last executing test programs:

7.958738882s ago: executing program 4 (id=1207):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

7.933559654s ago: executing program 4 (id=1208):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000180))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x58}}, 0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x91ff, 0x0, 0x6, 0x1ff, 0x3, 0x200, 0x0, 0x0, 0x0, 0x100000004}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00')
r3 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c})

7.902099907s ago: executing program 4 (id=1209):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)

7.86892575s ago: executing program 4 (id=1212):
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)="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", 0x159}], 0x1, 0x0, 0x0, 0x20800}, 0x20040000)
syz_clone(0x20111, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000695"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd6f}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r0}, 0x18)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r1, 0x20, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000002780)=""/55, 0x37}}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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")
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)="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", 0x159}], 0x1, 0x0, 0x0, 0x20800}, 0x20040000) (async)
syz_clone(0x20111, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000695"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd6f}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r0}, 0x18) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r1, 0x20, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000002780)=""/55, 0x37}}, 0x10) (async)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) (async)

7.734269791s ago: executing program 4 (id=1213):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100187bf4ee737300e4ff37ebede3ae42449c2ca4ffff000010000000100000000900000067b1fc2e49a379150de585cb5146116498e9c7948c5f1f9c1400000000dd"], &(0x7f00000002c0)=""/208, 0x31, 0xd0, 0x0, 0xacd, 0x10000}, 0x28)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10}, 0x18)
openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x210000, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
close_range(r2, 0xffffffffffffffff, 0x0)

7.577474844s ago: executing program 4 (id=1217):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x8000}, 0x0, 0x10000, 0xc9, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
socket$key(0xf, 0x3, 0x2)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x800000000000000}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r2], 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) (fail_nth: 1)

7.577221694s ago: executing program 32 (id=1217):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x8000}, 0x0, 0x10000, 0xc9, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
socket$key(0xf, 0x3, 0x2)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x800000000000000}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r2], 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) (fail_nth: 1)

4.016895173s ago: executing program 0 (id=1251):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000004000000e27f"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x55})
io_uring_enter(r1, 0x47f6, 0x1, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIoVdOJlL19YfE7yYl6LDgd7PkmRlNFlGk461Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoingTOelJl7VJm3XZmpnPB077vuec9D1Pznnevm9OQgIYWhPpj1zECxHxZRJxqG3baGQbJ1b3W3lwrZAuSTQaH/2RRJKta+2fZL/3Z5X/R8Qvn0ecyG1st7a0PD9bLpcWsvpkvXJ5sra0fPJiZXauNFe6ND0zc/qNmem333qzb7G+eu6vbz68897pL46tfP3TvcO3kjgTB7Jt7XE8gevtlYmYyJ6TsTizbsepPjQ2SJKdPgC2ZSTL87FI+4BDMZJlPfDf91lENIAhlch/GFKtcUBrbt+nefBz4/67qxOgjfGPrr42Enuac6N9K8kjM6N0vjveh/bTNn7+/fatdIn+vQ4BsKXrNyLi1Ojoxv4vyfq/7TvVwz7r29D/wbNzJx3/vNZp/JNbG/9Eh/HP/g65ux1b53/uXh+a6Sod/73Tcfy7dtNqfCSrHWyO+caSCxfLpbRv+19EHI+x3Wl9s/s5p1fuNrptax//pUvafmssmB3HvdHdjz6mOFuffZKY292/EfFix/Fvsnb+kw7nP30+zvXYxtHS7Ze7bds6/qer8X3EKx3P/8M7Wsnm9ycnm9fDZOuq2OjPm0d/7db+Tsefnv99q/H/nU0J18c/nrTfr609fhvf7fmn1G3bdq//XcnHzfKubN3V2Xp9YSpiV/LBxvXTDx/bqrf2T+M/fmzz/q/T9b83Ij7pMf6bR358afvxP11p/MXNr/915//xC3ff//Tbbu33dv5fb5aOZ2t66f96PcAnee4AAAAAAABg0OQi4kAkufxaOZfL51ff33Ek9uXK1Vr9xIXq4qViND8rOx5judad7kNt74eYyt4P26pPr6vPRMThiPhqZG+zni9Uy8WdDh4AAAAAAAAAAAAAAAAAAAAGxP4un/9P/Tay00cHPHW+8huG15b5349vegIGkv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX507ezZdGisPrhXSevHK0uJ89crJYqk2n68sFvKF6sLl/Fy1Olcu5QvVylZ/r1ytXp6ajsWrk/VSrT5ZW1o+X6kuXqqfv1j54WBEaeyZRAUAAAAAAAAAAAAAAAAAAADPl9rS8vxsuVxaUGgWdsdAHMZzVBgdjMNQ6HNhp3smAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjo3wAAAP//waw5Ug==")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
socket$inet(0x2, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10)
fallocate(r4, 0x0, 0xeffb, 0x9)

3.124494256s ago: executing program 0 (id=1265):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

3.079403179s ago: executing program 0 (id=1266):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

3.047645342s ago: executing program 0 (id=1267):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061116d000000000085000000a900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x104, 0x3})
r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9bX\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
fcntl$addseals(r2, 0x409, 0x7)
fallocate(r2, 0x0, 0x0, 0x509a)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x5, 0x2, 0xf, 0xfe74, 0x8, "2c277bd72c6157ca4381fbdd4a7c9d6a6f0da7", 0xffffffff, 0x91})
getrandom(0xfffffffffffffffe, 0x0, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r3}, 0x38)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4, 0x0, 0x6}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02fcffff0100000000000000000000000ead0898c389a66abf65df6d1ce83f144c0fd480a5c319cfea90eaa0d589f07e793590173ee7b83936bb084d8672754320abf1e6e9b31c120ee0233acc796d47a9fbf025f511fdd0e0def3eda9fa53dc1aeb9c49cac47bdb04d79c48e668dd226df162a75122014eb6df3516eea77c"], 0x10}}, 0x0)
close(r6)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r7 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
semop(0x0, &(0x7f00000001c0)=[{0x1, 0xec7b, 0x1000}, {0x2, 0x4, 0x800}], 0x2)
semop(0x0, &(0x7f0000000140)=[{0x0, 0xffff}], 0x1)
semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x5, 0x800}, {0x0, 0x9, 0x1000}, {0x4, 0xc}, {0x0, 0xffff, 0x800}, {0x3, 0xe, 0x1800}], 0x5, &(0x7f0000000040)={0x77359400})
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810)

2.593835469s ago: executing program 3 (id=1271):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='bcache_alloc_fail\x00', 0xffffffffffffffff, 0x0, 0x1c}, 0x18)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x800000000006}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x3b, 0x6, 0x2, 0x401}, {0x1000, 0x95, 0x0, 0xd589}]})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[], 0xfe44, 0x2)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x1}}], 0x10)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)

2.365364448s ago: executing program 5 (id=1273):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0xd}, 0x0, 0x10000, 0xfffffffe, 0x2, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2)

2.317226422s ago: executing program 5 (id=1274):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r0, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f00000007c0)={0x10, 0x1f, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001100010027bd7000fddbdf2500000000", @ANYRES32=r4], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8090)

1.913618854s ago: executing program 2 (id=1277):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fcntl$lock(r0, 0x7, 0x0)
ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f00000004c0)=0xab3)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400010077672b2364c26b390270bf5fc37d66b4f1"], 0xa8}}, 0x0) (fail_nth: 4)

1.912901075s ago: executing program 3 (id=1278):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000072"], 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'veth1_macvtap\x00', @random="e1e6fca03d01"})
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x103500, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'})

1.565073293s ago: executing program 5 (id=1280):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
statx(0xffffffffffffffff, 0x0, 0x6000, 0x5a6f5da4ed3dbaa5, 0x0)

1.517708757s ago: executing program 3 (id=1281):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000140)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r2, &(0x7f0000001000)=[{&(0x7f00000001c0)=""/20, 0x14}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10)

1.517311277s ago: executing program 2 (id=1282):
r0 = socket$netlink(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = creat(&(0x7f0000001740)='./bus\x00', 0xa1)
fcntl$getflags(r1, 0x40a)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0xffffffffffffffff}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]})
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000180)={0x4, &(0x7f0000000080)=[{0x2, 0x5, 0x3, 0x9}, {0x8000, 0xc, 0x31, 0x3aa}, {0x3, 0x4e, 0x9, 0x2}, {0x0, 0x6, 0x3, 0xfffffffe}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
lchown(&(0x7f0000000600)='./file0\x00', 0xee00, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20)
fsopen(&(0x7f0000000400)='minix\x00', 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
socket(0x26, 0x800, 0x200)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f00000003c0)}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r9)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)={0x14, r10, 0x309, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r8}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0x9, 0xa, 0x8f, 0xe1}, {0x1, 0x2, 0x2, 0x76d}]}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0xffff, 0xc6, 0x7, 0x6}, {0x8000, 0x2, 0x1, 0x7}, {0x2005, 0xf, 0x3, 0x2}]})

1.513061157s ago: executing program 1 (id=1283):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4004050)

1.318176343s ago: executing program 1 (id=1284):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='bcache_alloc_fail\x00', r1, 0x0, 0x1c}, 0x18)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x1)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x800000000006}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x3b, 0x6, 0x2, 0x401}, {0x1000, 0x95, 0x0, 0xd589}]})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[], 0xfe44, 0x2)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==")
r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4)
setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x1}}], 0x10)
pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)

1.246143249s ago: executing program 5 (id=1285):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e)
syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r2, &(0x7f0000004100)=[{{&(0x7f00000002c0), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

1.23228464s ago: executing program 2 (id=1286):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e)
syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10)
r5 = socket(0x1e, 0x4, 0x0)
recvmmsg$unix(r5, &(0x7f0000004100)=[{{&(0x7f00000002c0), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

1.065814714s ago: executing program 5 (id=1287):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x0)

1.023843817s ago: executing program 1 (id=1288):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x4001, 0x2b7}, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'tunl0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffc, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0xd, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81, 0x2000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0)
close(r2)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r8}, 0x10)
syz_mount_image$iso9660(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x0, &(0x7f0000001100), 0x1, 0x1045, &(0x7f0000001140)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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")
r9 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r11}, 0x18)
sendto$inet6(r9, &(0x7f0000000180)="7800000018002507b9409b14ffff00000204be04020506050e0204095c0008000400000046000045653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004b32000400170005000a00000000e5c2cc7f18ff2439d1ddf66ed538f252325bd059c52cd85ab6d3", 0x78, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000019c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181242, 0xd5c7b21faa1a110b)
lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000000), &(0x7f00000002c0)=@v2={0x2000000, [{0x3, 0xd62e}, {0x5, 0x1}]}, 0x14, 0x1)

1.010983538s ago: executing program 5 (id=1289):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061116d000000000085000000a900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x104, 0x3})
r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9bX\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
fcntl$addseals(r2, 0x409, 0x7)
fallocate(r2, 0x0, 0x0, 0x509a)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x5, 0x2, 0xf, 0xfe74, 0x8, "2c277bd72c6157ca4381fbdd4a7c9d6a6f0da7", 0xffffffff, 0x91})
getrandom(0xfffffffffffffffe, 0x0, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r3}, 0x38)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4, 0x0, 0x6}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02fcffff0100000000000000000000000ead0898c389a66abf65df6d1ce83f144c0fd480a5c319cfea90eaa0d589f07e793590173ee7b83936bb084d8672754320abf1e6e9b31c120ee0233acc796d47a9fbf025f511fdd0e0def3eda9fa53dc1aeb9c49cac47bdb04d79c48e668dd226df162a75122014eb6df3516eea77c"], 0x10}}, 0x0)
close(r6)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r7 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
semop(0x0, &(0x7f00000001c0)=[{0x1, 0xec7b, 0x1000}, {0x2, 0x4, 0x800}], 0x2)
semop(0x0, &(0x7f0000000140)=[{0x0, 0xffff}], 0x1)
semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x5, 0x800}, {0x0, 0x9, 0x1000}, {0x4, 0xc}, {0x0, 0xffff, 0x800}, {0x3, 0xe, 0x1800}], 0x5, &(0x7f0000000040)={0x77359400})
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810)

1.005784838s ago: executing program 0 (id=1290):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r2 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040)
prctl$PR_SET_NAME(0xf, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101e0ca, &(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0], 0x0, 0x2c0, &(0x7f0000000d80)="$eJzs3U9rK1UUAPAz+TOJukgWrkRwQBeuHu+9rZsUeQ/ErnxkoS60+FqQJggtFKri2JVbNy78DILgB3HjNxDcCu6sUBiZyaRJ2pg2palof79Fe3vnnLlnboZ2WujJx6+O959nsXfy5a/R7SbRGMQgTpPoRyOmvo4Fg28DAPgvOy2K+KOYWCcviYju5soCADboej//W7PhT3dSFgCwQc/e/+Ddre3tJ+9lWTeejr85Gpa/2ZefJ8e39uLTGMVuPIxenEVUDwrtqJ4WyuHToijyVlbqxxvj/GhYZo4/+rk+/9bv9R8LSv3q4/nTRpX/zvaTR9nEXH5e1vFivf6gXP9x9OLl8+SF/MdL8mOYxpuvz9X/IHrxyyfxWYzieVXELP+rR1n2dvHdn198WJZX5if50bBTxc0UzTt8WQAAAAAAAAAAAAAAAAAAAAAA+J97UPfO6UTVv6ecqvvvNM/KL9qRTfUX+/NM8qetfRb6AxVFkVftcib9dR5mWVbUgbP8VrzSmm8sCAAAAAAAAAAAAAAAAAAAAPfX4fHn+zuj0e7BrQym3QBaEfHXs4ibnmcwN/NarA7u1GvujEaNergY05qfieY0JolYWUZ5Ebe0LVcNXrhUcz344cd1T9i9Oqa9fK3D4+ZNX6/84sz07trfSZbvYSemM9160e/TiFlMGtdcPf2nQ0Wsc/ulSw/11t6N9KVqkK+IiWRVYW/9Ntm5eia5eBVptatL09v1YC79wr1xrfs5upP0y98rEt06AAAAAAAAAAAAAAAAAABgo2b//bvk4MnK1EbR2VhZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCnZu//v8Ygj4h2fYIrgtM4OPyXLxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB74O8AAAD//0aWVl0=")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x10}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r3}, 0x38)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu<00\t&&')
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523a", 0x39}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737491a1c6bd2a64b2a85cbaaf648c9100000000000000006a8f", 0x7d}, {&(0x7f0000000640)="2a03a0cba4b85fbbdf75673f3ded77ee28c50735968e37f3e3786478a31197705a76751c11d25805e6658f", 0x2b}], 0x2}}], 0x2, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_tables_targets\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$msr(r6, &(0x7f0000000d40)=""/43, 0x2b)
prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='/dev/ttyS3\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0}, 0x94)
syz_io_uring_setup(0x49a, &(0x7f00000005c0)={0x0, 0x79af, 0x4000, 0x8000, 0x4400252}, &(0x7f0000000340), &(0x7f0000000300))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x21, 0x2, 0x2)
sendfile(r0, r1, 0x0, 0x20000023896)

656.963047ms ago: executing program 3 (id=1291):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0xd}, 0x0, 0x10000, 0xfffffffe, 0x2, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
open(&(0x7f0000000180)='./file0\x00', 0x40c5, 0x24)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=f'])
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000700), 0xfd, 0x585, &(0x7f0000002480)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

475.060622ms ago: executing program 3 (id=1292):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=<r0=>0x0)
ptrace$setregs(0xf, 0x0, 0x6, &(0x7f0000001cc0)="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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x7, @local, 0x3ff}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_setup(0xc, &(0x7f0000000080)=<r6=>0x0)
r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r8, 0x0, 0x10000000000ac6}, 0x18)
r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
sendfile(r9, 0xffffffffffffffff, 0x0, 0x7ffff000)
r10 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000880)='devices.allow\x00', 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a80)='net/xfrm_stat\x00') (async)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a80)='net/xfrm_stat\x00')
io_submit(r6, 0x6, &(0x7f0000000b00)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x3, r5, &(0x7f0000000500)="c1aae2380f02c8abfcedd0a8f2dc41d376d060e431002aa1322afea6b58d6fdae3cea9200d4e6d15b0f6784da9c3be89d579c2e9702fcb265142fadf5477e4b2008a2ef0e7d228fd0a34e613c9adad1a095d1990e5be786754beac3e5a4e0b7e3521fa5e6b7963ae753d3b5eca1802872bffd9d5b573a91c5b4ca4db24070aed333e090ee643b7b6dcdc3694b5110ce062416bf699f1910d725d9d7dacd6efa49544b124ef7a1eda1584969b4c475e0d2e445ce12b573080d7aac136fc5b521345e5843c3ef0f24729555c33f8fd946090", 0xd1, 0x8, 0x0, 0x3, r7}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x8, r2, &(0x7f0000000600)="2b825011022ece413cd8836a129da39dc1ee8fd4e1", 0x15, 0xfffffffffffffff9, 0x0, 0x1, r1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x8, r5, &(0x7f0000000680)="23e160812999b190b3da2695418adcc3b930c94db6e1bd9a70554c3d6ea49e6181ccba3970241b89310e44c7be22720606a7cd73a83e48586db71b5f44f52ff176b4faab5d8f1dfe951568b77fd464f768c2dd11b05647de61c60680cb1e69302a115c84b34a1dd056ddcb761f9510c6e6af127800ce430ee349ee81cc0658970225438fd1a459e0e053c2444ff8a88546d285b1", 0x94, 0xf}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x7, 0x5d, r8, &(0x7f0000000780)="a8ad5406f75139be40ed8266fb681262caf2e1bd859986c84ddd2be4829793df787c892a85c44e66698db649b992db872055ae0ff3af8e31e39c6c33fa84f1012a54f3295ca1caf4be22c941cc8e7fc3ae29f5974786b4250d394367a89219e9a7fb52625c9704069a4972196e42ad25b6e17280e1adc0b5f08152fdfe4f96f94f56cd", 0x83, 0x9, 0x0, 0x2, r9}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x9, 0x7f, r10, &(0x7f00000008c0)="0c75f9bf4e6b8bf3dd355584cce446479b5095c91c14102d965686ddb1d6edaf22ce894692d6ffa5a77f19abcf4ac5776dfe1c8bfface965a0b7", 0x3a, 0x6, 0x0, 0x1}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x8, 0x7, r3, &(0x7f0000000a00)="e26f943cf5ce592376d959833c7b87d132da139e5a527f94674d7a176ec44f4ccc719bb8628336905ebf0b9148f715083418fa2ba1572b0ece216661a177b0f4da7daa94d1d0239dbe734a1613825c6f7ed896a26bc9073d891ef56f", 0x5c, 0x8, 0x0, 0x1, r11}])
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000bd5097ce5fff58bb00040010006122c7621dd522edfeeea5c9babeae4a98eb4a53cdfcef6049f1732db6a8723ff174d85a823b50fcab3c160c8ad02115f82b698affa62a203e15d40790990000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async)
sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000bd5097ce5fff58bb00040010006122c7621dd522edfeeea5c9babeae4a98eb4a53cdfcef6049f1732db6a8723ff174d85a823b50fcab3c160c8ad02115f82b698affa62a203e15d40790990000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r14 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r15}, 0x10)
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) (async)
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000)

270.346378ms ago: executing program 2 (id=1293):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b0000000500000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)

270.039418ms ago: executing program 3 (id=1294):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x240800, 0x0)
ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00000002c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18)
r4 = inotify_init()
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
inotify_add_watch(r4, &(0x7f0000000200)='./file0\x00', 0x400008bf)
utimes(&(0x7f0000000080)='./file0\x00', 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a54000000060a0b160000000000000000020000082800048024000180090001007866726d00000000140002800800024000000003050003000000000009008e0000007a3000000000090028000000000000000000140000001100010000000000000000000000000a3fa3b2e5feba"], 0x7c}, 0x1, 0x0, 0x0, 0x850}, 0x0)
setpgid(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005003200000002"], 0x70}, 0x1, 0x7}, 0x0)

230.855652ms ago: executing program 2 (id=1295):
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008850)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x4}, 0x2012, 0x0, 0x2, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
bind$unix(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
io_setup(0x5, &(0x7f0000000140)=<r1=>0x0)
close(0x3) (async)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async)
r3 = eventfd2(0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) (async, rerun: 32)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0}) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) (async)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)

115.454521ms ago: executing program 1 (id=1296):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x1000000, 0x24, &(0x7f0000000280)={@multicast2}, &(0x7f0000000300)=0xc)

58.169936ms ago: executing program 2 (id=1297):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]})
r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000580)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8)
ppoll(&(0x7f0000000800), 0x0, &(0x7f0000000840)={0x77359400}, &(0x7f0000000880)={[0x8001]}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x8000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
timer_create(0x2, &(0x7f000049efa0)={0x0, 0x0, 0x1}, &(0x7f0000044000))
timer_settime(0x0, 0x1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x9)

52.815536ms ago: executing program 1 (id=1298):
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
brk(0x7)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0)

22.146868ms ago: executing program 0 (id=1299):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='bcache_alloc_fail\x00', r1, 0x0, 0x1c}, 0x18)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x1)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x800000000006}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x3b, 0x6, 0x2, 0x401}, {0x1000, 0x95, 0x0, 0xd589}]})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[], 0xfe44, 0x2)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4)
setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x1}}], 0x10)
pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)

0s ago: executing program 1 (id=1300):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e)
syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r2, &(0x7f0000004100)=[{{&(0x7f00000002c0), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

kernel console output (not intermixed with test programs):

2972][ T5980] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.822: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  100.727925][ T5980] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.822: Bad quota inode: 3, type: 0
[  100.752172][ T5980] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  100.775599][ T5980] EXT4-fs (loop4): mount failed
[  100.798896][ T5980] loop4: detected capacity change from 0 to 512
[  100.845124][ T5980] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.822: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  100.886867][ T5980] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.822: Bad quota inode: 3, type: 0
[  100.905107][ T5980] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  100.935432][ T5980] EXT4-fs (loop4): mount failed
[  101.075218][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  101.092140][ T6009] loop4: detected capacity change from 0 to 512
[  101.100533][ T6009] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  101.113944][ T6009] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  101.119267][ T6015] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  101.134812][ T6009] EXT4-fs (loop4): 1 truncate cleaned up
[  101.140889][ T6009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.179180][ T6009] pim6reg1: entered promiscuous mode
[  101.184623][ T6009] pim6reg1: entered allmulticast mode
[  101.299615][ T6020] loop2: detected capacity change from 0 to 1756
[  101.317110][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.391056][ T6023] loop4: detected capacity change from 0 to 512
[  101.426050][ T6023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.441507][ T6024] __nla_validate_parse: 4 callbacks suppressed
[  101.441524][ T6024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.832'.
[  101.517485][ T6023] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  101.644966][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.763853][ T6033] loop4: detected capacity change from 0 to 2048
[  101.796841][ T6033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.837665][ T6039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.838'.
[  102.143818][ T6043] loop3: detected capacity change from 0 to 8192
[  102.166157][ T6043] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  102.204874][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.325503][ T6050] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  102.343931][ T6058] loop4: detected capacity change from 0 to 128
[  102.356991][ T6053] loop0: detected capacity change from 0 to 2048
[  102.479398][ T6061] netlink: 14 bytes leftover after parsing attributes in process `syz.3.840'.
[  102.569657][ T6060] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.585524][ T6055] FAT-fs (loop4): error, clusters badly computed (2 != 1)
[  102.592866][ T6055] FAT-fs (loop4): Filesystem has been set read-only
[  102.600005][ T6055] FAT-fs (loop4): error, clusters badly computed (3 != 2)
[  102.629502][ T6055] FAT-fs (loop4): error, clusters badly computed (4 != 3)
[  102.644249][ T6053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.658566][ T6055] FAT-fs (loop4): error, clusters badly computed (5 != 4)
[  102.666319][ T6055] FAT-fs (loop4): error, clusters badly computed (6 != 5)
[  102.678978][ T6060] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.753491][ T6060] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.809718][ T6060] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.927963][ T1836] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.958334][ T1836] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.005508][ T1836] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.046042][ T1836] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.230798][ T6085] netlink: 188 bytes leftover after parsing attributes in process `syz.3.852'.
[  103.230830][ T6081] loop2: detected capacity change from 0 to 1024
[  103.264589][ T6078] loop1: detected capacity change from 0 to 2048
[  103.293875][ T6086] loop3: detected capacity change from 0 to 128
[  103.305043][ T6078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.318061][ T6081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.336731][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.347979][ T6086] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  103.379993][ T6086] ext4 filesystem being mounted at /184/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  103.424853][ T6093] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.851'.
[  103.438636][ T6081] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.851'.
[  103.448738][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.851'.
[  103.532983][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.635864][ T6103] loop4: detected capacity change from 0 to 2048
[  103.650393][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.669826][ T6103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.692390][ T6107] loop2: detected capacity change from 0 to 512
[  103.699525][ T6107] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  103.709704][ T6107] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  103.734371][ T6108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.853'.
[  103.791833][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.857'.
[  103.910577][ T6115] loop1: detected capacity change from 0 to 2048
[  103.935622][ T6115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.987794][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.859'.
[  104.024286][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.121230][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.134934][   T29] kauditd_printk_skb: 248 callbacks suppressed
[  104.134950][   T29] audit: type=1326 audit(1754645695.793:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.4.861" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce0f43ebe9 code=0x0
[  104.166727][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  104.208837][   T29] audit: type=1326 audit(1754645695.863:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6126 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908db9ebe9 code=0x7ffc0000
[  104.232239][   T29] audit: type=1326 audit(1754645695.863:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6126 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908db9ebe9 code=0x7ffc0000
[  104.255634][   T29] audit: type=1326 audit(1754645695.863:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6126 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f908db9ebe9 code=0x7ffc0000
[  104.278975][   T29] audit: type=1326 audit(1754645695.863:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6126 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908db9ebe9 code=0x7ffc0000
[  104.302314][   T29] audit: type=1326 audit(1754645695.863:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6126 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908db9ebe9 code=0x7ffc0000
[  104.325680][   T29] audit: type=1326 audit(1754645695.863:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6126 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f908db9ebe9 code=0x7ffc0000
[  104.350051][   T29] audit: type=1326 audit(1754645695.873:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6126 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908db9ebe9 code=0x7ffc0000
[  104.373451][   T29] audit: type=1326 audit(1754645695.873:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6126 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f908db9ebe9 code=0x7ffc0000
[  104.396901][   T29] audit: type=1326 audit(1754645695.873:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6126 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908db9ebe9 code=0x7ffc0000
[  104.530202][ T6139] FAULT_INJECTION: forcing a failure.
[  104.530202][ T6139] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  104.543629][ T6139] CPU: 0 UID: 0 PID: 6139 Comm: syz.0.868 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  104.543688][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  104.543703][ T6139] Call Trace:
[  104.543710][ T6139]  <TASK>
[  104.543718][ T6139]  __dump_stack+0x1d/0x30
[  104.543744][ T6139]  dump_stack_lvl+0xe8/0x140
[  104.543824][ T6139]  dump_stack+0x15/0x1b
[  104.543840][ T6139]  should_fail_ex+0x265/0x280
[  104.543876][ T6139]  should_fail+0xb/0x20
[  104.543971][ T6139]  should_fail_usercopy+0x1a/0x20
[  104.543991][ T6139]  _copy_from_user+0x1c/0xb0
[  104.544017][ T6139]  ___sys_sendmsg+0xc1/0x1d0
[  104.544075][ T6139]  __x64_sys_sendmsg+0xd4/0x160
[  104.544115][ T6139]  x64_sys_call+0x191e/0x2ff0
[  104.544136][ T6139]  do_syscall_64+0xd2/0x200
[  104.544162][ T6139]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  104.544263][ T6139]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  104.544287][ T6139]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.544310][ T6139] RIP: 0033:0x7f146cc3ebe9
[  104.544325][ T6139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.544364][ T6139] RSP: 002b:00007f146b6a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  104.544383][ T6139] RAX: ffffffffffffffda RBX: 00007f146ce65fa0 RCX: 00007f146cc3ebe9
[  104.544397][ T6139] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000004
[  104.544416][ T6139] RBP: 00007f146b6a7090 R08: 0000000000000000 R09: 0000000000000000
[  104.544429][ T6139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  104.544441][ T6139] R13: 00007f146ce66038 R14: 00007f146ce65fa0 R15: 00007ffc48d16f88
[  104.544462][ T6139]  </TASK>
[  104.763573][ T6143] loop1: detected capacity change from 0 to 512
[  104.795465][ T6143] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  104.805443][ T6143] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  104.877119][ T6147] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  105.004276][ T6155] loop3: detected capacity change from 0 to 1756
[  105.082316][ T6158] team_slave_0: entered promiscuous mode
[  105.088015][ T6158] team_slave_1: entered promiscuous mode
[  105.132321][ T6158] macsec1: entered promiscuous mode
[  105.137594][ T6158] team0: entered promiscuous mode
[  105.142978][ T6158] macsec1: entered allmulticast mode
[  105.148264][ T6158] team0: entered allmulticast mode
[  105.153470][ T6158] team_slave_0: entered allmulticast mode
[  105.159192][ T6158] team_slave_1: entered allmulticast mode
[  105.236684][ T6158] team0: Device macsec1 is already an upper device of the team interface
[  105.246779][ T6158] team0: left allmulticast mode
[  105.251688][ T6158] team_slave_0: left allmulticast mode
[  105.257224][ T6158] team_slave_1: left allmulticast mode
[  105.262741][ T6158] team0: left promiscuous mode
[  105.267773][ T6158] team_slave_0: left promiscuous mode
[  105.273249][ T6158] team_slave_1: left promiscuous mode
[  105.364222][ T6164] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  105.426478][ T6168] loop4: detected capacity change from 0 to 512
[  105.433298][ T6168] EXT4-fs: Ignoring removed oldalloc option
[  105.442997][ T6168] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.876: Parent and EA inode have the same ino 15
[  105.456650][ T6171] loop1: detected capacity change from 0 to 1756
[  105.457933][ T6168] EXT4-fs (loop4): Remounting filesystem read-only
[  105.470043][ T6168] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -30)
[  105.479104][ T6168] EXT4-fs (loop4): 1 orphan inode deleted
[  105.485421][ T6168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.513867][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.675448][ T6183] loop0: detected capacity change from 0 to 2048
[  105.679835][ T6181] loop3: detected capacity change from 0 to 2048
[  105.737013][ T6183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.757213][ T6181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.884739][ T6191] loop2: detected capacity change from 0 to 512
[  105.896022][ T6191] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  105.912057][ T6191] EXT4-fs (loop2): orphan cleanup on readonly fs
[  105.919375][ T6191] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.882: bg 0: block 248: padding at end of block bitmap is not set
[  105.936613][ T6191] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.882: Failed to acquire dquot type 1
[  105.949076][ T6191] EXT4-fs (loop2): 1 truncate cleaned up
[  105.957067][ T6191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  106.240615][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.309034][ T6194] loop1: detected capacity change from 0 to 512
[  106.348602][ T6194] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  106.358526][ T6194] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  106.820321][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.910172][ T6203] loop1: detected capacity change from 0 to 512
[  106.922008][ T6203] EXT4-fs: Invalid journal IO priority (must be 0-7)
[  107.007929][ T6207] __nla_validate_parse: 2 callbacks suppressed
[  107.007949][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.884'.
[  107.039791][ T6207] team_slave_0: entered promiscuous mode
[  107.045547][ T6207] team_slave_1: entered promiscuous mode
[  107.053479][ T6207] macsec1: entered promiscuous mode
[  107.058710][ T6207] team0: entered promiscuous mode
[  107.064281][ T6207] macsec1: entered allmulticast mode
[  107.069611][ T6207] team0: entered allmulticast mode
[  107.074906][ T6207] team_slave_0: entered allmulticast mode
[  107.080656][ T6207] team_slave_1: entered allmulticast mode
[  107.090833][ T6207] team0: Device macsec1 is already an upper device of the team interface
[  107.100074][ T6207] team0: left allmulticast mode
[  107.104979][ T6207] team_slave_0: left allmulticast mode
[  107.110480][ T6207] team_slave_1: left allmulticast mode
[  107.115992][ T6207] team0: left promiscuous mode
[  107.121044][ T6207] team_slave_0: left promiscuous mode
[  107.126469][ T6207] team_slave_1: left promiscuous mode
[  107.298526][ T6215] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  107.376560][ T6217] loop1: detected capacity change from 0 to 1756
[  107.784369][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.796642][ T6222] FAULT_INJECTION: forcing a failure.
[  107.796642][ T6222] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  107.809893][ T6222] CPU: 0 UID: 0 PID: 6222 Comm: syz.0.894 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  107.809923][ T6222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  107.810009][ T6222] Call Trace:
[  107.810016][ T6222]  <TASK>
[  107.810023][ T6222]  __dump_stack+0x1d/0x30
[  107.810043][ T6222]  dump_stack_lvl+0xe8/0x140
[  107.810062][ T6222]  dump_stack+0x15/0x1b
[  107.810084][ T6222]  should_fail_ex+0x265/0x280
[  107.810183][ T6222]  should_fail+0xb/0x20
[  107.810237][ T6222]  should_fail_usercopy+0x1a/0x20
[  107.810259][ T6222]  strncpy_from_user+0x25/0x230
[  107.810285][ T6222]  ? __kmalloc_cache_noprof+0x189/0x320
[  107.810374][ T6222]  __se_sys_memfd_create+0x1ff/0x590
[  107.810443][ T6222]  __x64_sys_memfd_create+0x31/0x40
[  107.810462][ T6222]  x64_sys_call+0x2abe/0x2ff0
[  107.810484][ T6222]  do_syscall_64+0xd2/0x200
[  107.810591][ T6222]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  107.810614][ T6222]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  107.810693][ T6222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.810777][ T6222] RIP: 0033:0x7f146cc3ebe9
[  107.810792][ T6222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  107.810815][ T6222] RSP: 002b:00007f146b6a6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  107.810836][ T6222] RAX: ffffffffffffffda RBX: 0000000000000b7e RCX: 00007f146cc3ebe9
[  107.810848][ T6222] RDX: 00007f146b6a6ef0 RSI: 0000000000000000 RDI: 00007f146ccc27e8
[  107.810863][ T6222] RBP: 0000200000000c40 R08: 00007f146b6a6bb7 R09: 00007f146b6a6e40
[  107.810879][ T6222] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000bc0
[  107.810895][ T6222] R13: 00007f146b6a6ef0 R14: 00007f146b6a6eb0 R15: 0000200000000c00
[  107.810918][ T6222]  </TASK>
[  108.043863][ T6230] loop0: detected capacity change from 0 to 256
[  108.110979][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.887'.
[  108.135483][ T6236] team_slave_0: entered promiscuous mode
[  108.141347][ T6236] team_slave_1: entered promiscuous mode
[  108.150497][ T6235] loop4: detected capacity change from 0 to 2048
[  108.157460][ T6236] macsec1: entered promiscuous mode
[  108.162902][ T6236] team0: entered promiscuous mode
[  108.168442][ T6236] macsec1: entered allmulticast mode
[  108.174050][ T6236] team0: entered allmulticast mode
[  108.179039][ T6235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.179386][ T6236] team_slave_0: entered allmulticast mode
[  108.197435][ T6236] team_slave_1: entered allmulticast mode
[  108.205543][ T6236] team0: Device macsec1 is already an upper device of the team interface
[  108.214523][ T6236] team0: left allmulticast mode
[  108.219650][ T6236] team_slave_0: left allmulticast mode
[  108.225346][ T6236] team_slave_1: left allmulticast mode
[  108.230953][ T6236] team0: left promiscuous mode
[  108.236642][ T6236] team_slave_0: left promiscuous mode
[  108.242273][ T6236] team_slave_1: left promiscuous mode
[  108.263666][ T6246] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  108.291666][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.343449][ T6250] loop1: detected capacity change from 0 to 1756
[  108.665322][ T6261] 9pnet: Could not find request transport: f
[  108.686070][ T6261] pim6reg: entered allmulticast mode
[  108.695527][ T6261] pim6reg: left allmulticast mode
[  108.749018][ T6261] loop3: detected capacity change from 0 to 1024
[  108.756698][ T6261] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  108.847093][ T6266] loop3: detected capacity change from 0 to 2048
[  108.874688][ T6266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.896639][ T6272] mmap: syz.2.911 (6272) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  109.045368][ T6275] netlink: 7 bytes leftover after parsing attributes in process `syz.0.913'.
[  109.086062][ T6275] netlink: 7 bytes leftover after parsing attributes in process `syz.0.913'.
[  109.147615][   T29] kauditd_printk_skb: 378 callbacks suppressed
[  109.147630][   T29] audit: type=1326 audit(1754645700.803:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac432ebe9 code=0x7ffc0000
[  109.177446][   T29] audit: type=1326 audit(1754645700.803:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac432ebe9 code=0x7ffc0000
[  109.201422][   T29] audit: type=1326 audit(1754645700.803:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ac432ebe9 code=0x7ffc0000
[  109.205177][ T6283] netlink: 'syz.0.915': attribute type 25 has an invalid length.
[  109.224820][   T29] audit: type=1326 audit(1754645700.803:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac432ebe9 code=0x7ffc0000
[  109.224861][   T29] audit: type=1326 audit(1754645700.803:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7ac432ebe9 code=0x7ffc0000
[  109.224957][   T29] audit: type=1326 audit(1754645700.803:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac432ebe9 code=0x7ffc0000
[  109.302771][   T29] audit: type=1326 audit(1754645700.803:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ac432ebe9 code=0x7ffc0000
[  109.328712][   T29] audit: type=1326 audit(1754645700.803:4959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac432ebe9 code=0x7ffc0000
[  109.352076][   T29] audit: type=1326 audit(1754645700.803:4960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f7ac432ebe9 code=0x7ffc0000
[  109.375613][   T29] audit: type=1326 audit(1754645700.803:4961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac432ebe9 code=0x7ffc0000
[  109.411665][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.477665][ T6298] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  109.493803][ T6294] 9pnet: Could not find request transport: f
[  109.515398][ T6294] pim6reg: entered allmulticast mode
[  109.523402][ T6294] pim6reg: left allmulticast mode
[  109.537414][ T6296] loop3: detected capacity change from 0 to 128
[  109.559127][ T6296] FAT-fs (loop3): error, clusters badly computed (2 != 1)
[  109.566370][ T6296] FAT-fs (loop3): Filesystem has been set read-only
[  109.573523][ T6296] FAT-fs (loop3): error, clusters badly computed (3 != 2)
[  109.580813][ T6296] FAT-fs (loop3): error, clusters badly computed (4 != 3)
[  109.588128][ T6296] FAT-fs (loop3): error, clusters badly computed (5 != 4)
[  109.595763][ T6296] FAT-fs (loop3): error, clusters badly computed (6 != 5)
[  109.607014][ T6308] loop0: detected capacity change from 0 to 1756
[  109.700112][ T6313] loop0: detected capacity change from 0 to 8192
[  109.713624][ T6313] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  109.851136][ T6322] loop2: detected capacity change from 0 to 512
[  109.873748][ T6322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.890262][ T6322] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  109.892031][ T6327] SELinux:  Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped).
[  109.947691][ T6328] netlink: 14 bytes leftover after parsing attributes in process `syz.0.927'.
[  110.008343][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.251805][ T6327] loop3: detected capacity change from 0 to 8192
[  110.340674][ T3381] IPVS: starting estimator thread 0...
[  110.351615][ T6327]  loop3: p1 p2 p3 p4
[  110.360001][ T6327] loop3: p3 start 331777 is beyond EOD, truncated
[  110.366705][ T6327] loop3: p4 size 262144 extends beyond EOD, truncated
[  110.440107][ T6338] FAULT_INJECTION: forcing a failure.
[  110.440107][ T6338] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  110.453261][ T6338] CPU: 1 UID: 0 PID: 6338 Comm: syz.1.934 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  110.453290][ T6338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  110.453302][ T6338] Call Trace:
[  110.453307][ T6338]  <TASK>
[  110.453315][ T6338]  __dump_stack+0x1d/0x30
[  110.453370][ T6338]  dump_stack_lvl+0xe8/0x140
[  110.453388][ T6338]  dump_stack+0x15/0x1b
[  110.453404][ T6338]  should_fail_ex+0x265/0x280
[  110.453518][ T6338]  should_fail+0xb/0x20
[  110.453556][ T6338]  should_fail_usercopy+0x1a/0x20
[  110.453580][ T6338]  _copy_from_iter+0xcf/0xe40
[  110.453602][ T6338]  ? __build_skb_around+0x1a0/0x200
[  110.453738][ T6338]  ? __alloc_skb+0x223/0x320
[  110.453771][ T6338]  netlink_sendmsg+0x471/0x6b0
[  110.453817][ T6338]  ? __pfx_netlink_sendmsg+0x10/0x10
[  110.453916][ T6338]  __sock_sendmsg+0x142/0x180
[  110.453985][ T6338]  ____sys_sendmsg+0x31e/0x4e0
[  110.454023][ T6338]  ___sys_sendmsg+0x17b/0x1d0
[  110.454080][ T6338]  __x64_sys_sendmsg+0xd4/0x160
[  110.454118][ T6338]  x64_sys_call+0x191e/0x2ff0
[  110.454145][ T6338]  do_syscall_64+0xd2/0x200
[  110.454175][ T6338]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  110.454204][ T6338]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  110.454247][ T6338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.454300][ T6338] RIP: 0033:0x7f7ac432ebe9
[  110.454320][ T6338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.454343][ T6338] RSP: 002b:00007f7ac2d97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  110.454361][ T6338] RAX: ffffffffffffffda RBX: 00007f7ac4555fa0 RCX: 00007f7ac432ebe9
[  110.454373][ T6338] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 0000000000000005
[  110.454389][ T6338] RBP: 00007f7ac2d97090 R08: 0000000000000000 R09: 0000000000000000
[  110.454404][ T6338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  110.454431][ T6338] R13: 00007f7ac4556038 R14: 00007f7ac4555fa0 R15: 00007ffe41057508
[  110.454453][ T6338]  </TASK>
[  110.462298][ T6334] IPVS: using max 1920 ests per chain, 96000 per kthread
[  110.581384][ T6343] netlink: 188 bytes leftover after parsing attributes in process `syz.1.936'.
[  110.758742][ T6343] loop1: detected capacity change from 0 to 128
[  110.782736][ T6343] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  110.796177][ T6343] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  110.808695][ T6356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.940'.
[  110.844423][ T6351] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  110.975805][ T6365] loop2: detected capacity change from 0 to 128
[  110.982697][ T6351] loop3: detected capacity change from 0 to 1756
[  110.996072][ T6365] FAT-fs (loop2): error, clusters badly computed (2 != 1)
[  111.003251][ T6365] FAT-fs (loop2): Filesystem has been set read-only
[  111.010079][ T6365] FAT-fs (loop2): error, clusters badly computed (3 != 2)
[  111.017842][ T6365] FAT-fs (loop2): error, clusters badly computed (4 != 3)
[  111.025244][ T6365] FAT-fs (loop2): error, clusters badly computed (5 != 4)
[  111.033024][ T6365] FAT-fs (loop2): error, clusters badly computed (6 != 5)
[  111.500675][ T6375] loop4: detected capacity change from 0 to 1024
[  111.513358][ T6375] EXT4-fs: Ignoring removed nomblk_io_submit option
[  111.513652][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  111.550763][ T6377] FAULT_INJECTION: forcing a failure.
[  111.550763][ T6377] name failslab, interval 1, probability 0, space 0, times 0
[  111.563531][ T6377] CPU: 0 UID: 0 PID: 6377 Comm: syz.1.947 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  111.563594][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  111.563606][ T6377] Call Trace:
[  111.563612][ T6377]  <TASK>
[  111.563619][ T6377]  __dump_stack+0x1d/0x30
[  111.563638][ T6377]  dump_stack_lvl+0xe8/0x140
[  111.563655][ T6377]  dump_stack+0x15/0x1b
[  111.563671][ T6377]  should_fail_ex+0x265/0x280
[  111.563772][ T6377]  should_failslab+0x8c/0xb0
[  111.563877][ T6377]  kmem_cache_alloc_noprof+0x50/0x310
[  111.563987][ T6377]  ? dst_alloc+0xbd/0x100
[  111.564045][ T6377]  dst_alloc+0xbd/0x100
[  111.564079][ T6377]  ? ipv4_sk_update_pmtu+0x602/0xac0
[  111.564110][ T6377]  ip_route_output_key_hash_rcu+0xef5/0x1380
[  111.564153][ T6377]  ip_route_output_key_hash+0x7a/0xb0
[  111.564189][ T6377]  tcp_v4_connect+0x3e2/0xad0
[  111.564271][ T6377]  tcp_v6_connect+0x82c/0xc30
[  111.564396][ T6377]  __inet_stream_connect+0x169/0x7e0
[  111.564437][ T6377]  ? tcp_sendmsg_fastopen+0x172/0x520
[  111.564512][ T6377]  ? should_failslab+0x8c/0xb0
[  111.564544][ T6377]  ? __kmalloc_cache_noprof+0x189/0x320
[  111.564609][ T6377]  tcp_sendmsg_fastopen+0x43a/0x520
[  111.564640][ T6377]  tcp_sendmsg_locked+0x26e1/0x2c00
[  111.564665][ T6377]  ? __rcu_read_unlock+0x4f/0x70
[  111.564712][ T6377]  ? __account_obj_stock+0x2cc/0x350
[  111.564815][ T6377]  ? __rcu_read_unlock+0x4f/0x70
[  111.564843][ T6377]  ? avc_has_perm_noaudit+0x1b1/0x200
[  111.564876][ T6377]  ? avc_has_perm+0xf7/0x180
[  111.564904][ T6377]  ? _raw_spin_unlock_bh+0x36/0x40
[  111.564958][ T6377]  ? __pfx_tcp_sendmsg+0x10/0x10
[  111.565037][ T6377]  tcp_sendmsg+0x2f/0x50
[  111.565062][ T6377]  inet6_sendmsg+0x76/0xd0
[  111.565093][ T6377]  __sock_sendmsg+0x8b/0x180
[  111.565126][ T6377]  ____sys_sendmsg+0x345/0x4e0
[  111.565233][ T6377]  ___sys_sendmsg+0x17b/0x1d0
[  111.565340][ T6377]  __sys_sendmmsg+0x178/0x300
[  111.565421][ T6377]  __x64_sys_sendmmsg+0x57/0x70
[  111.565497][ T6377]  x64_sys_call+0x1c4a/0x2ff0
[  111.565523][ T6377]  do_syscall_64+0xd2/0x200
[  111.565548][ T6377]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  111.565631][ T6377]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  111.565653][ T6377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.565679][ T6377] RIP: 0033:0x7f7ac432ebe9
[  111.565697][ T6377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.565754][ T6377] RSP: 002b:00007f7ac2d97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  111.565774][ T6377] RAX: ffffffffffffffda RBX: 00007f7ac4555fa0 RCX: 00007f7ac432ebe9
[  111.565788][ T6377] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000006
[  111.565804][ T6377] RBP: 00007f7ac2d97090 R08: 0000000000000000 R09: 0000000000000000
[  111.565819][ T6377] R10: 0000000020080058 R11: 0000000000000246 R12: 0000000000000001
[  111.565884][ T6377] R13: 00007f7ac4556038 R14: 00007f7ac4555fa0 R15: 00007ffe41057508
[  111.565907][ T6377]  </TASK>
[  111.570345][ T6375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.037566][ T6392] loop0: detected capacity change from 0 to 512
[  112.057155][ T6390] 9pnet: Could not find request transport: f
[  112.071020][ T6392] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  112.080921][ T6392] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  112.106800][ T6400] 9pnet: Could not find request transport: f
[  112.148009][ T6400] pim6reg: entered allmulticast mode
[  112.157389][ T6400] pim6reg: left allmulticast mode
[  112.187163][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.954'.
[  112.372578][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.675447][ T6431] netlink: 188 bytes leftover after parsing attributes in process `syz.4.964'.
[  112.740391][ T6432] loop4: detected capacity change from 0 to 128
[  112.772642][ T6432] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  112.794019][ T6432] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  112.978392][ T6435] loop2: detected capacity change from 0 to 128
[  112.988947][ T6435] FAT-fs (loop2): error, clusters badly computed (2 != 1)
[  112.996177][ T6435] FAT-fs (loop2): Filesystem has been set read-only
[  113.003318][ T6435] FAT-fs (loop2): error, clusters badly computed (3 != 2)
[  113.010647][ T6435] FAT-fs (loop2): error, clusters badly computed (4 != 3)
[  113.018030][ T6435] FAT-fs (loop2): error, clusters badly computed (5 != 4)
[  113.025537][ T6435] FAT-fs (loop2): error, clusters badly computed (6 != 5)
[  113.080372][ T6439] 9pnet: Could not find request transport: f
[  113.267968][ T6449] netlink: 188 bytes leftover after parsing attributes in process `syz.0.971'.
[  113.355657][ T6457] loop0: detected capacity change from 0 to 128
[  113.372556][ T6457] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  113.460566][ T6457] ext4 filesystem being mounted at /209/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  113.490868][ T6462] loop3: detected capacity change from 0 to 128
[  113.524044][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  113.547808][ T6462] FAT-fs (loop3): error, clusters badly computed (2 != 1)
[  113.555094][ T6462] FAT-fs (loop3): Filesystem has been set read-only
[  113.601803][ T6462] FAT-fs (loop3): error, clusters badly computed (3 != 2)
[  113.609551][ T6462] FAT-fs (loop3): error, clusters badly computed (4 != 3)
[  113.618749][ T6462] FAT-fs (loop3): error, clusters badly computed (5 != 4)
[  113.628504][ T6462] FAT-fs (loop3): error, clusters badly computed (6 != 5)
[  113.930704][ T6481] pim6reg: entered allmulticast mode
[  113.938675][ T6481] pim6reg: left allmulticast mode
[  114.062113][ T6486] loop4: detected capacity change from 0 to 512
[  114.075347][ T6486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.098147][ T6486] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  114.131942][ T3308] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  114.144140][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.209768][ T6490] loop0: detected capacity change from 0 to 2048
[  114.233859][ T6490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.316497][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.987'.
[  114.330043][ T6497] team_slave_0: entered promiscuous mode
[  114.335739][ T6497] team_slave_1: entered promiscuous mode
[  114.355893][ T6497] macsec1: entered promiscuous mode
[  114.361201][ T6497] team0: entered promiscuous mode
[  114.366625][ T6497] macsec1: entered allmulticast mode
[  114.372032][ T6497] team0: entered allmulticast mode
[  114.377154][ T6497] team_slave_0: entered allmulticast mode
[  114.382936][ T6497] team_slave_1: entered allmulticast mode
[  114.396057][   T29] kauditd_printk_skb: 682 callbacks suppressed
[  114.396073][   T29] audit: type=1400 audit(1754645706.053:5644): avc:  denied  { nlmsg_write } for  pid=6498 comm="syz.1.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  114.444686][ T6497] team0: Device macsec1 is already an upper device of the team interface
[  114.472309][ T6502] loop1: detected capacity change from 0 to 1024
[  114.479121][ T6502] EXT4-fs: Ignoring removed nomblk_io_submit option
[  114.486055][ T6497] team0: left allmulticast mode
[  114.491027][ T6497] team_slave_0: left allmulticast mode
[  114.496569][ T6497] team_slave_1: left allmulticast mode
[  114.502101][ T6497] team0: left promiscuous mode
[  114.507385][ T6497] team_slave_0: left promiscuous mode
[  114.512798][ T6497] team_slave_1: left promiscuous mode
[  114.581957][ T6502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.613191][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.789957][   T29] audit: type=1326 audit(1754645706.443:5645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  114.819247][   T29] audit: type=1326 audit(1754645706.443:5646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  114.842659][   T29] audit: type=1326 audit(1754645706.443:5647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  114.865970][   T29] audit: type=1326 audit(1754645706.443:5648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  114.889329][   T29] audit: type=1326 audit(1754645706.443:5649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  114.972524][ T6514] loop2: detected capacity change from 0 to 256
[  115.012649][   T29] audit: type=1326 audit(1754645706.673:5650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6515 comm="syz.0.994" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f146cc3ebe9 code=0x0
[  115.064816][ T6517] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  115.138415][   T29] audit: type=1400 audit(1754645706.793:5651): avc:  denied  { read write } for  pid=6524 comm="syz.4.997" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  115.162843][   T29] audit: type=1400 audit(1754645706.793:5652): avc:  denied  { open } for  pid=6524 comm="syz.4.997" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  115.204123][ T6517] loop0: detected capacity change from 0 to 1756
[  115.354619][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.377619][   T29] audit: type=1326 audit(1754645707.033:5653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6530 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac432ebe9 code=0x7ffc0000
[  115.880359][ T6538] pim6reg: entered allmulticast mode
[  115.887967][ T6538] pim6reg: left allmulticast mode
[  116.035819][ T6548] loop4: detected capacity change from 0 to 512
[  116.053373][ T6548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.066549][ T6548] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  116.077397][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'.
[  116.089467][ T6554] team_slave_0: entered promiscuous mode
[  116.095239][ T6554] team_slave_1: entered promiscuous mode
[  116.101791][ T6554] macsec1: entered promiscuous mode
[  116.107029][ T6554] team0: entered promiscuous mode
[  116.112320][ T6554] macsec1: entered allmulticast mode
[  116.115139][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.117610][ T6554] team0: entered allmulticast mode
[  116.117630][ T6554] team_slave_0: entered allmulticast mode
[  116.137465][ T6554] team_slave_1: entered allmulticast mode
[  116.144861][ T6554] team0: Device macsec1 is already an upper device of the team interface
[  116.161199][ T6554] team0: left allmulticast mode
[  116.166254][ T6554] team_slave_0: left allmulticast mode
[  116.171820][ T6554] team_slave_1: left allmulticast mode
[  116.177335][ T6554] team0: left promiscuous mode
[  116.182352][ T6554] team_slave_0: left promiscuous mode
[  116.187822][ T6554] team_slave_1: left promiscuous mode
[  116.225226][ T6555] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  116.253104][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1009'.
[  116.262089][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1009'.
[  116.279495][ T6563] loop2: detected capacity change from 0 to 1756
[  116.323919][ T6570] 9pnet: Could not find request transport: f
[  116.432212][ T6576] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  116.551122][ T6579] loop1: detected capacity change from 0 to 1756
[  116.902065][ T6585] loop0: detected capacity change from 0 to 512
[  116.922240][ T6585] ext4: Unknown parameter 'dont_hash'
[  117.033266][ T6593] 9pnet: Could not find request transport: f
[  117.065335][ T6591] loop2: detected capacity change from 0 to 128
[  117.072452][ T6596] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  117.084218][ T6591] FAT-fs (loop2): error, clusters badly computed (2 != 1)
[  117.085677][ T6596] can0: slcan on ttyS3.
[  117.091399][ T6591] FAT-fs (loop2): Filesystem has been set read-only
[  117.104899][ T6591] FAT-fs (loop2): error, clusters badly computed (3 != 2)
[  117.112526][ T6591] FAT-fs (loop2): error, clusters badly computed (4 != 3)
[  117.120020][ T6591] FAT-fs (loop2): error, clusters badly computed (5 != 4)
[  117.129733][ T6591] FAT-fs (loop2): error, clusters badly computed (6 != 5)
[  117.141664][ T6596] can0 (unregistered): slcan off ttyS3.
[  117.155612][ T6596] can0: slcan on ttyS3.
[  117.177131][ T6602] loop3: detected capacity change from 0 to 512
[  117.194866][ T6602] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  117.204828][ T6602] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  117.213574][ T6595] can0 (unregistered): slcan off ttyS3.
[  117.247416][ T6606] 9pnet: Could not find request transport: f
[  117.352452][ T6625] process 'syz.2.1027' launched './file0' with NULL argv: empty string added
[  117.363765][ T6622] loop1: detected capacity change from 0 to 256
[  117.376096][ T6618] loop4: detected capacity change from 0 to 256
[  117.404821][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'.
[  117.409780][ T6632] team_slave_0: entered promiscuous mode
[  117.422418][ T6632] team_slave_1: entered promiscuous mode
[  117.478453][ T6637] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1030'.
[  117.478853][ T6632] macsec1: entered promiscuous mode
[  117.492734][ T6632] team0: entered promiscuous mode
[  117.492944][ T6632] macsec1: entered allmulticast mode
[  117.492958][ T6632] team0: entered allmulticast mode
[  117.493009][ T6632] team_slave_0: entered allmulticast mode
[  117.493053][ T6632] team_slave_1: entered allmulticast mode
[  117.493433][ T6639] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1030'.
[  117.518240][ T6632] team0: Device macsec1 is already an upper device of the team interface
[  117.518628][ T6632] team0: left allmulticast mode
[  117.518648][ T6632] team_slave_0: left allmulticast mode
[  117.518667][ T6632] team_slave_1: left allmulticast mode
[  117.518707][ T6632] team0: left promiscuous mode
[  117.518891][ T6632] team_slave_0: left promiscuous mode
[  117.518914][ T6632] team_slave_1: left promiscuous mode
[  117.661080][ T6652] 9pnet: Could not find request transport: f
[  117.689140][ T6656] loop3: detected capacity change from 0 to 2048
[  117.718096][ T6656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.766592][ T6664] loop2: detected capacity change from 0 to 512
[  117.774041][ T6664] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  117.784174][ T6664] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  117.866422][ T6669] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  117.916165][ T6672] loop2: detected capacity change from 0 to 512
[  117.930422][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.941407][ T6672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.954631][ T6672] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  117.984878][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.994601][ T6678] loop1: detected capacity change from 0 to 1756
[  118.033276][ T6677] 9pnet: Could not find request transport: f
[  118.117466][ T6689] 9pnet: Could not find request transport: f
[  118.150570][ T6692] FAULT_INJECTION: forcing a failure.
[  118.150570][ T6692] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  118.163877][ T6692] CPU: 0 UID: 0 PID: 6692 Comm: syz.0.1044 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  118.163915][ T6692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  118.163932][ T6692] Call Trace:
[  118.163939][ T6692]  <TASK>
[  118.163946][ T6692]  __dump_stack+0x1d/0x30
[  118.163999][ T6692]  dump_stack_lvl+0xe8/0x140
[  118.164020][ T6692]  dump_stack+0x15/0x1b
[  118.164036][ T6692]  should_fail_ex+0x265/0x280
[  118.164115][ T6692]  should_fail+0xb/0x20
[  118.164156][ T6692]  should_fail_usercopy+0x1a/0x20
[  118.164176][ T6692]  strncpy_from_user+0x25/0x230
[  118.164203][ T6692]  ? kmem_cache_alloc_noprof+0x186/0x310
[  118.164292][ T6692]  ? getname_flags+0x80/0x3b0
[  118.164334][ T6692]  getname_flags+0xae/0x3b0
[  118.164371][ T6692]  do_sys_openat2+0x60/0x110
[  118.164418][ T6692]  __x64_sys_creat+0x65/0x90
[  118.164500][ T6692]  x64_sys_call+0x2d94/0x2ff0
[  118.164528][ T6692]  do_syscall_64+0xd2/0x200
[  118.164559][ T6692]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  118.164605][ T6692]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  118.164634][ T6692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.164667][ T6692] RIP: 0033:0x7f146cc3ebe9
[  118.164687][ T6692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.164709][ T6692] RSP: 002b:00007f146b6a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  118.164731][ T6692] RAX: ffffffffffffffda RBX: 00007f146ce65fa0 RCX: 00007f146cc3ebe9
[  118.164808][ T6692] RDX: 0000000000000000 RSI: 0000000000000036 RDI: 00002000000003c0
[  118.164825][ T6692] RBP: 00007f146b6a7090 R08: 0000000000000000 R09: 0000000000000000
[  118.164836][ T6692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  118.164848][ T6692] R13: 00007f146ce66038 R14: 00007f146ce65fa0 R15: 00007ffc48d16f88
[  118.164875][ T6692]  </TASK>
[  118.361675][ T6687] loop2: detected capacity change from 0 to 512
[  118.381150][ T6687] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  118.398447][ T6687] EXT4-fs (loop2): 1 truncate cleaned up
[  118.409537][ T6687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.431597][ T6687] loop7: detected capacity change from 0 to 16384
[  118.471114][ T6704] loop3: detected capacity change from 0 to 512
[  118.495320][ T6704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.508879][ T6704] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  118.509320][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.551993][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.602965][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1050'.
[  118.733538][ T6725] FAULT_INJECTION: forcing a failure.
[  118.733538][ T6725] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  118.746905][ T6725] CPU: 1 UID: 0 PID: 6725 Comm: syz.2.1057 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  118.746934][ T6725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  118.746947][ T6725] Call Trace:
[  118.746967][ T6725]  <TASK>
[  118.746975][ T6725]  __dump_stack+0x1d/0x30
[  118.747045][ T6725]  dump_stack_lvl+0xe8/0x140
[  118.747070][ T6725]  dump_stack+0x15/0x1b
[  118.747089][ T6725]  should_fail_ex+0x265/0x280
[  118.747129][ T6725]  should_fail+0xb/0x20
[  118.747158][ T6725]  should_fail_usercopy+0x1a/0x20
[  118.747191][ T6725]  _copy_from_user+0x1c/0xb0
[  118.747224][ T6725]  ___sys_sendmsg+0xc1/0x1d0
[  118.747278][ T6725]  __x64_sys_sendmsg+0xd4/0x160
[  118.747377][ T6725]  x64_sys_call+0x191e/0x2ff0
[  118.747404][ T6725]  do_syscall_64+0xd2/0x200
[  118.747434][ T6725]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  118.747463][ T6725]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  118.747512][ T6725]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.747540][ T6725] RIP: 0033:0x7f147291ebe9
[  118.747558][ T6725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.747579][ T6725] RSP: 002b:00007f1471387038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  118.747606][ T6725] RAX: ffffffffffffffda RBX: 00007f1472b45fa0 RCX: 00007f147291ebe9
[  118.747622][ T6725] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005
[  118.747635][ T6725] RBP: 00007f1471387090 R08: 0000000000000000 R09: 0000000000000000
[  118.747649][ T6725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  118.747663][ T6725] R13: 00007f1472b46038 R14: 00007f1472b45fa0 R15: 00007ffdd393b8f8
[  118.747733][ T6725]  </TASK>
[  118.926422][ T6726] loop4: detected capacity change from 0 to 128
[  118.972902][ T6726] FAT-fs (loop4): error, clusters badly computed (2 != 1)
[  118.980058][ T6726] FAT-fs (loop4): Filesystem has been set read-only
[  118.988466][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1055'.
[  119.000327][ T6728] macsec1: entered promiscuous mode
[  119.005695][ T6728] team0: entered promiscuous mode
[  119.010832][ T6728] team_slave_0: entered promiscuous mode
[  119.016628][ T6728] team_slave_1: entered promiscuous mode
[  119.020168][ T6730] loop2: detected capacity change from 0 to 128
[  119.022503][ T6728] macsec1: entered allmulticast mode
[  119.029513][ T6726] FAT-fs (loop4): error, clusters badly computed (3 != 2)
[  119.041420][ T6730] FAT-fs (loop2): bogus number of reserved sectors
[  119.047969][ T6730] FAT-fs (loop2): Can't find a valid FAT filesystem
[  119.055196][ T6726] FAT-fs (loop4): error, clusters badly computed (4 != 3)
[  119.060318][ T6728] team0: Device macsec1 is already an upper device of the team interface
[  119.062444][ T6726] FAT-fs (loop4): error, clusters badly computed (5 != 4)
[  119.078385][ T6726] FAT-fs (loop4): error, clusters badly computed (6 != 5)
[  119.094119][ T6728] team0: left promiscuous mode
[  119.098947][ T6728] team_slave_0: left promiscuous mode
[  119.104664][ T6728] team_slave_1: left promiscuous mode
[  119.170175][ T6735] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  119.202166][ T6738] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1060'.
[  119.241680][ T6739] loop2: detected capacity change from 0 to 1756
[  119.359023][ T6745] 9pnet: Could not find request transport: f
[  119.375572][ T6745] loop0: detected capacity change from 0 to 1024
[  119.384846][ T6745] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  119.446140][   T29] kauditd_printk_skb: 597 callbacks suppressed
[  119.446155][   T29] audit: type=1326 audit(1754645711.103:6251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  119.476794][   T29] audit: type=1326 audit(1754645711.123:6252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  119.500324][   T29] audit: type=1326 audit(1754645711.123:6253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  119.523809][   T29] audit: type=1326 audit(1754645711.123:6254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  119.547207][   T29] audit: type=1326 audit(1754645711.123:6255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  119.570634][   T29] audit: type=1326 audit(1754645711.123:6256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  119.594143][   T29] audit: type=1326 audit(1754645711.123:6257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  119.617516][   T29] audit: type=1326 audit(1754645711.123:6258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  119.640939][   T29] audit: type=1326 audit(1754645711.123:6259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  119.664314][   T29] audit: type=1326 audit(1754645711.123:6260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  119.688116][ T6753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1064'.
[  119.697563][ T6755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1065'.
[  119.748619][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1068'.
[  119.812587][ T6765] loop0: detected capacity change from 0 to 128
[  119.824297][ T6765] FAT-fs (loop0): error, clusters badly computed (2 != 1)
[  119.831498][ T6765] FAT-fs (loop0): Filesystem has been set read-only
[  119.838379][ T6765] FAT-fs (loop0): error, clusters badly computed (3 != 2)
[  119.845712][ T6765] FAT-fs (loop0): error, clusters badly computed (4 != 3)
[  119.853206][ T6765] FAT-fs (loop0): error, clusters badly computed (5 != 4)
[  119.860443][ T6765] FAT-fs (loop0): error, clusters badly computed (6 != 5)
[  120.140297][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1080'.
[  120.149895][ T6788] 9pnet: Could not find request transport: f
[  120.350239][ T6793] 9pnet: Could not find request transport: f
[  120.488402][ T6800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6800 comm=syz.4.1084
[  120.563119][ T6809] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  120.630994][ T6811] loop2: detected capacity change from 0 to 1756
[  120.814876][ T6827] 9pnet: Could not find request transport: f
[  121.134460][ T6836] loop1: detected capacity change from 0 to 2048
[  121.169559][ T6836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.365472][ T6845] random: crng reseeded on system resumption
[  121.446490][ T6848] loop4: detected capacity change from 0 to 256
[  121.532314][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.922705][ T6864] loop0: detected capacity change from 0 to 512
[  121.946212][ T6864] EXT4-fs: Ignoring removed oldalloc option
[  121.970014][ T6864] ext4: Unknown parameter 'smackfsfloor'
[  122.036677][ T6864] loop0: detected capacity change from 0 to 1024
[  122.096749][ T6864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.121435][ T6864] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.136162][ T6866] loop3: detected capacity change from 0 to 4096
[  122.192638][ T6866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.276968][ T6871] 9pnet: Could not find request transport: f
[  122.299720][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.305975][ T6871] loop2: detected capacity change from 0 to 1024
[  122.317922][ T6871] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[  122.403282][ T3410] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  122.410712][ T3410] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  122.418148][ T3410] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  122.425657][ T3410] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  122.425690][ T3410] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  122.425726][ T3410] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  122.425756][ T3410] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  122.425785][ T3410] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  122.425825][ T3410] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  122.425854][ T3410] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  122.477842][ T3410] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  122.478846][ T6881] loop3: detected capacity change from 0 to 512
[  122.480843][ T6881] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  122.558609][ T6881] EXT4-fs (loop3): 1 truncate cleaned up
[  122.559120][ T6881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.582638][ T6881] netlink: 'syz.3.1108': attribute type 33 has an invalid length.
[  122.582661][ T6881] __nla_validate_parse: 4 callbacks suppressed
[  122.582677][ T6881] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1108'.
[  122.609618][ T6887] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  122.786759][ T6889] FAULT_INJECTION: forcing a failure.
[  122.786759][ T6889] name failslab, interval 1, probability 0, space 0, times 0
[  122.799474][ T6889] CPU: 1 UID: 0 PID: 6889 Comm: syz.2.1110 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  122.799505][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  122.799518][ T6889] Call Trace:
[  122.799525][ T6889]  <TASK>
[  122.799579][ T6889]  __dump_stack+0x1d/0x30
[  122.799606][ T6889]  dump_stack_lvl+0xe8/0x140
[  122.799626][ T6889]  dump_stack+0x15/0x1b
[  122.799647][ T6889]  should_fail_ex+0x265/0x280
[  122.799759][ T6889]  should_failslab+0x8c/0xb0
[  122.799876][ T6889]  kmem_cache_alloc_noprof+0x50/0x310
[  122.799913][ T6889]  ? io_submit_one+0xb8/0x11d0
[  122.799951][ T6889]  io_submit_one+0xb8/0x11d0
[  122.799997][ T6889]  __se_sys_io_submit+0xfb/0x280
[  122.800136][ T6889]  __x64_sys_io_submit+0x43/0x50
[  122.800163][ T6889]  x64_sys_call+0x2d5d/0x2ff0
[  122.800191][ T6889]  do_syscall_64+0xd2/0x200
[  122.800223][ T6889]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  122.800253][ T6889]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  122.800362][ T6889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.800392][ T6889] RIP: 0033:0x7f147291ebe9
[  122.800426][ T6889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.800452][ T6889] RSP: 002b:00007f1471366038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  122.800478][ T6889] RAX: ffffffffffffffda RBX: 00007f1472b46090 RCX: 00007f147291ebe9
[  122.800491][ T6889] RDX: 0000200000000300 RSI: 2000000000000326 RDI: 00007f1471335000
[  122.800538][ T6889] RBP: 00007f1471366090 R08: 0000000000000000 R09: 0000000000000000
[  122.800556][ T6889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  122.800572][ T6889] R13: 00007f1472b46128 R14: 00007f1472b46090 R15: 00007ffdd393b8f8
[  122.800598][ T6889]  </TASK>
[  123.012431][ T6895] bridge0: entered promiscuous mode
[  123.019085][ T6895] bridge0: port 3(macsec1) entered blocking state
[  123.025968][ T6895] bridge0: port 3(macsec1) entered disabled state
[  123.034891][ T6895] macsec1: entered allmulticast mode
[  123.040246][ T6895] bridge0: entered allmulticast mode
[  123.040686][ T6900] loop1: detected capacity change from 0 to 1756
[  123.095755][ T6895] macsec1: left allmulticast mode
[  123.100835][ T6895] bridge0: left allmulticast mode
[  123.107365][ T6895] bridge0: left promiscuous mode
[  123.433085][ T6916] loop2: detected capacity change from 0 to 256
[  123.446853][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1122'.
[  123.492708][ T6922] 9pnet: Could not find request transport: f
[  123.555721][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1121'.
[  123.567367][ T6927] macsec1: entered promiscuous mode
[  123.572727][ T6927] team0: entered promiscuous mode
[  123.577792][ T6927] team_slave_0: entered promiscuous mode
[  123.583667][ T6927] team_slave_1: entered promiscuous mode
[  123.589489][ T6927] macsec1: entered allmulticast mode
[  123.595540][ T6927] team0: Device macsec1 is already an upper device of the team interface
[  123.604661][ T6927] team0: left promiscuous mode
[  123.609474][ T6927] team_slave_0: left promiscuous mode
[  123.615051][ T6927] team_slave_1: left promiscuous mode
[  123.637101][ T6926] tmpfs: Bad value for 'mpol'
[  123.642830][ T6926] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1124'.
[  123.660229][ T6926] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1124'.
[  123.721799][ T6932] netlink: 'syz.0.1125': attribute type 4 has an invalid length.
[  123.724217][ T6931] netlink: 'syz.0.1125': attribute type 4 has an invalid length.
[  123.820347][ T6942] loop3: detected capacity change from 0 to 2048
[  123.880237][ T6948] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  123.930986][ T6951] FAULT_INJECTION: forcing a failure.
[  123.930986][ T6951] name failslab, interval 1, probability 0, space 0, times 0
[  123.943879][ T6951] CPU: 0 UID: 0 PID: 6951 Comm: syz.3.1131 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  123.943915][ T6951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  123.943932][ T6951] Call Trace:
[  123.943939][ T6951]  <TASK>
[  123.943948][ T6951]  __dump_stack+0x1d/0x30
[  123.943974][ T6951]  dump_stack_lvl+0xe8/0x140
[  123.944059][ T6951]  dump_stack+0x15/0x1b
[  123.944076][ T6951]  should_fail_ex+0x265/0x280
[  123.944106][ T6951]  should_failslab+0x8c/0xb0
[  123.944127][ T6951]  __kmalloc_cache_node_noprof+0x54/0x320
[  123.944156][ T6951]  ? __get_vm_area_node+0x106/0x1d0
[  123.944238][ T6951]  __get_vm_area_node+0x106/0x1d0
[  123.944351][ T6951]  __vmalloc_node_range_noprof+0x273/0xe00
[  123.944381][ T6951]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[  123.944409][ T6951]  ? avc_has_perm_noaudit+0x1b1/0x200
[  123.944431][ T6951]  ? cred_has_capability+0x210/0x280
[  123.944530][ T6951]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[  123.944553][ T6951]  __vmalloc_noprof+0x83/0xc0
[  123.944592][ T6951]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[  123.944674][ T6951]  bpf_prog_alloc_no_stats+0x47/0x3a0
[  123.944697][ T6951]  ? bpf_prog_alloc+0x2a/0x150
[  123.944721][ T6951]  bpf_prog_alloc+0x3c/0x150
[  123.944776][ T6951]  bpf_prog_load+0x514/0x1070
[  123.944809][ T6951]  ? security_bpf+0x2b/0x90
[  123.944836][ T6951]  __sys_bpf+0x462/0x7b0
[  123.944888][ T6951]  __x64_sys_bpf+0x41/0x50
[  123.944909][ T6951]  x64_sys_call+0x2aea/0x2ff0
[  123.944928][ T6951]  do_syscall_64+0xd2/0x200
[  123.944994][ T6951]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  123.945027][ T6951]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  123.945054][ T6951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.945097][ T6951] RIP: 0033:0x7f908db9ebe9
[  123.945110][ T6951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.945126][ T6951] RSP: 002b:00007f908c5ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  123.945142][ T6951] RAX: ffffffffffffffda RBX: 00007f908ddc5fa0 RCX: 00007f908db9ebe9
[  123.945153][ T6951] RDX: 0000000000000090 RSI: 0000200000000840 RDI: 0000000000000005
[  123.945164][ T6951] RBP: 00007f908c5ff090 R08: 0000000000000000 R09: 0000000000000000
[  123.945204][ T6951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  123.945214][ T6951] R13: 00007f908ddc6038 R14: 00007f908ddc5fa0 R15: 00007ffc65356b08
[  123.945232][ T6951]  </TASK>
[  123.945238][ T6951] syz.3.1131: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[  124.010046][ T6953] loop0: detected capacity change from 0 to 1756
[  124.014593][ T6951] ,cpuset=
[  124.026154][ T6951] /
[  124.042341][ T6951] ,mems_allowed=0
[  124.222329][ T6951] CPU: 0 UID: 0 PID: 6951 Comm: syz.3.1131 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  124.222407][ T6951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  124.222439][ T6951] Call Trace:
[  124.222448][ T6951]  <TASK>
[  124.222458][ T6951]  __dump_stack+0x1d/0x30
[  124.222485][ T6951]  dump_stack_lvl+0xe8/0x140
[  124.222511][ T6951]  dump_stack+0x15/0x1b
[  124.222532][ T6951]  warn_alloc+0x12b/0x1a0
[  124.222593][ T6951]  __vmalloc_node_range_noprof+0x297/0xe00
[  124.222695][ T6951]  ? avc_has_perm_noaudit+0x1b1/0x200
[  124.222725][ T6951]  ? cred_has_capability+0x210/0x280
[  124.222765][ T6951]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[  124.222820][ T6951]  __vmalloc_noprof+0x83/0xc0
[  124.222916][ T6951]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[  124.222954][ T6951]  bpf_prog_alloc_no_stats+0x47/0x3a0
[  124.222989][ T6951]  ? bpf_prog_alloc+0x2a/0x150
[  124.223024][ T6951]  bpf_prog_alloc+0x3c/0x150
[  124.223094][ T6951]  bpf_prog_load+0x514/0x1070
[  124.223167][ T6951]  ? security_bpf+0x2b/0x90
[  124.223270][ T6951]  __sys_bpf+0x462/0x7b0
[  124.223308][ T6951]  __x64_sys_bpf+0x41/0x50
[  124.223338][ T6951]  x64_sys_call+0x2aea/0x2ff0
[  124.223420][ T6951]  do_syscall_64+0xd2/0x200
[  124.223452][ T6951]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  124.223484][ T6951]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  124.223562][ T6951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.223584][ T6951] RIP: 0033:0x7f908db9ebe9
[  124.223599][ T6951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.223659][ T6951] RSP: 002b:00007f908c5ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  124.223682][ T6951] RAX: ffffffffffffffda RBX: 00007f908ddc5fa0 RCX: 00007f908db9ebe9
[  124.223699][ T6951] RDX: 0000000000000090 RSI: 0000200000000840 RDI: 0000000000000005
[  124.223727][ T6951] RBP: 00007f908c5ff090 R08: 0000000000000000 R09: 0000000000000000
[  124.223739][ T6951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.223750][ T6951] R13: 00007f908ddc6038 R14: 00007f908ddc5fa0 R15: 00007ffc65356b08
[  124.223769][ T6951]  </TASK>
[  124.223775][ T6951] Mem-Info:
[  124.310935][ T6956] loop4: detected capacity change from 0 to 1024
[  124.315046][ T6951] active_anon:8969 inactive_anon:23 isolated_anon:0
[  124.315046][ T6951]  active_file:18748 inactive_file:7082 isolated_file:0
[  124.315046][ T6951]  unevictable:11 dirty:296 writeback:0
[  124.315046][ T6951]  slab_reclaimable:3334 slab_unreclaimable:16144
[  124.315046][ T6951]  mapped:31480 shmem:495 pagetables:1294
[  124.315046][ T6951]  sec_pagetables:0 bounce:0
[  124.315046][ T6951]  kernel_misc_reclaimable:0
[  124.315046][ T6951]  free:1858600 free_pcp:29249 free_cma:0
[  124.385818][ T6956] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.1132: Allocating blocks 449-513 which overlap fs metadata
[  124.390633][ T6951] Node 0 active_anon:35876kB inactive_anon:92kB active_file:74992kB inactive_file:28444kB unevictable:44kB isolated(anon):0kB isolated(file):0kB mapped:121584kB dirty:1184kB writeback:0kB shmem:1980kB kernel_stack:3472kB pagetables:5176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  124.418346][ T6960] FAULT_INJECTION: forcing a failure.
[  124.418346][ T6960] name failslab, interval 1, probability 0, space 0, times 0
[  124.423897][ T6951] Node 0 
[  124.431776][ T6960] CPU: 1 UID: 0 PID: 6960 Comm: syz.1.1133 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  124.431815][ T6960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  124.431834][ T6960] Call Trace:
[  124.431843][ T6960]  <TASK>
[  124.431853][ T6960]  __dump_stack+0x1d/0x30
[  124.431884][ T6960]  dump_stack_lvl+0xe8/0x140
[  124.431911][ T6960]  dump_stack+0x15/0x1b
[  124.432014][ T6960]  should_fail_ex+0x265/0x280
[  124.432103][ T6960]  should_failslab+0x8c/0xb0
[  124.432136][ T6960]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  124.432178][ T6960]  ? sidtab_sid2str_get+0xa0/0x130
[  124.432232][ T6960]  kmemdup_noprof+0x2b/0x70
[  124.432292][ T6960]  sidtab_sid2str_get+0xa0/0x130
[  124.432341][ T6960]  security_sid_to_context_core+0x1eb/0x2e0
[  124.432448][ T6960]  security_sid_to_context+0x27/0x40
[  124.432492][ T6960]  selinux_lsmprop_to_secctx+0x67/0xf0
[  124.432540][ T6960]  security_lsmprop_to_secctx+0x43/0x80
[  124.432633][ T6960]  audit_log_task_context+0x77/0x190
[  124.432705][ T6960]  audit_log_task+0xf4/0x250
[  124.432745][ T6960]  audit_seccomp+0x61/0x100
[  124.432780][ T6960]  ? __seccomp_filter+0x68c/0x10d0
[  124.432880][ T6960]  __seccomp_filter+0x69d/0x10d0
[  124.432962][ T6960]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  124.433002][ T6960]  ? vfs_write+0x75e/0x8e0
[  124.433032][ T6960]  ? __rcu_read_unlock+0x4f/0x70
[  124.433079][ T6960]  ? __fget_files+0x184/0x1c0
[  124.433149][ T6960]  __secure_computing+0x82/0x150
[  124.433181][ T6960]  syscall_trace_enter+0xcf/0x1e0
[  124.433217][ T6960]  do_syscall_64+0xac/0x200
[  124.433251][ T6960]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  124.433359][ T6960]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  124.433391][ T6960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.433421][ T6960] RIP: 0033:0x7f7ac432ebe9
[  124.433442][ T6960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.433466][ T6960] RSP: 002b:00007f7ac2d97038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba
[  124.433519][ T6960] RAX: ffffffffffffffda RBX: 00007f7ac4555fa0 RCX: 00007f7ac432ebe9
[  124.433537][ T6960] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff
[  124.433611][ T6960] RBP: 00007f7ac2d97090 R08: 0000000000000020 R09: 0000000000000000
[  124.433628][ T6960] R10: 0000200000001dc0 R11: 0000000000000246 R12: 0000000000000001
[  124.433645][ T6960] R13: 00007f7ac4556038 R14: 00007f7ac4555fa0 R15: 00007ffe41057508
[  124.433674][ T6960]  </TASK>
[  124.548030][ T6963] 9pnet: Could not find request transport: f
[  124.553267][ T6951] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  124.561220][   T29] kauditd_printk_skb: 620 callbacks suppressed
[  124.561238][   T29] audit: type=1326 audit(1754645716.223:6880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac432ebe9 code=0x7ffc0000
[  124.568626][ T6951] lowmem_reserve[]:
[  124.584037][   T29] audit: type=1326 audit(1754645716.243:6881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac432ebe9 code=0x7ffc0000
[  124.585496][ T6951]  0
[  124.589681][   T29] audit: type=1326 audit(1754645716.243:6882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ac432ebe9 code=0x7ffc0000
[  124.589750][   T29] audit: type=1326 audit(1754645716.243:6883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac432ebe9 code=0x7ffc0000
[  124.589789][   T29] audit: type=1326 audit(1754645716.243:6884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac432ebe9 code=0x7ffc0000
[  124.589839][   T29] audit: type=1326 audit(1754645716.243:6885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ac432ebe9 code=0x7ffc0000
[  124.589865][   T29] audit: type=1326 audit(1754645716.243:6886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac432ebe9 code=0x7ffc0000
[  124.589891][   T29] audit: type=1326 audit(1754645716.243:6887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ac432ebe9 code=0x7ffc0000
[  124.594695][ T6951]  2883
[  124.598703][   T29] audit: type=1326 audit(1754645716.253:6888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac432ebe9 code=0x7ffc0000
[  124.598747][   T29] audit: type=1326 audit(1754645716.253:6889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.1.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ac432ebe9 code=0x7ffc0000
[  125.011090][ T6954] EXT4-fs (loop4): pa ffff888106acca10: logic 48, phys. 177, len 21
[  125.020997][ T6951]  7862
[  125.044204][ T6954] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  125.115681][ T6951]  7862
[  125.118646][ T6951] Node 0 DMA32 free:2949324kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952856kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB
[  125.149273][ T6951] lowmem_reserve[]: 0 0 4978 4978
[  125.154573][ T6951] Node 0 Normal free:4477932kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35980kB inactive_anon:92kB active_file:74992kB inactive_file:28444kB unevictable:0kB writepending:1016kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:104528kB local_pcp:13564kB free_cma:0kB
[  125.186994][ T6951] lowmem_reserve[]: 0 0 0 0
[  125.191914][ T6951] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  125.204961][ T6951] Node 0 DMA32: 5*4kB (M) 3*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949324kB
[  125.221516][ T6951] Node 0 Normal: 153*4kB (U) 1959*8kB (UME) 1498*16kB (UM) 826*32kB (UME) 329*64kB (UME) 103*128kB (UME) 184*256kB (UM) 167*512kB (UM) 121*1024kB (UME) 62*2048kB (UM) 975*4096kB (UM) = 4478012kB
[  125.241339][ T6951] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  125.250883][ T6951] 26433 total pagecache pages
[  125.255775][ T6951] 42 pages in swap cache
[  125.260168][ T6951] Free swap  = 124828kB
[  125.264537][ T6951] Total swap = 124996kB
[  125.268845][ T6951] 2097051 pages RAM
[  125.272879][ T6951] 0 pages HighMem/MovableOnly
[  125.277702][ T6951] 80437 pages reserved
[  125.345333][ T6970] loop3: detected capacity change from 0 to 2048
[  125.460965][ T6979] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6979 comm=syz.0.1140
[  125.555007][ T6994] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1146'.
[  125.606902][ T6999] loop1: detected capacity change from 0 to 512
[  125.616141][ T6999] EXT4-fs: Ignoring removed oldalloc option
[  125.637788][ T6999] ext4: Unknown parameter 'smackfsfloor'
[  125.687256][ T6999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1143'.
[  125.735087][ T7004] 9pnet: Could not find request transport: f
[  125.764330][ T7010] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1151'.
[  125.780718][ T7010] loop2: detected capacity change from 0 to 128
[  125.811251][ T7010] ext4 filesystem being mounted at /237/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  125.861510][ T7016] 9pnet: Could not find request transport: f
[  125.887642][ T6992] loop1: detected capacity change from 0 to 1024
[  125.912663][ T7025] loop3: detected capacity change from 0 to 2048
[  125.914464][ T6992] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.011195][ T7034] netlink: 'syz.2.1159': attribute type 1 has an invalid length.
[  126.112479][ T7047] FAULT_INJECTION: forcing a failure.
[  126.112479][ T7047] name failslab, interval 1, probability 0, space 0, times 0
[  126.116466][ T7044] bond1: (slave geneve2): making interface the new active one
[  126.125166][ T7047] CPU: 0 UID: 0 PID: 7047 Comm: syz.3.1163 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  126.125239][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  126.125257][ T7047] Call Trace:
[  126.125266][ T7047]  <TASK>
[  126.125276][ T7047]  __dump_stack+0x1d/0x30
[  126.125340][ T7047]  dump_stack_lvl+0xe8/0x140
[  126.125368][ T7047]  dump_stack+0x15/0x1b
[  126.125487][ T7047]  should_fail_ex+0x265/0x280
[  126.125619][ T7047]  ? __pfx_ip6_dst_gc+0x10/0x10
[  126.125654][ T7047]  should_failslab+0x8c/0xb0
[  126.125698][ T7047]  kmem_cache_alloc_noprof+0x50/0x310
[  126.125737][ T7047]  ? dst_alloc+0xbd/0x100
[  126.125782][ T7047]  ? __pfx_ip6_dst_gc+0x10/0x10
[  126.125836][ T7047]  dst_alloc+0xbd/0x100
[  126.125883][ T7047]  ip6_pol_route+0x6bf/0xb40
[  126.125919][ T7047]  ? ip6_pol_route+0x389/0xb40
[  126.125960][ T7047]  ip6_pol_route_input+0x42/0x60
[  126.126018][ T7047]  ? __pfx_ip6_pol_route_input+0x10/0x10
[  126.126056][ T7047]  fib6_rule_lookup+0x32c/0x470
[  126.126111][ T7047]  ? __pfx_ip6_pol_route_input+0x10/0x10
[  126.126186][ T7047]  ? ipv6_ext_hdr+0x5d/0x80
[  126.126211][ T7047]  ? nf_ct_frag6_gather+0x22e/0x10c0
[  126.126243][ T7047]  ip6_route_input+0x412/0x4e0
[  126.126295][ T7047]  ip6_rcv_finish+0x1c1/0x340
[  126.126401][ T7047]  ipv6_rcv+0x72/0x150
[  126.126427][ T7047]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  126.126469][ T7047]  __netif_receive_skb+0x9e/0x270
[  126.126502][ T7047]  ? tun_rx_batched+0xc7/0x430
[  126.126542][ T7047]  netif_receive_skb+0x4b/0x2e0
[  126.126630][ T7047]  ? tun_rx_batched+0xc7/0x430
[  126.126671][ T7047]  tun_rx_batched+0xfc/0x430
[  126.126740][ T7047]  tun_get_user+0x1eb6/0x2680
[  126.126798][ T7047]  ? ref_tracker_alloc+0x1f2/0x2f0
[  126.126845][ T7047]  ? selinux_file_permission+0x1e4/0x320
[  126.126913][ T7047]  tun_chr_write_iter+0x15e/0x210
[  126.127002][ T7047]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  126.127036][ T7047]  vfs_write+0x4a0/0x8e0
[  126.127075][ T7047]  ksys_write+0xda/0x1a0
[  126.127118][ T7047]  __x64_sys_write+0x40/0x50
[  126.127148][ T7047]  x64_sys_call+0x27fe/0x2ff0
[  126.127175][ T7047]  do_syscall_64+0xd2/0x200
[  126.127288][ T7047]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  126.127320][ T7047]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  126.127348][ T7047]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.127376][ T7047] RIP: 0033:0x7f908db9d69f
[  126.127425][ T7047] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  126.127449][ T7047] RSP: 002b:00007f908c5ff000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  126.127473][ T7047] RAX: ffffffffffffffda RBX: 00007f908ddc5fa0 RCX: 00007f908db9d69f
[  126.127489][ T7047] RDX: 0000000000000f87 RSI: 0000200000001180 RDI: 00000000000000c8
[  126.127506][ T7047] RBP: 00007f908c5ff090 R08: 0000000000000000 R09: 0000000000000000
[  126.127521][ T7047] R10: 0000000000000f87 R11: 0000000000000293 R12: 0000000000000001
[  126.127537][ T7047] R13: 00007f908ddc6038 R14: 00007f908ddc5fa0 R15: 00007ffc65356b08
[  126.127589][ T7047]  </TASK>
[  126.294592][ T7053] 9pnet: Could not find request transport: f
[  126.304312][ T7044] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  126.449025][ T1836] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  126.460027][ T1836] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  126.487983][ T1836] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  126.522164][ T1836] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  126.594455][ T7066] loop2: detected capacity change from 0 to 1024
[  126.617783][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1169'.
[  126.631870][ T7066] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.639953][ T7075] team_slave_0: entered promiscuous mode
[  126.648088][ T7075] team_slave_1: entered promiscuous mode
[  126.660707][ T7075] macsec1: entered promiscuous mode
[  126.666013][ T7075] team0: entered promiscuous mode
[  126.671506][ T7075] macsec1: entered allmulticast mode
[  126.677039][ T7075] team0: entered allmulticast mode
[  126.682234][ T7075] team_slave_0: entered allmulticast mode
[  126.688116][ T7075] team_slave_1: entered allmulticast mode
[  126.697789][ T7075] team0: Device macsec1 is already an upper device of the team interface
[  126.706853][ T7075] team0: left allmulticast mode
[  126.711792][ T7075] team_slave_0: left allmulticast mode
[  126.717362][ T7075] team_slave_1: left allmulticast mode
[  126.722886][ T7075] team0: left promiscuous mode
[  126.727950][ T7075] team_slave_0: left promiscuous mode
[  126.733391][ T7075] team_slave_1: left promiscuous mode
[  126.758318][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1174'.
[  126.774952][ T7086] team_slave_0: entered promiscuous mode
[  126.780637][ T7086] team_slave_1: entered promiscuous mode
[  126.788713][ T7086] macsec1: entered promiscuous mode
[  126.794042][ T7086] team0: entered promiscuous mode
[  126.799329][ T7086] macsec1: entered allmulticast mode
[  126.804676][ T7086] team0: entered allmulticast mode
[  126.809820][ T7086] team_slave_0: entered allmulticast mode
[  126.815613][ T7086] team_slave_1: entered allmulticast mode
[  126.823140][ T7086] team0: Device macsec1 is already an upper device of the team interface
[  126.843739][ T7091] loop2: detected capacity change from 0 to 1024
[  126.850256][ T7086] team0: left allmulticast mode
[  126.851685][ T7091] EXT4-fs: Ignoring removed nomblk_io_submit option
[  126.855218][ T7086] team_slave_0: left allmulticast mode
[  126.867285][ T7086] team_slave_1: left allmulticast mode
[  126.872957][ T7086] team0: left promiscuous mode
[  126.878337][ T7086] team_slave_0: left promiscuous mode
[  126.883788][ T7086] team_slave_1: left promiscuous mode
[  126.909014][ T7093] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  126.928840][ T7093] FAULT_INJECTION: forcing a failure.
[  126.928840][ T7093] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  126.942129][ T7093] CPU: 1 UID: 0 PID: 7093 Comm: syz.0.1179 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  126.942230][ T7093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  126.942243][ T7093] Call Trace:
[  126.942248][ T7093]  <TASK>
[  126.942256][ T7093]  __dump_stack+0x1d/0x30
[  126.942283][ T7093]  dump_stack_lvl+0xe8/0x140
[  126.942306][ T7093]  dump_stack+0x15/0x1b
[  126.942331][ T7093]  should_fail_ex+0x265/0x280
[  126.942411][ T7093]  should_fail+0xb/0x20
[  126.942501][ T7093]  should_fail_usercopy+0x1a/0x20
[  126.942526][ T7093]  _copy_from_user+0x1c/0xb0
[  126.942558][ T7093]  memdup_user+0x5e/0xd0
[  126.942638][ T7093]  strndup_user+0x68/0xb0
[  126.942686][ T7093]  __se_sys_mount+0x4d/0x2e0
[  126.942709][ T7093]  ? __bpf_trace_sys_enter+0x10/0x30
[  126.942734][ T7093]  ? __traceiter_sys_enter+0x5c/0x80
[  126.942761][ T7093]  ? trace_sys_enter+0xd0/0xf0
[  126.942832][ T7093]  __x64_sys_mount+0x67/0x80
[  126.942862][ T7093]  x64_sys_call+0x2b4d/0x2ff0
[  126.942889][ T7093]  do_syscall_64+0xd2/0x200
[  126.942917][ T7093]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  126.942986][ T7093]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  126.943008][ T7093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.943030][ T7093] RIP: 0033:0x7f146cc3ebe9
[  126.943048][ T7093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  126.943071][ T7093] RSP: 002b:00007f146b6a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  126.943106][ T7093] RAX: ffffffffffffffda RBX: 00007f146ce65fa0 RCX: 00007f146cc3ebe9
[  126.943122][ T7093] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000
[  126.943138][ T7093] RBP: 00007f146b6a7090 R08: 0000200000000400 R09: 0000000000000000
[  126.943154][ T7093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  126.943168][ T7093] R13: 00007f146ce66038 R14: 00007f146ce65fa0 R15: 00007ffc48d16f88
[  126.943190][ T7093]  </TASK>
[  127.287842][ T7101] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  127.296547][ T3933] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  127.305512][ T3933] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  127.316948][ T7101] 8021q: adding VLAN 0 to HW filter on device bond2
[  127.326372][ T3933] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  127.335773][ T3933] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  127.412520][ T7110] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  127.421178][   T56] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  127.433163][ T7110] 8021q: adding VLAN 0 to HW filter on device bond1
[  127.441893][   T56] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  127.442360][ T7110] FAULT_INJECTION: forcing a failure.
[  127.442360][ T7110] name failslab, interval 1, probability 0, space 0, times 0
[  127.463387][ T7110] CPU: 1 UID: 0 PID: 7110 Comm: syz.4.1185 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  127.463467][ T7110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  127.463483][ T7110] Call Trace:
[  127.463490][ T7110]  <TASK>
[  127.463499][ T7110]  __dump_stack+0x1d/0x30
[  127.463526][ T7110]  dump_stack_lvl+0xe8/0x140
[  127.463553][ T7110]  dump_stack+0x15/0x1b
[  127.463569][ T7110]  should_fail_ex+0x265/0x280
[  127.463622][ T7110]  should_failslab+0x8c/0xb0
[  127.463655][ T7110]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  127.463690][ T7110]  ? sidtab_sid2str_get+0xa0/0x130
[  127.463726][ T7110]  kmemdup_noprof+0x2b/0x70
[  127.463791][ T7110]  sidtab_sid2str_get+0xa0/0x130
[  127.463836][ T7110]  security_sid_to_context_core+0x1eb/0x2e0
[  127.463926][ T7110]  security_sid_to_context+0x27/0x40
[  127.464004][ T7110]  selinux_lsmprop_to_secctx+0x67/0xf0
[  127.464044][ T7110]  security_lsmprop_to_secctx+0x43/0x80
[  127.464094][   T56] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  127.464114][ T7110]  audit_log_task_context+0x77/0x190
[  127.464168][ T7110]  audit_log_task+0xf4/0x250
[  127.464211][ T7110]  audit_seccomp+0x61/0x100
[  127.464256][ T7110]  ? __seccomp_filter+0x68c/0x10d0
[  127.464287][ T7110]  __seccomp_filter+0x69d/0x10d0
[  127.464366][ T7110]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  127.464406][ T7110]  ? vfs_write+0x75e/0x8e0
[  127.464443][ T7110]  __secure_computing+0x82/0x150
[  127.464472][ T7110]  syscall_trace_enter+0xcf/0x1e0
[  127.464514][ T7110]  do_syscall_64+0xac/0x200
[  127.464549][ T7110]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  127.464583][ T7110]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  127.464614][ T7110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.464719][ T7110] RIP: 0033:0x7fce0f43ebe9
[  127.464740][ T7110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.464767][ T7110] RSP: 002b:00007fce0de9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  127.464793][ T7110] RAX: ffffffffffffffda RBX: 00007fce0f665fa0 RCX: 00007fce0f43ebe9
[  127.464809][ T7110] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 000000000000000b
[  127.464843][ T7110] RBP: 00007fce0de9f090 R08: 0000000000000000 R09: 0000000000000000
[  127.464860][ T7110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.464877][ T7110] R13: 00007fce0f666038 R14: 00007fce0f665fa0 R15: 00007fffa356d148
[  127.464904][ T7110]  </TASK>
[  127.721503][   T56] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  127.786798][ T7118] __nla_validate_parse: 2 callbacks suppressed
[  127.786886][ T7118] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1188'.
[  127.838276][ T7122] loop3: detected capacity change from 0 to 2048
[  127.858895][ T7129] loop4: detected capacity change from 0 to 128
[  127.865455][ T7128] loop2: detected capacity change from 0 to 512
[  127.873848][ T7128] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  127.883826][ T7128] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  127.963842][ T7132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1192'.
[  127.975319][ T7129] ext4 filesystem being mounted at /211/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  127.990580][ T7132] 9pnet_virtio: no channels available for device ./file0
[  128.011182][ T7135] 9pnet: Could not find request transport: f
[  128.045324][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1194'.
[  128.065600][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1194'.
[  128.075783][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1194'.
[  128.273159][ T7158] loop0: detected capacity change from 0 to 1024
[  128.364830][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1204'.
[  128.395725][ T7168] FAULT_INJECTION: forcing a failure.
[  128.395725][ T7168] name failslab, interval 1, probability 0, space 0, times 0
[  128.408603][ T7168] CPU: 1 UID: 0 PID: 7168 Comm: syz.0.1205 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  128.408640][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  128.408656][ T7168] Call Trace:
[  128.408664][ T7168]  <TASK>
[  128.408751][ T7168]  __dump_stack+0x1d/0x30
[  128.408779][ T7168]  dump_stack_lvl+0xe8/0x140
[  128.408841][ T7168]  dump_stack+0x15/0x1b
[  128.408922][ T7168]  should_fail_ex+0x265/0x280
[  128.408967][ T7168]  should_failslab+0x8c/0xb0
[  128.409001][ T7168]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  128.409076][ T7168]  ? sidtab_sid2str_get+0xa0/0x130
[  128.409120][ T7168]  kmemdup_noprof+0x2b/0x70
[  128.409156][ T7168]  sidtab_sid2str_get+0xa0/0x130
[  128.409241][ T7168]  security_sid_to_context_core+0x1eb/0x2e0
[  128.409288][ T7168]  security_sid_to_context+0x27/0x40
[  128.409346][ T7168]  selinux_lsmprop_to_secctx+0x67/0xf0
[  128.409481][ T7168]  security_lsmprop_to_secctx+0x43/0x80
[  128.409504][ T7168]  audit_log_task_context+0x77/0x190
[  128.409535][ T7168]  audit_log_task+0xf4/0x250
[  128.409607][ T7168]  audit_seccomp+0x61/0x100
[  128.409641][ T7168]  ? __seccomp_filter+0x68c/0x10d0
[  128.409667][ T7168]  __seccomp_filter+0x69d/0x10d0
[  128.409697][ T7168]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  128.409781][ T7168]  ? vfs_write+0x75e/0x8e0
[  128.409805][ T7168]  ? __rcu_read_unlock+0x4f/0x70
[  128.409833][ T7168]  ? __fget_files+0x184/0x1c0
[  128.409864][ T7168]  __secure_computing+0x82/0x150
[  128.409892][ T7168]  syscall_trace_enter+0xcf/0x1e0
[  128.409934][ T7168]  do_syscall_64+0xac/0x200
[  128.410059][ T7168]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  128.410080][ T7168]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  128.410099][ T7168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.410117][ T7168] RIP: 0033:0x7f146cc3ebe9
[  128.410130][ T7168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.410206][ T7168] RSP: 002b:00007f146b6a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba
[  128.410223][ T7168] RAX: ffffffffffffffda RBX: 00007f146ce65fa0 RCX: 00007f146cc3ebe9
[  128.410234][ T7168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff
[  128.410294][ T7168] RBP: 00007f146b6a7090 R08: 0000000000000000 R09: 0000000000000000
[  128.410305][ T7168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.410316][ T7168] R13: 00007f146ce66038 R14: 00007f146ce65fa0 R15: 00007ffc48d16f88
[  128.410333][ T7168]  </TASK>
[  128.699406][ T7170] 9pnet: Could not find request transport: f
[  128.790551][ T7183] loop4: detected capacity change from 0 to 512
[  128.799144][ T7183] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1212: casefold flag without casefold feature
[  128.813915][ T7183] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1212: couldn't read orphan inode 15 (err -117)
[  128.834344][ T7186] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  128.963285][ T7186] loop0: detected capacity change from 0 to 1756
[  129.066380][ T7199] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  129.105211][ T7206] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  129.193377][ T7221] loop1: detected capacity change from 0 to 1756
[  129.244534][ T7225] loop3: detected capacity change from 0 to 1756
[  129.318226][ T7209] chnl_net:caif_netlink_parms(): no params data found
[  129.354200][ T7209] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.361279][ T7209] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.368668][ T7209] bridge_slave_0: entered allmulticast mode
[  129.376907][ T7209] bridge_slave_0: entered promiscuous mode
[  129.383789][ T7209] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.390907][ T7209] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.398205][ T7209] bridge_slave_1: entered allmulticast mode
[  129.404846][ T7209] bridge_slave_1: entered promiscuous mode
[  129.423090][ T7209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.433485][ T7209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.455948][ T7209] team0: Port device team_slave_0 added
[  129.462841][ T7209] team0: Port device team_slave_1 added
[  129.478875][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.485847][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.511853][ T7209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.523140][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.530152][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.556126][ T7209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  129.581285][ T7209] hsr_slave_0: entered promiscuous mode
[  129.587354][ T7209] hsr_slave_1: entered promiscuous mode
[  129.593308][ T7209] debugfs: 'hsr0' already exists in 'hsr'
[  129.599036][ T7209] Cannot create hsr debugfs directory
[  129.636187][   T29] kauditd_printk_skb: 534 callbacks suppressed
[  129.636204][   T29] audit: type=1326 audit(1754645721.293:7422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  129.669292][   T29] audit: type=1326 audit(1754645721.333:7423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  129.684035][ T7233] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1223'.
[  129.692725][   T29] audit: type=1326 audit(1754645721.333:7424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  129.692761][   T29] audit: type=1326 audit(1754645721.333:7425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  129.730342][ T7209] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  129.748663][   T29] audit: type=1326 audit(1754645721.333:7426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  129.778790][   T29] audit: type=1326 audit(1754645721.333:7427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  129.802264][   T29] audit: type=1326 audit(1754645721.333:7428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  129.825729][   T29] audit: type=1326 audit(1754645721.333:7429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  129.849221][   T29] audit: type=1326 audit(1754645721.333:7430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  129.873028][   T29] audit: type=1326 audit(1754645721.333:7431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146cc3ebe9 code=0x7ffc0000
[  129.899102][ T7209] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  129.913993][ T7209] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  129.935242][ T7209] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  129.962316][ T7244] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1226'.
[  129.988166][ T7209] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.995264][ T7209] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.002722][ T7209] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.009843][ T7209] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.030939][ T7253] loop0: detected capacity change from 0 to 128
[  130.053932][ T7258] FAULT_INJECTION: forcing a failure.
[  130.053932][ T7258] name failslab, interval 1, probability 0, space 0, times 0
[  130.054250][ T7253] ext4 filesystem being mounted at /259/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  130.066625][ T7258] CPU: 0 UID: 0 PID: 7258 Comm: syz.2.1228 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  130.066700][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  130.066719][ T7258] Call Trace:
[  130.066737][ T7258]  <TASK>
[  130.066749][ T7258]  __dump_stack+0x1d/0x30
[  130.066795][ T7258]  dump_stack_lvl+0xe8/0x140
[  130.066845][ T7258]  dump_stack+0x15/0x1b
[  130.066869][ T7258]  should_fail_ex+0x265/0x280
[  130.066915][ T7258]  should_failslab+0x8c/0xb0
[  130.066950][ T7258]  kmem_cache_alloc_lru_noprof+0x55/0x310
[  130.067041][ T7258]  ? __d_alloc+0x3d/0x340
[  130.067083][ T7258]  __d_alloc+0x3d/0x340
[  130.067119][ T7258]  ? alloc_fd+0x22e/0x3c0
[  130.067153][ T7258]  d_alloc_pseudo+0x1e/0x80
[  130.067194][ T7258]  alloc_file_pseudo+0x71/0x160
[  130.067240][ T7258]  anon_inode_getfd+0xc1/0x150
[  130.067356][ T7258]  do_inotify_init+0x220/0x270
[  130.067391][ T7258]  __ia32_sys_inotify_init+0x10/0x20
[  130.067455][ T7258]  x64_sys_call+0x2e70/0x2ff0
[  130.067484][ T7258]  do_syscall_64+0xd2/0x200
[  130.067570][ T7258]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  130.067604][ T7258]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  130.067634][ T7258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.067665][ T7258] RIP: 0033:0x7f147291ebe9
[  130.067685][ T7258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.067768][ T7258] RSP: 002b:00007f1471387038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd
[  130.067838][ T7258] RAX: ffffffffffffffda RBX: 00007f1472b45fa0 RCX: 00007f147291ebe9
[  130.067855][ T7258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  130.067872][ T7258] RBP: 00007f1471387090 R08: 0000000000000000 R09: 0000000000000000
[  130.067889][ T7258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  130.067960][ T7258] R13: 00007f1472b46038 R14: 00007f1472b45fa0 R15: 00007ffdd393b8f8
[  130.068031][ T7258]  </TASK>
[  130.100806][ T7209] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.308415][ T3933] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.318031][ T3933] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.347534][ T7209] 8021q: adding VLAN 0 to HW filter on device team0
[  130.362076][ T7263] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  130.378775][ T7209] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  130.389278][ T7209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  130.421657][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.428932][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.443343][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.450464][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.530304][ T7209] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.569498][ T7289] netlink: 'syz.1.1232': attribute type 3 has an invalid length.
[  130.616569][ T7294] loop1: detected capacity change from 0 to 2048
[  130.645065][ T7294] EXT4-fs mount: 27 callbacks suppressed
[  130.645087][ T7294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.708491][ T7209] veth0_vlan: entered promiscuous mode
[  130.717592][ T7209] veth1_vlan: entered promiscuous mode
[  130.741098][ T7209] veth0_macvtap: entered promiscuous mode
[  130.749901][ T7209] veth1_macvtap: entered promiscuous mode
[  130.762190][ T7209] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.773435][ T7209] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.795802][   T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.814613][ T7304] loop3: detected capacity change from 0 to 256
[  130.816184][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.833853][   T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.856680][ T3308] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  130.862486][   T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.890464][   T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.981113][ T7315] FAULT_INJECTION: forcing a failure.
[  130.981113][ T7315] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  130.994310][ T7315] CPU: 1 UID: 0 PID: 7315 Comm: syz.1.1234 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  130.994417][ T7315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  130.994429][ T7315] Call Trace:
[  130.994435][ T7315]  <TASK>
[  130.994442][ T7315]  __dump_stack+0x1d/0x30
[  130.994463][ T7315]  dump_stack_lvl+0xe8/0x140
[  130.994548][ T7315]  dump_stack+0x15/0x1b
[  130.994567][ T7315]  should_fail_ex+0x265/0x280
[  130.994611][ T7315]  should_fail+0xb/0x20
[  130.994649][ T7315]  should_fail_usercopy+0x1a/0x20
[  130.994736][ T7315]  _copy_from_iter+0xcf/0xe40
[  130.994758][ T7315]  ? __build_skb_around+0x1a0/0x200
[  130.994798][ T7315]  ? __alloc_skb+0x223/0x320
[  130.994960][ T7315]  netlink_sendmsg+0x471/0x6b0
[  130.994997][ T7315]  ? __pfx_netlink_sendmsg+0x10/0x10
[  130.995164][ T7315]  __sock_sendmsg+0x142/0x180
[  130.995189][ T7315]  ____sys_sendmsg+0x31e/0x4e0
[  130.995250][ T7315]  ___sys_sendmsg+0x17b/0x1d0
[  130.995355][ T7315]  __x64_sys_sendmsg+0xd4/0x160
[  130.995401][ T7315]  x64_sys_call+0x191e/0x2ff0
[  130.995422][ T7315]  do_syscall_64+0xd2/0x200
[  130.995484][ T7315]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  130.995515][ T7315]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  130.995542][ T7315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.995563][ T7315] RIP: 0033:0x7f7ac432ebe9
[  130.995632][ T7315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.995659][ T7315] RSP: 002b:00007f7ac2d76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  130.995687][ T7315] RAX: ffffffffffffffda RBX: 00007f7ac4556090 RCX: 00007f7ac432ebe9
[  130.995735][ T7315] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 000000000000000c
[  130.995754][ T7315] RBP: 00007f7ac2d76090 R08: 0000000000000000 R09: 0000000000000000
[  130.995769][ T7315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  130.995780][ T7315] R13: 00007f7ac4556128 R14: 00007f7ac4556090 R15: 00007ffe41057508
[  130.995798][ T7315]  </TASK>
[  131.209997][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1218'.
[  131.223447][ T7317] team_slave_0: entered promiscuous mode
[  131.229326][ T7317] team_slave_1: entered promiscuous mode
[  131.235584][ T7317] macsec1: entered promiscuous mode
[  131.241050][ T7317] team0: entered promiscuous mode
[  131.246698][ T7317] macsec1: entered allmulticast mode
[  131.252256][ T7317] team0: entered allmulticast mode
[  131.257725][ T7317] team_slave_0: entered allmulticast mode
[  131.263683][ T7317] team_slave_1: entered allmulticast mode
[  131.273938][ T7317] team0: Device macsec1 is already an upper device of the team interface
[  131.275327][ T7319] 9pnet: Could not find request transport: f
[  131.291839][ T7317] team0: left allmulticast mode
[  131.296912][ T7317] team_slave_0: left allmulticast mode
[  131.302666][ T7317] team_slave_1: left allmulticast mode
[  131.308345][ T7317] team0: left promiscuous mode
[  131.313692][ T7317] team_slave_0: left promiscuous mode
[  131.319301][ T7317] team_slave_1: left promiscuous mode
[  131.467601][ T7331] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  131.587560][ T7331] loop2: detected capacity change from 0 to 1756
[  131.730432][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1242'.
[  131.746273][ T7337] macsec1: entered promiscuous mode
[  131.751614][ T7337] team0: entered promiscuous mode
[  131.756670][ T7337] team_slave_0: entered promiscuous mode
[  131.762653][ T7337] team_slave_1: entered promiscuous mode
[  131.768527][ T7337] macsec1: entered allmulticast mode
[  131.778912][ T7337] team0: Device macsec1 is already an upper device of the team interface
[  131.795979][ T7337] team0: left promiscuous mode
[  131.800929][ T7337] team_slave_0: left promiscuous mode
[  131.806639][ T7337] team_slave_1: left promiscuous mode
[  131.814985][ T7344] FAULT_INJECTION: forcing a failure.
[  131.814985][ T7344] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  131.828115][ T7344] CPU: 0 UID: 0 PID: 7344 Comm: syz.5.1245 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  131.828183][ T7344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  131.828199][ T7344] Call Trace:
[  131.828207][ T7344]  <TASK>
[  131.828215][ T7344]  __dump_stack+0x1d/0x30
[  131.828242][ T7344]  dump_stack_lvl+0xe8/0x140
[  131.828268][ T7344]  dump_stack+0x15/0x1b
[  131.828349][ T7344]  should_fail_ex+0x265/0x280
[  131.828435][ T7344]  should_fail+0xb/0x20
[  131.828475][ T7344]  should_fail_usercopy+0x1a/0x20
[  131.828501][ T7344]  _copy_from_iter+0xcf/0xe40
[  131.828540][ T7344]  ? __build_skb_around+0x1a0/0x200
[  131.828579][ T7344]  ? __alloc_skb+0x223/0x320
[  131.828677][ T7344]  netlink_sendmsg+0x471/0x6b0
[  131.828797][ T7344]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.828843][ T7344]  __sock_sendmsg+0x142/0x180
[  131.828884][ T7344]  ____sys_sendmsg+0x31e/0x4e0
[  131.828974][ T7344]  ___sys_sendmsg+0x17b/0x1d0
[  131.829097][ T7344]  __x64_sys_sendmsg+0xd4/0x160
[  131.829240][ T7344]  x64_sys_call+0x191e/0x2ff0
[  131.829269][ T7344]  do_syscall_64+0xd2/0x200
[  131.829302][ T7344]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  131.829330][ T7344]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  131.829361][ T7344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.829443][ T7344] RIP: 0033:0x7f3cac9aebe9
[  131.829463][ T7344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.829485][ T7344] RSP: 002b:00007f3cab40f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  131.829517][ T7344] RAX: ffffffffffffffda RBX: 00007f3cacbd5fa0 RCX: 00007f3cac9aebe9
[  131.829533][ T7344] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[  131.829549][ T7344] RBP: 00007f3cab40f090 R08: 0000000000000000 R09: 0000000000000000
[  131.829565][ T7344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.829577][ T7344] R13: 00007f3cacbd6038 R14: 00007f3cacbd5fa0 R15: 00007fff1a72de18
[  131.829612][ T7344]  </TASK>
[  132.098840][ T7351] loop3: detected capacity change from 0 to 128
[  132.112104][ T7351] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  132.139991][ T7351] ext4 filesystem being mounted at /270/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  132.339704][ T7356] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  132.463786][ T7356] loop2: detected capacity change from 0 to 1756
[  132.588623][ T7362] 9pnet: Could not find request transport: f
[  132.660004][ T7365] loop0: detected capacity change from 0 to 1024
[  132.684516][ T7365] EXT4-fs: Ignoring removed nomblk_io_submit option
[  132.706037][ T7365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.746232][ T7372] loop1: detected capacity change from 0 to 256
[  132.791083][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  132.956559][ T7380] loop3: detected capacity change from 0 to 512
[  132.979198][ T7382] loop5: detected capacity change from 0 to 512
[  132.987639][ T7380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.994443][ T7382] netlink: 'syz.5.1257': attribute type 15 has an invalid length.
[  133.002878][ T7380] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.029268][ T7380] EXT4-fs error (device loop3): ext4_empty_dir:3081: inode #12: comm syz.3.1256: invalid size
[  133.039852][ T7380] EXT4-fs (loop3): Remounting filesystem read-only
[  133.044829][ T7382] __nla_validate_parse: 1 callbacks suppressed
[  133.044848][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1257'.
[  133.076229][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.085474][ T3933] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  133.131116][ T7387] 9pnet: Could not find request transport: f
[  133.166734][ T7390] 9pnet: Could not find request transport: f
[  133.519770][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.584323][ T7407] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1264'.
[  133.642217][ T7412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1268'.
[  133.651445][ T7413] loop2: detected capacity change from 0 to 128
[  133.680361][ T7413] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  133.704800][ T7413] ext4 filesystem being mounted at /263/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  133.741125][ T7415] sd 0:0:1:0: device reset
[  133.833232][ T7422] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  133.975696][ T7422] loop1: detected capacity change from 0 to 1756
[  134.078440][ T7427] loop3: detected capacity change from 0 to 2048
[  134.228975][ T7427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.349995][ T7435] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1274'.
[  134.383139][ T7435] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.390703][ T7435] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.436713][ T7435] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.444204][ T7435] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.452952][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  134.475002][ T7437] FAULT_INJECTION: forcing a failure.
[  134.475002][ T7437] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  134.488109][ T7437] CPU: 0 UID: 0 PID: 7437 Comm: syz.2.1275 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  134.488211][ T7437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  134.488272][ T7437] Call Trace:
[  134.488280][ T7437]  <TASK>
[  134.488289][ T7437]  __dump_stack+0x1d/0x30
[  134.488316][ T7437]  dump_stack_lvl+0xe8/0x140
[  134.488345][ T7437]  dump_stack+0x15/0x1b
[  134.488443][ T7437]  should_fail_ex+0x265/0x280
[  134.488491][ T7437]  should_fail+0xb/0x20
[  134.488591][ T7437]  should_fail_usercopy+0x1a/0x20
[  134.488613][ T7437]  _copy_from_user+0x1c/0xb0
[  134.488648][ T7437]  memdup_user+0x5e/0xd0
[  134.488730][ T7437]  autofs_dev_ioctl+0x167/0x6a0
[  134.488758][ T7437]  ? __pfx_autofs_dev_ioctl+0x10/0x10
[  134.488789][ T7437]  __se_sys_ioctl+0xcb/0x140
[  134.488835][ T7437]  __x64_sys_ioctl+0x43/0x50
[  134.488903][ T7437]  x64_sys_call+0x1816/0x2ff0
[  134.488930][ T7437]  do_syscall_64+0xd2/0x200
[  134.488971][ T7437]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  134.489003][ T7437]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  134.489034][ T7437]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.489059][ T7437] RIP: 0033:0x7f147291ebe9
[  134.489077][ T7437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.489162][ T7437] RSP: 002b:00007f1471387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  134.489182][ T7437] RAX: ffffffffffffffda RBX: 00007f1472b45fa0 RCX: 00007f147291ebe9
[  134.489195][ T7437] RDX: 0000200000000380 RSI: 00000000c018937e RDI: 0000000000000003
[  134.489207][ T7437] RBP: 00007f1471387090 R08: 0000000000000000 R09: 0000000000000000
[  134.489222][ T7437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.489236][ T7437] R13: 00007f1472b46038 R14: 00007f1472b45fa0 R15: 00007ffdd393b8f8
[  134.489262][ T7437]  </TASK>
[  134.718171][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.773365][ T7441] FAULT_INJECTION: forcing a failure.
[  134.773365][ T7441] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  134.786613][ T7441] CPU: 1 UID: 0 PID: 7441 Comm: syz.2.1277 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  134.786680][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  134.786694][ T7441] Call Trace:
[  134.786701][ T7441]  <TASK>
[  134.786711][ T7441]  __dump_stack+0x1d/0x30
[  134.786738][ T7441]  dump_stack_lvl+0xe8/0x140
[  134.786823][ T7441]  dump_stack+0x15/0x1b
[  134.786844][ T7441]  should_fail_ex+0x265/0x280
[  134.786888][ T7441]  should_fail+0xb/0x20
[  134.786922][ T7441]  should_fail_usercopy+0x1a/0x20
[  134.786941][ T7441]  _copy_from_iter+0xcf/0xe40
[  134.787039][ T7441]  ? __build_skb_around+0x1a0/0x200
[  134.787078][ T7441]  ? __alloc_skb+0x223/0x320
[  134.787119][ T7441]  netlink_sendmsg+0x471/0x6b0
[  134.787212][ T7441]  ? __pfx_netlink_sendmsg+0x10/0x10
[  134.787253][ T7441]  __sock_sendmsg+0x142/0x180
[  134.787337][ T7441]  ____sys_sendmsg+0x31e/0x4e0
[  134.787385][ T7441]  ___sys_sendmsg+0x17b/0x1d0
[  134.787461][ T7441]  __x64_sys_sendmsg+0xd4/0x160
[  134.787519][ T7441]  x64_sys_call+0x191e/0x2ff0
[  134.787688][ T7441]  do_syscall_64+0xd2/0x200
[  134.787721][ T7441]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  134.787753][ T7441]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  134.787782][ T7441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.787838][ T7441] RIP: 0033:0x7f147291ebe9
[  134.787857][ T7441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.787881][ T7441] RSP: 002b:00007f1471387038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  134.787906][ T7441] RAX: ffffffffffffffda RBX: 00007f1472b45fa0 RCX: 00007f147291ebe9
[  134.787923][ T7441] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000008
[  134.788013][ T7441] RBP: 00007f1471387090 R08: 0000000000000000 R09: 0000000000000000
[  134.788028][ T7441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.788099][ T7441] R13: 00007f1472b46038 R14: 00007f1472b45fa0 R15: 00007ffdd393b8f8
[  134.788123][ T7441]  </TASK>
[  135.048173][   T29] kauditd_printk_skb: 261 callbacks suppressed
[  135.048192][   T29] audit: type=1326 audit(1754645726.703:7691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.5.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cac9aebe9 code=0x7ffc0000
[  135.078200][   T29] audit: type=1326 audit(1754645726.703:7692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.5.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cac9aebe9 code=0x7ffc0000
[  135.101793][   T29] audit: type=1326 audit(1754645726.703:7693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.5.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cac9aebe9 code=0x7ffc0000
[  135.161372][   T29] audit: type=1326 audit(1754645726.813:7694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.5.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cac9aebe9 code=0x7ffc0000
[  135.184920][   T29] audit: type=1326 audit(1754645726.813:7695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.5.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cac9aebe9 code=0x7ffc0000
[  135.208466][   T29] audit: type=1326 audit(1754645726.813:7696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.5.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cac9aebe9 code=0x7ffc0000
[  135.232054][   T29] audit: type=1326 audit(1754645726.813:7697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.5.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cac9aebe9 code=0x7ffc0000
[  135.255603][   T29] audit: type=1326 audit(1754645726.813:7698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.5.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cac9aebe9 code=0x7ffc0000
[  135.336484][ T7457] loop1: detected capacity change from 0 to 2048
[  135.349267][   T29] audit: type=1326 audit(1754645726.823:7699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.5.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f3cac9aebe9 code=0x7ffc0000
[  135.372883][   T29] audit: type=1326 audit(1754645726.823:7700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.5.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cac9aebe9 code=0x7ffc0000
[  135.440286][ T7457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.620836][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.715748][ T7477] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  135.718768][ T7476] loop0: detected capacity change from 0 to 256
[  135.870093][ T7477] loop1: detected capacity change from 0 to 1756
[  136.025649][ T7482] 9pnet: Could not find request transport: f
[  136.063839][ T7482] loop3: detected capacity change from 0 to 1024
[  136.095039][ T7482] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  136.203402][ T7486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1292'.
[  136.218399][ T7487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1292'.
[  136.676798][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1297'.
[  136.708002][ T7522] loop0: detected capacity change from 0 to 2048
[  136.792039][ T2993] ==================================================================
[  136.800285][ T2993] BUG: KCSAN: data-race in dentry_unlink_inode / step_into
[  136.807529][ T2993] 
[  136.809880][ T2993] write to 0xffff88810c979c30 of 8 bytes by task 5231 on cpu 1:
[  136.817519][ T2993]  dentry_unlink_inode+0x65/0x260
[  136.822572][ T2993]  d_delete+0x164/0x180
[  136.826750][ T2993]  d_delete_notify+0x32/0x100
[  136.831453][ T2993]  vfs_unlink+0x30b/0x420
[  136.835860][ T2993]  do_unlinkat+0x24e/0x480
[  136.840288][ T2993]  __x64_sys_unlink+0x2e/0x40
[  136.844983][ T2993]  x64_sys_call+0x2dc0/0x2ff0
[  136.849678][ T2993]  do_syscall_64+0xd2/0x200
[  136.854204][ T2993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.860133][ T2993] 
[  136.862479][ T2993] read to 0xffff88810c979c30 of 8 bytes by task 2993 on cpu 0:
[  136.870048][ T2993]  step_into+0x122/0x820
[  136.874315][ T2993]  walk_component+0x162/0x220
[  136.879009][ T2993]  path_lookupat+0xfe/0x2a0
[  136.883546][ T2993]  filename_lookup+0x147/0x340
[  136.888352][ T2993]  do_readlinkat+0x7d/0x320
[  136.892909][ T2993]  __x64_sys_readlink+0x47/0x60
[  136.897815][ T2993]  x64_sys_call+0x28da/0x2ff0
[  136.902524][ T2993]  do_syscall_64+0xd2/0x200
[  136.907056][ T2993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.912972][ T2993] 
[  136.915299][ T2993] value changed: 0xffff888104656078 -> 0x0000000000000000
[  136.922417][ T2993] 
[  136.924753][ T2993] Reported by Kernel Concurrency Sanitizer on:
[  136.930920][ T2993] CPU: 0 UID: 0 PID: 2993 Comm: udevd Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  136.942656][ T2993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  136.952733][ T2993] ==================================================================
[  136.966537][ T7522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.190478][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.