last executing test programs:

25.288460827s ago: executing program 2 (id=43):
prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xbfd1, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
close(r3)
futimesat(0xffffffffffffffff, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
dup(0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x18)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x8008700b, &(0x7f0000000080)={0x2e, 0x27, 0x1, 0x1d, 0x1, 0x4, 0x2, 0x16b, 0xffffffffffffffff})
r7 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0)
r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000040), 0x12)
openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)

25.216408013s ago: executing program 2 (id=45):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffd}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x47f, 0x0, 0x0, 0xb9ff, 0x5, "000000008200"})
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00')
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000500)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "1c56dd", "ffae20cf9da33313a80d23df43a3af9e78b51b9ba416da46460c5219660152dc7cfb721e994d66a7674cc83325a9f7ebc74d5778e533f6269f32344595a639cb0b620f39a015afdef7eb9bac70604c3eec30b5f0a4211076492fce8ce99662c7481952fd13af5cec6c79b75e43707f8c25fff63ac242e5c5476931c0fd0284cc2f3a5ccc8b72604dd00cea03b2f93456edf0cc4c2f4a9cc5c9029809696960b797d47e88c8158ad940f31250c9c04b25d9e0ceba1d7797499c32a69df7f0fcf1d9b60c037beae3e71debcce45d64046f88219711dc33c827c4e07ff36a2ebfa1ee0b648352afd477b38a339d74c4b4fe5ccbfda16a29b25395f2faa9d649b2dc"}}, 0x110)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0))
r7 = syz_open_pts(r0, 0x101000)
r8 = dup3(r7, r0, 0x0)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x17)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

24.338168914s ago: executing program 2 (id=51):
r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x200214, &(0x7f0000000000)=ANY=[], 0x11, 0x25d, &(0x7f0000000480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0)
renameat2(r1, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000240)='\x00', 0x0)

24.306142657s ago: executing program 2 (id=52):
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x1, 0x0, 0x0, 0x7, {{0xa, 0x4, 0x2, 0x1, 0x28, 0x64, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010100, @loopback, {[@timestamp_addr={0x44, 0x14, 0x6d, 0x1, 0x1, [{@rand_addr=0x64010102, 0x1}, {@local, 0x1}]}]}}}}})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4800000010000104000000000400000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r4], 0x48}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x3}, 0x18)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000004c0)={[{@nodioread_nolock}, {@nolazytime}, {@dioread_lock}, {@errors_continue}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e9, &(0x7f00000005c0)="$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")
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="26fe25", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r8, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)

24.136670801s ago: executing program 2 (id=53):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x80000}, 0x18)
write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8}, 0x10)

23.498330433s ago: executing program 2 (id=60):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f00000001c0)=@v3={0x3000000, [], 0xee01}, 0x18, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={<r2=>0x0, @in6={{0xa, 0x4e20, 0x6be, @empty, 0x6}}, [0x87, 0xfff, 0x10, 0x8, 0xb, 0x3, 0x7fffffffffffffff, 0x6, 0x9, 0x8, 0x7, 0x540dff8c, 0xe, 0x6848, 0xe0]}, &(0x7f0000000000)=0x100)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10)

23.498044163s ago: executing program 32 (id=60):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f00000001c0)=@v3={0x3000000, [], 0xee01}, 0x18, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={<r2=>0x0, @in6={{0xa, 0x4e20, 0x6be, @empty, 0x6}}, [0x87, 0xfff, 0x10, 0x8, 0xb, 0x3, 0x7fffffffffffffff, 0x6, 0x9, 0x8, 0x7, 0x540dff8c, 0xe, 0x6848, 0xe0]}, &(0x7f0000000000)=0x100)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10)

1.540838764s ago: executing program 4 (id=411):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x4401, 0x110)
geteuid()
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r3, 0x0, 0x2}, 0x18)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd26, 0x8000006, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xffff, 0x300, 0x7540}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)

1.370544798s ago: executing program 1 (id=414):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000001a80))
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
lsm_get_self_attr(0x69, 0x0, &(0x7f0000000140), 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
dup(r2)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xd3, 0x0, 0x2, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x6}, 0x0, 0x2000, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x240}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.356156899s ago: executing program 3 (id=415):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x478}, 0x0, 0xe3d08660d3cd4684})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)={0x144, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x880}, 0x20000800)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = gettid()
r3 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$ptp(r3, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r4=>0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r5, &(0x7f0000000000)='map_files\x00')
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r5})
timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r6, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00', @ANYBLOB="fe4cecb210"], 0x53)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600"], 0x48)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000100)={&(0x7f0000001600)=""/4096, 0x1000})

1.354679449s ago: executing program 4 (id=416):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1a1c40, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x18080, &(0x7f0000000500)={[{@norecovery}, {@grpquota}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x4a9, &(0x7f0000001440)="$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")

1.256296117s ago: executing program 1 (id=417):
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f42607", 0x29}], 0x1)
socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008"], 0xa8}}, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.240518398s ago: executing program 4 (id=418):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000e80)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@test_dummy_encryption_v1}, {@noload}, {@data_err_ignore}, {@prjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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")
socket$inet_udp(0x2, 0x2, 0x0)
chdir(0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c851}, 0xc0c1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000100000000dbdbdeaadb8458bb52cf92844e", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20513365800000000000007020000f8ffffffb7030100080a145df90788621800000085002c000100000095cc4ea8b15b100977c8cc01383a92b64070ab2e85a6730f11f5d6d8080926e6431ef176526445bb325606c4c32566b89d01eb17ebc6cfd175e2aa37f6ea76741e1a9f44946886d11bc38a28136fcb47cfd515c32e052b4a5802937fa7db714349ac37e87b31f7dbb3e4f53f17d89fcb58f325f24821ca1aca2ed28e818ed88b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x4a0382, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
r6 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = dup3(r6, r5, 0x0)
recvmmsg(r7, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000000280)=""/61, 0x3d}, {&(0x7f0000000700)=""/157, 0x9d}, {&(0x7f00000007c0)}, {&(0x7f0000000800)=""/113, 0x71}], 0x5}, 0xffffffff}, {{&(0x7f00000004c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1, &(0x7f0000000380)=""/14, 0xe}, 0x2}], 0x2, 0x40000001, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000800)
syz_open_dev$sg(0x0, 0x5d7000000000000, 0x82442)

1.22142072s ago: executing program 3 (id=419):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x38727f89192ea8ef, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x2}]})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.131881297s ago: executing program 1 (id=420):
prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xbfd1, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
close(0xffffffffffffffff)
futimesat(0xffffffffffffffff, 0x0, 0x0)
dup(0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x400000000001, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000040), 0x12)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)

1.112587209s ago: executing program 1 (id=421):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x2, 0x0, 0x69f}})
r1 = socket$isdn(0x22, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0x55, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x9000000, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000001, 0x4010, r1, 0x8e09f000)
lsm_get_self_attr(0x68, 0x0, &(0x7f0000000000)=0xfffffffb, 0x0)

981.09344ms ago: executing program 3 (id=423):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x478}, 0x0, 0xe3d08660d3cd4684})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)={0x144, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x880}, 0x20000800)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = gettid()
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$ptp(r3, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r4=>0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r5, &(0x7f0000000000)='map_files\x00')
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r5})
timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r6, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
r7 = dup(0xffffffffffffffff)
write$P9_RLERRORu(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00', @ANYBLOB="fe4cecb210"], 0x53)
memfd_create(0x0, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600"], 0x48)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000100)={&(0x7f0000001600)=""/4096, 0x1000})

929.838474ms ago: executing program 5 (id=424):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x281c2, 0x120)
fcntl$setlease(r0, 0x400, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000100)='./file1\x00', 0x3)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x212e, 0x100, 0x3, 0x3de, 0x0, r1}, &(0x7f0000000040), &(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000080)={0x3920e, r5, 0x2, 0x20000000, 0x2})
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000200)=[r3], 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x0, 0x0, 0x100}, 0x2}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {0x0, 0x0, 0x80000001}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0xb4d0}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0xfffffffd}, {}, {}, {}, {0x8}, {}, {}, {0x0, 0x0, 0x5}, {0x0, 0x2}, {0x400}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x16e}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x5}], [{0x2}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f00000004c0)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1b, &(0x7f0000000580)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
close_range(r9, 0xffffffffffffffff, 0x0)
socket(0x1e, 0x2, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
memfd_create(0x0, 0x2)
syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000800)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$eJzs3T1sG2UfAPD/neO3X3nf9JXeVwLUoQKkIlV1kn5AYWpXRKVKHZBYIHLcqIoTV7EDTZQh3StEBwSoS9lgYAQxMCAWRlYWEDNSRSOQmg5g5K80TZzglDouud9POvuee87+P8+d/499pzs5gMw62nhII56OiItJxMi6uqFoVx5trbe6slS8v7JUTKJev/RLEklE3FtZKnbWT9rPhyJiOSKeiohv8hHH081xqwuL0xPlcmmuXR6tzVwdrS4snrgyMzFVmirNnnrp5TNnT58ZPzm+/mX36+tL+Z319caPN9+98d2rt29++tmR5eL7E0mci+F23fp+PE6tbZKPcxuWn+5HsAFKBt0AHkmuneeNVPp/jESunfXd1Ed2tWlAn9X3RdSBjErkP2RU53dA4/i3M+3m748751sHII24q+2pVTPUOjcR+5vHJgd/TR46Mmkcbx7ezYayJy1fj4ixoaHNn/+k/fl7dGOPo4H01dfnWztq8/5P18af6DL+DHfOnf5NnfFvddP49yB+bovx72KPMX5/46ePtox/PeKZrvGTtfhJl/hpRLzVY/xbr395dqu6+scRx6J7/I5k+/PDo5evlEtjrceuMb46duSV7fp/cIv4rXO2+5tfM922f5fT2l198e3nzy5vE/+F57bf/922/4GIeK/H+P+998lrW9XduZ7cbfwK2On+TyIft3uM/+K5oz/0uCoAAAAAAAAAALADafNatiQtrM2naaHQuof3f3EwLVeqteOXK/Ozk61r3g5HPu1caTXSKieN8nj7etxO+eSG8qlcO2DuQLNcKFbKkwPuOwAAAAAAAAAAAAAAAAAAADwpDm24//+3XPP+/41/Vw3sVVv/5Tew18l/yK6H8z8ZWDuA3ef7HzKrLv8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/AAAAAAAAAAAAAAAAAAAAAAAAAADoi4sXLjSm+v2VpWKjPDm0MD9defvEZKk6XZiZLxaKlbmrhalKZapcKhQrM3/1fkmlcnUsZuevjdZK1dpodWHxzZnK/GznP0VL+b73CAAAAAAAAAAAAAAAAAAAAP55hptTkhYiIm3Op2mhEPHviDicRHL5Srk0FhH/iYjvc/l9jfL4oBsNAAAAAAAAAAAAAAAAAAAAe0x1YXF6olwuzWVkZmgnK0fE8uNtRuMdd/yqfHtfPSnb0EwWZgY8MAEAAAAAAAAAAAAAAAAAQAY9uOm311f80d8GAQAAAAAAAAAAAAAAAAAAQCalPycR0ZiOjTw/vLH2X8lqrvkcEe/cuvTBtYlabW68sfzu2vLah+3lJwfRfqBXnTzt5DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQHVhcXqiXC7N9XFm0H0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBR/BgAA///eANcP")
r11 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r11, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"})
ioctl$USBDEVFS_CONTROL(r11, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0})
open(&(0x7f0000000140)='./file2\x00', 0x400000, 0x168)

625.061709ms ago: executing program 5 (id=427):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:')
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x18)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440))

571.028513ms ago: executing program 0 (id=429):
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x7c00, 0x0, 0x3)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8)
r2 = dup(r1)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x168)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x100}, 0x18)

567.017803ms ago: executing program 5 (id=430):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x478}, 0x0, 0xe3d08660d3cd4684})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)={0x144, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x880}, 0x20000800)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = gettid()
r3 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$ptp(r3, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r4, &(0x7f0000000000)='map_files\x00')
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r4})
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00', @ANYBLOB="fe4cecb210"], 0x53)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600"], 0x48)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000100)={&(0x7f0000001600)=""/4096, 0x1000})

544.913695ms ago: executing program 0 (id=431):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1a1c40, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x18080, &(0x7f0000000500)={[{@norecovery}, {@grpquota}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x4a9, &(0x7f0000001440)="$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")

498.332349ms ago: executing program 5 (id=432):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000001a80))
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
lsm_get_self_attr(0x69, 0x0, &(0x7f0000000140), 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
dup(r2)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xd3, 0x0, 0x2, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x6}, 0x0, 0x2000, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x240}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

486.64199ms ago: executing program 0 (id=433):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x3, 0xe, "0062ba7d820000000001001f820dac4eb71eed"})
syz_open_pts(r0, 0x800)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010)

433.512024ms ago: executing program 5 (id=434):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './file0'}, 0xb)
syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa2f, &(0x7f0000001580)="$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")
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

404.680397ms ago: executing program 5 (id=435):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffd}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00')
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000500)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "1c56dd", "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"}}, 0x110)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0))
r8 = syz_open_pts(r0, 0x101000)
r9 = dup3(r8, r0, 0x0)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x17)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

390.766778ms ago: executing program 4 (id=436):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x3, @broadcast}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0'}, 0xb)
syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa2f, &(0x7f0000001580)="$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")

366.34429ms ago: executing program 0 (id=437):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
socket$inet6(0xa, 0x802, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x18)
unshare(0x26000400)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0)

354.246171ms ago: executing program 4 (id=438):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x2}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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")
r3 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x3c)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r4}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r5}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r7, 0x2007ffc)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000002c0)={0x1, 0x7, 0x7fff})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', <r8=>0x0, 0x7800, 0x8, 0xb1b1, 0x2, {{0x10, 0x4, 0x0, 0x5, 0x40, 0x68, 0x0, 0x48, 0x2f, 0x0, @rand_addr=0x64010101, @remote, {[@rr={0x7, 0x2b, 0x44, [@local, @rand_addr=0x64010102, @private=0xa010101, @loopback, @multicast1, @multicast2, @empty, @broadcast, @empty, @private=0xa010100]}]}}}}})
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000001c0)=r8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="a18300000000000000000500"], 0x78}}, 0x0)
r11 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)

261.972298ms ago: executing program 1 (id=439):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000880)="d637f94fd7ab13f059a95fea1d5541f81a537f8cf0be3efe4aef60115e46dccc835fc461947a588c8036a2aca2ef69a191fbdeeeaac79f7e7bb2011a281233e3ae676a723b0bd5ca7464aa176f6bae62b1ed8311400970d5900a3d7e9589c517112044e74adb995ef127d7a176f58a21b3a84c9f9e94df5e8fec2eb260cc883e6bca88000000000000000000000080000000000000000000963381a3a687fad29f038f0c11c85f906993c527b134b443397a1ed17961a218aa764406b80ac59e9b003dfdf580ac00"/213, &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
sendmsg$rds(r2, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}], 0x48}, 0x0)

231.187381ms ago: executing program 0 (id=440):
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f42607", 0x29}], 0x1)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008"], 0xa8}}, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0xc}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70600000000000085000000170000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x81)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r6}, 0x18)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0xfeff, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

207.750363ms ago: executing program 1 (id=441):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x478}, 0x0, 0xe3d08660d3cd4684})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)={0x144, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x880}, 0x20000800)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = gettid()
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$ptp(r3, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r4=>0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r5, &(0x7f0000000000)='map_files\x00')
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r5})
timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r6, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
r7 = dup(0xffffffffffffffff)
write$P9_RLERRORu(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00', @ANYBLOB="fe4cecb210"], 0x53)
memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5', 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000100)={&(0x7f0000001600)=""/4096, 0x1000})

140.489738ms ago: executing program 0 (id=442):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x47f, 0x0, 0x0, 0xb9ff, 0x5, "000000008200"})
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00')
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f0000000500)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "1c56dd", "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"}}, 0x110)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0))
r6 = syz_open_pts(r0, 0x101000)
r7 = dup3(r6, r0, 0x0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x17)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

134.865299ms ago: executing program 4 (id=443):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02})
preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000a40)=""/242, 0xf2}, {&(0x7f0000000940)=""/224, 0xe0}], 0x2, 0x8000, 0xc)

52.434175ms ago: executing program 3 (id=444):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
close(r0)

31.210637ms ago: executing program 3 (id=445):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './file0'}, 0xb)
syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa2f, &(0x7f0000001580)="$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")
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

0s ago: executing program 3 (id=446):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r1, &(0x7f0000000740)="cc", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7fffeffd)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
flock(0xffffffffffffffff, 0x5)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x10, 0x1)
sync()
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200030, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
sendfile(r4, r2, 0x0, 0x40001)
sendfile(r4, r3, 0x0, 0x7ffff000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts.
[   22.860925][   T29] audit: type=1400 audit(1754156318.631:62): avc:  denied  { mounton } for  pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   22.861772][ T3290] cgroup: Unknown subsys name 'net'
[   22.883642][   T29] audit: type=1400 audit(1754156318.631:63): avc:  denied  { mount } for  pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.910957][   T29] audit: type=1400 audit(1754156318.661:64): avc:  denied  { unmount } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   23.109167][ T3290] cgroup: Unknown subsys name 'cpuset'
[   23.115237][ T3290] cgroup: Unknown subsys name 'rlimit'
[   23.303831][   T29] audit: type=1400 audit(1754156319.071:65): avc:  denied  { setattr } for  pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   23.327131][   T29] audit: type=1400 audit(1754156319.071:66): avc:  denied  { create } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   23.343311][ T3293] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   23.347600][   T29] audit: type=1400 audit(1754156319.071:67): avc:  denied  { write } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   23.376452][   T29] audit: type=1400 audit(1754156319.071:68): avc:  denied  { read } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   23.393664][ T3290] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   23.397569][   T29] audit: type=1400 audit(1754156319.081:69): avc:  denied  { mounton } for  pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   23.430936][   T29] audit: type=1400 audit(1754156319.081:70): avc:  denied  { mount } for  pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   23.454186][   T29] audit: type=1400 audit(1754156319.121:71): avc:  denied  { relabelto } for  pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   25.509892][ T3300] chnl_net:caif_netlink_parms(): no params data found
[   25.549193][ T3301] chnl_net:caif_netlink_parms(): no params data found
[   25.647501][ T3306] chnl_net:caif_netlink_parms(): no params data found
[   25.655952][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.663017][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.670205][ T3300] bridge_slave_0: entered allmulticast mode
[   25.676509][ T3300] bridge_slave_0: entered promiscuous mode
[   25.684901][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.692003][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.699172][ T3300] bridge_slave_1: entered allmulticast mode
[   25.705652][ T3300] bridge_slave_1: entered promiscuous mode
[   25.711976][ T3309] chnl_net:caif_netlink_parms(): no params data found
[   25.720359][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.727397][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.734564][ T3301] bridge_slave_0: entered allmulticast mode
[   25.740968][ T3301] bridge_slave_0: entered promiscuous mode
[   25.749939][ T3307] chnl_net:caif_netlink_parms(): no params data found
[   25.770895][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.777974][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.785177][ T3301] bridge_slave_1: entered allmulticast mode
[   25.791384][ T3301] bridge_slave_1: entered promiscuous mode
[   25.819673][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.836142][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.848597][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.858408][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.897693][ T3301] team0: Port device team_slave_0 added
[   25.916570][ T3301] team0: Port device team_slave_1 added
[   25.922837][ T3300] team0: Port device team_slave_0 added
[   25.943647][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.950751][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.957925][ T3306] bridge_slave_0: entered allmulticast mode
[   25.964472][ T3306] bridge_slave_0: entered promiscuous mode
[   25.971233][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.978318][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.985475][ T3306] bridge_slave_1: entered allmulticast mode
[   25.991930][ T3306] bridge_slave_1: entered promiscuous mode
[   25.998578][ T3300] team0: Port device team_slave_1 added
[   26.009200][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.016121][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.042011][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.070857][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.077792][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.103774][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.114453][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.121585][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.128704][ T3309] bridge_slave_0: entered allmulticast mode
[   26.135005][ T3309] bridge_slave_0: entered promiscuous mode
[   26.141343][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.148427][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.155532][ T3307] bridge_slave_0: entered allmulticast mode
[   26.162264][ T3307] bridge_slave_0: entered promiscuous mode
[   26.179794][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.186830][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.194098][ T3309] bridge_slave_1: entered allmulticast mode
[   26.200393][ T3309] bridge_slave_1: entered promiscuous mode
[   26.206630][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.213691][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.220846][ T3307] bridge_slave_1: entered allmulticast mode
[   26.227143][ T3307] bridge_slave_1: entered promiscuous mode
[   26.234232][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.243539][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.250505][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.276457][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.297682][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.311160][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.318124][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.344001][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.374287][ T3306] team0: Port device team_slave_0 added
[   26.380947][ T3306] team0: Port device team_slave_1 added
[   26.396723][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.407654][ T3301] hsr_slave_0: entered promiscuous mode
[   26.413743][ T3301] hsr_slave_1: entered promiscuous mode
[   26.420682][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.439761][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.458567][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.472165][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.479134][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.505113][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.516210][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.523212][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.549155][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.568937][ T3309] team0: Port device team_slave_0 added
[   26.576316][ T3300] hsr_slave_0: entered promiscuous mode
[   26.582350][ T3300] hsr_slave_1: entered promiscuous mode
[   26.588074][ T3300] debugfs: 'hsr0' already exists in 'hsr'
[   26.593804][ T3300] Cannot create hsr debugfs directory
[   26.610848][ T3307] team0: Port device team_slave_0 added
[   26.621671][ T3309] team0: Port device team_slave_1 added
[   26.630481][ T3307] team0: Port device team_slave_1 added
[   26.679364][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.686296][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.712253][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.723186][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.730198][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.756074][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.771618][ T3306] hsr_slave_0: entered promiscuous mode
[   26.777601][ T3306] hsr_slave_1: entered promiscuous mode
[   26.783511][ T3306] debugfs: 'hsr0' already exists in 'hsr'
[   26.789252][ T3306] Cannot create hsr debugfs directory
[   26.797490][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.804492][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.830417][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.841320][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.848299][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.874204][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.959197][ T3307] hsr_slave_0: entered promiscuous mode
[   26.965248][ T3307] hsr_slave_1: entered promiscuous mode
[   26.971095][ T3307] debugfs: 'hsr0' already exists in 'hsr'
[   26.976800][ T3307] Cannot create hsr debugfs directory
[   26.984086][ T3309] hsr_slave_0: entered promiscuous mode
[   26.990171][ T3309] hsr_slave_1: entered promiscuous mode
[   26.995896][ T3309] debugfs: 'hsr0' already exists in 'hsr'
[   27.001626][ T3309] Cannot create hsr debugfs directory
[   27.090173][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   27.103357][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   27.112517][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   27.134903][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   27.169620][ T3300] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   27.180992][ T3300] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   27.189749][ T3300] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   27.204871][ T3300] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   27.226136][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   27.235884][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   27.247309][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   27.256146][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   27.282228][ T3309] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   27.291728][ T3309] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   27.300255][ T3309] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   27.317561][ T3309] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   27.354811][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   27.363317][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   27.371825][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   27.381318][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   27.392523][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0
[   27.405167][ T3301] 8021q: adding VLAN 0 to HW filter on device team0
[   27.429615][ T2661] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.436686][ T2661] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.457205][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.464256][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.496843][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0
[   27.505867][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0
[   27.514520][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0
[   27.528261][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   27.538709][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   27.565595][ T3306] 8021q: adding VLAN 0 to HW filter on device team0
[   27.577394][ T3300] 8021q: adding VLAN 0 to HW filter on device team0
[   27.592067][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.599182][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.608445][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.615472][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.626316][ T3309] 8021q: adding VLAN 0 to HW filter on device team0
[   27.639776][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.646868][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.656311][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.663346][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.675603][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   27.687951][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   27.696742][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.703784][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.721293][ T2795] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.728350][ T2795] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.742664][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   27.759652][ T2661] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.766690][ T2661] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.785075][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.803924][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.811017][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.827017][ T3300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   27.837400][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   27.890659][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.942091][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.956589][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.984780][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.013975][ T3301] veth0_vlan: entered promiscuous mode
[   28.041480][ T3301] veth1_vlan: entered promiscuous mode
[   28.063114][ T3306] veth0_vlan: entered promiscuous mode
[   28.082697][ T3301] veth0_macvtap: entered promiscuous mode
[   28.101479][ T3301] veth1_macvtap: entered promiscuous mode
[   28.108414][ T3306] veth1_vlan: entered promiscuous mode
[   28.116501][ T3300] veth0_vlan: entered promiscuous mode
[   28.135531][ T3307] veth0_vlan: entered promiscuous mode
[   28.147377][ T3300] veth1_vlan: entered promiscuous mode
[   28.166879][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0
[   28.181122][ T3307] veth1_vlan: entered promiscuous mode
[   28.195128][ T3306] veth0_macvtap: entered promiscuous mode
[   28.202783][ T3300] veth0_macvtap: entered promiscuous mode
[   28.210948][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1
[   28.218363][ T3300] veth1_macvtap: entered promiscuous mode
[   28.228068][ T3307] veth0_macvtap: entered promiscuous mode
[   28.241341][ T3306] veth1_macvtap: entered promiscuous mode
[   28.248913][ T3307] veth1_macvtap: entered promiscuous mode
[   28.266702][ T3309] veth0_vlan: entered promiscuous mode
[   28.274346][ T2795] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   28.286366][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0
[   28.294421][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   28.301866][ T2795] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   28.311066][ T2795] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   28.323913][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   28.334882][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1
[   28.343522][ T2795] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   28.356031][ T3309] veth1_vlan: entered promiscuous mode
[   28.362148][   T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   28.371199][   T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   28.380710][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   28.394915][   T66] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   28.403648][   T29] kauditd_printk_skb: 9 callbacks suppressed
[   28.403659][   T29] audit: type=1400 audit(1754156324.161:81): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/root/syzkaller.b1AKYK/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   28.407990][   T66] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   28.409764][   T29] audit: type=1400 audit(1754156324.161:82): avc:  denied  { mount } for  pid=3301 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   28.443719][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   28.464447][   T29] audit: type=1400 audit(1754156324.161:83): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/root/syzkaller.b1AKYK/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   28.464474][   T29] audit: type=1400 audit(1754156324.161:84): avc:  denied  { mount } for  pid=3301 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   28.476875][ T3309] veth0_macvtap: entered promiscuous mode
[   28.496790][   T29] audit: type=1400 audit(1754156324.161:85): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/root/syzkaller.b1AKYK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   28.523831][   T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   28.524350][   T29] audit: type=1400 audit(1754156324.161:86): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/root/syzkaller.b1AKYK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   28.586792][   T29] audit: type=1400 audit(1754156324.161:87): avc:  denied  { unmount } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   28.607653][   T29] audit: type=1400 audit(1754156324.291:88): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   28.630435][   T29] audit: type=1400 audit(1754156324.291:89): avc:  denied  { mount } for  pid=3301 comm="syz-executor" name="/" dev="gadgetfs" ino=3798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   28.660850][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   28.665884][ T3309] veth1_macvtap: entered promiscuous mode
[   28.682470][   T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   28.691300][   T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   28.708494][   T29] audit: type=1400 audit(1754156324.471:90): avc:  denied  { read write } for  pid=3301 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   28.741126][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0
[   28.749267][   T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   28.772915][   T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   28.790160][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1
[   28.801127][   T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   28.817061][   T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   28.837838][   T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   28.865101][   T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   28.905198][   T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   28.926167][   T41] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   28.942745][ T3481] loop2: detected capacity change from 0 to 1764
[   28.959386][   T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   28.975603][ T3481] process 'syz.2.3' launched '/dev/fd/7' with NULL argv: empty string added
[   29.015729][ T3491] hub 9-0:1.0: USB hub found
[   29.030605][ T3491] hub 9-0:1.0: 8 ports detected
[   29.055489][ T3496] hub 9-0:1.0: USB hub found
[   29.067284][ T3496] hub 9-0:1.0: 8 ports detected
[   29.140524][ T3500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'.
[   29.784445][ T3602] loop1: detected capacity change from 0 to 512
[   29.808238][ T3606] loop3: detected capacity change from 0 to 1764
[   29.833063][ T3602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   29.849152][ T3602] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   29.867191][ T3602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.910143][ T3612] loop3: detected capacity change from 0 to 1764
[   30.015416][ T3586] loop1: detected capacity change from 0 to 1024
[   30.022170][ T3586] =======================================================
[   30.022170][ T3586] WARNING: The mand mount option has been deprecated and
[   30.022170][ T3586]          and is ignored by this kernel. Remove the mand
[   30.022170][ T3586]          option from the mount to silence this warning.
[   30.022170][ T3586] =======================================================
[   30.091954][ T3586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   30.114505][ T3586] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   30.132910][ T3586] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.164765][ T3640] hub 9-0:1.0: USB hub found
[   30.175651][ T3640] hub 9-0:1.0: 8 ports detected
[   30.186015][ T3586] usb usb1: check_ctrlrecip: process 3586 (+}[@) requesting ep 01 but needs 81
[   30.196411][ T3586] vhci_hcd: default hub control req: 020f v0004 i0001 l0
[   30.203916][ T3648] loop2: detected capacity change from 0 to 512
[   30.253605][ T3648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   30.273833][ T3648] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   30.290254][ T3648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.410425][ T3632] loop2: detected capacity change from 0 to 1024
[   30.460997][ T3632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   30.473234][ T3632] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   30.484334][ T3632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.515549][ T3632] usb usb1: check_ctrlrecip: process 3632 (+}[@) requesting ep 01 but needs 81
[   30.525776][ T3632] vhci_hcd: default hub control req: 020f v0004 i0001 l0
[   30.562754][ T3696] loop2: detected capacity change from 0 to 1764
[   30.716892][ T3725] loop2: detected capacity change from 0 to 512
[   30.730477][ T3725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   30.744199][ T3725] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   30.765193][ T3725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.855955][ T3704] loop2: detected capacity change from 0 to 1024
[   30.889647][ T3704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   30.906147][ T3704] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   30.920511][ T3756] loop4: detected capacity change from 0 to 128
[   30.937191][ T3704] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.993021][ T3704] usb usb1: check_ctrlrecip: process 3704 (+}[@) requesting ep 01 but needs 81
[   31.010938][ T3704] vhci_hcd: default hub control req: 020f v0004 i0001 l0
[   31.037446][    C1] hrtimer: interrupt took 28006 ns
[   31.042891][ T3746] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512)
[   31.050429][ T3746] FAT-fs (loop4): Filesystem has been set read-only
[   31.069783][ T3746] netlink: 100 bytes leftover after parsing attributes in process `syz.4.28'.
[   31.070422][ T3770] SELinux: failed to load policy
[   31.209379][ T3787] loop3: detected capacity change from 0 to 512
[   31.215981][ T3787] EXT4-fs: Ignoring removed bh option
[   31.251603][ T3286] udevd[3286]: incorrect ext4 checksum on /dev/loop3
[   31.292435][ T3783] loop2: detected capacity change from 0 to 1764
[   31.313125][ T3787] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm.
[   31.314446][ T3286] udevd[3286]: incorrect ext4 checksum on /dev/loop3
[   31.437614][ T3801] syz.1.33 uses obsolete (PF_INET,SOCK_PACKET)
[   31.466245][ T3799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'.
[   31.503378][ T3789] loop4: detected capacity change from 0 to 512
[   31.531533][ T3804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'.
[   31.548140][ T3796] loop0: detected capacity change from 0 to 512
[   31.550449][ T3789] EXT4-fs: Ignoring removed bh option
[   31.570462][ T3294] udevd[3294]: incorrect ext4 checksum on /dev/loop4
[   31.571022][ T3796] EXT4-fs: Ignoring removed bh option
[   31.591535][ T3789] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm.
[   31.631073][ T3286] udevd[3286]: incorrect ext4 checksum on /dev/loop0
[   31.638843][ T3294] udevd[3294]: incorrect ext4 checksum on /dev/loop4
[   31.664436][ T3286] udevd[3286]: incorrect ext4 checksum on /dev/loop0
[   31.707185][ T3796] /dev/loop0: Can't open blockdev
[   31.756284][ T3294] udevd[3294]: incorrect ext4 checksum on /dev/loop0
[   31.838932][ T3826] loop0: detected capacity change from 0 to 128
[   31.872478][ T3826] syz.0.38: attempt to access beyond end of device
[   31.872478][ T3826] loop0: rw=2049, sector=129, nr_sectors = 1 limit=128
[   31.885846][ T3826] Buffer I/O error on dev loop0, logical block 129, lost async page write
[   31.907673][ T3826] syz.0.38: attempt to access beyond end of device
[   31.907673][ T3826] loop0: rw=2049, sector=130, nr_sectors = 1 limit=128
[   31.921046][ T3826] Buffer I/O error on dev loop0, logical block 130, lost async page write
[   31.938800][ T3826] syz.0.38: attempt to access beyond end of device
[   31.938800][ T3826] loop0: rw=2049, sector=139, nr_sectors = 1 limit=128
[   31.943034][ T3838] loop9: detected capacity change from 0 to 7
[   31.952169][ T3826] Buffer I/O error on dev loop0, logical block 139, lost async page write
[   31.960747][ T3838] Buffer I/O error on dev loop9, logical block 0, async page read
[   31.975204][ T3838] Buffer I/O error on dev loop9, logical block 0, async page read
[   31.978273][ T3826] syz.0.38: attempt to access beyond end of device
[   31.978273][ T3826] loop0: rw=2049, sector=140, nr_sectors = 1 limit=128
[   31.983065][ T3838]  loop9: unable to read partition table
[   31.996236][ T3826] Buffer I/O error on dev loop0, logical block 140, lost async page write
[   32.010630][ T3826] syz.0.38: attempt to access beyond end of device
[   32.010630][ T3826] loop0: rw=2049, sector=141, nr_sectors = 1 limit=128
[   32.023887][ T3826] Buffer I/O error on dev loop0, logical block 141, lost async page write
[   32.024509][ T3838] loop_reread_partitions: partition scan of loop9 (þÝ´«xüŸÑø éÚs) failed (rc=-5)
[   32.033284][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read
[   32.062027][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'.
[   32.068038][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read
[   32.070805][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'.
[   32.090416][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read
[   32.091137][ T3826] syz.0.38: attempt to access beyond end of device
[   32.091137][ T3826] loop0: rw=2049, sector=142, nr_sectors = 1 limit=128
[   32.123530][ T3826] syz.0.38: attempt to access beyond end of device
[   32.123530][ T3826] loop0: rw=2049, sector=143, nr_sectors = 1 limit=128
[   32.154012][ T3826] syz.0.38: attempt to access beyond end of device
[   32.154012][ T3826] loop0: rw=2049, sector=144, nr_sectors = 1 limit=128
[   32.175648][ T3826] syz.0.38: attempt to access beyond end of device
[   32.175648][ T3826] loop0: rw=2049, sector=147, nr_sectors = 1 limit=128
[   32.189628][ T3826] syz.0.38: attempt to access beyond end of device
[   32.189628][ T3826] loop0: rw=2049, sector=148, nr_sectors = 1 limit=128
[   32.261062][ T3862] loop1: detected capacity change from 0 to 1764
[   32.436239][ T3886] hub 9-0:1.0: USB hub found
[   32.441112][ T3886] hub 9-0:1.0: 8 ports detected
[   32.468781][ T3884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'.
[   32.527694][ T3896] loop1: detected capacity change from 0 to 512
[   32.554625][ T3896] EXT4-fs: Ignoring removed bh option
[   32.568234][ T3896] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm.
[   32.570425][ T3294] udevd[3294]: incorrect ext4 checksum on /dev/loop1
[   32.604645][ T3898] loop0: detected capacity change from 0 to 512
[   32.640058][ T3898] EXT4-fs: Ignoring removed bh option
[   32.645555][ T3898] /dev/loop0: Can't open blockdev
[   32.661925][ T3286] udevd[3286]: incorrect ext4 checksum on /dev/loop0
[   32.687410][ T3286] udevd[3286]: incorrect ext4 checksum on /dev/loop0
[   32.697953][ T3902] hub 9-0:1.0: USB hub found
[   32.724510][ T3902] hub 9-0:1.0: 8 ports detected
[   32.743590][ T3905] hub 9-0:1.0: USB hub found
[   32.748342][ T3905] hub 9-0:1.0: 8 ports detected
[   32.804539][ T3908] loop3: detected capacity change from 0 to 256
[   32.843604][ T3908] FAT-fs (loop3): codepage cp932 not found
[   32.857996][ T3909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.50'.
[   33.306038][ T3923] loop2: detected capacity change from 0 to 128
[   33.397316][ T3925] loop2: detected capacity change from 0 to 1024
[   33.404199][ T3925] EXT4-fs: Ignoring removed nomblk_io_submit option
[   33.415088][ T3925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.417248][   T29] kauditd_printk_skb: 881 callbacks suppressed
[   33.417260][   T29] audit: type=1326 audit(1754156329.181:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f83c06c5b27 code=0x7ffc0000
[   33.456896][   T29] audit: type=1326 audit(1754156329.191:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f83c066ad69 code=0x7ffc0000
[   33.476219][ T3300] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   33.480064][   T29] audit: type=1326 audit(1754156329.191:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f83c06c5b27 code=0x7ffc0000
[   33.519993][   T29] audit: type=1326 audit(1754156329.191:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f83c066ad69 code=0x7ffc0000
[   33.543024][   T29] audit: type=1326 audit(1754156329.191:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f83c06ceb69 code=0x7ffc0000
[   33.566200][   T29] audit: type=1400 audit(1754156329.201:977): avc:  denied  { mount } for  pid=3924 comm="syz.2.52" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   33.587721][   T29] audit: type=1326 audit(1754156329.201:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f83c06c5b27 code=0x7ffc0000
[   33.610824][   T29] audit: type=1326 audit(1754156329.201:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f83c066ad69 code=0x7ffc0000
[   33.619379][ T3300] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   33.633951][   T29] audit: type=1326 audit(1754156329.201:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f83c06ceb69 code=0x7ffc0000
[   33.633979][   T29] audit: type=1326 audit(1754156329.211:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f83c06c5b27 code=0x7ffc0000
[   33.859406][ T3940] netlink: 'syz.4.55': attribute type 1 has an invalid length.
[   33.886064][ T3938] hub 9-0:1.0: USB hub found
[   33.902165][ T3938] hub 9-0:1.0: 8 ports detected
[   33.913122][ T3941] loop1: detected capacity change from 0 to 512
[   33.963468][ T3941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.998328][ T3941] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.009895][ T3941] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.026790][ T3928] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.036028][ T3947] loop0: detected capacity change from 0 to 512
[   34.040687][ T3947] EXT4-fs: Ignoring removed bh option
[   34.047916][ T3947] /dev/loop0: Can't open blockdev
[   34.056612][   T41] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.099712][ T3300] syz-executor (3300) used greatest stack depth: 10712 bytes left
[   34.142697][   T41] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.177339][ T3934] loop1: detected capacity change from 0 to 1024
[   34.205045][   T41] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.225930][ T3934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.248101][ T3934] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.261476][ T3967] loop0: detected capacity change from 0 to 1024
[   34.274937][   T41] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.289604][ T3934] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.302842][ T3967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.323636][ T3967] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.356710][ T3967] usb usb1: check_ctrlrecip: process 3967 (+}[@) requesting ep 01 but needs 81
[   34.368591][ T3967] vhci_hcd: default hub control req: 020f v0004 i0001 l0
[   34.378948][ T3934] usb usb1: check_ctrlrecip: process 3934 (+}[@) requesting ep 01 but needs 81
[   34.391979][ T3934] vhci_hcd: default hub control req: 020f v0004 i0001 l0
[   34.441137][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.456882][   T41] bridge_slave_1: left allmulticast mode
[   34.462602][   T41] bridge_slave_1: left promiscuous mode
[   34.468264][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.474691][ T3994] loop1: detected capacity change from 0 to 128
[   34.483373][   T41] bridge_slave_0: left allmulticast mode
[   34.489053][   T41] bridge_slave_0: left promiscuous mode
[   34.494756][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.616307][   T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   34.652083][   T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   34.686162][   T41] bond0 (unregistering): Released all slaves
[   34.707049][ T3964] chnl_net:caif_netlink_parms(): no params data found
[   34.776384][ T4028] loop3: detected capacity change from 0 to 1764
[   34.825408][   T41] hsr_slave_0: left promiscuous mode
[   34.834307][   T41] hsr_slave_1: left promiscuous mode
[   34.840453][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   34.847879][   T41] batman_adv: batadv0: Removing interface: batadv_slave_0
[   34.855816][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   34.863362][   T41] batman_adv: batadv0: Removing interface: batadv_slave_1
[   34.874371][   T41] veth1_macvtap: left promiscuous mode
[   34.879960][   T41] veth0_macvtap: left promiscuous mode
[   34.885468][   T41] veth1_vlan: left promiscuous mode
[   34.891002][   T41] veth0_vlan: left promiscuous mode
[   34.923905][ T4039] loop3: detected capacity change from 0 to 512
[   34.932507][ T4039] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   34.941788][ T4039] EXT4-fs (loop3): invalid journal inode
[   34.947427][ T4039] EXT4-fs (loop3): can't get journal size
[   34.965040][ T4040] loop4: detected capacity change from 0 to 512
[   34.971675][ T4039] EXT4-fs (loop3): 1 truncate cleaned up
[   34.988817][ T4040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.996722][ T4039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.001986][ T4040] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.025789][ T4040] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.063465][   T41] team0 (unregistering): Port device team_slave_1 removed
[   35.076256][   T41] team0 (unregistering): Port device team_slave_0 removed
[   35.130808][ T4035] loop4: detected capacity change from 0 to 1024
[   35.132635][ T4037] netlink: 132 bytes leftover after parsing attributes in process `syz.3.69'.
[   35.158280][ T4035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.172377][ T4035] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.187200][ T4035] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.216693][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.219904][ T4035] usb usb1: check_ctrlrecip: process 4035 (+}[@) requesting ep 01 but needs 81
[   35.234752][ T4035] vhci_hcd: default hub control req: 020f v0004 i0001 l0
[   35.302053][ T3294] printk: udevd: 4 output lines suppressed due to ratelimiting
[   35.310620][ T3964] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.314720][ T4053] loop3: detected capacity change from 0 to 1764
[   35.317710][ T3964] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.340735][ T3964] bridge_slave_0: entered allmulticast mode
[   35.360553][ T3964] bridge_slave_0: entered promiscuous mode
[   35.370913][ T3964] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.378037][ T3964] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.378532][ T4062] loop3: detected capacity change from 0 to 512
[   35.387482][ T3964] bridge_slave_1: entered allmulticast mode
[   35.400439][ T3964] bridge_slave_1: entered promiscuous mode
[   35.409932][ T4058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'.
[   35.415576][ T4063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'.
[   35.450504][ T4062] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   35.463760][ T4062] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   35.480672][ T4062] EXT4-fs (loop3): 1 orphan inode deleted
[   35.486446][ T4062] EXT4-fs (loop3): 1 truncate cleaned up
[   35.498630][ T4062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.514859][ T4063] bridge0: port 3(macvlan2) entered blocking state
[   35.521505][ T4063] bridge0: port 3(macvlan2) entered disabled state
[   35.533059][ T4063] macvlan2: entered allmulticast mode
[   35.538462][ T4063] bridge0: entered allmulticast mode
[   35.545000][ T4063] macvlan2: left allmulticast mode
[   35.550518][ T4063] bridge0: left allmulticast mode
[   35.578178][ T3964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.608398][ T3964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.629047][ T4062] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   35.655861][ T3964] team0: Port device team_slave_0 added
[   35.668393][ T3964] team0: Port device team_slave_1 added
[   35.710979][ T3964] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.717977][ T3964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.743944][ T3964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.760482][ T3964] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.767434][ T3964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.793448][ T3964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.826156][ T3964] hsr_slave_0: entered promiscuous mode
[   35.832566][ T3964] hsr_slave_1: entered promiscuous mode
[   35.848797][ T3964] debugfs: 'hsr0' already exists in 'hsr'
[   35.854533][ T3964] Cannot create hsr debugfs directory
[   35.894702][ T4091] loop4: detected capacity change from 0 to 512
[   35.901419][ T4091] EXT4-fs: Ignoring removed bh option
[   35.907996][ T4091] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm.
[   35.990419][ T4103] program syz.4.77 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   36.013916][ T4103] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   36.026208][ T3964] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   36.036910][ T3964] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   36.050079][ T3964] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   36.067507][ T3964] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   36.076094][ T4109] hub 9-0:1.0: USB hub found
[   36.081059][ T4109] hub 9-0:1.0: 8 ports detected
[   36.143861][ T3964] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.160260][ T3964] 8021q: adding VLAN 0 to HW filter on device team0
[   36.176674][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.183760][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.199879][  T382] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.206950][  T382] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.224219][ T4062] syz.3.75 (4062) used greatest stack depth: 10552 bytes left
[   36.246280][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.392383][ T4138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'.
[   36.423220][ T3964] 8021q: adding VLAN 0 to HW filter on device batadv0
[   36.489846][ T4165] bpf: Bad value for 'gid'
[   36.871312][ T3964] veth0_vlan: entered promiscuous mode
[   36.883707][ T3964] veth1_vlan: entered promiscuous mode
[   36.916183][ T3964] veth0_macvtap: entered promiscuous mode
[   36.928704][ T4187] loop4: detected capacity change from 0 to 128
[   36.931541][ T3964] veth1_macvtap: entered promiscuous mode
[   36.958023][ T3964] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.005360][ T3964] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.100667][   T66] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.129305][ T4165] syz.3.80 (4165) used greatest stack depth: 10176 bytes left
[   37.141071][ T4194] loop0: detected capacity change from 0 to 512
[   37.147625][ T4194] EXT4-fs: Ignoring removed bh option
[   37.153751][ T4194] /dev/loop0: Can't open blockdev
[   37.200444][   T66] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.210790][   T66] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.260353][   T66] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.307222][ T4203] loop3: detected capacity change from 0 to 512
[   37.349151][ T4203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.375816][ T4203] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.390682][ T4209] loop1: detected capacity change from 0 to 512
[   37.407685][ T4209] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   37.418093][ T4203] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.428284][ T4209] EXT4-fs (loop1): 1 orphan inode deleted
[   37.434064][ T4209] EXT4-fs (loop1): 1 truncate cleaned up
[   37.460546][ T4209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.550788][ T4198] loop3: detected capacity change from 0 to 1024
[   37.567950][ T4224] loop5: detected capacity change from 0 to 512
[   37.583856][ T4198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.597971][ T4224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.612038][ T4198] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.623059][ T4224] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.623040][ T4198] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.642773][ T4224] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.674295][ T4234] loop0: detected capacity change from 0 to 1024
[   37.690749][ T4198] usb usb1: check_ctrlrecip: process 4198 (+}[@) requesting ep 01 but needs 81
[   37.701370][ T4234] EXT4-fs: Ignoring removed orlov option
[   37.703922][ T4198] vhci_hcd: default hub control req: 020f v0004 i0001 l0
[   37.722280][ T4234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.740892][ T4236] hub 9-0:1.0: USB hub found
[   37.745604][ T4236] hub 9-0:1.0: 8 ports detected
[   37.745683][ T4215] loop5: detected capacity change from 0 to 1024
[   37.773237][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.790883][ T4215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.803270][ T4215] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.816037][ T4241] loop3: detected capacity change from 0 to 1764
[   37.827213][ T4215] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.843414][ T4246] loop0: detected capacity change from 0 to 1024
[   37.850261][ T4246] EXT4-fs: Ignoring removed orlov option
[   37.861331][ T4246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.865265][ T4215] usb usb1: check_ctrlrecip: process 4215 (+}[@) requesting ep 01 but needs 81
[   37.883145][ T4215] vhci_hcd: default hub control req: 020f v0004 i0001 l0
[   37.940761][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.023861][ T4258] netlink: 'syz.3.103': attribute type 10 has an invalid length.
[   38.157463][ T4256] loop0: detected capacity change from 0 to 512
[   38.166697][ T4256] EXT4-fs: Ignoring removed bh option
[   38.178444][ T4256] /dev/loop0: Can't open blockdev
[   38.250700][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.474429][ T4284] loop1: detected capacity change from 0 to 512
[   38.497870][ T4268] loop3: detected capacity change from 0 to 512
[   38.510609][ T4268] EXT4-fs: Ignoring removed bh option
[   38.537367][ T4288] bpf: Bad value for 'gid'
[   38.601646][ T4268] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm.
[   38.621385][ T4284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.666109][ T4284] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.765626][ T4284] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.774740][   T29] kauditd_printk_skb: 749 callbacks suppressed
[   38.774752][   T29] audit: type=1326 audit(1754156334.521:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82352feb69 code=0x7ffc0000
[   38.804391][   T29] audit: type=1326 audit(1754156334.521:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82352feb69 code=0x7ffc0000
[   38.827740][   T29] audit: type=1326 audit(1754156334.521:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82352feb69 code=0x7ffc0000
[   38.851040][   T29] audit: type=1326 audit(1754156334.521:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82352feb69 code=0x7ffc0000
[   38.874356][   T29] audit: type=1326 audit(1754156334.521:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82352feb69 code=0x7ffc0000
[   38.897892][   T29] audit: type=1326 audit(1754156334.531:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82352feb69 code=0x7ffc0000
[   38.921268][   T29] audit: type=1326 audit(1754156334.531:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82352feb69 code=0x7ffc0000
[   38.945372][   T29] audit: type=1326 audit(1754156334.531:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f82352feb69 code=0x7ffc0000
[   38.968777][   T29] audit: type=1326 audit(1754156334.531:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82352feb69 code=0x7ffc0000
[   38.992687][   T29] audit: type=1326 audit(1754156334.531:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82352feb69 code=0x7ffc0000
[   39.045247][ T4292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.113'.
[   39.376860][ T4303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.117'.
[   39.441119][ T4308] bpf: Bad value for 'gid'
[   39.461790][ T4309] loop5: detected capacity change from 0 to 512
[   39.481222][ T4309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.494930][ T4309] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.511374][ T4309] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.551711][ T4303] bridge0: port 3(macvlan2) entered blocking state
[   39.558277][ T4303] bridge0: port 3(macvlan2) entered disabled state
[   39.578172][ T4307] loop1: detected capacity change from 0 to 1024
[   39.587441][ T4303] macvlan2: entered allmulticast mode
[   39.592900][ T4303] bridge0: entered allmulticast mode
[   39.601912][ T4307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.615189][ T4303] macvlan2: left allmulticast mode
[   39.620345][ T4303] bridge0: left allmulticast mode
[   39.627177][ T4307] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.666990][ T4307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.731005][ T4321] loop4: detected capacity change from 0 to 512
[   39.741079][ T4279] usb usb1: check_ctrlrecip: process 4279 (syz.1.110) requesting ep 01 but needs 81
[   39.753262][ T4321] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   39.763368][ T4279] vhci_hcd: default hub control req: 020f v0004 i0001 l0
[   39.777429][ T4321] EXT4-fs (loop4): 1 orphan inode deleted
[   39.783187][ T4321] EXT4-fs (loop4): 1 truncate cleaned up
[   39.797090][ T4301] loop5: detected capacity change from 0 to 1024
[   39.804358][ T4321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.818989][ T4301] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.831256][ T4301] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.842886][ T4301] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.856764][ T4301] usb usb1: check_ctrlrecip: process 4301 (+}[@) requesting ep 01 but needs 81
[   39.865912][ T4301] vhci_hcd: default hub control req: 020f v0004 i0001 l0
[   39.887642][ T4327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.120'.
[   39.927534][ T4321] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   40.126589][ T4346] netlink: 100 bytes leftover after parsing attributes in process `syz.3.125'.
[   40.156541][ T4348] loop3: detected capacity change from 0 to 1764
[   40.216881][ T4351] bpf: Bad value for 'gid'
[   40.640717][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.902273][ T4370] loop1: detected capacity change from 0 to 512
[   40.936919][ T4372] loop5: detected capacity change from 0 to 512
[   40.947419][ T4372] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[   40.958627][ T4370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.981177][ T4372] EXT4-fs (loop5): invalid journal inode
[   40.996443][ T4372] EXT4-fs (loop5): can't get journal size
[   41.004459][ T4370] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.017579][ T4378] loop3: detected capacity change from 0 to 128
[   41.026628][ T4372] EXT4-fs (loop5): 1 truncate cleaned up
[   41.033831][ T4370] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.043568][ T4372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.071708][ T4372] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.091212][ T4383] netlink: 100 bytes leftover after parsing attributes in process `syz.4.137'.
[   41.113322][ T4374] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512)
[   41.120926][ T4374] FAT-fs (loop3): Filesystem has been set read-only
[   41.121327][ T4365] loop1: detected capacity change from 0 to 1024
[   41.145930][ T4385] loop4: detected capacity change from 0 to 128
[   41.152470][ T4374] netlink: 100 bytes leftover after parsing attributes in process `syz.3.135'.
[   41.169632][ T4365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.195456][ T4365] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.206389][ T4365] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.307193][ T4365] usb usb1: check_ctrlrecip: process 4365 (+}[@) requesting ep 01 but needs 81
[   41.332991][ T4365] vhci_hcd: default hub control req: 020f v0004 i0001 l0
[   41.380738][ T4404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'.
[   41.457663][ T4397] loop4: detected capacity change from 0 to 512
[   41.480333][ T4397] EXT4-fs: Ignoring removed bh option
[   41.509179][ T4397] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm.
[   41.602072][ T4418] netlink: 'syz.4.150': attribute type 10 has an invalid length.
[   41.698163][ T4422] loop3: detected capacity change from 0 to 512
[   41.717782][ T4422] EXT4-fs: Ignoring removed oldalloc option
[   41.729388][ T4430] bpf: Bad value for 'gid'
[   41.740326][ T4422] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.152: Parent and EA inode have the same ino 15
[   41.766077][ T4422] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   41.787387][ T4422] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.152: Parent and EA inode have the same ino 15
[   41.804850][ T4422] EXT4-fs (loop3): 1 orphan inode deleted
[   41.811251][ T4422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.841641][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.867180][ T4438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4438 comm=syz.5.158
[   41.970832][ T4450] FAULT_INJECTION: forcing a failure.
[   41.970832][ T4450] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   41.983971][ T4450] CPU: 0 UID: 0 PID: 4450 Comm: syz.3.159 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) 
[   41.983997][ T4450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   41.984009][ T4450] Call Trace:
[   41.984015][ T4450]  <TASK>
[   41.984022][ T4450]  __dump_stack+0x1d/0x30
[   41.984044][ T4450]  dump_stack_lvl+0xe8/0x140
[   41.984063][ T4450]  dump_stack+0x15/0x1b
[   41.984083][ T4450]  should_fail_ex+0x265/0x280
[   41.984115][ T4450]  should_fail+0xb/0x20
[   41.984175][ T4450]  should_fail_usercopy+0x1a/0x20
[   41.984195][ T4450]  _copy_to_user+0x20/0xa0
[   41.984221][ T4450]  simple_read_from_buffer+0xb5/0x130
[   41.984314][ T4450]  proc_fail_nth_read+0x10e/0x150
[   41.984342][ T4450]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   41.984367][ T4450]  vfs_read+0x1a0/0x6f0
[   41.984385][ T4450]  ? __rcu_read_unlock+0x4f/0x70
[   41.984536][ T4450]  ? __fget_files+0x184/0x1c0
[   41.984559][ T4450]  ksys_read+0xda/0x1a0
[   41.984579][ T4450]  __x64_sys_read+0x40/0x50
[   41.984599][ T4450]  x64_sys_call+0x27bc/0x2ff0
[   41.984694][ T4450]  do_syscall_64+0xd2/0x200
[   41.984718][ T4450]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   41.984744][ T4450]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   41.984767][ T4450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.984870][ T4450] RIP: 0033:0x7f9acf15d57c
[   41.984891][ T4450] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   41.984906][ T4450] RSP: 002b:00007f9acd79e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   41.984923][ T4450] RAX: ffffffffffffffda RBX: 00007f9acf386080 RCX: 00007f9acf15d57c
[   41.984988][ T4450] RDX: 000000000000000f RSI: 00007f9acd79e0a0 RDI: 0000000000000003
[   41.985002][ T4450] RBP: 00007f9acd79e090 R08: 0000000000000000 R09: 0000000000000000
[   41.985016][ T4450] R10: 0000200000001980 R11: 0000000000000246 R12: 0000000000000001
[   41.985029][ T4450] R13: 0000000000000000 R14: 00007f9acf386080 R15: 00007ffd5bba12a8
[   41.985047][ T4450]  </TASK>
[   42.280188][ T4458] netlink: 'syz.1.164': attribute type 10 has an invalid length.
[   42.288859][ T4452] netlink: 'syz.4.162': attribute type 1 has an invalid length.
[   42.317374][ T4446] loop5: detected capacity change from 0 to 512
[   42.325914][ T4446] EXT4-fs: Ignoring removed bh option
[   42.344124][ T4446] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm.
[   42.450772][ T4470] netlink: 32 bytes leftover after parsing attributes in process `syz.5.168'.
[   42.533655][ T4477] FAULT_INJECTION: forcing a failure.
[   42.533655][ T4477] name failslab, interval 1, probability 0, space 0, times 1
[   42.546366][ T4477] CPU: 1 UID: 0 PID: 4477 Comm: syz.5.171 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) 
[   42.546462][ T4477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   42.546474][ T4477] Call Trace:
[   42.546480][ T4477]  <TASK>
[   42.546514][ T4477]  __dump_stack+0x1d/0x30
[   42.546533][ T4477]  dump_stack_lvl+0xe8/0x140
[   42.546554][ T4477]  dump_stack+0x15/0x1b
[   42.546571][ T4477]  should_fail_ex+0x265/0x280
[   42.546606][ T4477]  ? get_mountpoint+0x17e/0x370
[   42.546693][ T4477]  should_failslab+0x8c/0xb0
[   42.546715][ T4477]  __kmalloc_cache_noprof+0x4c/0x320
[   42.546748][ T4477]  get_mountpoint+0x17e/0x370
[   42.546770][ T4477]  do_lock_mount+0x1e4/0x380
[   42.546839][ T4477]  do_loopback+0x17c/0x2a0
[   42.546920][ T4477]  path_mount+0x3dc/0xb20
[   42.546941][ T4477]  ? user_path_at+0x109/0x130
[   42.546975][ T4477]  __se_sys_mount+0x28f/0x2e0
[   42.547033][ T4477]  ? fput+0x8f/0xc0
[   42.547064][ T4477]  __x64_sys_mount+0x67/0x80
[   42.547089][ T4477]  x64_sys_call+0x2b4d/0x2ff0
[   42.547151][ T4477]  do_syscall_64+0xd2/0x200
[   42.547173][ T4477]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   42.547259][ T4477]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   42.547279][ T4477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.547306][ T4477] RIP: 0033:0x7f0c3926eb69
[   42.547321][ T4477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   42.547340][ T4477] RSP: 002b:00007f0c378cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   42.547359][ T4477] RAX: ffffffffffffffda RBX: 00007f0c39495fa0 RCX: 00007f0c3926eb69
[   42.547371][ T4477] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000380
[   42.547383][ T4477] RBP: 00007f0c378cf090 R08: 0000000000000000 R09: 0000000000000000
[   42.547462][ T4477] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001
[   42.547472][ T4477] R13: 0000000000000000 R14: 00007f0c39495fa0 R15: 00007ffe67ecac28
[   42.547488][ T4477]  </TASK>
[   42.799923][ T4481] loop0: detected capacity change from 0 to 128
[   42.857533][ T4489] loop4: detected capacity change from 0 to 164
[   42.871952][ T4489] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   42.874021][ T4490] bpf: Bad value for 'gid'
[   42.884861][ T4489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.175'.
[   42.947473][ T4494] rdma_op ffff8881036d6980 conn xmit_rdma 0000000000000000
[   42.969759][ T4473] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512)
[   42.977256][ T4473] FAT-fs (loop0): Filesystem has been set read-only
[   42.987650][ T4473] netlink: 100 bytes leftover after parsing attributes in process `syz.0.169'.
[   43.023497][ T4499] loop4: detected capacity change from 0 to 1024
[   43.050096][ T4499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.116275][ T4499] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.178: Allocating blocks 449-513 which overlap fs metadata
[   43.215114][ T4499] SELinux:  Context @ is not valid (left unmapped).
[   43.224934][ T4510] loop0: detected capacity change from 0 to 512
[   43.334034][ T4510] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   43.344584][ T4499] EXT4-fs (loop4): pa ffff888106d9c0e0: logic 48, phys. 177, len 21
[   43.352652][ T4499] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[   43.381987][ T4510] EXT4-fs (loop0): invalid journal inode
[   43.391373][ T4510] EXT4-fs (loop0): can't get journal size
[   43.420667][ T4510] EXT4-fs (loop0): 1 truncate cleaned up
[   43.463554][ T4510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.496591][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.563899][ T4510] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.618803][ T4518] loop4: detected capacity change from 0 to 512
[   43.639183][ T4518] EXT4-fs: Ignoring removed nobh option
[   43.650598][ T4518] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[   43.740214][ T4523] syz.4.186 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   43.759525][ T4527] 9pnet_fd: Insufficient options for proto=fd
[   43.790365][   T29] kauditd_printk_skb: 1143 callbacks suppressed
[   43.790380][   T29] audit: type=1326 audit(1754156339.551:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f82352f5b27 code=0x7ffc0000
[   43.819826][   T29] audit: type=1326 audit(1754156339.551:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f823529ad69 code=0x7ffc0000
[   43.843136][   T29] audit: type=1326 audit(1754156339.561:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f82352feb69 code=0x7ffc0000
[   43.866747][   T29] audit: type=1326 audit(1754156339.561:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f82352f5b27 code=0x7ffc0000
[   43.890016][   T29] audit: type=1326 audit(1754156339.561:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f823529ad69 code=0x7ffc0000
[   43.913385][   T29] audit: type=1326 audit(1754156339.561:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f82352feb69 code=0x7ffc0000
[   43.936659][   T29] audit: type=1326 audit(1754156339.561:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f82352f5b27 code=0x7ffc0000
[   43.937017][ T4527] loop0: detected capacity change from 0 to 2048
[   43.959942][   T29] audit: type=1326 audit(1754156339.561:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f823529ad69 code=0x7ffc0000
[   43.959974][   T29] audit: type=1326 audit(1754156339.561:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f82352feb69 code=0x7ffc0000
[   44.012711][   T29] audit: type=1326 audit(1754156339.561:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f82352f5b27 code=0x7ffc0000
[   44.205693][ T4541] FAULT_INJECTION: forcing a failure.
[   44.205693][ T4541] name failslab, interval 1, probability 0, space 0, times 0
[   44.218378][ T4541] CPU: 1 UID: 0 PID: 4541 Comm: syz.4.194 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) 
[   44.218404][ T4541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   44.218455][ T4541] Call Trace:
[   44.218461][ T4541]  <TASK>
[   44.218467][ T4541]  __dump_stack+0x1d/0x30
[   44.218547][ T4541]  dump_stack_lvl+0xe8/0x140
[   44.218564][ T4541]  dump_stack+0x15/0x1b
[   44.218578][ T4541]  should_fail_ex+0x265/0x280
[   44.218614][ T4541]  should_failslab+0x8c/0xb0
[   44.218636][ T4541]  kmem_cache_alloc_noprof+0x50/0x310
[   44.218672][ T4541]  ? __anon_vma_prepare+0xcd/0x2f0
[   44.218710][ T4541]  __anon_vma_prepare+0xcd/0x2f0
[   44.218778][ T4541]  handle_mm_fault+0x1d58/0x2c20
[   44.218810][ T4541]  do_user_addr_fault+0x636/0x1090
[   44.218846][ T4541]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   44.218896][ T4541]  exc_page_fault+0x62/0xa0
[   44.218973][ T4541]  asm_exc_page_fault+0x26/0x30
[   44.219026][ T4541] RIP: 0033:0x7f82351c0ce3
[   44.219041][ T4541] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[   44.219058][ T4541] RSP: 002b:00007f82339664a0 EFLAGS: 00010206
[   44.219072][ T4541] RAX: 0000000000000000 RBX: 00007f8233966540 RCX: 00007f822b547000
[   44.219083][ T4541] RDX: 00007f82339666e0 RSI: 000000000000007f RDI: 00007f82339665e0
[   44.219094][ T4541] RBP: 0000000000000139 R08: 0000000000000008 R09: 00000000000000b5
[   44.219104][ T4541] R10: 00000000000000c2 R11: 00007f8233966540 R12: 00007f8233966540
[   44.219115][ T4541] R13: 00007f823539d940 R14: 00000000000000eb R15: 00007f82339665e0
[   44.219170][ T4541]  </TASK>
[   44.383172][ T4541] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   44.390776][ T4534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.190'.
[   44.403131][ T4538] loop3: detected capacity change from 0 to 512
[   44.412568][ T4541] loop4: detected capacity change from 0 to 128
[   44.419377][ T4538] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   44.434786][ T4534] bridge0: port 3(macvlan2) entered blocking state
[   44.441376][ T4534] bridge0: port 3(macvlan2) entered disabled state
[   44.472754][ T4538] EXT4-fs (loop3): 1 orphan inode deleted
[   44.478554][ T4538] EXT4-fs (loop3): 1 truncate cleaned up
[   44.485183][ T4542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'.
[   44.500116][ T4534] macvlan2: entered allmulticast mode
[   44.505546][ T4534] bridge0: entered allmulticast mode
[   44.512457][ T4538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.525372][ T4534] macvlan2: left allmulticast mode
[   44.530632][ T4534] bridge0: left allmulticast mode
[   44.544151][ T4480] syz.1.170 (4480) used greatest stack depth: 6352 bytes left
[   44.611780][ T4538] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   44.676896][ T4558] loop5: detected capacity change from 0 to 512
[   44.683745][ T4558] EXT4-fs: Ignoring removed bh option
[   44.691180][ T4558] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 36864
[   44.704498][ T4559] loop4: detected capacity change from 0 to 512
[   44.740806][ T4559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.754924][ T4559] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.779006][ T4559] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.861442][ T4567] Zero length message leads to an empty skb
[   44.873402][ T4564] netlink: 'syz.5.200': attribute type 1 has an invalid length.
[   44.906550][ T4550] loop4: detected capacity change from 0 to 1024
[   44.934266][ T4550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.957102][ T4550] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.971452][ T4550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.001982][ T4550] usb usb1: check_ctrlrecip: process 4550 (+}[@) requesting ep 01 but needs 81
[   45.020225][ T4550] vhci_hcd: default hub control req: 020f v0004 i0001 l0
[   45.055002][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.112132][ T4594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'.
[   45.124891][ T4594] bridge0: port 3(macvlan2) entered blocking state
[   45.131615][ T4594] bridge0: port 3(macvlan2) entered disabled state
[   45.142541][ T4594] macvlan2: entered allmulticast mode
[   45.148070][ T4594] bridge0: entered allmulticast mode
[   45.165602][ T4594] macvlan2: left allmulticast mode
[   45.170811][ T4594] bridge0: left allmulticast mode
[   45.411329][ T4598] FAULT_INJECTION: forcing a failure.
[   45.411329][ T4598] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   45.424622][ T4598] CPU: 1 UID: 0 PID: 4598 Comm: syz.1.213 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) 
[   45.424652][ T4598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   45.424665][ T4598] Call Trace:
[   45.424671][ T4598]  <TASK>
[   45.424679][ T4598]  __dump_stack+0x1d/0x30
[   45.424701][ T4598]  dump_stack_lvl+0xe8/0x140
[   45.424722][ T4598]  dump_stack+0x15/0x1b
[   45.424813][ T4598]  should_fail_ex+0x265/0x280
[   45.424851][ T4598]  should_fail+0xb/0x20
[   45.424949][ T4598]  should_fail_usercopy+0x1a/0x20
[   45.424970][ T4598]  _copy_from_user+0x1c/0xb0
[   45.425017][ T4598]  restore_altstack+0x4b/0x2d0
[   45.425044][ T4598]  ? __set_task_blocked+0x23a/0x2a0
[   45.425068][ T4598]  __ia32_sys_rt_sigreturn+0xdc/0x350
[   45.425091][ T4598]  ? _raw_spin_unlock_irq+0x26/0x50
[   45.425117][ T4598]  ? signal_setup_done+0x266/0x290
[   45.425155][ T4598]  ? xfd_validate_state+0x45/0xf0
[   45.425253][ T4598]  ? fpu__clear_user_states+0x63/0x1e0
[   45.425287][ T4598]  ? fpregs_mark_activate+0x66/0x140
[   45.425379][ T4598]  ? fpu__clear_user_states+0x63/0x1e0
[   45.425453][ T4598]  ? arch_do_signal_or_restart+0x2f3/0x480
[   45.425520][ T4598]  x64_sys_call+0x2d3c/0x2ff0
[   45.425544][ T4598]  do_syscall_64+0xd2/0x200
[   45.425568][ T4598]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   45.425650][ T4598]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   45.425679][ T4598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.425700][ T4598] RIP: 0033:0x7f83c066ad69
[   45.425716][ T4598] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[   45.425735][ T4598] RSP: 002b:00007f83bed36a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f
[   45.425752][ T4598] RAX: ffffffffffffffda RBX: 00007f83c08f5fa0 RCX: 00007f83c066ad69
[   45.425763][ T4598] RDX: 00007f83bed36a80 RSI: 00007f83bed36bb0 RDI: 0000000000000011
[   45.425844][ T4598] RBP: 00007f83bed37090 R08: 0000000000000000 R09: 0000000000000000
[   45.425855][ T4598] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[   45.425868][ T4598] R13: 0000000000000000 R14: 00007f83c08f5fa0 R15: 00007ffc54bc9d98
[   45.425887][ T4598]  </TASK>
[   45.771420][ T4603] loop3: detected capacity change from 0 to 512
[   45.787982][ T4603] EXT4-fs: Ignoring removed bh option
[   45.874513][ T4603] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm.
[   45.930660][ T4612] netlink: 'syz.5.216': attribute type 1 has an invalid length.
[   46.122099][ T4630] loop4: detected capacity change from 0 to 128
[   46.133060][ T4626] Driver unsupported XDP return value 0 on prog  (id 227) dev N/A, expect packet loss!
[   46.149152][ T4626] loop3: detected capacity change from 0 to 512
[   46.158895][ T4630] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   46.178032][ T4626] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   46.198970][ T4626] EXT4-fs (loop3): mount failed
[   46.217579][ T4630] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   46.238061][ T4628] loop0: detected capacity change from 0 to 2048
[   46.289432][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   46.291003][ T4628]  loop0: p1 < > p4
[   46.308603][ T4628] loop0: p4 size 8388608 extends beyond EOD, truncated
[   46.422163][ T4657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'.
[   46.431109][ T4657] netlink: 'syz.1.234': attribute type 29 has an invalid length.
[   46.439054][ T4657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'.
[   46.525144][ T4669] hub 9-0:1.0: USB hub found
[   46.538908][ T4669] hub 9-0:1.0: 8 ports detected
[   46.966089][ T4697] loop0: detected capacity change from 0 to 512
[   46.983384][ T4697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.996694][ T4697] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.011094][ T4703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.245'.
[   47.023682][ T4703] bridge0: port 3(macvlan2) entered blocking state
[   47.030399][ T4703] bridge0: port 3(macvlan2) entered disabled state
[   47.037749][ T4697] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.048584][ T4703] macvlan2: entered allmulticast mode
[   47.054116][ T4703] bridge0: entered allmulticast mode
[   47.063490][ T4703] macvlan2: left allmulticast mode
[   47.068813][ T4703] bridge0: left allmulticast mode
[   47.073102][ T4707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'.
[   47.091548][ T4707] bridge0: port 3(macvlan2) entered blocking state
[   47.098154][ T4707] bridge0: port 3(macvlan2) entered disabled state
[   47.104989][ T4709] loop1: detected capacity change from 0 to 512
[   47.105399][ T4707] macvlan2: entered allmulticast mode
[   47.116642][ T4707] bridge0: entered allmulticast mode
[   47.122048][ T4709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.122120][ T4709] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.122948][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.155142][ T4707] macvlan2: left allmulticast mode
[   47.160507][ T4707] bridge0: left allmulticast mode
[   47.186690][ T4690] loop0: detected capacity change from 0 to 1024
[   47.197994][ T4714] loop5: detected capacity change from 0 to 512
[   47.205174][ T4714] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal
[   47.215337][ T4690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.227626][ T4690] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.249277][ T4699] loop1: detected capacity change from 0 to 1024
[   47.254409][ T4690] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.274458][ T4690] usb usb1: check_ctrlrecip: process 4690 (+}[@) requesting ep 01 but needs 81
[   47.291928][ T4699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.293979][ T4690] vhci_hcd: default hub control req: 020f v0004 i0001 l0
[   47.348837][ T4699] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.370471][ T4726] netlink: 'syz.3.250': attribute type 1 has an invalid length.
[   47.387599][ T4699] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.462328][ T4699] usb usb1: check_ctrlrecip: process 4699 (+}[@) requesting ep 01 but needs 81
[   47.477362][ T4699] vhci_hcd: default hub control req: 020f v0004 i0001 l0
[   47.498022][ T4745] rdma_op ffff88811ac4ad80 conn xmit_rdma 0000000000000000
[   47.522114][ T4739] loop5: detected capacity change from 0 to 512
[   47.544384][ T4739] EXT4-fs (loop5): orphan cleanup on readonly fs
[   47.560504][ T4757] bpf: Bad value for 'gid'
[   47.583323][ T4739] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.248: Failed to acquire dquot type 1
[   47.656639][ T4733] loop4: detected capacity change from 0 to 512
[   47.667355][ T4739] EXT4-fs (loop5): 1 truncate cleaned up
[   47.677243][ T4739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   47.688711][ T4761] loop3: detected capacity change from 0 to 512
[   47.694699][ T4733] EXT4-fs: Ignoring removed bh option
[   47.706129][ T4761] EXT4-fs (loop3): orphan cleanup on readonly fs
[   47.719015][ T4777] netlink: 'syz.1.262': attribute type 1 has an invalid length.
[   47.732067][ T4761] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.260: Failed to acquire dquot type 1
[   47.732821][ T4733] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm.
[   47.754305][ T4761] EXT4-fs (loop3): 1 truncate cleaned up
[   47.760709][ T4761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   47.827836][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.860658][ T4789] FAULT_INJECTION: forcing a failure.
[   47.860658][ T4789] name failslab, interval 1, probability 0, space 0, times 0
[   47.873313][ T4789] CPU: 1 UID: 0 PID: 4789 Comm: syz.1.265 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) 
[   47.873343][ T4789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   47.873357][ T4789] Call Trace:
[   47.873363][ T4789]  <TASK>
[   47.873371][ T4789]  __dump_stack+0x1d/0x30
[   47.873393][ T4789]  dump_stack_lvl+0xe8/0x140
[   47.873429][ T4789]  dump_stack+0x15/0x1b
[   47.873447][ T4789]  should_fail_ex+0x265/0x280
[   47.873481][ T4789]  should_failslab+0x8c/0xb0
[   47.873503][ T4789]  kmem_cache_alloc_noprof+0x50/0x310
[   47.873647][ T4789]  ? __inet_hash_connect+0xbdf/0x1350
[   47.873681][ T4789]  __inet_hash_connect+0xbdf/0x1350
[   47.873716][ T4789]  inet_hash_connect+0xd1/0xf0
[   47.873760][ T4789]  tcp_v4_connect+0x783/0xad0
[   47.873867][ T4789]  __inet_stream_connect+0x169/0x7e0
[   47.873899][ T4789]  ? tcp_sendmsg_fastopen+0x172/0x520
[   47.873977][ T4789]  ? should_failslab+0x8c/0xb0
[   47.874003][ T4789]  ? __kmalloc_cache_noprof+0x189/0x320
[   47.874030][ T4789]  tcp_sendmsg_fastopen+0x43a/0x520
[   47.874072][ T4789]  tcp_sendmsg_locked+0x26e1/0x2c00
[   47.874115][ T4789]  ? mntput_no_expire+0x6f/0x460
[   47.874145][ T4789]  ? __rcu_read_unlock+0x4f/0x70
[   47.874166][ T4789]  ? avc_has_perm_noaudit+0x1b1/0x200
[   47.874260][ T4789]  ? avc_has_perm+0xf7/0x180
[   47.874280][ T4789]  ? _raw_spin_unlock_bh+0x36/0x40
[   47.874314][ T4789]  ? __pfx_tcp_sendmsg+0x10/0x10
[   47.874339][ T4789]  tcp_sendmsg+0x2f/0x50
[   47.874425][ T4789]  inet_sendmsg+0x76/0xd0
[   47.874458][ T4789]  __sock_sendmsg+0x102/0x180
[   47.874515][ T4789]  __sys_sendto+0x268/0x330
[   47.874548][ T4789]  __x64_sys_sendto+0x76/0x90
[   47.874578][ T4789]  x64_sys_call+0x2d05/0x2ff0
[   47.874600][ T4789]  do_syscall_64+0xd2/0x200
[   47.874693][ T4789]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   47.874714][ T4789]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   47.874735][ T4789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.874837][ T4789] RIP: 0033:0x7f83c06ceb69
[   47.874851][ T4789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   47.874867][ T4789] RSP: 002b:00007f83bed37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   47.874965][ T4789] RAX: ffffffffffffffda RBX: 00007f83c08f5fa0 RCX: 00007f83c06ceb69
[   47.874978][ T4789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[   47.874991][ T4789] RBP: 00007f83bed37090 R08: 0000200000e68000 R09: 0000000000000010
[   47.875004][ T4789] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001
[   47.875016][ T4789] R13: 0000000000000000 R14: 00007f83c08f5fa0 R15: 00007ffc54bc9d98
[   47.875034][ T4789]  </TASK>
[   48.212800][ T4800] loop4: detected capacity change from 0 to 128
[   48.253908][ T3964] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.274503][ T4791] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512)
[   48.282066][ T4791] FAT-fs (loop4): Filesystem has been set read-only
[   48.290598][ T4809] FAULT_INJECTION: forcing a failure.
[   48.290598][ T4809] name fail_futex, interval 1, probability 0, space 0, times 1
[   48.303440][ T4809] CPU: 1 UID: 0 PID: 4809 Comm: syz.3.273 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) 
[   48.303469][ T4809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   48.303482][ T4809] Call Trace:
[   48.303488][ T4809]  <TASK>
[   48.303495][ T4809]  __dump_stack+0x1d/0x30
[   48.303514][ T4809]  dump_stack_lvl+0xe8/0x140
[   48.303559][ T4809]  dump_stack+0x15/0x1b
[   48.303575][ T4809]  should_fail_ex+0x265/0x280
[   48.303605][ T4809]  should_fail+0xb/0x20
[   48.303711][ T4809]  get_futex_key+0x8e3/0xbd0
[   48.303734][ T4809]  futex_wait_requeue_pi+0x15c/0x640
[   48.303764][ T4809]  ? __pfx_futex_wake_mark+0x10/0x10
[   48.303857][ T4809]  do_futex+0x136/0x380
[   48.303884][ T4809]  __se_sys_futex+0x2ed/0x360
[   48.303910][ T4809]  __x64_sys_futex+0x78/0x90
[   48.304012][ T4809]  x64_sys_call+0x2e39/0x2ff0
[   48.304033][ T4809]  do_syscall_64+0xd2/0x200
[   48.304057][ T4809]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   48.304099][ T4809]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   48.304122][ T4809]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.304142][ T4809] RIP: 0033:0x7f9acf15eb69
[   48.304158][ T4809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   48.304184][ T4809] RSP: 002b:00007f9acd7bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   48.304249][ T4809] RAX: ffffffffffffffda RBX: 00007f9acf385fa0 RCX: 00007f9acf15eb69
[   48.304261][ T4809] RDX: 0000000000000000 RSI: 000080000000000b RDI: 000020000000cffc
[   48.304272][ T4809] RBP: 00007f9acd7bf090 R08: 0000200000048000 R09: 0000000000000300
[   48.304283][ T4809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   48.304294][ T4809] R13: 0000000000000000 R14: 00007f9acf385fa0 R15: 00007ffd5bba12a8
[   48.304380][ T4809]  </TASK>
[   48.561587][ T4822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'.
[   48.619535][ T4834] bpf: Bad value for 'gid'
[   48.728484][ T4856] loop3: detected capacity change from 0 to 1024
[   48.741779][ T4856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.770460][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.793131][ T4869] loop0: detected capacity change from 0 to 512
[   48.800812][   T29] kauditd_printk_skb: 627 callbacks suppressed
[   48.800826][   T29] audit: type=1400 audit(1754156344.571:3516): avc:  denied  { append } for  pid=4867 comm="syz.3.283" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   48.802940][   T29] audit: type=1326 audit(1754156344.571:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4820 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f83c06c5b27 code=0x7ffc0000
[   48.803064][   T29] audit: type=1326 audit(1754156344.571:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4820 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f83c066ad69 code=0x7ffc0000
[   48.803146][   T29] audit: type=1326 audit(1754156344.571:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4820 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f83c06ceb69 code=0x7ffc0000
[   48.807453][   T29] audit: type=1326 audit(1754156344.571:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4820 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f83c06c5b27 code=0x7ffc0000
[   48.822449][ T4869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.904620][   T29] audit: type=1326 audit(1754156344.601:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4820 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f83c066ad69 code=0x7ffc0000
[   48.929172][ T4869] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.950240][   T29] audit: type=1326 audit(1754156344.601:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4820 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f83c06c5b27 code=0x7ffc0000
[   49.019651][   T29] audit: type=1326 audit(1754156344.601:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4820 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f83c066ad69 code=0x7ffc0000
[   49.043054][   T29] audit: type=1326 audit(1754156344.601:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4820 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f83c06ceb69 code=0x7ffc0000
[   49.043083][   T29] audit: type=1326 audit(1754156344.601:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4820 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f83c06c5b27 code=0x7ffc0000
[   49.046101][ T4869] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.109828][ T4882] bpf: Bad value for 'gid'
[   49.142263][ T4883] netlink: 'syz.5.281': attribute type 21 has an invalid length.
[   49.142283][ T4883] IPv6: NLM_F_CREATE should be specified when creating new route
[   49.217407][ T4888] loop4: detected capacity change from 0 to 128
[   49.259439][ T4880] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512)
[   49.259453][ T4890] loop3: detected capacity change from 0 to 512
[   49.259852][ T4890] EXT4-fs: Ignoring removed nomblk_io_submit option
[   49.266922][ T4880] FAT-fs (loop4): Filesystem has been set read-only
[   49.287527][ T4890] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   49.300655][ T4890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.313680][ T4890] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.346591][ T3381] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0
[   49.354036][ T3381] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0
[   49.361477][ T3381] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0
[   49.368929][ T3381] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0
[   49.376304][ T3381] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0
[   49.383725][ T3381] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0
[   49.391137][ T3381] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0
[   49.398489][ T3381] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0
[   49.405873][ T3381] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0
[   49.413320][ T3381] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0
[   49.423049][ T3381] hid-generic 0008:0006:0007.0001: hidraw0: <UNKNOWN> HID v0.0b Device [syz1] on syz1
[   49.471070][ T4903] bpf: Bad value for 'gid'
[   49.615659][ T4910] netlink: 'syz.4.294': attribute type 1 has an invalid length.
[   49.628384][ T4913] netlink: 'syz.3.295': attribute type 1 has an invalid length.
[   49.693637][ T4919] bpf: Bad value for 'gid'
[   49.766447][ T4921] netlink: 'syz.0.296': attribute type 1 has an invalid length.
[   49.823745][ T4923] loop4: detected capacity change from 0 to 128
[   49.929399][ T4925] loop5: detected capacity change from 0 to 512
[   49.937299][ T4925] EXT4-fs (loop5): inodes count not valid: 63 vs 32
[   50.103553][ T4918] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512)
[   50.111095][ T4918] FAT-fs (loop4): Filesystem has been set read-only
[   50.280758][ T4936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.303'.
[   50.538258][ T4946] rdma_op ffff88811a383980 conn xmit_rdma 0000000000000000
[   50.584413][ T4953] loop5: detected capacity change from 0 to 512
[   50.597873][ T4953] EXT4-fs: Ignoring removed bh option
[   50.622326][ T4953] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm.
[   50.642636][ T4954] loop4: detected capacity change from 0 to 512
[   50.654683][ T4960] rdma_op ffff88811a382180 conn xmit_rdma 0000000000000000
[   50.695462][ T4954] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.734830][ T4962] loop3: detected capacity change from 0 to 512
[   50.742184][ T4962] EXT4-fs: Ignoring removed bh option
[   50.748116][ T4962] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm.
[   50.759657][ T4968] rdma_op ffff88811a382180 conn xmit_rdma 0000000000000000
[   50.779993][ T4944] loop4: detected capacity change from 0 to 1024
[   50.838869][ T4944] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.869374][ T4978] bpf: Bad value for 'gid'
[   50.880801][ T4944] usb usb1: check_ctrlrecip: process 4944 (+}[@) requesting ep 01 but needs 81
[   50.891604][ T4944] vhci_hcd: default hub control req: 020f v0004 i0001 l0
[   50.974998][ T4973] loop5: detected capacity change from 0 to 512
[   50.983852][ T4973] EXT4-fs: Ignoring removed bh option
[   50.997393][ T4973] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm.
[   51.011583][ T4990] netlink: 'syz.1.319': attribute type 1 has an invalid length.
[   51.094184][ T4995] rdma_op ffff8881199ecd80 conn xmit_rdma 0000000000000000
[   51.265770][ T4999] loop0: detected capacity change from 0 to 512
[   51.281147][ T4999] EXT4-fs: Ignoring removed bh option
[   51.287400][ T4999] /dev/loop0: Can't open blockdev
[   51.356996][ T5010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.328'.
[   51.384760][ T5010] bridge0: port 3(macvlan2) entered blocking state
[   51.391429][ T5010] bridge0: port 3(macvlan2) entered disabled state
[   51.399273][ T5010] macvlan2: entered allmulticast mode
[   51.404711][ T5010] bridge0: entered allmulticast mode
[   51.411768][ T5010] macvlan2: left allmulticast mode
[   51.416917][ T5010] bridge0: left allmulticast mode
[   51.508810][ T5007] loop0: detected capacity change from 0 to 512
[   51.517118][ T5007] EXT4-fs: Ignoring removed bh option
[   51.523781][ T5007] /dev/loop0: Can't open blockdev
[   51.536124][ T5016] FAULT_INJECTION: forcing a failure.
[   51.536124][ T5016] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   51.549299][ T5016] CPU: 0 UID: 0 PID: 5016 Comm: syz.5.331 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) 
[   51.549417][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   51.549482][ T5016] Call Trace:
[   51.549487][ T5016]  <TASK>
[   51.549493][ T5016]  __dump_stack+0x1d/0x30
[   51.549512][ T5016]  dump_stack_lvl+0xe8/0x140
[   51.549529][ T5016]  dump_stack+0x15/0x1b
[   51.549546][ T5016]  should_fail_ex+0x265/0x280
[   51.549580][ T5016]  should_fail+0xb/0x20
[   51.549670][ T5016]  should_fail_usercopy+0x1a/0x20
[   51.549737][ T5016]  _copy_from_user+0x1c/0xb0
[   51.549764][ T5016]  ___sys_sendmsg+0xc1/0x1d0
[   51.549848][ T5016]  __x64_sys_sendmsg+0xd4/0x160
[   51.549886][ T5016]  x64_sys_call+0x191e/0x2ff0
[   51.549909][ T5016]  do_syscall_64+0xd2/0x200
[   51.549995][ T5016]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   51.550022][ T5016]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   51.550045][ T5016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.550087][ T5016] RIP: 0033:0x7f0c3926eb69
[   51.550103][ T5016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   51.550195][ T5016] RSP: 002b:00007f0c378cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   51.550216][ T5016] RAX: ffffffffffffffda RBX: 00007f0c39495fa0 RCX: 00007f0c3926eb69
[   51.550229][ T5016] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000005
[   51.550243][ T5016] RBP: 00007f0c378cf090 R08: 0000000000000000 R09: 0000000000000000
[   51.550255][ T5016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   51.550268][ T5016] R13: 0000000000000000 R14: 00007f0c39495fa0 R15: 00007ffe67ecac28
[   51.550399][ T5016]  </TASK>
[   51.796379][ T5024] netlink: 4 bytes leftover after parsing attributes in process `syz.5.334'.
[   51.883736][ T5040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'.
[   51.923282][ T5040] bridge0: port 3(macvlan2) entered blocking state
[   51.929988][ T5040] bridge0: port 3(macvlan2) entered disabled state
[   51.949627][ T5040] macvlan2: entered allmulticast mode
[   51.955040][ T5040] bridge0: entered allmulticast mode
[   51.961911][ T5040] macvlan2: left allmulticast mode
[   51.967140][ T5040] bridge0: left allmulticast mode
[   51.979534][ T5046] loop1: detected capacity change from 0 to 512
[   51.986560][ T5046] EXT4-fs: Ignoring removed bh option
[   52.008130][ T5046] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm.
[   52.026638][ T5045] loop4: detected capacity change from 0 to 1024
[   52.046138][ T5045] ------------[ cut here ]------------
[   52.051710][ T5045] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x0, 0x1] s64=[0x0, 0x1] u32=[0x1, 0x0] s32=[0x0, 0x1] var_off=(0x0, 0x1)(1)
[   52.067925][ T5045] WARNING: CPU: 1 PID: 5045 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680
[   52.078237][ T5045] Modules linked in:
[   52.082167][ T5045] CPU: 1 UID: 0 PID: 5045 Comm: syz.4.342 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) 
[   52.094386][ T5045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   52.104863][ T5045] RIP: 0010:reg_bounds_sanity_check+0x673/0x680
[   52.111215][ T5045] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 42 8e ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90
[   52.130919][ T5045] RSP: 0018:ffffc9000132f440 EFLAGS: 00010292
[   52.136995][ T5045] RAX: c0b55fa77dcc5e00 RBX: ffff88811a94e040 RCX: 0000000000080000
[   52.145044][ T5045] RDX: ffffc90005395000 RSI: 0000000000004b48 RDI: 0000000000004b49
[   52.153100][ T5045] RBP: 0000000000000000 R08: 0001c9000132f27f R09: 0000000000000000
[   52.161284][ T5045] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a94e000
[   52.169281][ T5045] R13: ffff888109290000 R14: ffff888109290000 R15: ffff88811a94e038
[   52.177250][ T5045] FS:  00007f82339676c0(0000) GS:ffff8882aef49000(0000) knlGS:0000000000000000
[   52.186260][ T5045] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   52.192904][ T5045] CR2: 0000000000000000 CR3: 000000010457a000 CR4: 00000000003506f0
[   52.201190][ T5045] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   52.209179][ T5045] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[   52.217226][ T5045] Call Trace:
[   52.220526][ T5045]  <TASK>
[   52.223457][ T5045]  reg_set_min_max+0x215/0x260
[   52.228248][ T5045]  check_cond_jmp_op+0x1080/0x16e0
[   52.233426][ T5045]  do_check+0x332a/0x7a10
[   52.237756][ T5045]  ? __account_obj_stock+0x211/0x350
[   52.243077][ T5045]  ? __rcu_read_unlock+0x4f/0x70
[   52.248036][ T5045]  ? __pfx_verbose+0x10/0x10
[   52.252658][ T5045]  ? __pfx_disasm_kfunc_name+0x10/0x10
[   52.258186][ T5045]  do_check_common+0xc3a/0x1290
[   52.263109][ T5045]  ? __pfx_disasm_kfunc_name+0x10/0x10
[   52.268669][ T5045]  bpf_check+0x942b/0xd9e0
[   52.273226][ T5045]  ? __rcu_read_unlock+0x4f/0x70
[   52.278166][ T5045]  ? __alloc_frozen_pages_noprof+0x188/0x360
[   52.284199][ T5045]  ? alloc_pages_bulk_noprof+0x4b8/0x540
[   52.289991][ T5045]  ? __vmap_pages_range_noflush+0xbb3/0xbd0
[   52.295925][ T5045]  ? pcpu_block_update+0x24e/0x3b0
[   52.301140][ T5045]  ? _find_next_zero_bit+0x64/0xa0
[   52.306608][ T5045]  ? pcpu_block_refresh_hint+0x157/0x170
[   52.312280][ T5045]  ? pcpu_block_update_hint_alloc+0x63d/0x660
[   52.318419][ T5045]  ? css_rstat_updated+0xb7/0x240
[   52.323549][ T5045]  ? __rcu_read_unlock+0x4f/0x70
[   52.328487][ T5045]  ? pcpu_memcg_post_alloc_hook+0xf1/0x150
[   52.334400][ T5045]  ? should_fail_ex+0x30/0x280
[   52.339193][ T5045]  ? selinux_bpf_prog_load+0x36/0xf0
[   52.344615][ T5045]  ? should_failslab+0x8c/0xb0
[   52.349449][ T5045]  ? __kmalloc_cache_noprof+0x189/0x320
[   52.355020][ T5045]  ? selinux_bpf_prog_load+0xbf/0xf0
[   52.360351][ T5045]  ? security_bpf_prog_load+0x2c/0xa0
[   52.365764][ T5045]  bpf_prog_load+0xedd/0x1070
[   52.370487][ T5045]  ? security_bpf+0x2b/0x90
[   52.375050][ T5045]  __sys_bpf+0x462/0x7b0
[   52.379345][ T5045]  __x64_sys_bpf+0x41/0x50
[   52.383770][ T5045]  x64_sys_call+0x2aea/0x2ff0
[   52.388445][ T5045]  do_syscall_64+0xd2/0x200
[   52.392978][ T5045]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   52.399080][ T5045]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   52.405158][ T5045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.411088][ T5045] RIP: 0033:0x7f82352feb69
[   52.415503][ T5045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   52.435183][ T5045] RSP: 002b:00007f8233967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   52.443723][ T5045] RAX: ffffffffffffffda RBX: 00007f8235525fa0 RCX: 00007f82352feb69
[   52.451716][ T5045] RDX: 000000000000002d RSI: 00002000002a0fb8 RDI: 0000000000000005
[   52.459715][ T5045] RBP: 00007f8235381df1 R08: 0000000000000000 R09: 0000000000000000
[   52.467685][ T5045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   52.475685][ T5045] R13: 0000000000000000 R14: 00007f8235525fa0 R15: 00007ffc49a28408
[   52.483740][ T5045]  </TASK>
[   52.486756][ T5045] ---[ end trace 0000000000000000 ]---
[   52.677161][ T5060] FAULT_INJECTION: forcing a failure.
[   52.677161][ T5060] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   52.690446][ T5060] CPU: 1 UID: 0 PID: 5060 Comm: syz.1.346 Tainted: G        W           6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) 
[   52.690487][ T5060] Tainted: [W]=WARN
[   52.690494][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   52.690506][ T5060] Call Trace:
[   52.690512][ T5060]  <TASK>
[   52.690519][ T5060]  __dump_stack+0x1d/0x30
[   52.690634][ T5060]  dump_stack_lvl+0xe8/0x140
[   52.690654][ T5060]  dump_stack+0x15/0x1b
[   52.690672][ T5060]  should_fail_ex+0x265/0x280
[   52.690762][ T5060]  should_fail+0xb/0x20
[   52.690800][ T5060]  should_fail_usercopy+0x1a/0x20
[   52.690821][ T5060]  _copy_from_user+0x1c/0xb0
[   52.690896][ T5060]  __sys_bpf+0x178/0x7b0
[   52.690929][ T5060]  __x64_sys_bpf+0x41/0x50
[   52.690954][ T5060]  x64_sys_call+0x2aea/0x2ff0
[   52.691056][ T5060]  do_syscall_64+0xd2/0x200
[   52.691080][ T5060]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   52.691105][ T5060]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   52.691126][ T5060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.691213][ T5060] RIP: 0033:0x7f83c06ceb69
[   52.691233][ T5060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   52.691251][ T5060] RSP: 002b:00007f83bed37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   52.691270][ T5060] RAX: ffffffffffffffda RBX: 00007f83c08f5fa0 RCX: 00007f83c06ceb69
[   52.691283][ T5060] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[   52.691296][ T5060] RBP: 00007f83bed37090 R08: 0000000000000000 R09: 0000000000000000
[   52.691319][ T5060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   52.691332][ T5060] R13: 0000000000000000 R14: 00007f83c08f5fa0 R15: 00007ffc54bc9d98
[   52.691351][ T5060]  </TASK>
[   52.965764][ T5068] loop1: detected capacity change from 0 to 2048
[   52.992685][ T5078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'.
[   53.005147][ T5078] bridge0: port 3(macvlan2) entered blocking state
[   53.011942][ T5078] bridge0: port 3(macvlan2) entered disabled state
[   53.022399][ T5068]  loop1: p4 < >
[   53.026428][ T5078] macvlan2: entered allmulticast mode
[   53.031963][ T5078] bridge0: entered allmulticast mode
[   53.046721][ T5078] macvlan2: left allmulticast mode
[   53.051922][ T5078] bridge0: left allmulticast mode
[   53.069938][ T5068] bridge0: entered promiscuous mode
[   53.075216][ T5068] macsec0: entered promiscuous mode
[   53.082394][ T5068] bridge0: port 3(macsec0) entered blocking state
[   53.088875][ T5068] bridge0: port 3(macsec0) entered disabled state
[   53.101620][ T5068] macsec0: entered allmulticast mode
[   53.106925][ T5068] bridge0: entered allmulticast mode
[   53.112791][ T5068] macsec0: left allmulticast mode
[   53.117819][ T5068] bridge0: left allmulticast mode
[   53.124189][ T5068] bridge0: left promiscuous mode
[   53.314386][ T5096] loop1: detected capacity change from 0 to 512
[   53.323881][ T5096] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   53.336465][ T5096] EXT4-fs (loop1): 1 orphan inode deleted
[   53.342207][ T5096] EXT4-fs (loop1): 1 truncate cleaned up
[   53.419637][ T5102] loop0: detected capacity change from 0 to 512
[   53.426767][ T5102] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   53.439738][ T5096] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   53.440983][ T5102] EXT4-fs (loop0): 1 orphan inode deleted
[   53.459900][ T5102] EXT4-fs (loop0): 1 truncate cleaned up
[   53.544469][ T5109] rdma_op ffff88811b21b180 conn xmit_rdma 0000000000000000
[   53.549621][ T5102] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   53.634736][ T5118] bpf: Bad value for 'gid'
[   53.789510][ T5126] rdma_op ffff88811b218980 conn xmit_rdma 0000000000000000
[   53.796934][ T5127] loop5: detected capacity change from 0 to 512
[   53.810999][ T5127] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.821650][   T29] kauditd_printk_skb: 942 callbacks suppressed
[   53.821662][   T29] audit: type=1400 audit(1754156349.591:4468): avc:  denied  { execmem } for  pid=5130 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   54.001165][ T5133] bpf: Bad value for 'gid'
[   54.045100][ T5135] loop5: detected capacity change from 0 to 1024
[   54.060967][ T5135] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.082104][   T29] audit: type=1400 audit(1754156349.801:4469): avc:  denied  { create } for  pid=5119 comm="syz.5.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   54.138585][   T29] audit: type=1400 audit(1754156349.901:4470): avc:  denied  { getopt } for  pid=5134 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   54.269204][ T5120] usb usb1: check_ctrlrecip: process 5120 (syz.5.367) requesting ep 01 but needs 81
[   54.280020][   T29] audit: type=1400 audit(1754156350.041:4471): avc:  denied  { append } for  pid=5119 comm="syz.5.367" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   54.287336][ T5120] vhci_hcd: default hub control req: 020f v0004 i0001 l0
[   54.314115][   T29] audit: type=1400 audit(1754156350.081:4472): avc:  denied  { create } for  pid=5142 comm=",&#^%" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   54.350986][ T5145] vlan2: entered allmulticast mode
[   54.352615][ T5149] loop0: detected capacity change from 0 to 512
[   54.363325][ T5149] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   54.364043][ T5145] dummy0: entered allmulticast mode
[   54.380042][   T29] audit: type=1400 audit(1754156350.111:4473): avc:  denied  { ioctl } for  pid=5144 comm="wg1" path="socket:[9565]" dev="sockfs" ino=9565 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   54.389099][ T5149] EXT4-fs (loop0): invalid journal inode
[   54.417742][ T5149] EXT4-fs (loop0): can't get journal size
[   54.432815][ T5151] loop5: detected capacity change from 0 to 1764
[   54.443848][   T29] audit: type=1400 audit(1754156350.211:4474): avc:  denied  { mount } for  pid=5150 comm="syz.5.377" name="/" dev="loop5" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   54.467822][ T5149] EXT4-fs (loop0): 1 truncate cleaned up
[   54.494759][ T5154] hub 9-0:1.0: USB hub found
[   54.499442][ T5154] hub 9-0:1.0: 8 ports detected
[   54.499707][   T29] audit: type=1400 audit(1754156350.231:4475): avc:  denied  { unmount } for  pid=3964 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   54.524487][   T29] audit: type=1400 audit(1754156350.261:4476): avc:  denied  { write } for  pid=5153 comm="syz.5.378" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   54.612633][   T29] audit: type=1400 audit(1754156350.331:4477): avc:  denied  { execute } for  pid=5155 comm="syz.4.379" path="/82/cpu.stat" dev="tmpfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   54.620801][ T5160] loop4: detected capacity change from 0 to 1764
[   54.703553][ T5166] C: renamed from team_slave_0 (while UP)
[   54.721968][ T5166] netlink: 'syz.3.382': attribute type 3 has an invalid length.
[   54.729653][ T5166] netlink: 152 bytes leftover after parsing attributes in process `syz.3.382'.
[   54.749613][ T5168] loop1: detected capacity change from 0 to 512
[   54.759612][ T5168] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   54.780169][ T5168] EXT4-fs (loop1): 1 orphan inode deleted
[   54.785923][ T5168] EXT4-fs (loop1): 1 truncate cleaned up
[   54.844785][ T5176] loop4: detected capacity change from 0 to 128
[   54.856630][ T5177] netlink: 20 bytes leftover after parsing attributes in process `syz.3.382'.
[   54.872972][ T5168] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   54.931248][ T5171] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512)
[   54.938791][ T5171] FAT-fs (loop4): Filesystem has been set read-only
[   54.962088][ T5179] netlink: 'syz.0.387': attribute type 1 has an invalid length.
[   55.131791][ T5200] rdma_op ffff8881036d7980 conn xmit_rdma 0000000000000000
[   55.164574][ T5202] loop0: detected capacity change from 0 to 1764
[   55.286937][ T5206] bpf: Bad value for 'gid'
[   55.486828][ T5211] hub 9-0:1.0: USB hub found
[   55.501244][ T5211] hub 9-0:1.0: 8 ports detected
[   55.510866][ T5212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.397'.
[   55.602761][ T5215] bpf: Bad value for 'gid'
[   55.623084][ T5217] loop1: detected capacity change from 0 to 2048
[   55.682420][ T5217] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.723696][ T5217] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.400: bg 0: block 345: padding at end of block bitmap is not set
[   55.741188][ T5217] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117
[   55.753661][ T5217] EXT4-fs (loop1): This should not happen!! Data will be lost
[   55.753661][ T5217] 
[   55.780493][ T5221] netlink: 'syz.3.401': attribute type 1 has an invalid length.
[   55.977457][ T5251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'.
[   55.992810][ T5251] bridge0: port 3(macvlan2) entered blocking state
[   55.999507][ T5251] bridge0: port 3(macvlan2) entered disabled state
[   56.002164][ T5247] hub 9-0:1.0: USB hub found
[   56.007722][ T5251] macvlan2: entered allmulticast mode
[   56.010839][ T5247] hub 9-0:1.0: 8 ports detected
[   56.015934][ T5251] bridge0: entered allmulticast mode
[   56.026282][ T5251] macvlan2: left allmulticast mode
[   56.031510][ T5251] bridge0: left allmulticast mode
[   56.054982][ T5256] rdma_op ffff8881199ed980 conn xmit_rdma 0000000000000000
[   56.071960][ T5257] loop1: detected capacity change from 0 to 512
[   56.110718][ T5257] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.185756][ T5249] loop1: detected capacity change from 0 to 1024
[   56.189103][ T5267] loop3: detected capacity change from 0 to 128
[   56.204974][ T5249] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.224088][ T5249] usb usb1: check_ctrlrecip: process 5249 (+}[@) requesting ep 01 but needs 81
[   56.225050][ T5267] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512)
[   56.233446][ T5249] vhci_hcd: default hub control req: 020f v0004 i0001 l0
[   56.240571][ T5267] FAT-fs (loop3): Filesystem has been set read-only
[   56.260884][ T5267] netlink: 100 bytes leftover after parsing attributes in process `syz.3.413'.
[   56.322365][ T5276] loop4: detected capacity change from 0 to 512
[   56.329513][ T5276] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   56.342568][ T5276] EXT4-fs (loop4): invalid journal inode
[   56.348431][ T5276] EXT4-fs (loop4): can't get journal size
[   56.365134][ T5276] EXT4-fs (loop4): 1 truncate cleaned up
[   56.369615][ T5278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'.
[   56.412530][ T5287] loop4: detected capacity change from 0 to 512
[   56.439771][ T5287] EXT4-fs: test_dummy_encryption option not supported
[   56.470924][ T5287] netlink: 'syz.4.418': attribute type 10 has an invalid length.
[   56.478700][ T5287] netlink: 55 bytes leftover after parsing attributes in process `syz.4.418'.
[   56.673437][ T5301] netlink: 'syz.5.422': attribute type 1 has an invalid length.
[   56.819703][ T5311] loop5: detected capacity change from 0 to 512
[   56.850568][ T5311] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.877724][ T5315] loop0: detected capacity change from 0 to 128
[   56.903777][ T5309] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512)
[   56.911307][ T5309] FAT-fs (loop0): Filesystem has been set read-only
[   56.919969][ T5309] __nla_validate_parse: 1 callbacks suppressed
[   56.919983][ T5309] netlink: 100 bytes leftover after parsing attributes in process `syz.0.425'.
[   56.941383][ T5304] loop5: detected capacity change from 0 to 1024
[   56.960835][ T5304] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.975832][ T5304] usb usb1: check_ctrlrecip: process 5304 (+}[@) requesting ep 01 but needs 81
[   56.986887][ T5304] vhci_hcd: default hub control req: 020f v0004 i0001 l0
[   56.989730][ T5320] bpf: Bad value for 'gid'
[   57.042661][ T5325] loop0: detected capacity change from 0 to 1764
[   57.080410][ T5331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.430'.
[   57.097290][ T5336] loop0: detected capacity change from 0 to 512
[   57.104764][ T5336] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   57.113616][ T5336] EXT4-fs (loop0): invalid journal inode
[   57.119449][ T5336] EXT4-fs (loop0): can't get journal size
[   57.128769][ T5336] EXT4-fs (loop0): 1 truncate cleaned up
[   57.153936][ T5343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'.
[   57.166429][ T5343] bridge0: port 3(macvlan2) entered blocking state
[   57.172998][ T5343] bridge0: port 3(macvlan2) entered disabled state
[   57.179899][ T5343] macvlan2: entered allmulticast mode
[   57.185286][ T5343] bridge0: entered allmulticast mode
[   57.191724][ T5343] macvlan2: left allmulticast mode
[   57.196836][ T5343] bridge0: left allmulticast mode
[   57.216232][ T5345] loop5: detected capacity change from 0 to 1764
[   57.257290][ T5347] hub 9-0:1.0: USB hub found
[   57.260378][ T5349] loop4: detected capacity change from 0 to 1764
[   57.273570][ T5347] hub 9-0:1.0: 8 ports detected
[   57.347789][ T5356] loop4: detected capacity change from 0 to 128
[   57.397897][ T5358] rdma_op ffff88811e47f180 conn xmit_rdma 0000000000000000
[   57.431468][ T5353] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512)
[   57.439027][ T5353] FAT-fs (loop4): Filesystem has been set read-only
[   57.441245][ T5363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.441'.
[   57.475000][ T5353] netlink: 100 bytes leftover after parsing attributes in process `syz.4.438'.
[   57.489013][ T5367] hub 9-0:1.0: USB hub found
[   57.496921][ T5367] hub 9-0:1.0: 8 ports detected
[   57.620612][ T5378] loop3: detected capacity change from 0 to 1764
[   57.645600][ T5380] loop3: detected capacity change from 0 to 512
[   57.839334][ T5383] ==================================================================
[   57.847533][ T5383] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark
[   57.855431][ T5383] 
[   57.857739][ T5383] write to 0xffff88811a4313ec of 4 bytes by task 5384 on cpu 1:
[   57.865338][ T5383]  xas_set_mark+0x12b/0x140
[   57.869821][ T5383]  __folio_start_writeback+0x1dd/0x440
[   57.875271][ T5383]  ext4_bio_write_folio+0x5ad/0x9f0
[   57.880451][ T5383]  mpage_process_page_bufs+0x4a1/0x620
[   57.885896][ T5383]  mpage_prepare_extent_to_map+0x786/0xc00
[   57.891677][ T5383]  ext4_do_writepages+0x708/0x2750
[   57.896783][ T5383]  ext4_writepages+0x176/0x300
[   57.901520][ T5383]  do_writepages+0x1c6/0x310
[   57.906085][ T5383]  file_write_and_wait_range+0x156/0x2c0
[   57.911695][ T5383]  generic_buffers_fsync_noflush+0x45/0x120
[   57.917562][ T5383]  ext4_sync_file+0x1ab/0x690
[   57.922218][ T5383]  vfs_fsync_range+0x10d/0x130
[   57.926955][ T5383]  ext4_buffered_write_iter+0x34f/0x3c0
[   57.932480][ T5383]  ext4_file_write_iter+0x383/0xf00
[   57.937656][ T5383]  iter_file_splice_write+0x5f2/0x970
[   57.943004][ T5383]  direct_splice_actor+0x153/0x2a0
[   57.948094][ T5383]  splice_direct_to_actor+0x30f/0x680
[   57.953438][ T5383]  do_splice_direct+0xda/0x150
[   57.958175][ T5383]  do_sendfile+0x380/0x650
[   57.962572][ T5383]  __x64_sys_sendfile64+0x105/0x150
[   57.967749][ T5383]  x64_sys_call+0x2bb0/0x2ff0
[   57.972400][ T5383]  do_syscall_64+0xd2/0x200
[   57.976882][ T5383]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.982749][ T5383] 
[   57.985050][ T5383] read to 0xffff88811a4313ec of 4 bytes by task 5383 on cpu 0:
[   57.992564][ T5383]  __writeback_single_inode+0x1f9/0x7c0
[   57.998093][ T5383]  writeback_single_inode+0x167/0x3e0
[   58.003463][ T5383]  sync_inode_metadata+0x5b/0x90
[   58.008382][ T5383]  generic_buffers_fsync_noflush+0xd9/0x120
[   58.014252][ T5383]  ext4_sync_file+0x1ab/0x690
[   58.019083][ T5383]  vfs_fsync_range+0x10d/0x130
[   58.023838][ T5383]  ext4_buffered_write_iter+0x34f/0x3c0
[   58.029364][ T5383]  ext4_file_write_iter+0xdbf/0xf00
[   58.034558][ T5383]  iter_file_splice_write+0x5f2/0x970
[   58.039904][ T5383]  direct_splice_actor+0x153/0x2a0
[   58.044998][ T5383]  splice_direct_to_actor+0x30f/0x680
[   58.050346][ T5383]  do_splice_direct+0xda/0x150
[   58.055099][ T5383]  do_sendfile+0x380/0x650
[   58.059500][ T5383]  __x64_sys_sendfile64+0x105/0x150
[   58.064690][ T5383]  x64_sys_call+0x2bb0/0x2ff0
[   58.069349][ T5383]  do_syscall_64+0xd2/0x200
[   58.073838][ T5383]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.079709][ T5383] 
[   58.082019][ T5383] value changed: 0x0a000021 -> 0x00000021
[   58.087709][ T5383] 
[   58.090010][ T5383] Reported by Kernel Concurrency Sanitizer on:
[   58.096237][ T5383] CPU: 0 UID: 0 PID: 5383 Comm: syz.3.446 Tainted: G        W           6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) 
[   58.109750][ T5383] Tainted: [W]=WARN
[   58.113531][ T5383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   58.123563][ T5383] ==================================================================