last executing test programs:

3m54.4159957s ago: executing program 3 (id=3383):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1054, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}})

3m54.316873142s ago: executing program 3 (id=3385):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x100000000000}, 0x18)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r4, 0x2007ffb)
sendfile(r4, r4, 0x0, 0x1000000201005)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000101b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), 0x0}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5, 0x0, 0x80000}, 0x18)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

3m53.672275721s ago: executing program 3 (id=3407):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000140), 0x8, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0)

3m53.613808621s ago: executing program 3 (id=3410):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]})
cachestat(0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x8cd8}, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x2, &(0x7f0000000a00)=ANY=[], 0x1, 0x1b1, &(0x7f0000000700)="$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")
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xd, &(0x7f0000000900)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
syslog(0x9, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r5=>r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x21680, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r5, @ANYRES8=r4, @ANYRES64=r0, @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="5a02af0de0c0c3dd2818d7504da570b2260790494e787c8dacc0c099860bf6dc8702e55a33dd30aa8817bb5a446d1dcc96d666922d90b1c14f505b6403398a76a4dbb62898461b725c4d0300f77f87d5ffd3336286a06f1ceac20d192102a1d1f7b27938cca71aa8ef2d7466de3660469612da29b89f1d530a1096d3424b30fa3f619104a8fdf49d5dd93cf09f1b18287c9905c3070561efbbacb7726dd143ce54b9062442f544d19cbe351d", @ANYRES16=r4, @ANYRES16=r5, @ANYRESDEC=r4], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000002c0)='sched_switch\x00', r6}, 0x18)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000680)='kfree\x00', r9}, 0x18)
r10 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r10, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4, 0x3}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r11 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10)
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r12 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r12)

3m53.318928675s ago: executing program 3 (id=3417):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=<r2=>r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0x7, 0x8}, 0x3100, 0x5, 0x3a65, 0x7, 0x200, 0x5, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000180)={@fallback=<r3=>0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x70, 0x0, r3, &(0x7f00000008c0), &(0x7f0000000380)='./file0\x00', 0x8, 0x0, 0x1})
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc)
ioctl$TCFLSH(r4, 0x540b, 0x0)
io_uring_enter(0xffffffffffffffff, 0x264b, 0x4, 0x1, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5, 0x0, 0x80000}, 0x18)
r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
sendmsg$inet6(r3, &(0x7f0000000740)={&(0x7f0000000300)={0xa, 0x4e20, 0x5, @empty, 0x569}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000000380)}, {&(0x7f00000005c0)="de3f6b444b0948e07ff4756e10d3ecfbead97afb39a7b98cc2fb454619b2240e141006a481260eda1a2364a2fc04c1df88549060ae80e8ccff6e1f2e6fbe3d343f9eb820f5cecca7f5c94d472134f1", 0x4f}], 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="24000000000000002900000045000000fe8000000000060000000000000000bb", @ANYRES32=0x0, @ANYBLOB="00000000140000000000000029000000080000000800000000000000480000000000000029000000370000001d050000000000000502fc00000100c910fc020000000000000000000000000000040101040190c204000000030502001000000000000000140000000000000029000000080000002f55000000000000"], 0xa0}, 0x20000004)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010018"], 0x18}}, 0x40)
r9 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0)
setreuid(0x0, 0xee00)
ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="00e9fffffbffffffff000000"])
r10 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xad74, 0x0, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYRES16=0x0], 0x48)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r11}, 0x4)

3m53.142999718s ago: executing program 3 (id=3421):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r1)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="51fd3ef640f206dcdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x24008084)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r10)
sendmsg$IEEE802154_ASSOCIATE_REQ(r10, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)={0x30, r11, 0x21, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4850}, 0x20000000)
connect$vsock_stream(r9, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10)
r12 = epoll_create1(0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r13}, 0x18)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f0000000280)={0xb000000d})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='f2fs_write_end\x00', r0}, 0x18)
statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137)

3m53.142632888s ago: executing program 32 (id=3421):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r1)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="51fd3ef640f206dcdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x24008084)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r10)
sendmsg$IEEE802154_ASSOCIATE_REQ(r10, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)={0x30, r11, 0x21, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4850}, 0x20000000)
connect$vsock_stream(r9, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10)
r12 = epoll_create1(0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r13}, 0x18)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f0000000280)={0xb000000d})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='f2fs_write_end\x00', r0}, 0x18)
statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137)

3.177349025s ago: executing program 4 (id=7595):
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000040)={0x4, 0x3, 0x80})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, 0x0, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
link(0x0, 0x0)

2.990003818s ago: executing program 4 (id=7596):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x410ca4, &(0x7f0000000340), 0x1, 0x785, &(0x7f0000001900)="$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")
r0 = open(0x0, 0x14927e, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000002c0), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = socket(0x9, 0x3, 0x9)
connect$netlink(r2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000005fc0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x0, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xdce05}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9f, 0x11, 0x3, 0x1088, 0x9c4}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8035}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x10)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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")
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a)
r7 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
io_setup(0x1, &(0x7f0000000040)=<r8=>0x0)
io_submit(r8, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000), 0x1a00001a}])
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740))
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000380)=0x2)

2.604889013s ago: executing program 1 (id=7602):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

2.531219534s ago: executing program 2 (id=7603):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0)

2.429351986s ago: executing program 1 (id=7604):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x4, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xb68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000e80))
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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")
open(0x0, 0x145142, 0x0)
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r1, 0x2007ffc)
sendfile(r1, r1, 0x0, 0x800000009)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)

2.231618599s ago: executing program 1 (id=7606):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x800}, 0x14)
mq_open(&(0x7f0000000100)='}\x18.f', 0x40, 0x2, &(0x7f0000000140)={0x8, 0xff7, 0x80000c2f1, 0x7fffffffffffffff})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x8, 0x2, 0x5, 0x200, 0xffffffffffffffff, 0x5c1dbeeb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x4, @void, @value, @void, @value}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x3c56, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x2}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x15, &(0x7f0000000580)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ldst={0x3, 0x1, 0x1, 0x5, 0x7, 0xd, 0x4}, @call={0x85, 0x0, 0x0, 0x6c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xec}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1000}], &(0x7f0000000640)='GPL\x00', 0x7, 0x4b, &(0x7f0000000680)=""/75, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x0, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000780)=[r3, r2], &(0x7f00000007c0)=[{0x5, 0x4, 0x9, 0xc}, {0x2, 0x1, 0xb, 0x3}, {0x5, 0x4, 0xa, 0xb}, {0x2, 0x1, 0xa, 0x4}], 0x10, 0x7f, @void, @value}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000008c0)={'team0\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a40)="77d5da0000000058cfa5531177842aa4dff5", &(0x7f0000000380), 0x1, r8}, 0x38)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000001a240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r8, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000aedbe0ba0500000004000000000000000000000000000000000000003e578f4067038b44d885d4ac006dd008d48b98954d6e0740bb564a2109171fae9138fcb92bcac3c126f0f0fc29e007c60c91f6b3e70924bca2e5af4ba3fe1149920858207a85b35369c03a0dbd999a7bd4d632b454203a5394908ec60f2a1dee277068243edeffa847a5e081f908c0ded2edefed5217fc6ea22e3814f122538d704908cfc8f4db"], 0x50)
r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r10, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$RTC_WIE_OFF(r10, 0x7010)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r9, 0x20, &(0x7f0000000680)={&(0x7f0000000580)=""/128, 0x80, <r11=>0x0, &(0x7f0000000600)=""/100, 0x64}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000000000008500000086000000ff5f030006000000d95af0ffffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000861000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x6, 0x4, 0x3}, 0x10, r11, r9, 0x1, &(0x7f0000000a80)=[0xffffffffffffffff, r8, r10, 0xffffffffffffffff], &(0x7f0000000140)=[{0x3, 0x5, 0x9, 0x2}], 0x10, 0x8, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x22, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7c7b, 0x0, 0x0, 0x0, 0xffffff8a}, {}, {}, [@exit, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000, @void, @value}, 0x94)
syz_emit_ethernet(0xfffffffffffffec1, &(0x7f0000000180)={@local, @link_local, @void, {@mpls_uc={0x8847, {[{0xe23}, {0x9}], @llc={@snap={0x0, 0x0, "b030", "76149e", 0x884c, "9f2ae01d0ffa459f1616f52b2ebf319c490cec2455f2fcdbef2ebcd95ebb153b1165921d339c795d2bc251d5a7af8b3ffae2a7d9b4287d35bd269d14c4aa4caa24a3e74bcc5e315857b15da3424e29b613c28e7870044a62cd9b033a20a7ff0435558e3f920e3569eefd60a982be08999fe74c59721898f8d5391b9e34987dc96d89feeaa4d073fd8de2db877e356231890601b975b4c9fdc408a227e54ce5aea9f9d9889b4eb8638403411c03a8bf2555ee0e42941d3f"}}}}}}, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, r0}, 0x18)

2.11903198s ago: executing program 5 (id=7607):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
ppoll(0x0, 0x0, 0x0, &(0x7f0000000080)={[0xffff]}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

1.873876873s ago: executing program 4 (id=7608):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x4, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xb68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000e80))
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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")
open(0x0, 0x145142, 0x0)
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x800000009)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.670081097s ago: executing program 2 (id=7609):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13)
perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000080)}, 0x400, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3)
r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="a1ab0000000000000e003200000008001701"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r8, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x6}}}}, [""]}, 0x28}}, 0xc000)
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080d0}, 0x80)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r10)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r12, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r11], 0x4}}, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r12, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008044}, 0x8000)

1.567395778s ago: executing program 4 (id=7611):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13)
perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000080)}, 0x400, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r3)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/vmcoreinfo', 0x2000, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="a1ab0000000000000e003200000008001701"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r8, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x6}}}}, [""]}, 0x28}}, 0xc000)
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080d0}, 0x80)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r10)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r12, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r11], 0x4}}, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r12, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008044}, 0x8000)

1.305705822s ago: executing program 0 (id=7613):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18)
link(0x0, 0x0)

1.304960772s ago: executing program 1 (id=7614):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe30, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
execve(0x0, 0x0, 0x0)

1.269292672s ago: executing program 5 (id=7615):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x7, 0x0, 0x0, 0x7ffc1ff6}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000004c0)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000000c0)={r5})
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
lchown(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000000280)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma'])
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r3, 0x10000105)
syz_extract_tcp_res$synack(&(0x7f00000002c0)={<r8=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)=ANY=[@ANYRES8=r6, @ANYRES32=0x41424344, @ANYRES32=r8, @ANYBLOB="7002ffff90780000fe06e2d4c31ecac36f77316f90f57f444046a46ad1139ae9f1649a8045b87c8fda184c8093bcef8717576dba078eadf67fd5ce7f"], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r10, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)

1.216869933s ago: executing program 0 (id=7616):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x4, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xb68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000e80))
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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")
open(0x0, 0x145142, 0x0)
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r1, 0x2007ffc)
sendfile(r1, r1, 0x0, 0x800000009)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.216319513s ago: executing program 1 (id=7617):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x7, 0x0, 0x0, 0x7ffc1ff6}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000004c0)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000000c0)={r5})
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
lchown(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000000280)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma'])
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r3, 0x10000105)
syz_extract_tcp_res$synack(&(0x7f00000002c0)={<r8=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000003c0)=ANY=[@ANYRES8=r6, @ANYRES32=0x41424344, @ANYRES32=r8, @ANYBLOB="7002ffff90780000fe06e2d4c31ecac36f77316f90f57f444046a46ad1139ae9f1649a8045b87c8fda184c8093bcef8717576dba078eadf67fd5ce7f"], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)

1.215037323s ago: executing program 2 (id=7618):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180)}, 0x13240, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r4}, 0x18)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000080)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x1, 0xd853, 0x400, 0x0, 0x11})
ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6)
getgroups(0x27, &(0x7f0000002540))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair(0x10, 0x0, 0xa, &(0x7f0000000080))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a1, &(0x7f0000000080))

1.139997524s ago: executing program 0 (id=7619):
bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080))
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000180)=r5)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

1.015207966s ago: executing program 4 (id=7620):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000ef, 0x1af1ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000006c0600ec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001240)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000040), &(0x7f0000000180)=r2}, 0x20)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r4)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000f80)={0x558, 0x12, 0x400, 0x70bd2b, 0x25dfdbfc, {0x8, 0x81, 0x5, 0x8f, {0x4e23, 0x4e24, [0x3, 0x3, 0x6, 0x8], [0xee8, 0x80000000, 0x7f], 0x0, [0x49a, 0x3]}, 0x43b6, 0x10000}, [@INET_DIAG_REQ_BYTECODE={0x31, 0x1, "5aa64880853cecf1edcd5a62b9872d9165009c01aea2e16fe177aace3005cf0aabd9bd03a7d0e83544dce9379c"}, @INET_DIAG_REQ_BYTECODE={0xf8, 0x1, "f332d69b34be8962ea4d00db35858006db1a41adf6619c36f6814e259bb42c33d901f132d6359813a358ad3ec169685ef3a2e7432060d38510e84ba05a156f2b6cb608ccfe5b2a1bdfa5b4b99bd15aa48c4eabdaee926158dd8ac4807f6ae0b0501bad83ebba538c6f39a969c58e22e618888d51de79bc477594c42eec778713a3967ec631a61cd9bcdd355af3d469f7ef005668c23743d8738c3567f1fc3bf74ee4e734ea378ce541c5b98675c819db8083cb013f569651e5ea81734bba77855d4fa381cce3aee815a92029b4afe8ed93c8ee0a1f22e1c1d08d41a4db41783f6211608bdcbcf69de8d1c375d6a002a59b07c0b5"}, @INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "971c59e8f4d5e3bb249f0de7af8606d4dba840e0a18627dd10e4997f5faac32f58a5f4bbfc1a1885ff6bbc16ef1b8ad2928a57570efe355522a7d217fbe5e2f0f3406b079566233b1b05fbac4c8c119f0696e2e6b6d22946e25bb96e6a4c509b27c47425f728fd9f8616458bdd5b12030097d50cd431274dad16f26abfbac8d12deddeef59d29fd6b8f05229066b074a295375f456778a8419a3486b4fa1b10228d9cf4ab7b21380747c228ace9531ed3f6908b4e824f765c1f788ed5083b767c4272918d8d7a7123563ede16cd608964ddc88ac"}, @INET_DIAG_REQ_BYTECODE={0xa6, 0x1, "ad16f1afb4a774876a12053d5be1c06bf0f2f056a0f67b24e1fe645dfce9f06db6e538117c16d7f8e3ab1efa92f6b679226a403c44ebc13d97e1acaf081d85de42dd6a52ba57eaad2bc48a4209f9618419b55f022007e185009a037d9f5471f159897052d412ff24f057f40fadd737928949c2c915e7bffeeb44c4980df323504ad7958429ca45c5b172daa90500e2171943d0559951765d49f52bd3423f4d7d77e2"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "4c0240ad321980844b8b7e6313760fee57464d4c748719d95026af175353eb8469e51fc22d935017fe73872e4666bcc3ab2aef4400bf5a630f84e2ac20f66dbfd3e9643840a5e8adb2db7ac0bd60d189b64cfef15f356413ddaa28e16acdc5395310bf6b56ece81f48caf0ae8cea02675cd30af53eb24a83a234ca63e3d65d6c211cf6b241e31edba542ca7ad7359c4cc1fd879e7d5ef8f6cfb8bb"}, @INET_DIAG_REQ_BYTECODE={0xfb, 0x1, "0f6609feab9e52c1f0c680fcda819f5d13b11d0af80481a7fb772f9062acbcc779da658e00df4eae4f2658249787d6c4f3fc8f176e8d45474fdacb9ead0319e6e019a75332933037f95e9c58047386a552f9018715e57b9679ee9484f1f66b18460f435842ab099367fd4ca66feb80f35a01750254c1529b4670605307b67af6ecac70888f8d14859db3c0b75aeacd6b1fb8490810ef0a8669bfd8c96d2a31e9a352ede386d59feeeddff5b0208d42cba71a8c86edbbda1872964291ea4daf790f1e9ec71825b73de415302c94213b2daa884af0708f318a986ba1b1b5c3d2b214851e75b22f6c0d71c9fc51233f66200941ee1803daa6"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "5dc6649ad42eb1b3c2e6d73b8fc4bc74a2e8b8bfcfd32bec4d4b68b39f7a287062ebb262510dfecb63f473975118260b878dbb2bd6d64f7e6d9633e660a36ffb8f6b81e3ed8f86cde7afaf888c1eb75fea9bfa928f21c4d910d50ea24c18f443b29f4a309502fbe99afe30f67c0e9b6577f7051bc3af98ca34049204bad15ea693dcd8e76aae4d3ae74a9c5d1086481205a2beba84ba64abdfd7ec"}, @INET_DIAG_REQ_BYTECODE={0x23, 0x1, "9b4045c9bd4aea27084e56bf592940ca74261476942d31044d81b0c1bc56d9"}]}, 0x558}, 0x1, 0x0, 0x0, 0x40}, 0x804)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00')
close_range(r6, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r9 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r9, 0x101)
rt_sigpending(0x0, 0x0)
r10 = socket$inet_dccp(0x2, 0x6, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x400000000000000, 0x0, 0x0, 0xc}, 0x0, 0x0)
connect$inet(r10, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r8, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'})

972.536986ms ago: executing program 2 (id=7621):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x800}, 0x14)
mq_open(&(0x7f0000000100)='}\x18.f', 0x40, 0x2, &(0x7f0000000140)={0x8, 0xff7, 0x80000c2f1, 0x7fffffffffffffff})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x8, 0x2, 0x5, 0x200, 0xffffffffffffffff, 0x5c1dbeeb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x4, @void, @value, @void, @value}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x3c56, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x2}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x15, &(0x7f0000000580)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ldst={0x3, 0x1, 0x1, 0x5, 0x7, 0xd, 0x4}, @call={0x85, 0x0, 0x0, 0x6c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xec}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1000}], &(0x7f0000000640)='GPL\x00', 0x7, 0x4b, &(0x7f0000000680)=""/75, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x0, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000780)=[r3, r2], &(0x7f00000007c0)=[{0x5, 0x4, 0x9, 0xc}, {0x2, 0x1, 0xb, 0x3}, {0x5, 0x4, 0xa, 0xb}, {0x2, 0x1, 0xa, 0x4}], 0x10, 0x7f, @void, @value}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000008c0))
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a40)="77d5da0000000058cfa5531177842aa4dff5", &(0x7f0000000380), 0x1, r7}, 0x38)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000001a240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r7, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000aedbe0ba0500000004000000000000000000000000000000000000003e578f4067038b44d885d4ac006dd008d48b98954d6e0740bb564a2109171fae9138fcb92bcac3c126f0f0fc29e007c60c91f6b3e70924bca2e5af4ba3fe1149920858207a85b35369c03a0dbd999a7bd4d632b454203a5394908ec60f2a1dee277068243edeffa847a5e081f908c0ded2edefed5217fc6ea22e3814f122538d704908cfc8f4db"], 0x50)
r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r9, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$RTC_WIE_OFF(r9, 0x7010)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r8, 0x20, &(0x7f0000000680)={&(0x7f0000000580)=""/128, 0x80, <r10=>0x0, &(0x7f0000000600)=""/100, 0x64}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000086000000ff5f030006000000d95af0ffffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000861000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x6, 0x4, 0x3}, 0x10, r10, r8, 0x1, &(0x7f0000000a80)=[0xffffffffffffffff, r7, r9, 0xffffffffffffffff], &(0x7f0000000140)=[{0x3, 0x5, 0x9, 0x2}], 0x10, 0x8, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
syz_emit_ethernet(0xfffffffffffffec1, &(0x7f0000000180)={@local, @link_local, @void, {@mpls_uc={0x8847, {[{0xe23}, {0x9}], @llc={@snap={0x0, 0x0, "b030", "76149e", 0x884c, "9f2ae01d0ffa459f1616f52b2ebf319c490cec2455f2fcdbef2ebcd95ebb153b1165921d339c795d2bc251d5a7af8b3ffae2a7d9b4287d35bd269d14c4aa4caa24a3e74bcc5e315857b15da3424e29b613c28e7870044a62cd9b033a20a7ff0435558e3f920e3569eefd60a982be08999fe74c59721898f8d5391b9e34987dc96d89feeaa4d073fd8de2db877e356231890601b975b4c9fdc408a227e54ce5aea9f9d9889b4eb8638403411c03a8bf2555ee0e42941d3f"}}}}}}, 0x0)

954.764096ms ago: executing program 0 (id=7622):
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r0 = socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x2a)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xa1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10)
acct(&(0x7f0000000140)='./file0\x00')
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x800, 0x0)
r5 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f00000000c0)=ANY=[], 0x4, 0x7d8, &(0x7f0000000a80)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53dedc33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"})
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000100)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7fff, 0x1, 0x0, 0x1, 0x0, [{0x81, 0x765, 0x5}]})
syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='\x00', 0x126a4b5, &(0x7f0000002740)=ANY=[@ANYRES16=r6, @ANYRES64, @ANYRES16, @ANYRES16=r5, @ANYRESDEC, @ANYRES16, @ANYRES8=0x0, @ANYBLOB="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", @ANYRES8, @ANYBLOB="7469a2f8c7e2ae03123d2a970a7dfd9038a68dab42ed3f5e37efc656743654a8b93e479d78d5a581abc251efd108e13475586a"], 0x5, 0x0, &(0x7f0000000000))
madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00')
close_range(r7, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0x6, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r8 = inotify_init1(0x80000)
inotify_add_watch(r8, &(0x7f00000000c0)='./file0\x00', 0x67000a3e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00')

928.523137ms ago: executing program 0 (id=7623):
bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

921.167937ms ago: executing program 4 (id=7624):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0)

777.371479ms ago: executing program 0 (id=7625):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
ppoll(0x0, 0x0, 0x0, &(0x7f0000000080)={[0xffff]}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

403.636874ms ago: executing program 5 (id=7626):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18)
link(0x0, 0x0)

366.057455ms ago: executing program 1 (id=7627):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x800}, 0x14)
mq_open(&(0x7f0000000100)='}\x18.f', 0x40, 0x2, &(0x7f0000000140)={0x8, 0xff7, 0x80000c2f1, 0x7fffffffffffffff})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x8, 0x2, 0x5, 0x200, 0xffffffffffffffff, 0x5c1dbeeb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x4, @void, @value, @void, @value}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x3c56, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x2}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x15, &(0x7f0000000580)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ldst={0x3, 0x1, 0x1, 0x5, 0x7, 0xd, 0x4}, @call={0x85, 0x0, 0x0, 0x6c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xec}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1000}], &(0x7f0000000640)='GPL\x00', 0x7, 0x4b, &(0x7f0000000680)=""/75, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x0, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000780)=[r3, r2], &(0x7f00000007c0)=[{0x5, 0x4, 0x9, 0xc}, {0x2, 0x1, 0xb, 0x3}, {0x5, 0x4, 0xa, 0xb}, {0x2, 0x1, 0xa, 0x4}], 0x10, 0x7f, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a40)="77d5da0000000058cfa5531177842aa4dff5", &(0x7f0000000380), 0x1, r7}, 0x38)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000001a240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r7, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000aedbe0ba0500000004000000000000000000000000000000000000003e578f4067038b44d885d4ac006dd008d48b98954d6e0740bb564a2109171fae9138fcb92bcac3c126f0f0fc29e007c60c91f6b3e70924bca2e5af4ba3fe1149920858207a85b35369c03a0dbd999a7bd4d632b454203a5394908ec60f2a1dee277068243edeffa847a5e081f908c0ded2edefed5217fc6ea22e3814f122538d704908cfc8f4db"], 0x50)
r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r9, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
ioctl$RTC_WIE_OFF(r9, 0x7010)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r8, 0x20, &(0x7f0000000680)={&(0x7f0000000580)=""/128, 0x80, <r11=>0x0, &(0x7f0000000600)=""/100, 0x64}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000086000000ff5f030006000000d95af0ffffffffff18110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70200000000000085000000861000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x6, 0x4, 0x3}, 0x10, r11, r8, 0x1, &(0x7f0000000a80)=[r10, r7, r9, r10], &(0x7f0000000140)=[{0x3, 0x5, 0x9, 0x2}], 0x10, 0x8, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x22, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7c7b, 0x0, 0x0, 0x0, 0xffffff8a}, {}, {}, [@exit, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10)
syz_emit_ethernet(0xfffffffffffffec1, &(0x7f0000000180)={@local, @link_local, @void, {@mpls_uc={0x8847, {[{0xe23}, {0x9}], @llc={@snap={0x0, 0x0, "b030", "76149e", 0x884c, "9f2ae01d0ffa459f1616f52b2ebf319c490cec2455f2fcdbef2ebcd95ebb153b1165921d339c795d2bc251d5a7af8b3ffae2a7d9b4287d35bd269d14c4aa4caa24a3e74bcc5e315857b15da3424e29b613c28e7870044a62cd9b033a20a7ff0435558e3f920e3569eefd60a982be08999fe74c59721898f8d5391b9e34987dc96d89feeaa4d073fd8de2db877e356231890601b975b4c9fdc408a227e54ce5aea9f9d9889b4eb8638403411c03a8bf2555ee0e42941d3f"}}}}}}, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, r0}, 0x18)

298.971066ms ago: executing program 5 (id=7628):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13)
perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000080)}, 0x400, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3)
r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="a1ab0000000000000e003200000008001701"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r8, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x6}}}}, [""]}, 0x28}}, 0xc000)
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080d0}, 0x80)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r10)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r12, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r11], 0x4}}, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r12, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008044}, 0x8000)

95.594329ms ago: executing program 5 (id=7629):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="00000000000cdd86e1239bed0000bfa200000000000007020000f8ffffffb703000008000000b704000000065491460e934d4f0000008500"/65], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572"], 0x1ac}}, 0x0)

75.028119ms ago: executing program 2 (id=7630):
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe30, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
execve(0x0, 0x0, 0x0)

28.85007ms ago: executing program 5 (id=7631):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10)
creat(&(0x7f00000000c0)='./file0\x00', 0x198)
pipe2$9p(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])

0s ago: executing program 2 (id=7632):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={<r1=>0x0, 0xfe, "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"}, &(0x7f0000000140)=0x106)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={<r2=>r1, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0xfffff000, @mcast1, 0x1}]}, &(0x7f0000000200)=0x10)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x1}, 0x8) (async)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={r2, 0x4, 0x30}, 0xc) (async)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0x140b, 0x400, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r4 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000003c0)=0x1, 0x4) (async)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3e8, 0x10, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8880)
connect$rds(r4, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r5, &(0x7f0000000540)="7721fcfa588f895e38c878434ae77ea95d5a2d9737fcf53307189e7958a9c81c75558f12c021820c3c08f44e5a0cc6479a8e12af113b5c3f87747341acf4a25a8c95f47824df4cc3311a9a1a63dbc0797fad2d2031b99edfef188537c95e54b863e307a186e7d3fbddd4adb47f8baba65ce96f407957dc1c87f5543f7a8dcdce4d664928ab6239a0d6409ecc5c52b8aac363a637148e126308cb3c07", 0x9c, 0x4840, &(0x7f0000000600)={0x2, 0x4e22, @remote}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x10805) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r7, 0x804, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000900)={'batadv0\x00', <r9=>0x0})
sendmsg$nl_route_sched_retired(r8, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)=@newtclass={0xcc, 0x28, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x2, 0xfff2}, {0xfff1, 0xd}, {0xe, 0x13}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x7}}}, @c_atm={{0x8}, {0x70, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x1, 0xe}}, @TCA_ATM_HDR={0x29, 0x3, "e373256fd6afa619273837c1d9cfa9b1e3b8d2ef70bd41a6940347f90814f73575974ebccb"}, @TCA_ATM_HDR={0x37, 0x3, "5f20dce2889a73eeb59f25038d957205eabc26b40dc3cf5ea01ef0e21dad0e3bbb83a2a30f784c4c3b6f89252d4660e959b10d"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x9}}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x4000001)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b00), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, r10, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4850}, 0x800) (async, rerun: 64)
r11 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 64)
sendmsg$AUDIT_LIST_RULES(r11, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x10, 0x3f5, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4008004}, 0x50) (async)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000d40)={r1, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}}, 0x84) (async)
r12 = dup3(r6, r5, 0x0)
getdents64(r12, &(0x7f0000000e00)=""/94, 0x5e)
r13 = socket$pppoe(0x18, 0x1, 0x0)
fcntl$addseals(r13, 0x409, 0x2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000000e80)=[@in6={0xa, 0x4e22, 0x800, @mcast1, 0x3}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0x1ff, @mcast1, 0x5}, @in6={0xa, 0x4e22, 0x48, @remote, 0x80000001}, @in6={0xa, 0x4e22, 0xffff0001, @ipv4={'\x00', '\xff\xff', @multicast1}}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e24, 0x7, @local, 0x8000}, @in6={0xa, 0x4e23, 0x38000, @empty, 0x7f}], 0xe8)

kernel console output (not intermixed with test programs):

fd
[  505.659638][T24699] loop2: detected capacity change from 0 to 2048
[  505.699278][T24702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7012'.
[  505.721976][T24699] loop2: detected capacity change from 0 to 8192
[  505.909416][T24715] loop5: detected capacity change from 0 to 2048
[  505.988522][T24711] hub 2-0:1.0: USB hub found
[  505.993204][T24711] hub 2-0:1.0: 8 ports detected
[  506.005779][T24711] loop4: detected capacity change from 0 to 512
[  506.012402][T24711] EXT4-fs: Ignoring removed oldalloc option
[  506.035552][T24711] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.7014: Parent and EA inode have the same ino 15
[  506.049575][T24711] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.7014: Parent and EA inode have the same ino 15
[  506.063882][T24711] EXT4-fs (loop4): 1 orphan inode deleted
[  506.072738][T24716] syzkaller0: entered promiscuous mode
[  506.078386][T24716] syzkaller0: entered allmulticast mode
[  506.153321][T24715] loop5: detected capacity change from 0 to 8192
[  506.261424][T24724] loop4: detected capacity change from 0 to 764
[  506.277145][T24724] iso9660: Unknown parameter ''
[  506.433404][T24728] loop4: detected capacity change from 0 to 128
[  506.449298][T24728] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8)
[  506.457501][T24728] FAT-fs (loop4): Filesystem has been set read-only
[  506.504554][T24728] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522)
[  506.634929][T24740] 9pnet_fd: Insufficient options for proto=fd
[  506.662310][T24738] loop0: detected capacity change from 0 to 2048
[  506.793857][T24754] loop2: detected capacity change from 0 to 764
[  506.853639][T24754] iso9660: Unknown parameter ''
[  506.927152][T24766] loop2: detected capacity change from 0 to 1024
[  506.936685][T24766] EXT4-fs: Ignoring removed bh option
[  506.937139][T24769] loop5: detected capacity change from 0 to 512
[  506.942171][T24766] EXT4-fs: inline encryption not supported
[  506.942674][T24766] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  506.977206][T24766] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  506.985880][T24769] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  506.991880][T24775] vlan2: entered allmulticast mode
[  507.001274][T24769] EXT4-fs (loop5): mount failed
[  507.009919][T24766] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.7035: lblock 2 mapped to illegal pblock 2 (length 1)
[  507.025205][T24766] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.7035: lblock 0 mapped to illegal pblock 48 (length 1)
[  507.040260][T24766] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.7035: Failed to acquire dquot type 0
[  507.051766][T24766] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  507.061920][T24766] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.7035: mark_inode_dirty error
[  507.073588][T24766] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  507.085678][T24766] EXT4-fs (loop2): 1 orphan inode deleted
[  507.105531][T24236] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  507.130257][T24236] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 0
[  507.142816][T24781] FAULT_INJECTION: forcing a failure.
[  507.142816][T24781] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  507.156045][T24781] CPU: 1 UID: 0 PID: 24781 Comm: syz.5.7041 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(voluntary) 
[  507.156078][T24781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  507.156092][T24781] Call Trace:
[  507.156098][T24781]  <TASK>
[  507.156105][T24781]  __dump_stack+0x1d/0x30
[  507.156136][T24781]  dump_stack_lvl+0xe8/0x140
[  507.156160][T24781]  dump_stack+0x15/0x1b
[  507.156181][T24781]  should_fail_ex+0x265/0x280
[  507.156222][T24781]  should_fail+0xb/0x20
[  507.156336][T24781]  should_fail_usercopy+0x1a/0x20
[  507.156358][T24781]  strncpy_from_user+0x25/0x230
[  507.156389][T24781]  ? kmem_cache_alloc_noprof+0x186/0x310
[  507.156421][T24781]  ? getname_flags+0x80/0x3b0
[  507.156554][T24781]  getname_flags+0xae/0x3b0
[  507.156592][T24781]  __se_sys_acct+0x3d/0x490
[  507.156623][T24781]  ? fpregs_assert_state_consistent+0x84/0xa0
[  507.156672][T24781]  __x64_sys_acct+0x1f/0x30
[  507.156702][T24781]  x64_sys_call+0x18cf/0x2fb0
[  507.156728][T24781]  do_syscall_64+0xd0/0x1a0
[  507.156757][T24781]  ? clear_bhb_loop+0x25/0x80
[  507.156855][T24781]  ? clear_bhb_loop+0x25/0x80
[  507.156881][T24781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.156918][T24781] RIP: 0033:0x7f99279de969
[  507.156934][T24781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  507.156952][T24781] RSP: 002b:00007f9926047038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3
[  507.156971][T24781] RAX: ffffffffffffffda RBX: 00007f9927c05fa0 RCX: 00007f99279de969
[  507.156983][T24781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140
[  507.157047][T24781] RBP: 00007f9926047090 R08: 0000000000000000 R09: 0000000000000000
[  507.157099][T24781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  507.157111][T24781] R13: 0000000000000000 R14: 00007f9927c05fa0 R15: 00007fff54287958
[  507.157129][T24781]  </TASK>
[  507.158111][T22570] EXT4-fs error (device loop2): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0
[  507.294174][T24786] loop4: detected capacity change from 0 to 2048
[  507.299209][T22570] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  507.377989][T22570] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error
[  507.494274][T24794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7044'.
[  507.594755][T24804] loop0: detected capacity change from 0 to 1024
[  507.601964][T24804] EXT4-fs: Ignoring removed bh option
[  507.607589][T24804] EXT4-fs: inline encryption not supported
[  507.613897][T24804] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  507.625906][T24804] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  507.636069][T24804] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 2: comm syz.0.7049: lblock 2 mapped to illegal pblock 2 (length 1)
[  507.650892][T24804] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 48: comm syz.0.7049: lblock 0 mapped to illegal pblock 48 (length 1)
[  507.665390][T24804] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.7049: Failed to acquire dquot type 0
[  507.677405][T24804] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  507.686979][T24804] EXT4-fs error (device loop0): ext4_evict_inode:259: inode #11: comm syz.0.7049: mark_inode_dirty error
[  507.698411][T24804] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  507.709070][T24804] EXT4-fs (loop0): 1 orphan inode deleted
[  507.724487][ T8069] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:43: lblock 1 mapped to illegal pblock 1 (length 1)
[  507.746081][ T8069] __quota_error: 19 callbacks suppressed
[  507.746099][ T8069] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  507.760552][ T8069] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:43: Failed to release dquot type 0
[  507.774142][T21018] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0
[  507.788491][T21018] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  507.791377][T24817] loop1: detected capacity change from 0 to 512
[  507.798128][T21018] EXT4-fs error (device loop0): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error
[  507.817330][T24817] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  507.826959][T24817] EXT4-fs (loop1): group descriptors corrupted!
[  507.846044][T24821] loop2: detected capacity change from 0 to 2048
[  507.871205][T24825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7057'.
[  507.929843][T24821] syzkaller0: entered promiscuous mode
[  507.935452][T24821] syzkaller0: entered allmulticast mode
[  508.016701][T24840] 9pnet_fd: Insufficient options for proto=fd
[  508.067761][T24844] loop2: detected capacity change from 0 to 2048
[  508.095420][T24847] loop1: detected capacity change from 0 to 2048
[  508.201070][T24855] vlan2: entered allmulticast mode
[  508.242912][T24857] loop1: detected capacity change from 0 to 512
[  508.267547][T24857] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  508.277377][T24857] EXT4-fs (loop1): group descriptors corrupted!
[  508.411538][T24861] loop4: detected capacity change from 0 to 512
[  508.430920][T24861] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6).
[  508.444325][T24861] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  508.461118][T24861] EXT4-fs (loop4): mount failed
[  508.525665][T24868] loop4: detected capacity change from 0 to 2048
[  508.693978][T24874] 9pnet_fd: Insufficient options for proto=fd
[  508.737202][T24877] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  508.746244][T24877] program syz.4.7077 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  508.785481][T24879] vlan2: entered allmulticast mode
[  508.903050][T24882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7079'.
[  508.929207][T24890] loop2: detected capacity change from 0 to 512
[  508.945426][T24892] loop5: detected capacity change from 0 to 512
[  508.952494][T24892] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  508.964278][T24892] EXT4-fs (loop5): 1 truncate cleaned up
[  508.974075][T24898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  508.985370][T24898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  508.996444][T24890] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  509.015497][T24890] pim6reg: entered allmulticast mode
[  509.022939][T24890] pim6reg: left allmulticast mode
[  509.031982][T24901] loop4: detected capacity change from 0 to 2048
[  509.081870][T24903] 9pnet_fd: Insufficient options for proto=fd
[  509.108022][T24908] vlan2: entered allmulticast mode
[  509.132362][T24910] loop2: detected capacity change from 0 to 2048
[  509.169785][T24916] loop4: detected capacity change from 0 to 2048
[  509.293340][T24933] loop1: detected capacity change from 0 to 512
[  509.326837][T24933] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  509.354483][T24933] pim6reg: entered allmulticast mode
[  509.370251][T24933] pim6reg: left allmulticast mode
[  509.482057][T24942] __nla_validate_parse: 1 callbacks suppressed
[  509.482075][T24942] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7098'.
[  509.537858][T24946] loop0: detected capacity change from 0 to 512
[  509.547348][T24946] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  509.559042][T24946] EXT4-fs (loop0): 1 truncate cleaned up
[  509.589917][T24951] 9pnet_fd: Insufficient options for proto=fd
[  509.626920][T24949] syz!: rxe_newlink: already configured on team_slave_0
[  509.693271][T24958] loop0: detected capacity change from 0 to 1024
[  509.700332][T24958] EXT4-fs: Ignoring removed bh option
[  509.705982][T24958] EXT4-fs: inline encryption not supported
[  509.712509][T24958] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  509.723719][T24958] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  509.752695][T24958] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 2: comm syz.0.7103: lblock 2 mapped to illegal pblock 2 (length 1)
[  509.772699][T24961] loop1: detected capacity change from 0 to 512
[  509.787815][T24958] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  509.796049][T24958] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 48: comm syz.0.7103: lblock 0 mapped to illegal pblock 48 (length 1)
[  509.811720][T24961] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6).
[  509.822009][T24961] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  509.825180][T24958] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  509.838014][T24961] EXT4-fs (loop1): mount failed
[  509.845654][T24958] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.7103: Failed to acquire dquot type 0
[  509.862077][T24958] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  509.872106][T24958] EXT4-fs error (device loop0): ext4_evict_inode:259: inode #11: comm syz.0.7103: mark_inode_dirty error
[  509.886590][T24958] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  509.897029][T24958] EXT4-fs (loop0): 1 orphan inode deleted
[  509.912261][T24965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7105'.
[  509.922618][T24230] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  509.937548][T24230] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  509.946101][T24230] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 0
[  509.970893][T21018] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0
[  509.986200][T21018] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  509.997454][T21018] EXT4-fs error (device loop0): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error
[  510.024525][T24969] loop2: detected capacity change from 0 to 512
[  510.050053][T24972] loop0: detected capacity change from 0 to 2048
[  510.051910][T24969] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  510.070400][T24967] syz!: rxe_newlink: already configured on team_slave_0
[  510.084669][T24969] pim6reg: entered allmulticast mode
[  510.090750][T24969] pim6reg: left allmulticast mode
[  510.107325][T24976] 9pnet_fd: Insufficient options for proto=fd
[  510.158612][T24982] 9pnet_fd: Insufficient options for proto=fd
[  510.269110][T24990] loop2: detected capacity change from 0 to 1024
[  510.292091][T24993] loop1: detected capacity change from 0 to 2048
[  510.302594][T24990] EXT4-fs: Ignoring removed bh option
[  510.308104][T24990] EXT4-fs: inline encryption not supported
[  510.317459][T24990] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  510.329813][T24990] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  510.351640][T24990] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.7113: lblock 2 mapped to illegal pblock 2 (length 1)
[  510.396875][T24990] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  510.411482][T24990] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.7113: lblock 0 mapped to illegal pblock 48 (length 1)
[  510.411648][T24993] syzkaller0: entered promiscuous mode
[  510.431488][T24993] syzkaller0: entered allmulticast mode
[  510.439546][T24990] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  510.441451][T24998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7115'.
[  510.448706][T24990] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.7113: Failed to acquire dquot type 0
[  510.470755][T24990] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  510.473577][T24998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7115'.
[  510.491378][T24990] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.7113: mark_inode_dirty error
[  510.506038][T24990] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  510.517627][T24990] EXT4-fs (loop2): 1 orphan inode deleted
[  510.534470][T24240] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1)
[  510.553601][T24240] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  510.562125][T24240] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:13: Failed to release dquot type 0
[  510.588157][T22570] EXT4-fs error (device loop2): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0
[  510.615890][T25009] loop4: detected capacity change from 0 to 2048
[  510.616988][T22570] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  510.636061][T22570] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error
[  510.661434][T25013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7121'.
[  510.672094][T25013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7121'.
[  510.726950][T25019] loop4: detected capacity change from 0 to 764
[  510.733817][T25019] iso9660: Unknown parameter ''
[  510.736966][T25022] 9pnet_fd: Insufficient options for proto=fd
[  510.757540][T25023] 9pnet_fd: Insufficient options for proto=fd
[  510.799190][T25027] 9pnet_fd: Insufficient options for proto=fd
[  510.822163][T25030] loop4: detected capacity change from 0 to 1024
[  510.857703][T25030] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.7126: missing EA_INODE flag
[  510.886366][T25030] EXT4-fs (loop4): Remounting filesystem read-only
[  510.933269][T25038] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  510.941049][T25038] program syz.2.7129 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  511.014474][T25046] vlan2: entered allmulticast mode
[  511.066852][T25050] loop2: detected capacity change from 0 to 2048
[  511.090285][T25056] loop4: detected capacity change from 0 to 764
[  511.097046][T25056] iso9660: Unknown parameter ''
[  511.109009][T25054] loop1: detected capacity change from 0 to 2048
[  511.172760][T25062] 9pnet_fd: Insufficient options for proto=fd
[  511.197456][T25066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  511.212904][T25064] 9pnet_fd: Insufficient options for proto=fd
[  511.226777][T25066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  511.250241][T25070] loop2: detected capacity change from 0 to 1024
[  511.280520][T25070] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.7143: missing EA_INODE flag
[  511.292500][T25070] EXT4-fs (loop2): Remounting filesystem read-only
[  511.345190][T25087] loop2: detected capacity change from 0 to 128
[  511.367497][T25089] loop4: detected capacity change from 0 to 764
[  511.378886][T25089] iso9660: Unknown parameter ''
[  511.415673][T25094] loop2: detected capacity change from 0 to 2048
[  511.439277][T25094] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  511.450918][T25098] loop4: detected capacity change from 0 to 512
[  511.467108][   T29] audit: type=1400 audit(1747078586.016:20058): avc:  denied  { create } for  pid=25093 comm="syz.2.7152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  511.516744][T25096] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  511.547191][T25098] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  511.572365][T25098] EXT4-fs (loop4): mount failed
[  511.649534][T25110] loop4: detected capacity change from 0 to 2048
[  511.737301][ T8046] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:33: bg 0: block 345: padding at end of block bitmap is not set
[  511.759307][T25114] loop0: detected capacity change from 0 to 2048
[  511.827359][ T8046] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1016 with error 117
[  511.840192][ T8046] EXT4-fs (loop2): This should not happen!! Data will be lost
[  511.840192][ T8046] 
[  511.875422][T25121] loop5: detected capacity change from 0 to 2048
[  511.914178][T25114] syzkaller0: entered promiscuous mode
[  511.919725][T25114] syzkaller0: entered allmulticast mode
[  511.985048][ T8046] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1032 with max blocks 21 with error 28
[  511.997726][ T8046] EXT4-fs (loop2): This should not happen!! Data will be lost
[  511.997726][ T8046] 
[  512.007421][ T8046] EXT4-fs (loop2): Total free blocks count 0
[  512.013436][ T8046] EXT4-fs (loop2): Free/Dirty block details
[  512.019412][ T8046] EXT4-fs (loop2): free_blocks=0
[  512.024409][ T8046] EXT4-fs (loop2): dirty_blocks=32
[  512.029532][ T8046] EXT4-fs (loop2): Block reservation details
[  512.035625][ T8046] EXT4-fs (loop2): i_reserved_data_blocks=2
[  512.210087][T25127] loop1: detected capacity change from 0 to 1024
[  512.248425][T25127] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.7160: missing EA_INODE flag
[  512.262376][T25127] EXT4-fs (loop1): Remounting filesystem read-only
[  512.279515][T25127] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25127 comm=syz.1.7160
[  512.331931][T25131] loop0: detected capacity change from 0 to 512
[  512.339469][T25131] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  512.369693][T25131] EXT4-fs (loop0): 1 truncate cleaned up
[  512.420061][T25138] loop0: detected capacity change from 0 to 764
[  512.428583][T25138] iso9660: Unknown parameter ''
[  512.471273][T25142] loop0: detected capacity change from 0 to 2048
[  512.498715][T25142] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  512.527877][T25147] loop4: detected capacity change from 0 to 2048
[  512.564398][T25151] loop2: detected capacity change from 0 to 512
[  512.571402][T25151] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  512.613299][T25151] EXT4-fs (loop2): 1 truncate cleaned up
[  512.642386][T24288] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:64: bg 0: block 345: padding at end of block bitmap is not set
[  512.676974][T24288] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 254 with error 117
[  512.689597][T24288] EXT4-fs (loop0): This should not happen!! Data will be lost
[  512.689597][T24288] 
[  512.703183][T25147] syzkaller0: entered promiscuous mode
[  512.708804][T25147] syzkaller0: entered allmulticast mode
[  512.759736][   T29] kauditd_printk_skb: 97 callbacks suppressed
[  512.759814][   T29] audit: type=1400 audit(1747078587.306:20155): avc:  denied  { allowed } for  pid=25158 comm="syz.2.7170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  512.815362][   T29] audit: type=1400 audit(1747078587.336:20156): avc:  denied  { create } for  pid=25158 comm="syz.2.7170" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  512.837029][   T29] audit: type=1400 audit(1747078587.336:20157): avc:  denied  { map } for  pid=25158 comm="syz.2.7170" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=75835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  512.861431][   T29] audit: type=1400 audit(1747078587.336:20158): avc:  denied  { read write } for  pid=25158 comm="syz.2.7170" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=75835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  512.869809][T25161] loop2: detected capacity change from 0 to 1024
[  512.908636][T25161] EXT4-fs: Ignoring removed bh option
[  512.914109][T25161] EXT4-fs: inline encryption not supported
[  512.920405][T25161] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  512.936951][T25161] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  512.947362][T25163] loop4: detected capacity change from 0 to 512
[  512.954420][T25161] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.7171: lblock 2 mapped to illegal pblock 2 (length 1)
[  512.971627][T25161] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  512.980061][T25161] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.7171: lblock 0 mapped to illegal pblock 48 (length 1)
[  513.012572][T25163] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6).
[  513.023075][T25163] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  513.039515][   T29] audit: type=1400 audit(1747078587.566:20159): avc:  denied  { read write } for  pid=25167 comm="syz.5.7173" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  513.040052][T25168] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  513.063899][   T29] audit: type=1400 audit(1747078587.566:20160): avc:  denied  { open } for  pid=25167 comm="syz.5.7173" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  513.073732][T25163] EXT4-fs (loop4): mount failed
[  513.101714][T25161] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  513.110525][T25161] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.7171: Failed to acquire dquot type 0
[  513.128893][T25168] program syz.5.7173 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  513.139863][T25161] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  513.156729][T25161] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.7171: mark_inode_dirty error
[  513.180366][T25161] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  513.194846][T25170] loop5: detected capacity change from 0 to 512
[  513.202855][T25170] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  513.215839][T25170] EXT4-fs (loop5): 1 truncate cleaned up
[  513.243457][T25161] EXT4-fs (loop2): 1 orphan inode deleted
[  513.252794][   T29] audit: type=1400 audit(1747078587.796:20161): avc:  denied  { cpu } for  pid=25172 comm="syz.5.7175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  513.281766][T24240] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1)
[  513.313790][T24240] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:13: Failed to release dquot type 0
[  513.327911][T22570] EXT4-fs error (device loop2): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0
[  513.340988][T25176] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  513.341054][T22570] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  513.358835][T25178] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7178'.
[  513.362185][T22570] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error
[  513.428575][T25185] loop4: detected capacity change from 0 to 512
[  513.435584][T25185] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  513.451175][T25190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  513.461874][T25190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  513.462195][T25185] EXT4-fs (loop4): 1 truncate cleaned up
[  513.552048][T25199] loop4: detected capacity change from 0 to 512
[  513.559052][T25197] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  513.568407][T25197] program syz.5.7184 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  513.577899][T25199] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  513.605905][T25199] EXT4-fs (loop4): 1 truncate cleaned up
[  513.619435][T25204] loop5: detected capacity change from 0 to 512
[  513.649743][T25208] loop2: detected capacity change from 0 to 1024
[  513.656904][T25208] EXT4-fs: Ignoring removed bh option
[  513.662428][T25208] EXT4-fs: inline encryption not supported
[  513.669415][T25204] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  513.675664][T25208] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  513.685880][T25204] EXT4-fs (loop5): mount failed
[  513.697111][T25208] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  513.708599][T25208] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.7190: lblock 2 mapped to illegal pblock 2 (length 1)
[  513.725935][T25208] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.7190: lblock 0 mapped to illegal pblock 48 (length 1)
[  513.740436][T25208] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.7190: Failed to acquire dquot type 0
[  513.752931][T25208] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  513.767135][T25208] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.7190: mark_inode_dirty error
[  513.793397][T25208] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  513.804357][T25208] EXT4-fs (loop2): 1 orphan inode deleted
[  513.814726][T24240] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1)
[  513.830445][T24240] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:13: Failed to release dquot type 0
[  513.858756][T22570] EXT4-fs error (device loop2): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0
[  513.871803][T22570] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  513.881408][T22570] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error
[  513.891498][T25227] loop0: detected capacity change from 0 to 256
[  514.026489][T25236] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  514.041128][T25234] loop2: detected capacity change from 0 to 2048
[  514.047847][T25236] program syz.1.7199 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  514.074718][T25234] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  514.121201][T25244] loop1: detected capacity change from 0 to 1024
[  514.136301][T25244] EXT4-fs: Ignoring removed bh option
[  514.141901][T25244] EXT4-fs: inline encryption not supported
[  514.168501][T25244] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  514.204252][T25244] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  514.217573][T25244] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 2: comm syz.1.7202: lblock 2 mapped to illegal pblock 2 (length 1)
[  514.234441][T24230] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set
[  514.255824][T25244] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 48: comm syz.1.7202: lblock 0 mapped to illegal pblock 48 (length 1)
[  514.281103][T25244] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.7202: Failed to acquire dquot type 0
[  514.294869][T24230] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 157 with error 117
[  514.307632][T24230] EXT4-fs (loop2): This should not happen!! Data will be lost
[  514.307632][T24230] 
[  514.317518][T25244] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  514.344582][T25244] EXT4-fs error (device loop1): ext4_evict_inode:259: inode #11: comm syz.1.7202: mark_inode_dirty error
[  514.357158][T25244] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  514.368939][T25244] EXT4-fs (loop1): 1 orphan inode deleted
[  514.384444][T24230] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  514.414757][T24230] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 0
[  514.454827][T22246] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0
[  514.467837][T22246] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  514.499149][T22246] EXT4-fs error (device loop1): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error
[  514.566591][T25251] loop4: detected capacity change from 0 to 1024
[  514.573870][T25251] EXT4-fs: Ignoring removed bh option
[  514.579362][T25251] EXT4-fs: inline encryption not supported
[  514.637330][T25251] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  514.660494][T25253] loop1: detected capacity change from 0 to 512
[  514.669024][T25251] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  514.678414][T25251] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 2: comm syz.4.7204: lblock 2 mapped to illegal pblock 2 (length 1)
[  514.695005][T25251] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 48: comm syz.4.7204: lblock 0 mapped to illegal pblock 48 (length 1)
[  514.727933][T25251] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7204: Failed to acquire dquot type 0
[  514.740119][T25253] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  514.757306][T25251] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  514.767860][T25253] EXT4-fs (loop1): mount failed
[  514.771803][T25258] loop5: detected capacity change from 0 to 2048
[  514.772867][T25251] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm syz.4.7204: mark_inode_dirty error
[  514.825640][T25251] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  514.836078][T25251] EXT4-fs (loop4): 1 orphan inode deleted
[  514.864479][T24240] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1)
[  514.881128][T24240] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:13: Failed to release dquot type 0
[  514.964653][T25268] loop1: detected capacity change from 0 to 128
[  515.007835][T21749] EXT4-fs error (device loop4): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0
[  515.028212][T21749] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  515.037938][T21749] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error
[  515.783551][T25298] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7220'.
[  516.012220][T25311] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7225'.
[  516.088949][T25320] vlan2: entered allmulticast mode
[  516.225230][T25322] loop2: detected capacity change from 0 to 2048
[  516.248830][T25322] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  516.403532][T25318] serio: Serial port ptm0
[  516.510065][T25346] loop0: detected capacity change from 0 to 2048
[  517.108191][T25365] loop5: detected capacity change from 0 to 512
[  517.141495][T25369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7246'.
[  517.151344][T25369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7246'.
[  517.168361][T25365] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  517.184055][T24235] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set
[  517.253402][T25365] pim6reg: entered allmulticast mode
[  517.273730][T24235] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117
[  517.286831][T24235] EXT4-fs (loop2): This should not happen!! Data will be lost
[  517.286831][T24235] 
[  517.310813][T25377] loop1: detected capacity change from 0 to 2048
[  517.318908][T25365] pim6reg: left allmulticast mode
[  517.361867][T24254] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28
[  517.374762][T24254] EXT4-fs (loop2): This should not happen!! Data will be lost
[  517.374762][T24254] 
[  517.384529][T24254] EXT4-fs (loop2): Total free blocks count 0
[  517.390578][T24254] EXT4-fs (loop2): Free/Dirty block details
[  517.396513][T24254] EXT4-fs (loop2): free_blocks=0
[  517.401558][T24254] EXT4-fs (loop2): dirty_blocks=2048
[  517.406899][T24254] EXT4-fs (loop2): Block reservation details
[  517.412897][T24254] EXT4-fs (loop2): i_reserved_data_blocks=128
[  517.450305][T25383] loop1: detected capacity change from 0 to 2048
[  517.473852][T25383] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  517.578816][T25388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  517.623801][T24235] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set
[  517.642309][T25388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  517.669623][T25393] 9pnet_fd: Insufficient options for proto=fd
[  517.683582][T24235] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 162 with error 117
[  517.696235][T24235] EXT4-fs (loop1): This should not happen!! Data will be lost
[  517.696235][T24235] 
[  517.778234][T25400] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  517.787866][T25400] program syz.0.7255 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  517.806738][   T29] kauditd_printk_skb: 233 callbacks suppressed
[  517.806753][   T29] audit: type=1400 audit(1747078592.326:20383): avc:  denied  { read write } for  pid=25399 comm="syz.0.7255" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  517.837287][   T29] audit: type=1400 audit(1747078592.326:20384): avc:  denied  { open } for  pid=25399 comm="syz.0.7255" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  517.861885][   T29] audit: type=1400 audit(1747078592.356:20385): avc:  denied  { execute } for  pid=25391 comm="syz.5.7252" path="/146/cpu.stat" dev="tmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  517.926435][T25403] loop0: detected capacity change from 0 to 128
[  517.967793][T25403] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512)
[  517.975381][T25403] FAT-fs (loop0): Filesystem has been set read-only
[  518.004437][   T29] audit: type=1400 audit(1747078592.476:20386): avc:  denied  { mounton } for  pid=25402 comm="syz.0.7257" path="/314/file1" dev="tmpfs" ino=1793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  518.027334][   T29] audit: type=1400 audit(1747078592.476:20387): avc:  denied  { create } for  pid=25382 comm="syz.1.7250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  518.048236][   T29] audit: type=1400 audit(1747078592.496:20388): avc:  denied  { write } for  pid=25382 comm="syz.1.7250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  518.069226][   T29] audit: type=1400 audit(1747078592.496:20389): avc:  denied  { read } for  pid=25382 comm="syz.1.7250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  518.090347][   T29] audit: type=1400 audit(1747078592.516:20390): avc:  denied  { mount } for  pid=25402 comm="syz.0.7257" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  518.112783][   T29] audit: type=1400 audit(1747078592.536:20391): avc:  denied  { execmem } for  pid=25406 comm="syz.5.7258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  518.132309][   T29] audit: type=1400 audit(1747078592.536:20392): avc:  denied  { unmount } for  pid=21018 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  518.191362][T25409] FAULT_INJECTION: forcing a failure.
[  518.191362][T25409] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  518.204613][T25409] CPU: 1 UID: 0 PID: 25409 Comm: syz.0.7259 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(voluntary) 
[  518.204708][T25409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  518.204723][T25409] Call Trace:
[  518.204803][T25409]  <TASK>
[  518.204810][T25409]  __dump_stack+0x1d/0x30
[  518.204832][T25409]  dump_stack_lvl+0xe8/0x140
[  518.204850][T25409]  dump_stack+0x15/0x1b
[  518.204865][T25409]  should_fail_ex+0x265/0x280
[  518.204979][T25409]  should_fail+0xb/0x20
[  518.205075][T25409]  should_fail_usercopy+0x1a/0x20
[  518.205092][T25409]  _copy_from_iter+0xcf/0xdd0
[  518.205139][T25409]  ? alloc_pages_mpol+0x202/0x250
[  518.205170][T25409]  copy_page_from_iter+0x15a/0x290
[  518.205196][T25409]  tun_get_user+0x5c7/0x24d0
[  518.205230][T25409]  ? ref_tracker_alloc+0x1f2/0x2f0
[  518.205333][T25409]  tun_chr_write_iter+0x15e/0x210
[  518.205363][T25409]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  518.205458][T25409]  vfs_write+0x49d/0x8d0
[  518.205486][T25409]  ksys_write+0xda/0x1a0
[  518.205512][T25409]  __x64_sys_write+0x40/0x50
[  518.205543][T25409]  x64_sys_call+0x2cdd/0x2fb0
[  518.205640][T25409]  do_syscall_64+0xd0/0x1a0
[  518.205667][T25409]  ? clear_bhb_loop+0x25/0x80
[  518.205693][T25409]  ? clear_bhb_loop+0x25/0x80
[  518.205737][T25409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.205767][T25409] RIP: 0033:0x7fc01397d41f
[  518.205784][T25409] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  518.205806][T25409] RSP: 002b:00007fc011fe7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  518.205879][T25409] RAX: ffffffffffffffda RBX: 00007fc013ba5fa0 RCX: 00007fc01397d41f
[  518.205894][T25409] RDX: 000000000000001a RSI: 0000200000000100 RDI: 00000000000000c8
[  518.205908][T25409] RBP: 00007fc011fe7090 R08: 0000000000000000 R09: 0000000000000000
[  518.205923][T25409] R10: 000000000000001a R11: 0000000000000293 R12: 0000000000000001
[  518.205998][T25409] R13: 0000000000000000 R14: 00007fc013ba5fa0 R15: 00007fff3b016858
[  518.206015][T25409]  </TASK>
[  518.216614][T25411] loop4: detected capacity change from 0 to 2048
[  518.425559][T25415] loop2: detected capacity change from 0 to 1024
[  518.463860][T25415] EXT4-fs: Ignoring removed bh option
[  518.469497][T25415] EXT4-fs: inline encryption not supported
[  518.496411][T25415] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  518.560833][T25415] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  518.570425][T25415] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.7261: lblock 2 mapped to illegal pblock 2 (length 1)
[  518.616547][T24254] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 178 with max blocks 1 with error 117
[  518.629184][T24254] EXT4-fs (loop1): This should not happen!! Data will be lost
[  518.629184][T24254] 
[  518.650237][T25421] loop4: detected capacity change from 0 to 512
[  518.672524][T25415] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.7261: lblock 0 mapped to illegal pblock 48 (length 1)
[  518.691369][T25415] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.7261: Failed to acquire dquot type 0
[  518.703133][T25415] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  518.714715][T25415] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.7261: mark_inode_dirty error
[  518.727789][T25415] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  518.738088][T25415] EXT4-fs (loop2): 1 orphan inode deleted
[  518.764458][T25421] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  518.776811][T24254] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 1)
[  518.809418][T25425] 9pnet_fd: Insufficient options for proto=fd
[  518.826019][T25421] EXT4-fs (loop4): 1 truncate cleaned up
[  518.855041][T24254] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:26: Failed to release dquot type 0
[  518.893828][T25428] loop1: detected capacity change from 0 to 2048
[  518.905450][T22570] EXT4-fs error (device loop2): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0
[  518.974575][T22570] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  519.016532][T22570] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error
[  519.063194][T25438] loop2: detected capacity change from 0 to 1024
[  519.087485][T25437] loop0: detected capacity change from 0 to 2048
[  519.094790][T25438] EXT4-fs: Ignoring removed bh option
[  519.100230][T25438] EXT4-fs: inline encryption not supported
[  519.126211][T25438] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  519.159584][T25438] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  519.197521][T25438] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.7267: lblock 2 mapped to illegal pblock 2 (length 1)
[  519.219576][T25438] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.7267: lblock 0 mapped to illegal pblock 48 (length 1)
[  519.237934][T25448] loop4: detected capacity change from 0 to 2048
[  519.245799][T25438] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.7267: Failed to acquire dquot type 0
[  519.290696][T25438] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  519.302182][T25450] loop4: detected capacity change from 0 to 512
[  519.310611][T25438] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.7267: mark_inode_dirty error
[  519.335047][T25450] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  519.344691][T25438] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  519.357710][T25450] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.7272: invalid block
[  519.370380][T25450] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.7272: invalid indirect mapped block 4294967295 (level 1)
[  519.385974][T25438] EXT4-fs (loop2): 1 orphan inode deleted
[  519.392237][T25438] EXT4-fs mount: 111 callbacks suppressed
[  519.392251][T25438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  519.412055][T24235] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  519.427629][T25450] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.7272: invalid indirect mapped block 4294967295 (level 1)
[  519.446149][T24235] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 0
[  519.462109][T25450] EXT4-fs (loop4): 2 truncates cleaned up
[  519.468301][T25450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  519.478454][T25453] loop5: detected capacity change from 0 to 764
[  519.482265][T22570] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.492486][T25453] iso9660: Unknown parameter ''
[  519.496834][T22570] EXT4-fs error (device loop2): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0
[  519.514856][T22570] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  519.526886][T22570] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error
[  519.545000][T25450] block device autoloading is deprecated and will be removed.
[  519.553066][T25455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7275'.
[  519.563311][T25455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7275'.
[  519.566256][T25457] loop2: detected capacity change from 0 to 2048
[  519.572576][T25450] syz.4.7272: attempt to access beyond end of device
[  519.572576][T25450] md33: rw=2048, sector=0, nr_sectors = 8 limit=0
[  519.628637][T25459] loop2: detected capacity change from 0 to 2048
[  519.637686][T21749] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.649075][T25459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  519.701298][T25468] 9pnet_fd: Insufficient options for proto=fd
[  519.708276][T22246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.708382][T25466] loop5: detected capacity change from 0 to 2048
[  519.735063][T25459] syzkaller0: entered promiscuous mode
[  519.740598][T25459] syzkaller0: entered allmulticast mode
[  519.757135][T25466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  519.776519][T25471] loop1: detected capacity change from 0 to 512
[  519.783320][T25466] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  519.847035][T25471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  519.898505][T25471] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  519.917434][T25471] pim6reg: entered allmulticast mode
[  519.923559][T25471] pim6reg: left allmulticast mode
[  519.935088][T21018] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.008497][T24235] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set
[  520.054389][T22246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.077151][T24235] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 281 with error 117
[  520.089874][T24235] EXT4-fs (loop5): This should not happen!! Data will be lost
[  520.089874][T24235] 
[  520.115146][T22570] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.203722][T25491] loop2: detected capacity change from 0 to 764
[  520.268079][T25491] iso9660: Unknown parameter ''
[  520.360505][T25501] loop1: detected capacity change from 0 to 2048
[  520.382613][T25503] loop2: detected capacity change from 0 to 2048
[  520.417035][T25503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  520.464468][T25507] loop1: detected capacity change from 0 to 2048
[  520.705562][T25507] loop1: detected capacity change from 0 to 8192
[  520.891707][T24254] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 297 with max blocks 1 with error 117
[  520.904215][T24254] EXT4-fs (loop5): This should not happen!! Data will be lost
[  520.904215][T24254] 
[  520.927295][T23019] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.982502][T25515] loop4: detected capacity change from 0 to 512
[  521.027496][T25515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  521.049511][T25522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  521.058166][T25522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  521.066576][T25515] ext4 filesystem being mounted at /252/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  521.093092][T25515] pim6reg: entered allmulticast mode
[  521.099550][T25515] pim6reg: left allmulticast mode
[  521.186110][T21749] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.226571][T22570] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.288415][T25532] loop2: detected capacity change from 0 to 764
[  521.369273][T25534] vlan2: entered allmulticast mode
[  521.378621][T25532] iso9660: Unknown parameter ''
[  521.525817][T25551] loop1: detected capacity change from 0 to 1024
[  521.533994][T25549] loop4: detected capacity change from 0 to 2048
[  521.557049][T25551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  521.571362][T25549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  521.587168][T25549] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  521.604922][T25551] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.7306: missing EA_INODE flag
[  521.618315][T25551] EXT4-fs (loop1): Remounting filesystem read-only
[  521.627561][T25557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7308'.
[  521.640418][T25551] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25551 comm=syz.1.7306
[  521.686567][T25558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7308'.
[  521.704414][T22246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.768101][T25561] loop1: detected capacity change from 0 to 512
[  521.785002][T25561] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  521.826260][T25561] EXT4-fs (loop1): 1 truncate cleaned up
[  521.832587][T25561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  521.879459][T25561] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[  521.989283][T22246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.049243][T25565] 9pnet_fd: Insufficient options for proto=fd
[  522.078890][T24254] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:26: bg 0: block 345: padding at end of block bitmap is not set
[  522.113241][T24254] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 796 with error 117
[  522.126012][T24254] EXT4-fs (loop4): This should not happen!! Data will be lost
[  522.126012][T24254] 
[  522.224515][T24254] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 812 with max blocks 1 with error 28
[  522.236933][T24254] EXT4-fs (loop4): This should not happen!! Data will be lost
[  522.236933][T24254] 
[  522.246632][T24254] EXT4-fs (loop4): Total free blocks count 0
[  522.252680][T24254] EXT4-fs (loop4): Free/Dirty block details
[  522.258650][T24254] EXT4-fs (loop4): free_blocks=0
[  522.263758][T24254] EXT4-fs (loop4): dirty_blocks=16
[  522.269004][T24254] EXT4-fs (loop4): Block reservation details
[  522.373552][T25577] loop2: detected capacity change from 0 to 1024
[  522.385865][T25577] EXT4-fs: Ignoring removed bh option
[  522.391408][T25577] EXT4-fs: inline encryption not supported
[  522.422484][T25577] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  522.487521][T25584] loop1: detected capacity change from 0 to 512
[  522.488268][T25577] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  522.503261][T25584] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  522.515747][T25588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  522.528271][T25577] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.7314: lblock 2 mapped to illegal pblock 2 (length 1)
[  522.553757][T25584] EXT4-fs (loop1): 1 truncate cleaned up
[  522.564238][T25588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  522.576507][T25584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  522.590396][T25591] 9pnet_fd: Insufficient options for proto=fd
[  522.597804][T25577] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.7314: lblock 0 mapped to illegal pblock 48 (length 1)
[  522.630708][T25577] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.7314: Failed to acquire dquot type 0
[  522.664425][T25577] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  522.682352][T25577] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.7314: mark_inode_dirty error
[  522.715217][T22246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.723729][T25577] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  522.736233][T25577] EXT4-fs (loop2): 1 orphan inode deleted
[  522.742373][T25577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  522.760810][T24254] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 1)
[  522.776594][T24254] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:26: Failed to release dquot type 0
[  522.786788][T25599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  522.807629][T22570] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.817896][T22570] EXT4-fs error (device loop2): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0
[  522.831044][T22570] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  522.840935][T22570] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error
[  522.886058][T25606] FAULT_INJECTION: forcing a failure.
[  522.886058][T25606] name failslab, interval 1, probability 0, space 0, times 0
[  522.898823][T25606] CPU: 1 UID: 0 PID: 25606 Comm: syz.2.7326 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(voluntary) 
[  522.898855][T25606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  522.898885][T25606] Call Trace:
[  522.898892][T25606]  <TASK>
[  522.898901][T25606]  __dump_stack+0x1d/0x30
[  522.898926][T25606]  dump_stack_lvl+0xe8/0x140
[  522.898950][T25606]  dump_stack+0x15/0x1b
[  522.898971][T25606]  should_fail_ex+0x265/0x280
[  522.899010][T25606]  should_failslab+0x8c/0xb0
[  522.899118][T25606]  kmem_cache_alloc_node_noprof+0x57/0x320
[  522.899160][T25606]  ? __alloc_skb+0x101/0x320
[  522.899199][T25606]  __alloc_skb+0x101/0x320
[  522.899250][T25606]  netlink_alloc_large_skb+0xba/0xf0
[  522.899288][T25606]  netlink_sendmsg+0x3cf/0x6b0
[  522.899331][T25606]  ? __pfx_netlink_sendmsg+0x10/0x10
[  522.899376][T25606]  __sock_sendmsg+0x142/0x180
[  522.899401][T25606]  ____sys_sendmsg+0x31e/0x4e0
[  522.899422][T25606]  ___sys_sendmsg+0x17b/0x1d0
[  522.899501][T25606]  __x64_sys_sendmsg+0xd4/0x160
[  522.899531][T25606]  x64_sys_call+0x2999/0x2fb0
[  522.899590][T25606]  do_syscall_64+0xd0/0x1a0
[  522.899616][T25606]  ? clear_bhb_loop+0x25/0x80
[  522.899642][T25606]  ? clear_bhb_loop+0x25/0x80
[  522.899667][T25606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.899696][T25606] RIP: 0033:0x7f3af4e0e969
[  522.899713][T25606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  522.899731][T25606] RSP: 002b:00007f3af3477038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  522.899749][T25606] RAX: ffffffffffffffda RBX: 00007f3af5035fa0 RCX: 00007f3af4e0e969
[  522.899761][T25606] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  522.899773][T25606] RBP: 00007f3af3477090 R08: 0000000000000000 R09: 0000000000000000
[  522.899785][T25606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  522.899823][T25606] R13: 0000000000000000 R14: 00007f3af5035fa0 R15: 00007ffdbb1ba438
[  522.899844][T25606]  </TASK>
[  522.911983][T25608] vlan2: entered allmulticast mode
[  522.988181][   T29] kauditd_printk_skb: 175 callbacks suppressed
[  522.988205][   T29] audit: type=1400 audit(1747078597.536:20559): avc:  denied  { read write } for  pid=25609 comm="syz.2.7328" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  523.141308][   T29] audit: type=1400 audit(1747078597.536:20560): avc:  denied  { open } for  pid=25609 comm="syz.2.7328" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  523.176797][T25612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7329'.
[  523.201987][T25613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7329'.
[  523.251415][T25622] 9pnet_fd: Insufficient options for proto=fd
[  523.276565][T25625] loop4: detected capacity change from 0 to 512
[  523.309345][T25625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  523.324516][T25625] ext4 filesystem being mounted at /261/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  523.339491][   T29] audit: type=1400 audit(1747078597.886:20561): avc:  denied  { create } for  pid=25623 comm="syz.4.7334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  523.360295][   T29] audit: type=1400 audit(1747078597.916:20562): avc:  denied  { setopt } for  pid=25623 comm="syz.4.7334" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  523.384117][T25625] pim6reg: entered allmulticast mode
[  523.391868][T25625] pim6reg: left allmulticast mode
[  523.427827][   T29] audit: type=1400 audit(1747078597.976:20563): avc:  denied  { create } for  pid=25629 comm="syz.5.7335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  523.455449][   T29] audit: type=1400 audit(1747078597.976:20564): avc:  denied  { setopt } for  pid=25629 comm="syz.5.7335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  523.475335][   T29] audit: type=1400 audit(1747078597.976:20565): avc:  denied  { write } for  pid=25629 comm="syz.5.7335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  523.495073][   T29] audit: type=1326 audit(1747078597.976:20566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25629 comm="syz.5.7335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99279de969 code=0x7ffc0000
[  523.518748][   T29] audit: type=1326 audit(1747078597.976:20567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25629 comm="syz.5.7335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99279de969 code=0x7ffc0000
[  523.542524][   T29] audit: type=1326 audit(1747078597.976:20568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25629 comm="syz.5.7335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f99279de969 code=0x7ffc0000
[  523.614172][T21749] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.632897][T25636] FAULT_INJECTION: forcing a failure.
[  523.632897][T25636] name failslab, interval 1, probability 0, space 0, times 0
[  523.645693][T25636] CPU: 1 UID: 0 PID: 25636 Comm: syz.0.7337 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(voluntary) 
[  523.645731][T25636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  523.645794][T25636] Call Trace:
[  523.645801][T25636]  <TASK>
[  523.645808][T25636]  __dump_stack+0x1d/0x30
[  523.645830][T25636]  dump_stack_lvl+0xe8/0x140
[  523.645852][T25636]  dump_stack+0x15/0x1b
[  523.645952][T25636]  should_fail_ex+0x265/0x280
[  523.645990][T25636]  should_failslab+0x8c/0xb0
[  523.646110][T25636]  kmem_cache_alloc_node_noprof+0x57/0x320
[  523.646152][T25636]  ? __alloc_skb+0x101/0x320
[  523.646184][T25636]  __alloc_skb+0x101/0x320
[  523.646274][T25636]  netlink_alloc_large_skb+0xba/0xf0
[  523.646310][T25636]  netlink_sendmsg+0x3cf/0x6b0
[  523.646357][T25636]  ? __pfx_netlink_sendmsg+0x10/0x10
[  523.646392][T25636]  __sock_sendmsg+0x142/0x180
[  523.646420][T25636]  ____sys_sendmsg+0x31e/0x4e0
[  523.646504][T25636]  ___sys_sendmsg+0x17b/0x1d0
[  523.646546][T25636]  __x64_sys_sendmsg+0xd4/0x160
[  523.646594][T25636]  x64_sys_call+0x2999/0x2fb0
[  523.646614][T25636]  do_syscall_64+0xd0/0x1a0
[  523.646691][T25636]  ? clear_bhb_loop+0x25/0x80
[  523.646784][T25636]  ? clear_bhb_loop+0x25/0x80
[  523.646840][T25636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  523.646866][T25636] RIP: 0033:0x7fc01397e969
[  523.646885][T25636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  523.646908][T25636] RSP: 002b:00007fc011fe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  523.646930][T25636] RAX: ffffffffffffffda RBX: 00007fc013ba5fa0 RCX: 00007fc01397e969
[  523.646986][T25636] RDX: 0000000000000800 RSI: 0000200000000140 RDI: 0000000000000003
[  523.646998][T25636] RBP: 00007fc011fe7090 R08: 0000000000000000 R09: 0000000000000000
[  523.647010][T25636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  523.647021][T25636] R13: 0000000000000000 R14: 00007fc013ba5fa0 R15: 00007fff3b016858
[  523.647050][T25636]  </TASK>
[  523.905973][T25651] loop0: detected capacity change from 0 to 512
[  523.913147][T25651] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  523.934817][T25654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  523.949496][T25656] loop2: detected capacity change from 0 to 512
[  523.954616][T25654] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  523.958375][T25656] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  523.977229][T25651] EXT4-fs (loop0): 1 truncate cleaned up
[  523.983707][T25651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  523.998549][T25656] EXT4-fs (loop2): 1 truncate cleaned up
[  524.005385][T25656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  524.089936][T21018] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.113109][T22570] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.143017][T25664] loop2: detected capacity change from 0 to 1024
[  524.150446][T25664] EXT4-fs: Ignoring removed bh option
[  524.156080][T25664] EXT4-fs: inline encryption not supported
[  524.162318][T25664] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  524.176178][T25664] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  524.182237][T25667] loop0: detected capacity change from 0 to 512
[  524.185475][T25664] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.7346: lblock 2 mapped to illegal pblock 2 (length 1)
[  524.191352][T25667] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  524.208705][T25664] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.7346: lblock 0 mapped to illegal pblock 48 (length 1)
[  524.230969][T25664] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.7346: Failed to acquire dquot type 0
[  524.243250][T25667] EXT4-fs (loop0): 1 truncate cleaned up
[  524.251068][T25667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  524.264547][T25664] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  524.276583][T25664] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.7346: mark_inode_dirty error
[  524.300414][T25664] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  524.314420][T25664] EXT4-fs (loop2): 1 orphan inode deleted
[  524.320551][T25664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  524.337979][T24269] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:48: lblock 1 mapped to illegal pblock 1 (length 1)
[  524.360684][T24269] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:48: Failed to release dquot type 0
[  524.375108][T21018] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.408445][T22570] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.417693][T22570] EXT4-fs error (device loop2): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0
[  524.431947][T22570] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  524.443394][T22570] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error
[  524.567931][T25677] loop2: detected capacity change from 0 to 2048
[  524.618731][T25677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  524.705267][T25691] loop5: detected capacity change from 0 to 512
[  524.770959][T25691] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  524.882343][T25691] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.7355: invalid block
[  524.921941][T25699] vlan2: entered allmulticast mode
[  524.934593][T25691] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7355: invalid indirect mapped block 4294967295 (level 1)
[  524.975056][T25701] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  524.992888][T25691] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7355: invalid indirect mapped block 4294967295 (level 1)
[  525.026117][T25702] program syz.4.7359 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  525.043680][T25691] EXT4-fs (loop5): 2 truncates cleaned up
[  525.062504][T25691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  525.120708][T25704] syzkaller0: entered promiscuous mode
[  525.126585][T25704] syzkaller0: entered allmulticast mode
[  525.151399][T23019] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  525.175739][T25710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  525.186281][T25710] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  525.247663][T25714] gtp0: entered allmulticast mode
[  525.303966][T25716] loop1: detected capacity change from 0 to 1024
[  525.312034][T25716] EXT4-fs: Ignoring removed bh option
[  525.317669][T25716] EXT4-fs: inline encryption not supported
[  525.324829][T25716] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  525.352303][T25716] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  525.362284][T25716] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 2: comm syz.1.7366: lblock 2 mapped to illegal pblock 2 (length 1)
[  525.384380][T25716] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 48: comm syz.1.7366: lblock 0 mapped to illegal pblock 48 (length 1)
[  525.399258][T25716] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.7366: Failed to acquire dquot type 0
[  525.413973][T25716] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  525.427115][T22570] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  525.427396][T25724] loop4: detected capacity change from 0 to 512
[  525.442603][T25716] EXT4-fs error (device loop1): ext4_evict_inode:259: inode #11: comm syz.1.7366: mark_inode_dirty error
[  525.457374][T25716] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  525.477759][T25716] EXT4-fs (loop1): 1 orphan inode deleted
[  525.486327][T25724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  525.499130][T24269] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:48: lblock 1 mapped to illegal pblock 1 (length 1)
[  525.499294][T25726] loop2: detected capacity change from 0 to 512
[  525.514177][T25716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  525.533244][T25724] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  525.536473][T25726] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  525.544360][T24269] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:48: Failed to release dquot type 0
[  525.583041][T22246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  525.590587][T25726] EXT4-fs (loop2): 1 truncate cleaned up
[  525.598746][T25726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  525.621417][T22246] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0
[  525.639051][T22246] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  525.648892][T22246] EXT4-fs error (device loop1): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error
[  525.675318][T25724] vhci_hcd: default hub control req: 600a v0002 i0000 l0
[  525.694098][T25741] 9pnet_fd: Insufficient options for proto=fd
[  525.744600][T25747] loop5: detected capacity change from 0 to 764
[  525.751505][T25747] iso9660: Unknown parameter ''
[  525.761311][T22570] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  525.796243][T25753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7379'.
[  525.820463][T25753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7379'.
[  525.859329][T25757] loop1: detected capacity change from 0 to 2048
[  525.876005][T25757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  526.236008][T21749] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  526.288721][T25770] loop4: detected capacity change from 0 to 1024
[  526.296825][T25770] EXT4-fs: Ignoring removed bh option
[  526.302347][T25770] EXT4-fs: inline encryption not supported
[  526.311636][T25770] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  526.323511][T25770] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  526.334969][T25770] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 2: comm syz.4.7384: lblock 2 mapped to illegal pblock 2 (length 1)
[  526.351133][T25770] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 48: comm syz.4.7384: lblock 0 mapped to illegal pblock 48 (length 1)
[  526.368460][T25770] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7384: Failed to acquire dquot type 0
[  526.380143][T25770] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  526.390974][T25770] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm syz.4.7384: mark_inode_dirty error
[  526.402622][T25770] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  526.414438][T25770] EXT4-fs (loop4): 1 orphan inode deleted
[  526.420583][T25770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  526.444530][T24269] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:48: lblock 1 mapped to illegal pblock 1 (length 1)
[  526.464987][T24269] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:48: Failed to release dquot type 0
[  526.489812][T21749] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.500560][T21749] EXT4-fs error (device loop4): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0
[  526.518865][T21749] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  526.528714][T21749] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error
[  526.594545][T25773] loop4: detected capacity change from 0 to 2048
[  526.707466][T22246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.721718][T25773] loop4: detected capacity change from 0 to 8192
[  526.754213][T25780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  526.771376][T25780] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  527.380580][T25806] loop0: detected capacity change from 0 to 2048
[  527.412013][T25806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  527.722717][T25817] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7401'.
[  527.869082][T25824] FAULT_INJECTION: forcing a failure.
[  527.869082][T25824] name failslab, interval 1, probability 0, space 0, times 0
[  527.882218][T25824] CPU: 1 UID: 0 PID: 25824 Comm: syz.2.7404 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(voluntary) 
[  527.882325][T25824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  527.882341][T25824] Call Trace:
[  527.882350][T25824]  <TASK>
[  527.882358][T25824]  __dump_stack+0x1d/0x30
[  527.882379][T25824]  dump_stack_lvl+0xe8/0x140
[  527.882398][T25824]  dump_stack+0x15/0x1b
[  527.882416][T25824]  should_fail_ex+0x265/0x280
[  527.882453][T25824]  should_failslab+0x8c/0xb0
[  527.882481][T25824]  __kmalloc_cache_node_noprof+0x54/0x320
[  527.882501][T25824]  ? __get_vm_area_node+0x106/0x1d0
[  527.882554][T25824]  __get_vm_area_node+0x106/0x1d0
[  527.882581][T25824]  __vmalloc_node_range_noprof+0x26a/0xdf0
[  527.882651][T25824]  ? copy_process+0x399/0x1f90
[  527.882747][T25824]  ? mod_objcg_state+0x40e/0x530
[  527.882774][T25824]  ? copy_process+0x399/0x1f90
[  527.882799][T25824]  __vmalloc_node_noprof+0x63/0x80
[  527.882828][T25824]  ? copy_process+0x399/0x1f90
[  527.882931][T25824]  dup_task_struct+0x449/0x6a0
[  527.882960][T25824]  ? _parse_integer+0x27/0x40
[  527.882996][T25824]  copy_process+0x399/0x1f90
[  527.883074][T25824]  ? kstrtouint+0x76/0xc0
[  527.883109][T25824]  ? kstrtouint_from_user+0x9f/0xf0
[  527.883143][T25824]  ? __rcu_read_unlock+0x4f/0x70
[  527.883222][T25824]  kernel_clone+0x16c/0x5b0
[  527.883255][T25824]  ? vfs_write+0x75e/0x8d0
[  527.883328][T25824]  __x64_sys_clone+0xe6/0x120
[  527.883361][T25824]  x64_sys_call+0x2c59/0x2fb0
[  527.883385][T25824]  do_syscall_64+0xd0/0x1a0
[  527.883430][T25824]  ? clear_bhb_loop+0x25/0x80
[  527.883459][T25824]  ? clear_bhb_loop+0x25/0x80
[  527.883524][T25824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.883547][T25824] RIP: 0033:0x7f3af4e0e969
[  527.883566][T25824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  527.883649][T25824] RSP: 002b:00007f3af3455fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  527.883668][T25824] RAX: ffffffffffffffda RBX: 00007f3af5036080 RCX: 00007f3af4e0e969
[  527.883679][T25824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040800000
[  527.883700][T25824] RBP: 00007f3af3456090 R08: 0000000000000000 R09: 0000000000000000
[  527.883715][T25824] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  527.883730][T25824] R13: 0000000000000000 R14: 00007f3af5036080 R15: 00007ffdbb1ba438
[  527.883764][T25824]  </TASK>
[  527.883773][T25824] warn_alloc: 1 callbacks suppressed
[  527.883785][T25824] syz.2.7404: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  528.152004][T25824] CPU: 1 UID: 0 PID: 25824 Comm: syz.2.7404 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(voluntary) 
[  528.152103][T25824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  528.152175][T25824] Call Trace:
[  528.152184][T25824]  <TASK>
[  528.152195][T25824]  __dump_stack+0x1d/0x30
[  528.152220][T25824]  dump_stack_lvl+0xe8/0x140
[  528.152243][T25824]  dump_stack+0x15/0x1b
[  528.152309][T25824]  warn_alloc+0x12b/0x1a0
[  528.152342][T25824]  __vmalloc_node_range_noprof+0x28e/0xdf0
[  528.152372][T25824]  ? mod_objcg_state+0x40e/0x530
[  528.152407][T25824]  ? copy_process+0x399/0x1f90
[  528.152441][T25824]  __vmalloc_node_noprof+0x63/0x80
[  528.152464][T25824]  ? copy_process+0x399/0x1f90
[  528.152538][T25824]  dup_task_struct+0x449/0x6a0
[  528.152600][T25824]  ? _parse_integer+0x27/0x40
[  528.152636][T25824]  copy_process+0x399/0x1f90
[  528.152664][T25824]  ? kstrtouint+0x76/0xc0
[  528.152762][T25824]  ? kstrtouint_from_user+0x9f/0xf0
[  528.152798][T25824]  ? __rcu_read_unlock+0x4f/0x70
[  528.152843][T25824]  kernel_clone+0x16c/0x5b0
[  528.152872][T25824]  ? vfs_write+0x75e/0x8d0
[  528.153032][T25824]  __x64_sys_clone+0xe6/0x120
[  528.153068][T25824]  x64_sys_call+0x2c59/0x2fb0
[  528.153095][T25824]  do_syscall_64+0xd0/0x1a0
[  528.153148][T25824]  ? clear_bhb_loop+0x25/0x80
[  528.153169][T25824]  ? clear_bhb_loop+0x25/0x80
[  528.153201][T25824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.153228][T25824] RIP: 0033:0x7f3af4e0e969
[  528.153247][T25824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  528.153270][T25824] RSP: 002b:00007f3af3455fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  528.153288][T25824] RAX: ffffffffffffffda RBX: 00007f3af5036080 RCX: 00007f3af4e0e969
[  528.153300][T25824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040800000
[  528.153372][T25824] RBP: 00007f3af3456090 R08: 0000000000000000 R09: 0000000000000000
[  528.153387][T25824] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  528.153400][T25824] R13: 0000000000000000 R14: 00007f3af5036080 R15: 00007ffdbb1ba438
[  528.153424][T25824]  </TASK>
[  528.153433][T25824] Mem-Info:
[  528.376143][T25824] active_anon:6176 inactive_anon:0 isolated_anon:0
[  528.376143][T25824]  active_file:6019 inactive_file:12747 isolated_file:0
[  528.376143][T25824]  unevictable:0 dirty:197 writeback:1
[  528.376143][T25824]  slab_reclaimable:3282 slab_unreclaimable:22575
[  528.376143][T25824]  mapped:33655 shmem:3352 pagetables:679
[  528.376143][T25824]  sec_pagetables:0 bounce:0
[  528.376143][T25824]  kernel_misc_reclaimable:0
[  528.376143][T25824]  free:1846039 free_pcp:1448 free_cma:0
[  528.422286][T25824] Node 0 active_anon:24704kB inactive_anon:0kB active_file:24076kB inactive_file:50988kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:134620kB dirty:788kB writeback:4kB shmem:13408kB writeback_tmp:0kB kernel_stack:3680kB pagetables:2716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  528.452064][T25824] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  528.481731][T25824] lowmem_reserve[]: 0 2884 7863 7863
[  528.487164][T25824] Node 0 DMA32 free:2950036kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953568kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB
[  528.507204][T25833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7407'.
[  528.515966][T25824] lowmem_reserve[]: 0 0 4978 4978
[  528.525151][   T29] kauditd_printk_skb: 122 callbacks suppressed
[  528.525167][   T29] audit: type=1400 audit(1747078603.046:20682): avc:  denied  { ioctl } for  pid=25832 comm="syz.1.7407" path="socket:[76771]" dev="sockfs" ino=76771 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  528.562511][T25824] Node 0 Normal free:4401436kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:24704kB inactive_anon:0kB active_file:24076kB inactive_file:50988kB unevictable:0kB writepending:792kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:1840kB local_pcp:912kB free_cma:0kB
[  528.592728][T25824] lowmem_reserve[]: 0 0 0 0
[  528.597446][T25824] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  528.610212][T25824] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950036kB
[  528.626684][T25824] Node 0 Normal: 748*4kB (UME) 1110*8kB (UME) 410*16kB (ME) 332*32kB (ME) 288*64kB (ME) 229*128kB (UME) 824*256kB (UME) 824*512kB (UME) 739*1024kB (UME) 109*2048kB (UME) 661*4096kB (UM) = 4397056kB
[  528.646847][T25824] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  528.656286][T25824] 22003 total pagecache pages
[  528.660995][   T29] audit: type=1400 audit(1747078603.216:20683): avc:  denied  { getopt } for  pid=25832 comm="syz.1.7407" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  528.661026][T25824] 0 pages in swap cache
[  528.664516][T25833] (unnamed net_device) (uninitialized): peer notification delay (7) is not a multiple of miimon (5), value rounded to 5 ms
[  528.682152][T25824] Free swap  = 124888kB
[  528.682167][T25824] Total swap = 124996kB
[  528.682177][T25824] 2097051 pages RAM
[  528.713886][T25824] 0 pages HighMem/MovableOnly
[  528.718631][T25824] 80258 pages reserved
[  528.840608][T21018] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  528.851236][T25833] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7407'.
[  528.922340][   T29] audit: type=1400 audit(1747078603.466:20684): avc:  denied  { write } for  pid=25841 comm="syz.0.7406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  528.978684][   T29] audit: type=1400 audit(1747078603.506:20685): avc:  denied  { bind } for  pid=25842 comm="syz.2.7410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  529.029201][T25849] loop2: detected capacity change from 0 to 1024
[  529.048149][T25849] EXT4-fs: Ignoring removed bh option
[  529.053745][T25849] EXT4-fs: inline encryption not supported
[  529.073529][T25849] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  529.084679][   T29] audit: type=1400 audit(1747078603.616:20686): avc:  denied  { accept } for  pid=25851 comm="syz.0.7413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  529.104317][   T29] audit: type=1400 audit(1747078603.616:20687): avc:  denied  { ioctl } for  pid=25851 comm="syz.0.7413" path="socket:[76797]" dev="sockfs" ino=76797 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  529.117990][T25852] loop0: detected capacity change from 0 to 1024
[  529.173613][   T29] audit: type=1400 audit(1747078603.656:20688): avc:  denied  { tracepoint } for  pid=25839 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  529.177040][T25849] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  529.194108][   T29] audit: type=1400 audit(1747078603.696:20689): avc:  denied  { write } for  pid=25839 comm="syz.4.7409" name="protocols" dev="proc" ino=4026532578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  529.243305][T25852] EXT4-fs: Ignoring removed bh option
[  529.259040][T25849] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.7411: lblock 2 mapped to illegal pblock 2 (length 1)
[  529.278505][T25852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  529.292234][T25849] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  529.312015][T25849] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.7411: lblock 0 mapped to illegal pblock 48 (length 1)
[  529.327636][T25849] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  529.336547][T25849] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.7411: Failed to acquire dquot type 0
[  529.349409][T25849] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  529.359348][T25849] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.7411: mark_inode_dirty error
[  529.391105][T25849] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  529.411599][T25849] EXT4-fs (loop2): 1 orphan inode deleted
[  529.418074][T25849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  529.440972][T24243] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1)
[  529.458649][T24243] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:16: Failed to release dquot type 0
[  529.472240][T21018] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  529.472580][T22570] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.534570][T22570] EXT4-fs error (device loop2): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0
[  529.553546][T22570] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  529.577327][T25867] 9pnet_fd: Insufficient options for proto=fd
[  529.584395][T22570] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error
[  529.634516][T25870] 9pnet_fd: Insufficient options for proto=fd
[  529.681746][T25873] loop2: detected capacity change from 0 to 512
[  529.699086][T25875] loop0: detected capacity change from 0 to 512
[  529.707242][T25873] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.7418: invalid indirect mapped block 256 (level 2)
[  529.723244][T25875] EXT4-fs: dax option not supported
[  529.729128][T25873] EXT4-fs (loop2): 2 truncates cleaned up
[  529.737007][T25873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  529.816691][T25879] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7420'.
[  529.928156][T25872] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.7418: bg 0: block 5: invalid block bitmap
[  529.947096][T25873] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748340 > max in inode 15
[  529.965959][T25886] FAULT_INJECTION: forcing a failure.
[  529.965959][T25886] name failslab, interval 1, probability 0, space 0, times 0
[  529.979077][T25886] CPU: 1 UID: 0 PID: 25886 Comm: syz.0.7419 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(voluntary) 
[  529.979106][T25886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  529.979195][T25886] Call Trace:
[  529.979202][T25886]  <TASK>
[  529.979210][T25886]  __dump_stack+0x1d/0x30
[  529.979236][T25886]  dump_stack_lvl+0xe8/0x140
[  529.979276][T25886]  dump_stack+0x15/0x1b
[  529.979292][T25886]  should_fail_ex+0x265/0x280
[  529.979326][T25886]  should_failslab+0x8c/0xb0
[  529.979402][T25886]  kmem_cache_alloc_node_noprof+0x57/0x320
[  529.979456][T25886]  ? __alloc_skb+0x101/0x320
[  529.979487][T25886]  __alloc_skb+0x101/0x320
[  529.979520][T25886]  netlink_alloc_large_skb+0xba/0xf0
[  529.979553][T25886]  netlink_sendmsg+0x3cf/0x6b0
[  529.979618][T25886]  ? __pfx_netlink_sendmsg+0x10/0x10
[  529.979784][T25886]  __sock_sendmsg+0x142/0x180
[  529.979816][T25886]  ____sys_sendmsg+0x31e/0x4e0
[  529.979900][T25886]  ___sys_sendmsg+0x17b/0x1d0
[  529.979932][T25886]  __x64_sys_sendmsg+0xd4/0x160
[  529.979955][T25886]  x64_sys_call+0x2999/0x2fb0
[  529.979977][T25886]  do_syscall_64+0xd0/0x1a0
[  529.980011][T25886]  ? clear_bhb_loop+0x25/0x80
[  529.980038][T25886]  ? clear_bhb_loop+0x25/0x80
[  529.980079][T25886]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.980106][T25886] RIP: 0033:0x7fc01397e969
[  529.980125][T25886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  529.980177][T25886] RSP: 002b:00007fc011fa5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  529.980241][T25886] RAX: ffffffffffffffda RBX: 00007fc013ba6160 RCX: 00007fc01397e969
[  529.980257][T25886] RDX: 00000000200c4004 RSI: 0000200000000580 RDI: 0000000000000009
[  529.980400][T25886] RBP: 00007fc011fa5090 R08: 0000000000000000 R09: 0000000000000000
[  529.980416][T25886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  529.980431][T25886] R13: 0000000000000000 R14: 00007fc013ba6160 R15: 00007fff3b016858
[  529.980454][T25886]  </TASK>
[  530.188458][T25873] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748344 > max in inode 15
[  530.203298][T25873] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748348 > max in inode 15
[  530.226743][T25873] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748352 > max in inode 15
[  530.262312][T25873] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748356 > max in inode 15
[  530.292438][T25873] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748360 > max in inode 15
[  530.302714][T25873] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748364 > max in inode 15
[  530.314616][T25873] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748368 > max in inode 15
[  530.325090][T25873] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748372 > max in inode 15
[  530.329883][T25893] loop1: detected capacity change from 0 to 512
[  530.335290][T25873] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748376 > max in inode 15
[  530.381815][T25893] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  530.398273][T25893] EXT4-fs (loop1): 1 truncate cleaned up
[  530.418348][T25898] loop4: detected capacity change from 0 to 1024
[  530.420954][T25893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  530.427387][T25898] EXT4-fs: Ignoring removed bh option
[  530.442505][T25898] EXT4-fs: inline encryption not supported
[  530.456871][T25898] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  530.468661][T25898] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  530.488808][T25898] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 2: comm syz.4.7427: lblock 2 mapped to illegal pblock 2 (length 1)
[  530.515532][T25898] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 48: comm syz.4.7427: lblock 0 mapped to illegal pblock 48 (length 1)
[  530.537398][T25898] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7427: Failed to acquire dquot type 0
[  530.580703][T22246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.594949][T25898] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  530.605421][T25898] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm syz.4.7427: mark_inode_dirty error
[  530.617682][T25898] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  530.638497][T25898] EXT4-fs (loop4): 1 orphan inode deleted
[  530.656200][T25898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  530.658134][T24265] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:42: lblock 1 mapped to illegal pblock 1 (length 1)
[  530.686240][T25903] loop1: detected capacity change from 0 to 2048
[  530.695398][T24265] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:42: Failed to release dquot type 0
[  530.720106][T25908] loop5: detected capacity change from 0 to 512
[  530.727762][T22570] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.728355][T25903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  530.755147][T25908] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  530.765133][T25910] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  530.776444][T21749] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.780657][T25910] program syz.2.7430 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  530.794762][T21749] EXT4-fs error (device loop4): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0
[  530.796849][T25908] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.7431: invalid block
[  530.820374][T25908] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7431: invalid indirect mapped block 4294967295 (level 1)
[  530.841228][T21749] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  530.844626][T25908] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7431: invalid indirect mapped block 4294967295 (level 1)
[  530.855880][T25903] syzkaller0: entered promiscuous mode
[  530.870205][T25903] syzkaller0: entered allmulticast mode
[  530.877268][T21749] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error
[  530.891091][T25908] EXT4-fs (loop5): 2 truncates cleaned up
[  530.897697][T25908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  530.929229][T25913] loop2: detected capacity change from 0 to 764
[  531.007837][T25913] iso9660: Unknown parameter ''
[  531.089679][T25923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7437'.
[  531.152213][T25927] loop4: detected capacity change from 0 to 512
[  531.196255][T25930] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7440'.
[  531.200379][T25933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  531.210024][T25927] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  531.230249][T25933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  531.231906][T25927] EXT4-fs (loop4): mount failed
[  531.282813][T25936] loop2: detected capacity change from 0 to 764
[  531.309256][T25936] iso9660: Unknown parameter ''
[  531.326496][T25938] loop4: detected capacity change from 0 to 512
[  531.333089][T25938] EXT4-fs: Ignoring removed orlov option
[  531.362345][T25938] ext4 filesystem being mounted at /288/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  531.431152][T25950] vlan2: entered allmulticast mode
[  531.458639][T25952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7448'.
[  531.468734][T25952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7448'.
[  531.527879][T25955] 9pnet_fd: Insufficient options for proto=fd
[  531.610958][T25967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7454'.
[  531.735860][T25983] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  531.743723][T25983] program syz.1.7460 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  531.782131][T25987] loop5: detected capacity change from 0 to 2048
[  531.837019][T25996] 9pnet_fd: Insufficient options for proto=fd
[  531.936089][T26004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7468'.
[  532.075307][T26018] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  532.083248][T26018] program syz.2.7474 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  532.118498][T26021] loop2: detected capacity change from 0 to 256
[  532.132844][T26021] FAT-fs (loop2): codepage cp865 not found
[  532.583170][T26040] FAULT_INJECTION: forcing a failure.
[  532.583170][T26040] name failslab, interval 1, probability 0, space 0, times 0
[  532.595928][T26040] CPU: 0 UID: 0 PID: 26040 Comm: syz.2.7483 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(voluntary) 
[  532.596005][T26040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  532.596018][T26040] Call Trace:
[  532.596025][T26040]  <TASK>
[  532.596033][T26040]  __dump_stack+0x1d/0x30
[  532.596053][T26040]  dump_stack_lvl+0xe8/0x140
[  532.596136][T26040]  dump_stack+0x15/0x1b
[  532.596162][T26040]  should_fail_ex+0x265/0x280
[  532.596199][T26040]  should_failslab+0x8c/0xb0
[  532.596230][T26040]  kmem_cache_alloc_node_noprof+0x57/0x320
[  532.596322][T26040]  ? perf_event_alloc+0x152/0x15c0
[  532.596353][T26040]  perf_event_alloc+0x152/0x15c0
[  532.596382][T26040]  ? __fget_files+0x184/0x1c0
[  532.596485][T26040]  __se_sys_perf_event_open+0x4e1/0x1170
[  532.596511][T26040]  ? __rcu_read_unlock+0x4f/0x70
[  532.596543][T26040]  __x64_sys_perf_event_open+0x67/0x80
[  532.596653][T26040]  x64_sys_call+0x27ec/0x2fb0
[  532.596678][T26040]  do_syscall_64+0xd0/0x1a0
[  532.596700][T26040]  ? clear_bhb_loop+0x25/0x80
[  532.596830][T26040]  ? clear_bhb_loop+0x25/0x80
[  532.596856][T26040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  532.596880][T26040] RIP: 0033:0x7f3af4e0e969
[  532.596900][T26040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  532.596962][T26040] RSP: 002b:00007f3af3477038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  532.596978][T26040] RAX: ffffffffffffffda RBX: 00007f3af5035fa0 RCX: 00007f3af4e0e969
[  532.596989][T26040] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000000
[  532.597000][T26040] RBP: 00007f3af3477090 R08: 0000000000000000 R09: 0000000000000000
[  532.597011][T26040] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  532.597094][T26040] R13: 0000000000000000 R14: 00007f3af5035fa0 R15: 00007ffdbb1ba438
[  532.597111][T26040]  </TASK>
[  532.843323][T26044] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  532.851400][T26044] program syz.5.7485 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  532.857194][T26046] loop1: detected capacity change from 0 to 512
[  532.867636][T26046] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  532.885630][T26049] __nla_validate_parse: 1 callbacks suppressed
[  532.885644][T26049] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.7487'.
[  532.889581][T26046] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.7486: invalid block
[  532.913579][T26046] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.7486: invalid indirect mapped block 4294967295 (level 1)
[  532.928973][T26046] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.7486: invalid indirect mapped block 4294967295 (level 1)
[  532.945887][T26046] EXT4-fs (loop1): 2 truncates cleaned up
[  533.002400][T26059] serio: Serial port ptm1
[  533.027702][T26061] loop5: detected capacity change from 0 to 2048
[  533.080941][T26061] loop5: detected capacity change from 0 to 8192
[  533.090746][T26069] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7497'.
[  533.473481][T26075] netlink: 'syz.0.7497': attribute type 29 has an invalid length.
[  533.481539][T26075] netlink: 'syz.0.7497': attribute type 3 has an invalid length.
[  533.489374][T26075] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7497'.
[  534.039160][   T29] kauditd_printk_skb: 43 callbacks suppressed
[  534.039215][   T29] audit: type=1326 audit(1747078608.586:20728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26089 comm="syz.5.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99279de969 code=0x7ffc0000
[  534.089182][   T29] audit: type=1326 audit(1747078608.586:20729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26089 comm="syz.5.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f99279de969 code=0x7ffc0000
[  534.112972][   T29] audit: type=1326 audit(1747078608.586:20730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26089 comm="syz.5.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99279de969 code=0x7ffc0000
[  534.136701][   T29] audit: type=1326 audit(1747078608.596:20731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26089 comm="syz.5.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99279de969 code=0x7ffc0000
[  534.198717][   T29] audit: type=1400 audit(1747078608.746:20732): avc:  denied  { ioctl } for  pid=26095 comm="syz.5.7506" path="socket:[77366]" dev="sockfs" ino=77366 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  534.198967][T26099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7506'.
[  534.233876][   T29] audit: type=1400 audit(1747078608.776:20733): avc:  denied  { unlink } for  pid=21018 comm="syz-executor" name="file0" dev="tmpfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  534.264584][T26103] loop5: detected capacity change from 0 to 1024
[  534.280655][T26099] team0 (unregistering): Port device team_slave_0 removed
[  534.291288][T26103] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869)
[  534.302616][T26099] team0 (unregistering): Port device team_slave_1 removed
[  534.311874][T26107] loop0: detected capacity change from 0 to 2048
[  534.332992][T26103] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  534.354409][T26103] EXT4-fs (loop5): invalid journal inode
[  534.366074][   T29] audit: type=1400 audit(1747078608.906:20734): avc:  denied  { bind } for  pid=26112 comm="syz.2.7511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  534.386695][   T29] audit: type=1400 audit(1747078608.906:20735): avc:  denied  { setopt } for  pid=26112 comm="syz.2.7511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  534.394512][T26103] EXT4-fs (loop5): can't get journal size
[  534.425047][T26103] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #2: comm syz.5.7506: blocks 48-48 from inode overlap system zone
[  534.443378][T26103] EXT4-fs (loop5): failed to initialize system zone (-117)
[  534.481208][T26103] EXT4-fs (loop5): mount failed
[  535.008459][   T29] audit: type=1400 audit(1747078609.556:20736): avc:  denied  { create } for  pid=26132 comm="syz.4.7517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  535.028430][   T29] audit: type=1400 audit(1747078609.586:20737): avc:  denied  { bind } for  pid=26132 comm="syz.4.7517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  535.076468][T26133] loop4: detected capacity change from 0 to 2048
[  535.115085][T26133]  loop4: p1 < > p4
[  535.120678][T26133] loop4: p4 size 8388608 extends beyond EOD, truncated
[  535.151819][T26133] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.7517'.
[  535.183782][T26144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7522'.
[  535.301049][T26153] loop0: detected capacity change from 0 to 1024
[  535.310549][T26153] EXT4-fs: Ignoring removed bh option
[  535.316101][T26153] EXT4-fs: inline encryption not supported
[  535.323086][T26153] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  535.354741][T26153] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  535.379365][T26156] syzkaller0: entered promiscuous mode
[  535.385303][T26156] syzkaller0: entered allmulticast mode
[  535.405456][T26153] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 2: comm syz.0.7524: lblock 2 mapped to illegal pblock 2 (length 1)
[  535.432848][T26153] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 48: comm syz.0.7524: lblock 0 mapped to illegal pblock 48 (length 1)
[  535.451653][T26153] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.7524: Failed to acquire dquot type 0
[  535.463093][T26153] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  535.473920][T26153] EXT4-fs error (device loop0): ext4_evict_inode:259: inode #11: comm syz.0.7524: mark_inode_dirty error
[  535.485434][T26153] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  535.495742][T26153] EXT4-fs (loop0): 1 orphan inode deleted
[  535.516110][T24287] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:63: lblock 1 mapped to illegal pblock 1 (length 1)
[  535.533719][T24287] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:63: Failed to release dquot type 0
[  535.546964][T21018] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0
[  535.573272][T21018] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  535.594497][T21018] EXT4-fs error (device loop0): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error
[  535.692474][T26167] loop1: detected capacity change from 0 to 512
[  535.699511][T26167] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  535.738102][T26172] loop2: detected capacity change from 0 to 1024
[  535.745038][T26172] EXT4-fs: Ignoring removed bh option
[  535.750504][T26172] EXT4-fs: inline encryption not supported
[  535.756559][T26167] EXT4-fs (loop1): 1 truncate cleaned up
[  535.773405][T26172] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  535.807150][T26172] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  535.830464][T26172] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.7532: lblock 2 mapped to illegal pblock 2 (length 1)
[  535.854588][T26172] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.7532: lblock 0 mapped to illegal pblock 48 (length 1)
[  535.871415][T26172] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.7532: Failed to acquire dquot type 0
[  535.887425][T26172] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  535.899217][T26178] loop1: detected capacity change from 0 to 2048
[  535.906228][T26172] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.7532: mark_inode_dirty error
[  535.919466][T26172] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  535.929755][T26172] EXT4-fs (loop2): 1 orphan inode deleted
[  535.953548][T24269] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:48: lblock 1 mapped to illegal pblock 1 (length 1)
[  535.968125][T24269] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:48: Failed to release dquot type 0
[  535.984248][T22570] EXT4-fs error (device loop2): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0
[  536.000072][T22570] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  536.011568][T22570] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error
[  536.126748][T26187] vlan2: entered allmulticast mode
[  536.195937][T26191] loop4: detected capacity change from 0 to 2048
[  536.275762][T26191] loop4: detected capacity change from 0 to 8192
[  536.926641][T26217] loop0: detected capacity change from 0 to 2048
[  537.111907][T26217] syzkaller0: entered promiscuous mode
[  537.117467][T26217] syzkaller0: entered allmulticast mode
[  537.355948][T26228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7552'.
[  537.368767][T26230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7551'.
[  537.391560][T26228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7552'.
[  537.817817][T26243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7557'.
[  537.877446][T26244] loop0: detected capacity change from 0 to 2048
[  537.938772][T26244] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  537.968742][T26243] bridge_slave_0: left promiscuous mode
[  537.974836][T26243] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.983812][T26243] bridge_slave_1: left allmulticast mode
[  537.989551][T26243] bridge_slave_1: left promiscuous mode
[  537.995410][T26243] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.015769][T26243] bond0: (slave bond_slave_0): Releasing backup interface
[  538.028855][T26244] serio: Serial port ptm0
[  538.029378][T26243] bond0: (slave bond_slave_1): Releasing backup interface
[  538.056280][T26243] team0: Port device team_slave_0 removed
[  538.101272][T26243] team0: Port device team_slave_1 removed
[  538.125765][T26253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.141447][T26253] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.216176][T26256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.252629][T26256] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.277046][T26258] loop0: detected capacity change from 0 to 512
[  538.294095][T26258] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  538.325154][T26258] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.7560: invalid block
[  538.337720][T26258] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.7560: invalid indirect mapped block 4294967295 (level 1)
[  538.352807][T26258] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.7560: invalid indirect mapped block 4294967295 (level 1)
[  538.370300][T26258] EXT4-fs (loop0): 2 truncates cleaned up
[  538.680619][T26269] loop1: detected capacity change from 0 to 764
[  538.687352][T26269] iso9660: Unknown parameter ''
[  538.807547][T26279] loop1: detected capacity change from 0 to 2048
[  538.879009][T26279] syzkaller0: entered promiscuous mode
[  538.884766][T26279] syzkaller0: entered allmulticast mode
[  539.189112][T26291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7572'.
[  539.221828][T26293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7573'.
[  539.244863][T26293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7573'.
[  539.304469][T26299] loop1: detected capacity change from 0 to 764
[  539.311099][T26299] iso9660: Unknown parameter ''
[  539.713135][T26316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7582'.
[  539.728441][T26312] loop5: detected capacity change from 0 to 2048
[  539.792329][T26312] syzkaller0: entered promiscuous mode
[  539.798136][T26312] syzkaller0: entered allmulticast mode
[  539.832962][T26320] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  539.841262][T26320] program syz.2.7583 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  539.885828][T26322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7584'.
[  539.935396][T26324] loop2: detected capacity change from 0 to 2048
[  540.013558][T26324] loop2: detected capacity change from 0 to 8192
[  540.211389][T26331] loop4: detected capacity change from 0 to 512
[  540.233241][T26334] loop5: detected capacity change from 0 to 764
[  540.245074][T26331] EXT4-fs: Ignoring removed orlov option
[  540.251570][T26334] iso9660: Unknown parameter ''
[  540.306648][T26331] ext4 filesystem being mounted at /308/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  540.514895][   T29] kauditd_printk_skb: 108 callbacks suppressed
[  540.514915][   T29] audit: type=1326 audit(1747078615.066:20840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26343 comm="syz.1.7590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061e5e969 code=0x7ffc0000
[  540.610764][T26346] loop1: detected capacity change from 0 to 512
[  540.617501][   T29] audit: type=1326 audit(1747078615.106:20841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26343 comm="syz.1.7590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061e5e969 code=0x7ffc0000
[  540.639218][T26346] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  540.641722][   T29] audit: type=1326 audit(1747078615.106:20842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26343 comm="syz.1.7590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa061e5e969 code=0x7ffc0000
[  540.680175][   T29] audit: type=1326 audit(1747078615.106:20843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26343 comm="syz.1.7590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061e5e969 code=0x7ffc0000
[  540.704977][   T29] audit: type=1326 audit(1747078615.106:20844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26343 comm="syz.1.7590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa061e5e969 code=0x7ffc0000
[  540.729303][   T29] audit: type=1326 audit(1747078615.106:20845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26343 comm="syz.1.7590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061e5e969 code=0x7ffc0000
[  540.753903][   T29] audit: type=1326 audit(1747078615.106:20846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26343 comm="syz.1.7590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa061e5e969 code=0x7ffc0000
[  540.778082][   T29] audit: type=1326 audit(1747078615.106:20847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26343 comm="syz.1.7590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061e5e969 code=0x7ffc0000
[  540.802346][   T29] audit: type=1326 audit(1747078615.106:20848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26343 comm="syz.1.7590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa061e5e969 code=0x7ffc0000
[  540.826628][   T29] audit: type=1326 audit(1747078615.106:20849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26343 comm="syz.1.7590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061e5e969 code=0x7ffc0000
[  540.852396][T26346] EXT4-fs (loop1): 1 truncate cleaned up
[  540.961929][T26350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7592'.
[  541.122620][T26354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7595'.
[  541.248253][T26361] loop4: detected capacity change from 0 to 2048
[  541.310631][T26361] loop4: detected capacity change from 0 to 8192
[  541.339665][T26366] loop1: detected capacity change from 0 to 2048
[  541.349114][T26368] loop2: detected capacity change from 0 to 764
[  541.364048][T26368] iso9660: Unknown parameter ''
[  541.398875][T26372] loop2: detected capacity change from 0 to 512
[  541.412862][T26366] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  541.429250][T26366] serio: Serial port ptm0
[  541.456795][T26372] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  541.478452][T26372] pim6reg: entered allmulticast mode
[  541.526107][T26372] pim6reg: left allmulticast mode
[  541.650319][T26383] vlan2: entered allmulticast mode
[  541.812445][T26387] loop1: detected capacity change from 0 to 512
[  541.861587][T26387] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  541.879900][T26387] EXT4-fs (loop1): 1 truncate cleaned up
[  542.421425][T26399] loop4: detected capacity change from 0 to 512
[  542.456103][T26399] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  542.504022][T26399] EXT4-fs (loop4): 1 truncate cleaned up
[  542.621079][T26406] loop0: detected capacity change from 0 to 764
[  542.622356][T26403] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  542.628094][T26406] iso9660: Unknown parameter ''
[  542.680365][T26410] FAULT_INJECTION: forcing a failure.
[  542.680365][T26410] name failslab, interval 1, probability 0, space 0, times 0
[  542.693234][T26410] CPU: 0 UID: 0 PID: 26410 Comm: syz.0.7612 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(voluntary) 
[  542.693269][T26410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  542.693285][T26410] Call Trace:
[  542.693293][T26410]  <TASK>
[  542.693301][T26410]  __dump_stack+0x1d/0x30
[  542.693382][T26410]  dump_stack_lvl+0xe8/0x140
[  542.693407][T26410]  dump_stack+0x15/0x1b
[  542.693428][T26410]  should_fail_ex+0x265/0x280
[  542.693504][T26410]  should_failslab+0x8c/0xb0
[  542.693534][T26410]  kmem_cache_alloc_noprof+0x50/0x310
[  542.693625][T26410]  ? audit_log_start+0x365/0x6c0
[  542.693663][T26410]  audit_log_start+0x365/0x6c0
[  542.693709][T26410]  audit_seccomp+0x48/0x100
[  542.693835][T26410]  ? __seccomp_filter+0x68c/0x10d0
[  542.693935][T26410]  __seccomp_filter+0x69d/0x10d0
[  542.693956][T26410]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  542.694037][T26410]  ? vfs_write+0x75e/0x8d0
[  542.694071][T26410]  __secure_computing+0x82/0x150
[  542.694095][T26410]  syscall_trace_enter+0xcf/0x1e0
[  542.694178][T26410]  do_syscall_64+0xaa/0x1a0
[  542.694206][T26410]  ? clear_bhb_loop+0x25/0x80
[  542.694232][T26410]  ? clear_bhb_loop+0x25/0x80
[  542.694260][T26410]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.694353][T26410] RIP: 0033:0x7fc01397e969
[  542.694373][T26410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  542.694399][T26410] RSP: 002b:00007fc011fe7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef
[  542.694422][T26410] RAX: ffffffffffffffda RBX: 00007fc013ba5fa0 RCX: 00007fc01397e969
[  542.694435][T26410] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000
[  542.694481][T26410] RBP: 00007fc011fe7090 R08: 0000000000000005 R09: 0000000000000000
[  542.694492][T26410] R10: 0000200000ffa000 R11: 0000000000000246 R12: 0000000000000001
[  542.694504][T26410] R13: 0000000000000000 R14: 00007fc013ba5fa0 R15: 00007fff3b016858
[  542.694527][T26410]  </TASK>
[  542.973310][T26420] loop0: detected capacity change from 0 to 512
[  542.981210][T26420] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  543.008924][T26420] EXT4-fs (loop0): 1 truncate cleaned up
[  543.025290][T26425] program syz.2.7618 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  543.036254][T26425] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  543.053117][T26427] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  543.118487][T26431] syzkaller0: entered promiscuous mode
[  543.124009][T26431] syzkaller0: entered allmulticast mode
[  543.206004][T26434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7620'.
[  543.217098][T26434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7620'.
[  543.261028][T26439] loop0: detected capacity change from 0 to 764
[  543.267866][T26439] iso9660: Unknown parameter ''
[  543.325906][T26442] syzkaller0: entered promiscuous mode
[  543.331553][T26442] syzkaller0: entered allmulticast mode
[  543.936934][T26459] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  544.223534][T26470] ==================================================================
[  544.231852][T26470] BUG: KCSAN: data-race in call_rcu / mas_state_walk
[  544.238579][T26470] 
[  544.240918][T26470] write to 0xffff88810416ff08 of 8 bytes by task 26469 on cpu 1:
[  544.248756][T26470]  call_rcu+0x48/0x3e0
[  544.252872][T26470]  mas_replace_node+0x30b/0x440
[  544.257739][T26470]  mas_wr_store_entry+0x2425/0x2b60
[  544.262948][T26470]  mas_store_prealloc+0x74d/0x9e0
[  544.268166][T26470]  vma_iter_store_new+0x1c5/0x200
[  544.273215][T26470]  vma_complete+0x125/0x570
[  544.277731][T26470]  __split_vma+0x54c/0x610
[  544.282178][T26470]  vma_modify+0x107/0x210
[  544.286523][T26470]  vma_modify_flags+0x101/0x130
[  544.291484][T26470]  mprotect_fixup+0x2cc/0x570
[  544.296181][T26470]  do_mprotect_pkey+0x6d6/0x980
[  544.301060][T26470]  __x64_sys_mprotect+0x48/0x60
[  544.305937][T26470]  x64_sys_call+0x2794/0x2fb0
[  544.310621][T26470]  do_syscall_64+0xd0/0x1a0
[  544.315134][T26470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.321034][T26470] 
[  544.323362][T26470] read to 0xffff88810416ff08 of 8 bytes by task 26470 on cpu 0:
[  544.331432][T26470]  mas_state_walk+0x28f/0x650
[  544.336117][T26470]  mas_walk+0x30/0x120
[  544.340221][T26470]  lock_vma_under_rcu+0xa2/0x2f0
[  544.345177][T26470]  do_user_addr_fault+0x233/0x1090
[  544.350308][T26470]  exc_page_fault+0x54/0xc0
[  544.354835][T26470]  asm_exc_page_fault+0x26/0x30
[  544.359691][T26470] 
[  544.362016][T26470] value changed: 0x0000555566e81fff -> 0xffff88810416f708
[  544.369122][T26470] 
[  544.371454][T26470] Reported by Kernel Concurrency Sanitizer on:
[  544.378040][T26470] CPU: 0 UID: 0 PID: 26470 Comm: syz.2.7632 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(voluntary) 
[  544.388813][T26470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  544.398873][T26470] ==================================================================