last executing test programs:

3.935085113s ago: executing program 2 (id=1351):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
io_setup(0x2007, &(0x7f0000000980)=<r2=>0x0)
io_destroy(r2)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x18)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r9}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7, 0x80, 0x5, 0x9, {{0x9, 0x4, 0x3, 0x6, 0x24, 0x67, 0x0, 0xd, 0x2f, 0x0, @local, @loopback, {[@ssrr={0x89, 0xf, 0x4a, [@private, @empty, @rand_addr=0x64010100]}]}}}}})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r12 = semget$private(0x0, 0x20000000102, 0x0)
semop(r12, &(0x7f0000000240)=[{0x3, 0x800, 0x1800}, {0x0, 0xe65b}], 0x2)
semctl$SETALL(r12, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d])
sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r11, 0x1, 0x70bd28, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x13}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0)

3.084455842s ago: executing program 2 (id=1367):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4fa3176756113369df8b913f2c0f5bc12e941d00", 0x14}, {&(0x7f0000000180)="55c0cc0ba6f3b908ecb5c6e93e4dc70ed9c875dd444569fab05e32a08e71d1c480fa1ada9e6f952dea418e2eb2dd8dcdd18f82c2be42e92405d2eccae94e713594f13ebfe37be3cb7ce0eb237d63f25744e42baf027055a65359c121788ba610f7df23b902755c5771d93efedd8252aca1dda5efe1493ec0a5a9e965666d1afe33b384953a9102b3f1e446aea391ccff253fccc951d4091f1d6b69faee7e7d4b669c48b70ef01c3879af3f35e0682a49", 0xb0}, {&(0x7f00000002c0)="4b17746f0c2c20350492d7a09e5dc9648fbc15e2812f642ac2c20713a937013b9aad5bcc52d50571282c1891507b899bbdff0360237f4f24fce4ed425f64ce8355d10afb19676ebadb5263a703eb89a86177e52657b61e8a137c2700715e61c346f2b5f26b90fbcac74436f0e1fd984a631f1a586edf957be388deedfbcf72f9d875ef", 0x83}], 0x3}}], 0x1, 0x400c0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)

2.155948486s ago: executing program 2 (id=1379):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
io_setup(0x2007, &(0x7f0000000980)=<r2=>0x0)
io_destroy(r2)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x18)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r10 = semget$private(0x0, 0x20000000102, 0x0)
semop(r10, &(0x7f0000000240)=[{0x3, 0x800, 0x1800}, {0x0, 0xe65b}], 0x2)
semctl$SETALL(r10, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d])
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r9, 0x1, 0x70bd28, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x13}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0)

1.49033466s ago: executing program 3 (id=1386):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8000006)

1.444153354s ago: executing program 3 (id=1387):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00'})
bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r3}, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0), 0xa}, 0x1100, 0x5dd8, 0x800, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0x9, r5}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r6=>0x0})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='block_bio_remap\x00', r7}, 0x18)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00'})

1.292025486s ago: executing program 2 (id=1389):
getxattr(0x0, 0x0, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'})
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x3ff)
fcntl$setstatus(r2, 0x4, 0x7c00)
dup3(r3, r2, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000040))
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)

989.64315ms ago: executing program 2 (id=1391):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4fa3176756113369df8b913f2c0f5bc12e941d00", 0x14}, {&(0x7f0000000180)="55c0cc0ba6f3b908ecb5c6e93e4dc70ed9c875dd444569fab05e32a08e71d1c480fa1ada9e6f952dea418e2eb2dd8dcdd18f82c2be42e92405d2eccae94e713594f13ebfe37be3cb7ce0eb237d63f25744e42baf027055a65359c121788ba610f7df23b902755c5771d93efedd8252aca1dda5efe1493ec0a5a9e965666d1afe33b384953a9102b3f1e446aea391ccff253fccc951d4091f1d6b69faee7e7d4b669c48b70ef01c3879af3f35e0682a49", 0xb0}, {&(0x7f00000002c0)="4b17746f0c2c20350492d7a09e5dc9648fbc15e2812f642ac2c20713a937013b9aad5bcc52d50571282c1891507b899bbdff0360237f4f24fce4ed425f64ce8355d10afb19676ebadb5263a703eb89a86177e52657b61e8a137c2700715e61c346f2b5f26b90fbcac74436f0e1fd984a631f1a586edf957be388deedfbcf72f9d875ef", 0x83}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400c0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)

901.555807ms ago: executing program 1 (id=1393):
r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
r1 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0xec21, 0x80, 0x0, 0x40000331}, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x76960bb5)
write$evdev(0xffffffffffffffff, &(0x7f0000000640)=[{{0x77359400}, 0x1, 0x7f, 0x2}, {{}, 0x0, 0x0, 0x41}], 0x30)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x51})
io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES16], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='vlan0\x00', 0x10)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
ioctl$EVIOCGSW(r7, 0x8040451b, &(0x7f00000003c0)=""/113)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00'}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x7fff, 0xa)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

899.940467ms ago: executing program 3 (id=1394):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x600, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x25dfdaff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xae96, 0xe, 0xf, 0x4}]}}]}}]}, 0x44}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000ef7b3e69400012800c0001006d6163766c616e003000028008000300030000000800010010000000100005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa000008000500", @ANYRES64=r7], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8000006)
getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x10, 0x80, 0x4, 0x8, {{0xf, 0x4, 0x1, 0x0, 0x3c, 0x66, 0x0, 0xd, 0x4, 0x0, @broadcast, @local, {[@cipso={0x86, 0xa, 0x3, [{0x7, 0x4, "aa8d"}]}, @lsrr={0x83, 0x1b, 0xc9, [@loopback, @loopback, @multicast1, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200))
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5000000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="031500000010000008000a00", @ANYRES32=r9, @ANYBLOB="08000500", @ANYRES32=r9, @ANYBLOB="140012800b0001006d616373656300"], 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

871.95359ms ago: executing program 4 (id=1395):
r0 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280080000000000000008000900"], 0x44}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a", 0x23}], 0x1}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6023000800503afffe80000000000000000000003e94e36951bfab0000000000000000000000000187"], 0x0)

825.454784ms ago: executing program 4 (id=1396):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

732.120581ms ago: executing program 4 (id=1398):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x9, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x4, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x800000, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3af4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f0000000a80)="$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")
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
unshare(0x24060400)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$AUTOFS_IOC_FAIL(r8, 0x4c80, 0x7000000)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
r12 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r12, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4811}, 0x2008c014)
io_setup(0x202, &(0x7f0000000200)=<r13=>0x0)
io_submit(r13, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x4000, 0xa00}])
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0x2, 0x2}, 0x6)

664.895647ms ago: executing program 0 (id=1400):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c"], 0x8c}}, 0x0)

661.572217ms ago: executing program 3 (id=1401):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000ef7b3e69400012800c0001006d6163766c616e003000028008000300030000000800010010000000100005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa000008000500"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8000006)

648.122708ms ago: executing program 1 (id=1402):
r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
r1 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0xec21, 0x80, 0x0, 0x40000331}, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_open_dev$evdev(&(0x7f00000002c0), 0xc000, 0x142)
ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000080)=0x76960bb5)
write$evdev(r4, &(0x7f0000000640)=[{{0x77359400}, 0x1, 0x7f, 0x2}, {{}, 0x0, 0x0, 0x41}], 0x30)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x51})
io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES16], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r6}, 0x10)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='vlan0\x00', 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$EVIOCGSW(r9, 0x8040451b, &(0x7f00000003c0)=""/113)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r10}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x7fff, 0xa)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r11, &(0x7f0000000180), 0x0}, 0x20)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="53df2b000000000088907800000000ffffffff0e00907800041000002b00"/39], 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

645.688788ms ago: executing program 3 (id=1403):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0106000000000100000009000002240004"], 0x38}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
r3 = io_uring_setup(0x6cfd, &(0x7f0000000200)={0x0, 0x200023d4, 0x800, 0xfffffffc, 0x87})
r4 = signalfd(r3, &(0x7f0000000080), 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000001300)=[@in6={0xa, 0x4e24, 0x0, @loopback, 0x5}, @in6={0xa, 0x4e20, 0x7, @local, 0x8}, @in6={0xa, 0x4e24, 0x100, @local, 0x999}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e23, @multicast1}], 0x74)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, 0x0)
r5 = eventfd2(0xc, 0x80000)
io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000000)=r5, 0x1)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x7fffffff}, 0x1c)
read$eventfd(r5, &(0x7f0000000040), 0x8)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'sit0\x00'})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000003040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x3}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'})
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0)
ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000580)={0x0, 0x1, 0x0, 0x0, 0xc, "00629a7d82090100000000000000f7fffffb00"})
r9 = ioctl$TIOCGPTPEER(r8, 0x5441, 0x0)
r10 = dup3(r9, r8, 0x0)
ioctl$TIOCSTI(r10, 0x402c542c, &(0x7f0000000000)=0xff)

625.79965ms ago: executing program 0 (id=1404):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000000)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@data_writeback}, {@noauto_da_alloc}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) (async)
syz_open_procfs(0x0, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000000000000000000000000000181200000273592dbae663f0949508000000000000006127a4d9d419e83295f6db10039c67b3fe21c916874c6aa705119edaa228d711539376c6efbb7eaa0389f9c73bd9052031d2f489c971e61bd5b0bc9f6a8dc617d0cccd81f094cb5ba21b37f6d0edb70ec8281270c47277ccc1c0506dadc848ebdcf65c56141d2d58cfc05a29469145f98c42db4ad6acd13c3ea43630351ff81501cf64db58f179c6c1af74580909aab0ff3932b80368f972109ee7f76f6f21047cfec550e8ebd8cef1b9c61d01b952dd01", @ANYRES32=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000008400088080000080580009801c000080060001000200000008000200ac1414aa05000300020000001c0000800600010002000000080002007f00000105000300030000001c0000800600010002000000080002000a0101020500030020000000240001000000000000000000000000000000000000000000000000000000000000000000080005000100000014000200776731"], 0xb4}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
socket$isdn(0x22, 0x3, 0x2)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async, rerun: 32)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50b, &(0x7f0000000700)="$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") (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x150}}, 0x406c051)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x20000, 0x0, 'queue1\x00', 0x2})
write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) (async)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000180)={0x92, @time={0xffffff3f, 0x1000000}})

509.535669ms ago: executing program 4 (id=1405):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xb]}, &(0x7f0000000080), 0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000680))
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f00000004c0)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb07a9dbec07d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690d1049c884d79e243210c733da8adfb6db6f3b3464aca805a08f3cacf9bce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519bccdcfda872f503656169", @ANYRES16, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8ec44bbc8f22ca2298ce346671617bb371da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec8893fe5950104e7d7b43440fd107294cf00fe8000000000000", @ANYRESOCT], 0x1, 0x65b, &(0x7f00000007c0)="$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")
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000840)=ANY=[@ANYBLOB="640000001800010000000000000000001d0109004d000f"], 0x64}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x15, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
chmod(&(0x7f0000000340)='./file1\x00', 0x0)

496.80066ms ago: executing program 3 (id=1406):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=@reiserfs_2={0x8, 0x40000, {0xb}}, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xc}, 0x4, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c000000000801020000000000000000050000090900010073797a31000000000900010073797a3100000000060002408808000005000300840000000900010073797a31000000002400048008000b40ffffffff08000340000007ff0800094000000001080003400000000825757b9df733eacb8bf5b605d354354f0dbf8bdd41db05b2a88c37f0b571f823ab031e90950ecf28af6a447c9f44b9e3fca26a89a372e2464fc8adc115923a8aed1381a9eddd1342d90db6aa43a18adb"], 0x6c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x61, 0x35, 0x65, 0x38, 0x66, 0x38, 0x33, 0x32, 0x35, 0x39, 0x39, 0x35, 0x39, 0x33, 0x36, 0x32]}, &(0x7f0000000080)={0x0, "55bc9b7c03373bf98c5458779aa572d0c3c167dc65085296cd1403d0c870c9570917783f436a8c3c51e7bf5a8689e2713ca3863786d7dad1051b9d64c3c1cdde", 0x3a}, 0x48, 0xfffffffffffffff8)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000100)=@keyring={'key_or_keyring:', r6})
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
syz_clone(0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0)

493.5464ms ago: executing program 1 (id=1407):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000000009010800000000000000000000000008000540000000000900010073797a30000000003c0002002c00018014000300ff01000000000000000000000000000114000400fc0100000000000000000000000000000c00028005000100000000000c000480"], 0x70}}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_TIOCINQ(r3, 0x541b, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0xff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r7 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x100003c}, 0x18)
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0)
move_mount(r7, 0x0, r6, 0x0, 0x46)
close(r6)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRESHEX=r0, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000050017"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4080)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r6, 0xc, 0x0, 0x0)
r9 = dup3(r4, r4, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
truncate(&(0x7f0000000040)='./file2\x00', 0x8000c00)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000500)='mark_victim\x00', r9, 0x0, 0x4}, 0x18)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="400010003b0cdc7700000036d99118", @ANYRES32=r11, @ANYBLOB="0000000000620000200012800b00010065727370616e0000100002800400120006000f00ef210000"], 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0)
syz_open_dev$usbfs(&(0x7f0000000180), 0x8, 0x111200)

397.576188ms ago: executing program 4 (id=1408):
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x5}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX])

396.807738ms ago: executing program 0 (id=1409):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="d60a0000000000006111a000000000000000000095130000000000008ab0a9032cd3c3121b492845719f2e9be4e539c4ecb44035d38a74c4f82ae1cc1e2a19c1eba3b1a60e83239126cceaf9e021791f4e7b2dddf5eaaeff40f37d1430c777b87c40279f8dbfa04d87c43157f389af6a877ed4a0756becbb9ba46aaf4d0fda619c3e59c5696cd9a5d050dd59e8c765244fa339ce4c5efa40e4257cc07100a16917fad56852e5f40507a3622a63ad41ab8b94705b8ffcfa14016ef10e0985b72b8cdbcacb8ea14f454f2fd24f3be4270f9687c6"], 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x8, 0x0, 0x1, 0x0, 0x4, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8561a678639e49e4, @perf_bp={0x0, 0x4}, 0x109ba0, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
fchdir(0xffffffffffffffff)
syz_read_part_table(0x105e, &(0x7f0000000000)="$eJzsz71NA0EYBNC55eCO4FohoQMqICGhGbohoA96ISG3LFuftSf/dGA7eC9YjTSzWm24rZZtVT3Wb6WGJE/9+Gp5yZw8p62jt3FO5k1V1ZQh+e/33ntT0/64SS/aX6Y1f74Ou6rLM8vDKX2Py3n/8XO9jwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/ToEAAD//zfUF2I=")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r0 = inotify_init1(0x800)
inotify_add_watch(r0, 0x0, 0x8600037c)
setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
recvmmsg(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x140, 0x0)

362.100731ms ago: executing program 4 (id=1410):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
lsm_get_self_attr(0x66, &(0x7f00000002c0)={0x0, 0x0, 0x20}, &(0x7f0000000340)=0x20, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r3)
sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2640020}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x48, r4, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x1, 0x4, 0x2]}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0xc1)
write$UHID_INPUT(r3, &(0x7f0000000a00)={0x8, {"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", 0x1000}}, 0x1006)

325.558244ms ago: executing program 1 (id=1411):
r0 = creat(&(0x7f0000000240)='./file0\x00', 0x103)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
r1 = gettid()
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="06502ad6c3142cb2000000000000000000948e491a79b263c7000000"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x6, &(0x7f0000000740)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}, @generic={0x2, 0x9, 0x7, 0x4, 0x4}, @alu={0x4, 0x1, 0x9, 0x1, 0x1, 0xfffffffffffffffe, 0x8}, @alu={0x4, 0x0, 0x8, 0xa, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff0}, @ldst={0x1, 0x1, 0x6, 0x7, 0x9, 0xfffffffffffffffc, 0x8}], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000003080)=ANY=[@ANYRESHEX=r2, @ANYRES8=0x0, @ANYRES32, @ANYRESDEC=r0], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080), 0xc1, 0x7c0, &(0x7f0000000f80)="$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")
mkdir(&(0x7f0000000000)='./control\x00', 0x81)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00'}, 0x18)
open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
r7 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r3, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8)
dup2(r3, r4)
fcntl$setown(r3, 0x8, r1)
tkill(r1, 0x13)
socket$nl_netfilter(0x10, 0x3, 0xc)

177.032046ms ago: executing program 2 (id=1412):
r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
r1 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0xec21, 0x80, 0x0, 0x40000331}, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x76960bb5)
write$evdev(0xffffffffffffffff, &(0x7f0000000640)=[{{0x77359400}, 0x1, 0x7f, 0x2}, {{}, 0x0, 0x0, 0x41}], 0x30)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x51})
io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES16], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='vlan0\x00', 0x10)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
ioctl$EVIOCGSW(r7, 0x8040451b, &(0x7f00000003c0)=""/113)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00'}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x7fff, 0xa)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

176.513936ms ago: executing program 0 (id=1413):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (fail_nth: 10)

115.892881ms ago: executing program 0 (id=1414):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r2)
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="1748000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)

115.102241ms ago: executing program 1 (id=1415):
r0 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280080000000000000008000900"], 0x44}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f00000002", 0x29}], 0x1}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6023000800503afffe80000000000000000000003e94e36951bfab0000000000000000000000000187"], 0x0)

21.216878ms ago: executing program 1 (id=1416):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
socket$pppoe(0x18, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000004000000080000001000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000e000000000000"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x20c6, 0x80, 0x2, 0x1f9}, &(0x7f0000000480)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x393001, 0x23456})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x6901, &(0x7f0000000400)={0x0, 0x37a9, 0x100, 0x1, 0x8000}, 0x0, 0x0)
r7 = syz_io_uring_setup(0x1ed3, 0x0, &(0x7f00000002c0)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0)
write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x9, 0x7, 0x1})
io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18021d00000000000000"], 0x0, 0xb}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
get_mempolicy(&(0x7f0000000080), &(0x7f00000001c0), 0x81, &(0x7f000025b000/0x1000)=nil, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10)
io_uring_setup(0x3226, &(0x7f0000000240)={0x0, 0xe, 0x2000, 0x2, 0x131})
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

0s ago: executing program 0 (id=1417):
r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
r1 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0xec21, 0x80, 0x0, 0x40000331}, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_open_dev$evdev(&(0x7f00000002c0), 0xc000, 0x142)
ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000080)=0x76960bb5)
write$evdev(r4, &(0x7f0000000640)=[{{0x77359400}, 0x1, 0x7f, 0x2}, {{}, 0x0, 0x0, 0x41}], 0x30)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x51})
io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES16], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r6}, 0x10)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='vlan0\x00', 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$EVIOCGSW(r9, 0x8040451b, &(0x7f00000003c0)=""/113)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r10}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x7fff, 0xa)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r11, &(0x7f0000000180), 0x0}, 0x20)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="53df2b000000000088907800000000ffffffff0e00907800041000002b00"/39], 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

kernel console output (not intermixed with test programs):

w-gadget: fail, usb_gadget_register_driver returned -16
[   56.785191][ T4743] netlink: 'syz.4.459': attribute type 4 has an invalid length.
[   56.822656][ T4720] syz.1.452 (4720) used greatest stack depth: 10024 bytes left
[   56.843673][    T9] IPVS: starting estimator thread 0...
[   56.853144][ T4743] bridge_slave_0: left allmulticast mode
[   56.858989][ T4743] bridge_slave_0: left promiscuous mode
[   56.864784][ T4743] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.877734][ T4743] bridge_slave_1: left allmulticast mode
[   56.883424][ T4743] bridge_slave_1: left promiscuous mode
[   56.889306][ T4743] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.899515][ T4743] bond0: (slave bond_slave_0): Releasing backup interface
[   56.917053][ T4743] bond0: (slave bond_slave_1): Releasing backup interface
[   56.935401][ T4746] IPVS: using max 2496 ests per chain, 124800 per kthread
[   56.944537][ T4743] team0: Port device team_slave_0 removed
[   56.957846][ T4743] team0: Port device team_slave_1 removed
[   56.964808][ T4743] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.972320][ T4743] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.982092][ T4743] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.989608][ T4743] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.084182][ T4759] __nla_validate_parse: 4 callbacks suppressed
[   57.084200][ T4759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.461'.
[   57.189433][ T4767] netlink: 'syz.3.467': attribute type 4 has an invalid length.
[   57.197270][ T4767] netlink: 17 bytes leftover after parsing attributes in process `syz.3.467'.
[   57.213183][ T4769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'.
[   57.401220][ T4784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.470'.
[   57.458667][ T4769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.468581][ T4769] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.487257][ T4784] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   57.694992][   T29] kauditd_printk_skb: 696 callbacks suppressed
[   57.695009][   T29] audit: type=1326 audit(1756379399.074:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4788 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f8b6b73ebe9 code=0x7ffc0000
[   57.738443][   T29] audit: type=1326 audit(1756379399.074:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4788 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6b73ebe9 code=0x7ffc0000
[   57.761978][   T29] audit: type=1326 audit(1756379399.074:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4788 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6b73ebe9 code=0x7ffc0000
[   57.785521][   T29] audit: type=1326 audit(1756379399.074:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4788 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b6b73ebe9 code=0x7ffc0000
[   57.788655][ T2957] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   57.808994][   T29] audit: type=1326 audit(1756379399.074:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4788 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6b73ebe9 code=0x7ffc0000
[   57.809027][   T29] audit: type=1326 audit(1756379399.074:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4788 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6b73ebe9 code=0x7ffc0000
[   57.840708][ T2957] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   57.873883][   T29] audit: type=1400 audit(1756379399.174:3145): avc:  denied  { read write } for  pid=4791 comm="syz.2.476" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   57.897336][   T29] audit: type=1400 audit(1756379399.174:3146): avc:  denied  { open } for  pid=4791 comm="syz.2.476" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   58.031239][   T29] audit: type=1400 audit(1756379399.414:3147): avc:  denied  { write } for  pid=4791 comm="syz.2.476" name="hidraw0" dev="devtmpfs" ino=601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   58.088343][ T4808] atomic_op ffff888104374528 conn xmit_atomic 0000000000000000
[   58.110504][ T4808] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.117685][ T4808] syzkaller0: entered promiscuous mode
[   58.123192][ T4808] syzkaller0: entered allmulticast mode
[   58.142953][ T4808] tipc: Resetting bearer <eth:syzkaller0>
[   58.151162][ T4807] tipc: Resetting bearer <eth:syzkaller0>
[   58.169788][ T4807] tipc: Disabling bearer <eth:syzkaller0>
[   58.198616][ T4816] netlink: 'syz.0.485': attribute type 4 has an invalid length.
[   58.206365][ T4816] netlink: 17 bytes leftover after parsing attributes in process `syz.0.485'.
[   58.230209][ T4820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.479'.
[   58.240837][   T29] audit: type=1326 audit(1756379399.624:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4815 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   58.264431][ T4818] block device autoloading is deprecated and will be removed.
[   58.284469][ T4820] loop3: detected capacity change from 0 to 1024
[   58.312717][ T4820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.327377][ T4816] bridge_slave_0: left allmulticast mode
[   58.333103][ T4816] bridge_slave_0: left promiscuous mode
[   58.338810][ T4816] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.355645][ T4816] bridge_slave_1: left allmulticast mode
[   58.361328][ T4816] bridge_slave_1: left promiscuous mode
[   58.367223][ T4816] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.381178][ T4816] bond0: (slave bond_slave_0): Releasing backup interface
[   58.394448][ T4816] bond0: (slave bond_slave_1): Releasing backup interface
[   58.407884][ T4816] team0: Port device team_slave_0 removed
[   58.429724][ T4816] team0: Port device team_slave_1 removed
[   58.437379][ T4816] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.444819][ T4816] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.456741][ T4816] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.464171][ T4816] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.481139][ T4833] netlink: zone id is out of range
[   58.486377][ T4833] netlink: zone id is out of range
[   58.491656][ T4833] netlink: zone id is out of range
[   58.496825][ T4833] netlink: zone id is out of range
[   58.528521][ T4833] netlink: 96 bytes leftover after parsing attributes in process `syz.1.489'.
[   58.592645][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.657582][ T4838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.491'.
[   58.874562][ T4838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.883523][ T4838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.894872][ T4838] loop3: detected capacity change from 0 to 512
[   58.906625][ T4838] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   58.929543][ T4852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'.
[   58.941148][ T4838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.953953][ T4838] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.968884][ T4838] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.491: corrupted xattr block 19: overlapping e_value 
[   58.982924][ T4838] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   58.992194][ T4838] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.491: corrupted xattr block 19: overlapping e_value 
[   59.006310][ T4838] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   59.015681][ T4838] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.491: corrupted xattr block 19: overlapping e_value 
[   59.060105][ T4858] atomic_op ffff888104375d28 conn xmit_atomic 0000000000000000
[   59.071568][ T4858] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.078785][ T4858] syzkaller0: entered promiscuous mode
[   59.084258][ T4858] syzkaller0: entered allmulticast mode
[   59.093677][ T4858] tipc: Resetting bearer <eth:syzkaller0>
[   59.104124][ T4857] tipc: Resetting bearer <eth:syzkaller0>
[   59.122883][ T4857] tipc: Disabling bearer <eth:syzkaller0>
[   59.142710][ T4852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.151852][ T4852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.329487][ T4864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.499'.
[   59.614582][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.717365][ T4873] netlink: 'syz.3.502': attribute type 4 has an invalid length.
[   59.752540][ T4874] 9pnet: Could not find request transport: fd0xffffffffffffffff
[   59.896161][ T4881] program syz.3.505 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   59.937003][ T3410] IPVS: starting estimator thread 0...
[   60.065706][ T4889] IPVS: using max 1872 ests per chain, 93600 per kthread
[   60.081435][ T4896] loop3: detected capacity change from 0 to 2048
[   60.097834][ T4896] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.907924][ T3301] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[   60.982585][ T4938] block device autoloading is deprecated and will be removed.
[   61.060318][ T4936] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   61.071958][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   61.082404][ T3410] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   61.152217][ T4941] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   61.478940][ T4964] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   61.524769][ T4973] 9pnet_fd: Insufficient options for proto=fd
[   61.882636][ T4981] loop3: detected capacity change from 0 to 256
[   61.939941][ T4981] FAT-fs (loop3): Directory bread(block 64) failed
[   61.984014][ T4981] FAT-fs (loop3): Directory bread(block 65) failed
[   62.012617][ T4981] FAT-fs (loop3): Directory bread(block 66) failed
[   62.039236][ T4981] FAT-fs (loop3): Directory bread(block 67) failed
[   62.061660][ T4981] FAT-fs (loop3): Directory bread(block 68) failed
[   62.091637][ T4981] FAT-fs (loop3): Directory bread(block 69) failed
[   62.129714][ T4981] FAT-fs (loop3): Directory bread(block 70) failed
[   62.165329][ T4981] FAT-fs (loop3): Directory bread(block 71) failed
[   62.171951][ T4981] FAT-fs (loop3): Directory bread(block 72) failed
[   62.178555][ T4981] FAT-fs (loop3): Directory bread(block 73) failed
[   62.218886][ T4992] __nla_validate_parse: 13 callbacks suppressed
[   62.218906][ T4992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'.
[   62.279207][ T4994] program syz.4.546 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   62.340006][ T5007] 9pnet: Could not find request transport: fd0xffffffffffffffff
[   62.527073][ T5027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'.
[   62.600821][ T5029] program syz.4.560 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   62.694295][ T5041] loop3: detected capacity change from 0 to 512
[   62.719364][ T5041] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.564: casefold flag without casefold feature
[   62.732516][ T5046] 9pnet: Could not find request transport: fd0xffffffffffffffff
[   62.740415][ T5041] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.564: couldn't read orphan inode 15 (err -117)
[   62.777166][   T29] kauditd_printk_skb: 483 callbacks suppressed
[   62.777183][   T29] audit: type=1400 audit(1756379404.164:3632): avc:  denied  { wake_alarm } for  pid=5052 comm="syz.0.568" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   62.811341][ T5041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.958281][ T5059] netlink: 24 bytes leftover after parsing attributes in process `syz.4.567'.
[   63.085086][   T29] audit: type=1326 audit(1756379404.464:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   63.115187][ T5066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.567'.
[   63.349522][   T29] audit: type=1326 audit(1756379404.494:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   63.373010][   T29] audit: type=1326 audit(1756379404.494:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   63.396428][   T29] audit: type=1326 audit(1756379404.494:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   63.419758][   T29] audit: type=1326 audit(1756379404.494:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   63.443180][   T29] audit: type=1326 audit(1756379404.494:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   63.466510][   T29] audit: type=1326 audit(1756379404.494:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   63.489844][   T29] audit: type=1326 audit(1756379404.494:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   63.513257][   T29] audit: type=1326 audit(1756379404.494:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   63.594213][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.649215][ T5083] 9pnet: Could not find request transport: fd0xffffffffffffffff
[   63.676060][ T5088] atomic_op ffff88811d024128 conn xmit_atomic 0000000000000000
[   63.691726][ T5091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.701756][ T5088] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.715677][ T5088] syzkaller0: entered promiscuous mode
[   63.721198][ T5088] syzkaller0: entered allmulticast mode
[   63.725976][ T5091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.759244][ T5088] tipc: Resetting bearer <eth:syzkaller0>
[   63.772783][ T5086] tipc: Resetting bearer <eth:syzkaller0>
[   63.784462][ T5086] tipc: Disabling bearer <eth:syzkaller0>
[   63.819746][ T5102] netlink: 'syz.4.585': attribute type 21 has an invalid length.
[   63.953930][ T5111] GPL: port 1(erspan0) entered blocking state
[   63.961174][ T5111] GPL: port 1(erspan0) entered disabled state
[   63.970954][ T5111] erspan0: entered allmulticast mode
[   63.985649][ T5111] erspan0: entered promiscuous mode
[   64.019993][ T5121] GPL: port 1(erspan0) entered blocking state
[   64.026175][ T5121] GPL: port 1(erspan0) entered forwarding state
[   64.470663][ T5146] netlink: 'syz.0.600': attribute type 4 has an invalid length.
[   64.478690][ T5146] netlink: 17 bytes leftover after parsing attributes in process `syz.0.600'.
[   64.573166][ T5157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.604'.
[   64.826034][ T5157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.843821][ T5157] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.870779][ T5157] loop3: detected capacity change from 0 to 512
[   64.888392][ T5157] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   64.971381][ T5192] netlink: 24 bytes leftover after parsing attributes in process `syz.1.610'.
[   64.994626][ T5192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.610'.
[   65.013782][ T5193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'.
[   65.039211][ T5157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.136181][ T5157] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.260940][ T5157] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.604: corrupted xattr block 19: overlapping e_value 
[   65.315247][ T5157] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   65.324463][ T5157] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.604: corrupted xattr block 19: overlapping e_value 
[   65.347078][ T5157] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   65.356791][ T5157] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.604: corrupted xattr block 19: overlapping e_value 
[   65.372870][ T5203] netlink: 'syz.0.620': attribute type 4 has an invalid length.
[   65.380630][ T5203] netlink: 17 bytes leftover after parsing attributes in process `syz.0.620'.
[   65.448825][ T5209] program syz.4.623 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   65.464493][ T5209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.473274][ T5209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.633206][ T5224] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.707998][ T5226] 9pnet: Could not find request transport: fd0xffffffffffffffff
[   65.824983][ T5232] netlink: 'syz.0.628': attribute type 4 has an invalid length.
[   66.036227][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.068363][ T5224] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.170859][ T5239] 9pnet: Could not find request transport: fd0xffffffffffffffff
[   66.187440][ T5224] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.229704][ T5224] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.443720][    T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   66.491673][    T9] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   66.572617][ T1384] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.678551][ T5259] fido_id[5259]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   66.727874][ T1384] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.824122][ T1384] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.836834][ T1384] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.297284][ T5274] __nla_validate_parse: 7 callbacks suppressed
[   67.297302][ T5274] netlink: 24 bytes leftover after parsing attributes in process `syz.2.638'.
[   67.341107][ T5265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'.
[   67.479703][ T5270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'.
[   67.514693][ T5280] program syz.0.640 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   67.544477][ T5280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.557265][ T5280] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.622953][ T5293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'.
[   67.736426][ T5301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'.
[   67.772134][ T5293] FAULT_INJECTION: forcing a failure.
[   67.772134][ T5293] name failslab, interval 1, probability 0, space 0, times 0
[   67.784938][ T5293] CPU: 1 UID: 0 PID: 5293 Comm: syz.3.643 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   67.784971][ T5293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   67.784986][ T5293] Call Trace:
[   67.784994][ T5293]  <TASK>
[   67.785002][ T5293]  __dump_stack+0x1d/0x30
[   67.785086][ T5293]  dump_stack_lvl+0xe8/0x140
[   67.785110][ T5293]  dump_stack+0x15/0x1b
[   67.785155][ T5293]  should_fail_ex+0x265/0x280
[   67.785265][ T5293]  should_failslab+0x8c/0xb0
[   67.785312][ T5293]  kmem_cache_alloc_node_noprof+0x57/0x320
[   67.785348][ T5293]  ? __alloc_skb+0x101/0x320
[   67.785371][ T5293]  __alloc_skb+0x101/0x320
[   67.785424][ T5293]  netlink_alloc_large_skb+0xba/0xf0
[   67.785457][ T5293]  netlink_sendmsg+0x3cf/0x6b0
[   67.785481][ T5293]  ? __pfx_netlink_sendmsg+0x10/0x10
[   67.785506][ T5293]  __sock_sendmsg+0x145/0x180
[   67.785575][ T5293]  ____sys_sendmsg+0x31e/0x4e0
[   67.785677][ T5293]  ___sys_sendmsg+0x17b/0x1d0
[   67.785711][ T5293]  __x64_sys_sendmsg+0xd4/0x160
[   67.785736][ T5293]  x64_sys_call+0x191e/0x2ff0
[   67.785757][ T5293]  do_syscall_64+0xd2/0x200
[   67.785803][ T5293]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   67.785826][ T5293]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   67.785860][ T5293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.785881][ T5293] RIP: 0033:0x7f8b6b73ebe9
[   67.785953][ T5293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   67.785969][ T5293] RSP: 002b:00007f8b6a1a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   67.785991][ T5293] RAX: ffffffffffffffda RBX: 00007f8b6b965fa0 RCX: 00007f8b6b73ebe9
[   67.786056][ T5293] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000009
[   67.786068][ T5293] RBP: 00007f8b6a1a7090 R08: 0000000000000000 R09: 0000000000000000
[   67.786085][ T5293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   67.786172][ T5293] R13: 00007f8b6b966038 R14: 00007f8b6b965fa0 R15: 00007ffe57859f18
[   67.786189][ T5293]  </TASK>
[   67.995081][ T3410] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   68.013042][ T3410] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   68.054740][ T5314] fido_id[5314]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   68.069815][   T29] kauditd_printk_skb: 345 callbacks suppressed
[   68.069852][   T29] audit: type=1326 audit(1756379409.464:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc0d3ebe9 code=0x7ffc0000
[   68.128589][   T29] audit: type=1326 audit(1756379409.464:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.2.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e08eebe9 code=0x7ffc0000
[   68.143361][ T5320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.652'.
[   68.152232][   T29] audit: type=1326 audit(1756379409.464:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.2.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e08eebe9 code=0x7ffc0000
[   68.184368][   T29] audit: type=1326 audit(1756379409.464:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.2.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f37e08eebe9 code=0x7ffc0000
[   68.207722][   T29] audit: type=1326 audit(1756379409.464:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.2.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e08eebe9 code=0x7ffc0000
[   68.231227][   T29] audit: type=1326 audit(1756379409.464:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.2.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e08eebe9 code=0x7ffc0000
[   68.254646][   T29] audit: type=1326 audit(1756379409.464:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.2.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37e08eebe9 code=0x7ffc0000
[   68.278030][   T29] audit: type=1326 audit(1756379409.464:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.2.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e08eebe9 code=0x7ffc0000
[   68.301574][   T29] audit: type=1326 audit(1756379409.464:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.2.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e08eebe9 code=0x7ffc0000
[   68.325016][   T29] audit: type=1326 audit(1756379409.464:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.2.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f37e08eebe9 code=0x7ffc0000
[   68.383625][ T5327] 9pnet: Could not find request transport: fd0xffffffffffffffff
[   68.466361][ T5337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'.
[   68.540146][ T5341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.548770][ T5341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.563256][ T5320] loop3: detected capacity change from 0 to 512
[   68.592845][ T5320] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   68.610139][ T5344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.659'.
[   68.642701][ T5345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.660'.
[   68.668399][ T5344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'.
[   68.797267][ T5320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.823718][ T5320] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.873336][ T5320] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.652: corrupted xattr block 19: overlapping e_value 
[   68.929996][ T5320] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   68.956388][ T5320] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.652: corrupted xattr block 19: overlapping e_value 
[   68.982759][ T5320] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   68.993452][ T5320] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.652: corrupted xattr block 19: overlapping e_value 
[   69.084852][ T5350] FAULT_INJECTION: forcing a failure.
[   69.084852][ T5350] name failslab, interval 1, probability 0, space 0, times 0
[   69.097639][ T5350] CPU: 1 UID: 0 PID: 5350 Comm: syz.4.661 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   69.097665][ T5350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   69.097681][ T5350] Call Trace:
[   69.097689][ T5350]  <TASK>
[   69.097699][ T5350]  __dump_stack+0x1d/0x30
[   69.097724][ T5350]  dump_stack_lvl+0xe8/0x140
[   69.097748][ T5350]  dump_stack+0x15/0x1b
[   69.097785][ T5350]  should_fail_ex+0x265/0x280
[   69.097806][ T5350]  should_failslab+0x8c/0xb0
[   69.097835][ T5350]  kmem_cache_alloc_noprof+0x50/0x310
[   69.097868][ T5350]  ? security_file_alloc+0x32/0x100
[   69.097914][ T5350]  security_file_alloc+0x32/0x100
[   69.097984][ T5350]  init_file+0x5c/0x1d0
[   69.098015][ T5350]  alloc_empty_file+0x8b/0x200
[   69.098113][ T5350]  path_openat+0x68/0x2170
[   69.098136][ T5350]  ? audit_log_end+0x1d7/0x1f0
[   69.098174][ T5350]  ? try_to_wake_up+0x3e7/0x630
[   69.098211][ T5350]  ? audit_log_end+0x1d7/0x1f0
[   69.098321][ T5350]  ? audit_log_end+0x1d7/0x1f0
[   69.098357][ T5350]  ? kmem_cache_free+0xdf/0x300
[   69.098391][ T5350]  ? audit_log_end+0x1d7/0x1f0
[   69.098491][ T5350]  do_filp_open+0x109/0x230
[   69.098527][ T5350]  do_sys_openat2+0xa6/0x110
[   69.098568][ T5350]  __x64_sys_openat+0xf2/0x120
[   69.098644][ T5350]  x64_sys_call+0x2e9c/0x2ff0
[   69.098670][ T5350]  do_syscall_64+0xd2/0x200
[   69.098822][ T5350]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   69.098852][ T5350]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   69.098882][ T5350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.098914][ T5350] RIP: 0033:0x7efcc0d3ebe9
[   69.098976][ T5350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.098995][ T5350] RSP: 002b:00007efcbf79f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   69.099082][ T5350] RAX: ffffffffffffffda RBX: 00007efcc0f65fa0 RCX: 00007efcc0d3ebe9
[   69.099101][ T5350] RDX: 0000000000000002 RSI: 0000200000000200 RDI: 0000000000000007
[   69.099116][ T5350] RBP: 00007efcbf79f090 R08: 0000000000000000 R09: 0000000000000000
[   69.099131][ T5350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   69.099145][ T5350] R13: 00007efcc0f66038 R14: 00007efcc0f65fa0 R15: 00007fff3a92ceb8
[   69.099164][ T5350]  </TASK>
[   69.518401][ T5354] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   69.610871][ T5356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.621119][ T5356] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.659858][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.756864][ T5382] loop3: detected capacity change from 0 to 256
[   69.771901][ T5382] FAT-fs (loop3): Directory bread(block 64) failed
[   69.778982][ T5382] FAT-fs (loop3): Directory bread(block 65) failed
[   69.785680][ T5382] FAT-fs (loop3): Directory bread(block 66) failed
[   69.793100][ T5382] FAT-fs (loop3): Directory bread(block 67) failed
[   69.800557][ T5382] FAT-fs (loop3): Directory bread(block 68) failed
[   69.807332][ T5382] FAT-fs (loop3): Directory bread(block 69) failed
[   69.813991][ T5382] FAT-fs (loop3): Directory bread(block 70) failed
[   69.820776][ T5382] FAT-fs (loop3): Directory bread(block 71) failed
[   69.827456][ T5382] FAT-fs (loop3): Directory bread(block 72) failed
[   69.834191][ T5382] FAT-fs (loop3): Directory bread(block 73) failed
[   70.377544][ T5400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   70.435094][ T5400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.555240][ T5403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   70.563991][ T5403] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.693267][ T5413] FAULT_INJECTION: forcing a failure.
[   70.693267][ T5413] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   70.706444][ T5413] CPU: 1 UID: 0 PID: 5413 Comm: syz.3.684 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   70.706476][ T5413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   70.706491][ T5413] Call Trace:
[   70.706498][ T5413]  <TASK>
[   70.706507][ T5413]  __dump_stack+0x1d/0x30
[   70.706536][ T5413]  dump_stack_lvl+0xe8/0x140
[   70.706554][ T5413]  dump_stack+0x15/0x1b
[   70.706623][ T5413]  should_fail_ex+0x265/0x280
[   70.706643][ T5413]  should_fail+0xb/0x20
[   70.706664][ T5413]  should_fail_usercopy+0x1a/0x20
[   70.706690][ T5413]  _copy_from_user+0x1c/0xb0
[   70.706828][ T5413]  __se_sys_mount+0x10d/0x2e0
[   70.706853][ T5413]  ? fput+0x8f/0xc0
[   70.706938][ T5413]  ? ksys_write+0x192/0x1a0
[   70.706966][ T5413]  __x64_sys_mount+0x67/0x80
[   70.706993][ T5413]  x64_sys_call+0x2b4d/0x2ff0
[   70.707019][ T5413]  do_syscall_64+0xd2/0x200
[   70.707081][ T5413]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   70.707154][ T5413]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   70.707177][ T5413]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.707196][ T5413] RIP: 0033:0x7f8b6b73ebe9
[   70.707208][ T5413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   70.707222][ T5413] RSP: 002b:00007f8b6a1a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   70.707279][ T5413] RAX: ffffffffffffffda RBX: 00007f8b6b965fa0 RCX: 00007f8b6b73ebe9
[   70.707290][ T5413] RDX: 0000200000000580 RSI: 0000200000000540 RDI: 0000000000000000
[   70.707324][ T5413] RBP: 00007f8b6a1a7090 R08: 00002000000005c0 R09: 0000000000000000
[   70.707334][ T5413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   70.707344][ T5413] R13: 00007f8b6b966038 R14: 00007f8b6b965fa0 R15: 00007ffe57859f18
[   70.707361][ T5413]  </TASK>
[   70.707715][ T5413] tmpfs: Unknown parameter 'defcontext0x0000000000000000'
[   70.928917][ T5415] 9pnet: Could not find request transport: fd0xffffffffffffffff
[   71.151289][ T5426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5426 comm=syz.1.689
[   71.182131][ T5429] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   71.348287][ T5439] netlink: 'syz.4.693': attribute type 4 has an invalid length.
[   71.547603][ T5444] program syz.4.695 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   71.568507][ T5444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.593914][ T5452] 9pnet: Could not find request transport: fd0xffffffffffffffff
[   71.598164][ T5444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.844268][ T5463] loop3: detected capacity change from 0 to 2048
[   71.869936][ T5463] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.967626][ T3301] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[   72.106633][ T5480] loop3: detected capacity change from 0 to 512
[   72.204857][ T5487] loop3: detected capacity change from 0 to 2048
[   72.293716][ T5491] FAULT_INJECTION: forcing a failure.
[   72.293716][ T5491] name failslab, interval 1, probability 0, space 0, times 0
[   72.298216][ T5487] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.306459][ T5491] CPU: 1 UID: 0 PID: 5491 Comm: syz.4.710 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   72.306495][ T5491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   72.306511][ T5491] Call Trace:
[   72.306589][ T5491]  <TASK>
[   72.306607][ T5491]  __dump_stack+0x1d/0x30
[   72.306634][ T5491]  dump_stack_lvl+0xe8/0x140
[   72.306660][ T5491]  dump_stack+0x15/0x1b
[   72.306681][ T5491]  should_fail_ex+0x265/0x280
[   72.306710][ T5491]  should_failslab+0x8c/0xb0
[   72.306778][ T5491]  kmem_cache_alloc_noprof+0x50/0x310
[   72.306806][ T5491]  ? getname_flags+0x80/0x3b0
[   72.306832][ T5491]  getname_flags+0x80/0x3b0
[   72.306944][ T5491]  user_path_create+0x27/0x130
[   72.306970][ T5491]  bpf_obj_pin_user+0xe0/0x230
[   72.306997][ T5491]  bpf_obj_pin+0xac/0xd0
[   72.307035][ T5491]  __sys_bpf+0x6cb/0x7b0
[   72.307095][ T5491]  __x64_sys_bpf+0x41/0x50
[   72.307126][ T5491]  x64_sys_call+0x2aea/0x2ff0
[   72.307169][ T5491]  do_syscall_64+0xd2/0x200
[   72.307263][ T5491]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   72.307319][ T5491]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   72.307392][ T5491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.307418][ T5491] RIP: 0033:0x7efcc0d3ebe9
[   72.307436][ T5491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   72.307458][ T5491] RSP: 002b:00007efcbf79f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   72.307481][ T5491] RAX: ffffffffffffffda RBX: 00007efcc0f65fa0 RCX: 00007efcc0d3ebe9
[   72.307495][ T5491] RDX: 0000000000000018 RSI: 0000200000000180 RDI: 0000000000000006
[   72.307511][ T5491] RBP: 00007efcbf79f090 R08: 0000000000000000 R09: 0000000000000000
[   72.307526][ T5491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   72.307676][ T5491] R13: 00007efcc0f66038 R14: 00007efcc0f65fa0 R15: 00007fff3a92ceb8
[   72.307700][ T5491]  </TASK>
[   72.577836][ T5500] program syz.2.713 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   72.648175][ T5500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.693013][ T5500] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.778840][ T5521] __nla_validate_parse: 10 callbacks suppressed
[   72.778856][ T5521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'.
[   72.815252][ T5526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'.
[   72.845584][ T5526] netlink: 'syz.0.719': attribute type 10 has an invalid length.
[   72.857455][ T5526] syz_tun: entered promiscuous mode
[   72.879034][ T5526] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   72.992296][ T5538] netlink: 'syz.4.724': attribute type 4 has an invalid length.
[   73.000008][ T5538] netlink: 17 bytes leftover after parsing attributes in process `syz.4.724'.
[   73.022231][ T3301] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[   73.141832][ T5546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'.
[   73.158739][   T29] kauditd_printk_skb: 473 callbacks suppressed
[   73.158756][   T29] audit: type=1326 audit(1756379414.544:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc0d3ebe9 code=0x7ffc0000
[   73.188402][   T29] audit: type=1326 audit(1756379414.544:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc0d3ebe9 code=0x7ffc0000
[   73.310835][ T5549] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.465753][ T5557] loop3: detected capacity change from 0 to 512
[   73.518212][ T5549] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.593704][ T5557] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   73.619054][ T5557] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[   73.628130][ T5557] EXT4-fs (loop3): 1 truncate cleaned up
[   73.642646][ T5557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.661301][   T29] audit: type=1400 audit(1756379415.044:4472): avc:  denied  { remount } for  pid=5556 comm="syz.3.730" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   73.662882][ T5557] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   73.681773][ T5549] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.716173][   T29] audit: type=1400 audit(1756379415.104:4473): avc:  denied  { mounton } for  pid=5556 comm="syz.3.730" path="/150/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   73.739031][ T5557] 9pnet_fd: Insufficient options for proto=fd
[   73.762934][ T5565] netlink: 'syz.2.732': attribute type 10 has an invalid length.
[   73.813475][ T5570] netlink: 'syz.1.733': attribute type 4 has an invalid length.
[   73.821286][ T5570] netlink: 17 bytes leftover after parsing attributes in process `syz.1.733'.
[   73.841631][   T29] audit: type=1326 audit(1756379415.224:4474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c29c0ebe9 code=0x7ffc0000
[   73.865108][   T29] audit: type=1326 audit(1756379415.224:4475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c29c0ebe9 code=0x7ffc0000
[   73.888536][   T29] audit: type=1326 audit(1756379415.224:4476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c29c0ebe9 code=0x7ffc0000
[   73.911985][   T29] audit: type=1326 audit(1756379415.224:4477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c29c0ebe9 code=0x7ffc0000
[   73.935342][   T29] audit: type=1326 audit(1756379415.224:4478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c29c0ebe9 code=0x7ffc0000
[   73.958879][   T29] audit: type=1326 audit(1756379415.224:4479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3c29c0ebe9 code=0x7ffc0000
[   73.985742][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.006616][ T5549] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.054919][ T5578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'.
[   74.169076][ T5590] netlink: 'syz.1.738': attribute type 4 has an invalid length.
[   74.176938][ T5590] netlink: 17 bytes leftover after parsing attributes in process `syz.1.738'.
[   74.265339][ T1384] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.296908][ T1384] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.302161][ T5602] loop3: detected capacity change from 0 to 512
[   74.319691][ T5602] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.743: casefold flag without casefold feature
[   74.320819][ T1384] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.356886][ T5602] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.743: couldn't read orphan inode 15 (err -117)
[   74.402009][ T5600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'.
[   74.427106][ T5602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.466836][ T5605] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   74.474593][ T1384] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.484252][ T5608] netlink: 'syz.2.745': attribute type 10 has an invalid length.
[   74.487935][ T5612] tmpfs: Unknown parameter 'defcontext0x0000000000000000'
[   74.760707][ T5625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.747'.
[   74.787808][ T5625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.747'.
[   74.904162][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.248065][ T5637] atomic_op ffff8881024a7d28 conn xmit_atomic 0000000000000000
[   75.269764][ T5637] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.278454][ T5637] syzkaller0: entered promiscuous mode
[   75.284004][ T5637] syzkaller0: entered allmulticast mode
[   75.294521][ T5637] tipc: Resetting bearer <eth:syzkaller0>
[   75.302691][ T5636] tipc: Resetting bearer <eth:syzkaller0>
[   75.314137][ T5636] tipc: Disabling bearer <eth:syzkaller0>
[   75.530564][ T5646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.544584][ T5646] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.576796][ T5646] loop3: detected capacity change from 0 to 512
[   75.626182][ T5646] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   75.694726][ T5646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.731231][ T5646] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.776684][ T5646] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.757: corrupted xattr block 19: overlapping e_value 
[   75.840547][ T5646] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   75.850213][ T5646] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.757: corrupted xattr block 19: overlapping e_value 
[   75.874161][ T5646] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   75.885227][ T5646] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.757: corrupted xattr block 19: overlapping e_value 
[   76.427787][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.555925][ T5749] netlink: 'syz.3.796': attribute type 10 has an invalid length.
[   76.568820][ T5750] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   76.763493][ T5761] loop3: detected capacity change from 0 to 512
[   76.808478][ T5761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.838439][ T5761] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.891017][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.023791][ T5778] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   77.069580][ T5768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.078568][ T5768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.534817][ T5794] program syz.0.812 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   77.554937][ T5794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.569267][ T5794] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.851790][ T5822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.920552][ T5822] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.992313][ T5828] 9pnet: Could not find request transport: fd0xffffffffffffffff
[   78.128750][ T5846] atomic_op ffff888126872d28 conn xmit_atomic 0000000000000000
[   78.143820][ T5846] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.153358][ T5846] syzkaller0: entered promiscuous mode
[   78.158920][ T5846] syzkaller0: entered allmulticast mode
[   78.187671][ T5849] __nla_validate_parse: 9 callbacks suppressed
[   78.187686][ T5849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.831'.
[   78.205460][ T5844] tipc: Resetting bearer <eth:syzkaller0>
[   78.211313][   T29] kauditd_printk_skb: 824 callbacks suppressed
[   78.211326][   T29] audit: type=1326 audit(1756379419.594:5304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   78.241000][   T29] audit: type=1326 audit(1756379419.594:5305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   78.266287][   T29] audit: type=1326 audit(1756379419.614:5306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   78.289922][   T29] audit: type=1326 audit(1756379419.614:5307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   78.313444][   T29] audit: type=1326 audit(1756379419.614:5308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   78.336865][   T29] audit: type=1326 audit(1756379419.614:5309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   78.340374][ T5844] tipc: Disabling bearer <eth:syzkaller0>
[   78.360355][   T29] audit: type=1326 audit(1756379419.614:5310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   78.360382][   T29] audit: type=1326 audit(1756379419.614:5311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   78.412761][   T29] audit: type=1326 audit(1756379419.614:5312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   78.436088][   T29] audit: type=1326 audit(1756379419.614:5313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   78.468350][ T5849] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   78.559648][ T5866] loop3: detected capacity change from 0 to 256
[   78.606237][ T5866] FAT-fs (loop3): Directory bread(block 64) failed
[   78.612912][ T5866] FAT-fs (loop3): Directory bread(block 65) failed
[   78.620693][ T5868] program syz.1.841 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   78.630372][ T5866] FAT-fs (loop3): Directory bread(block 66) failed
[   78.637766][ T5866] FAT-fs (loop3): Directory bread(block 67) failed
[   78.644446][ T5866] FAT-fs (loop3): Directory bread(block 68) failed
[   78.651242][ T5866] FAT-fs (loop3): Directory bread(block 69) failed
[   78.658225][ T5866] FAT-fs (loop3): Directory bread(block 70) failed
[   78.664888][ T5866] FAT-fs (loop3): Directory bread(block 71) failed
[   78.672075][ T5866] FAT-fs (loop3): Directory bread(block 72) failed
[   78.673454][ T5868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.678670][ T5866] FAT-fs (loop3): Directory bread(block 73) failed
[   78.696972][ T5868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.812996][ T5883] netlink: 24 bytes leftover after parsing attributes in process `syz.4.842'.
[   79.025075][ T5895] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   79.035131][ T5895] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   79.107678][ T5895] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   79.117605][ T5895] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   79.146603][ T5907] atomic_op ffff888123bd4128 conn xmit_atomic 0000000000000000
[   79.174797][ T5907] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.193537][ T5907] syzkaller0: entered promiscuous mode
[   79.199096][ T5907] syzkaller0: entered allmulticast mode
[   79.208782][ T5895] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   79.218779][ T5895] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   79.245428][ T5906] tipc: Resetting bearer <eth:syzkaller0>
[   79.253384][ T5906] tipc: Disabling bearer <eth:syzkaller0>
[   79.283182][ T5895] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   79.293132][ T5895] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   79.420171][ T5923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.472200][ T2134] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   79.480566][ T2134] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   79.490793][ T5923] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.516523][ T2134] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   79.524853][ T2134] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   79.537623][ T2134] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   79.545988][ T2134] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   79.554551][ T2134] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   79.562895][ T2134] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   79.706322][ T5937] 9pnet_fd: Insufficient options for proto=fd
[   79.790184][ T5949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.860'.
[   79.807591][ T5944] program syz.0.865 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   79.826830][ T5944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.837615][ T5944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.217861][ T5974] 9pnet_fd: Insufficient options for proto=fd
[   80.225145][ T5976] loop3: detected capacity change from 0 to 256
[   80.270349][ T5976] FAT-fs (loop3): Directory bread(block 64) failed
[   80.282000][ T5976] FAT-fs (loop3): Directory bread(block 65) failed
[   80.303394][ T5976] FAT-fs (loop3): Directory bread(block 66) failed
[   80.310024][ T5976] FAT-fs (loop3): Directory bread(block 67) failed
[   80.317082][ T5976] FAT-fs (loop3): Directory bread(block 68) failed
[   80.323635][ T5976] FAT-fs (loop3): Directory bread(block 69) failed
[   80.333932][ T5976] FAT-fs (loop3): Directory bread(block 70) failed
[   80.343737][ T5976] FAT-fs (loop3): Directory bread(block 71) failed
[   80.352849][ T5976] FAT-fs (loop3): Directory bread(block 72) failed
[   80.360848][ T5976] FAT-fs (loop3): Directory bread(block 73) failed
[   80.444303][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.886'.
[   80.529881][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'.
[   80.589659][ T6014] loop3: detected capacity change from 0 to 512
[   80.640267][ T6006] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   80.659724][ T6014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.673165][ T5998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.725523][ T5998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.745436][ T6014] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.787390][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.860244][ T6024] block device autoloading is deprecated and will be removed.
[   81.032980][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'.
[   81.108055][ T6041] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   81.132271][ T6049] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   81.142339][ T6049] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   81.178763][ T6049] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   81.188859][ T6049] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   81.261803][ T6049] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   81.272001][ T6049] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   81.317287][ T6049] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   81.327202][ T6049] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   81.455687][   T52] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20001 - 0
[   81.480011][   T52] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20001 - 0
[   81.504954][   T52] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20001 - 0
[   81.533825][   T52] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20001 - 0
[   81.679479][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.918'.
[   81.766241][ T6093] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.776263][ T6093] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[   81.793558][ T6089] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   81.829007][ T6093] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.838934][ T6093] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[   81.980924][ T6093] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.990876][ T6093] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[   82.068824][ T6093] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.078775][ T6093] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[   82.153381][   T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[   82.161794][   T52] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   82.173433][   T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[   82.181762][   T52] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   82.189395][ T6115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.926'.
[   82.194397][   T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[   82.207144][   T52] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   82.225407][   T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[   82.233776][   T52] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   82.482361][ T6137] netlink: 24 bytes leftover after parsing attributes in process `syz.3.929'.
[   82.496352][ T6117] loop3: detected capacity change from 0 to 1024
[   82.531810][ T6117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.614095][ T6151] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.641894][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.941'.
[   82.738502][ T6151] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.780503][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.812786][ T6151] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.834272][ T6169] loop3: detected capacity change from 0 to 512
[   82.861558][ T6169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.874251][ T6169] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.922685][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.937532][ T6151] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.962492][ T6167] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   83.001093][ T1384] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   83.009468][ T1384] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   83.056255][ T1384] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   83.064682][ T1384] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   83.113381][ T1384] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   83.121831][ T1384] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   83.132874][ T1384] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.141955][ T1384] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.154851][ T1384] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.165078][ T1384] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.173540][ T1384] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   83.182027][ T1384] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   83.355057][ T6193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.372060][ T6193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.390007][ T6218] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.404483][   T29] kauditd_printk_skb: 717 callbacks suppressed
[   83.404499][   T29] audit: type=1326 audit(1756379424.784:6031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   83.410643][ T6221] openvswitch: netlink: Message has 6 unknown bytes.
[   83.411187][   T29] audit: type=1326 audit(1756379424.784:6032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   83.464331][   T29] audit: type=1326 audit(1756379424.784:6033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   83.487802][   T29] audit: type=1326 audit(1756379424.784:6034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   83.511206][   T29] audit: type=1326 audit(1756379424.784:6035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   83.534594][   T29] audit: type=1326 audit(1756379424.784:6036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   83.558083][   T29] audit: type=1326 audit(1756379424.784:6037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   83.581543][   T29] audit: type=1326 audit(1756379424.784:6038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   83.604977][   T29] audit: type=1326 audit(1756379424.784:6039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   83.628416][   T29] audit: type=1326 audit(1756379424.784:6040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   83.661081][ T6226] __nla_validate_parse: 3 callbacks suppressed
[   83.661117][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'.
[   83.684469][ T6228] FAULT_INJECTION: forcing a failure.
[   83.684469][ T6228] name failslab, interval 1, probability 0, space 0, times 0
[   83.697210][ T6228] CPU: 1 UID: 0 PID: 6228 Comm: syz.4.969 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   83.697239][ T6228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   83.697253][ T6228] Call Trace:
[   83.697261][ T6228]  <TASK>
[   83.697269][ T6228]  __dump_stack+0x1d/0x30
[   83.697290][ T6228]  dump_stack_lvl+0xe8/0x140
[   83.697388][ T6228]  dump_stack+0x15/0x1b
[   83.697490][ T6228]  should_fail_ex+0x265/0x280
[   83.697513][ T6228]  ? legacy_init_fs_context+0x31/0x80
[   83.697538][ T6228]  should_failslab+0x8c/0xb0
[   83.697576][ T6228]  __kmalloc_cache_noprof+0x4c/0x320
[   83.697601][ T6228]  ? __kmalloc_cache_noprof+0x299/0x320
[   83.697634][ T6228]  legacy_init_fs_context+0x31/0x80
[   83.697728][ T6228]  alloc_fs_context+0x3ef/0x4e0
[   83.697756][ T6228]  fs_context_for_mount+0x22/0x30
[   83.697851][ T6228]  do_new_mount+0xe9/0x5e0
[   83.697875][ T6228]  ? security_capable+0x83/0x90
[   83.697901][ T6228]  path_mount+0x4a4/0xb20
[   83.697919][ T6228]  ? user_path_at+0x109/0x130
[   83.697972][ T6228]  __se_sys_mount+0x28f/0x2e0
[   83.697994][ T6228]  ? fput+0x8f/0xc0
[   83.698022][ T6228]  __x64_sys_mount+0x67/0x80
[   83.698042][ T6228]  x64_sys_call+0x2b4d/0x2ff0
[   83.698065][ T6228]  do_syscall_64+0xd2/0x200
[   83.698130][ T6228]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   83.698152][ T6228]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   83.698177][ T6228]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.698233][ T6228] RIP: 0033:0x7efcc0d3ebe9
[   83.698250][ T6228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.698276][ T6228] RSP: 002b:00007efcbf79f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   83.698296][ T6228] RAX: ffffffffffffffda RBX: 00007efcc0f65fa0 RCX: 00007efcc0d3ebe9
[   83.698310][ T6228] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000
[   83.698321][ T6228] RBP: 00007efcbf79f090 R08: 0000200000000280 R09: 0000000000000000
[   83.698334][ T6228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   83.698378][ T6228] R13: 00007efcc0f66038 R14: 00007efcc0f65fa0 R15: 00007fff3a92ceb8
[   83.698404][ T6228]  </TASK>
[   83.927235][ T6218] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.954681][ T6235] atomic_op ffff88811bed2d28 conn xmit_atomic 0000000000000000
[   83.969949][ T6235] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.002252][ T6235] syzkaller0: entered promiscuous mode
[   84.007887][ T6235] syzkaller0: entered allmulticast mode
[   84.021177][ T6234] tipc: Resetting bearer <eth:syzkaller0>
[   84.029166][ T6234] tipc: Disabling bearer <eth:syzkaller0>
[   84.047175][ T6218] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.137731][ T6218] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.293573][   T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.328315][   T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.393135][ T6260] netlink: 24 bytes leftover after parsing attributes in process `syz.4.978'.
[   84.472738][   T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.485555][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.978'.
[   84.514850][ T6266] FAULT_INJECTION: forcing a failure.
[   84.514850][ T6266] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   84.528124][ T6266] CPU: 0 UID: 0 PID: 6266 Comm: syz.2.981 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   84.528157][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   84.528169][ T6266] Call Trace:
[   84.528175][ T6266]  <TASK>
[   84.528223][ T6266]  __dump_stack+0x1d/0x30
[   84.528248][ T6266]  dump_stack_lvl+0xe8/0x140
[   84.528392][ T6266]  dump_stack+0x15/0x1b
[   84.528413][ T6266]  should_fail_ex+0x265/0x280
[   84.528441][ T6266]  should_fail+0xb/0x20
[   84.528457][ T6266]  should_fail_usercopy+0x1a/0x20
[   84.528533][ T6266]  copy_folio_from_iter_atomic+0x278/0x11b0
[   84.528565][ T6266]  ? shmem_write_begin+0xa8/0x190
[   84.528583][ T6266]  ? shmem_write_begin+0xe1/0x190
[   84.528603][ T6266]  generic_perform_write+0x2c2/0x490
[   84.528654][ T6266]  shmem_file_write_iter+0xc5/0xf0
[   84.528699][ T6266]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   84.528798][ T6266]  vfs_write+0x52a/0x960
[   84.528831][ T6266]  __x64_sys_pwrite64+0xfd/0x150
[   84.528863][ T6266]  x64_sys_call+0xc4d/0x2ff0
[   84.528884][ T6266]  do_syscall_64+0xd2/0x200
[   84.528983][ T6266]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   84.529008][ T6266]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   84.529032][ T6266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.529062][ T6266] RIP: 0033:0x7f37e08eebe9
[   84.529081][ T6266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   84.529102][ T6266] RSP: 002b:00007f37df357038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[   84.529126][ T6266] RAX: ffffffffffffffda RBX: 00007f37e0b15fa0 RCX: 00007f37e08eebe9
[   84.529142][ T6266] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000006
[   84.529179][ T6266] RBP: 00007f37df357090 R08: 0000000000000000 R09: 0000000000000000
[   84.529263][ T6266] R10: 000000000000fecc R11: 0000000000000246 R12: 0000000000000002
[   84.529275][ T6266] R13: 00007f37e0b16038 R14: 00007f37e0b15fa0 R15: 00007ffc3febfa98
[   84.529332][ T6266]  </TASK>
[   84.732447][   T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.840769][ T6272] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   84.850729][ T6272] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   84.862871][ T6269] loop3: detected capacity change from 0 to 2048
[   84.890663][ T6269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.931455][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.942298][ T6272] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   84.952328][ T6272] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   85.071759][ T6272] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   85.081879][ T6272] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   85.101225][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.989'.
[   85.105588][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.986'.
[   85.138206][ T6272] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   85.148221][ T6272] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   85.182313][ T6294] program syz.3.990 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   85.197659][ T6294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.206700][ T6294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.214769][ T6289] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   85.361401][ T6292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.370350][ T6292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.814310][ T6313] loop3: detected capacity change from 0 to 512
[   85.825763][ T6313] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.995: casefold flag without casefold feature
[   85.842348][ T6313] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.995: couldn't read orphan inode 15 (err -117)
[   85.855894][ T6313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.090651][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.139171][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'.
[   86.208427][ T6334] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   86.519973][ T6363] loop3: detected capacity change from 0 to 2048
[   86.546865][ T6363] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.847391][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1016'.
[   87.059271][ T6375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.067947][ T6375] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.124938][ T6381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1018'.
[   87.134856][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'.
[   87.401968][ T3301] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[   87.512787][ T6389] block device autoloading is deprecated and will be removed.
[   87.691028][ T6410] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   87.701008][ T6410] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   87.758830][ T6410] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   87.768753][ T6410] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   87.877169][ T6410] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   87.877207][ T6410] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   87.907725][ T6427] FAULT_INJECTION: forcing a failure.
[   87.907725][ T6427] name failslab, interval 1, probability 0, space 0, times 0
[   87.907754][ T6427] CPU: 0 UID: 0 PID: 6427 Comm: syz.3.1035 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   87.907831][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   87.907845][ T6427] Call Trace:
[   87.907931][ T6427]  <TASK>
[   87.907939][ T6427]  __dump_stack+0x1d/0x30
[   87.907964][ T6427]  dump_stack_lvl+0xe8/0x140
[   87.907991][ T6427]  dump_stack+0x15/0x1b
[   87.908006][ T6427]  should_fail_ex+0x265/0x280
[   87.908085][ T6427]  ? kobject_uevent_env+0x1c0/0x570
[   87.908105][ T6427]  should_failslab+0x8c/0xb0
[   87.908127][ T6427]  __kmalloc_cache_noprof+0x4c/0x320
[   87.908201][ T6427]  kobject_uevent_env+0x1c0/0x570
[   87.908226][ T6427]  ? device_pm_check_callbacks+0x683/0x6a0
[   87.908304][ T6427]  kobject_uevent+0x1d/0x30
[   87.908324][ T6427]  device_del+0x710/0x790
[   87.908354][ T6427]  device_unregister+0x15/0x40
[   87.908381][ T6427]  bdi_unregister+0x307/0x3a0
[   87.908420][ T6427]  __del_gendisk+0x2c3/0x570
[   87.908445][ T6427]  del_gendisk+0xac/0xf0
[   87.908467][ T6427]  loop_remove+0x26/0x80
[   87.908493][ T6427]  loop_control_ioctl+0x3b3/0x3f0
[   87.908526][ T6427]  ? __pfx_loop_control_ioctl+0x10/0x10
[   87.908581][ T6427]  __se_sys_ioctl+0xce/0x140
[   87.908600][ T6427]  __x64_sys_ioctl+0x43/0x50
[   87.908698][ T6427]  x64_sys_call+0x1816/0x2ff0
[   87.908734][ T6427]  do_syscall_64+0xd2/0x200
[   87.908789][ T6427]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   87.908837][ T6427]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   87.908940][ T6427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.908962][ T6427] RIP: 0033:0x7f8b6b73ebe9
[   87.908978][ T6427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   87.908995][ T6427] RSP: 002b:00007f8b6a1a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   87.909014][ T6427] RAX: ffffffffffffffda RBX: 00007f8b6b965fa0 RCX: 00007f8b6b73ebe9
[   87.909067][ T6427] RDX: 0000000000000001 RSI: 0000000000004c81 RDI: 0000000000000006
[   87.909085][ T6427] RBP: 00007f8b6a1a7090 R08: 0000000000000000 R09: 0000000000000000
[   87.909097][ T6427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   87.909108][ T6427] R13: 00007f8b6b966038 R14: 00007f8b6b965fa0 R15: 00007ffe57859f18
[   87.909131][ T6427]  </TASK>
[   87.939443][ T6410] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   87.939484][ T6410] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   88.060258][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[   88.060297][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   88.064456][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[   88.064483][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   88.072203][ T1384] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[   88.072258][ T1384] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   88.072290][ T1384] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[   88.072313][ T1384] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   88.352403][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   88.360798][   T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   88.405672][   T29] kauditd_printk_skb: 587 callbacks suppressed
[   88.405684][   T29] audit: type=1326 audit(1756379429.794:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.1.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c29c0ebe9 code=0x7ffc0000
[   88.435373][   T29] audit: type=1326 audit(1756379429.794:6629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.1.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c29c0ebe9 code=0x7ffc0000
[   88.485672][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   88.494076][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   88.505232][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   88.513645][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   88.528932][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   88.537356][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   88.561554][   T29] audit: type=1326 audit(1756379429.944:6630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6454 comm="syz.1.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c29c0ebe9 code=0x7ffc0000
[   88.561819][   T29] audit: type=1326 audit(1756379429.944:6631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6454 comm="syz.1.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c29c0ebe9 code=0x7ffc0000
[   88.605782][ T6459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1043'.
[   88.685061][   T29] audit: type=1326 audit(1756379430.064:6632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.3.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6b73ebe9 code=0x7ffc0000
[   88.688281][   T29] audit: type=1326 audit(1756379430.064:6633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.3.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6b73ebe9 code=0x7ffc0000
[   88.688445][   T29] audit: type=1326 audit(1756379430.074:6634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.3.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b6b73ebe9 code=0x7ffc0000
[   88.688550][   T29] audit: type=1326 audit(1756379430.074:6635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.3.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6b73ebe9 code=0x7ffc0000
[   88.688931][   T29] audit: type=1326 audit(1756379430.074:6636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.3.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6b73ebe9 code=0x7ffc0000
[   88.689159][   T29] audit: type=1326 audit(1756379430.074:6637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.3.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b6b73ebe9 code=0x7ffc0000
[   88.779772][ T6465] __nla_validate_parse: 1 callbacks suppressed
[   88.779801][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1050'.
[   89.091866][ T6469] 9pnet: Could not find request transport: fd0xffffffffffffffff
[   89.160063][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1054'.
[   89.258868][ T6486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1056'.
[   89.269889][ T6486] netlink: 'syz.2.1056': attribute type 10 has an invalid length.
[   89.333422][ T6493] 9pnet_fd: Insufficient options for proto=fd
[   89.348634][ T6481] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   89.438781][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1066'.
[   89.646079][ T6530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.662757][ T6530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.780000][ T6539] program syz.2.1077 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   89.798103][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.810404][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.083857][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1090'.
[   90.147283][ T6579] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.271399][ T6579] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.350661][ T6579] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.372396][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'.
[   90.389390][ T6599] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   90.427527][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1101'.
[   90.436665][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'.
[   90.459309][ T6579] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.485313][ T6599] bridge0: port 1(macsec1) entered blocking state
[   90.491842][ T6599] bridge0: port 1(macsec1) entered disabled state
[   90.508076][ T6599] macsec1: entered allmulticast mode
[   90.516218][ T6599] macsec1: left allmulticast mode
[   90.617898][   T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.641509][   T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.666943][   T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.687351][   T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.931526][ T6656] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.996583][ T6663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1114'.
[   91.038048][ T6668] block device autoloading is deprecated and will be removed.
[   91.060454][ T6656] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.143691][ T6656] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.159276][ T6678] 9pnet: Could not find request transport: fd0xffffffffffffffff
[   91.193837][ T6688] loop1: detected capacity change from 0 to 512
[   91.233820][ T6688] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1134: casefold flag without casefold feature
[   91.248305][ T6656] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.259374][ T6688] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1134: couldn't read orphan inode 15 (err -117)
[   91.359216][ T6688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.390120][ T6700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.399790][ T6700] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.434379][ T6704] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1139'.
[   91.485903][ T6706] netlink: 'syz.0.1139': attribute type 10 has an invalid length.
[   91.499650][   T51] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.509315][   T51] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.551329][   T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.571483][   T51] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.663156][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.026191][ T6738] netlink: 'syz.2.1151': attribute type 10 has an invalid length.
[   92.089149][ T6746] 9pnet: Could not find request transport: fd0xffffffffffffffff
[   92.142343][ T6753] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.250948][ T6753] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.295874][ T6765] atomic_op ffff88811d03c528 conn xmit_atomic 0000000000000000
[   92.359505][ T6753] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.513916][ T6753] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.583418][   T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.596290][ T1384] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.616506][ T1384] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.634555][ T1384] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.671109][ T6793] bridge0: port 1(macsec1) entered blocking state
[   92.677680][ T6793] bridge0: port 1(macsec1) entered disabled state
[   92.685141][ T6793] macsec1: entered allmulticast mode
[   92.697583][ T6793] macsec1: left allmulticast mode
[   92.802758][ T6807] loop1: detected capacity change from 0 to 2048
[   92.837611][ T6807] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.897709][ T6816] netlink: 'syz.4.1177': attribute type 10 has an invalid length.
[   92.907342][ T6816] syz_tun: entered promiscuous mode
[   92.915844][ T6816] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   92.930245][ T6809] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   92.998819][ T6823] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   93.031285][ T6827] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.068112][ T6827] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.120010][ T6827] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.178062][ T6827] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.243091][ T6837] bridge0: port 1(macsec1) entered blocking state
[   93.250003][ T6837] bridge0: port 1(macsec1) entered disabled state
[   93.260154][ T6837] macsec1: entered allmulticast mode
[   93.266151][ T6837] macsec1: left allmulticast mode
[   93.545113][ T6853] netlink: 'syz.0.1190': attribute type 10 has an invalid length.
[   93.571071][   T29] kauditd_printk_skb: 665 callbacks suppressed
[   93.571089][   T29] audit: type=1326 audit(1756379434.954:7303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6854 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   93.601510][   T29] audit: type=1326 audit(1756379434.954:7304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6854 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   93.625111][   T29] audit: type=1326 audit(1756379434.954:7305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6854 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   93.648870][   T29] audit: type=1326 audit(1756379434.954:7306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6854 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   93.672582][   T29] audit: type=1326 audit(1756379434.954:7307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6854 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   93.696270][   T29] audit: type=1326 audit(1756379434.954:7308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6854 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   93.720108][   T29] audit: type=1326 audit(1756379434.954:7309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6854 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   93.743557][   T29] audit: type=1326 audit(1756379434.954:7310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6854 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   93.767217][   T29] audit: type=1326 audit(1756379434.954:7311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6854 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   93.791025][   T29] audit: type=1326 audit(1756379434.954:7312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6854 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78209bebe9 code=0x7ffc0000
[   93.818208][ T3302] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[   93.859281][ T6867] __nla_validate_parse: 14 callbacks suppressed
[   93.859383][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'.
[   93.916927][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1194'.
[   93.939963][ T6873] atomic_op ffff88811b1e2528 conn xmit_atomic 0000000000000000
[   93.951008][ T6873] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.959649][ T6873] tipc: Resetting bearer <eth:syzkaller0>
[   94.008516][ T6872] tipc: Disabling bearer <eth:syzkaller0>
[   94.017729][ T6875] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   94.027689][ T6875] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   94.038810][ T6877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1201'.
[   94.048670][ T6877] netlink: 'syz.3.1201': attribute type 10 has an invalid length.
[   94.115181][ T6875] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   94.125128][ T6875] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   94.127465][ T6870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.143497][ T6870] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.154907][ T6870] loop1: detected capacity change from 0 to 512
[   94.162374][ T6870] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   94.209451][ T6870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.228335][ T6870] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.260293][ T6875] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   94.270214][ T6875] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   94.275999][ T6870] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1194: corrupted xattr block 19: overlapping e_value 
[   94.315786][ T6870] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   94.324785][ T6870] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1194: corrupted xattr block 19: overlapping e_value 
[   94.344692][ T6870] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   94.355880][ T6870] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1194: corrupted xattr block 19: overlapping e_value 
[   94.367505][ T6875] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   94.379500][ T6875] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   94.499193][ T6902] block device autoloading is deprecated and will be removed.
[   94.519818][   T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[   94.528358][   T52] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   94.542022][  T161] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[   94.550530][  T161] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   94.563041][   T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[   94.571454][   T52] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   94.588847][   T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[   94.597226][   T52] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   94.670128][ T6912] atomic_op ffff88811b1e0128 conn xmit_atomic 0000000000000000
[   94.682383][ T6912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.691199][ T6912] tipc: Resetting bearer <eth:syzkaller0>
[   94.698756][ T6911] tipc: Disabling bearer <eth:syzkaller0>
[   94.891603][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.945948][ T6927] loop1: detected capacity change from 0 to 2048
[   94.960369][ T6927] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.080901][ T6945] 9pnet: Could not find request transport: fd0xffffffffffffffff
[   95.136998][ T6954] atomic_op ffff888119a72128 conn xmit_atomic 0000000000000000
[   95.148753][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1227'.
[   95.149694][ T6954] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.168024][ T6952] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   95.177985][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1227'.
[   95.178944][ T6954] tipc: Resetting bearer <eth:syzkaller0>
[   95.187097][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1227'.
[   95.205166][ T6953] tipc: Disabling bearer <eth:syzkaller0>
[   95.223779][ T6956] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.245198][   T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.289823][   T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.310908][ T6956] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.327357][   T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.337778][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1232'.
[   95.345383][   T52] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.440178][ T6956] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.549271][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1239'.
[   95.566140][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1238'.
[   95.578863][ T6956] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.604030][ T6982] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   95.616969][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1239'.
[   95.635410][   T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.658479][   T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.676458][ T1384] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.684773][ T1384] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.799864][ T3302] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[   95.915510][ T7003] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.041630][ T7003] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.083724][ T7012] 9pnet_fd: Insufficient options for proto=fd
[   96.193361][ T7003] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.236760][ T7003] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.370304][ T7031] block device autoloading is deprecated and will be removed.
[   96.593811][ T7044] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   96.999075][ T7070] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   97.008993][ T7070] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   97.091017][ T7070] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   97.101025][ T7070] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   97.155987][ T7070] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   97.166567][ T7070] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   97.251830][ T7070] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   97.261808][ T7070] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   97.431449][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   97.439828][   T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   97.459491][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   97.467946][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   97.476633][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   97.484918][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   97.950968][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   97.959364][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   98.555003][ T7132] atomic_op ffff88811b1c8928 conn xmit_atomic 0000000000000000
[   98.566818][ T7132] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   98.648462][   T29] kauditd_printk_skb: 494 callbacks suppressed
[   98.648477][   T29] audit: type=1326 audit(1756379440.034:7807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e08eebe9 code=0x7ffc0000
[   98.698031][   T29] audit: type=1326 audit(1756379440.074:7808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e08eebe9 code=0x7ffc0000
[   98.721763][   T29] audit: type=1326 audit(1756379440.074:7809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37e08eebe9 code=0x7ffc0000
[   98.745319][   T29] audit: type=1326 audit(1756379440.074:7810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e08eebe9 code=0x7ffc0000
[   98.768749][   T29] audit: type=1326 audit(1756379440.074:7811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e08eebe9 code=0x7ffc0000
[   98.792340][   T29] audit: type=1326 audit(1756379440.074:7812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37e08ed550 code=0x7ffc0000
[   98.815817][   T29] audit: type=1326 audit(1756379440.074:7813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e08eebe9 code=0x7ffc0000
[   98.839307][   T29] audit: type=1326 audit(1756379440.074:7814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e08eebe9 code=0x7ffc0000
[   98.862800][   T29] audit: type=1326 audit(1756379440.074:7815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f37e08eebe9 code=0x7ffc0000
[   98.886160][   T29] audit: type=1326 audit(1756379440.074:7816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e08eebe9 code=0x7ffc0000
[   98.930561][ T7153] FAULT_INJECTION: forcing a failure.
[   98.930561][ T7153] name failslab, interval 1, probability 0, space 0, times 0
[   98.943261][ T7153] CPU: 1 UID: 0 PID: 7153 Comm: syz.0.1303 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   98.943287][ T7153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   98.943299][ T7153] Call Trace:
[   98.943306][ T7153]  <TASK>
[   98.943315][ T7153]  __dump_stack+0x1d/0x30
[   98.943340][ T7153]  dump_stack_lvl+0xe8/0x140
[   98.943357][ T7153]  dump_stack+0x15/0x1b
[   98.943370][ T7153]  should_fail_ex+0x265/0x280
[   98.943388][ T7153]  should_failslab+0x8c/0xb0
[   98.943408][ T7153]  kmem_cache_alloc_noprof+0x50/0x310
[   98.943430][ T7153]  ? vm_area_dup+0x33/0x2c0
[   98.943455][ T7153]  vm_area_dup+0x33/0x2c0
[   98.943479][ T7153]  __split_vma+0xe9/0x650
[   98.943500][ T7153]  ? obj_cgroup_charge_account+0x122/0x1a0
[   98.943526][ T7153]  ? should_fail_ex+0x30/0x280
[   98.943542][ T7153]  ? __rcu_read_unlock+0x4f/0x70
[   98.943560][ T7153]  vms_gather_munmap_vmas+0x17a/0x7b0
[   98.943579][ T7153]  ? avc_has_perm+0xf7/0x180
[   98.943601][ T7153]  do_vmi_align_munmap+0x1a4/0x3d0
[   98.943629][ T7153]  do_vmi_munmap+0x1db/0x220
[   98.943648][ T7153]  do_munmap+0x8a/0xc0
[   98.943667][ T7153]  mremap_to+0x1a4/0x440
[   98.943688][ T7153]  ? check_prep_vma+0x49c/0x660
[   98.943713][ T7153]  __se_sys_mremap+0x65a/0xb50
[   98.943741][ T7153]  ? fput+0x8f/0xc0
[   98.943765][ T7153]  ? ksys_write+0x192/0x1a0
[   98.943783][ T7153]  __x64_sys_mremap+0x67/0x80
[   98.943808][ T7153]  x64_sys_call+0x2a24/0x2ff0
[   98.943825][ T7153]  do_syscall_64+0xd2/0x200
[   98.943848][ T7153]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   98.943867][ T7153]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   98.943888][ T7153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.943905][ T7153] RIP: 0033:0x7f78209bebe9
[   98.943917][ T7153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   98.943932][ T7153] RSP: 002b:00007f781f41f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[   98.943948][ T7153] RAX: ffffffffffffffda RBX: 00007f7820be5fa0 RCX: 00007f78209bebe9
[   98.943959][ T7153] RDX: 0000000000200000 RSI: 0000000000600600 RDI: 0000200000000000
[   98.943969][ T7153] RBP: 00007f781f41f090 R08: 0000200000a00000 R09: 0000000000000000
[   98.943979][ T7153] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[   98.943989][ T7153] R13: 00007f7820be6038 R14: 00007f7820be5fa0 R15: 00007ffce527ce88
[   98.944006][ T7153]  </TASK>
[   99.112737][ T7148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.193341][ T7148] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.563537][ T7165] __nla_validate_parse: 6 callbacks suppressed
[   99.563556][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1307'.
[   99.583746][ T7166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1306'.
[   99.607282][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1306'.
[   99.680282][ T7168] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   99.947419][ T1384] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.000123][ T1384] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.008386][ T1384] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.016645][ T1384] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.057980][ T7177] atomic_op ffff88811b1cb128 conn xmit_atomic 0000000000000000
[  100.066629][ T7177] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  100.299569][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1317'.
[  100.321690][ T7195] program syz.0.1316 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.336083][ T7195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.345214][ T7195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.379195][ T7205] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.426652][ T7205] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.480496][ T7205] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.510951][ T7198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.520410][ T7198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.532747][ T7198] loop3: detected capacity change from 0 to 512
[  100.533744][ T7205] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.551330][ T7198] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  100.563524][ T7221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.570933][ T7221] syzkaller0: entered promiscuous mode
[  100.576574][ T7221] syzkaller0: entered allmulticast mode
[  100.578450][ T7198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.595452][ T7198] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.599432][ T7221] tipc: Resetting bearer <eth:syzkaller0>
[  100.613416][ T7220] tipc: Resetting bearer <eth:syzkaller0>
[  100.616302][ T7198] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1317: corrupted xattr block 19: overlapping e_value 
[  100.634544][ T7220] tipc: Disabling bearer <eth:syzkaller0>
[  100.635426][ T7198] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  100.649514][ T7198] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1317: corrupted xattr block 19: overlapping e_value 
[  100.664818][ T7198] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  100.679984][ T7198] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1317: corrupted xattr block 19: overlapping e_value 
[  100.693989][   T52] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.711497][   T52] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.726225][   T52] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.739200][   T52] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.849438][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1328'.
[  100.912770][ T7246] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  101.046252][ T7257] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  101.212879][ T7263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1337'.
[  101.265466][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1337'.
[  101.292815][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.751538][ T7274] program syz.4.1344 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  101.766098][ T7274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.774899][ T7274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.860189][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1346'.
[  101.929943][ T7286] FAULT_INJECTION: forcing a failure.
[  101.929943][ T7286] name failslab, interval 1, probability 0, space 0, times 0
[  101.942743][ T7286] CPU: 1 UID: 0 PID: 7286 Comm: syz.2.1347 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  101.942766][ T7286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  101.942776][ T7286] Call Trace:
[  101.942782][ T7286]  <TASK>
[  101.942789][ T7286]  __dump_stack+0x1d/0x30
[  101.942807][ T7286]  dump_stack_lvl+0xe8/0x140
[  101.942824][ T7286]  dump_stack+0x15/0x1b
[  101.942837][ T7286]  should_fail_ex+0x265/0x280
[  101.942906][ T7286]  should_failslab+0x8c/0xb0
[  101.942926][ T7286]  kmem_cache_alloc_noprof+0x50/0x310
[  101.943056][ T7286]  ? audit_log_start+0x365/0x6c0
[  101.943120][ T7286]  audit_log_start+0x365/0x6c0
[  101.943156][ T7286]  ? cgroup_freezing+0x56/0x60
[  101.943180][ T7286]  ? freezing_slow_path+0xed/0x100
[  101.943265][ T7286]  audit_seccomp+0x48/0x100
[  101.943347][ T7286]  ? __seccomp_filter+0x68c/0x10d0
[  101.943366][ T7286]  __seccomp_filter+0x69d/0x10d0
[  101.943402][ T7286]  __secure_computing+0x82/0x150
[  101.943420][ T7286]  syscall_trace_enter+0xcf/0x1e0
[  101.943442][ T7286]  do_syscall_64+0xac/0x200
[  101.943477][ T7286]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  101.943501][ T7286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.943622][ T7286] RIP: 0033:0x7f37e08eebe9
[  101.943636][ T7286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.943651][ T7286] RSP: 002b:00007f37df357038 EFLAGS: 00000246 ORIG_RAX: 00000000000000db
[  101.943667][ T7286] RAX: ffffffffffffffda RBX: 00007f37e0b15fa0 RCX: 00007f37e08eebe9
[  101.943677][ T7286] RDX: ffffffffffbffff8 RSI: 000000000000002c RDI: 0000200000b2c000
[  101.943688][ T7286] RBP: 00007f37df357090 R08: 0000000000000000 R09: 0000000000000000
[  101.943698][ T7286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  101.943773][ T7286] R13: 00007f37e0b16038 R14: 00007f37e0b15fa0 R15: 00007ffc3febfa98
[  101.943791][ T7286]  </TASK>
[  102.141861][ T7284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.151540][ T7292] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  102.158082][ T7292] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  102.165612][ T7292] vhci_hcd vhci_hcd.0: Device attached
[  102.169493][ T7284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.173511][ T7294] vhci_hcd: cannot find a urb of seqnum 4294967295 max seqnum 0
[  102.189968][ T7284] loop3: detected capacity change from 0 to 512
[  102.196568][ T7277] vhci_hcd: stop threads
[  102.200843][ T7277] vhci_hcd: release socket
[  102.205556][ T7277] vhci_hcd: disconnect device
[  102.216285][ T7284] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  102.248276][ T7284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.261242][ T7284] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.272843][ T7284] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1346: corrupted xattr block 19: overlapping e_value 
[  102.287040][ T7284] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  102.296210][ T7284] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1346: corrupted xattr block 19: overlapping e_value 
[  102.298771][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1351'.
[  102.310865][ T7284] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  102.328147][ T7284] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1346: corrupted xattr block 19: overlapping e_value 
[  102.397460][ T7303] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  102.654341][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1355'.
[  102.695721][ T7224] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  102.716484][ T7312] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  102.799863][ T7315] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  102.814179][ T7315] bridge0: port 1(macsec1) entered blocking state
[  102.820700][ T7315] bridge0: port 1(macsec1) entered disabled state
[  102.827329][ T7315] macsec1: entered allmulticast mode
[  102.833169][ T7315] macsec1: left allmulticast mode
[  102.860955][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.944755][ T7329] erspan0: left allmulticast mode
[  102.949887][ T7329] erspan0: left promiscuous mode
[  102.951099][ T7327] program syz.1.1363 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  102.954982][ T7329] GPL: port 1(erspan0) entered disabled state
[  102.987152][ T7327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.996462][ T7327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.063654][ T7340] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.107089][ T7340] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.160828][ T7340] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.216891][ T7340] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.452203][ T7349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7349 comm=syz.4.1368
[  103.531708][ T7353] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  103.547278][ T7353] bridge0: port 1(macsec1) entered blocking state
[  103.553759][ T7353] bridge0: port 1(macsec1) entered disabled state
[  103.561118][ T7353] macsec1: entered allmulticast mode
[  103.567092][ T7353] macsec1: left allmulticast mode
[  103.578205][ T7355] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  103.591835][ T7355] bridge0: port 1(macsec1) entered blocking state
[  103.598425][ T7355] bridge0: port 1(macsec1) entered disabled state
[  103.605032][ T7355] macsec1: entered allmulticast mode
[  103.611031][ T7355] macsec1: left allmulticast mode
[  103.634717][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.653960][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.662593][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.683427][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.700571][   T29] kauditd_printk_skb: 500 callbacks suppressed
[  103.700587][   T29] audit: type=1326 audit(1756379445.084:8315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc0d3ebe9 code=0x7ffc0000
[  103.753169][   T29] audit: type=1326 audit(1756379445.114:8316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7efcc0d3ebe9 code=0x7ffc0000
[  103.776675][   T29] audit: type=1326 audit(1756379445.114:8317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc0d3ebe9 code=0x7ffc0000
[  103.800326][   T29] audit: type=1326 audit(1756379445.114:8318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcc0d3ebe9 code=0x7ffc0000
[  103.823839][   T29] audit: type=1326 audit(1756379445.114:8319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc0d3ebe9 code=0x7ffc0000
[  103.847520][   T29] audit: type=1326 audit(1756379445.114:8320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcc0d3ebe9 code=0x7ffc0000
[  103.871189][   T29] audit: type=1326 audit(1756379445.114:8321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc0d3ebe9 code=0x7ffc0000
[  103.894717][   T29] audit: type=1326 audit(1756379445.114:8322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efcc0d3d69f code=0x7ffc0000
[  103.913895][ T7367] block device autoloading is deprecated and will be removed.
[  103.918148][   T29] audit: type=1326 audit(1756379445.114:8323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc0d3ebe9 code=0x7ffc0000
[  103.949281][   T29] audit: type=1326 audit(1756379445.114:8324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6b73ebe9 code=0x7ffc0000
[  104.048921][ T7376] FAULT_INJECTION: forcing a failure.
[  104.048921][ T7376] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  104.062316][ T7376] CPU: 1 UID: 0 PID: 7376 Comm: syz.4.1380 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  104.062346][ T7376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  104.062361][ T7376] Call Trace:
[  104.062368][ T7376]  <TASK>
[  104.062375][ T7376]  __dump_stack+0x1d/0x30
[  104.062395][ T7376]  dump_stack_lvl+0xe8/0x140
[  104.062433][ T7376]  dump_stack+0x15/0x1b
[  104.062454][ T7376]  should_fail_ex+0x265/0x280
[  104.062481][ T7376]  should_fail+0xb/0x20
[  104.062503][ T7376]  should_fail_usercopy+0x1a/0x20
[  104.062531][ T7376]  copy_to_user_nofault+0x7f/0x120
[  104.062553][ T7376]  bpf_probe_write_user+0x83/0xc0
[  104.062589][ T7376]  bpf_prog_19072b5a3fcf5d64+0x41/0x49
[  104.062608][ T7376]  bpf_trace_run3+0x10c/0x1d0
[  104.062630][ T7376]  ? mas_destroy+0x1f0f/0x2090
[  104.062657][ T7376]  ? mas_destroy+0x1f0f/0x2090
[  104.062680][ T7376]  __traceiter_kmem_cache_free+0x38/0x60
[  104.062708][ T7376]  ? mas_destroy+0x1f0f/0x2090
[  104.062730][ T7376]  kmem_cache_free+0x257/0x300
[  104.062759][ T7376]  mas_destroy+0x1f0f/0x2090
[  104.062788][ T7376]  ? mas_store_prealloc+0x77b/0x9e0
[  104.062820][ T7376]  ? should_fail_ex+0xdb/0x280
[  104.062844][ T7376]  ? ___slab_alloc+0x270/0x900
[  104.062879][ T7376]  ? ___slab_alloc+0x270/0x900
[  104.062907][ T7376]  ? mas_alloc_nodes+0x333/0x520
[  104.062933][ T7376]  ? should_fail_ex+0xdb/0x280
[  104.062955][ T7376]  ? mas_alloc_nodes+0x333/0x520
[  104.062991][ T7376]  ? kmem_cache_alloc_bulk_noprof+0x258/0x410
[  104.063024][ T7376]  ? kmem_cache_alloc_noprof+0x186/0x310
[  104.063057][ T7376]  ? mas_alloc_nodes+0x265/0x520
[  104.063094][ T7376]  ? mas_alloc_nodes+0x4f0/0x520
[  104.063126][ T7376]  ? mas_wr_preallocate+0x32f/0x410
[  104.063159][ T7376]  mas_store_gfp+0x109/0x2d0
[  104.063189][ T7376]  ? vms_gather_munmap_vmas+0x6b5/0x7b0
[  104.063225][ T7376]  do_vmi_align_munmap+0x268/0x3d0
[  104.063259][ T7376]  do_vmi_munmap+0x1db/0x220
[  104.063305][ T7376]  do_munmap+0x8a/0xc0
[  104.063330][ T7376]  mremap_to+0x1a4/0x440
[  104.063359][ T7376]  ? check_prep_vma+0x49c/0x660
[  104.063388][ T7376]  __se_sys_mremap+0x7d7/0xb50
[  104.063431][ T7376]  ? ksys_write+0x192/0x1a0
[  104.063461][ T7376]  __x64_sys_mremap+0x67/0x80
[  104.063495][ T7376]  x64_sys_call+0x2a24/0x2ff0
[  104.063517][ T7376]  do_syscall_64+0xd2/0x200
[  104.063550][ T7376]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  104.063580][ T7376]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  104.063609][ T7376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.063629][ T7376] RIP: 0033:0x7efcc0d3ebe9
[  104.063643][ T7376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.063661][ T7376] RSP: 002b:00007efcbf79f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  104.063684][ T7376] RAX: ffffffffffffffda RBX: 00007efcc0f65fa0 RCX: 00007efcc0d3ebe9
[  104.063699][ T7376] RDX: 0000000000002000 RSI: 0000000000002000 RDI: 0000200000ffc000
[  104.063711][ T7376] RBP: 00007efcbf79f090 R08: 0000200000fff000 R09: 0000000000000000
[  104.063722][ T7376] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001
[  104.063735][ T7376] R13: 00007efcc0f66038 R14: 00007efcc0f65fa0 R15: 00007fff3a92ceb8
[  104.063760][ T7376]  </TASK>
[  104.468651][ T7385] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.489305][ T7387] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  104.551718][ T7385] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.589774][ T7392] __nla_validate_parse: 11 callbacks suppressed
[  104.589865][ T7392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1382'.
[  104.640889][ T7385] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.745511][ T7390] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  104.792022][ T7385] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.011308][ T7407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1389'.
[  105.100106][ T2134] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.115860][ T2134] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.160424][ T2134] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.171248][ T2134] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.330444][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1394'.
[  105.354877][ T7419] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  105.372840][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1394'.
[  105.381861][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1394'.
[  105.410479][ T7419] bridge0: port 1(macsec1) entered blocking state
[  105.417240][ T7419] bridge0: port 1(macsec1) entered disabled state
[  105.424087][ T7419] macsec1: entered allmulticast mode
[  105.438573][ T7419] macsec1: left allmulticast mode
[  105.450831][ T7432] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  105.535129][ T7444] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1403'.
[  105.689256][ T7456] netlink: 'syz.1.1407': attribute type 1 has an invalid length.
[  105.697206][ T7456] netlink: 'syz.1.1407': attribute type 2 has an invalid length.
[  105.705080][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'.
[  105.728881][ T7456] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1407'.
[  105.729767][ T7454] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.761042][ T7458] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  105.796809][ T7454] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.953688][ T7454] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.022140][ T7454] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.217950][ T7480] ==================================================================
[  106.226191][ T7480] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission
[  106.235184][ T7480] 
[  106.237522][ T7480] write to 0xffff88811b2aaca0 of 4 bytes by task 7483 on cpu 0:
[  106.245250][ T7480]  selinux_inode_permission+0x3ac/0x740
[  106.250842][ T7480]  security_inode_permission+0x6d/0xb0
[  106.256334][ T7480]  inode_permission+0x106/0x310
[  106.261206][ T7480]  link_path_walk+0x162/0x900
[  106.265902][ T7480]  path_openat+0x1de/0x2170
[  106.270406][ T7480]  do_filp_open+0x109/0x230
[  106.274920][ T7480]  do_sys_openat2+0xa6/0x110
[  106.279525][ T7480]  __x64_sys_openat+0xf2/0x120
[  106.284310][ T7480]  x64_sys_call+0x2e9c/0x2ff0
[  106.288997][ T7480]  do_syscall_64+0xd2/0x200
[  106.293519][ T7480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.299506][ T7480] 
[  106.301826][ T7480] read to 0xffff88811b2aaca0 of 4 bytes by task 7480 on cpu 1:
[  106.309363][ T7480]  selinux_inode_permission+0x334/0x740
[  106.314920][ T7480]  security_inode_permission+0x6d/0xb0
[  106.320391][ T7480]  inode_permission+0x106/0x310
[  106.325273][ T7480]  link_path_walk+0x162/0x900
[  106.329956][ T7480]  path_lookupat+0x63/0x2a0
[  106.334472][ T7480]  do_o_path+0x45/0x130
[  106.338642][ T7480]  path_openat+0x1df9/0x2170
[  106.343231][ T7480]  do_filp_open+0x109/0x230
[  106.347735][ T7480]  io_openat2+0x272/0x390
[  106.352190][ T7480]  io_openat+0x1b/0x30
[  106.356270][ T7480]  __io_issue_sqe+0xfe/0x2e0
[  106.360873][ T7480]  io_issue_sqe+0x53/0x970
[  106.365309][ T7480]  io_submit_sqes+0x675/0x1060
[  106.370079][ T7480]  __se_sys_io_uring_enter+0x1c1/0x1b70
[  106.375630][ T7480]  __x64_sys_io_uring_enter+0x78/0x90
[  106.381014][ T7480]  x64_sys_call+0x2de1/0x2ff0
[  106.385783][ T7480]  do_syscall_64+0xd2/0x200
[  106.390297][ T7480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.396192][ T7480] 
[  106.398528][ T7480] value changed: 0x00000001 -> 0x00000000
[  106.404360][ T7480] 
[  106.406681][ T7480] Reported by Kernel Concurrency Sanitizer on:
[  106.412831][ T7480] CPU: 1 UID: 0 PID: 7480 Comm: syz.1.1416 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  106.422551][ T7480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  106.432612][ T7480] ==================================================================
[  108.360789][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.372047][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.383814][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.395145][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0