20554] EXT4-fs error (device loop3): ext4_quota_enable:7128: comm syz.3.5553: inode #218103808: comm syz.3.5553: iget: illegal inode #
[  369.457908][T20564] bond_slave_0: entered promiscuous mode
[  369.463587][T20564] bond_slave_1: entered promiscuous mode
[  369.469272][T20564] bridge_slave_1: entered promiscuous mode
[  369.476871][T20554] EXT4-fs error (device loop3): ext4_quota_enable:7131: comm syz.3.5553: Bad quota inode: 218103808, type: 2
[  369.490241][T20517] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.5541: mark_inode_dirty error
[  369.502948][T20559] EXT4-fs error (device loop1): ext4_quota_enable:7131: comm syz.1.5554: Bad quota inode: 218103808, type: 2
[  369.518654][T20567] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5556'.
[  369.530915][T20554] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  369.548388][T20559] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  369.564016][T20564] macvtap3: entered promiscuous mode
[  369.569509][T20564] bond0: entered promiscuous mode
[  369.574971][T20564] macvtap3: entered allmulticast mode
[  369.580411][T20564] bond0: entered allmulticast mode
[  369.585555][T20564] bond_slave_0: entered allmulticast mode
[  369.591320][T20564] bond_slave_1: entered allmulticast mode
[  369.597073][T20564] bridge_slave_1: entered allmulticast mode
[  369.606770][T20517] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5541: corrupted inode contents
[  369.607730][T20564] 8021q: adding VLAN 0 to HW filter on device macvtap3
[  369.629144][T20517] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  369.629437][T20559] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  369.645122][T20517] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5541: corrupted inode contents
[  369.662662][T20567] bond0: left allmulticast mode
[  369.664590][T20559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  369.667603][T20567] bond_slave_0: left allmulticast mode
[  369.685520][T20567] bond_slave_1: left allmulticast mode
[  369.691028][T20567] bridge_slave_1: left allmulticast mode
[  369.691879][T20517] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.5541: mark_inode_dirty error
[  369.696703][T20567] bond0: left promiscuous mode
[  369.697114][T20567] bond_slave_0: left promiscuous mode
[  369.697135][T20567] bond_slave_1: left promiscuous mode
[  369.697229][T20567] bridge_slave_1: left promiscuous mode
[  369.739859][T20559] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  369.752379][T20517] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  369.776267][T20559] EXT4-fs error (device loop1): ext4_quota_enable:7128: comm syz.1.5554: inode #218103808: comm syz.1.5554: iget: illegal inode #
[  369.796792][T20559] EXT4-fs error (device loop1): ext4_quota_enable:7131: comm syz.1.5554: Bad quota inode: 218103808, type: 2
[  369.809375][T20517] EXT4-fs (loop0): 1 truncate cleaned up
[  369.816019][T20559] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  369.844410][T20517] ext4 filesystem being mounted at /512/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  369.856018][T20575] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  369.856051][T20575] vhci_hcd: invalid port number 253
[  369.856063][T20575] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub
[  369.861426][T20575] loop5: detected capacity change from 0 to 512
[  369.894696][T20575] EXT4-fs (loop5): orphan cleanup on readonly fs
[  369.903217][T20575] EXT4-fs error (device loop5): ext4_quota_enable:7128: comm syz.5.5559: inode #218103808: comm syz.5.5559: iget: illegal inode #
[  369.918687][T20575] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz.5.5559: Bad quota inode: 218103808, type: 2
[  369.930727][T20575] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  369.971601][T20575] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  370.001030][T20575] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  370.027429][T20575] EXT4-fs error (device loop5): ext4_quota_enable:7128: comm syz.5.5559: inode #218103808: comm syz.5.5559: iget: illegal inode #
[  370.051710][T20575] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz.5.5559: Bad quota inode: 218103808, type: 2
[  370.073972][T20575] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  370.266590][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  370.369143][T20596] loop1: detected capacity change from 0 to 512
[  370.384088][T20596] EXT4-fs: Ignoring removed nomblk_io_submit option
[  370.407886][T20599] loop4: detected capacity change from 0 to 512
[  370.418526][T20599] EXT4-fs: Ignoring removed nomblk_io_submit option
[  370.440591][T20599] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  370.442123][T20604] netlink: 'syz.5.5563': attribute type 10 has an invalid length.
[  370.448577][T20599] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002]
[  370.458026][T20599] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80)
[  370.473812][T20599] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features
[  370.509059][T20607] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  370.520386][T20596] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  370.528476][T20596] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002]
[  370.545920][T20599] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20599 comm=syz.4.5565
[  370.547198][T20596] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80)
[  370.568116][T20596] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features
[  370.695792][T20596] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20596 comm=syz.1.5564
[  370.785656][T20625] macvtap7: entered promiscuous mode
[  370.791281][T20625] bridge0: entered promiscuous mode
[  370.796883][T20625] macvtap7: entered allmulticast mode
[  370.802308][T20625] bridge0: entered allmulticast mode
[  370.834612][T20625] bridge0: left allmulticast mode
[  370.839875][T20625] bridge0: left promiscuous mode
[  370.848088][T20611] loop4: detected capacity change from 0 to 512
[  370.879660][T20611] EXT4-fs: Ignoring removed nobh option
[  370.906052][T20611] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  370.939561][T20627] loop1: detected capacity change from 0 to 512
[  370.971179][T20611] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.5568: corrupted inode contents
[  370.975039][T20627] ext4 filesystem being mounted at /488/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  370.995734][T20611] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.5568: mark_inode_dirty error
[  371.020680][T20611] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.5568: corrupted inode contents
[  371.080110][T20611] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.5568: mark_inode_dirty error
[  371.134315][T20611] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5568: Failed to acquire dquot type 0
[  371.174189][T20611] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5568: corrupted inode contents
[  371.307357][T20611] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.5568: mark_inode_dirty error
[  371.316691][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  371.375363][T20611] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5568: corrupted inode contents
[  371.554200][T20611] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.5568: mark_inode_dirty error
[  371.649802][T20611] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5568: corrupted inode contents
[  371.720978][T20611] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  371.820637][T20611] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5568: corrupted inode contents
[  371.848545][T20611] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.5568: mark_inode_dirty error
[  371.883685][T20611] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  371.980277][T20611] EXT4-fs (loop4): 1 truncate cleaned up
[  372.045467][T20611] ext4 filesystem being mounted at /445/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  372.301745][T20674] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  372.346576][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  372.582650][T20679] loop3: detected capacity change from 0 to 512
[  372.608891][T20679] EXT4-fs: Ignoring removed nobh option
[  372.654419][T20684] __nla_validate_parse: 2 callbacks suppressed
[  372.654505][T20684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5583'.
[  372.669794][T20684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5583'.
[  372.699680][T20679] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  372.833491][T20684] wireguard0: entered promiscuous mode
[  372.852746][T20679] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.5580: corrupted inode contents
[  372.866357][T20685] vlan2: entered allmulticast mode
[  372.882229][T20679] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.5580: mark_inode_dirty error
[  372.922991][T20679] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.5580: corrupted inode contents
[  372.939802][T20694] loop4: detected capacity change from 0 to 512
[  372.946591][T20694] EXT4-fs: Ignoring removed nomblk_io_submit option
[  372.952083][T20679] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.5580: mark_inode_dirty error
[  372.954854][T20684] bridge_slave_0: left promiscuous mode
[  372.970812][T20684] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.976060][T20679] __quota_error: 230 callbacks suppressed
[  372.976104][T20679] Quota error (device loop3): write_blk: dquota write failed
[  372.979314][T20694] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  372.991341][T20679] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  372.991854][T20694] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002]
[  372.996855][T20694] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80)
[  373.004348][T20679] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.5580: Failed to acquire dquot type 0
[  373.010222][T20694] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features
[  373.059403][T20684] bond0: (slave bridge_slave_1): Releasing backup interface
[  373.062393][T20679] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.5580: corrupted inode contents
[  373.086543][T20700] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20700 comm=syz.4.5578
[  373.088510][T20679] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.5580: mark_inode_dirty error
[  373.104874][   T29] audit: type=1107 audit(1758594182.650:17242): pid=20693 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  373.113456][T20679] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.5580: corrupted inode contents
[  373.126057][T20684] bridge_slave_1: left allmulticast mode
[  373.145678][T20684] bond0: (slave bond_slave_0): Releasing backup interface
[  373.146543][T20679] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.5580: mark_inode_dirty error
[  373.169780][T20679] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.5580: corrupted inode contents
[  373.170220][T20684] bond_slave_0: left allmulticast mode
[  373.188103][T20684] bond_slave_0: left promiscuous mode
[  373.203368][T20679] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  373.215415][T20679] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.5580: corrupted inode contents
[  373.216936][T20684] bond0: (slave bond_slave_1): Releasing backup interface
[  373.239358][T20679] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.5580: mark_inode_dirty error
[  373.254280][T20679] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  373.259674][T20684] bond_slave_1: left allmulticast mode
[  373.269088][T20684] bond_slave_1: left promiscuous mode
[  373.291841][T20679] EXT4-fs (loop3): 1 truncate cleaned up
[  373.314013][T20699] netlink: 'syz.1.5584': attribute type 2 has an invalid length.
[  373.321931][T20699] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.5584'.
[  373.332450][T20679] ext4 filesystem being mounted at /518/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  373.386559][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  373.443507][T20703] loop4: detected capacity change from 0 to 8192
[  373.492522][T20716] pim6reg: entered allmulticast mode
[  373.502455][T20716] pim6reg: left allmulticast mode
[  373.512870][   T29] audit: type=1326 audit(1758594183.060:17243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20718 comm="syz.0.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535ee7eec9 code=0x7ffc0000
[  373.539649][   T29] audit: type=1326 audit(1758594183.060:17244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20718 comm="syz.0.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f535ee7eec9 code=0x7ffc0000
[  373.563444][   T29] audit: type=1326 audit(1758594183.060:17245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20718 comm="syz.0.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535ee7eec9 code=0x7ffc0000
[  373.688378][T12542] EXT4-fs unmount: 17 callbacks suppressed
[  373.688393][T12542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  373.712674][T20727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5593'.
[  373.860452][T20727] bond_slave_0: entered promiscuous mode
[  373.866807][T20727] bond_slave_1: entered promiscuous mode
[  373.872485][T20727] bridge_slave_1: entered promiscuous mode
[  373.879385][T20727] macvtap4: entered promiscuous mode
[  373.884726][T20727] bond0: entered promiscuous mode
[  373.890227][T20727] macvtap4: entered allmulticast mode
[  373.895650][T20727] bond0: entered allmulticast mode
[  373.900831][T20727] bond_slave_0: entered allmulticast mode
[  373.906640][T20727] bond_slave_1: entered allmulticast mode
[  373.912415][T20727] bridge_slave_1: entered allmulticast mode
[  373.924471][T20727] 8021q: adding VLAN 0 to HW filter on device macvtap4
[  373.958855][T20727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5593'.
[  373.981960][T20736] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  373.989607][T20736] vhci_hcd: invalid port number 253
[  373.994834][T20736] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub
[  374.008593][T20736] loop1: detected capacity change from 0 to 512
[  374.031944][T20736] EXT4-fs (loop1): orphan cleanup on readonly fs
[  374.056734][T20727] bond0: left allmulticast mode
[  374.061636][T20727] bond_slave_0: left allmulticast mode
[  374.067247][T20727] bond_slave_1: left allmulticast mode
[  374.072827][T20727] bridge_slave_1: left allmulticast mode
[  374.078520][T20727] bond0: left promiscuous mode
[  374.083740][T20727] bond_slave_0: left promiscuous mode
[  374.089147][T20727] bond_slave_1: left promiscuous mode
[  374.094588][T20727] bridge_slave_1: left promiscuous mode
[  374.171724][T20736] EXT4-fs error (device loop1): ext4_quota_enable:7128: comm syz.1.5596: inode #218103808: comm syz.1.5596: iget: illegal inode #
[  374.245396][T20742] netlink: 'syz.5.5598': attribute type 4 has an invalid length.
[  374.270841][T20736] EXT4-fs error (device loop1): ext4_quota_enable:7131: comm syz.1.5596: Bad quota inode: 218103808, type: 2
[  374.327030][T20736] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  374.342733][T20736] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  374.351811][T20736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  374.380671][T20736] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  374.418954][T20736] EXT4-fs error (device loop1): ext4_quota_enable:7128: comm syz.1.5596: inode #218103808: comm syz.1.5596: iget: illegal inode #
[  374.436543][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  374.447853][T20751] FAULT_INJECTION: forcing a failure.
[  374.447853][T20751] name failslab, interval 1, probability 0, space 0, times 0
[  374.460630][T20751] CPU: 1 UID: 0 PID: 20751 Comm: syz.4.5600 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  374.460771][T20751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  374.460787][T20751] Call Trace:
[  374.460797][T20751]  <TASK>
[  374.460807][T20751]  __dump_stack+0x1d/0x30
[  374.460877][T20751]  dump_stack_lvl+0xe8/0x140
[  374.460900][T20751]  dump_stack+0x15/0x1b
[  374.460924][T20751]  should_fail_ex+0x265/0x280
[  374.461018][T20751]  should_failslab+0x8c/0xb0
[  374.461052][T20751]  kmem_cache_alloc_node_noprof+0x57/0x320
[  374.461103][T20751]  ? __alloc_skb+0x101/0x320
[  374.461135][T20751]  __alloc_skb+0x101/0x320
[  374.461158][T20751]  netlink_alloc_large_skb+0xba/0xf0
[  374.461189][T20751]  netlink_sendmsg+0x3cf/0x6b0
[  374.461246][T20751]  ? __pfx_netlink_sendmsg+0x10/0x10
[  374.461286][T20751]  __sock_sendmsg+0x145/0x180
[  374.461341][T20751]  ____sys_sendmsg+0x31e/0x4e0
[  374.461389][T20751]  ___sys_sendmsg+0x17b/0x1d0
[  374.461449][T20751]  __x64_sys_sendmsg+0xd4/0x160
[  374.461493][T20751]  x64_sys_call+0x191e/0x2ff0
[  374.461519][T20751]  do_syscall_64+0xd2/0x200
[  374.461561][T20751]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  374.461666][T20751]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  374.461768][T20751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.461795][T20751] RIP: 0033:0x7f939d4beec9
[  374.461878][T20751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  374.461902][T20751] RSP: 002b:00007f939bf27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  374.461921][T20751] RAX: ffffffffffffffda RBX: 00007f939d715fa0 RCX: 00007f939d4beec9
[  374.461934][T20751] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000006
[  374.461947][T20751] RBP: 00007f939bf27090 R08: 0000000000000000 R09: 0000000000000000
[  374.461958][T20751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  374.461973][T20751] R13: 00007f939d716038 R14: 00007f939d715fa0 R15: 00007ffea25f67e8
[  374.461998][T20751]  </TASK>
[  374.518226][T20736] EXT4-fs error (device loop1): ext4_quota_enable:7131: comm syz.1.5596: Bad quota inode: 218103808, type: 2
[  374.523313][T20753] netlink: 'syz.5.5599': attribute type 2 has an invalid length.
[  374.575837][T20736] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  374.580117][T20753] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.5599'.
[  374.729512][   T29] audit: type=1326 audit(1758594184.270:17246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20735 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74156eeec9 code=0x7ffc0000
[  374.752777][   T29] audit: type=1326 audit(1758594184.270:17247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20735 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74156eeec9 code=0x7ffc0000
[  374.776115][   T29] audit: type=1326 audit(1758594184.270:17248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20735 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74156eeec9 code=0x7ffc0000
[  374.799361][   T29] audit: type=1326 audit(1758594184.270:17249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20735 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74156eeec9 code=0x7ffc0000
[  374.868765][T20758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5601'.
[  374.878587][T12319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.159405][T20774] loop4: detected capacity change from 0 to 128
[  375.194646][T20774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5608'.
[  375.224681][T20769] loop1: detected capacity change from 0 to 8192
[  375.273301][T20779] pim6reg: entered allmulticast mode
[  375.315442][T20779] pim6reg: left allmulticast mode
[  375.323716][T20776] loop5: detected capacity change from 0 to 8192
[  375.422243][T20794] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  375.466577][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  375.492475][T20801] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5615'.
[  375.517241][T20799] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  375.517263][T20799] vhci_hcd: invalid port number 253
[  375.517272][T20799] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub
[  375.599250][T20799] loop0: detected capacity change from 0 to 512
[  375.607762][T20799] EXT4-fs (loop0): orphan cleanup on readonly fs
[  375.607915][T20801] ==================================================================
[  375.607957][T20801] BUG: KCSAN: data-race in _prb_read_valid / data_alloc
[  375.608001][T20801] 
[  375.608007][T20801] write to 0xffffffff86888670 of 8 bytes by task 20799 on cpu 0:
[  375.608023][T20801]  data_alloc+0x271/0x2b0
[  375.608059][T20801]  prb_reserve+0x808/0xaf0
[  375.608072][T20799] EXT4-fs error (device loop0): ext4_quota_enable:7128: comm syz.0.5612: inode #218103808: comm syz.0.5612: iget: illegal inode #
[  375.608096][T20801]  vprintk_store+0x56d/0x860
[  375.608117][T20801]  vprintk_emit+0x178/0x650
[  375.608139][T20801]  vprintk_default+0x26/0x30
[  375.608162][T20801]  vprintk+0x1d/0x30
[  375.608191][T20801]  _printk+0x79/0xa0
[  375.608225][T20801]  __ext4_msg+0x18f/0x1a0
[  375.608251][T20799] EXT4-fs error (device loop0): ext4_quota_enable:7131: comm syz.0.5612: Bad quota inode: 218103808, type: 2
[  375.608274][T20801]  ext4_orphan_cleanup+0x304/0xa00
[  375.608300][T20801]  ext4_fill_super+0x3260/0x35d0
[  375.608347][T20801]  get_tree_bdev_flags+0x28e/0x300
[  375.608376][T20801]  get_tree_bdev+0x1f/0x30
[  375.608387][T20799] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  375.608403][T20801]  ext4_get_tree+0x1c/0x30
[  375.608433][T20801]  vfs_get_tree+0x57/0x1d0
[  375.608454][T20801]  do_new_mount+0x207/0x5e0
[  375.608475][T20801]  path_mount+0x4a4/0xb20
[  375.608498][T20801]  __se_sys_mount+0x28f/0x2e0
[  375.608525][T20801]  __x64_sys_mount+0x67/0x80
[  375.608550][T20801]  x64_sys_call+0x2b4d/0x2ff0
[  375.608575][T20801]  do_syscall_64+0xd2/0x200
[  375.608615][T20801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.608641][T20801] 
[  375.608649][T20801] read to 0xffffffff86888670 of 16 bytes by task 20801 on cpu 1:
[  375.608670][T20801]  _prb_read_valid+0x1bc/0x920
[  375.608708][T20801]  prb_read_valid+0x3c/0x60
[  375.608724][T20799] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  375.608747][T20801]  printk_get_next_message+0xc8/0x510
[  375.608772][T20801]  console_flush_all+0x290/0x730
[  375.608798][T20801]  console_unlock+0xa1/0x330
[  375.608814][T20801]  con_flush_chars+0xb2/0x1b0
[  375.608836][T20801]  con_write+0x2e/0x40
[  375.608860][T20801]  n_tty_write+0x7d0/0xb50
[  375.608887][T20801]  file_tty_write+0x370/0x690
[  375.608917][T20801]  tty_write+0x25/0x30
[  375.608946][T20801]  vfs_write+0x527/0x960
[  375.608969][T20801]  ksys_write+0xda/0x1a0
[  375.608994][T20801]  __x64_sys_write+0x40/0x50
[  375.609022][T20801]  x64_sys_call+0x27fe/0x2ff0
[  375.609049][T20801]  do_syscall_64+0xd2/0x200
[  375.609085][T20801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.609107][T20801] 
[  375.609111][T20801] Reported by Kernel Concurrency Sanitizer on:
[  375.609123][T20801] CPU: 1 UID: 0 PID: 20801 Comm: syz.3.5615 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  375.609155][T20801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  375.609171][T20801] ==================================================================
[  375.609216][T20799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  375.941399][T20799] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  375.967935][T20799] EXT4-fs error (device loop0): ext4_quota_enable:7128: comm syz.0.5612: inode #218103808: comm syz.0.5612: iget: illegal inode #
[  376.024163][T20799] EXT4-fs error (device loop0): ext4_quota_enable:7131: comm syz.0.5612: Bad quota inode: 218103808, type: 2
[  376.036240][T20799] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  376.132907][T12708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.506596][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  377.546577][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  378.586605][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  379.626693][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  380.666591][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  381.706608][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  382.746567][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  383.786606][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  384.826588][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available