last executing test programs:

8m41.274495128s ago: executing program 2 (id=1981):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1, 0x0, 0xffffffffffffffff}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0)

8m41.25471764s ago: executing program 2 (id=1982):
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1e4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
r3 = dup2(r0, r0)
write$tun(r3, 0x0, 0x46)
socket$can_bcm(0x1d, 0x2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000ff01000085000000500000009500"/95], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200), 0x440000, 0x0)
ioctl$HIDIOCGUCODE(r5, 0xc018480d, &(0x7f0000000300)={0x2, 0x3, 0xf, 0x1, 0x4d0863cf, 0x7e2f})
ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{}, {}, {}, {}, {}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
alarm(0x5)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2a5c0, 0x1c1}, 0x18)
r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$binfmt_register(r7, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101200, 0x10a)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000004c0)={0x0, 0x2710}, 0x10)
syz_clone(0x80201020, 0x0, 0x0, 0x0, 0x0, 0x0)
set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0)

8m41.178757087s ago: executing program 2 (id=1983):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="40000000060601010000000000000000050000070900020073797a31000000000900030073797a310000000005000100070000000900030073"], 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x40004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18)
io_setup(0x8f0, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xff, 0x1b1, &(0x7f0000001bc0)="$eJzs289qE10YB+A3+dp+SV0kC1fiYsCNq9D0CgxSQQwIShYKgmIbkI4ELAR0YbNz4U14OW71Slx2IRxJJrF/nIBUzVj7PJu8zJlfeGfg5OSEzNPrL/d3RwfDJ8OP0ajVon4rpTiqRTvqsTCJEmtlBwGAi+AopfiSUpou580PkVKquiMA4E9brP/p/4n1HwAuiYePHt/r9fs7D7KsEZG/Gw/Gg+K1GO8N40XksRdb0YqvMf2CMFfUd+72d7aymXa8zw/n+cPx4L/T+W60ol2e7xb57HR+PTZP5rejFVfL89ul+Y24eeNEvhOt+Pw8RpHHbkyzx/m33Sy7fb9/Jn9ldh4AAAD8CzrZd6X7905n2XiR79V++veBM/vrtbjmP4QAUImD12/2n+X53qvKioiYzI804sdzPm0Wja6useyc8cUtrfJm/lrRjN//zusbEfG3XOCFL0b1ZUPNkrlznqIREbOiwg8lYCWOZ3/VnQAAAAAAAAAAAAAAAMus4tGlqq8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvnWwAAAP//cyOKBA==")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x321062, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="862bae191b71fc38ab20181e968d139c78d83d0118582099fc727a83565fb9b30998a0f952c17f52d5b9254ba5c628f96285d246b7dbecef5b4dbb8b51a47c99ec6f288e6e14c90dfc2ecef90f9934d3b32986a9dcd67af7ed48e3c2b038ad3b81e01f9e80be5c98680ea56aed5f368024de12d7df228c9e70c1156bf83b90f76d23aff45ba9d53d3a"], 0x48)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$TIOCMSET(r5, 0x5418, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000dced77f159c24f19d47c6804f6b65607500500380012800b0001006272696467650000280002800500190002000000050017000000000005001600010000000a0014000180c20000000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
fsmount(r2, 0x1, 0xe)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)

8m40.342202924s ago: executing program 2 (id=1996):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6(0xa, 0x805, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000300)="3bde552785fb1a61fc0025e85bb9f521a480fdb27bdb416ba2224ae8c5e56fbe2d7a2b8e44f2466bd8601708b156bbef5ae1c861f391fd16b9de1fd24933976bc8997fda2766c71811c7a455d580c9f6fa79ce716d6bcd6d4fdd2375511314d83f6b52b6073cba1de55f03abf5bb150f847ce09bf4462bd36af24a5e850e1db5223f9f311b79cea2"}, 0x20)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
unlinkat(r2, &(0x7f0000000b40)='./file1\x00', 0x200)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
madvise(&(0x7f000002d000/0x1000)=nil, 0x1000, 0x15)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe40) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
socket$inet6(0xa, 0x805, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000300)="3bde552785fb1a61fc0025e85bb9f521a480fdb27bdb416ba2224ae8c5e56fbe2d7a2b8e44f2466bd8601708b156bbef5ae1c861f391fd16b9de1fd24933976bc8997fda2766c71811c7a455d580c9f6fa79ce716d6bcd6d4fdd2375511314d83f6b52b6073cba1de55f03abf5bb150f847ce09bf4462bd36af24a5e850e1db5223f9f311b79cea2"}, 0x20) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async)
unlinkat(r2, &(0x7f0000000b40)='./file1\x00', 0x200) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
madvise(&(0x7f000002d000/0x1000)=nil, 0x1000, 0x15) (async)

8m39.906485215s ago: executing program 2 (id=2001):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x5}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0)

8m39.695232814s ago: executing program 2 (id=2004):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=<r1=>0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r2 = syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0), 0x3, 0x445, &(0x7f0000000b00)="$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")
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0x9000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000004c0)="bc64da538b5afbf4e6e96d7bd3e75c486f84df5d97cb065ace202e7c285b848d85f1d1a71e3818cc63704912fe6aaada8345833b7c92bfd4ecae6ebf088da05890545afdd4cce46688fa895c1e9facef00cd6f5007acef383ddb2ae6cdcfa31e7782a054914979b26c76f269e8a760feb4186881cf072d4d0679abad70671be616295ce19f8146", 0x87, r2}, 0x68)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x45, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000880), 0x428000, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0)
ioctl$SG_IO(r6, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f00000014c0)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0})
pidfd_getfd(r5, r3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r4], 0x20}}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000840)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f00000008c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00042bbd7000fddbdf254c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00580067000000000000000c00580011000000000000f51114000c0058001c000000000000000c0058000c000000000000000c00580057000000000000000c0058004f000000000000000c0058005c0000000098421de736e745eae3cc3208f4f385326f160d5fa4f96c77335d0430f6653b220c57770ae4c7f6"], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008004)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e2100000008f503400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001", @ANYRES16=r1, @ANYRES8=r0, @ANYRES64=r2, @ANYRES64=r2], 0x9c}}, 0x0)
close(r3)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55)
listen(r9, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r10, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r10, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c)
listen(r10, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x60}}}}}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x6)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10)

8m39.651029398s ago: executing program 32 (id=2004):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=<r1=>0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r2 = syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0), 0x3, 0x445, &(0x7f0000000b00)="$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")
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0x9000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000004c0)="bc64da538b5afbf4e6e96d7bd3e75c486f84df5d97cb065ace202e7c285b848d85f1d1a71e3818cc63704912fe6aaada8345833b7c92bfd4ecae6ebf088da05890545afdd4cce46688fa895c1e9facef00cd6f5007acef383ddb2ae6cdcfa31e7782a054914979b26c76f269e8a760feb4186881cf072d4d0679abad70671be616295ce19f8146", 0x87, r2}, 0x68)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x45, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000880), 0x428000, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0)
ioctl$SG_IO(r6, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f00000014c0)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0})
pidfd_getfd(r5, r3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r4], 0x20}}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000840)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f00000008c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00042bbd7000fddbdf254c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00580067000000000000000c00580011000000000000f51114000c0058001c000000000000000c0058000c000000000000000c00580057000000000000000c0058004f000000000000000c0058005c0000000098421de736e745eae3cc3208f4f385326f160d5fa4f96c77335d0430f6653b220c57770ae4c7f6"], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008004)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e2100000008f503400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001", @ANYRES16=r1, @ANYRES8=r0, @ANYRES64=r2, @ANYRES64=r2], 0x9c}}, 0x0)
close(r3)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55)
listen(r9, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r10, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r10, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c)
listen(r10, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x60}}}}}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x6)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10)

5m48.495705379s ago: executing program 1 (id=4508):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r1 = syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0), 0x3, 0x445, &(0x7f0000000b00)="$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")
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0x9000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000004c0)="bc64da538b5afbf4e6e96d7bd3e75c486f84df5d97cb065ace202e7c285b848d85f1d1a71e3818cc63704912fe6aaada8345833b7c92bfd4ecae6ebf088da05890545afdd4cce46688fa895c1e9facef00cd6f5007acef383ddb2ae6cdcfa31e7782a054914979b26c76f269e8a760feb4186881cf072d4d0679abad70671be616295ce19f814673cea71ee3746a16e2d63fb0d3ad909216eda0", 0x9a, r1}, 0x68)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x45, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000880), 0x428000, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0)
ioctl$SG_IO(r5, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f00000014c0)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0})
pidfd_getfd(r4, r2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r3], 0x20}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r6, &(0x7f0000000840)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f00000008c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00042bbd7000fddbdf254c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00580067000000000000000c00580011000000000000f51114000c0058001c000000000000000c0058000c000000000000000c00580057000000000000000c0058004f000000000000000c0058005c0000000098421de736e745eae3cc3208f4f385326f160d5fa4f96c77335d0430f6653b220c57770ae4c7f6"], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008004)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e2100000008f503400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001", @ANYRES16, @ANYRES8=r0, @ANYRES64=r1, @ANYRES64=r1], 0x9c}}, 0x0)
close(r2)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55)
listen(r8, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r9, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c)
listen(r9, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x60}}}}}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x6)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10)

5m47.592919842s ago: executing program 1 (id=4531):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0xffffffffffffffff)
close(r0)

5m47.50073956s ago: executing program 1 (id=4533):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08000200010002"], 0x24}}, 0x8000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000100008000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
flistxattr(r5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = semget$private(0x0, 0x7, 0x180)
semop(r6, &(0x7f0000000200)=[{0x4, 0xa7dd, 0x2000}], 0x45)
r7 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000840)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xdbQ1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xf6As\x1a\xe3\x95\xa1\xb2nZ\x95\xc7&\xecK\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$l]\xfb\xc8\xb1\x0eY\xaa\xfb&F\xceO\xa3\xc1\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x8b\xe2Z?\xc5\x9aJ\xa3\xb7\xd4lA\x9e', &(0x7f0000000800)='dE\x00', 0x0)
close(r7)

5m47.418371328s ago: executing program 1 (id=4536):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000b80)={[{@usrquota}, {@resgid}], [{@seclabel}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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")
r0 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setopts(0x4202, r0, 0xe96, 0x455b843fbdb64c65)
r1 = socket$unix(0x1, 0x5, 0x0)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4)
bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
r2 = io_uring_setup(0x1ddd, &(0x7f0000000000)={0x0, 0xc6ee, 0x8210, 0x3, 0x26f})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x810, r2, 0x8000000)

5m47.061757801s ago: executing program 1 (id=4541):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a8018"], 0x44}}, 0x0)

5m46.462667336s ago: executing program 1 (id=4551):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000060a010400000000000000000a0000010900010073797a31000040001400048010000180070001006374000004000280090002"], 0x68}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=<r3=>r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000001c0)=0x2001)
write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @time=@time={0x5, 0x3}}, {0x0, 0x0, 0x80, 0x3, @time={0x8, 0x3}, {0x0, 0x32}, {}, @connect={{0x1, 0x2}, {0x9b, 0x9}}}], 0x38)
readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES16=r3], 0x0, 0x3, 0x0, 0x0, 0x41100}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r4, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/226, 0xe2}, {0x0}], 0x2}, 0x6}], 0x1, 0x10000, 0x0)

5m46.462535406s ago: executing program 33 (id=4551):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000060a010400000000000000000a0000010900010073797a31000040001400048010000180070001006374000004000280090002"], 0x68}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=<r3=>r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000001c0)=0x2001)
write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @time=@time={0x5, 0x3}}, {0x0, 0x0, 0x80, 0x3, @time={0x8, 0x3}, {0x0, 0x32}, {}, @connect={{0x1, 0x2}, {0x9b, 0x9}}}], 0x38)
readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES16=r3], 0x0, 0x3, 0x0, 0x0, 0x41100}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r4, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/226, 0xe2}, {0x0}], 0x2}, 0x6}], 0x1, 0x10000, 0x0)

55.130415897s ago: executing program 3 (id=9816):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000dd67080000000000000000001811", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18)
syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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")
chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xf, &(0x7f0000001e40)=ANY=[@ANYBLOB="ffff00000000000200ffff00040000001811e501a678261fa48a9400142bf3a97eb7fc35c6492a83e9dff06d28d5b6c3e94732e99d181aa7a53b2e36bf380f7acc65439e461b35d445850800000000000000a44e701f1678dd8df09e53fd903060a6f6dba85f5648a23389108e7a60f0386a293249f89310c7f87a80330f37223218fc614b755f3bf0731ba59fd9a8784962f0b14c9b83", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18)
setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r6}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00')
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r7, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001cc0)={0x6, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000080000000000000dffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000bf91000000000000b7020000020300000000000000000000009500"/72], &(0x7f0000000300)='GPL\x00', 0x200, 0x7e, &(0x7f00000003c0)=""/126, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000880)=[r0, 0xffffffffffffffff, r0, r2, r9, r0, r10], &(0x7f0000001f40)=[{0x1, 0x1, 0xc, 0x6}, {0x0, 0x5, 0xa, 0x1}, {0x0, 0x2, 0xc, 0x6}, {0x4, 0x1, 0x1, 0xc}, {0x1, 0x1, 0x8, 0x3}, {0x2, 0x1, 0xe, 0x4}, {0x0, 0x5, 0xc, 0x7}, {0x1, 0x1, 0x0, 0xa}, {0x1, 0x1, 0x3, 0x4}, {0x2, 0x4, 0xe, 0x8}], 0x10, 0x4}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r11 = socket$netlink(0x10, 0x3, 0x14)
unshare(0x40600)
syncfs(0xffffffffffffffff)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)

54.976849491s ago: executing program 3 (id=9821):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80}, 0x18)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x4)
fchdir(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)

54.936307925s ago: executing program 3 (id=9824):
syz_io_uring_setup(0x10f, &(0x7f0000000580)={0x0, 0xed6b, 0x1000, 0x1, 0x2bf}, &(0x7f00000001c0), &(0x7f00000003c0))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@sg0, 0x0, &(0x7f0000000100)='./file0\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, &(0x7f00000003c0)="01000000020000a9584109b35ae059630b008145f94cd9776ef916feffa2df81249d", 0x22, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x10)
r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x1)

54.853399552s ago: executing program 3 (id=9826):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@grpid}, {@errors_continue}, {@oldalloc}, {@nobh}, {@mblk_io_submit}, {@usrquota}]}, 0x45, 0x7b6, &(0x7f0000002080)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48)
io_setup(0x9, &(0x7f0000000080)=<r0=>0x0)
clock_gettime(0x0, &(0x7f0000000200)={<r1=>0x0, <r2=>0x0})
io_getevents(r0, 0x0, 0x3, &(0x7f0000000180)=[{}, {}, {}], &(0x7f0000000280)={r1, r2+10000000})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$getregs(0xc, r4, 0x800005, &(0x7f0000000100)=""/62)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='fscache_acquire\x00', r5}, 0x18)
socket$inet6_udplite(0xa, 0x2, 0x88)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r7}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file1\x00', 0x3000046, &(0x7f0000000a80)={[{@dioread_nolock}, {@data_err_abort}, {@jqfmt_vfsold}, {@delalloc}, {@nouid32}, {@discard}, {@data_err_ignore}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@dioread_lock}, {@user_xattr}, {@block_validity}, {@errors_remount}], [{@audit}, {@euid_lt={'euid<', 0xee00}}, {@obj_role={'obj_role', 0x3d, '\x00'}}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r8 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x300000000000000}, 0x6048800)
r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x20, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x200448c0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2)

53.802703679s ago: executing program 3 (id=9832):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c000380"], 0x10c}}, 0x0)

49.306667674s ago: executing program 3 (id=9914):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000dd67080000000000000000001811", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18)
syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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")
chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xf, &(0x7f0000001e40)=ANY=[@ANYBLOB="ffff00000000000200ffff00040000001811e501a678261fa48a9400142bf3a97eb7fc35c6492a83e9dff06d28d5b6c3e94732e99d181aa7a53b2e36bf380f7acc65439e461b35d445850800000000000000a44e701f1678dd8df09e53fd903060a6f6dba85f5648a23389108e7a60f0386a293249f89310c7f87a80330f37223218fc614b755f3bf0731ba59fd9a8784962f0b14c9b83", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r5}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00')
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r6, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001cc0)={0x6, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000080000000000000dffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000bf91000000000000b7020000020300000000000000000000009500"/72], &(0x7f0000000300)='GPL\x00', 0x200, 0x7e, &(0x7f00000003c0)=""/126, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xb, &(0x7f0000000880)=[r0, 0xffffffffffffffff, r0, r8, r0, r9], &(0x7f0000001f40)=[{0x1, 0x1, 0xc, 0x6}, {0x0, 0x5, 0xa, 0x1}, {0x4, 0x2, 0xa, 0x1}, {0x0, 0x2, 0xc, 0x6}, {0x4, 0x1, 0x1, 0xc}, {0x1, 0x1, 0x8, 0x3}, {0x2, 0x1, 0xe, 0x4}, {0x0, 0x5, 0xc, 0x7}, {0x1, 0x1, 0x0, 0xa}, {0x1, 0x1, 0x3, 0x4}, {0x2, 0x4, 0xe, 0x8}], 0x10, 0x4}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$netlink(0x10, 0x3, 0x14)
unshare(0x40600)

49.306385574s ago: executing program 34 (id=9914):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000dd67080000000000000000001811", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18)
syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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")
chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xf, &(0x7f0000001e40)=ANY=[@ANYBLOB="ffff00000000000200ffff00040000001811e501a678261fa48a9400142bf3a97eb7fc35c6492a83e9dff06d28d5b6c3e94732e99d181aa7a53b2e36bf380f7acc65439e461b35d445850800000000000000a44e701f1678dd8df09e53fd903060a6f6dba85f5648a23389108e7a60f0386a293249f89310c7f87a80330f37223218fc614b755f3bf0731ba59fd9a8784962f0b14c9b83", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r5}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00')
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r6, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001cc0)={0x6, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000080000000000000dffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000bf91000000000000b7020000020300000000000000000000009500"/72], &(0x7f0000000300)='GPL\x00', 0x200, 0x7e, &(0x7f00000003c0)=""/126, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xb, &(0x7f0000000880)=[r0, 0xffffffffffffffff, r0, r8, r0, r9], &(0x7f0000001f40)=[{0x1, 0x1, 0xc, 0x6}, {0x0, 0x5, 0xa, 0x1}, {0x4, 0x2, 0xa, 0x1}, {0x0, 0x2, 0xc, 0x6}, {0x4, 0x1, 0x1, 0xc}, {0x1, 0x1, 0x8, 0x3}, {0x2, 0x1, 0xe, 0x4}, {0x0, 0x5, 0xc, 0x7}, {0x1, 0x1, 0x0, 0xa}, {0x1, 0x1, 0x3, 0x4}, {0x2, 0x4, 0xe, 0x8}], 0x10, 0x4}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$netlink(0x10, 0x3, 0x14)
unshare(0x40600)

2.651168366s ago: executing program 4 (id=10762):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="40000000060601010000000000000000050000070900020073797a31000000000900030073797a310000000005000100070000000900030073"], 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x40004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18)
io_setup(0x8f0, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xff, 0x1b1, &(0x7f0000001bc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x321062, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="862bae191b71fc38ab20181e968d139c78d83d0118582099fc727a83565fb9b30998a0f952c17f52d5b9254ba5c628f96285d246b7dbecef5b4dbb8b51a47c99ec6f288e6e14c90dfc2ecef90f9934d3b32986a9dcd67af7ed48e3c2b038ad3b81e01f9e80be5c98680ea56aed5f368024de12d7df228c9e70c1156bf83b90f76d23aff45ba9d53d3a"], 0x48)
ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0)
setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)

1.765963727s ago: executing program 5 (id=10781):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mlockall(0x3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)

1.762391368s ago: executing program 4 (id=10782):
syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x90)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
socket(0x200000000000011, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
socket(0x1, 0x803, 0x0)

1.422002039s ago: executing program 6 (id=10786):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

1.371240653s ago: executing program 6 (id=10787):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32], 0x1c}}, 0x8004)
write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r2], 0x4)

1.314623289s ago: executing program 5 (id=10789):
syz_io_uring_setup(0x10f, &(0x7f0000000580)={0x0, 0xed6b, 0x1000, 0x1, 0x2bf}, &(0x7f00000001c0), &(0x7f00000003c0))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@sg0, 0x0, &(0x7f0000000100)='./file0\x00')
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, &(0x7f00000003c0)="01000000020000a9584109b35ae059630b008145f94cd9776ef916feffa2df81249d", 0x22, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x10)
r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000340)={0x8, &(0x7f00000002c0)=[{0x2, 0x8, 0xfc, 0xde1b}, {0xfff9, 0x6, 0x6, 0x3ff}, {0x7, 0x1d, 0xfd, 0x9}, {0x3, 0x5, 0xe}, {0x1, 0x6, 0x8, 0x1d8f}, {0x1, 0x1, 0x4, 0x40}, {0x1, 0x6, 0x8, 0xfffffeff}, {0xf, 0x6, 0x4b, 0x23a}]}, 0x10)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = dup(r6)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r8 = dup(r6)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r9=>0xffffffffffffffff}, 0x0)
splice(r9, 0x0, r6, 0x0, 0x20000000000002, 0x2)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x1, 0x26, 0xffffffb9, 0x1b}, 0x9c)

1.223918517s ago: executing program 6 (id=10791):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

1.173848972s ago: executing program 6 (id=10792):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x38, r3, 0x7, 0x0, 0xfffffffe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0)

1.172760692s ago: executing program 5 (id=10793):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00'], 0x48)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_flash={0x33, 0xea6, '.\x00'}})
r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r4, 0x0)
mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x8010, r4, 0x8000000000000001)
r5 = semget$private(0x0, 0x6, 0x0)
semtimedop(r5, &(0x7f00000003c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0)
semop(r5, &(0x7f00000000c0)=[{0x3, 0x0, 0x1000}, {0x2}], 0x2)
semtimedop(r5, &(0x7f0000000080)=[{0x1, 0x8000}], 0x1, 0x0)
semop(r5, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1)
semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000000))
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x2d, &(0x7f0000000380)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @ldst={0x3, 0x0, 0x0, 0x5, 0x9, 0x50, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x2, 0x2, 0x2, 0x9, 0x7, 0x2, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe7c}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x95}], &(0x7f0000000100)='syzkaller\x00', 0xffffffff, 0x0, &(0x7f0000000140), 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x10, 0x0, 0xfffffffa}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000280)=[r1, r1, r1], &(0x7f00000002c0)=[{0x2, 0x3, 0x2}], 0x10, 0x2}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7)
keyctl$chown(0x4, 0x0, 0xee01, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
connect$tipc(0xffffffffffffffff, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10)
syz_clone(0xc020500, 0x0, 0x0, 0x0, 0x0, 0x0)
setuid(0xee00)
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000041000000000000000000000000ffffff9e000000000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")

984.720219ms ago: executing program 4 (id=10794):
syz_emit_ethernet(0x82, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x24, 0x0, [{0x0, 0xb, "5e000000ff00000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x6}]}}, "a815a23d"}}}}}, 0x0)

968.988631ms ago: executing program 4 (id=10795):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="40000000060601010000000000000000050000070900020073797a31000000000900030073797a310000000005000100070000000900"], 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x40004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18)
io_setup(0x8f0, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xff, 0x1b1, &(0x7f0000001bc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x321062, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="862bae191b71fc38ab20181e968d139c78d83d0118582099fc727a83565fb9b30998a0f952c17f52d5b9254ba5c628f96285d246b7dbecef5b4dbb8b51a47c99ec6f288e6e14c90dfc2ecef90f9934d3b32986a9dcd67af7ed48e3c2b038ad3b81e01f9e80be5c98680ea56aed5f368024de12d7df228c9e70c1156bf83b90f76d23aff45ba9d53d3a"], 0x48)
ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0)
setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)

903.121536ms ago: executing program 6 (id=10796):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="40000000060601010000000000000000050000070900020073797a31000000000900030073797a310000000005000100070000000900030073"], 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x40004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18)
io_setup(0x8f0, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xff, 0x1b1, &(0x7f0000001bc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x321062, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48)
ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0)
setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)

622.439422ms ago: executing program 0 (id=10800):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
pwritev(r1, &(0x7f0000000780)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9)

514.483043ms ago: executing program 0 (id=10802):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

495.573734ms ago: executing program 0 (id=10805):
syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x23, 0x0, [{0x0, 0xa, "5e000000ff000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x6}]}}, "a815a23d"}}}}}, 0x0)

480.297655ms ago: executing program 0 (id=10806):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x38, r3, 0x7, 0x0, 0xfffffffe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0)

448.003478ms ago: executing program 0 (id=10808):
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r0=>0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r0], 0x1c}}, 0x8004)
write$nci(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r2], 0x4)

431.76778ms ago: executing program 0 (id=10809):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$kcm(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000002c0)='netlink_extack\x00'}, 0x18)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
r8 = open$dir(&(0x7f0000000440)='./file0\x00', 0x1, 0x11)
move_mount(r8, 0x0, 0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r6, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0)

336.038529ms ago: executing program 7 (id=10810):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0x0, 0x8, @local, @local, 0x1, 0x7, 0x202, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0})

312.057021ms ago: executing program 5 (id=10811):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

285.890473ms ago: executing program 5 (id=10812):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff000000f13e966d30150a88000701000045ff8ce7f8ffffffb702000020000000b7030002000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4090000000000006910ae0000000000c4090000000800009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x34, 0x0)
mq_getsetattr(r3, &(0x7f0000000240)={0x0, 0x80, 0x2, 0xfffe}, &(0x7f0000000280))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})
socket$nl_generic(0x10, 0x3, 0x10)
mq_open(0x0, 0x42, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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")
r5 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8)

218.9951ms ago: executing program 7 (id=10813):
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x1)

184.503513ms ago: executing program 5 (id=10814):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r0}, 0x18)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20)
syz_open_dev$usbfs(0x0, 0x204, 0x2)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000980)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d824f295be931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232e5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0", 0x9b}], 0x1}}], 0x1, 0x4004)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = semget$private(0x0, 0x7, 0x0)
semtimedop(r6, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1, 0x0)
semctl$SETVAL(r6, 0x3, 0x10, &(0x7f0000000040)=0x4)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000000031401002cbd700000dcdf250900020073797a32000000000800410073697700140033006c6f00000000000000000000000000006262538bb7e016d972c4a287052c46d4bb4b711e5ad5cec5f3004ff6e4cdeff6a851d960cd93660127f3ecc311629f53a8182ed65a3e20a608c39a4e0ce70b18c14637959d2416625dab033d2c77ae86d04a12d3679c99321f705d2c31989afe87691b92b2568e6b"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)

176.414903ms ago: executing program 7 (id=10815):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

161.266275ms ago: executing program 7 (id=10816):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
pwritev(r1, &(0x7f0000000780)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9)

90.615812ms ago: executing program 7 (id=10817):
syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x23, 0x0, [{0x0, 0xa, "5e000000ff000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x6}]}}, "a815a23d"}}}}}, 0x0)

89.696382ms ago: executing program 7 (id=10818):
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r2], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0)
r5 = socket$xdp(0x2c, 0x3, 0x0)
sendfile(r5, r4, &(0x7f0000000240)=0x5, 0x1e000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18)
r8 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r8, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r9}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x8}}, 0x20)
socket$nl_rdma(0x10, 0x3, 0x14)
msgget$private(0x0, 0x7ac)

82.461902ms ago: executing program 4 (id=10819):
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r0=>0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r0], 0x1c}}, 0x8004)
write$nci(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r2], 0x4)

42.828206ms ago: executing program 4 (id=10820):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11)
pwritev2(r3, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

0s ago: executing program 6 (id=10821):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0xb, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'})
socket$kcm(0x10, 0x2, 0x0)
syz_clone(0x6780, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x41218, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)}], 0x1}, 0x80)
r4 = shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c)
shmdt(r4)
r5 = socket$inet6(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00'}, 0x10)
sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x44000, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x2, 0x0)
msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0)
msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000)
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0x8, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3, 0xffffffffffffffff})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000003c0)={'wg1\x00'})
ptrace(0x10, r1)
ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={0x0})

kernel console output (not intermixed with test programs):

ation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  607.897034][  T430] EXT4-fs (loop7): This should not happen!! Data will be lost
[  607.897034][  T430] 
[  607.919665][T30109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  607.940264][  T435] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10189: lblock 3 mapped to illegal pblock 3 (length 1)
[  607.984221][  T435] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10189: lblock 3 mapped to illegal pblock 3 (length 1)
[  608.007320][  T449] netlink: 'syz.6.10195': attribute type 1 has an invalid length.
[  608.019660][  T429] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10189: lblock 3 mapped to illegal pblock 3 (length 1)
[  608.041316][  T449] 8021q: adding VLAN 0 to HW filter on device bond9
[  608.048654][  T435] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10189: lblock 3 mapped to illegal pblock 3 (length 1)
[  608.080210][  T429] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10189: lblock 3 mapped to illegal pblock 3 (length 1)
[  608.102731][  T457] 8021q: adding VLAN 0 to HW filter on device bond9
[  608.128615][  T458] FAT-fs (loop0): Directory bread(block 32) failed
[  608.137405][   T29] kauditd_printk_skb: 283 callbacks suppressed
[  608.137450][   T29] audit: type=1326 audit(864.027:72349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=456 comm="syz.0.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12af5af749 code=0x7ffc0000
[  608.166590][   T29] audit: type=1326 audit(864.027:72350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=456 comm="syz.0.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12af5af749 code=0x7ffc0000
[  608.189491][   T29] audit: type=1326 audit(864.027:72351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=456 comm="syz.0.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f12af5af749 code=0x7ffc0000
[  608.212399][   T29] audit: type=1326 audit(864.027:72352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=456 comm="syz.0.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12af5af749 code=0x7ffc0000
[  608.235393][   T29] audit: type=1326 audit(864.027:72353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=456 comm="syz.0.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12af5af749 code=0x7ffc0000
[  608.244640][  T429] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10189: lblock 3 mapped to illegal pblock 3 (length 1)
[  608.258285][   T29] audit: type=1326 audit(864.027:72354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=456 comm="syz.0.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f12af5af749 code=0x7ffc0000
[  608.280353][  T458] FAT-fs (loop0): Directory bread(block 33) failed
[  608.295316][   T29] audit: type=1326 audit(864.027:72355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=456 comm="syz.0.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12af5af749 code=0x7ffc0000
[  608.310382][  T458] FAT-fs (loop0): Directory bread(block 34) failed
[  608.324568][   T29] audit: type=1326 audit(864.027:72356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=456 comm="syz.0.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12af5af749 code=0x7ffc0000
[  608.331119][  T458] FAT-fs (loop0): Directory bread(block 35) failed
[  608.353981][   T29] audit: type=1326 audit(864.027:72357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=456 comm="syz.0.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12af5af749 code=0x7ffc0000
[  608.354013][   T29] audit: type=1326 audit(864.027:72358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=456 comm="syz.0.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12af5af749 code=0x7ffc0000
[  608.355452][  T457] bond9: (slave vxcan13): The slave device specified does not support setting the MAC address
[  608.360972][  T458] FAT-fs (loop0): Directory bread(block 36) failed
[  608.434305][  T429] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10189: lblock 3 mapped to illegal pblock 3 (length 1)
[  608.463275][  T457] bond9: (slave vxcan13): Error -95 calling set_mac_address
[  608.470928][  T458] FAT-fs (loop0): Directory bread(block 37) failed
[  608.477767][  T435] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10189: lblock 3 mapped to illegal pblock 3 (length 1)
[  608.497835][  T458] FAT-fs (loop0): Directory bread(block 38) failed
[  608.521098][  T429] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10189: lblock 3 mapped to illegal pblock 3 (length 1)
[  608.537139][  T458] FAT-fs (loop0): Directory bread(block 39) failed
[  608.563752][  T458] FAT-fs (loop0): Directory bread(block 40) failed
[  608.590423][  T458] FAT-fs (loop0): Directory bread(block 41) failed
[  608.742532][   T12] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  608.754836][   T12] EXT4-fs (loop7): This should not happen!! Data will be lost
[  608.754836][   T12] 
[  608.813289][T32135] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  608.869544][  T471] sd 0:0:1:0: device reset
[  608.925350][  T469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  608.942344][  T474] rdma_rxe: rxe_newlink: failed to add syz_tun
[  608.946863][  T469] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  608.963930][  T466] set_capacity_and_notify: 8 callbacks suppressed
[  608.963995][  T466] loop4: detected capacity change from 0 to 32768
[  609.011012][  T466]  loop4: p1 p2 p3 < > p4 < p5 p6 >
[  609.016370][  T466] loop4: p1 start 460800 is beyond EOD, truncated
[  609.022925][  T466] loop4: p2 size 83886080 extends beyond EOD, truncated
[  609.031560][  T466] loop4: p5 start 460800 is beyond EOD, truncated
[  609.037996][  T466] loop4: p6 size 83886080 extends beyond EOD, truncated
[  609.099497][  T478] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  609.099497][  T478]    program syz.4.10203 not setting count and/or reply_len properly
[  609.156674][  T482] loop4: detected capacity change from 0 to 2048
[  609.181828][  T486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10207'.
[  609.191225][  T482]  loop4: p1 < > p4
[  609.195862][  T482] loop4: p4 size 8388608 extends beyond EOD, truncated
[  609.205614][  T486] team0 (unregistering): Port device team_slave_0 removed
[  609.213367][  T487] siw: device registration error -23
[  609.221302][  T486] team0 (unregistering): Port device team_slave_1 removed
[  609.236266][  T489] pim6reg: entered allmulticast mode
[  609.242654][  T489] pim6reg: left allmulticast mode
[  609.471908][  T501] sd 0:0:1:0: device reset
[  609.538006][  T515] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  609.538006][  T515]    program syz.0.10216 not setting count and/or reply_len properly
[  609.561697][  T514] loop7: detected capacity change from 0 to 164
[  609.569472][  T514] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  609.582117][  T517] loop5: detected capacity change from 0 to 128
[  609.620103][  T514] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  609.632647][  T517] FAT-fs (loop5): Directory bread(block 32) failed
[  609.639174][  T517] FAT-fs (loop5): Directory bread(block 33) failed
[  609.654576][  T517] FAT-fs (loop5): Directory bread(block 34) failed
[  609.664922][  T517] FAT-fs (loop5): Directory bread(block 35) failed
[  609.672145][  T517] FAT-fs (loop5): Directory bread(block 36) failed
[  609.690981][  T517] FAT-fs (loop5): Directory bread(block 37) failed
[  609.698409][  T517] FAT-fs (loop5): Directory bread(block 38) failed
[  609.705185][  T517] FAT-fs (loop5): Directory bread(block 39) failed
[  609.711816][  T517] FAT-fs (loop5): Directory bread(block 40) failed
[  609.718398][  T517] FAT-fs (loop5): Directory bread(block 41) failed
[  609.825929][  T530] rdma_rxe: rxe_newlink: failed to add syz_tun
[  610.075377][  T540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  610.102903][  T540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  610.138253][  T542] loop6: detected capacity change from 0 to 164
[  610.146202][  T542] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  610.154946][  T542] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  610.163344][  T542] Symlink component flag not implemented
[  610.169004][  T542] Symlink component flag not implemented
[  610.174705][  T542] Symlink component flag not implemented (7)
[  610.180693][  T542] Symlink component flag not implemented (116)
[  610.187827][  T542] netlink: 8 bytes leftover after parsing attributes in process `'.
[  610.196252][  T542] netlink: 8 bytes leftover after parsing attributes in process `'.
[  610.206091][  T542] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  610.229497][  T544] sd 0:0:1:0: device reset
[  610.344106][  T548] loop4: detected capacity change from 0 to 2048
[  610.371466][  T548]  loop4: p1 < > p4
[  610.375769][  T548] loop4: p4 size 8388608 extends beyond EOD, truncated
[  610.447831][  T551] lo speed is unknown, defaulting to 1000
[  610.586002][  T557] lo speed is unknown, defaulting to 1000
[  610.652742][  T551] xt_NFQUEUE: number of total queues is 0
[  610.673951][  T551] loop4: detected capacity change from 0 to 1024
[  610.681593][  T551] EXT4-fs: Ignoring removed bh option
[  610.704792][  T551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  610.726689][  T551] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.10230: lblock 3 mapped to illegal pblock 3 (length 3)
[  610.743701][  T568] pim6reg: entered allmulticast mode
[  610.763303][  T568] pim6reg: left allmulticast mode
[  610.772363][  T551] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  610.784768][  T551] EXT4-fs (loop4): This should not happen!! Data will be lost
[  610.784768][  T551] 
[  610.820577][  T554] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.10230: lblock 3 mapped to illegal pblock 3 (length 1)
[  610.835218][  T554] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.10230: lblock 3 mapped to illegal pblock 3 (length 1)
[  610.860183][  T554] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.10230: lblock 3 mapped to illegal pblock 3 (length 1)
[  610.880670][  T574] siw: device registration error -23
[  610.894703][  T554] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.10230: lblock 3 mapped to illegal pblock 3 (length 1)
[  610.911236][  T554] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.10230: lblock 3 mapped to illegal pblock 3 (length 1)
[  610.928029][  T554] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.10230: lblock 3 mapped to illegal pblock 3 (length 1)
[  610.946231][  T554] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.10230: lblock 3 mapped to illegal pblock 3 (length 1)
[  610.960676][  T554] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.10230: lblock 3 mapped to illegal pblock 3 (length 1)
[  610.975138][  T554] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.10230: lblock 3 mapped to illegal pblock 3 (length 1)
[  611.048784][  T580] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  611.048784][  T580]    program syz.7.10238 not setting count and/or reply_len properly
[  611.109691][  T583] loop0: detected capacity change from 0 to 1024
[  611.118084][  T582] lo speed is unknown, defaulting to 1000
[  611.129260][  T583] EXT4-fs: Ignoring removed bh option
[  611.161435][  T585] loop7: detected capacity change from 0 to 128
[  611.179878][  T585] FAT-fs (loop7): Directory bread(block 32) failed
[  611.187219][  T585] FAT-fs (loop7): Directory bread(block 33) failed
[  611.195665][  T585] FAT-fs (loop7): Directory bread(block 34) failed
[  611.197083][  T583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  611.202442][  T585] FAT-fs (loop7): Directory bread(block 35) failed
[  611.220756][  T585] FAT-fs (loop7): Directory bread(block 36) failed
[  611.227422][  T585] FAT-fs (loop7): Directory bread(block 37) failed
[  611.234210][  T585] FAT-fs (loop7): Directory bread(block 38) failed
[  611.240812][  T585] FAT-fs (loop7): Directory bread(block 39) failed
[  611.247663][  T585] FAT-fs (loop7): Directory bread(block 40) failed
[  611.254256][  T585] FAT-fs (loop7): Directory bread(block 41) failed
[  611.280848][  T583] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 3: comm syz.0.10240: lblock 3 mapped to illegal pblock 3 (length 3)
[  611.295610][  T583] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  611.307891][  T583] EXT4-fs (loop0): This should not happen!! Data will be lost
[  611.307891][  T583] 
[  611.364804][  T582] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10240: lblock 3 mapped to illegal pblock 3 (length 1)
[  611.437456][  T581] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10240: lblock 3 mapped to illegal pblock 3 (length 1)
[  611.437477][T19824] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  611.464003][T19824] EXT4-fs (loop4): This should not happen!! Data will be lost
[  611.464003][T19824] 
[  611.484977][  T581] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10240: lblock 3 mapped to illegal pblock 3 (length 1)
[  611.500358][  T582] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10240: lblock 3 mapped to illegal pblock 3 (length 1)
[  611.520960][  T581] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10240: lblock 3 mapped to illegal pblock 3 (length 1)
[  611.533369][T28937] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  611.535974][  T582] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10240: lblock 3 mapped to illegal pblock 3 (length 1)
[  611.564789][  T597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  611.573720][  T581] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10240: lblock 3 mapped to illegal pblock 3 (length 1)
[  611.591491][  T599] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  611.599318][  T597] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  611.599887][  T599] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  611.616134][  T582] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10240: lblock 3 mapped to illegal pblock 3 (length 1)
[  611.634689][  T581] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10240: lblock 3 mapped to illegal pblock 3 (length 1)
[  611.690411][  T601] syz1: rxe_newlink: already configured on syz_tun
[  611.900677][ T9761] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  611.913027][ T9761] EXT4-fs (loop0): This should not happen!! Data will be lost
[  611.913027][ T9761] 
[  611.927191][T30109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  611.969757][  T607] loop0: detected capacity change from 0 to 164
[  611.995014][  T607] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  612.013116][  T607] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  612.065951][  T611] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  612.074926][  T611] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  612.083818][  T611] Symlink component flag not implemented
[  612.089485][  T611] Symlink component flag not implemented
[  612.095220][  T611] Symlink component flag not implemented (7)
[  612.101221][  T611] Symlink component flag not implemented (116)
[  612.109490][  T611] __nla_validate_parse: 4 callbacks suppressed
[  612.109501][  T611] netlink: 8 bytes leftover after parsing attributes in process `'.
[  612.124625][  T611] netlink: 8 bytes leftover after parsing attributes in process `'.
[  612.133583][  T611] netlink: 8 bytes leftover after parsing attributes in process `'.
[  612.141835][  T611] netlink: 8 bytes leftover after parsing attributes in process `'.
[  612.151575][  T611] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  612.196225][  T615] FAT-fs (loop5): Directory bread(block 32) failed
[  612.207335][  T615] FAT-fs (loop5): Directory bread(block 33) failed
[  612.214431][  T615] FAT-fs (loop5): Directory bread(block 34) failed
[  612.221057][  T615] FAT-fs (loop5): Directory bread(block 35) failed
[  612.228052][  T615] FAT-fs (loop5): Directory bread(block 36) failed
[  612.234768][  T615] FAT-fs (loop5): Directory bread(block 37) failed
[  612.241387][  T615] FAT-fs (loop5): Directory bread(block 38) failed
[  612.250087][  T617] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  612.258755][  T615] FAT-fs (loop5): Directory bread(block 39) failed
[  612.265341][  T617] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  612.273670][  T615] FAT-fs (loop5): Directory bread(block 40) failed
[  612.280328][  T617] Symlink component flag not implemented
[  612.286107][  T617] Symlink component flag not implemented
[  612.291890][  T617] Symlink component flag not implemented (7)
[  612.297912][  T617] Symlink component flag not implemented (116)
[  612.305343][  T617] netlink: 8 bytes leftover after parsing attributes in process `'.
[  612.313463][  T615] FAT-fs (loop5): Directory bread(block 41) failed
[  612.323499][  T617] netlink: 8 bytes leftover after parsing attributes in process `'.
[  612.338361][  T617] netlink: 8 bytes leftover after parsing attributes in process `'.
[  612.352664][  T617] netlink: 8 bytes leftover after parsing attributes in process `'.
[  612.361884][  T617] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  612.397292][  T621] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  612.420933][  T621] EXT4-fs (loop7): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  612.475446][  T629] siw: device registration error -23
[  612.531731][T32135] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  612.568627][  T634] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  612.578783][  T634] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  612.594697][  T636] netlink: 'syz.7.10258': attribute type 1 has an invalid length.
[  612.602599][  T636] netlink: 224 bytes leftover after parsing attributes in process `syz.7.10258'.
[  612.629705][  T638] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  612.640690][  T638] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  612.672641][  T641] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  612.681648][  T641] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  612.690115][  T641] Symlink component flag not implemented
[  612.695896][  T641] Symlink component flag not implemented
[  612.702736][  T641] Symlink component flag not implemented (7)
[  612.708765][  T641] Symlink component flag not implemented (116)
[  612.717281][  T641] netlink: 8 bytes leftover after parsing attributes in process `'.
[  612.727327][  T642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  612.729117][  T641] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  612.735956][  T642] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  612.754057][  T644] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  612.754057][  T644]    program syz.0.10263 not setting count and/or reply_len properly
[  612.789017][  T648] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  612.797611][  T648] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  612.806075][  T648] Symlink component flag not implemented
[  612.811733][  T648] Symlink component flag not implemented
[  612.817462][  T648] Symlink component flag not implemented (7)
[  612.823502][  T648] Symlink component flag not implemented (116)
[  612.833924][  T648] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  612.920153][  T653] sd 0:0:1:0: device reset
[  612.946921][  T655] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  612.955632][  T655] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  612.968706][  T655] Symlink component flag not implemented
[  612.974421][  T655] Symlink component flag not implemented
[  612.981704][  T655] Symlink component flag not implemented (7)
[  612.987796][  T655] Symlink component flag not implemented (116)
[  613.000417][  T655] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  613.097817][  T659] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  613.107506][  T659] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  613.140485][  T662] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  613.140485][  T662]    program syz.5.10271 not setting count and/or reply_len properly
[  613.168908][  T664] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  613.168908][  T664]    program syz.7.10272 not setting count and/or reply_len properly
[  613.188443][   T29] kauditd_printk_skb: 495 callbacks suppressed
[  613.188459][   T29] audit: type=1326 audit(869.095:72854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=663 comm="syz.7.10272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a6c5f749 code=0x7ffc0000
[  613.222181][   T29] audit: type=1326 audit(869.095:72855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=663 comm="syz.7.10272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a6c5f749 code=0x7ffc0000
[  613.245243][   T29] audit: type=1326 audit(869.125:72856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=663 comm="syz.7.10272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69a6c5f749 code=0x7ffc0000
[  613.268172][   T29] audit: type=1326 audit(869.125:72857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=663 comm="syz.7.10272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a6c5f749 code=0x7ffc0000
[  613.291077][   T29] audit: type=1326 audit(869.125:72858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=663 comm="syz.7.10272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a6c5f749 code=0x7ffc0000
[  613.314069][   T29] audit: type=1326 audit(869.125:72859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=663 comm="syz.7.10272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f69a6c5f749 code=0x7ffc0000
[  613.336922][   T29] audit: type=1326 audit(869.125:72860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=663 comm="syz.7.10272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a6c5f749 code=0x7ffc0000
[  613.359830][   T29] audit: type=1326 audit(869.125:72861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=663 comm="syz.7.10272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a6c5f749 code=0x7ffc0000
[  613.392574][   T29] audit: type=1326 audit(869.125:72862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=663 comm="syz.7.10272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f69a6c5f749 code=0x7ffc0000
[  613.415418][   T29] audit: type=1326 audit(869.125:72863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=663 comm="syz.7.10272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a6c5f749 code=0x7ffc0000
[  613.533390][  T674] netlink: 'syz.4.10274': attribute type 1 has an invalid length.
[  613.667172][  T681] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  613.708214][  T681] EXT4-fs (loop4): 1 truncate cleaned up
[  613.798365][  T671] team0 (unregistering): Port device team_slave_0 removed
[  613.815897][  T671] team0 (unregistering): Port device team_slave_1 removed
[  613.824520][  T681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  613.925155][  T683] pim6reg: entered allmulticast mode
[  613.944722][T28937] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  613.985993][  T670] pim6reg: left allmulticast mode
[  614.060757][  T688] set_capacity_and_notify: 11 callbacks suppressed
[  614.060771][  T688] loop5: detected capacity change from 0 to 164
[  614.075444][  T688] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  614.084191][  T688] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  614.092642][  T688] Symlink component flag not implemented
[  614.098317][  T688] Symlink component flag not implemented
[  614.104244][  T688] Symlink component flag not implemented (7)
[  614.110248][  T688] Symlink component flag not implemented (116)
[  614.133730][  T688] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  614.215300][  T698] loop4: detected capacity change from 0 to 164
[  614.233551][  T698] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  614.243460][  T698] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  614.335329][  T701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  614.344064][  T701] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  614.403226][  T709] loop6: detected capacity change from 0 to 512
[  614.426527][  T709] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  614.451090][  T712] sd 0:0:1:0: device reset
[  614.474033][  T709] EXT4-fs (loop6): 1 truncate cleaned up
[  614.483570][  T709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  614.562584][  T716] siw: device registration error -23
[  614.609208][  T721] loop5: detected capacity change from 0 to 164
[  614.615734][  T710] loop0: detected capacity change from 0 to 32768
[  614.624593][  T721] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  614.633522][  T721] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  614.641902][  T721] Symlink component flag not implemented
[  614.647608][  T721] Symlink component flag not implemented
[  614.654004][  T721] Symlink component flag not implemented (7)
[  614.660012][  T721] Symlink component flag not implemented (116)
[  614.666546][  T710]  loop0: p1 p2 p3 < > p4 < p5 p6 >
[  614.672044][  T710] loop0: p1 start 460800 is beyond EOD, truncated
[  614.678536][  T710] loop0: p2 size 83886080 extends beyond EOD, truncated
[  614.689438][  T721] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  614.710779][  T710] loop0: p5 start 460800 is beyond EOD, truncated
[  614.717291][  T710] loop0: p6 size 83886080 extends beyond EOD, truncated
[  614.736212][  T730] loop7: detected capacity change from 0 to 164
[  614.745300][  T730] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  614.755080][  T730] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  614.947568][  T745] loop4: detected capacity change from 0 to 128
[  614.999662][  T745] FAT-fs (loop4): Directory bread(block 32) failed
[  615.010160][  T745] FAT-fs (loop4): Directory bread(block 33) failed
[  615.031060][  T745] FAT-fs (loop4): Directory bread(block 34) failed
[  615.057116][  T745] FAT-fs (loop4): Directory bread(block 35) failed
[  615.063714][  T745] FAT-fs (loop4): Directory bread(block 36) failed
[  615.070335][  T745] FAT-fs (loop4): Directory bread(block 37) failed
[  615.076908][  T745] FAT-fs (loop4): Directory bread(block 38) failed
[  615.083595][  T745] FAT-fs (loop4): Directory bread(block 39) failed
[  615.090205][  T745] FAT-fs (loop4): Directory bread(block 40) failed
[  615.096891][  T745] FAT-fs (loop4): Directory bread(block 41) failed
[  615.247147][T25185] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  615.393790][  T753] siw: device registration error -23
[  615.643182][  T755] loop5: detected capacity change from 0 to 128
[  615.653079][  T755] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  615.745217][T27056] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  615.780083][  T763] loop5: detected capacity change from 0 to 128
[  615.790596][  T765] loop0: detected capacity change from 0 to 164
[  615.798682][  T765] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  615.807536][  T765] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  615.817890][  T765] Symlink component flag not implemented
[  615.823711][  T765] Symlink component flag not implemented
[  615.826866][  T763] FAT-fs (loop5): Directory bread(block 32) failed
[  615.837744][  T765] Symlink component flag not implemented (7)
[  615.843854][  T765] Symlink component flag not implemented (116)
[  615.844499][  T763] FAT-fs (loop5): Directory bread(block 33) failed
[  615.859739][  T765] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  615.874173][  T763] FAT-fs (loop5): Directory bread(block 34) failed
[  615.884474][  T763] FAT-fs (loop5): Directory bread(block 35) failed
[  615.899744][  T763] FAT-fs (loop5): Directory bread(block 36) failed
[  615.907625][  T763] FAT-fs (loop5): Directory bread(block 37) failed
[  615.915030][  T768] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  615.923564][  T763] FAT-fs (loop5): Directory bread(block 38) failed
[  615.931431][  T768] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  615.939725][  T763] FAT-fs (loop5): Directory bread(block 39) failed
[  615.946627][  T763] FAT-fs (loop5): Directory bread(block 40) failed
[  615.962119][  T763] FAT-fs (loop5): Directory bread(block 41) failed
[  615.989427][  T773] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  616.015483][  T773] EXT4-fs (loop7): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  616.045593][T32135] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  616.273137][  T790] sd 0:0:1:0: device reset
[  616.293354][  T792] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  616.293354][  T792]    program syz.0.10317 not setting count and/or reply_len properly
[  616.434470][  T784]  loop7: p1 p2 p3 < > p4 < p5 p6 >
[  616.442329][  T806] netlink: 'syz.0.10321': attribute type 1 has an invalid length.
[  616.450393][  T784] loop7: p1 start 460800 is beyond EOD, truncated
[  616.456846][  T784] loop7: p2 size 83886080 extends beyond EOD, truncated
[  616.469638][  T784] loop7: p5 start 460800 is beyond EOD, truncated
[  616.476253][  T784] loop7: p6 size 83886080 extends beyond EOD, truncated
[  616.532163][  T812] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  616.532163][  T812]    program syz.0.10325 not setting count and/or reply_len properly
[  616.644252][  T818] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  616.666712][  T818] EXT4-fs (loop0): 1 truncate cleaned up
[  616.672995][  T818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  616.780975][  T823] lo speed is unknown, defaulting to 1000
[  617.008639][  T832] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  617.017570][  T832] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  617.025913][  T832] Symlink component flag not implemented
[  617.031571][  T832] Symlink component flag not implemented
[  617.038672][  T832] Symlink component flag not implemented (7)
[  617.044735][  T832] Symlink component flag not implemented (116)
[  617.058676][  T832] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  617.254611][  T848]  loop6: p1 < > p4
[  617.259092][  T848] loop6: p4 size 8388608 extends beyond EOD, truncated
[  617.374806][  T849]  loop7: p1 p2 p3 < > p4 < p5 p6 >
[  617.380048][  T849] loop7: p1 start 460800 is beyond EOD, truncated
[  617.386522][  T849] loop7: p2 size 83886080 extends beyond EOD, truncated
[  617.395021][  T849] loop7: p5 start 460800 is beyond EOD, truncated
[  617.401457][  T849] loop7: p6 size 83886080 extends beyond EOD, truncated
[  617.473656][T30109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.520683][  T860] __nla_validate_parse: 36 callbacks suppressed
[  617.520700][  T860] netlink: 96 bytes leftover after parsing attributes in process `syz.7.10338'.
[  617.537971][  T862] sd 0:0:1:0: device reset
[  617.640873][  T869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  617.649447][  T869] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  617.703557][  T874] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  617.712707][  T874] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  617.721204][  T874] Symlink component flag not implemented
[  617.726940][  T874] Symlink component flag not implemented
[  617.733322][  T874] Symlink component flag not implemented (7)
[  617.739342][  T874] Symlink component flag not implemented (116)
[  617.746963][  T874] netlink: 8 bytes leftover after parsing attributes in process `'.
[  617.755816][  T874] netlink: 8 bytes leftover after parsing attributes in process `'.
[  617.764151][  T874] netlink: 8 bytes leftover after parsing attributes in process `'.
[  617.772659][  T874] netlink: 8 bytes leftover after parsing attributes in process `'.
[  617.782533][  T874] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  617.823211][  T886] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  617.836968][  T886] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  617.856145][T28937] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  618.025005][  T888]  loop7: p1 p2 p3 < > p4 < p5 p6 >
[  618.030334][  T888] loop7: p1 start 460800 is beyond EOD, truncated
[  618.036828][  T888] loop7: p2 size 83886080 extends beyond EOD, truncated
[  618.047095][  T888] loop7: p5 start 460800 is beyond EOD, truncated
[  618.053575][  T888] loop7: p6 size 83886080 extends beyond EOD, truncated
[  618.154874][  T894] lo speed is unknown, defaulting to 1000
[  618.246300][  T902] netlink: 'syz.6.10354': attribute type 1 has an invalid length.
[  618.254150][  T902] netlink: 224 bytes leftover after parsing attributes in process `syz.6.10354'.
[  618.414456][  T913] netlink: 96 bytes leftover after parsing attributes in process `syz.6.10355'.
[  618.438361][  T914] EXT4-fs: Ignoring removed bh option
[  618.467924][  T910] lo speed is unknown, defaulting to 1000
[  618.559750][  T914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  618.671866][  T914] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 3: comm syz.0.10356: lblock 3 mapped to illegal pblock 3 (length 3)
[  618.688804][   T29] kauditd_printk_skb: 403 callbacks suppressed
[  618.688816][   T29] audit: type=1326 audit(874.592:73267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=929 comm="syz.6.10361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273163f749 code=0x7ffc0000
[  618.742633][  T914] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  618.754948][  T914] EXT4-fs (loop0): This should not happen!! Data will be lost
[  618.754948][  T914] 
[  618.817575][  T931] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10356: lblock 3 mapped to illegal pblock 3 (length 1)
[  618.845361][  T909] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10356: lblock 3 mapped to illegal pblock 3 (length 1)
[  618.847185][   T29] audit: type=1326 audit(874.622:73268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=929 comm="syz.6.10361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273163f749 code=0x7ffc0000
[  618.882420][   T29] audit: type=1326 audit(874.622:73269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=929 comm="syz.6.10361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f273163f749 code=0x7ffc0000
[  618.903603][  T931] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10356: lblock 3 mapped to illegal pblock 3 (length 1)
[  618.905413][   T29] audit: type=1326 audit(874.622:73270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=929 comm="syz.6.10361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273163f749 code=0x7ffc0000
[  618.927921][  T909] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10356: lblock 3 mapped to illegal pblock 3 (length 1)
[  618.942205][   T29] audit: type=1326 audit(874.622:73271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=929 comm="syz.6.10361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273163f749 code=0x7ffc0000
[  618.979168][   T29] audit: type=1326 audit(874.622:73272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=929 comm="syz.6.10361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f273163f749 code=0x7ffc0000
[  619.002086][   T29] audit: type=1326 audit(874.622:73273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=929 comm="syz.6.10361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273163f749 code=0x7ffc0000
[  619.002269][  T909] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10356: lblock 3 mapped to illegal pblock 3 (length 1)
[  619.025029][   T29] audit: type=1326 audit(874.622:73274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=929 comm="syz.6.10361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f273163f749 code=0x7ffc0000
[  619.025062][   T29] audit: type=1326 audit(874.632:73275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=929 comm="syz.6.10361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273163f749 code=0x7ffc0000
[  619.025110][   T29] audit: type=1326 audit(874.632:73276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=932 comm="syz.6.10361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2731672005 code=0x7ffc0000
[  619.108726][  T936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  619.117890][  T931] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10356: lblock 3 mapped to illegal pblock 3 (length 1)
[  619.132931][  T936] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  619.141046][  T909] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10356: lblock 3 mapped to illegal pblock 3 (length 1)
[  619.158670][  T931] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10356: lblock 3 mapped to illegal pblock 3 (length 1)
[  619.175506][  T909] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10356: lblock 3 mapped to illegal pblock 3 (length 1)
[  619.195551][  T941] set_capacity_and_notify: 11 callbacks suppressed
[  619.195567][  T941] loop4: detected capacity change from 0 to 164
[  619.210150][  T941] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  619.219070][  T941] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  619.228065][  T941] Symlink component flag not implemented
[  619.233720][  T941] Symlink component flag not implemented
[  619.308826][  T941] Symlink component flag not implemented (7)
[  619.314845][  T941] Symlink component flag not implemented (116)
[  619.334024][  T944] netlink: 8 bytes leftover after parsing attributes in process `'.
[  619.366494][  T946] sd 0:0:1:0: device reset
[  619.376171][ T9772] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  619.388473][ T9772] EXT4-fs (loop0): This should not happen!! Data will be lost
[  619.388473][ T9772] 
[  619.400511][  T944] netlink: 8 bytes leftover after parsing attributes in process `'.
[  619.409873][T30109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  619.417601][  T941] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  619.440072][  T944] netlink: 8 bytes leftover after parsing attributes in process `'.
[  619.582139][  T969] loop4: detected capacity change from 0 to 512
[  619.613506][  T969] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  619.647061][  T969] EXT4-fs (loop4): 1 truncate cleaned up
[  619.668153][  T969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  619.757447][  T977] netlink: 'syz.6.10379': attribute type 1 has an invalid length.
[  619.875322][  T988] loop7: detected capacity change from 0 to 164
[  619.889051][  T988] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  619.898141][  T988] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  619.908990][  T988] Symlink component flag not implemented
[  619.914725][  T988] Symlink component flag not implemented
[  619.921104][  T988] Symlink component flag not implemented (7)
[  619.927216][  T988] Symlink component flag not implemented (116)
[  619.936369][  T988] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  620.404352][ T1004] loop7: detected capacity change from 0 to 32768
[  620.431384][T28937] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.456049][ T1004]  loop7: p1 p2 p3 < > p4 < p5 p6 >
[  620.461455][ T1004] loop7: p1 start 460800 is beyond EOD, truncated
[  620.468055][ T1004] loop7: p2 size 83886080 extends beyond EOD, truncated
[  620.482148][ T1004] loop7: p5 start 460800 is beyond EOD, truncated
[  620.488700][ T1004] loop7: p6 size 83886080 extends beyond EOD, truncated
[  620.527906][ T1008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  620.536715][ T1008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  620.899085][ T9772] smc: removing ib device syz1
[  621.020097][ T1050] netlink: 'syz.7.10406': attribute type 1 has an invalid length.
[  621.106755][ T1061] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  621.106755][ T1061]    program syz.0.10408 not setting count and/or reply_len properly
[  621.159343][ T1043] lo speed is unknown, defaulting to 1000
[  621.319027][ T1043] chnl_net:caif_netlink_parms(): no params data found
[  621.428416][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.435492][ T1043] bridge0: port 1(bridge_slave_0) entered disabled state
[  621.442809][ T1043] bridge_slave_0: entered allmulticast mode
[  621.449367][ T1043] bridge_slave_0: entered promiscuous mode
[  621.456033][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.463100][ T1043] bridge0: port 2(bridge_slave_1) entered disabled state
[  621.483631][ T1043] bridge_slave_1: entered allmulticast mode
[  621.496214][ T1043] bridge_slave_1: entered promiscuous mode
[  621.529594][ T1043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  621.546587][ T1043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  621.575568][ T1043] team0: Port device team_slave_0 added
[  621.582545][ T1043] team0: Port device team_slave_1 added
[  621.619151][ T1043] batman_adv: batadv0: Adding interface: batadv_slave_0
[  621.626259][ T1043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  621.652331][ T1043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  621.664197][ T1043] batman_adv: batadv0: Adding interface: batadv_slave_1
[  621.671198][ T1043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  621.671229][ T1043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  621.763558][ T1043] hsr_slave_0: entered promiscuous mode
[  621.770288][ T1043] hsr_slave_1: entered promiscuous mode
[  621.776565][ T1043] debugfs: 'hsr0' already exists in 'hsr'
[  621.782399][ T1043] Cannot create hsr debugfs directory
[  621.803059][ T1093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  621.834777][ T1093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  621.913240][ T1098] loop5: detected capacity change from 0 to 164
[  621.920410][ T1098] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  621.970488][ T1098] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  621.997767][ T1096] lo speed is unknown, defaulting to 1000
[  622.006451][ T1098] Symlink component flag not implemented
[  622.012118][ T1098] Symlink component flag not implemented
[  622.021387][ T1098] Symlink component flag not implemented (7)
[  622.027407][ T1098] Symlink component flag not implemented (116)
[  622.063267][ T1098] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  622.134437][ T1043] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  622.164832][ T1043] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  622.183842][ T1043] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  622.194145][ T1043] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  622.212809][ T1096] xt_NFQUEUE: number of total queues is 0
[  622.223299][ T1096] loop4: detected capacity change from 0 to 1024
[  622.229988][ T1096] EXT4-fs: Ignoring removed bh option
[  622.239110][ T1096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  622.257866][ T1096] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.10419: lblock 3 mapped to illegal pblock 3 (length 3)
[  622.296602][ T1096] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  622.308941][ T1096] EXT4-fs (loop4): This should not happen!! Data will be lost
[  622.308941][ T1096] 
[  622.352498][ T1043] 8021q: adding VLAN 0 to HW filter on device bond0
[  622.366501][ T1099] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.10419: lblock 3 mapped to illegal pblock 3 (length 1)
[  622.394363][ T1043] 8021q: adding VLAN 0 to HW filter on device team0
[  622.419639][T19824] bridge0: port 1(bridge_slave_0) entered blocking state
[  622.426859][T19824] bridge0: port 1(bridge_slave_0) entered forwarding state
[  622.445423][ T1099] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.10419: lblock 3 mapped to illegal pblock 3 (length 1)
[  622.469383][ T1099] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.10419: lblock 3 mapped to illegal pblock 3 (length 1)
[  622.483938][ T1099] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.10419: lblock 3 mapped to illegal pblock 3 (length 1)
[  622.500419][T19824] bridge0: port 2(bridge_slave_1) entered blocking state
[  622.507525][T19824] bridge0: port 2(bridge_slave_1) entered forwarding state
[  622.529055][ T1104] loop5: detected capacity change from 0 to 32768
[  622.539555][ T1099] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.10419: lblock 3 mapped to illegal pblock 3 (length 1)
[  622.554148][ T1099] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.10419: lblock 3 mapped to illegal pblock 3 (length 1)
[  622.575948][ T1099] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.10419: lblock 3 mapped to illegal pblock 3 (length 1)
[  622.610877][ T1131] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  622.610877][ T1131]    program syz.0.10427 not setting count and/or reply_len properly
[  622.621636][ T1104]  loop5: p1 p2 p3 < > p4 < p5 p6 >
[  622.643497][ T1099] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.10419: lblock 3 mapped to illegal pblock 3 (length 1)
[  622.645514][ T1104] loop5: p1 start 460800 is beyond EOD, truncated
[  622.664236][ T1104] loop5: p2 size 83886080 extends beyond EOD, truncated
[  622.687598][ T1099] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.10419: lblock 3 mapped to illegal pblock 3 (length 1)
[  622.711655][ T1104] loop5: p5 start 460800 is beyond EOD, truncated
[  622.718275][ T1104] loop5: p6 size 83886080 extends beyond EOD, truncated
[  622.731200][ T1043] 8021q: adding VLAN 0 to HW filter on device batadv0
[  622.808748][ T9783] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  622.821172][ T9783] EXT4-fs (loop4): This should not happen!! Data will be lost
[  622.821172][ T9783] 
[  622.860305][T28937] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  622.957815][ T1043] veth0_vlan: entered promiscuous mode
[  622.969442][ T1173] loop0: detected capacity change from 0 to 164
[  622.977583][ T1173] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  622.987087][ T1043] veth1_vlan: entered promiscuous mode
[  622.995227][ T1173] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  623.004868][ T1173] Symlink component flag not implemented
[  623.010620][ T1173] Symlink component flag not implemented
[  623.017247][ T1173] Symlink component flag not implemented (7)
[  623.018790][ T1043] veth0_macvtap: entered promiscuous mode
[  623.023287][ T1173] Symlink component flag not implemented (116)
[  623.041905][ T1173] __nla_validate_parse: 15 callbacks suppressed
[  623.041921][ T1173] netlink: 8 bytes leftover after parsing attributes in process `'.
[  623.058844][ T1043] veth1_macvtap: entered promiscuous mode
[  623.074902][ T1043] batman_adv: batadv0: Interface activated: batadv_slave_0
[  623.089242][ T1043] batman_adv: batadv0: Interface activated: batadv_slave_1
[  623.101909][ T9783] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  623.118858][ T1173] netlink: 8 bytes leftover after parsing attributes in process `'.
[  623.129336][ T1173] netlink: 8 bytes leftover after parsing attributes in process `'.
[  623.139062][ T1173] netlink: 8 bytes leftover after parsing attributes in process `'.
[  623.147213][ T9783] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  623.157757][ T1173] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  623.169413][ T9783] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  623.190961][ T9783] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  623.377128][ T1181] loop4: detected capacity change from 0 to 32768
[  623.409746][ T1181]  loop4: p1 p2 p3 < > p4 < p5 p6 >
[  623.421849][ T1181] loop4: p1 start 460800 is beyond EOD, truncated
[  623.428369][ T1181] loop4: p2 size 83886080 extends beyond EOD, truncated
[  623.445926][ T1181] loop4: p5 start 460800 is beyond EOD, truncated
[  623.452471][ T1181] loop4: p6 size 83886080 extends beyond EOD, truncated
[  623.461577][ T1195] netlink: 'syz.5.10445': attribute type 1 has an invalid length.
[  623.469512][ T1195] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10445'.
[  623.577070][ T1201] loop5: detected capacity change from 0 to 128
[  623.603669][ T1201] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  623.621362][ T1199] infiniband syz1: set active
[  623.626139][ T1199] infiniband syz1: added syz_tun
[  623.636763][ T1199] RDS/IB: syz1: added
[  623.640906][ T1199] smc: adding ib device syz1 with port count 1
[  623.647581][ T1199] smc:    ib device syz1 port 1 has pnetid SYZ0 (user defined)
[  623.717580][T27056] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  623.780572][ T1206] lo speed is unknown, defaulting to 1000
[  623.796091][ T1209] EXT4-fs: Ignoring removed bh option
[  623.820797][ T1209] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  623.834123][ T1215] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  623.843960][ T1209] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.10450: lblock 3 mapped to illegal pblock 3 (length 3)
[  623.858624][ T1209] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  623.870987][ T1209] EXT4-fs (loop7): This should not happen!! Data will be lost
[  623.870987][ T1209] 
[  623.881580][ T1209] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10450: lblock 3 mapped to illegal pblock 3 (length 1)
[  623.895920][ T1215] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  623.904614][ T1215] Symlink component flag not implemented
[  623.910308][ T1215] Symlink component flag not implemented
[  623.915999][ T1215] Symlink component flag not implemented (7)
[  623.922048][ T1215] Symlink component flag not implemented (116)
[  623.928496][ T1209] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10450: lblock 3 mapped to illegal pblock 3 (length 1)
[  623.942919][ T1209] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10450: lblock 3 mapped to illegal pblock 3 (length 1)
[  623.944477][ T1216] netlink: 8 bytes leftover after parsing attributes in process `'.
[  623.968287][ T1205] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10450: lblock 3 mapped to illegal pblock 3 (length 1)
[  623.986893][ T1215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10452'.
[  623.996644][ T1205] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10450: lblock 3 mapped to illegal pblock 3 (length 1)
[  623.998381][ T1215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10452'.
[  624.021136][ T1209] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10450: lblock 3 mapped to illegal pblock 3 (length 1)
[  624.035449][ T1215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10452'.
[  624.045444][ T1209] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10450: lblock 3 mapped to illegal pblock 3 (length 1)
[  624.060167][ T1205] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10450: lblock 3 mapped to illegal pblock 3 (length 1)
[  624.074677][ T1209] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10450: lblock 3 mapped to illegal pblock 3 (length 1)
[  624.089052][ T1215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10452'.
[  624.374750][ T1216] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  624.458540][ T1231] netlink: 'syz.5.10458': attribute type 1 has an invalid length.
[  624.572652][ T1227] set_capacity_and_notify: 2 callbacks suppressed
[  624.572666][ T1227] loop0: detected capacity change from 0 to 32768
[  624.595979][T19824] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  624.608439][T19824] EXT4-fs (loop7): This should not happen!! Data will be lost
[  624.608439][T19824] 
[  624.619439][T32135] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  624.639631][ T1238] loop7: detected capacity change from 0 to 128
[  624.648266][ T1238] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  624.660685][ T1227]  loop0: p1 p2 p3 < > p4 < p5 p6 >
[  624.665942][ T1227] loop0: p1 start 460800 is beyond EOD, truncated
[  624.672479][ T1227] loop0: p2 size 83886080 extends beyond EOD, truncated
[  624.684499][ T1227] loop0: p5 start 460800 is beyond EOD, truncated
[  624.691076][ T1227] loop0: p6 size 83886080 extends beyond EOD, truncated
[  624.748303][T32135] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  624.770966][ T1235] pim6reg: entered allmulticast mode
[  624.808146][ T1235] pim6reg: left allmulticast mode
[  624.873988][ T1249] loop0: detected capacity change from 0 to 128
[  624.886037][ T1249] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  624.910408][ T1246] lo speed is unknown, defaulting to 1000
[  624.932192][   T29] kauditd_printk_skb: 174 callbacks suppressed
[  624.932204][   T29] audit: type=1326 audit(880.830:73451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.4.10465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636531f749 code=0x7ffc0000
[  624.982878][ T1249] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  625.017624][   T29] audit: type=1326 audit(880.859:73452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.4.10465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f636531f749 code=0x7ffc0000
[  625.040695][   T29] audit: type=1326 audit(880.859:73453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.4.10465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636531f749 code=0x7ffc0000
[  625.063663][   T29] audit: type=1326 audit(880.859:73454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.4.10465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f636531f749 code=0x7ffc0000
[  625.086715][   T29] audit: type=1326 audit(880.859:73455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.4.10465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636531f749 code=0x7ffc0000
[  625.109949][   T29] audit: type=1326 audit(880.859:73456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.4.10465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f636531f749 code=0x7ffc0000
[  625.133034][   T29] audit: type=1326 audit(880.859:73457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.4.10465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636531f749 code=0x7ffc0000
[  625.155998][   T29] audit: type=1326 audit(880.859:73458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.4.10465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f636531f749 code=0x7ffc0000
[  625.178888][   T29] audit: type=1326 audit(880.859:73459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.4.10465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636531f749 code=0x7ffc0000
[  625.201849][   T29] audit: type=1326 audit(880.859:73460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.4.10465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f636531f749 code=0x7ffc0000
[  625.255422][T30109] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  625.300635][ T1263] loop0: detected capacity change from 0 to 512
[  625.310125][ T1265] loop6: detected capacity change from 0 to 128
[  625.332904][ T1263] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  625.363556][ T1265] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  625.401536][ T1263] EXT4-fs (loop0): 1 truncate cleaned up
[  625.409965][ T1263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  625.501609][ T1282] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  625.501609][ T1282]    program syz.5.10471 not setting count and/or reply_len properly
[  625.536001][ T1043] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  625.684903][ T1294] loop6: detected capacity change from 0 to 128
[  625.710605][ T1294] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  625.760724][ T1043] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  625.881486][ T1297] pim6reg: entered allmulticast mode
[  625.916779][ T1297] pim6reg: left allmulticast mode
[  626.024599][ T1315] loop7: detected capacity change from 0 to 512
[  626.039170][ T1315] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  626.060131][ T1315] EXT4-fs (loop7): 1 truncate cleaned up
[  626.066458][ T1315] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  626.140978][T30109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  626.152751][ T1313] team0 (unregistering): Port device team_slave_0 removed
[  626.163530][ T1313] team0 (unregistering): Port device team_slave_1 removed
[  626.189338][ T1323] pim6reg: entered allmulticast mode
[  626.229298][ T1329] netlink: 'syz.0.10484': attribute type 1 has an invalid length.
[  626.343745][ T1331] loop0: detected capacity change from 0 to 164
[  626.393193][ T1331] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  626.403064][ T1331] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  626.444533][ T1323] pim6reg: left allmulticast mode
[  626.451810][ T1331] Symlink component flag not implemented
[  626.457473][ T1331] Symlink component flag not implemented
[  626.463367][ T1331] Symlink component flag not implemented (7)
[  626.469465][ T1331] Symlink component flag not implemented (116)
[  626.496641][ T1333] loop0: detected capacity change from 0 to 128
[  626.505062][ T1333] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  626.531352][T30109] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  626.571222][ T1338] loop0: detected capacity change from 0 to 164
[  626.578831][ T1338] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  626.587858][ T1338] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  626.596491][ T1338] Symlink component flag not implemented
[  626.602236][ T1338] Symlink component flag not implemented
[  626.608084][ T1338] Symlink component flag not implemented (7)
[  626.614188][ T1338] Symlink component flag not implemented (116)
[  626.644562][ T1338] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  626.725327][ T1348] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  626.734063][ T1348] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  626.742441][ T1348] Symlink component flag not implemented
[  626.748113][ T1348] Symlink component flag not implemented
[  626.753853][ T1348] Symlink component flag not implemented (7)
[  626.759955][ T1348] Symlink component flag not implemented (116)
[  626.769854][ T1348] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  626.870014][T32135] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  626.895978][ T1355] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  626.906891][ T1355] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  626.915468][ T1355] Symlink component flag not implemented
[  626.921168][ T1355] Symlink component flag not implemented
[  626.926965][ T1355] Symlink component flag not implemented (7)
[  626.933041][ T1355] Symlink component flag not implemented (116)
[  626.948087][ T1355] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  627.185668][ T1378] netlink: 'syz.7.10504': attribute type 1 has an invalid length.
[  627.239026][ T1370]  loop6: p1 p2 p3 < > p4 < p5 p6 >
[  627.244460][ T1370] loop6: p1 start 460800 is beyond EOD, truncated
[  627.250991][ T1370] loop6: p2 size 83886080 extends beyond EOD, truncated
[  627.259828][ T1370] loop6: p5 start 460800 is beyond EOD, truncated
[  627.266316][ T1370] loop6: p6 size 83886080 extends beyond EOD, truncated
[  627.335448][ T1383] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[  627.343865][ T1383] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[  627.352537][ T1384] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  627.362115][ T1384] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  627.370528][ T1384] Symlink component flag not implemented
[  627.376421][ T1384] Symlink component flag not implemented
[  627.382579][ T1384] Symlink component flag not implemented (7)
[  627.388604][ T1384] Symlink component flag not implemented (116)
[  627.428942][ T1388] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  627.438138][ T1388] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  627.447176][ T1388] Symlink component flag not implemented
[  627.452965][ T1388] Symlink component flag not implemented
[  627.459686][ T1388] Symlink component flag not implemented (7)
[  627.465682][ T1388] Symlink component flag not implemented (116)
[  627.477381][ T1388] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  627.863154][ T1408]  loop6: p1 p2 p3 < > p4 < p5 p6 >
[  627.868428][ T1408] loop6: p1 start 460800 is beyond EOD, truncated
[  627.874949][ T1408] loop6: p2 size 83886080 extends beyond EOD, truncated
[  627.884360][ T1408] loop6: p5 start 460800 is beyond EOD, truncated
[  627.890987][ T1408] loop6: p6 size 83886080 extends beyond EOD, truncated
[  627.916308][ T1411] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  627.916308][ T1411]    program syz.4.10518 not setting count and/or reply_len properly
[  628.010231][ T1419] netlink: 'syz.6.10522': attribute type 1 has an invalid length.
[  628.052879][ T1422] __nla_validate_parse: 39 callbacks suppressed
[  628.052933][ T1422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10523'.
[  628.170070][ T1430] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10527'.
[  628.183139][ T1430] pim6reg: entered allmulticast mode
[  628.194038][ T1430] pim6reg: left allmulticast mode
[  628.216225][ T1434] netlink: 'syz.7.10528': attribute type 1 has an invalid length.
[  628.224112][ T1434] netlink: 224 bytes leftover after parsing attributes in process `syz.7.10528'.
[  628.296184][ T1438] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  628.296184][ T1438]    program syz.7.10530 not setting count and/or reply_len properly
[  628.381778][ T1445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10532'.
[  628.400782][ T1446] netlink: 96 bytes leftover after parsing attributes in process `syz.7.10531'.
[  628.479860][ T1439]  loop6: p1 p2 p3 < > p4 < p5 p6 >
[  628.486006][ T1439] loop6: p1 start 460800 is beyond EOD, truncated
[  628.492522][ T1439] loop6: p2 size 83886080 extends beyond EOD, truncated
[  628.512554][ T1451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  628.521705][ T1439] loop6: p5 start 460800 is beyond EOD, truncated
[  628.528148][ T1439] loop6: p6 size 83886080 extends beyond EOD, truncated
[  628.535251][ T1451] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  628.664882][ T1453] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10535'.
[  628.705391][ T1453] pim6reg: entered allmulticast mode
[  628.782937][ T1453] pim6reg: left allmulticast mode
[  628.813011][ T1469] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  628.813011][ T1469]    program syz.4.10542 not setting count and/or reply_len properly
[  628.830423][ T1471] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  628.841985][ T1471] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  628.883936][ T1471] Symlink component flag not implemented
[  628.889719][ T1471] Symlink component flag not implemented
[  628.899918][ T1471] Symlink component flag not implemented (7)
[  628.905945][ T1471] Symlink component flag not implemented (116)
[  628.915395][ T1473] netlink: 8 bytes leftover after parsing attributes in process `'.
[  628.938242][ T1453] netlink: 164 bytes leftover after parsing attributes in process `syz.7.10535'.
[  628.961050][ T1471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10543'.
[  628.989757][ T1471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10543'.
[  629.021575][ T1471] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  629.082713][ T1482] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  629.094099][ T1482] EXT4-fs (loop0): 1 truncate cleaned up
[  629.100180][ T1482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  629.236948][ T1467] pim6reg: entered allmulticast mode
[  629.255188][ T1490] pim6reg: left allmulticast mode
[  629.699524][ T1504] set_capacity_and_notify: 9 callbacks suppressed
[  629.699538][ T1504] loop5: detected capacity change from 0 to 128
[  629.717368][ T1498] pim6reg: entered allmulticast mode
[  629.742719][ T1504] FAT-fs (loop5): Directory bread(block 32) failed
[  629.751572][ T1504] FAT-fs (loop5): Directory bread(block 33) failed
[  629.771151][ T1504] FAT-fs (loop5): Directory bread(block 34) failed
[  629.793133][ T1504] FAT-fs (loop5): Directory bread(block 35) failed
[  629.812361][ T1504] FAT-fs (loop5): Directory bread(block 36) failed
[  629.829814][ T1504] FAT-fs (loop5): Directory bread(block 37) failed
[  629.839261][ T1504] FAT-fs (loop5): Directory bread(block 38) failed
[  629.853229][ T1504] FAT-fs (loop5): Directory bread(block 39) failed
[  629.866752][ T1504] FAT-fs (loop5): Directory bread(block 40) failed
[  629.880608][ T1504] FAT-fs (loop5): Directory bread(block 41) failed
[  629.928457][T30109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.950457][   T29] kauditd_printk_skb: 302 callbacks suppressed
[  629.950468][   T29] audit: type=1326 audit(885.857:73763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1503 comm="syz.5.10552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfe4c4df90 code=0x7ffc0000
[  630.017678][   T29] audit: type=1326 audit(885.887:73764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1503 comm="syz.5.10552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fbfe4c4e497 code=0x7ffc0000
[  630.040628][   T29] audit: type=1326 audit(885.887:73765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1503 comm="syz.5.10552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfe4c4df90 code=0x7ffc0000
[  630.063691][   T29] audit: type=1326 audit(885.887:73766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1503 comm="syz.5.10552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe4c4f749 code=0x7ffc0000
[  630.086730][   T29] audit: type=1326 audit(885.887:73767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1503 comm="syz.5.10552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfe4c4f749 code=0x7ffc0000
[  630.109984][   T29] audit: type=1326 audit(885.887:73768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1503 comm="syz.5.10552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe4c4f749 code=0x7ffc0000
[  630.133086][   T29] audit: type=1326 audit(885.887:73769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1503 comm="syz.5.10552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe4c4f749 code=0x7ffc0000
[  630.156113][   T29] audit: type=1326 audit(885.887:73770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1503 comm="syz.5.10552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfe4c4f749 code=0x7ffc0000
[  630.179246][   T29] audit: type=1326 audit(885.887:73771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1503 comm="syz.5.10552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe4c4f749 code=0x7ffc0000
[  630.202268][   T29] audit: type=1326 audit(885.887:73772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1503 comm="syz.5.10552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe4c4f749 code=0x7ffc0000
[  630.252818][ T1498] pim6reg: left allmulticast mode
[  630.311936][ T1521] loop4: detected capacity change from 0 to 164
[  630.363740][ T1521] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  630.387463][ T1521] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  630.395917][ T1521] Symlink component flag not implemented
[  630.401608][ T1521] Symlink component flag not implemented
[  630.408088][ T1521] Symlink component flag not implemented (7)
[  630.414106][ T1521] Symlink component flag not implemented (116)
[  630.424817][ T1521] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  630.474732][ T1535] loop4: detected capacity change from 0 to 164
[  630.482989][ T1535] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  630.492326][ T1535] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  630.500796][ T1535] Symlink component flag not implemented
[  630.506510][ T1535] Symlink component flag not implemented
[  630.516487][ T1535] Symlink component flag not implemented (7)
[  630.522541][ T1535] Symlink component flag not implemented (116)
[  630.573867][ T1537] lo speed is unknown, defaulting to 1000
[  630.579914][ T1538] loop7: detected capacity change from 0 to 1024
[  630.589322][ T1538] EXT4-fs: Ignoring removed bh option
[  630.612678][ T1538] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  630.626730][ T1535] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  630.638588][ T1538] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.10563: lblock 3 mapped to illegal pblock 3 (length 3)
[  630.663301][ T1538] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  630.675642][ T1538] EXT4-fs (loop7): This should not happen!! Data will be lost
[  630.675642][ T1538] 
[  630.689960][ T1537] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10563: lblock 3 mapped to illegal pblock 3 (length 1)
[  630.704740][ T1537] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10563: lblock 3 mapped to illegal pblock 3 (length 1)
[  630.719107][ T1537] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10563: lblock 3 mapped to illegal pblock 3 (length 1)
[  630.733439][ T1537] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10563: lblock 3 mapped to illegal pblock 3 (length 1)
[  630.748251][ T1537] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10563: lblock 3 mapped to illegal pblock 3 (length 1)
[  630.762756][ T1537] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10563: lblock 3 mapped to illegal pblock 3 (length 1)
[  630.778494][ T1536] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10563: lblock 3 mapped to illegal pblock 3 (length 1)
[  630.794925][ T1536] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10563: lblock 3 mapped to illegal pblock 3 (length 1)
[  630.812636][ T1537] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10563: lblock 3 mapped to illegal pblock 3 (length 1)
[  630.903387][ T1566] loop4: detected capacity change from 0 to 164
[  630.919770][ T1566] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  630.964777][ T1566] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  630.980263][ T1566] Symlink component flag not implemented
[  630.985989][ T1566] Symlink component flag not implemented
[  631.001903][ T1566] Symlink component flag not implemented (7)
[  631.007928][ T1566] Symlink component flag not implemented (116)
[  631.149986][ T1573] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  631.149986][ T1573]    program syz.4.10574 not setting count and/or reply_len properly
[  631.356193][ T1587] loop4: detected capacity change from 0 to 164
[  631.379071][ T1587] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  631.407570][ T1589] loop5: detected capacity change from 0 to 1024
[  631.430987][ T1589] EXT4-fs: Ignoring removed bh option
[  631.449406][ T1585] lo speed is unknown, defaulting to 1000
[  631.514319][ T1581] siw: device registration error -23
[  631.541546][ T1587] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  631.549955][ T1587] Symlink component flag not implemented
[  631.555627][ T1587] Symlink component flag not implemented
[  631.561833][ T1587] Symlink component flag not implemented (7)
[  631.567828][ T1587] Symlink component flag not implemented (116)
[  631.576079][ T1589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  631.593078][ T1589] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.10576: lblock 3 mapped to illegal pblock 3 (length 3)
[  631.620831][ T9772] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  631.633171][ T9772] EXT4-fs (loop7): This should not happen!! Data will be lost
[  631.633171][ T9772] 
[  631.686297][T32135] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  631.689859][ T1587] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  631.727567][ T1589] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  631.739879][ T1589] EXT4-fs (loop5): This should not happen!! Data will be lost
[  631.739879][ T1589] 
[  631.819244][ T1598] loop4: detected capacity change from 0 to 512
[  631.862281][ T1598] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  631.884747][ T1600] loop7: detected capacity change from 0 to 164
[  631.905232][ T1598] EXT4-fs (loop4): 1 truncate cleaned up
[  631.911245][ T1600] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  631.919618][ T1585] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.10576: lblock 3 mapped to illegal pblock 3 (length 1)
[  631.935219][ T1598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  631.948013][ T1600] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  631.956975][ T1600] Symlink component flag not implemented
[  631.962660][ T1600] Symlink component flag not implemented
[  631.969040][ T1585] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.10576: lblock 3 mapped to illegal pblock 3 (length 1)
[  631.985737][ T1600] Symlink component flag not implemented (7)
[  631.991861][ T1600] Symlink component flag not implemented (116)
[  631.998880][ T1585] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.10576: lblock 3 mapped to illegal pblock 3 (length 1)
[  632.016488][ T1585] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.10576: lblock 3 mapped to illegal pblock 3 (length 1)
[  632.051925][ T1582] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.10576: lblock 3 mapped to illegal pblock 3 (length 1)
[  632.081192][ T1585] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.10576: lblock 3 mapped to illegal pblock 3 (length 1)
[  632.097408][ T1607] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  632.097408][ T1607]    program syz.7.10586 not setting count and/or reply_len properly
[  632.114977][ T1582] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.10576: lblock 3 mapped to illegal pblock 3 (length 1)
[  632.130148][ T1582] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.10576: lblock 3 mapped to illegal pblock 3 (length 1)
[  632.145693][ T1585] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.10576: lblock 3 mapped to illegal pblock 3 (length 1)
[  632.348920][ T1621] lo speed is unknown, defaulting to 1000
[  632.378330][T19814] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  632.390779][T19814] EXT4-fs (loop5): This should not happen!! Data will be lost
[  632.390779][T19814] 
[  632.408587][T27056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  632.434513][ T1619] siw: device registration error -23
[  632.469867][ T1628] loop6: detected capacity change from 0 to 128
[  632.492772][ T1628] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  632.553249][ T1043] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  632.564984][ T1637] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  632.564984][ T1637]    program syz.5.10600 not setting count and/or reply_len properly
[  632.615289][ T1621] xt_NFQUEUE: number of total queues is 0
[  632.630795][ T1621] EXT4-fs: Ignoring removed bh option
[  632.670324][ T1621] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  632.686255][T28937] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  632.702531][ T1621] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.10593: lblock 3 mapped to illegal pblock 3 (length 3)
[  632.717106][ T1621] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  632.729413][ T1621] EXT4-fs (loop7): This should not happen!! Data will be lost
[  632.729413][ T1621] 
[  632.749214][ T1621] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10593: lblock 3 mapped to illegal pblock 3 (length 1)
[  632.778752][ T1621] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10593: lblock 3 mapped to illegal pblock 3 (length 1)
[  632.793067][ T1621] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10593: lblock 3 mapped to illegal pblock 3 (length 1)
[  632.808484][ T1621] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10593: lblock 3 mapped to illegal pblock 3 (length 1)
[  632.823227][ T1621] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10593: lblock 3 mapped to illegal pblock 3 (length 1)
[  632.837729][ T1621] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10593: lblock 3 mapped to illegal pblock 3 (length 1)
[  632.852762][ T1621] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10593: lblock 3 mapped to illegal pblock 3 (length 1)
[  632.867879][ T1621] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10593: lblock 3 mapped to illegal pblock 3 (length 1)
[  632.875278][ T1660] siw: device registration error -23
[  632.882686][ T1621] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.10593: lblock 3 mapped to illegal pblock 3 (length 1)
[  632.963880][ T1664] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  633.028390][T28937] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  633.201603][T19843] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  633.214016][T19843] EXT4-fs (loop7): This should not happen!! Data will be lost
[  633.214016][T19843] 
[  633.232985][T32135] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  633.253344][ T1674] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  633.253344][ T1674]    program syz.4.10615 not setting count and/or reply_len properly
[  633.360001][ T1683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  633.368596][ T1683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  633.444338][ T1691] FAT-fs (loop4): Directory bread(block 32) failed
[  633.450902][ T1691] FAT-fs (loop4): Directory bread(block 33) failed
[  633.457721][ T1691] FAT-fs (loop4): Directory bread(block 34) failed
[  633.464311][ T1691] FAT-fs (loop4): Directory bread(block 35) failed
[  633.470896][ T1691] FAT-fs (loop4): Directory bread(block 36) failed
[  633.477590][ T1691] FAT-fs (loop4): Directory bread(block 37) failed
[  633.484186][ T1691] FAT-fs (loop4): Directory bread(block 38) failed
[  633.490724][ T1691] FAT-fs (loop4): Directory bread(block 39) failed
[  633.497281][ T1691] FAT-fs (loop4): Directory bread(block 40) failed
[  633.503886][ T1691] FAT-fs (loop4): Directory bread(block 41) failed
[  633.630509][ T1695] lo speed is unknown, defaulting to 1000
[  633.827855][ T1718] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  633.827855][ T1718]    program syz.5.10630 not setting count and/or reply_len properly
[  633.924415][ T1727] FAULT_INJECTION: forcing a failure.
[  633.924415][ T1727] name failslab, interval 1, probability 0, space 0, times 0
[  633.932611][ T1695] xt_NFQUEUE: number of total queues is 0
[  633.937187][ T1727] CPU: 0 UID: 0 PID: 1727 Comm: syz.5.10636 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  633.937345][ T1727] Tainted: [W]=WARN
[  633.937370][ T1727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  633.937430][ T1727] Call Trace:
[  633.937449][ T1727]  <TASK>
[  633.937472][ T1727]  __dump_stack+0x1d/0x30
[  633.937541][ T1727]  dump_stack_lvl+0x95/0xd0
[  633.937601][ T1727]  dump_stack+0x15/0x1b
[  633.937655][ T1727]  should_fail_ex+0x265/0x280
[  633.937742][ T1727]  should_failslab+0x8c/0xb0
[  633.937798][ T1727]  __kvmalloc_node_noprof+0x149/0x6b0
[  633.937867][ T1727]  ? file_tty_write+0x1a3/0x690
[  633.937995][ T1727]  ? mutex_trylock+0x82/0xc0
[  633.938144][ T1727]  file_tty_write+0x1a3/0x690
[  633.938203][ T1727]  ? __pfx_tty_write+0x10/0x10
[  633.938249][ T1727]  tty_write+0x25/0x30
[  633.938293][ T1727]  vfs_write+0x52a/0x960
[  633.938415][ T1727]  ksys_write+0xda/0x1a0
[  633.938467][ T1727]  __x64_sys_write+0x40/0x50
[  633.938520][ T1727]  x64_sys_call+0x2847/0x3000
[  633.938583][ T1727]  do_syscall_64+0xca/0x2b0
[  633.938728][ T1727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  633.938833][ T1727] RIP: 0033:0x7fbfe4c4f749
[  633.938875][ T1727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  633.938922][ T1727] RSP: 002b:00007fbfe36b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  633.938969][ T1727] RAX: ffffffffffffffda RBX: 00007fbfe4ea5fa0 RCX: 00007fbfe4c4f749
[  633.939005][ T1727] RDX: 0000000000001006 RSI: 00002000000010c0 RDI: 0000000000000004
[  633.939081][ T1727] RBP: 00007fbfe36b7090 R08: 0000000000000000 R09: 0000000000000000
[  633.939116][ T1727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  633.939150][ T1727] R13: 00007fbfe4ea6038 R14: 00007fbfe4ea5fa0 R15: 00007ffeb97c0af8
[  633.939212][ T1727]  </TASK>
[  633.960500][ T1729] __nla_validate_parse: 31 callbacks suppressed
[  633.960541][ T1729] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10637'.
[  633.970010][ T1724] siw: device registration error -23
[  634.023094][ T1695] EXT4-fs: Ignoring removed bh option
[  634.176946][ T1695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  634.198053][ T1695] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 3: comm syz.0.10623: lblock 3 mapped to illegal pblock 3 (length 3)
[  634.212710][ T1695] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  634.225040][ T1695] EXT4-fs (loop0): This should not happen!! Data will be lost
[  634.225040][ T1695] 
[  634.319699][ T1702] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10623: lblock 3 mapped to illegal pblock 3 (length 1)
[  634.334430][ T1702] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10623: lblock 3 mapped to illegal pblock 3 (length 1)
[  634.373627][ T1746] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  634.373627][ T1746]    program syz.4.10643 not setting count and/or reply_len properly
[  634.392863][ T1702] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10623: lblock 3 mapped to illegal pblock 3 (length 1)
[  634.428082][ T1702] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10623: lblock 3 mapped to illegal pblock 3 (length 1)
[  634.497985][ T1750] netlink: 'syz.5.10644': attribute type 1 has an invalid length.
[  634.505943][ T1750] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10644'.
[  634.524236][T19814] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:42: lblock 8 mapped to illegal pblock 8 (length 8)
[  634.542314][T19814] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  634.554638][T19814] EXT4-fs (loop0): This should not happen!! Data will be lost
[  634.554638][T19814] 
[  634.565736][T30109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  634.592202][ T1742]  loop6: p1 p2 p3 < > p4 < p5 p6 >
[  634.597570][ T1742] loop6: p1 start 460800 is beyond EOD, truncated
[  634.604103][ T1742] loop6: p2 size 83886080 extends beyond EOD, truncated
[  634.630341][ T1759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10649'.
[  634.645840][ T1760] EXT4-fs: Ignoring removed bh option
[  634.657361][ T1742] loop6: p5 start 460800 is beyond EOD, truncated
[  634.663972][ T1742] loop6: p6 size 83886080 extends beyond EOD, truncated
[  634.703442][ T1760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  634.720100][ T1754] lo speed is unknown, defaulting to 1000
[  634.747331][ T1760] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 3: comm syz.0.10647: lblock 3 mapped to illegal pblock 3 (length 3)
[  634.764601][ T1756] lo speed is unknown, defaulting to 1000
[  634.826448][ T1768] bridge0: entered allmulticast mode
[  634.849455][ T1760] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  634.861777][ T1760] EXT4-fs (loop0): This should not happen!! Data will be lost
[  634.861777][ T1760] 
[  634.892414][ T1774] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10647: lblock 3 mapped to illegal pblock 3 (length 1)
[  634.957823][ T1774] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10647: lblock 3 mapped to illegal pblock 3 (length 1)
[  634.983443][ T1774] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10647: lblock 3 mapped to illegal pblock 3 (length 1)
[  634.998922][ T1755] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10647: lblock 3 mapped to illegal pblock 3 (length 1)
[  635.052123][ T1774] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10647: lblock 3 mapped to illegal pblock 3 (length 1)
[  635.066663][ T1755] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10647: lblock 3 mapped to illegal pblock 3 (length 1)
[  635.082562][ T1774] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10647: lblock 3 mapped to illegal pblock 3 (length 1)
[  635.114956][ T1792] set_capacity_and_notify: 6 callbacks suppressed
[  635.114968][ T1792] loop6: detected capacity change from 0 to 128
[  635.148086][ T1755] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10647: lblock 3 mapped to illegal pblock 3 (length 1)
[  635.165634][ T1774] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.10647: lblock 3 mapped to illegal pblock 3 (length 1)
[  635.185211][ T1792] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  635.267286][ T1797] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  635.283570][ T1786] lo speed is unknown, defaulting to 1000
[  635.298985][ T1043] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  635.419579][ T1789] xt_NFQUEUE: number of total queues is 0
[  635.440735][T19814] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  635.453177][T19814] EXT4-fs (loop0): This should not happen!! Data will be lost
[  635.453177][T19814] 
[  635.465823][ T1806] loop6: detected capacity change from 0 to 512
[  635.472889][ T1806] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  635.475315][ T1789] loop5: detected capacity change from 0 to 1024
[  635.486686][T30109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  635.498527][ T1804] siw: device registration error -23
[  635.506338][ T1806] EXT4-fs (loop6): 1 truncate cleaned up
[  635.522475][ T1789] EXT4-fs: Ignoring removed bh option
[  635.543058][ T1806] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  635.589306][ T1821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  635.599552][ T1789] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  635.613797][ T1821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  635.628893][ T1825] rdma_rxe: rxe_newlink: failed to add syz_tun
[  635.639546][ T1826] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10665'.
[  635.673386][ T1786] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.10658: lblock 3 mapped to illegal pblock 3 (length 3)
[  635.697891][ T1786] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  635.710351][ T1786] EXT4-fs (loop5): This should not happen!! Data will be lost
[  635.710351][ T1786] 
[  635.725836][ T1786] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.10658: lblock 3 mapped to illegal pblock 3 (length 1)
[  635.753225][ T1819] loop4: detected capacity change from 0 to 32768
[  635.760055][ T1786] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.10658: lblock 3 mapped to illegal pblock 3 (length 1)
[  635.774410][ T1786] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.10658: lblock 3 mapped to illegal pblock 3 (length 1)
[  635.788860][ T1786] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.10658: lblock 3 mapped to illegal pblock 3 (length 1)
[  635.803348][ T1819]  loop4: p1 p2 p3 < > p4 < p5 p6 >
[  635.808028][ T1786] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.10658: lblock 3 mapped to illegal pblock 3 (length 1)
[  635.808670][ T1819] loop4: p1 start 460800 is beyond EOD, truncated
[  635.829111][ T1819] loop4: p2 size 83886080 extends beyond EOD, truncated
[  635.830511][ T1484] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  635.842956][ T1786] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.10658: lblock 3 mapped to illegal pblock 3 (length 1)
[  635.857323][ T1819] loop4: p5 start 460800 is beyond EOD, truncated
[  635.868989][ T1786] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.10658: lblock 3 mapped to illegal pblock 3 (length 1)
[  635.871114][ T1819] loop4: p6 size 83886080 extends beyond EOD, truncated
[  635.885739][ T1786] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.10658: lblock 3 mapped to illegal pblock 3 (length 1)
[  635.943537][ T9766] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  635.955910][ T9766] EXT4-fs (loop5): This should not happen!! Data will be lost
[  635.955910][ T9766] 
[  635.967341][T27056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  635.995780][ T1828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10672'.
[  636.004786][ T1828] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10672'.
[  636.014735][   T29] kauditd_printk_skb: 340 callbacks suppressed
[  636.014749][   T29] audit: type=1400 audit(891.915:74113): avc:  denied  { compute_member } for  pid=1827 comm="syz.5.10672" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  636.035929][ T1832] loop4: detected capacity change from 0 to 128
[  636.049073][ T1832] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  636.081074][ T1835] loop5: detected capacity change from 0 to 164
[  636.088109][T28937] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  636.097406][ T1835] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  636.106773][ T1835] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  636.115503][ T1835] Symlink component flag not implemented
[  636.121161][ T1835] Symlink component flag not implemented
[  636.131039][ T1835] Symlink component flag not implemented (7)
[  636.137092][ T1835] Symlink component flag not implemented (116)
[  636.142301][ T1838] FAULT_INJECTION: forcing a failure.
[  636.142301][ T1838] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  636.156389][ T1838] CPU: 0 UID: 0 PID: 1838 Comm: syz.4.10674 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  636.156490][ T1838] Tainted: [W]=WARN
[  636.156529][ T1838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  636.156539][ T1838] Call Trace:
[  636.156545][ T1838]  <TASK>
[  636.156551][ T1838]  __dump_stack+0x1d/0x30
[  636.156570][ T1838]  dump_stack_lvl+0x95/0xd0
[  636.156587][ T1838]  dump_stack+0x15/0x1b
[  636.156687][ T1838]  should_fail_ex+0x265/0x280
[  636.156706][ T1838]  should_fail+0xb/0x20
[  636.156722][ T1838]  should_fail_usercopy+0x1a/0x20
[  636.156741][ T1838]  _copy_from_user+0x1c/0xb0
[  636.156817][ T1838]  ___sys_sendmsg+0xc1/0x1d0
[  636.156877][ T1838]  __x64_sys_sendmsg+0xd4/0x160
[  636.156903][ T1838]  x64_sys_call+0x17ba/0x3000
[  636.156946][ T1838]  do_syscall_64+0xca/0x2b0
[  636.156984][ T1838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.157032][ T1838] RIP: 0033:0x7f636531f749
[  636.157044][ T1838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  636.157058][ T1838] RSP: 002b:00007f6363d7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  636.157073][ T1838] RAX: ffffffffffffffda RBX: 00007f6365575fa0 RCX: 00007f636531f749
[  636.157083][ T1838] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004
[  636.157093][ T1838] RBP: 00007f6363d7f090 R08: 0000000000000000 R09: 0000000000000000
[  636.157123][ T1838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  636.157133][ T1838] R13: 00007f6365576038 R14: 00007f6365575fa0 R15: 00007ffd0f920d48
[  636.157148][ T1838]  </TASK>
[  636.159534][ T1835] netlink: 8 bytes leftover after parsing attributes in process `'.
[  636.354644][ T1043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  636.423224][ T1852] netlink: 'syz.6.10679': attribute type 1 has an invalid length.
[  636.431306][ T1852] netlink: 224 bytes leftover after parsing attributes in process `syz.6.10679'.
[  636.520100][ T1875] loop0: detected capacity change from 0 to 512
[  636.527173][ T1875] EXT4-fs: Ignoring removed i_version option
[  636.539308][ T1875] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  636.549267][ T1871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  636.549430][ T1871] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  636.569231][ T1875] EXT4-fs (loop0): 1 truncate cleaned up
[  636.571064][ T1874] rdma_rxe: rxe_newlink: failed to add syz_tun
[  636.576120][ T1875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  636.602674][ T1875] batadv_slave_0: entered promiscuous mode
[  636.610123][ T1875] batman_adv: batadv0: Adding interface: macsec1
[  636.617145][ T1875] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  636.642644][ T1875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  636.653212][ T1875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.664026][ T1875] batman_adv: batadv0: Interface activated: macsec1
[  636.689523][T30109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  636.706829][ T1881] loop0: detected capacity change from 0 to 512
[  636.713485][ T1881] EXT4-fs: Ignoring removed i_version option
[  636.719769][ T1881] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  636.731727][ T1883] loop7: detected capacity change from 0 to 164
[  636.738834][ T1883] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  636.741146][ T1881] EXT4-fs (loop0): 1 truncate cleaned up
[  636.748156][ T1883] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  636.753773][ T1881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  636.774244][ T1883] Symlink component flag not implemented
[  636.779886][ T1883] Symlink component flag not implemented
[  636.785835][ T1883] Symlink component flag not implemented (7)
[  636.791824][ T1883] Symlink component flag not implemented (116)
[  636.801004][ T1883] netlink: 8 bytes leftover after parsing attributes in process `'.
[  636.809438][ T1883] netlink: 8 bytes leftover after parsing attributes in process `'.
[  636.837088][ T1881] FAULT_INJECTION: forcing a failure.
[  636.837088][ T1881] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  636.850166][ T1881] CPU: 0 UID: 0 PID: 1881 Comm: syz.0.10691 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  636.850199][ T1881] Tainted: [W]=WARN
[  636.850272][ T1881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  636.850283][ T1881] Call Trace:
[  636.850289][ T1881]  <TASK>
[  636.850295][ T1881]  __dump_stack+0x1d/0x30
[  636.850353][ T1881]  dump_stack_lvl+0x95/0xd0
[  636.850371][ T1881]  dump_stack+0x15/0x1b
[  636.850388][ T1881]  should_fail_ex+0x265/0x280
[  636.850413][ T1881]  should_fail+0xb/0x20
[  636.850435][ T1881]  should_fail_usercopy+0x1a/0x20
[  636.850525][ T1881]  _copy_from_user+0x1c/0xb0
[  636.850556][ T1881]  io_register_rsrc_update+0x5f/0x120
[  636.850589][ T1881]  __se_sys_io_uring_register+0x9bd/0xf20
[  636.850611][ T1881]  ? fput+0x8f/0xc0
[  636.850697][ T1881]  ? ksys_write+0x192/0x1a0
[  636.850716][ T1881]  __x64_sys_io_uring_register+0x55/0x70
[  636.850741][ T1881]  x64_sys_call+0x27ad/0x3000
[  636.850768][ T1881]  do_syscall_64+0xca/0x2b0
[  636.850825][ T1881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.850845][ T1881] RIP: 0033:0x7f12af5af749
[  636.850858][ T1881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  636.850885][ T1881] RSP: 002b:00007f12ae017038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  636.850903][ T1881] RAX: ffffffffffffffda RBX: 00007f12af805fa0 RCX: 00007f12af5af749
[  636.850913][ T1881] RDX: 0000200000000600 RSI: 0000000000000010 RDI: 000000000000000b
[  636.850923][ T1881] RBP: 00007f12ae017090 R08: 0000000000000000 R09: 0000000000000000
[  636.850933][ T1881] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001
[  636.851011][ T1881] R13: 00007f12af806038 R14: 00007f12af805fa0 R15: 00007fff903cef68
[  636.851029][ T1881]  </TASK>
[  637.157585][   T29] audit: type=1400 audit(893.054:74114): avc:  denied  { getopt } for  pid=1895 comm="syz.6.10697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  637.177796][   T29] audit: type=1326 audit(893.054:74115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1895 comm="syz.6.10697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342991f749 code=0x7ffc0000
[  637.200957][   T29] audit: type=1326 audit(893.054:74116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1895 comm="syz.6.10697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342991f749 code=0x7ffc0000
[  637.224175][   T29] audit: type=1326 audit(893.054:74117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1895 comm="syz.6.10697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f342991f749 code=0x7ffc0000
[  637.247265][   T29] audit: type=1326 audit(893.064:74118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1895 comm="syz.6.10697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342991f749 code=0x7ffc0000
[  637.270692][   T29] audit: type=1326 audit(893.064:74119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1895 comm="syz.6.10697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f342991f749 code=0x7ffc0000
[  637.294076][   T29] audit: type=1326 audit(893.064:74120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1895 comm="syz.6.10697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342991f749 code=0x7ffc0000
[  637.307133][ T1900] netlink: 'syz.5.10699': attribute type 1 has an invalid length.
[  637.317682][   T29] audit: type=1326 audit(893.064:74121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1895 comm="syz.6.10697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f342991f749 code=0x7ffc0000
[  637.347999][   T29] audit: type=1326 audit(893.064:74122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1895 comm="syz.6.10697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342991f749 code=0x7ffc0000
[  637.409173][ T1907] loop6: detected capacity change from 0 to 512
[  637.416630][ T1907] EXT4-fs: Ignoring removed i_version option
[  637.422809][ T1907] EXT4-fs: dax option not supported
[  637.434320][ T1911] FAT-fs (loop0): error, clusters badly computed (1 != 0)
[  637.441468][ T1911] FAT-fs (loop0): Filesystem has been set read-only
[  637.509386][ T1918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  637.518322][ T1918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  637.597279][ T1934] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  637.597279][ T1934]    program syz.4.10710 not setting count and/or reply_len properly
[  637.680470][ T1940] lo speed is unknown, defaulting to 1000
[  637.731065][ T1945] netlink: 'syz.4.10715': attribute type 1 has an invalid length.
[  637.748767][ T1936] siw: device registration error -23
[  637.922568][ T1964] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  637.934525][ T1964] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  637.942997][ T1964] Symlink component flag not implemented
[  637.948762][ T1964] Symlink component flag not implemented
[  637.954582][ T1964] Symlink component flag not implemented (7)
[  637.960650][ T1964] Symlink component flag not implemented (116)
[  637.967351][ T1948]  loop7: p1 p2 p3 < > p4 < p5 p6 >
[  637.972596][ T1948] loop7: p1 start 460800 is beyond EOD, truncated
[  637.979050][ T1948] loop7: p2 size 83886080 extends beyond EOD, truncated
[  638.003781][ T1948] loop7: p5 start 460800 is beyond EOD, truncated
[  638.010309][ T1948] loop7: p6 size 83886080 extends beyond EOD, truncated
[  638.119347][ T1940] xt_connbytes: Forcing CT accounting to be enabled
[  638.126071][ T1940] xt_NFQUEUE: number of total queues is 0
[  638.138440][ T1940] EXT4-fs: Ignoring removed bh option
[  638.148689][ T1978] FAT-fs (loop0): Directory bread(block 32) failed
[  638.167797][ T1978] FAT-fs (loop0): Directory bread(block 33) failed
[  638.174417][ T1978] FAT-fs (loop0): Directory bread(block 34) failed
[  638.181097][ T1978] FAT-fs (loop0): Directory bread(block 35) failed
[  638.187663][ T1978] FAT-fs (loop0): Directory bread(block 36) failed
[  638.194275][ T1978] FAT-fs (loop0): Directory bread(block 37) failed
[  638.200831][ T1978] FAT-fs (loop0): Directory bread(block 38) failed
[  638.204013][ T1940] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 3: comm syz.6.10713: lblock 3 mapped to illegal pblock 3 (length 3)
[  638.210464][ T1978] FAT-fs (loop0): Directory bread(block 39) failed
[  638.228073][ T1978] FAT-fs (loop0): Directory bread(block 40) failed
[  638.234762][ T1978] FAT-fs (loop0): Directory bread(block 41) failed
[  638.266245][ T1940] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  638.278623][ T1940] EXT4-fs (loop6): This should not happen!! Data will be lost
[  638.278623][ T1940] 
[  638.291716][ T1946] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.10713: lblock 3 mapped to illegal pblock 3 (length 1)
[  638.307245][ T1946] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.10713: lblock 3 mapped to illegal pblock 3 (length 1)
[  638.322766][ T1946] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.10713: lblock 3 mapped to illegal pblock 3 (length 1)
[  638.370246][ T1946] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.10713: lblock 3 mapped to illegal pblock 3 (length 1)
[  638.391208][ T1946] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.10713: lblock 3 mapped to illegal pblock 3 (length 1)
[  638.407488][ T1946] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.10713: lblock 3 mapped to illegal pblock 3 (length 1)
[  638.423012][ T1946] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.10713: lblock 3 mapped to illegal pblock 3 (length 1)
[  638.437632][ T1946] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.10713: lblock 3 mapped to illegal pblock 3 (length 1)
[  638.452907][ T1946] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.10713: lblock 3 mapped to illegal pblock 3 (length 1)
[  638.483953][ T1983] siw: device registration error -23
[  638.579577][T19815] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  638.591957][T19815] EXT4-fs (loop6): This should not happen!! Data will be lost
[  638.591957][T19815] 
[  638.662433][ T1994] siw: device registration error -23
[  638.674405][ T1992] pim6reg: entered allmulticast mode
[  638.718515][ T2011] FAT-fs (loop6): Directory bread(block 32) failed
[  638.725281][ T2011] FAT-fs (loop6): Directory bread(block 33) failed
[  638.731970][ T2011] FAT-fs (loop6): Directory bread(block 34) failed
[  638.738616][ T2011] FAT-fs (loop6): Directory bread(block 35) failed
[  638.745308][ T2011] FAT-fs (loop6): Directory bread(block 36) failed
[  638.751973][ T2011] FAT-fs (loop6): Directory bread(block 37) failed
[  638.758627][ T2011] FAT-fs (loop6): Directory bread(block 38) failed
[  638.765325][ T2011] FAT-fs (loop6): Directory bread(block 39) failed
[  638.772138][ T2011] FAT-fs (loop6): Directory bread(block 40) failed
[  638.779513][ T2011] FAT-fs (loop6): Directory bread(block 41) failed
[  638.813006][ T1989] pim6reg: left allmulticast mode
[  638.892403][ T2016] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[  638.900680][ T2016] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[  638.910004][ T2015] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  638.921491][ T2015] EXT4-fs (loop4): 1 truncate cleaned up
[  639.003010][ T2021] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  639.012764][ T2021] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  639.021520][ T2021] Symlink component flag not implemented
[  639.027368][ T2021] Symlink component flag not implemented
[  639.033121][ T2021] Symlink component flag not implemented (7)
[  639.039220][ T2021] Symlink component flag not implemented (116)
[  639.046804][ T2021] __nla_validate_parse: 15 callbacks suppressed
[  639.046818][ T2021] netlink: 8 bytes leftover after parsing attributes in process `'.
[  639.061830][ T2021] netlink: 8 bytes leftover after parsing attributes in process `'.
[  639.070376][ T2021] netlink: 8 bytes leftover after parsing attributes in process `'.
[  639.078897][ T2021] netlink: 8 bytes leftover after parsing attributes in process `'.
[  639.104544][ T2026] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  639.113257][ T2026] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  639.121814][ T2026] Symlink component flag not implemented
[  639.127516][ T2026] Symlink component flag not implemented
[  639.133270][ T2026] Symlink component flag not implemented (7)
[  639.139325][ T2026] Symlink component flag not implemented (116)
[  639.146673][ T2026] netlink: 8 bytes leftover after parsing attributes in process `'.
[  639.155078][ T2026] netlink: 8 bytes leftover after parsing attributes in process `'.
[  639.163406][ T2026] netlink: 8 bytes leftover after parsing attributes in process `'.
[  639.171718][ T2026] netlink: 8 bytes leftover after parsing attributes in process `'.
[  639.181315][ T2026] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  639.235648][ T2032] netlink: 'syz.0.10743': attribute type 1 has an invalid length.
[  639.243488][ T2032] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10743'.
[  639.308612][ T2034] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  639.308612][ T2034]    program syz.0.10744 not setting count and/or reply_len properly
[  639.481300][ T2055] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  639.490241][ T2055] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  639.498879][ T2055] Symlink component flag not implemented
[  639.504677][ T2055] Symlink component flag not implemented
[  639.510322][ T2055] Symlink component flag not implemented (7)
[  639.516385][ T2055] Symlink component flag not implemented (116)
[  639.523754][ T2055] netlink: 8 bytes leftover after parsing attributes in process `'.
[  639.552208][ T2058] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  639.560921][ T2058] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  639.569377][ T2058] Symlink component flag not implemented
[  639.575145][ T2058] Symlink component flag not implemented
[  639.581335][ T2058] Symlink component flag not implemented (7)
[  639.587430][ T2058] Symlink component flag not implemented (116)
[  639.597388][ T2058] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  639.645362][ T2064] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  639.645362][ T2064]    program syz.5.10754 not setting count and/or reply_len properly
[  639.677351][ T2066] netlink: 'syz.6.10755': attribute type 1 has an invalid length.
[  639.790733][ T2088] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  639.791856][ T2086] FAT-fs (loop4): Directory bread(block 32) failed
[  639.800087][ T2088] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  639.805667][ T2086] FAT-fs (loop4): Directory bread(block 33) failed
[  639.816268][ T2088] Symlink component flag not implemented
[  639.820843][ T2086] FAT-fs (loop4): Directory bread(block 34) failed
[  639.826129][ T2088] Symlink component flag not implemented
[  639.826787][ T2088] Symlink component flag not implemented (7)
[  639.836047][ T2086] FAT-fs (loop4): Directory bread(block 35) failed
[  639.838527][ T2088] Symlink component flag not implemented (116)
[  639.847410][ T2086] FAT-fs (loop4): Directory bread(block 36) failed
[  639.862700][ T2082] siw: device registration error -23
[  639.868066][ T2086] FAT-fs (loop4): Directory bread(block 37) failed
[  639.875792][ T2086] FAT-fs (loop4): Directory bread(block 38) failed
[  639.877163][ T2088] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  639.882548][ T2086] FAT-fs (loop4): Directory bread(block 39) failed
[  639.897178][ T2086] FAT-fs (loop4): Directory bread(block 40) failed
[  639.903779][ T2086] FAT-fs (loop4): Directory bread(block 41) failed
[  639.964962][ T2099] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  639.964962][ T2099]    program syz.7.10767 not setting count and/or reply_len properly
[  640.007154][ T2102] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22
[  640.015498][ T2102] netdevsim netdevsim6: Direct firmware load for . failed with error -22
[  640.065984][ T2106] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  640.077665][ T2106] EXT4-fs (loop7): 1 truncate cleaned up
[  640.196950][ T2114] netlink: 'syz.0.10771': attribute type 1 has an invalid length.
[  640.338661][ T2123] set_capacity_and_notify: 14 callbacks suppressed
[  640.338743][ T2123] loop0: detected capacity change from 0 to 164
[  640.352625][ T2123] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  640.361142][ T2123] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  640.369579][ T2123] Symlink component flag not implemented
[  640.375340][ T2123] Symlink component flag not implemented
[  640.381149][ T2123] Symlink component flag not implemented (7)
[  640.387245][ T2123] Symlink component flag not implemented (116)
[  640.396938][ T2123] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  640.884767][ T2149] netlink: 'syz.6.10783': attribute type 1 has an invalid length.
[  640.948442][ T2153] loop7: detected capacity change from 0 to 164
[  640.974590][ T2153] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  640.985562][ T2153] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  641.004839][ T2153] Symlink component flag not implemented
[  641.010701][ T2153] Symlink component flag not implemented
[  641.016735][ T2153] Symlink component flag not implemented (7)
[  641.022725][ T2153] Symlink component flag not implemented (116)
[  641.032492][ T2153] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  641.125146][ T2165] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  641.125146][ T2165]    program syz.5.10789 not setting count and/or reply_len properly
[  641.142710][ T2158] siw: device registration error -23
[  641.149302][   T29] kauditd_printk_skb: 287 callbacks suppressed
[  641.149314][   T29] audit: type=1326 audit(897.043:74410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2164 comm="syz.5.10789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe4c4f749 code=0x7ffc0000
[  641.178633][   T29] audit: type=1326 audit(897.043:74411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2164 comm="syz.5.10789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfe4c4f749 code=0x7ffc0000
[  641.252363][   T29] audit: type=1326 audit(897.043:74412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2164 comm="syz.5.10789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe4c4f749 code=0x7ffc0000
[  641.275562][   T29] audit: type=1326 audit(897.043:74413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2164 comm="syz.5.10789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbfe4c4f749 code=0x7ffc0000
[  641.298551][   T29] audit: type=1326 audit(897.043:74414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2164 comm="syz.5.10789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe4c4f749 code=0x7ffc0000
[  641.321533][   T29] audit: type=1326 audit(897.043:74415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2164 comm="syz.5.10789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbfe4c4f749 code=0x7ffc0000
[  641.344492][   T29] audit: type=1326 audit(897.043:74416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2164 comm="syz.5.10789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe4c4f749 code=0x7ffc0000
[  641.367499][   T29] audit: type=1326 audit(897.043:74417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2164 comm="syz.5.10789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbfe4c4f749 code=0x7ffc0000
[  641.390423][   T29] audit: type=1326 audit(897.043:74418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2164 comm="syz.5.10789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe4c4f749 code=0x7ffc0000
[  641.413382][   T29] audit: type=1326 audit(897.043:74419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2164 comm="syz.5.10789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fbfe4c4f749 code=0x7ffc0000
[  641.474396][ T2184] loop4: detected capacity change from 0 to 128
[  641.488017][ T2184] FAT-fs (loop4): Directory bread(block 32) failed
[  641.495116][ T2184] FAT-fs (loop4): Directory bread(block 33) failed
[  641.501731][ T2184] FAT-fs (loop4): Directory bread(block 34) failed
[  641.508736][ T2184] FAT-fs (loop4): Directory bread(block 35) failed
[  641.524846][ T2184] FAT-fs (loop4): Directory bread(block 36) failed
[  641.531402][ T2184] FAT-fs (loop4): Directory bread(block 37) failed
[  641.537993][ T2184] FAT-fs (loop4): Directory bread(block 38) failed
[  641.544575][ T2184] FAT-fs (loop4): Directory bread(block 39) failed
[  641.551722][ T2186] loop6: detected capacity change from 0 to 128
[  641.563264][ T2186] FAT-fs (loop6): Directory bread(block 32) failed
[  641.570006][ T2186] FAT-fs (loop6): Directory bread(block 33) failed
[  641.577017][ T2186] FAT-fs (loop6): Directory bread(block 34) failed
[  641.583704][ T2186] FAT-fs (loop6): Directory bread(block 35) failed
[  641.590327][ T2186] FAT-fs (loop6): Directory bread(block 36) failed
[  641.595207][ T2184] FAT-fs (loop4): Directory bread(block 40) failed
[  641.597312][ T2186] FAT-fs (loop6): Directory bread(block 37) failed
[  641.603347][ T2184] FAT-fs (loop4): Directory bread(block 41) failed
[  641.618333][ T2186] FAT-fs (loop6): Directory bread(block 38) failed
[  641.624920][ T2186] FAT-fs (loop6): Directory bread(block 39) failed
[  641.631603][ T2186] FAT-fs (loop6): Directory bread(block 40) failed
[  641.638192][ T2186] FAT-fs (loop6): Directory bread(block 41) failed
[  641.680564][ T2190] netlink: 'syz.7.10797': attribute type 1 has an invalid length.
[  641.777051][ T2196] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  641.777051][ T2196]    program syz.7.10799 not setting count and/or reply_len properly
[  641.901318][ T2200] siw: device registration error -23
[  642.171131][ T2231] loop5: detected capacity change from 0 to 164
[  642.179401][ T2231] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  642.197824][ T2231] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  642.219180][ T2233] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[  642.219180][ T2233]    program syz.7.10813 not setting count and/or reply_len properly
[  642.378596][ T2240] siw: device registration error -23
[  642.523091][ T2256] ==================================================================
[  642.531218][ T2256] BUG: KCSAN: data-race in dequeue_signal / ptrace_check_attach
[  642.538901][ T2256] 
[  642.541235][ T2256] read-write to 0xffff888181510538 of 8 bytes by task 2253 on cpu 1:
[  642.549311][ T2256]  dequeue_signal+0x309/0x3b0
[  642.554019][ T2256]  get_signal+0x376/0xf70
[  642.558372][ T2256]  arch_do_signal_or_restart+0x96/0x450
[  642.563954][ T2256]  exit_to_user_mode_loop+0x6a/0x740
[  642.569256][ T2256]  do_syscall_64+0x1e1/0x2b0
[  642.573876][ T2256]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.579795][ T2256] 
[  642.582142][ T2256] read to 0xffff888181510538 of 8 bytes by task 2256 on cpu 0:
[  642.589736][ T2256]  ptrace_check_attach+0xaa/0x290
[  642.594774][ T2256]  __se_sys_ptrace+0xd3/0x2c0
[  642.599496][ T2256]  __x64_sys_ptrace+0x55/0x70
[  642.604209][ T2256]  x64_sys_call+0x2ee5/0x3000
[  642.608897][ T2256]  do_syscall_64+0xca/0x2b0
[  642.613423][ T2256]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.619332][ T2256] 
[  642.621661][ T2256] value changed: 0x0000000000000000 -> 0x0000000008010000
[  642.628784][ T2256] 
[  642.631132][ T2256] Reported by Kernel Concurrency Sanitizer on:
[  642.637298][ T2256] CPU: 0 UID: 0 PID: 2256 Comm: syz.6.10821 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  642.648684][ T2256] Tainted: [W]=WARN
[  642.652502][ T2256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  642.662570][ T2256] ==================================================================