last executing test programs:

2.979816231s ago: executing program 1 (id=663):
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCFLSH(r0, 0x5608, 0x0)

2.887256785s ago: executing program 1 (id=665):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095d04b271fb4c9c7b3a809c9f2cb4b0a5f809cdca727351463f2fc4dca19cd50da0a5e0f21499acfacd8b949defe723b0eb8743df783e019899e44"], &(0x7f0000000100)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYRES16=<r2=>r0], &(0x7f0000000600)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000, 0x3, &(0x7f0000811000/0x4000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10)
sysinfo(&(0x7f0000000000)=""/177)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRES32=r6, @ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRESHEX=r2, @ANYRES64=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x18)
r10 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x88c4)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x40000000, 0x0, 0x3}, 0x8})
connect$llc(r5, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x12, 0x24, 0x2}, 0x10)
socket(0x10, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000480)={0x732, 0x0, 0x5, 0x7, 0x2, 0x4})
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x7fffffd, 0x2, 0x0, 0x0, 0xfffc}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x3, 0x0, 0x0, 0x600}, 0x20)
fspick(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1)

2.156097077s ago: executing program 2 (id=671):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x74}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x194)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000009d60b6348769843200f33300000034000000050000000300000000000010080000000300000000"], 0x0, 0x51}, 0x28)
syncfs(r4)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x77f, 0xffffffff}, 0x20)
connect$l2tp6(r5, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0xc, 0x3}, 0x20)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000ac0)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYRES8=r5, @ANYRESDEC=r10, @ANYRES8=r5, @ANYBLOB="615a20df26c270a3d265eb5278be516103e7658a2ac434266ecb6a7b09087174d59f418058dbc3d164ea7df840e92d51372884d0f82b9728b2571a0b34b82f6263ba2619681bfef8fcf0aa3824283758ec97a5b897bcbcaef445f8f7c658dc474ea3a5b6dc518e3a09f8e15cf87e1dcbd7d88a322ad31f01d1ba583a0daecfb34b7c5d1328b47fd2e20eae8cf06c74a4ae41b2c8d9007c5be54476b933862cc0cbb14f55d0ad018ab6b9e3fd39ef452fec707d6fe7dca1d89963bb5ec0e976b0bfc9f4ab323daf12ca764a96d88b6b71ca904711c4e2f2693c83b710adffffb874dab18cdf73e0be7b6e15f787e6d7239e", @ANYRES64=r7], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r11}, 0x10)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r12, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000180)={'wpan1\x00', <r13=>0x0})
r14 = getpid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r8, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_PID={0x8, 0x1c, r14}]}, 0x24}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18)
r15 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r15, 0x6, 0x0, 0x0, 0x0)
unshare(0x20060400)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

2.113711529s ago: executing program 2 (id=672):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x37}, 0x100300, 0x0, 0x3, 0x9, 0x9, 0x7}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000005c0)={@loopback, 0x120300, 0x0, 0xff, 0xb, 0x5, 0x85}, 0x20)
fcntl$lock(r0, 0x7, &(0x7f0000000300)={0x2, 0x1, 0x560a, 0x7, 0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080026bd7040fbdbdf2504000300", @ANYRES32=0x0, @ANYBLOB="0a000600505050505050000004005f0006003600060000001e002a0065125050505050500802110000010802110000003c0400fc080000000a0034"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a000000070000000000000e030000000000000008000000000000523c000000000000000000000d8a866180fa1dc5e3a8b300000000000000000000002e2e00"], &(0x7f00000001c0)=""/250, 0x4a, 0xfa, 0x1}, 0x28)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000006a004d"], 0x18}}, 0x20004000)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES64=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
socket(0x2, 0x80805, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x10001, 0x9, 0x20001}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r6, 0x0, 0xffffffffffffffff}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f8b23"}, 0xf)
perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r8}, 0x10)
io_setup(0x3, &(0x7f0000000340))

2.032134852s ago: executing program 1 (id=675):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x101}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0)

1.961481575s ago: executing program 1 (id=676):
r0 = socket$inet6(0xa, 0x2, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c)
recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/144}, {&(0x7f0000000200)=""/230}, {&(0x7f0000000300)=""/86, 0xfffffe94}, {&(0x7f00000003c0)=""/253}, {&(0x7f00000004c0)=""/208}]}, 0x3422a61a}], 0x4000000000003c9, 0x10102, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
pidfd_getfd(r3, r3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x100202, 0x0, 0xfffffffb}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000801004196700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
bpf$PROG_LOAD(0x5, 0x0, 0x28)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)
readv(r4, &(0x7f0000000340)=[{&(0x7f0000000180)=""/58, 0x3a}], 0x1)

1.949936116s ago: executing program 2 (id=677):
r0 = socket(0x1d, 0x4, 0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080)
r3 = openat(0xffffffffffffffff, &(0x7f0000000400)='./mnt\x00', 0x6a102, 0x40)
pwritev2(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x42, 0x60)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
ioctl$SIOCX25SCAUSEDIAG(r5, 0x89ec, &(0x7f0000000180)={0x28})
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0300003011b50004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="c500000000000000000000000000040000000000", @ANYRES32=r3, @ANYRES32, @ANYRESHEX=r5], 0x50)
r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000009000000f1ff0754209f23830ebb52ffff7a69000082900400cc06e17e43dce1ddc276ce172d59", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000000000000400000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2d}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @ldst={0x3, 0x0, 0x3, 0xb, 0x4, 0x2}], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x29, &(0x7f00000001c0)=""/41, 0x41100, 0x41, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x5, 0x3, 0xfffffffb}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0xffffffffffffffff, r4, r5, r6, 0xffffffffffffffff, r7, r8, 0xffffffffffffffff], &(0x7f0000000480)=[{0x1, 0x5, 0x6, 0x8}, {0x2, 0x5, 0x3, 0xc}], 0x10, 0x6}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="911089000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'veth1_vlan\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x78}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @empty, [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x3c, 0x1, 0x5, 0x64}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'pim6reg0\x00', {0x400000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff11)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)

1.859717689s ago: executing program 2 (id=679):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
close_range(0xffffffffffffffff, r2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

1.781343753s ago: executing program 0 (id=682):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x74}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x194)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000009d60b6348769843200f33300000034000000050000000300000000000010080000000300000000"], 0x0, 0x51}, 0x28)
syncfs(r4)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x77f, 0xffffffff}, 0x20)
connect$l2tp6(r5, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0xc, 0x3}, 0x20)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000ac0)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYRES8=r5, @ANYRESDEC=r10, @ANYRES8=r5, @ANYBLOB="615a20df26c270a3d265eb5278be516103e7658a2ac434266ecb6a7b09087174d59f418058dbc3d164ea7df840e92d51372884d0f82b9728b2571a0b34b82f6263ba2619681bfef8fcf0aa3824283758ec97a5b897bcbcaef445f8f7c658dc474ea3a5b6dc518e3a09f8e15cf87e1dcbd7d88a322ad31f01d1ba583a0daecfb34b7c5d1328b47fd2e20eae8cf06c74a4ae41b2c8d9007c5be54476b933862cc0cbb14f55d0ad018ab6b9e3fd39ef452fec707d6fe7dca1d89963bb5ec0e976b0bfc9f4ab323daf12ca764a96d88b6b71ca904711c4e2f2693c83b710adffffb874dab18cdf73e0be7b6e15f787e6d7239e", @ANYRES64=r7], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r11}, 0x10)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r12, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000180)={'wpan1\x00', <r13=>0x0})
r14 = getpid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r8, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_PID={0x8, 0x1c, r14}]}, 0x24}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18)
r15 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r15, 0x6, 0x0, 0x0, 0x0)
unshare(0x20060400)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

1.730913905s ago: executing program 0 (id=683):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
sendmmsg$inet(r0, 0x0, 0x0, 0x40080a0)
setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)={{0x1, 0x1, 0x18, r2, {0x0, 0xee01}}, './file0\x00'})
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000008c0))
statx(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x400, 0x10, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000480)={[{@nodelalloc}, {@nodioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xfffffffffffffff7}}, {@i_version}, {@discard}, {@prjquota}, {@resgid}, {@init_itable}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
socket$inet(0x2b, 0x801, 0x0)
setreuid(0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0, <r4=>0x0}, &(0x7f00000000c0)=0xc)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r4}]}]}, 0x28}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}]}})
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {0x1, 0x1}, [{0x2, 0x0, 0xee01}, {}, {0x2, 0x3}, {0x2, 0x2}, {0x2, 0x6e7353ede4900d4f, 0xee01}, {0x2, 0x2}], {0x4, 0x1}, [{0x8, 0x7}, {0x8, 0x3}, {0x8, 0x4}], {0x10, 0x4}, {0x20, 0x9}}, 0x6c, 0x1)

1.693599807s ago: executing program 0 (id=684):
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x125000, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000900)='kfree\x00', r1}, 0x18)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060086dd"], 0x24}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010026bd7000ffffffff0a14204003000006fffffff014000100ff020000000000000000000000000001140002"], 0x44}, 0x1, 0x0, 0x0, 0x40814}, 0x4000004)

1.516021344s ago: executing program 3 (id=685):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
eventfd2(0x5, 0x0)

1.492386565s ago: executing program 3 (id=686):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x2, 0x18, 0x3, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x11}, 0x431b}}, @sadb_x_policy={0x8, 0x12, 0xfffe, 0x0, 0x0, 0x1, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private1}}, @sadb_address={0x5, 0x6, 0x0, 0x80, 0x0, @in6={0xa, 0x4e21, 0x5, @mcast2, 0x3}}]}, 0xa0}}, 0x0)
syz_emit_ethernet(0x2db36d0534a3afab, 0x0, 0x0)

1.396108549s ago: executing program 3 (id=688):
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x5}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3272a6bc}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]})
msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000068e000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x6e)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80}, 0x18)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x24044800)
r4 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r5 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c)
sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="bc", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x48081)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r6 = io_uring_setup(0x6f8c, &(0x7f0000000300)={0x0, 0x63d7, 0x80, 0x2, 0x3d7})
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xb, 0x200c1, 0x0, r6})

1.250968896s ago: executing program 4 (id=690):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
bind$packet(r0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008040000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYRES8=r2], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000)

1.185520869s ago: executing program 3 (id=691):
r0 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZH\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\xea\x82\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\x0f\x8eS\xaeX\x93\x7f\xd3\xb9a\xe4\xe0\xbd\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x84\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1#\xe7N\x89\xf8\xe8+\xa1\x82\x13\xb2\xa9\xef\xa5\xf8\x8b \x00\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)2\xe2\xd6\x81\x00b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|&k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc2Ru2Ht\re\xa1\xf6\xbd\xaa\xb0\x83}i\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf\xa4O\xb4\xed\xc8\xccH\xd1=\x81\x00\x00\x00\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xd6\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\x86C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17U\xf0\x16K\xf9&@\xb1[\xe2j$F1n@\xde\n%t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5#\x7f\xa8\x1f\x14\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebk\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x850\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96\x87\xc0e\xab\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!\xec\xf7$\xc2\xbaU \x98\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\"k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xec\x01\'\t\x89(\xf9\x98B\xaf\xde*\x91\xd5k\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\xdfC\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84\x0e\xa7U\xc7}\xea.U`\x1b*\xcep\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xc9\xcfw\xf3\x02\x1b\xde\xc3\x86\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x13\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcdQ\xdf\x83\xbdjp,\xe8\xbb\xe6\xc6Db\xb8\xd6\xcd\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd4k7L\x8a\xa3Z\xf9%{\xfax\x9a\x04\'/\x90\xe6\xe2\xe9\xf1@o\x0ez\xb8\xce\xbeF\x0fkE\xf4ry\x92n\xff\xcb\xf8e\xf3j\xc5[wK\x91\xdb\xf7-r\xd3\x1bx\x9b$\x91\x03q~@\xd8R\x11\x05|\x8f\xb4\xc9\x16\x87C\xab\x96\xc4\xef\xea\xb9\r\xf5\xf3\xbe\x8a\t\xc7\x88\xc0sL;.\xcf\x1d\xc4^\xb0l\xbb\x97\xc5\xf6n\xca\x18M\xb8\x81\xff\xa9~\xf7\xa3\xa6\xd3\x15I\xecXG\x89\xa8\b\x8b\xcc\xe8\x88\xa07Z\x03\xff14\x87I\xc7\\vK<m2\x16\x03\xcd\xc1\xa8.\x7f\x16qlk\xf1\xf1y\x8c\xde\xd6|\xa1(\xf4\x12O\xca3\xf8%1\x8d\xd7\a\xfeJ\xe6\x8bc\xb3\x1bKC.\xafB\x8d\xdd\xf9\x1e\x9d\xa7\x13\x00\x14\xc7\xa1\xf3\x1e\xcb\x19\x13z`\xac\xf3\xd1x\x1b#}\xfaYR\xc5#Zoag@\x18\xfa*\xb4\xc4\x04\x03V\x87\xc5\xe7\xb5\x9bJ\x85-\x7f\xfe\xc0\xb7g\xe8\'`\x96q\x88[\xf8\xe8L\x12\x85\xf5t\x99\x0e}\xd3H\xed\xda\xf3>\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14<B\x91\xc0{{\x9d@\xb3a\xad\x14\xe9\xcc|\xd7\xa1\xc6\xb9F\x04\xce]\xb9Y\xbd\xbd\f\xa4F;q\xec\x83\x9bM\x93\xa4\x9c\xdd\x93\xa0\x82E\x02d\xd4RAI\xd9O\x17\xa6P#\xa35\a\xf6\xbb\t>p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7)
read(r0, &(0x7f0000000000)=""/269, 0xfffffdef)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000030800460000380000000003069078ac1414bbac1414aa440486504e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000090a95527700a000100050000b0fa2eea"], 0x0)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18)
write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65)

1.15467413s ago: executing program 4 (id=692):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) (fail_nth: 1)

1.100673573s ago: executing program 1 (id=693):
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a08404, &(0x7f0000000300)={[{@bh}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
ptrace(0x10, 0x0)
ptrace$ARCH_SET_GS(0x1e, 0x0, 0x0, 0x1001)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x140, 0x3ff}, 0x0, 0x0, 0xffffffff, 0xc, 0x5, 0xc0e, 0x7, 0x4, 0x1, 0x1})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
stat(0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = getgid()
fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:modules_dep_t:s0\x00', 0x23, 0x0)
lchown(0x0, 0x0, r6)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$PIO_UNIMAPCLR(r7, 0x4b68, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$caif_stream(0x25, 0x1, 0x4)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004640)=[{{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{&(0x7f0000003a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003b00)="1eccf6acf51ce3f5059f6a100437c8698454b978d6d49e68ce6a894b75fea009038992f1b9c6b41dddfcfeac38a9c4ae6eeb556dd443c01341d2daa8aa96cbd106125248ffc55e6b9e1e9d47afb5844df9d311857ae42fdea74455e2be4dcddc2ae21ee3781364be669b977bad952ef6e9b35bdc3248e45834903c5dcb7d6f374efc", 0x82}, {&(0x7f00000003c0)="49df1aa6bf043b3f6d7a600956af9c3cef9deb7996382895432205749842846110770733c425108089ee8b1350cda7425ecd403c4f971aa0e421913ab2bbbdd8e0e9550e98f75df02384cd3bd200d5b482c96687ef6f6bccd3da27505661055d253f2615274b4fbeb7c596b1aa2ceb4ee0bacd63e4d0b7ee485aba04f467fe9c676eb90bfa02458ce025eafead2fabeebc6d6418c660680891a9889f471db7a1a95c57d57059361ca67288f4f3788b46650efa07f0ef25ec5956f4e223711bc60ac5", 0xc2}, {&(0x7f0000003c80)="ad8c6e7b970cefe461a27305f0100d6c56199798936383e81babb568b521f39d40e356e432b8e55a711ccb6b9b0bbb558a30cae3c187f8cc03b7293e20520b369f997cd4a7200d3bc70f4c471f21e228d82f9661034644cf03513b597ab443412757b3600c26c014489c6f0b18d1e30d094ab5fd96115fac5c29fd1ad5fcf56e5afc833f670c0d5048396d25b87bf64fd00e48ab5e104ea02ccd953fd26619a8b8bbdc4a2cad51dc688df4d5c4d53e691a4581ff913d7de89a8dadfbd04b8a0daadef3665a934ca0", 0xc8}, {&(0x7f0000000c40)="095bc6829f02c7e246a3046af626cf18df99493df6be3bfa9390f1821bb5f319086910e4515c0bdcff31181f05a7c3c2e06213cb0a", 0x35}, {0x0}, {&(0x7f0000003dc0)="30cf70bdd46e249dad0e51e4e8c1be86a405ac7cd8ad0ca7790be3598f167afbb6", 0x21}, {&(0x7f0000000140)="35fa2be9b694bff1c5c7ee4576ec3c45f0c6851cae736332a9db59f158f4048858d1a1a2e1dc74f7496b1bc5a9a574b474060a1aee63521d1589df9948f5482816b6e5a859c75c17c3cb2abd88335663000000000000000000", 0x59}], 0x7, 0x0, 0x0, 0x804}}, {{&(0x7f0000003f40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004140)=[{&(0x7f00000000c0)="0d823f77e3b138553bfbdec1c5fff465f639607a8c77cc9457a605e41c7a0878d4dcb72c845c326136754544ced8ead1344ece0fc55f0d83fea2b18a51aed015ece6e918", 0x44}, {&(0x7f0000004040)}, {&(0x7f0000004100)="0d990965ee85d72e16e1b8c8cb2e69200e8027539a9202bfb7663d51360390732fd3481341b0fa73a0ae645c423b5c534dc08f0f48a4dc28ab5605d15b", 0x3d}], 0x3, &(0x7f0000002000)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES64, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c010000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001eaff00511342ca02000000", @ANYBLOB="179f6eace42f7cb8217eb7b785c13a09c7ea2310be26e316c5c7cc1a34dc66e7f531c7d82a407cb63f888d5908727b4cdc4505c566b26aa07daf94298622e12a3dd0abf49dff4138ad6f5220209321d9fc129f56a44a8df3711ede6bda5b70e3bbbe32a6c3c686edbfe5e997afa97a25818246921bd40f4c198d70e7bd349d6ea990d1eab92de1450a86b6e9c877e89dee503bf383cc57f9a647265926694776eb3b10e71da8198b16017159c74f16ff262c622f9111a50f76afebe6398cddfe601d997c5d2e443b45792977ec40a250c884b881fc1ba037f511cd302b8a55af0d34cb33857bb883", @ANYRES32=0x0, @ANYRES16=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000010000000000ffffffffffffff0000000000", @ANYRES32=r7, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYBLOB="00000000280000000000000001000000010000", @ANYRES32=r9, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x110, 0x811}}], 0x3, 0x40001)
r10 = getgid()
r11 = getegid()
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file2\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x6}, [{0x2, 0x2, 0xee01}, {0x2, 0x6}, {}, {0x2, 0x7}, {0x2, 0x4}, {0x2, 0x7, 0xee00}, {0x2, 0x5}, {0x2, 0x1, 0xee01}], {0x4, 0x2}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x6}, {0x8, 0x1, r6}, {0x8, 0x2, r10}, {0x8, 0x4, 0xee00}, {0x8, 0x4, r11}], {0x10, 0x2}, {0x20, 0x4}}, 0x9c, 0xebab338399109ecf)
r12 = open(&(0x7f0000000400)='./file2\x00', 0x145142, 0xa1)
sendfile(r12, r12, 0x0, 0x800000009)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r13, 0x0, 0x7}, 0x18)

857.416483ms ago: executing program 4 (id=694):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x74}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x194)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000009d60b6348769843200f33300000034000000050000000300000000000010080000000300000000"], 0x0, 0x51}, 0x28)
syncfs(r4)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x77f, 0xffffffff}, 0x20)
connect$l2tp6(r5, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0xc, 0x3}, 0x20)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000ac0)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYRES8=r5, @ANYRESDEC=r10, @ANYRES8=r5, @ANYBLOB="615a20df26c270a3d265eb5278be516103e7658a2ac434266ecb6a7b09087174d59f418058dbc3d164ea7df840e92d51372884d0f82b9728b2571a0b34b82f6263ba2619681bfef8fcf0aa3824283758ec97a5b897bcbcaef445f8f7c658dc474ea3a5b6dc518e3a09f8e15cf87e1dcbd7d88a322ad31f01d1ba583a0daecfb34b7c5d1328b47fd2e20eae8cf06c74a4ae41b2c8d9007c5be54476b933862cc0cbb14f55d0ad018ab6b9e3fd39ef452fec707d6fe7dca1d89963bb5ec0e976b0bfc9f4ab323daf12ca764a96d88b6b71ca904711c4e2f2693c83b710adffffb874dab18cdf73e0be7b6e15f787e6d7239e", @ANYRES64=r7], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r11}, 0x10)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r12, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000180)={'wpan1\x00', <r13=>0x0})
r14 = getpid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r8, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_PID={0x8, 0x1c, r14}]}, 0x24}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18)
r15 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r15, 0x6, 0x0, 0x0, 0x0)
unshare(0x20060400)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

846.920473ms ago: executing program 2 (id=695):
mount$9p_unix(&(0x7f0000003600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='.\x00', 0x0, 0x301200a, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x44}, 0xfffffff4}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)

802.065275ms ago: executing program 4 (id=696):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
eventfd2(0x5, 0x0)

744.732928ms ago: executing program 3 (id=697):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (fail_nth: 7)

722.966299ms ago: executing program 4 (id=698):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @local}, 0x2}}, 0x26)

448.941451ms ago: executing program 3 (id=699):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) (async)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000b40)='               \x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='mm_page_free\x00', r0, 0x0, 0x2000000000000000}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./bus\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="e5ce1b9733c95088f9150a56f9b17205184d3be668bd8b0238f041bc8ec19413bc9f7e0dbe2936e2d9b2c62db43e3a2a12e69d2eea113cf5ab1f660600086b44cdef70e7e1a8d9c81750d3d36a776ccf1bb58e182aea9dcbf543203348d2e54cb3c28b7a958efd2301c0a97ce30c296203e340509aaf626ceee8dabd244777efb300"/140], 0x41, 0x2c8, &(0x7f0000000cc0)="$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")
open(&(0x7f0000000380)='./bus\x00', 0x42001, 0x13) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) (async)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d1f000000000000006923c63a4541062101", 0x1b, r4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000200), &(0x7f00000002c0)=r0}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)

447.627281ms ago: executing program 2 (id=700):
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a08404, &(0x7f0000000300)={[{@bh}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
ptrace(0x10, 0x0)
ptrace$ARCH_SET_GS(0x1e, 0x0, 0x0, 0x1001)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x140, 0x3ff}, 0x0, 0x0, 0xffffffff, 0xc, 0x5, 0xc0e, 0x7, 0x4, 0x1, 0x1})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
stat(0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = getgid()
fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:modules_dep_t:s0\x00', 0x23, 0x0)
lchown(0x0, 0x0, r6)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$PIO_UNIMAPCLR(r7, 0x4b68, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$caif_stream(0x25, 0x1, 0x4)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004640)=[{{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{&(0x7f0000003a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003b00)="1eccf6acf51ce3f5059f6a100437c8698454b978d6d49e68ce6a894b75fea009038992f1b9c6b41dddfcfeac38a9c4ae6eeb556dd443c01341d2daa8aa96cbd106125248ffc55e6b9e1e9d47afb5844df9d311857ae42fdea74455e2be4dcddc2ae21ee3781364be669b977bad952ef6e9b35bdc3248e45834903c5dcb7d6f374efc", 0x82}, {&(0x7f00000003c0)="49df1aa6bf043b3f6d7a600956af9c3cef9deb7996382895432205749842846110770733c425108089ee8b1350cda7425ecd403c4f971aa0e421913ab2bbbdd8e0e9550e98f75df02384cd3bd200d5b482c96687ef6f6bccd3da27505661055d253f2615274b4fbeb7c596b1aa2ceb4ee0bacd63e4d0b7ee485aba04f467fe9c676eb90bfa02458ce025eafead2fabeebc6d6418c660680891a9889f471db7a1a95c57d57059361ca67288f4f3788b46650efa07f0ef25ec5956f4e223711bc60ac5", 0xc2}, {&(0x7f0000003c80)="ad8c6e7b970cefe461a27305f0100d6c56199798936383e81babb568b521f39d40e356e432b8e55a711ccb6b9b0bbb558a30cae3c187f8cc03b7293e20520b369f997cd4a7200d3bc70f4c471f21e228d82f9661034644cf03513b597ab443412757b3600c26c014489c6f0b18d1e30d094ab5fd96115fac5c29fd1ad5fcf56e5afc833f670c0d5048396d25b87bf64fd00e48ab5e104ea02ccd953fd26619a8b8bbdc4a2cad51dc688df4d5c4d53e691a4581ff913d7de89a8dadfbd04b8a0daadef3665a934ca0", 0xc8}, {&(0x7f0000000c40)="095bc6829f02c7e246a3046af626cf18df99493df6be3bfa9390f1821bb5f319086910e4515c0bdcff31181f05a7c3c2e06213cb0a", 0x35}, {0x0}, {&(0x7f0000003dc0)="30cf70bdd46e249dad0e51e4e8c1be86a405ac7cd8ad0ca7790be3598f167afbb6", 0x21}, {&(0x7f0000000140)="35fa2be9b694bff1c5c7ee4576ec3c45f0c6851cae736332a9db59f158f4048858d1a1a2e1dc74f7496b1bc5a9a574b474060a1aee63521d1589df9948f5482816b6e5a859c75c17c3cb2abd88335663000000000000000000", 0x59}], 0x7, 0x0, 0x0, 0x804}}, {{&(0x7f0000003f40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004140)=[{&(0x7f00000000c0)="0d823f77e3b138553bfbdec1c5fff465f639607a8c77cc9457a605e41c7a0878d4dcb72c845c326136754544ced8ead1344ece0fc55f0d83fea2b18a51aed015ece6e918", 0x44}, {&(0x7f0000004040)}, {&(0x7f0000004100)="0d990965ee85d72e16e1b8c8cb2e69200e8027539a9202bfb7663d51360390732fd3481341b0fa73a0ae645c423b5c534dc08f0f48a4dc28ab5605d15b", 0x3d}], 0x3, &(0x7f0000002000)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES64, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c010000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001eaff00511342ca02000000", @ANYBLOB="179f6eace42f7cb8217eb7b785c13a09c7ea2310be26e316c5c7cc1a34dc66e7f531c7d82a407cb63f888d5908727b4cdc4505c566b26aa07daf94298622e12a3dd0abf49dff4138ad6f5220209321d9fc129f56a44a8df3711ede6bda5b70e3bbbe32a6c3c686edbfe5e997afa97a25818246921bd40f4c198d70e7bd349d6ea990d1eab92de1450a86b6e9c877e89dee503bf383cc57f9a647265926694776eb3b10e71da8198b16017159c74f16ff262c622f9111a50f76afebe6398cddfe601d997c5d2e443b45792977ec40a250c884b881fc1ba037f511cd302b8a55af0d34cb33857bb883", @ANYRES32=0x0, @ANYRES16=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000010000000000ffffffffffffff0000000000", @ANYRES32=r7, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYBLOB="00000000280000000000000001000000010000", @ANYRES32=r9, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x110, 0x811}}], 0x3, 0x40001)
r10 = getgid()
r11 = getegid()
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file2\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x6}, [{0x2, 0x2, 0xee01}, {0x2, 0x6}, {}, {0x2, 0x7}, {0x2, 0x4}, {0x2, 0x7, 0xee00}, {0x2, 0x5}, {0x2, 0x1, 0xee01}], {0x4, 0x2}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x6}, {0x8, 0x1, r6}, {0x8, 0x2, r10}, {0x8, 0x4, 0xee00}, {0x8, 0x4, r11}], {0x10, 0x2}, {0x20, 0x4}}, 0x9c, 0xebab338399109ecf)
r12 = open(&(0x7f0000000400)='./file2\x00', 0x145142, 0xa1)
sendfile(r12, r12, 0x0, 0x800000009)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r13, 0x0, 0x7}, 0x18)

414.238382ms ago: executing program 4 (id=701):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"})
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x2d553, 0x80b, 0x9, 0x2009, 0x8, "d206476a94f3902707f67f8de40100"})
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000003f0001002cbd7000ffdbdf25010000000500040000000000f750aa1d5c3f60574c9be76d75a96030dc225879f13b53b51ea4024e98aa945a05914701f0ffffffffffff40e86db46bba5910e55b9ffcd30fbb6944264e532ad9662b"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r5=>0x0})
bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan1\x00'})
connect$can_bcm(r7, &(0x7f00000002c0), 0x6)
recvmmsg(r7, &(0x7f0000007140), 0x0, 0x40010000, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20b01}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x24000090)

337.304396ms ago: executing program 0 (id=702):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
bind$packet(r0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008040000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYRES8=r2], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000)

233.35026ms ago: executing program 0 (id=703):
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r0=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r0], 0x44}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={<r3=>r2})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680), &(0x7f00000006c0)=r1}, 0x20)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'veth0_to_bridge\x00', <r4=>0x0})
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000b40)=[0x0, 0x0], &(0x7f0000000b80)=[0x0], <r6=>0x0, 0x71, &(0x7f0000000bc0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1e, 0x1c, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x0, 0x5, 0xb, 0x3, 0xffffffffffffffe0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10000}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200000}}]}, &(0x7f00000008c0)='GPL\x00', 0x9, 0x92, &(0x7f00000009c0)=""/146, 0x41000, 0x40, '\x00', r4, @sk_lookup, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x5, 0x9, 0x8, 0x10000}, 0x10, r6, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000e40)=[{0x2, 0x1, 0x0, 0x8}, {0x1, 0x4, 0x1, 0x3}, {0x0, 0x4, 0x10, 0x2}, {0x1, 0x5, 0x3}], 0x10, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000018110000", @ANYBLOB="564730c8a1fb3fdc924308504abff039d52fb0dc290ee4ce47caaf7341ea88fc4d68621f3cfdfed3293084838164c583c37a1e11faca7cf951ef19156cec7b5b3d1936880f7168e6b81126542f4c571861c7ae6543a34574a584a47519cdf8eae85c942fb943372b034d2eb78464a26abb9f998e22c9589e9a32a962b72305fccda7f0e2fa5375ad7d861430608cc44ad81657175fa2df411160771d88fddf341d95", @ANYRES64=r5], &(0x7f0000000080)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x1, '\x00', r0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0xffffffffffffffa2, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x17, &(0x7f0000000100)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @alu={0x4, 0x0, 0xc, 0x7, 0x4, 0xfffffffffffffffe, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xe}, @func, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f00000001c0)='syzkaller\x00', 0x27, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xc, 0x2, 0x75dbbb24}, 0x10, r6, r8, 0x6, 0x0, &(0x7f0000000280)=[{0x0, 0x4, 0xb, 0xc}, {0x0, 0x4, 0x5, 0x5}, {0x1, 0x2, 0xf, 0x9}, {0x0, 0x2, 0x4, 0x50c451f422cd6e19}, {0x2, 0x5, 0x3, 0xc}, {0x1, 0x3, 0xa, 0x5}], 0x10, 0x9}, 0x94)
syz_emit_ethernet(0x46, 0x0, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x21)
pwritev2(r10, &(0x7f00000007c0)=[{&(0x7f0000000880)=',', 0x1}], 0x1, 0x5412, 0x2, 0x2)
write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0)
fdatasync(r9)
ftruncate(r9, 0xa75)

16.786649ms ago: executing program 1 (id=704):
r0 = socket(0x1d, 0x4, 0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080)
r3 = openat(0xffffffffffffffff, &(0x7f0000000400)='./mnt\x00', 0x6a102, 0x40)
pwritev2(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x42, 0x60)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
ioctl$SIOCX25SCAUSEDIAG(r5, 0x89ec, &(0x7f0000000180)={0x28})
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0300003011b50004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="c500000000000000000000000000040000000000", @ANYRES32=r3, @ANYRES32, @ANYRESHEX=r5], 0x50)
preadv2(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000003280)=""/4108, 0x1000}], 0x10000000000000ec, 0x0, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000009000000f1ff0754209f23830ebb52ffff7a69000082900400cc06e17e43dce1ddc276ce172d59", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000000000000400000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2d}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @ldst={0x3, 0x0, 0x3, 0xb, 0x4, 0x2}], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x29, &(0x7f00000001c0)=""/41, 0x41100, 0x41, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x5, 0x3, 0xfffffffb}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0xffffffffffffffff, r4, r5, r6, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff], &(0x7f0000000480)=[{0x1, 0x5, 0x6, 0x8}, {0x2, 0x5, 0x3, 0xc}], 0x10, 0x6}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="911089000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'veth1_vlan\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x78}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @empty, [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x3c, 0x1, 0x5, 0x64}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'pim6reg0\x00', {0x400000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff11)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)

0s ago: executing program 0 (id=705):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000180)=0x30)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x5a6, 0x1)
ioctl$BLKCRYPTOIMPORTKEY(r3, 0xc0401289, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000640)=[{0x2b, 0x0, [0x200, 0x1, 0x1, 0x49, 0x400, 0x4, 0x4, 0x800006, 0x270, 0x6, 0x67d, 0x8, 0x6, 0x17, 0x9, 0x5b1]}], r4, 0x1, 0x1, 0x48}}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='rxrpc_connect_call\x00', r5, 0x0, 0x4}, 0x18)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r6}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r8, 0x0, 0x0}, 0x10)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000400)=0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x13, 0xffffffffffffffff, 0x775e7000)

kernel console output (not intermixed with test programs):

08433][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   37.723610][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   37.739662][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   37.754420][ T3334] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   37.763602][ T3334] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   37.775283][ T3334] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   37.793247][ T3334] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   37.823038][ T3326] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   37.834157][ T3326] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   37.843546][ T3326] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   37.855436][ T3326] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   37.905606][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.914865][ T3324] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   37.932680][ T3324] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   37.941580][ T3324] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   37.953445][ T3324] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   37.970923][ T3320] 8021q: adding VLAN 0 to HW filter on device team0
[   37.987549][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.997802][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.004919][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.022533][ T1577] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.029629][ T1577] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.048610][ T3319] 8021q: adding VLAN 0 to HW filter on device team0
[   38.061069][ T3334] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.072033][ T1577] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.079111][ T1577] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.098018][ T1577] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.105095][ T1577] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.121512][ T3334] 8021q: adding VLAN 0 to HW filter on device team0
[   38.144479][ T1577] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.151730][ T1577] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.167070][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.190803][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.197934][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.226043][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   38.245378][ T3326] 8021q: adding VLAN 0 to HW filter on device team0
[   38.258083][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.275053][ T1577] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.282161][ T1577] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.306604][ T1577] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.313733][ T1577] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.325257][ T3324] 8021q: adding VLAN 0 to HW filter on device team0
[   38.344801][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.351866][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.373848][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.381047][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.394296][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.413855][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.499674][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.537866][ T3334] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.615950][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.635227][ T3320] veth0_vlan: entered promiscuous mode
[   38.657715][ T3319] veth0_vlan: entered promiscuous mode
[   38.669658][ T3320] veth1_vlan: entered promiscuous mode
[   38.696566][ T3319] veth1_vlan: entered promiscuous mode
[   38.724082][ T3326] veth0_vlan: entered promiscuous mode
[   38.733720][ T3320] veth0_macvtap: entered promiscuous mode
[   38.745740][ T3319] veth0_macvtap: entered promiscuous mode
[   38.762135][ T3320] veth1_macvtap: entered promiscuous mode
[   38.773655][ T3319] veth1_macvtap: entered promiscuous mode
[   38.785756][ T3326] veth1_vlan: entered promiscuous mode
[   38.810229][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.822005][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.837449][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.850458][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.858912][ T3324] veth0_vlan: entered promiscuous mode
[   38.871837][  T155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.889191][  T155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.898566][  T155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.910852][ T3334] veth0_vlan: entered promiscuous mode
[   38.917244][  T155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.927230][ T3324] veth1_vlan: entered promiscuous mode
[   38.940057][   T29] kauditd_printk_skb: 13 callbacks suppressed
[   38.940074][   T29] audit: type=1400 audit(1764833116.900:85): avc:  denied  { mounton } for  pid=3319 comm="syz-executor" path="/root/syzkaller.PiUFYG/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   38.971348][   T29] audit: type=1400 audit(1764833116.900:86): avc:  denied  { mount } for  pid=3319 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   38.973804][  T155] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.993363][   T29] audit: type=1400 audit(1764833116.900:87): avc:  denied  { mounton } for  pid=3319 comm="syz-executor" path="/root/syzkaller.PiUFYG/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   39.027206][   T29] audit: type=1400 audit(1764833116.900:88): avc:  denied  { mount } for  pid=3319 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   39.049095][   T29] audit: type=1400 audit(1764833116.920:89): avc:  denied  { mounton } for  pid=3319 comm="syz-executor" path="/root/syzkaller.PiUFYG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   39.075680][   T29] audit: type=1400 audit(1764833116.920:90): avc:  denied  { mounton } for  pid=3319 comm="syz-executor" path="/root/syzkaller.PiUFYG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   39.103156][   T29] audit: type=1400 audit(1764833116.920:91): avc:  denied  { unmount } for  pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   39.123306][   T29] audit: type=1400 audit(1764833116.940:92): avc:  denied  { mounton } for  pid=3319 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   39.126360][ T3334] veth1_vlan: entered promiscuous mode
[   39.146232][   T29] audit: type=1400 audit(1764833116.960:93): avc:  denied  { mount } for  pid=3319 comm="syz-executor" name="/" dev="gadgetfs" ino=3745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   39.161409][ T3334] veth0_macvtap: entered promiscuous mode
[   39.182097][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   39.201428][ T3334] veth1_macvtap: entered promiscuous mode
[   39.208197][  T155] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.224323][ T3326] veth0_macvtap: entered promiscuous mode
[   39.237076][   T29] audit: type=1400 audit(1764833117.200:94): avc:  denied  { read write } for  pid=3319 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   39.248257][ T3334] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.283120][  T155] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.301702][  T155] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.314782][ T3326] veth1_macvtap: entered promiscuous mode
[   39.330604][ T3334] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.361649][   T53] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.373774][ T3324] veth0_macvtap: entered promiscuous mode
[   39.380935][   T53] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.391511][ T3324] veth1_macvtap: entered promiscuous mode
[   39.412042][   T53] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.426096][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.437688][   T53] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.462167][ T3497] loop3: detected capacity change from 0 to 128
[   39.468276][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.493323][   T53] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.512605][   T31] kworker/u8:1: attempt to access beyond end of device
[   39.512605][   T31] loop3: rw=1, sector=145, nr_sectors = 25 limit=128
[   39.512682][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.513133][   T53] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.547882][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.569734][   T53] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.607992][ T3506] netlink: 'wÞ£ÿ': attribute type 27 has an invalid length.
[   39.628362][   T53] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.658880][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.666297][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.779618][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   39.789960][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   39.824243][   T53] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.878244][   T53] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.904726][   T53] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.934135][   T53] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.956704][   T53] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   39.968920][ T3526] loop2: detected capacity change from 0 to 128
[   39.977364][   T53] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   39.999018][   T53] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   40.008756][   T53] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   40.042878][ T3526] syz.2.14: attempt to access beyond end of device
[   40.042878][ T3526] loop2: rw=2049, sector=145, nr_sectors = 3 limit=128
[   40.073035][ T3530] rdma_op ffff88811a274180 conn xmit_rdma 0000000000000000
[   40.101615][ T3530] capability: warning: `syz.3.15' uses 32-bit capabilities (legacy support in use)
[   40.126880][ T3532] infiniband syz!: set active
[   40.131283][ T3533] syz.2.14: attempt to access beyond end of device
[   40.131283][ T3533] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128
[   40.131631][ T3532] infiniband syz!: added team_slave_0
[   40.168001][ T3532] RDS/IB: syz!: added
[   40.172458][ T3532] smc: adding ib device syz! with port count 1
[   40.182886][ T3533] syz.2.14: attempt to access beyond end of device
[   40.182886][ T3533] loop2: rw=2049, sector=169, nr_sectors = 24 limit=128
[   40.198853][ T3532] smc:    ib device syz! port 1 has no pnetid
[   40.205409][ T3537] loop3: detected capacity change from 0 to 512
[   40.233300][ T3533] syz.2.14: attempt to access beyond end of device
[   40.233300][ T3533] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128
[   40.270736][ T3537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.295480][ T3537] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.313719][  T155] kworker/u8:6: attempt to access beyond end of device
[   40.313719][  T155] loop2: rw=1, sector=158, nr_sectors = 1 limit=128
[   40.316360][    C0] hrtimer: interrupt took 34720 ns
[   40.327158][  T155] Buffer I/O error on dev loop2, logical block 158, lost async page write
[   40.353901][ T3537] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   40.370971][ T3537] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[   40.383483][ T3537] EXT4-fs (loop3): This should not happen!! Data will be lost
[   40.383483][ T3537] 
[   40.393470][ T3537] EXT4-fs (loop3): Total free blocks count 0
[   40.399472][ T3537] EXT4-fs (loop3): Free/Dirty block details
[   40.405409][ T3537] EXT4-fs (loop3): free_blocks=65280
[   40.410700][ T3537] EXT4-fs (loop3): dirty_blocks=23
[   40.415836][ T3537] EXT4-fs (loop3): Block reservation details
[   40.421828][ T3537] EXT4-fs (loop3): i_reserved_data_blocks=23
[   40.427914][ T3539] SELinux:  Context Ü is not valid (left unmapped).
[   40.450231][ T3537] syz.3.17 (3537) used greatest stack depth: 9768 bytes left
[   40.489377][ T3547] can: request_module (can-proto-5) failed.
[   40.513987][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.528418][ T3547] loop1: detected capacity change from 0 to 128
[   40.535877][ T3547] EXT4-fs: Ignoring removed nobh option
[   40.553238][ T3547] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   40.574592][ T3545] loop2: detected capacity change from 0 to 4096
[   40.588152][ T3545] EXT4-fs: Ignoring removed bh option
[   40.597959][ T3547] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   40.611617][ T3545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.708238][ T3556] SELinux:  Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped).
[   40.734254][ T3320] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   40.798943][ T3552] loop3: detected capacity change from 0 to 128
[   40.865959][ T3561] loop4: detected capacity change from 0 to 4096
[   40.874679][ T3561] EXT4-fs: Ignoring removed bh option
[   40.884357][ T3561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.941065][ T3569] loop1: detected capacity change from 0 to 512
[   40.950374][ T3568] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   41.034860][ T3569] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   41.048092][ T3569] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   41.093808][ T3569] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   41.126025][ T3569] EXT4-fs (loop1): 1 truncate cleaned up
[   41.133500][ T3569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.151885][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.184889][ T3577] loop2: detected capacity change from 0 to 1024
[   41.195566][ T3577] EXT4-fs: Ignoring removed mblk_io_submit option
[   41.216625][ T3577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.253680][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.273331][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.324228][ T3583] loop2: detected capacity change from 0 to 512
[   41.345460][ T3583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.371515][ T3334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.391512][ T3583] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.417040][ T3591] loop4: detected capacity change from 0 to 512
[   41.425657][ T3591] =======================================================
[   41.425657][ T3591] WARNING: The mand mount option has been deprecated and
[   41.425657][ T3591]          and is ignored by this kernel. Remove the mand
[   41.425657][ T3591]          option from the mount to silence this warning.
[   41.425657][ T3591] =======================================================
[   41.468078][ T3589] loop3: detected capacity change from 0 to 1024
[   41.474229][ T3583] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   41.475051][ T3589] EXT4-fs: Ignoring removed mblk_io_submit option
[   41.500934][ T3591] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.30: EA inode hash validation failed
[   41.505756][ T3583] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[   41.525838][ T3583] EXT4-fs (loop2): This should not happen!! Data will be lost
[   41.525838][ T3583] 
[   41.535602][ T3583] EXT4-fs (loop2): Total free blocks count 0
[   41.541717][ T3583] EXT4-fs (loop2): Free/Dirty block details
[   41.547802][ T3583] EXT4-fs (loop2): free_blocks=65280
[   41.553198][ T3583] EXT4-fs (loop2): dirty_blocks=23
[   41.558469][ T3583] EXT4-fs (loop2): Block reservation details
[   41.560710][ T3591] EXT4-fs error (device loop4): ext4_do_update_inode:5628: inode #15: comm syz.4.30: corrupted inode contents
[   41.564502][ T3583] EXT4-fs (loop2): i_reserved_data_blocks=23
[   41.591737][ T3591] EXT4-fs error (device loop4): ext4_dirty_inode:6513: inode #15: comm syz.4.30: mark_inode_dirty error
[   41.603474][ T3591] EXT4-fs error (device loop4): ext4_do_update_inode:5628: inode #15: comm syz.4.30: corrupted inode contents
[   41.615713][ T3591] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.30: mark_inode_dirty error
[   41.628192][ T3591] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.30: mark inode dirty (error -117)
[   41.636421][ T3589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.642421][ T3591] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117)
[   41.662976][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.674020][ T3591] EXT4-fs (loop4): 1 orphan inode deleted
[   41.675844][ T3589] SELinux:  Context system_u:object_r:kmsg_device_t:s0 is not valid (left unmapped).
[   41.681756][ T3591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.722819][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.815339][ T3615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'.
[   41.840467][ T3334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.877951][ T3622] loop4: detected capacity change from 0 to 512
[   41.888217][ T3623] 9pnet_fd: p9_fd_create_unix (3623): problem connecting socket: ./file0: -2
[   41.900102][ T3622] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   41.959327][ T3622] EXT4-fs (loop4): 1 truncate cleaned up
[   41.970844][ T3622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.987666][ T3628] Zero length message leads to an empty skb
[   41.994298][ T3628] process 'syz.0.37' launched './file0' with NULL argv: empty string added
[   42.067364][ T3334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.088407][ T3635] loop3: detected capacity change from 0 to 128
[   42.110145][ T3635] syz.3.40: attempt to access beyond end of device
[   42.110145][ T3635] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128
[   42.176651][ T3639] syz.3.40: attempt to access beyond end of device
[   42.176651][ T3639] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128
[   42.192904][ T3639] syz.3.40: attempt to access beyond end of device
[   42.192904][ T3639] loop3: rw=2049, sector=169, nr_sectors = 24 limit=128
[   42.206619][ T3639] syz.3.40: attempt to access beyond end of device
[   42.206619][ T3639] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128
[   42.249301][ T3643] loop4: detected capacity change from 0 to 512
[   42.268541][ T3643] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.41: EA inode hash validation failed
[   42.310272][ T3643] EXT4-fs error (device loop4): ext4_do_update_inode:5628: inode #15: comm syz.4.41: corrupted inode contents
[   42.322573][ T3643] EXT4-fs error (device loop4): ext4_dirty_inode:6513: inode #15: comm syz.4.41: mark_inode_dirty error
[   42.322716][   T31] Buffer I/O error on dev loop3, logical block 158, lost async page write
[   42.334042][ T3643] EXT4-fs error (device loop4): ext4_do_update_inode:5628: inode #15: comm syz.4.41: corrupted inode contents
[   42.354356][ T3643] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.41: mark_inode_dirty error
[   42.366593][ T3643] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.41: mark inode dirty (error -117)
[   42.379758][ T3643] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117)
[   42.389683][ T3643] EXT4-fs (loop4): 1 orphan inode deleted
[   42.397795][ T3643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.434975][ T3334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.504293][ T3658] can: request_module (can-proto-5) failed.
[   42.511666][ T3654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.46'.
[   42.517504][ T3658] loop1: detected capacity change from 0 to 128
[   42.528599][ T3658] EXT4-fs: Ignoring removed nobh option
[   42.538861][ T3654] netlink: 32 bytes leftover after parsing attributes in process `wÞ£ÿ'.
[   42.549251][ T3658] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   42.568699][ T3658] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   42.641765][ T3320] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   42.661489][ T3665] loop2: detected capacity change from 0 to 4096
[   42.670182][ T3665] EXT4-fs: Ignoring removed bh option
[   42.686600][ T3665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.861644][ T3681] loop4: detected capacity change from 0 to 4096
[   42.869589][ T3681] EXT4-fs: Ignoring removed bh option
[   42.883896][ T3681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.962906][ T3687] loop1: detected capacity change from 0 to 512
[   42.969717][ T3687] EXT4-fs: Ignoring removed i_version option
[   42.975834][ T3687] EXT4-fs: Ignoring removed bh option
[   42.983128][ T3334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.004788][ T3687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.040426][ T3687] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   43.055735][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.081138][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.119492][ T3698] can: request_module (can-proto-5) failed.
[   43.133148][ T3698] loop1: detected capacity change from 0 to 128
[   43.140060][ T3698] EXT4-fs: Ignoring removed nobh option
[   43.153179][ T3698] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   43.172144][ T3698] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   43.210586][ T3320] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   43.446420][ T3723] netlink: 32 bytes leftover after parsing attributes in process `syz.2.69'.
[   43.490483][ T1577] Bluetooth: hci0: Frame reassembly failed (-84)
[   43.678215][ T3738] syzkaller1: entered promiscuous mode
[   43.683810][ T3738] syzkaller1: entered allmulticast mode
[   43.881426][ T3740] loop3: detected capacity change from 0 to 512
[   43.897484][ T3740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.912976][ T3740] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   43.934077][ T3740] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   43.963326][   T29] kauditd_printk_skb: 689 callbacks suppressed
[   43.963386][   T29] audit: type=1326 audit(1764833121.920:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   43.992815][   T29] audit: type=1326 audit(1764833121.920:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   44.016126][   T29] audit: type=1326 audit(1764833121.920:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   44.039686][   T29] audit: type=1326 audit(1764833121.920:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   44.063369][   T29] audit: type=1326 audit(1764833121.920:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   44.086580][   T29] audit: type=1326 audit(1764833121.920:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   44.110423][   T29] audit: type=1326 audit(1764833121.930:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   44.133832][   T29] audit: type=1326 audit(1764833121.930:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   44.157110][   T29] audit: type=1326 audit(1764833121.930:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   44.180289][   T29] audit: type=1326 audit(1764833121.930:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   44.205265][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.273528][ T3760] loop1: detected capacity change from 0 to 1024
[   44.281772][ T3760] ext4: Bad value for 'debug_want_extra_isize'
[   44.305442][ T3760] IPv6: NLM_F_CREATE should be specified when creating new route
[   44.313701][ T3760] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   44.320921][ T3760] IPv6: NLM_F_CREATE should be set when creating new route
[   44.345707][ T3768] loop2: detected capacity change from 0 to 512
[   44.354365][ T3768] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   44.366206][ T3768] EXT4-fs (loop2): 1 truncate cleaned up
[   44.372501][ T3768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.405915][ T3773] loop4: detected capacity change from 0 to 512
[   44.415206][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.427806][ T3773] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   44.439736][ T3773] EXT4-fs (loop4): 1 truncate cleaned up
[   44.446108][ T3773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.536312][ T3334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.549686][ T3784] FAULT_INJECTION: forcing a failure.
[   44.549686][ T3784] name failslab, interval 1, probability 0, space 0, times 0
[   44.562426][ T3784] CPU: 1 UID: 0 PID: 3784 Comm: syz.2.91 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   44.562456][ T3784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   44.562488][ T3784] Call Trace:
[   44.562496][ T3784]  <TASK>
[   44.562504][ T3784]  __dump_stack+0x1d/0x30
[   44.562617][ T3784]  dump_stack_lvl+0xe8/0x140
[   44.562644][ T3784]  dump_stack+0x15/0x1b
[   44.562667][ T3784]  should_fail_ex+0x265/0x280
[   44.562702][ T3784]  should_failslab+0x8c/0xb0
[   44.562806][ T3784]  kmem_cache_alloc_node_noprof+0x57/0x4c0
[   44.562843][ T3784]  ? __alloc_skb+0x324/0x4d0
[   44.562895][ T3784]  ? should_fail_ex+0xdb/0x280
[   44.562931][ T3784]  __alloc_skb+0x324/0x4d0
[   44.563016][ T3784]  ? __alloc_skb+0x24d/0x4d0
[   44.563080][ T3784]  audit_log_start+0x3a0/0x720
[   44.563113][ T3784]  ? kstrtouint+0x76/0xc0
[   44.563223][ T3784]  audit_seccomp+0x48/0x100
[   44.563260][ T3784]  ? __seccomp_filter+0x832/0x1260
[   44.563292][ T3784]  __seccomp_filter+0x843/0x1260
[   44.563375][ T3784]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   44.563405][ T3784]  ? vfs_write+0x7e8/0x960
[   44.563449][ T3784]  ? __cond_resched+0x4e/0x90
[   44.563591][ T3784]  __secure_computing+0x82/0x150
[   44.563662][ T3784]  syscall_trace_enter+0xcf/0x1e0
[   44.563693][ T3784]  do_syscall_64+0xb2/0x2a0
[   44.563852][ T3784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.563879][ T3784] RIP: 0033:0x7efee8d4f749
[   44.563904][ T3784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   44.563926][ T3784] RSP: 002b:00007efee77b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000011b
[   44.563950][ T3784] RAX: ffffffffffffffda RBX: 00007efee8fa5fa0 RCX: 00007efee8d4f749
[   44.564045][ T3784] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000
[   44.564061][ T3784] RBP: 00007efee77b7090 R08: 0000000000000000 R09: 0000000000000000
[   44.564076][ T3784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   44.564090][ T3784] R13: 00007efee8fa6038 R14: 00007efee8fa5fa0 R15: 00007ffc16c94f68
[   44.564113][ T3784]  </TASK>
[   44.803745][ T3788] loop4: detected capacity change from 0 to 512
[   44.823449][ T3791] loop2: detected capacity change from 0 to 4096
[   44.827180][ T3788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.830411][ T3791] EXT4-fs: Ignoring removed bh option
[   44.853362][ T3788] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.864665][ T3788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.872546][ T3791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.937178][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.951028][ T3800] rdma_op ffff88811a464580 conn xmit_rdma 0000000000000000
[   44.987465][ T3803] loop2: detected capacity change from 0 to 1024
[   44.994448][ T3803] ext4: Bad value for 'debug_want_extra_isize'
[   45.001342][ T3803] IPv6: NLM_F_CREATE should be specified when creating new route
[   45.009974][ T3803] 9pnet_fd: Insufficient options for proto=fd
[   45.048196][ T3808] loop2: detected capacity change from 0 to 4096
[   45.055165][ T3808] EXT4-fs: Ignoring removed bh option
[   45.063112][ T3808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.153428][ T3816] loop4: detected capacity change from 0 to 128
[   45.179530][ T3816] bio_check_eod: 101 callbacks suppressed
[   45.179544][ T3816] syz.4.103: attempt to access beyond end of device
[   45.179544][ T3816] loop4: rw=2049, sector=145, nr_sectors = 3 limit=128
[   45.221615][ T3819] loop3: detected capacity change from 0 to 512
[   45.239430][ T3819] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   45.251107][ T3821] syz.4.103: attempt to access beyond end of device
[   45.251107][ T3821] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128
[   45.266524][ T3819] EXT4-fs (loop3): 1 truncate cleaned up
[   45.280610][ T3821] syz.4.103: attempt to access beyond end of device
[   45.280610][ T3821] loop4: rw=2049, sector=169, nr_sectors = 24 limit=128
[   45.282835][ T3819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.306751][ T3821] syz.4.103: attempt to access beyond end of device
[   45.306751][ T3821] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128
[   45.306858][ T3821] syz.4.103: attempt to access beyond end of device
[   45.306858][ T3821] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128
[   45.306903][ T3821] syz.4.103: attempt to access beyond end of device
[   45.306903][ T3821] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128
[   45.347244][ T3821] syz.4.103: attempt to access beyond end of device
[   45.347244][ T3821] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128
[   45.391314][ T1577] kworker/u8:9: attempt to access beyond end of device
[   45.391314][ T1577] loop4: rw=1, sector=158, nr_sectors = 1 limit=128
[   45.404896][ T1577] Buffer I/O error on dev loop4, logical block 158, lost async page write
[   45.415505][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.479533][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.542313][ T3719] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   45.606822][ T3840] openvswitch: netlink: Missing key (keys=40, expected=100)
[   45.791849][ T3851] loop2: detected capacity change from 0 to 128
[   45.929730][ T3851] syz.2.115: attempt to access beyond end of device
[   45.929730][ T3851] loop2: rw=2049, sector=145, nr_sectors = 3 limit=128
[   46.082499][ T3851] syz.2.115: attempt to access beyond end of device
[   46.082499][ T3851] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128
[   46.099124][ T3857] FAULT_INJECTION: forcing a failure.
[   46.099124][ T3857] name failslab, interval 1, probability 0, space 0, times 0
[   46.111817][ T3857] CPU: 1 UID: 0 PID: 3857 Comm: syz.3.117 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   46.111963][ T3857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   46.111980][ T3857] Call Trace:
[   46.112065][ T3857]  <TASK>
[   46.112123][ T3857]  __dump_stack+0x1d/0x30
[   46.112145][ T3857]  dump_stack_lvl+0xe8/0x140
[   46.112166][ T3857]  dump_stack+0x15/0x1b
[   46.112184][ T3857]  should_fail_ex+0x265/0x280
[   46.112225][ T3857]  should_failslab+0x8c/0xb0
[   46.112334][ T3857]  kmem_cache_alloc_noprof+0x50/0x4a0
[   46.112374][ T3857]  ? __kernfs_new_node+0x6d/0x350
[   46.112404][ T3857]  __kernfs_new_node+0x6d/0x350
[   46.112431][ T3857]  ? kernfs_iop_getattr+0x203/0x220
[   46.112536][ T3857]  kernfs_new_node+0xd0/0x140
[   46.112561][ T3857]  kernfs_create_dir_ns+0x44/0xe0
[   46.112604][ T3857]  internal_create_group+0x2bb/0x9e0
[   46.112630][ T3857]  ? blk_validate_limits+0xb95/0xcb0
[   46.112666][ T3857]  ? mutex_unlock+0x4f/0x90
[   46.112687][ T3857]  sysfs_create_group+0x1f/0x30
[   46.112763][ T3857]  loop_configure+0x7ee/0x9c0
[   46.112800][ T3857]  lo_ioctl+0x5aa/0x12b0
[   46.112824][ T3857]  ? avc_has_extended_perms+0x609/0x800
[   46.112863][ T3857]  ? trace_reschedule_exit+0xd/0xc0
[   46.112952][ T3857]  ? __pfx_blkdev_ioctl+0x10/0x10
[   46.112982][ T3857]  ? blkdev_ioctl+0x320/0x440
[   46.113013][ T3857]  ? __pfx_lo_ioctl+0x10/0x10
[   46.113041][ T3857]  ? __pfx_blkdev_ioctl+0x10/0x10
[   46.113144][ T3857]  blkdev_ioctl+0x356/0x440
[   46.113176][ T3857]  ? __pfx_blkdev_ioctl+0x10/0x10
[   46.113202][ T3857]  __se_sys_ioctl+0xce/0x140
[   46.113281][ T3857]  __x64_sys_ioctl+0x43/0x50
[   46.113361][ T3857]  x64_sys_call+0x14b0/0x3000
[   46.113388][ T3857]  do_syscall_64+0xd8/0x2a0
[   46.113422][ T3857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.113579][ T3857] RIP: 0033:0x7f083d89f749
[   46.113597][ T3857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   46.113615][ T3857] RSP: 002b:00007f083c307038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   46.113669][ T3857] RAX: ffffffffffffffda RBX: 00007f083daf5fa0 RCX: 00007f083d89f749
[   46.113685][ T3857] RDX: 0000200000000280 RSI: 0000000000004c0a RDI: 0000000000000004
[   46.113701][ T3857] RBP: 00007f083c307090 R08: 0000000000000000 R09: 0000000000000000
[   46.113717][ T3857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   46.113804][ T3857] R13: 00007f083daf6038 R14: 00007f083daf5fa0 R15: 00007ffccda63208
[   46.113823][ T3857]  </TASK>
[   46.375015][ T3857] loop4: detected capacity change from 0 to 7
[   46.381981][ T3313] Buffer I/O error on dev loop4, logical block 0, async page read
[   46.392575][   T31] Buffer I/O error on dev loop2, logical block 158, lost async page write
[   46.393990][ T3313] Buffer I/O error on dev loop4, logical block 0, async page read
[   46.408992][ T3313]  loop4: unable to read partition table
[   46.414864][ T3857] Buffer I/O error on dev loop4, logical block 0, async page read
[   46.428170][ T3860] loop2: detected capacity change from 0 to 512
[   46.460584][ T3857] Buffer I/O error on dev loop4, logical block 0, async page read
[   46.468512][ T3857]  loop4: unable to read partition table
[   46.474302][ T3857] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü�¾SêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5)
[   46.487328][ T3313] Buffer I/O error on dev loop4, logical block 0, async page read
[   46.495332][ T3313] Buffer I/O error on dev loop4, logical block 0, async page read
[   46.506415][ T3313] Buffer I/O error on dev loop4, logical block 0, async page read
[   46.514486][ T3313] Buffer I/O error on dev loop4, logical block 0, async page read
[   46.575767][ T3862] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.583105][ T3862] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.591437][ T3860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.608969][ T3860] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.625238][ T3860] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   46.641651][ T3860] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[   46.644208][ T3862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   46.654056][ T3860] EXT4-fs (loop2): This should not happen!! Data will be lost
[   46.654056][ T3860] 
[   46.671124][ T3860] EXT4-fs (loop2): Total free blocks count 0
[   46.677194][ T3860] EXT4-fs (loop2): Free/Dirty block details
[   46.683132][ T3860] EXT4-fs (loop2): free_blocks=65280
[   46.684369][ T3862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   46.688435][ T3860] EXT4-fs (loop2): dirty_blocks=23
[   46.700986][ T3860] EXT4-fs (loop2): Block reservation details
[   46.707018][ T3860] EXT4-fs (loop2): i_reserved_data_blocks=23
[   46.749752][   T61] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   46.759681][   T61] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   46.784458][   T61] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   46.801795][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.811201][   T61] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   46.826234][ T3878] loop3: detected capacity change from 0 to 128
[   46.867164][ T3884] syz.0.129 uses obsolete (PF_INET,SOCK_PACKET)
[   47.025619][ T3903] loop1: detected capacity change from 0 to 512
[   47.032849][ T3903] ext4: Unknown parameter 'smackfsroot'
[   47.075958][ T3911] loop1: detected capacity change from 0 to 128
[   47.144893][ T3914] loop2: detected capacity change from 0 to 512
[   47.166070][ T3914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.182137][ T3914] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.196243][ T3914] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   47.211277][ T3914] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[   47.223673][ T3914] EXT4-fs (loop2): This should not happen!! Data will be lost
[   47.223673][ T3914] 
[   47.233415][ T3914] EXT4-fs (loop2): Total free blocks count 0
[   47.239468][ T3914] EXT4-fs (loop2): Free/Dirty block details
[   47.245428][ T3914] EXT4-fs (loop2): free_blocks=65280
[   47.250735][ T3914] EXT4-fs (loop2): dirty_blocks=23
[   47.255895][ T3914] EXT4-fs (loop2): Block reservation details
[   47.261884][ T3914] EXT4-fs (loop2): i_reserved_data_blocks=23
[   47.289228][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.336133][ T3925] loop2: detected capacity change from 0 to 1024
[   47.343333][ T3925] ext4: Bad value for 'debug_want_extra_isize'
[   47.379787][ T3925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.143'.
[   47.587624][ T3942] can: request_module (can-proto-5) failed.
[   47.600641][ T3942] loop2: detected capacity change from 0 to 128
[   47.609339][ T3942] EXT4-fs: Ignoring removed nobh option
[   47.616608][ T3942] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   47.629275][ T3942] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   47.659033][ T3326] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   47.685819][ T3948] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   47.873799][ T3962] loop4: detected capacity change from 0 to 128
[   47.936562][   T31] Bluetooth: hci0: Frame reassembly failed (-84)
[   48.112600][ T3972] Illegal XDP return value 4294967274 on prog  (id 116) dev syz_tun, expect packet loss!
[   48.129819][ T3428] hid-generic 0000:0000:0004.0001: unknown main item tag 0x7
[   48.137299][ T3428] hid-generic 0000:0000:0004.0001: ignoring exceeding usage max
[   48.149405][ T3428] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   48.156907][ T3428] hid-generic 0000:0000:0004.0001: unknown main item tag 0x6
[   48.164333][ T3428] hid-generic 0000:0000:0004.0001: reserved main item tag 0xd
[   48.172327][ T3428] hid-generic 0000:0000:0004.0001: hidraw0: <UNKNOWN> HID v0.03 Device [syz0] on syz0
[   48.217058][ T3974] fido_id[3974]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   48.368507][ T3984] loop1: detected capacity change from 0 to 4096
[   48.377638][ T3984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.494549][ T3984] netlink: 14 bytes leftover after parsing attributes in process `syz.1.165'.
[   48.508467][ T3984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   48.519208][ T3984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   48.529298][ T3984] bond0 (unregistering): Released all slaves
[   48.546525][ T3988] loop2: detected capacity change from 0 to 128
[   48.604241][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.734390][ T3997] can: request_module (can-proto-5) failed.
[   48.752996][ T3997] loop3: detected capacity change from 0 to 128
[   48.763101][ T4002] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   48.763391][ T3997] EXT4-fs: Ignoring removed nobh option
[   48.777948][ T3997] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   48.790470][ T3997] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   48.827020][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   48.883020][ T4013] loop2: detected capacity change from 0 to 512
[   48.884903][ T4015] loop3: detected capacity change from 0 to 128
[   48.905665][ T4013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.918866][ T4013] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.933847][ T4013] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   48.948563][ T4013] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[   48.960995][ T4013] EXT4-fs (loop2): This should not happen!! Data will be lost
[   48.960995][ T4013] 
[   48.970672][ T4013] EXT4-fs (loop2): Total free blocks count 0
[   48.976716][ T4013] EXT4-fs (loop2): Free/Dirty block details
[   48.982710][ T4013] EXT4-fs (loop2): free_blocks=65280
[   48.988091][ T4013] EXT4-fs (loop2): dirty_blocks=23
[   48.993265][ T4013] EXT4-fs (loop2): Block reservation details
[   48.999255][ T4013] EXT4-fs (loop2): i_reserved_data_blocks=23
[   49.020271][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.050091][ T4020] loop2: detected capacity change from 0 to 512
[   49.059554][ T4020] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   49.080548][ T4020] EXT4-fs (loop2): 1 truncate cleaned up
[   49.086752][ T4020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.126498][ T4027] loop3: detected capacity change from 0 to 128
[   49.147225][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.178337][   T29] kauditd_printk_skb: 386 callbacks suppressed
[   49.178356][   T29] audit: type=1326 audit(1764833127.140:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee8d4f749 code=0x7ffc0000
[   49.208147][   T29] audit: type=1326 audit(1764833127.140:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee8d4f749 code=0x7ffc0000
[   49.231625][   T29] audit: type=1326 audit(1764833127.140:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7efee8d4f749 code=0x7ffc0000
[   49.255120][   T29] audit: type=1326 audit(1764833127.140:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee8d4f749 code=0x7ffc0000
[   49.278504][   T29] audit: type=1326 audit(1764833127.140:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee8d4f749 code=0x7ffc0000
[   49.301908][   T29] audit: type=1326 audit(1764833127.140:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7efee8d4f749 code=0x7ffc0000
[   49.325366][   T29] audit: type=1326 audit(1764833127.140:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee8d4f749 code=0x7ffc0000
[   49.348935][   T29] audit: type=1326 audit(1764833127.140:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7efee8d4f749 code=0x7ffc0000
[   49.372393][   T29] audit: type=1326 audit(1764833127.140:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee8d4f749 code=0x7ffc0000
[   49.395835][   T29] audit: type=1326 audit(1764833127.140:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7efee8d4f749 code=0x7ffc0000
[   49.441850][ T4035] loop2: detected capacity change from 0 to 128
[   49.473615][ T4032] netlink: 14 bytes leftover after parsing attributes in process `syz.0.181'.
[   49.534828][ T4032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   49.571536][ T4044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'.
[   49.584069][ T4032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   49.617977][ T4048] openvswitch: netlink: Missing key (keys=40, expected=100)
[   49.717768][ T4032] bond0 (unregistering): Released all slaves
[   49.735345][ T4050] loop3: detected capacity change from 0 to 128
[   49.942349][ T3719] Bluetooth: hci0: command 0x1003 tx timeout
[   49.948597][ T3732] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   50.029082][ T4060] FAULT_INJECTION: forcing a failure.
[   50.029082][ T4060] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   50.042278][ T4060] CPU: 1 UID: 0 PID: 4060 Comm: syz.0.192 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   50.042386][ T4060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   50.042403][ T4060] Call Trace:
[   50.042412][ T4060]  <TASK>
[   50.042422][ T4060]  __dump_stack+0x1d/0x30
[   50.042471][ T4060]  dump_stack_lvl+0xe8/0x140
[   50.042500][ T4060]  dump_stack+0x15/0x1b
[   50.042562][ T4060]  should_fail_ex+0x265/0x280
[   50.042666][ T4060]  should_fail+0xb/0x20
[   50.042697][ T4060]  should_fail_usercopy+0x1a/0x20
[   50.042728][ T4060]  _copy_from_user+0x1c/0xb0
[   50.042745][ T4060]  memdup_user+0x5e/0xd0
[   50.042781][ T4060]  strndup_user+0x68/0xb0
[   50.042812][ T4060]  __se_sys_mount+0x4d/0x2e0
[   50.042930][ T4060]  ? trace_reschedule_exit+0xd/0xc0
[   50.042962][ T4060]  __x64_sys_mount+0x67/0x80
[   50.043002][ T4060]  x64_sys_call+0x2cca/0x3000
[   50.043113][ T4060]  do_syscall_64+0xd8/0x2a0
[   50.043186][ T4060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.043207][ T4060] RIP: 0033:0x7f246670f749
[   50.043297][ T4060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.043318][ T4060] RSP: 002b:00007f246516f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   50.043337][ T4060] RAX: ffffffffffffffda RBX: 00007f2466965fa0 RCX: 00007f246670f749
[   50.043349][ T4060] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000
[   50.043361][ T4060] RBP: 00007f246516f090 R08: 0000200000000cc0 R09: 0000000000000000
[   50.043377][ T4060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.043391][ T4060] R13: 00007f2466966038 R14: 00007f2466965fa0 R15: 00007ffcf809c4b8
[   50.043410][ T4060]  </TASK>
[   50.247165][ T4062] loop3: detected capacity change from 0 to 512
[   50.313200][ T4062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.325913][ T4062] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.344831][ T4062] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   50.359666][ T4062] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[   50.372161][ T4062] EXT4-fs (loop3): This should not happen!! Data will be lost
[   50.372161][ T4062] 
[   50.381858][ T4062] EXT4-fs (loop3): Total free blocks count 0
[   50.387973][ T4062] EXT4-fs (loop3): Free/Dirty block details
[   50.394052][ T4062] EXT4-fs (loop3): free_blocks=65280
[   50.399346][ T4062] EXT4-fs (loop3): dirty_blocks=23
[   50.404486][ T4062] EXT4-fs (loop3): Block reservation details
[   50.410518][ T4062] EXT4-fs (loop3): i_reserved_data_blocks=23
[   50.428573][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.530015][ T4074] loop1: detected capacity change from 0 to 128
[   50.700890][ T4087] can: request_module (can-proto-5) failed.
[   50.715263][ T4087] loop2: detected capacity change from 0 to 128
[   50.725895][ T4087] EXT4-fs: Ignoring removed nobh option
[   50.746354][ T4090] loop4: detected capacity change from 0 to 128
[   50.752829][ T4083] sg_read: process 106 (syz.3.198) changed security contexts after opening file descriptor, this is not allowed.
[   50.769645][ T4087] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   50.787253][ T4087] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   50.803183][ T4090] bio_check_eod: 415 callbacks suppressed
[   50.803201][ T4090] syz.4.204: attempt to access beyond end of device
[   50.803201][ T4090] loop4: rw=2049, sector=145, nr_sectors = 3 limit=128
[   50.824909][ T3326] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   50.874848][ T4095] syz.4.204: attempt to access beyond end of device
[   50.874848][ T4095] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128
[   50.889104][ T4095] syz.4.204: attempt to access beyond end of device
[   50.889104][ T4095] loop4: rw=2049, sector=169, nr_sectors = 24 limit=128
[   50.903686][ T4095] syz.4.204: attempt to access beyond end of device
[   50.903686][ T4095] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128
[   50.924613][ T4097] loop2: detected capacity change from 0 to 512
[   50.928208][ T4095] syz.4.204: attempt to access beyond end of device
[   50.928208][ T4095] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128
[   50.951080][ T4095] syz.4.204: attempt to access beyond end of device
[   50.951080][ T4095] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128
[   50.964941][ T4095] syz.4.204: attempt to access beyond end of device
[   50.964941][ T4095] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128
[   50.985423][ T4097] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.988707][ T4095] syz.4.204: attempt to access beyond end of device
[   50.988707][ T4095] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128
[   51.009489][ T4095] syz.4.204: attempt to access beyond end of device
[   51.009489][ T4095] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128
[   51.014131][ T4097] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   51.037970][ T4097] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[   51.050409][ T4097] EXT4-fs (loop2): This should not happen!! Data will be lost
[   51.050409][ T4097] 
[   51.060224][ T4097] EXT4-fs (loop2): Total free blocks count 0
[   51.066329][ T4097] EXT4-fs (loop2): Free/Dirty block details
[   51.072307][ T4097] EXT4-fs (loop2): free_blocks=65280
[   51.077611][ T4097] EXT4-fs (loop2): dirty_blocks=23
[   51.082816][ T4097] EXT4-fs (loop2): Block reservation details
[   51.088806][ T4097] EXT4-fs (loop2): i_reserved_data_blocks=23
[   51.095239][   T61] kworker/u8:5: attempt to access beyond end of device
[   51.095239][   T61] loop4: rw=1, sector=158, nr_sectors = 1 limit=128
[   51.108707][   T61] buffer_io_error: 10 callbacks suppressed
[   51.108727][   T61] Buffer I/O error on dev loop4, logical block 158, lost async page write
[   51.157341][ T4103] FAULT_INJECTION: forcing a failure.
[   51.157341][ T4103] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   51.159849][ T4101] loop4: detected capacity change from 0 to 512
[   51.170535][ T4103] CPU: 1 UID: 0 PID: 4103 Comm: syz.2.208 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   51.170625][ T4103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   51.170645][ T4103] Call Trace:
[   51.170655][ T4103]  <TASK>
[   51.170668][ T4103]  __dump_stack+0x1d/0x30
[   51.170709][ T4103]  dump_stack_lvl+0xe8/0x140
[   51.170812][ T4103]  dump_stack+0x15/0x1b
[   51.170839][ T4103]  should_fail_ex+0x265/0x280
[   51.170879][ T4103]  should_fail+0xb/0x20
[   51.170916][ T4103]  should_fail_usercopy+0x1a/0x20
[   51.170964][ T4103]  _copy_from_user+0x1c/0xb0
[   51.170990][ T4103]  memdup_user+0x5e/0xd0
[   51.171193][ T4103]  strndup_user+0x68/0xb0
[   51.171236][ T4103]  __se_sys_mount+0x8e/0x2e0
[   51.171280][ T4103]  ? fput+0x8f/0xc0
[   51.171309][ T4103]  ? ksys_write+0x192/0x1a0
[   51.171428][ T4103]  __x64_sys_mount+0x67/0x80
[   51.171515][ T4103]  x64_sys_call+0x2cca/0x3000
[   51.171548][ T4103]  do_syscall_64+0xd8/0x2a0
[   51.171619][ T4103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.171643][ T4103] RIP: 0033:0x7efee8d4f749
[   51.171664][ T4103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   51.171691][ T4103] RSP: 002b:00007efee77b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   51.171726][ T4103] RAX: ffffffffffffffda RBX: 00007efee8fa5fa0 RCX: 00007efee8d4f749
[   51.171797][ T4103] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 00002000000002c0
[   51.171815][ T4103] RBP: 00007efee77b7090 R08: 0000000000000000 R09: 0000000000000000
[   51.171899][ T4103] R10: 0000000000101091 R11: 0000000000000246 R12: 0000000000000001
[   51.171917][ T4103] R13: 00007efee8fa6038 R14: 00007efee8fa5fa0 R15: 00007ffc16c94f68
[   51.171943][ T4103]  </TASK>
[   51.284358][ T4107] loop2: detected capacity change from 0 to 128
[   51.303390][ T4101] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   51.385662][ T4101] EXT4-fs (loop4): 1 truncate cleaned up
[   51.426277][ T4114] openvswitch: netlink: Missing key (keys=40, expected=100)
[   51.436419][ T4113] loop2: detected capacity change from 0 to 128
[   51.543048][ T4119] loop1: detected capacity change from 0 to 512
[   51.564097][ T4119] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   51.587604][ T4119] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.603833][ T1577] Buffer I/O error on dev loop2, logical block 158, lost async page write
[   51.641730][ T4125] syz!: rxe_newlink: already configured on team_slave_0
[   51.664873][ T4119] vhci_hcd: invalid port number 23
[   51.670136][ T4119] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub.
[   51.685355][ T4119] ext4: Unknown parameter '8þ~ÿÑ“çöˆÿ§ó»¿þ'÷ˆ?é0þ7cŸ?Ý®­¦Íø³Ûã·'
[   51.745092][ T4141] FAULT_INJECTION: forcing a failure.
[   51.745092][ T4141] name failslab, interval 1, probability 0, space 0, times 0
[   51.757977][ T4141] CPU: 1 UID: 0 PID: 4141 Comm: syz.4.222 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   51.758004][ T4141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   51.758016][ T4141] Call Trace:
[   51.758023][ T4141]  <TASK>
[   51.758030][ T4141]  __dump_stack+0x1d/0x30
[   51.758057][ T4141]  dump_stack_lvl+0xe8/0x140
[   51.758154][ T4141]  dump_stack+0x15/0x1b
[   51.758179][ T4141]  should_fail_ex+0x265/0x280
[   51.758211][ T4141]  should_failslab+0x8c/0xb0
[   51.758262][ T4141]  kmem_cache_alloc_noprof+0x50/0x4a0
[   51.758304][ T4141]  ? getname_flags+0x80/0x3b0
[   51.758346][ T4141]  getname_flags+0x80/0x3b0
[   51.758369][ T4141]  __x64_sys_unlinkat+0x70/0xb0
[   51.758459][ T4141]  x64_sys_call+0x2b49/0x3000
[   51.758483][ T4141]  do_syscall_64+0xd8/0x2a0
[   51.758586][ T4141]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.758614][ T4141] RIP: 0033:0x7f34d314f749
[   51.758633][ T4141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   51.758720][ T4141] RSP: 002b:00007f34d1baf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[   51.758739][ T4141] RAX: ffffffffffffffda RBX: 00007f34d33a5fa0 RCX: 00007f34d314f749
[   51.758751][ T4141] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c
[   51.758763][ T4141] RBP: 00007f34d1baf090 R08: 0000000000000000 R09: 0000000000000000
[   51.758777][ T4141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   51.758793][ T4141] R13: 00007f34d33a6038 R14: 00007f34d33a5fa0 R15: 00007ffc18540868
[   51.758872][ T4141]  </TASK>
[   51.940527][ T4144] loop4: detected capacity change from 0 to 128
[   52.374107][ T4153] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   52.383503][ T4153] netlink: 76 bytes leftover after parsing attributes in process `syz.3.226'.
[   52.435009][ T4158] netlink: 7 bytes leftover after parsing attributes in process `syz.3.226'.
[   52.468517][ T4158] netlink: 7 bytes leftover after parsing attributes in process `syz.3.226'.
[   52.716801][ T4169] loop2: detected capacity change from 0 to 512
[   52.734931][ T4170] loop3: detected capacity change from 0 to 512
[   52.772193][ T4169] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   52.915935][ T4172] IPv6: NLM_F_CREATE should be specified when creating new route
[   52.954077][ T4173] syzkaller0: entered allmulticast mode
[   53.093101][ T4180] loop4: detected capacity change from 0 to 1024
[   53.124941][ T4180] ext4: Bad value for 'debug_want_extra_isize'
[   53.174676][ T4180] IPv6: NLM_F_CREATE should be specified when creating new route
[   53.198174][ T4169] EXT4-fs (loop2): 1 truncate cleaned up
[   53.214025][ T4180] 9pnet_fd: Insufficient options for proto=fd
[   53.323744][ T4185] 9pnet_fd: Insufficient options for proto=fd
[   53.441394][ T4198] loop1: detected capacity change from 0 to 512
[   53.466345][ T4198] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.511510][ T4198] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   53.527093][ T4198] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[   53.539685][ T4198] EXT4-fs (loop1): This should not happen!! Data will be lost
[   53.539685][ T4198] 
[   53.550815][ T4198] EXT4-fs (loop1): Total free blocks count 0
[   53.557197][ T4198] EXT4-fs (loop1): Free/Dirty block details
[   53.563165][ T4198] EXT4-fs (loop1): free_blocks=65280
[   53.568473][ T4198] EXT4-fs (loop1): dirty_blocks=23
[   53.573697][ T4198] EXT4-fs (loop1): Block reservation details
[   53.579757][ T4198] EXT4-fs (loop1): i_reserved_data_blocks=23
[   53.586526][ T4207] openvswitch: netlink: Missing key (keys=40, expected=100)
[   53.595703][ T4168] syzkaller0: left allmulticast mode
[   53.908846][ T4219] loop3: detected capacity change from 0 to 1024
[   53.934325][ T4219] ext4: Bad value for 'debug_want_extra_isize'
[   53.969773][ T4219] IPv6: NLM_F_CREATE should be specified when creating new route
[   54.002634][ T4219] 9pnet_fd: Insufficient options for proto=fd
[   54.041255][ T4221] loop1: detected capacity change from 0 to 512
[   54.062853][ T4221] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   54.123665][ T4221] EXT4-fs (loop1): 1 truncate cleaned up
[   54.151007][ T4226] loop3: detected capacity change from 0 to 4096
[   54.159422][ T4226] EXT4-fs: Ignoring removed bh option
[   54.185108][   T29] kauditd_printk_skb: 597 callbacks suppressed
[   54.185125][   T29] audit: type=1326 audit(1764833132.150:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f246670f749 code=0x7ffc0000
[   54.306586][   T29] audit: type=1326 audit(1764833132.180:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f246670f749 code=0x7ffc0000
[   54.330008][   T29] audit: type=1326 audit(1764833132.230:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4232 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   54.353436][   T29] audit: type=1326 audit(1764833132.240:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4232 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   54.376818][   T29] audit: type=1326 audit(1764833132.240:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4232 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   54.400267][   T29] audit: type=1326 audit(1764833132.240:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4232 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   54.423722][   T29] audit: type=1326 audit(1764833132.240:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4232 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   54.447097][   T29] audit: type=1326 audit(1764833132.240:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4232 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   54.470488][   T29] audit: type=1326 audit(1764833132.240:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4232 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   54.493839][   T29] audit: type=1326 audit(1764833132.240:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4232 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   54.589739][ T4245] can: request_module (can-proto-5) failed.
[   54.647297][ T4245] loop4: detected capacity change from 0 to 128
[   54.655180][ T4245] EXT4-fs: Ignoring removed nobh option
[   54.665000][ T4245] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   54.735585][ T4259] netlink: 36 bytes leftover after parsing attributes in process `syz.1.261'.
[   54.744785][ T4259] netlink: 36 bytes leftover after parsing attributes in process `syz.1.261'.
[   54.772786][ T4259] netlink: 36 bytes leftover after parsing attributes in process `syz.1.261'.
[   54.794969][ T4259] xt_policy: output policy not valid in PREROUTING and INPUT
[   54.831315][ T4264] loop3: detected capacity change from 0 to 256
[   54.866151][ T4264] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   54.970986][ T4284] loop4: detected capacity change from 0 to 128
[   54.997193][ T4283] loop1: detected capacity change from 0 to 4096
[   55.004088][ T4283] EXT4-fs: Ignoring removed bh option
[   55.224339][ T4296] 9pnet_fd: p9_fd_create_unix (4296): problem connecting socket: ./file0: -2
[   55.293352][  T155] Buffer I/O error on dev loop4, logical block 158, lost async page write
[   55.378596][ T4302] loop4: detected capacity change from 0 to 512
[   55.387415][ T4302] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   55.406662][ T4302] EXT4-fs (loop4): 1 truncate cleaned up
[   55.883917][ T4326] loop2: detected capacity change from 0 to 128
[   55.906356][ T4326] bio_check_eod: 165 callbacks suppressed
[   55.906374][ T4326] syz.2.288: attempt to access beyond end of device
[   55.906374][ T4326] loop2: rw=2049, sector=145, nr_sectors = 3 limit=128
[   56.003186][ T4332] SELinux:  policydb version 133 does not match my version range 15-35
[   56.025515][ T4335] syz.2.288: attempt to access beyond end of device
[   56.025515][ T4335] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128
[   56.092602][ T4332] SELinux: failed to load policy
[   56.101065][ T4334] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   56.122453][ T4335] syz.2.288: attempt to access beyond end of device
[   56.122453][ T4335] loop2: rw=2049, sector=169, nr_sectors = 24 limit=128
[   56.157606][ T4340] can: request_module (can-proto-5) failed.
[   56.179474][ T4340] loop4: detected capacity change from 0 to 128
[   56.188535][ T4335] syz.2.288: attempt to access beyond end of device
[   56.188535][ T4335] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128
[   56.204138][ T4340] EXT4-fs: Ignoring removed nobh option
[   56.212746][ T4340] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   56.285228][   T31] kworker/u8:1: attempt to access beyond end of device
[   56.285228][   T31] loop2: rw=1, sector=158, nr_sectors = 1 limit=128
[   56.298682][   T31] Buffer I/O error on dev loop2, logical block 158, lost async page write
[   56.316766][ T4356] loop4: detected capacity change from 0 to 128
[   56.459856][ T4359] 9pnet_fd: p9_fd_create_unix (4359): problem connecting socket: ./file0: -2
[   57.372672][ T4382] netlink: 36 bytes leftover after parsing attributes in process `syz.4.307'.
[   57.381627][ T4382] netlink: 36 bytes leftover after parsing attributes in process `syz.4.307'.
[   57.474378][ T4390] xt_policy: output policy not valid in PREROUTING and INPUT
[   57.487080][ T4391] loop2: detected capacity change from 0 to 512
[   57.512932][ T4382] netlink: 36 bytes leftover after parsing attributes in process `syz.4.307'.
[   57.553666][ T4391] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.591763][ T4391] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   57.630269][ T4391] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[   57.642708][ T4391] EXT4-fs (loop2): This should not happen!! Data will be lost
[   57.642708][ T4391] 
[   57.652458][ T4391] EXT4-fs (loop2): Total free blocks count 0
[   57.658460][ T4391] EXT4-fs (loop2): Free/Dirty block details
[   57.664417][ T4391] EXT4-fs (loop2): free_blocks=65280
[   57.669751][ T4391] EXT4-fs (loop2): dirty_blocks=23
[   57.674897][ T4391] EXT4-fs (loop2): Block reservation details
[   57.679594][  T155] Bluetooth: hci0: Frame reassembly failed (-84)
[   57.680917][ T4391] EXT4-fs (loop2): i_reserved_data_blocks=23
[   57.755172][ T4409] can: request_module (can-proto-5) failed.
[   57.757977][ T4412] syz!: rxe_newlink: already configured on team_slave_0
[   57.780025][ T4409] loop3: detected capacity change from 0 to 128
[   57.790426][ T4409] EXT4-fs: Ignoring removed nobh option
[   57.800794][ T4409] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   57.842918][ T4425] loop2: detected capacity change from 0 to 128
[   57.868491][ T4427] netlink: 36 bytes leftover after parsing attributes in process `syz.3.326'.
[   57.877478][ T4427] netlink: 36 bytes leftover after parsing attributes in process `syz.3.326'.
[   57.895351][ T4427] netlink: 36 bytes leftover after parsing attributes in process `syz.3.326'.
[   57.907000][ T4427] xt_policy: output policy not valid in PREROUTING and INPUT
[   57.912820][ T4429] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   58.035290][ T4440] loop2: detected capacity change from 0 to 4096
[   58.101543][ T4445] netlink: 'syz.3.333': attribute type 3 has an invalid length.
[   58.109544][ T4445] netlink: 132 bytes leftover after parsing attributes in process `syz.3.333'.
[   58.174854][ T4448] loop3: detected capacity change from 0 to 1024
[   58.182772][ T4448] ext4: Bad value for 'debug_want_extra_isize'
[   58.252380][ T4455] loop3: detected capacity change from 0 to 1024
[   58.259652][ T4455] ext4: Bad value for 'debug_want_extra_isize'
[   58.269589][ T4455] 9pnet_fd: Insufficient options for proto=fd
[   58.277292][ T4457] loop2: detected capacity change from 0 to 1024
[   58.289965][ T4457] EXT4-fs: Ignoring removed bh option
[   58.295544][ T4457] EXT4-fs: Ignoring removed nomblk_io_submit option
[   58.330588][ T4457] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2
[   58.343771][ T4463] loop3: detected capacity change from 0 to 128
[   58.472684][ T4475] loop2: detected capacity change from 0 to 1024
[   58.479443][ T4475] ext4: Bad value for 'debug_want_extra_isize'
[   58.525830][ T4478] loop2: detected capacity change from 0 to 4096
[   58.532676][ T4478] EXT4-fs: Ignoring removed bh option
[   58.774350][ T4493] loop4: detected capacity change from 0 to 1024
[   58.781290][ T4493] EXT4-fs: Ignoring removed mblk_io_submit option
[   58.871487][ T4498] loop4: detected capacity change from 0 to 1024
[   58.885185][ T4498] EXT4-fs: Ignoring removed mblk_io_submit option
[   59.023922][ T4511] loop2: detected capacity change from 0 to 128
[   59.050726][ T4511] syz.2.357: attempt to access beyond end of device
[   59.050726][ T4511] loop2: rw=2049, sector=145, nr_sectors = 3 limit=128
[   59.082627][ T4513] can: request_module (can-proto-5) failed.
[   59.106485][ T4513] loop4: detected capacity change from 0 to 128
[   59.113683][ T4513] EXT4-fs: Ignoring removed nobh option
[   59.116120][ T4515] syz.2.357: attempt to access beyond end of device
[   59.116120][ T4515] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128
[   59.136984][ T4513] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   59.159066][ T4515] syz.2.357: attempt to access beyond end of device
[   59.159066][ T4515] loop2: rw=2049, sector=169, nr_sectors = 24 limit=128
[   59.173939][ T4515] syz.2.357: attempt to access beyond end of device
[   59.173939][ T4515] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128
[   59.187554][ T4515] syz.2.357: attempt to access beyond end of device
[   59.187554][ T4515] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128
[   59.221193][  T155] Buffer I/O error on dev loop2, logical block 158, lost async page write
[   59.283321][ T4524] SELinux:  policydb version 0 does not match my version range 15-35
[   59.291435][ T4524] SELinux: failed to load policy
[   59.432512][ T4534] 9pnet_fd: p9_fd_create_unix (4534): problem connecting socket: ./file0: -2
[   59.469797][ T4549] can: request_module (can-proto-5) failed.
[   59.478593][ T4547] can: request_module (can-proto-5) failed.
[   59.482335][   T29] kauditd_printk_skb: 314 callbacks suppressed
[   59.482387][   T29] audit: type=1326 audit(1764833137.450:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246670f749 code=0x7ffc0000
[   59.514087][   T29] audit: type=1326 audit(1764833137.450:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f246670f749 code=0x7ffc0000
[   59.537503][   T29] audit: type=1326 audit(1764833137.450:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246670f749 code=0x7ffc0000
[   59.539637][ T4553] openvswitch: netlink: Missing key (keys=40, expected=100)
[   59.560947][   T29] audit: type=1326 audit(1764833137.450:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f246670f749 code=0x7ffc0000
[   59.591886][   T29] audit: type=1326 audit(1764833137.450:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246670f749 code=0x7ffc0000
[   59.615375][   T29] audit: type=1326 audit(1764833137.450:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f246670f749 code=0x7ffc0000
[   59.639264][   T29] audit: type=1326 audit(1764833137.450:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee8d4f749 code=0x7ffc0000
[   59.662681][   T29] audit: type=1326 audit(1764833137.450:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efee8d4f749 code=0x7ffc0000
[   59.686408][   T29] audit: type=1326 audit(1764833137.450:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee8d4f749 code=0x7ffc0000
[   59.709830][   T29] audit: type=1326 audit(1764833137.450:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efee8d4f749 code=0x7ffc0000
[   59.737588][ T3732] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   59.838378][ T4563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'.
[   59.895035][ T4565] loop2: detected capacity change from 0 to 4096
[   59.928044][ T4568] SELinux:  policydb version 0 does not match my version range 15-35
[   59.936785][ T4568] SELinux: failed to load policy
[   60.061829][ T4576] loop2: detected capacity change from 0 to 1024
[   60.068759][ T4576] ext4: Bad value for 'debug_want_extra_isize'
[   60.077644][ T4576] 9pnet_fd: Insufficient options for proto=fd
[   60.225856][ T4583] loop4: detected capacity change from 0 to 4096
[   60.233877][ T4583] EXT4-fs: Ignoring removed bh option
[   60.307353][ T4586] loop1: detected capacity change from 0 to 128
[   60.423705][ T4593] loop1: detected capacity change from 0 to 1024
[   60.460482][ T4593] EXT4-fs: Ignoring removed mblk_io_submit option
[   60.481162][ T4595] netlink: 36 bytes leftover after parsing attributes in process `syz.2.386'.
[   60.490156][ T4595] netlink: 36 bytes leftover after parsing attributes in process `syz.2.386'.
[   60.499299][ T4595] netlink: 36 bytes leftover after parsing attributes in process `syz.2.386'.
[   60.511105][ T4595] xt_policy: output policy not valid in PREROUTING and INPUT
[   60.551607][ T4599] loop1: detected capacity change from 0 to 1024
[   60.558685][ T4599] ext4: Bad value for 'debug_want_extra_isize'
[   60.606720][ T4604] netlink: 36 bytes leftover after parsing attributes in process `syz.2.390'.
[   60.621449][ T4604] xt_policy: output policy not valid in PREROUTING and INPUT
[   60.663468][ T4609] loop4: detected capacity change from 0 to 1024
[   60.670374][ T4609] ext4: Bad value for 'debug_want_extra_isize'
[   60.677912][ T4609] 9pnet_fd: Insufficient options for proto=fd
[   60.833304][ T4621] 9pnet_fd: p9_fd_create_unix (4621): problem connecting socket: ./file0: -2
[   60.920656][ T4629] can: request_module (can-proto-5) failed.
[   61.175033][ T4638] loop3: detected capacity change from 0 to 256
[   61.189689][ T4638] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   61.335959][ T4643] loop3: detected capacity change from 0 to 1024
[   61.343304][ T4643] ext4: Bad value for 'debug_want_extra_isize'
[   61.351064][ T4643] 9pnet_fd: Insufficient options for proto=fd
[   61.389542][ T4646] loop3: detected capacity change from 0 to 4096
[   61.396478][ T4646] EXT4-fs: Ignoring removed bh option
[   61.619554][ T4652] loop2: detected capacity change from 0 to 512
[   61.640764][ T4652] EXT4-fs: inline encryption not supported
[   61.646795][ T4652] EXT4-fs: Ignoring removed bh option
[   61.680983][ T4652] EXT4-fs: quotafile must be on filesystem root
[   61.684703][ T4652] loop2: detected capacity change from 0 to 256
[   61.684917][ T4652] msdos: Bad value for 'allow_utime'
[   61.809339][ T4669] loop2: detected capacity change from 0 to 128
[   61.844546][ T4669] bio_check_eod: 29 callbacks suppressed
[   61.844584][ T4669] syz.2.413: attempt to access beyond end of device
[   61.844584][ T4669] loop2: rw=2049, sector=145, nr_sectors = 3 limit=128
[   61.932635][ T4677] syz.2.413: attempt to access beyond end of device
[   61.932635][ T4677] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128
[   61.988007][ T4677] syz.2.413: attempt to access beyond end of device
[   61.988007][ T4677] loop2: rw=2049, sector=169, nr_sectors = 24 limit=128
[   62.021011][ T4677] syz.2.413: attempt to access beyond end of device
[   62.021011][ T4677] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128
[   62.040093][ T4677] syz.2.413: attempt to access beyond end of device
[   62.040093][ T4677] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128
[   62.088930][ T4677] syz.2.413: attempt to access beyond end of device
[   62.088930][ T4677] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128
[   62.156408][  T386] kworker/u8:7: attempt to access beyond end of device
[   62.156408][  T386] loop2: rw=1, sector=158, nr_sectors = 1 limit=128
[   62.169864][  T386] Buffer I/O error on dev loop2, logical block 158, lost async page write
[   62.187798][ T4688] netlink: 'syz.4.420': attribute type 3 has an invalid length.
[   62.195589][ T4688] netlink: 'syz.4.420': attribute type 2 has an invalid length.
[   62.329636][ T4695] loop2: detected capacity change from 0 to 512
[   62.356329][ T4695] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.393219][ T4701] loop3: detected capacity change from 0 to 1024
[   62.405283][ T4701] EXT4-fs: Ignoring removed mblk_io_submit option
[   62.408566][ T4700] 9pnet_fd: Insufficient options for proto=fd
[   62.465885][ T4705] loop2: detected capacity change from 0 to 512
[   62.479499][ T4705] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   62.504622][ T4709] can: request_module (can-proto-5) failed.
[   62.514876][ T4705] EXT4-fs (loop2): 1 truncate cleaned up
[   62.523541][ T4709] loop3: detected capacity change from 0 to 128
[   62.550617][ T4709] EXT4-fs: Ignoring removed nobh option
[   62.574150][ T4709] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   62.660393][ T4724] loop2: detected capacity change from 0 to 256
[   62.673354][ T4726] SELinux:  policydb version 133 does not match my version range 15-35
[   62.687083][ T4724] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   62.691321][ T4726] SELinux: failed to load policy
[   62.760228][ T4731] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   62.821537][ T4727] __nla_validate_parse: 2 callbacks suppressed
[   62.821553][ T4727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'.
[   62.843968][ T4727] netlink: 19 bytes leftover after parsing attributes in process `syz.3.431'.
[   62.861476][ T4727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'.
[   62.875601][ T4736] loop2: detected capacity change from 0 to 512
[   62.882543][ T4727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'.
[   62.893828][ T4727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'.
[   62.911089][ T4736] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.014210][ T4743] netlink: 36 bytes leftover after parsing attributes in process `syz.3.439'.
[   63.023244][ T4743] netlink: 36 bytes leftover after parsing attributes in process `syz.3.439'.
[   63.036229][ T4746] loop4: detected capacity change from 0 to 512
[   63.042643][ T4743] netlink: 36 bytes leftover after parsing attributes in process `syz.3.439'.
[   63.056222][ T4743] xt_policy: output policy not valid in PREROUTING and INPUT
[   63.075774][ T4746] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   63.088031][ T4746] EXT4-fs (loop4): 1 truncate cleaned up
[   63.121386][ T4749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'.
[   63.147429][ T4749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.441'.
[   63.191615][ T4749] team0 (unregistering): Port device team_slave_0 removed
[   63.218930][ T4749] team0 (unregistering): Port device team_slave_1 removed
[   63.386720][ T4771] loop3: detected capacity change from 0 to 128
[   63.424866][ T4773] xt_policy: output policy not valid in PREROUTING and INPUT
[   63.441242][ T4775] netlink: 'syz.3.452': attribute type 16 has an invalid length.
[   63.449048][ T4775] netlink: 'syz.3.452': attribute type 17 has an invalid length.
[   63.489426][ T4775] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.497910][ T4775] 8021q: adding VLAN 0 to HW filter on device team0
[   63.513086][ T4775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.568832][ T4782] 9pnet_fd: p9_fd_create_unix (4782): problem connecting socket: ./file0: -2
[   63.624141][ T4787] loop1: detected capacity change from 0 to 1024
[   63.636541][ T4787] EXT4-fs: Ignoring removed orlov option
[   63.671347][ T4793] openvswitch: netlink: Missing key (keys=40, expected=100)
[   64.009431][ T4805] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[   64.027794][ T4807] loop1: detected capacity change from 0 to 128
[   64.231691][ T4816] can: request_module (can-proto-5) failed.
[   64.247275][ T4816] loop1: detected capacity change from 0 to 128
[   64.251861][ T4819] loop2: detected capacity change from 0 to 1024
[   64.254117][ T4816] EXT4-fs: Ignoring removed nobh option
[   64.266980][ T4819] ext4: Bad value for 'debug_want_extra_isize'
[   64.294792][ T4816] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   64.380320][ T4826] can: request_module (can-proto-5) failed.
[   64.401475][ T4826] loop1: detected capacity change from 0 to 128
[   64.409975][ T4826] EXT4-fs: Ignoring removed nobh option
[   64.416061][ T4829] loop2: detected capacity change from 0 to 4096
[   64.427934][ T4826] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   64.432161][ T4829] EXT4-fs: Ignoring removed bh option
[   64.628292][ T4847] loop1: detected capacity change from 0 to 512
[   64.643110][   T29] kauditd_printk_skb: 248 callbacks suppressed
[   64.643128][   T29] audit: type=1326 audit(1764833142.610:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4846 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebc2f749 code=0x7ffc0000
[   64.695912][   T29] audit: type=1326 audit(1764833142.640:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4846 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdfebc2f749 code=0x7ffc0000
[   64.719222][   T29] audit: type=1326 audit(1764833142.640:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4846 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebc2f749 code=0x7ffc0000
[   64.742600][   T29] audit: type=1326 audit(1764833142.640:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4846 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fdfebc2f749 code=0x7ffc0000
[   64.766090][   T29] audit: type=1400 audit(1764833142.660:2371): avc:  denied  { read write } for  pid=4849 comm="syz.3.477" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   64.789775][   T29] audit: type=1400 audit(1764833142.660:2372): avc:  denied  { open } for  pid=4849 comm="syz.3.477" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   64.813926][   T29] audit: type=1400 audit(1764833142.660:2373): avc:  denied  { ioctl } for  pid=4849 comm="syz.3.477" path="/newroot/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   64.940902][   T29] audit: type=1326 audit(1764833142.900:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4857 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246670f749 code=0x7ffc0000
[   64.964385][   T29] audit: type=1326 audit(1764833142.900:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4857 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246670f749 code=0x7ffc0000
[   64.989540][   T29] audit: type=1326 audit(1764833142.900:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4857 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f246670f749 code=0x7ffc0000
[   65.106771][ T4860] ieee802154 phy0 wpan0: encryption failed: -22
[   65.161039][ T4867] loop3: detected capacity change from 0 to 1024
[   65.173910][ T4855] loop2: detected capacity change from 0 to 512
[   65.182163][ T4867] EXT4-fs: Ignoring removed mblk_io_submit option
[   65.199526][ T4855] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   65.250112][ T4872] loop3: detected capacity change from 0 to 512
[   65.264266][ T4855] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.271622][ T4877] loop4: detected capacity change from 0 to 1024
[   65.341739][ T4872] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.357348][ T4877] ext4: Bad value for 'debug_want_extra_isize'
[   65.372030][ T4884] FAULT_INJECTION: forcing a failure.
[   65.372030][ T4884] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   65.385532][ T4884] CPU: 1 UID: 0 PID: 4884 Comm: syz.1.488 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   65.385564][ T4884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   65.385625][ T4884] Call Trace:
[   65.385633][ T4884]  <TASK>
[   65.385642][ T4884]  __dump_stack+0x1d/0x30
[   65.385680][ T4884]  dump_stack_lvl+0xe8/0x140
[   65.385704][ T4884]  dump_stack+0x15/0x1b
[   65.385726][ T4884]  should_fail_ex+0x265/0x280
[   65.385760][ T4884]  should_fail_alloc_page+0xf2/0x100
[   65.385794][ T4884]  __alloc_frozen_pages_noprof+0xff/0x360
[   65.385896][ T4884]  alloc_pages_mpol+0xb3/0x260
[   65.385926][ T4884]  vma_alloc_folio_noprof+0x1aa/0x300
[   65.385959][ T4884]  handle_mm_fault+0xec2/0x2be0
[   65.386005][ T4884]  do_user_addr_fault+0x630/0x1080
[   65.386183][ T4884]  exc_page_fault+0x62/0xa0
[   65.386209][ T4884]  asm_exc_page_fault+0x26/0x30
[   65.386281][ T4884] RIP: 0033:0x7fdfebbdcc5b
[   65.386306][ T4884] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01
[   65.386327][ T4884] RSP: 002b:00007fdfea694e10 EFLAGS: 00010246
[   65.386346][ T4884] RAX: 00007fdfea696f30 RBX: 00007fdfebe5a640 RCX: 0000000000000000
[   65.386361][ T4884] RDX: 00007fdfea696f78 RSI: 00007fdfebc90df8 RDI: 00007fdfea694e30
[   65.386376][ T4884] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000
[   65.386414][ T4884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   65.386429][ T4884] R13: 00007fdfebe86038 R14: 00007fdfebe85fa0 R15: 00007ffe8346fa18
[   65.386498][ T4884]  </TASK>
[   65.386533][ T4884] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   65.397432][ T4877] 9pnet_fd: Insufficient options for proto=fd
[   65.606897][ T4894] can: request_module (can-proto-5) failed.
[   65.625526][ T4894] loop2: detected capacity change from 0 to 128
[   65.632580][ T4894] EXT4-fs: Ignoring removed nobh option
[   65.641625][ T4894] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   65.710762][ T4910] can: request_module (can-proto-5) failed.
[   65.747999][ T4916] SELinux:  policydb version 133 does not match my version range 15-35
[   65.756478][ T4916] SELinux: failed to load policy
[   65.813637][ T4927] FAULT_INJECTION: forcing a failure.
[   65.813637][ T4927] name failslab, interval 1, probability 0, space 0, times 0
[   65.826392][ T4927] CPU: 1 UID: 0 PID: 4927 Comm: syz.4.502 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   65.826420][ T4927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   65.826498][ T4927] Call Trace:
[   65.826505][ T4927]  <TASK>
[   65.826513][ T4927]  __dump_stack+0x1d/0x30
[   65.826599][ T4927]  dump_stack_lvl+0xe8/0x140
[   65.826621][ T4927]  dump_stack+0x15/0x1b
[   65.826716][ T4927]  should_fail_ex+0x265/0x280
[   65.826747][ T4927]  should_failslab+0x8c/0xb0
[   65.826782][ T4927]  __kmalloc_noprof+0xa5/0x590
[   65.826866][ T4927]  ? do_handle_open+0x379/0x710
[   65.826890][ T4927]  do_handle_open+0x379/0x710
[   65.826914][ T4927]  __x64_sys_open_by_handle_at+0x44/0x50
[   65.826961][ T4927]  x64_sys_call+0x2b6a/0x3000
[   65.826986][ T4927]  do_syscall_64+0xd8/0x2a0
[   65.827076][ T4927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.827098][ T4927] RIP: 0033:0x7f34d314f749
[   65.827114][ T4927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   65.827133][ T4927] RSP: 002b:00007f34d1baf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[   65.827188][ T4927] RAX: ffffffffffffffda RBX: 00007f34d33a5fa0 RCX: 00007f34d314f749
[   65.827202][ T4927] RDX: 0000000000028001 RSI: 0000200000000000 RDI: 0000000000000003
[   65.827220][ T4927] RBP: 00007f34d1baf090 R08: 0000000000000000 R09: 0000000000000000
[   65.827233][ T4927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   65.827246][ T4927] R13: 00007f34d33a6038 R14: 00007f34d33a5fa0 R15: 00007ffc18540868
[   65.827266][ T4927]  </TASK>
[   66.011760][ T4930] 9pnet_fd: Insufficient options for proto=fd
[   66.018107][ T4932] loop4: detected capacity change from 0 to 128
[   66.037183][ T4932] syz.4.505: attempt to access beyond end of device
[   66.037183][ T4932] loop4: rw=2049, sector=145, nr_sectors = 3 limit=128
[   66.105034][ T4938] can: request_module (can-proto-5) failed.
[   66.115016][ T4932] syz.4.505: attempt to access beyond end of device
[   66.115016][ T4932] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128
[   66.129153][ T4932] syz.4.505: attempt to access beyond end of device
[   66.129153][ T4932] loop4: rw=2049, sector=169, nr_sectors = 24 limit=128
[   66.159313][   T37] Buffer I/O error on dev loop4, logical block 158, lost async page write
[   66.191612][ T4945] loop4: detected capacity change from 0 to 1024
[   66.198808][ T4945] ext4: Bad value for 'debug_want_extra_isize'
[   66.284299][ T4954] netlink: 'syz.0.512': attribute type 3 has an invalid length.
[   66.292188][ T4954] netlink: 'syz.0.512': attribute type 2 has an invalid length.
[   66.339022][ T4960] loop4: detected capacity change from 0 to 256
[   66.347859][ T4960] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   66.419747][ T4966] IPv6: addrconf: prefix option has invalid lifetime
[   66.444723][ T4968] loop1: detected capacity change from 0 to 128
[   66.537210][ T4972] loop2: detected capacity change from 0 to 164
[   66.545286][ T4972] iso9660: Bad value for 'dmode'
[   66.557626][  T386] Buffer I/O error on dev loop1, logical block 158, lost async page write
[   66.597676][ T4976] capability: warning: `syz.4.524' uses deprecated v2 capabilities in a way that may be insecure
[   66.647108][ T4983] loop4: detected capacity change from 0 to 128
[   66.779143][  T887] Buffer I/O error on dev loop4, logical block 158, lost async page write
[   67.269075][ T4992] loop2: detected capacity change from 0 to 1024
[   67.275938][ T4992] EXT4-fs: Ignoring removed mblk_io_submit option
[   67.321142][ T4997] SELinux:  policydb version 133 does not match my version range 15-35
[   67.329645][ T4997] SELinux: failed to load policy
[   67.378717][ T4999] x_tables: duplicate underflow at hook 2
[   67.448080][ T5003] FAULT_INJECTION: forcing a failure.
[   67.448080][ T5003] name failslab, interval 1, probability 0, space 0, times 0
[   67.448801][ T5010] loop2: detected capacity change from 0 to 128
[   67.461329][ T5003] CPU: 0 UID: 0 PID: 5003 Comm: syz.3.533 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   67.461364][ T5003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   67.461384][ T5003] Call Trace:
[   67.461393][ T5003]  <TASK>
[   67.461403][ T5003]  __dump_stack+0x1d/0x30
[   67.461511][ T5003]  dump_stack_lvl+0xe8/0x140
[   67.461543][ T5003]  dump_stack+0x15/0x1b
[   67.461577][ T5003]  should_fail_ex+0x265/0x280
[   67.461619][ T5003]  should_failslab+0x8c/0xb0
[   67.461737][ T5003]  kmem_cache_alloc_noprof+0x50/0x4a0
[   67.461838][ T5003]  ? sctp_get_port_local+0x438/0xae0
[   67.461875][ T5003]  sctp_get_port_local+0x438/0xae0
[   67.462025][ T5003]  sctp_do_bind+0x398/0x4b0
[   67.462068][ T5003]  sctp_connect_new_asoc+0x153/0x3a0
[   67.462106][ T5003]  sctp_sendmsg+0xf10/0x18d0
[   67.462140][ T5003]  ? sysvec_call_function_single+0x11/0x80
[   67.462271][ T5003]  ? __pfx_sctp_sendmsg+0x10/0x10
[   67.462376][ T5003]  inet_sendmsg+0xc5/0xd0
[   67.462418][ T5003]  __sock_sendmsg+0x102/0x180
[   67.462456][ T5003]  __sys_sendto+0x268/0x330
[   67.462587][ T5003]  __x64_sys_sendto+0x76/0x90
[   67.462672][ T5003]  x64_sys_call+0x29a7/0x3000
[   67.462725][ T5003]  do_syscall_64+0xd8/0x2a0
[   67.462813][ T5003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.462845][ T5003] RIP: 0033:0x7f083d89f749
[   67.462868][ T5003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   67.462894][ T5003] RSP: 002b:00007f083c307038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   67.462921][ T5003] RAX: ffffffffffffffda RBX: 00007f083daf5fa0 RCX: 00007f083d89f749
[   67.462939][ T5003] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003
[   67.462989][ T5003] RBP: 00007f083c307090 R08: 0000200000000140 R09: 000000000000001c
[   67.463007][ T5003] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001
[   67.463024][ T5003] R13: 00007f083daf6038 R14: 00007f083daf5fa0 R15: 00007ffccda63208
[   67.463059][ T5003]  </TASK>
[   67.567805][ T5014] can: request_module (can-proto-5) failed.
[   67.749508][ T5010] bio_check_eod: 266 callbacks suppressed
[   67.749523][ T5010] syz.2.535: attempt to access beyond end of device
[   67.749523][ T5010] loop2: rw=2049, sector=145, nr_sectors = 3 limit=128
[   67.830698][ T5028] syz.2.535: attempt to access beyond end of device
[   67.830698][ T5028] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128
[   67.844615][ T5028] syz.2.535: attempt to access beyond end of device
[   67.844615][ T5028] loop2: rw=2049, sector=169, nr_sectors = 24 limit=128
[   67.863059][ T5028] syz.2.535: attempt to access beyond end of device
[   67.863059][ T5028] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128
[   67.876811][ T5028] syz.2.535: attempt to access beyond end of device
[   67.876811][ T5028] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128
[   67.890632][ T5028] syz.2.535: attempt to access beyond end of device
[   67.890632][ T5028] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128
[   67.904256][ T5028] syz.2.535: attempt to access beyond end of device
[   67.904256][ T5028] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128
[   67.917879][ T5031] loop3: detected capacity change from 0 to 1024
[   67.929579][ T5031] EXT4-fs: Ignoring removed mblk_io_submit option
[   67.940699][ T5028] syz.2.535: attempt to access beyond end of device
[   67.940699][ T5028] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128
[   67.982237][  T386] kworker/u8:7: attempt to access beyond end of device
[   67.982237][  T386] loop2: rw=1, sector=158, nr_sectors = 1 limit=128
[   67.995637][  T386] Buffer I/O error on dev loop2, logical block 158, lost async page write
[   68.045128][ T5039] xt_limit: Overflow, try lower: 268435456/134217728
[   68.057096][ T5039] loop2: detected capacity change from 0 to 512
[   68.064413][ T5039] EXT4-fs: Ignoring removed nomblk_io_submit option
[   68.074520][ T5039] EXT4-fs error (device loop2): ext4_iget_extra_inode:5071: inode #15: comm syz.2.544: corrupted in-inode xattr: invalid ea_ino
[   68.088329][ T5039] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.544: couldn't read orphan inode 15 (err -117)
[   68.180307][ T5046] openvswitch: netlink: Missing key (keys=40, expected=100)
[   68.631150][ T5051] __nla_validate_parse: 7 callbacks suppressed
[   68.631168][ T5051] netlink: 36 bytes leftover after parsing attributes in process `syz.4.547'.
[   68.646316][ T5051] netlink: 36 bytes leftover after parsing attributes in process `syz.4.547'.
[   68.655894][ T5051] netlink: 36 bytes leftover after parsing attributes in process `syz.4.547'.
[   68.884658][ T5058] loop3: detected capacity change from 0 to 256
[   68.892451][ T5058] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   68.994038][ T5067] loop2: detected capacity change from 0 to 1024
[   69.002939][ T5067] ext4: Bad value for 'debug_want_extra_isize'
[   69.106699][ T5074] loop3: detected capacity change from 0 to 128
[   69.140384][ T5074] syz.3.556: attempt to access beyond end of device
[   69.140384][ T5074] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128
[   69.163274][ T5078] loop2: detected capacity change from 0 to 512
[   69.212087][ T5078] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.298768][   T61] Buffer I/O error on dev loop3, logical block 158, lost async page write
[   69.320283][   T37] Bluetooth: hci0: Frame reassembly failed (-84)
[   69.676153][ T5096] loop4: detected capacity change from 0 to 128
[   69.778297][   T61] Buffer I/O error on dev loop4, logical block 158, lost async page write
[   69.925823][ T5107] loop1: detected capacity change from 0 to 4096
[   69.932443][   T29] kauditd_printk_skb: 198 callbacks suppressed
[   69.932461][   T29] audit: type=1326 audit(1764833147.900:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5098 comm="syz.4.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   69.940033][ T5099] netlink: 40 bytes leftover after parsing attributes in process `syz.4.564'.
[   69.963542][ T5107] EXT4-fs: Ignoring removed bh option
[   69.977906][   T29] audit: type=1326 audit(1764833147.900:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5098 comm="syz.4.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   70.001346][   T29] audit: type=1326 audit(1764833147.900:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5098 comm="syz.4.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   70.024642][   T29] audit: type=1326 audit(1764833147.900:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5098 comm="syz.4.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   70.047958][   T29] audit: type=1326 audit(1764833147.900:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5098 comm="syz.4.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   70.071307][   T29] audit: type=1326 audit(1764833147.900:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5098 comm="syz.4.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   70.094651][   T29] audit: type=1326 audit(1764833147.900:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5098 comm="syz.4.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   70.118404][   T29] audit: type=1326 audit(1764833147.900:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5098 comm="syz.4.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   70.141784][   T29] audit: type=1326 audit(1764833147.900:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5098 comm="syz.4.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   70.165200][   T29] audit: type=1326 audit(1764833147.900:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5098 comm="syz.4.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d314f749 code=0x7ffc0000
[   70.311991][ T5113] loop3: detected capacity change from 0 to 4096
[   70.333171][ T5113] EXT4-fs: Ignoring removed bh option
[   70.347856][ T5113] EXT4-fs mount: 83 callbacks suppressed
[   70.347877][ T5113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.395761][ T5118] can: request_module (can-proto-5) failed.
[   70.537019][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.680795][ T5131] loop1: detected capacity change from 0 to 2048
[   70.773085][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.783792][ T4041] Alternate GPT is invalid, using primary GPT.
[   70.790131][ T4041]  loop1: p2 p3 p7
[   70.896568][ T5131] Alternate GPT is invalid, using primary GPT.
[   70.903023][ T5131]  loop1: p2 p3 p7
[   70.921951][ T5128] Set syz1 is full, maxelem 65536 reached
[   71.094252][ T5154] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   71.126972][ T5157] x_tables: duplicate underflow at hook 2
[   71.127653][ T5159] loop1: detected capacity change from 0 to 256
[   71.148167][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[   71.148199][ T4041] udevd[4041]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[   71.162592][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[   71.168491][ T5159] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   71.382546][ T3719] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   71.388692][ T3732] Bluetooth: hci0: command 0x1003 tx timeout
[   71.401863][ T5180] loop1: detected capacity change from 0 to 256
[   71.424651][ T5180] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   71.593975][ T5185] x_tables: duplicate underflow at hook 2
[   71.629330][ T5191] SELinux:  policydb version 0 does not match my version range 15-35
[   71.637978][ T5191] SELinux: failed to load policy
[   71.663152][ T5193] loop3: detected capacity change from 0 to 128
[   71.739197][ T5199] loop1: detected capacity change from 0 to 1024
[   71.754197][ T5199] ext4: Bad value for 'debug_want_extra_isize'
[   71.807074][  T386] Buffer I/O error on dev loop3, logical block 158, lost async page write
[   71.826488][ T5203] loop3: detected capacity change from 0 to 512
[   71.906867][ T5206] can: request_module (can-proto-5) failed.
[   71.951402][ T5206] loop1: detected capacity change from 0 to 128
[   71.982146][ T5206] EXT4-fs: Ignoring removed nobh option
[   71.989459][ T5216] loop4: detected capacity change from 0 to 256
[   72.009567][ T5216] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   72.022601][ T5206] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   72.035246][ T5206] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   72.066923][ T3320] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   72.083403][ T5218] x_tables: duplicate underflow at hook 2
[   72.149864][ T5222] 9pnet_fd: Insufficient options for proto=fd
[   72.314192][ T5236] loop2: detected capacity change from 0 to 1024
[   72.332863][ T5236] ext4: Bad value for 'debug_want_extra_isize'
[   72.413740][ T5239] loop4: detected capacity change from 0 to 4096
[   72.441310][ T5239] EXT4-fs: Ignoring removed bh option
[   72.465190][ T5239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.617739][ T5248] openvswitch: netlink: Missing key (keys=40, expected=100)
[   72.825982][ T5255] can: request_module (can-proto-5) failed.
[   72.874481][ T5258] loop2: detected capacity change from 0 to 1024
[   72.881211][ T5258] EXT4-fs: Ignoring removed mblk_io_submit option
[   73.175615][ T5258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.262191][ T3334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.274031][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.292435][ T5266] SELinux:  policydb version 0 does not match my version range 15-35
[   73.312328][ T5266] SELinux: failed to load policy
[   73.568130][ T5288] loop4: detected capacity change from 0 to 512
[   73.669828][ T5295] loop2: detected capacity change from 0 to 4096
[   73.705255][ T5295] EXT4-fs: Ignoring removed bh option
[   73.734968][ T5298] 9pnet_fd: p9_fd_create_unix (5298): problem connecting socket: ./file0: -2
[   73.767559][ T5295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.897636][ T5305] vhci_hcd: invalid port number 9
[   73.902788][ T5305] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[   74.014952][ T5308] loop1: detected capacity change from 0 to 256
[   74.033549][ T5308] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   74.120533][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.136259][ T5310] can: request_module (can-proto-5) failed.
[   74.237442][ T5320] loop1: detected capacity change from 0 to 256
[   74.247547][ T5320] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   74.273760][ T5324] loop2: detected capacity change from 0 to 4096
[   74.281197][ T5322] FAULT_INJECTION: forcing a failure.
[   74.281197][ T5322] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   74.294434][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.4.642 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   74.294496][ T5322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   74.294512][ T5322] Call Trace:
[   74.294519][ T5322]  <TASK>
[   74.294553][ T5322]  __dump_stack+0x1d/0x30
[   74.294582][ T5322]  dump_stack_lvl+0xe8/0x140
[   74.294632][ T5322]  dump_stack+0x15/0x1b
[   74.294657][ T5322]  should_fail_ex+0x265/0x280
[   74.294699][ T5322]  should_fail+0xb/0x20
[   74.294799][ T5322]  should_fail_usercopy+0x1a/0x20
[   74.294837][ T5322]  _copy_from_user+0x1c/0xb0
[   74.294941][ T5322]  proc_control+0x43/0xa0
[   74.294978][ T5322]  usbdev_ioctl+0x93c/0x1700
[   74.295015][ T5322]  ? __pfx_usbdev_ioctl+0x10/0x10
[   74.295064][ T5322]  __se_sys_ioctl+0xce/0x140
[   74.295100][ T5322]  __x64_sys_ioctl+0x43/0x50
[   74.295133][ T5322]  x64_sys_call+0x14b0/0x3000
[   74.295164][ T5322]  do_syscall_64+0xd8/0x2a0
[   74.295211][ T5322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.295240][ T5322] RIP: 0033:0x7f34d314f749
[   74.295258][ T5322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.295281][ T5322] RSP: 002b:00007f34d1baf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   74.295305][ T5322] RAX: ffffffffffffffda RBX: 00007f34d33a5fa0 RCX: 00007f34d314f749
[   74.295348][ T5322] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000004
[   74.295364][ T5322] RBP: 00007f34d1baf090 R08: 0000000000000000 R09: 0000000000000000
[   74.295380][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   74.295396][ T5322] R13: 00007f34d33a6038 R14: 00007f34d33a5fa0 R15: 00007ffc18540868
[   74.295428][ T5322]  </TASK>
[   74.299876][ T5324] EXT4-fs: Ignoring removed bh option
[   74.346508][ T5326] openvswitch: netlink: Missing key (keys=40, expected=100)
[   74.571868][ T5324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.770444][ T5343] loop1: detected capacity change from 0 to 1024
[   74.794629][ T5343] ext4: Bad value for 'debug_want_extra_isize'
[   75.017178][ T5348] 9pnet_fd: p9_fd_create_unix (5348): problem connecting socket: ./file0: -2
[   75.072290][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.096231][ T5351] can: request_module (can-proto-5) failed.
[   75.108455][   T29] kauditd_printk_skb: 235 callbacks suppressed
[   75.108472][   T29] audit: type=1326 audit(1764833153.070:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebc2f749 code=0x7ffc0000
[   75.146500][ T5355] loop2: detected capacity change from 0 to 128
[   75.178397][ T5355] bio_check_eod: 301 callbacks suppressed
[   75.178445][ T5355] syz.2.650: attempt to access beyond end of device
[   75.178445][ T5355] loop2: rw=2049, sector=145, nr_sectors = 3 limit=128
[   75.200032][ T5358] SELinux:  policydb version 0 does not match my version range 15-35
[   75.253971][   T29] audit: type=1326 audit(1764833153.110:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdfebc2f749 code=0x7ffc0000
[   75.277535][   T29] audit: type=1326 audit(1764833153.110:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebc2f749 code=0x7ffc0000
[   75.282882][ T5358] SELinux: failed to load policy
[   75.300966][   T29] audit: type=1326 audit(1764833153.110:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdfebc2f749 code=0x7ffc0000
[   75.329366][   T29] audit: type=1326 audit(1764833153.110:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebc2f749 code=0x7ffc0000
[   75.352823][   T29] audit: type=1326 audit(1764833153.110:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fdfebc2f749 code=0x7ffc0000
[   75.376106][   T29] audit: type=1326 audit(1764833153.120:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fdfebc2f749 code=0x7ffc0000
[   75.399367][   T29] audit: type=1326 audit(1764833153.120:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebc2f749 code=0x7ffc0000
[   75.422715][   T29] audit: type=1326 audit(1764833153.120:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfebc2f749 code=0x7ffc0000
[   75.432409][ T5361] syz.2.650: attempt to access beyond end of device
[   75.432409][ T5361] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128
[   75.446108][   T29] audit: type=1326 audit(1764833153.120:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebc2f749 code=0x7ffc0000
[   75.507856][ T5361] syz.2.650: attempt to access beyond end of device
[   75.507856][ T5361] loop2: rw=2049, sector=169, nr_sectors = 24 limit=128
[   75.534440][ T5361] syz.2.650: attempt to access beyond end of device
[   75.534440][ T5361] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128
[   75.553991][ T5370] netlink: 'syz.4.653': attribute type 3 has an invalid length.
[   75.561684][ T5370] netlink: 'syz.4.653': attribute type 2 has an invalid length.
[   75.584947][  T155] kworker/u8:6: attempt to access beyond end of device
[   75.584947][  T155] loop2: rw=1, sector=158, nr_sectors = 1 limit=128
[   75.598739][  T155] Buffer I/O error on dev loop2, logical block 158, lost async page write
[   75.755446][ T5383] can: request_module (can-proto-5) failed.
[   75.815388][ T5394] openvswitch: netlink: Missing key (keys=40, expected=100)
[   75.849517][ T5395] 9pnet_fd: p9_fd_create_unix (5395): problem connecting socket: ./file0: -2
[   75.888806][ T5397] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   76.395115][ T5403] SELinux:  policydb version 0 does not match my version range 15-35
[   76.407241][ T5403] SELinux: failed to load policy
[   76.548419][ T5409] 9pnet_fd: p9_fd_create_unix (5409): problem connecting socket: ./file0: -2
[   76.820466][ T5430] can: request_module (can-proto-5) failed.
[   76.833324][ T5430] loop2: detected capacity change from 0 to 128
[   76.841264][ T5430] EXT4-fs: Ignoring removed nobh option
[   76.853037][ T5430] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   76.870799][ T5430] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   76.895186][ T3326] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   77.039924][ T5448] 9pnet_fd: Insufficient options for proto=fd
[   77.066218][ T5450] openvswitch: netlink: Missing key (keys=40, expected=100)
[   77.399544][ T5461] netlink: 360 bytes leftover after parsing attributes in process `syz.3.688'.
[   77.414991][ T5463] can: request_module (can-proto-5) failed.
[   77.433480][ T5463] loop4: detected capacity change from 0 to 128
[   77.444820][ T5463] EXT4-fs: Ignoring removed nobh option
[   77.460055][ T5463] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   77.476051][ T5463] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   77.516907][ T3334] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   77.635718][ T5470] FAULT_INJECTION: forcing a failure.
[   77.635718][ T5470] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   77.648908][ T5470] CPU: 0 UID: 0 PID: 5470 Comm: syz.4.692 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   77.648939][ T5470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   77.648952][ T5470] Call Trace:
[   77.648960][ T5470]  <TASK>
[   77.648970][ T5470]  __dump_stack+0x1d/0x30
[   77.649000][ T5470]  dump_stack_lvl+0xe8/0x140
[   77.649030][ T5470]  dump_stack+0x15/0x1b
[   77.649055][ T5470]  should_fail_ex+0x265/0x280
[   77.649103][ T5470]  should_fail+0xb/0x20
[   77.649127][ T5470]  should_fail_usercopy+0x1a/0x20
[   77.649198][ T5470]  _copy_from_user+0x1c/0xb0
[   77.649222][ T5470]  ___sys_sendmsg+0xc1/0x1d0
[   77.649267][ T5470]  __x64_sys_sendmsg+0xd4/0x160
[   77.649299][ T5470]  x64_sys_call+0x17ba/0x3000
[   77.649373][ T5470]  do_syscall_64+0xd8/0x2a0
[   77.649408][ T5470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.649449][ T5470] RIP: 0033:0x7f34d314f749
[   77.649464][ T5470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.649484][ T5470] RSP: 002b:00007f34d1baf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   77.649624][ T5470] RAX: ffffffffffffffda RBX: 00007f34d33a5fa0 RCX: 00007f34d314f749
[   77.649636][ T5470] RDX: 0000000000040000 RSI: 0000200000000140 RDI: 0000000000000003
[   77.649652][ T5470] RBP: 00007f34d1baf090 R08: 0000000000000000 R09: 0000000000000000
[   77.649668][ T5470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   77.649724][ T5470] R13: 00007f34d33a6038 R14: 00007f34d33a5fa0 R15: 00007ffc18540868
[   77.649750][ T5470]  </TASK>
[   77.878838][ T5475] loop1: detected capacity change from 0 to 4096
[   77.928810][ T5471] SELinux:  policydb version 0 does not match my version range 15-35
[   77.937231][ T5479] loop2: detected capacity change from 0 to 256
[   77.946057][ T5471] SELinux: failed to load policy
[   77.955764][ T5479] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   77.977151][ T5475] EXT4-fs: Ignoring removed bh option
[   77.994451][ T5475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.054677][ T5486] FAULT_INJECTION: forcing a failure.
[   78.054677][ T5486] name failslab, interval 1, probability 0, space 0, times 0
[   78.067378][ T5486] CPU: 1 UID: 0 PID: 5486 Comm: syz.3.697 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   78.067405][ T5486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   78.067417][ T5486] Call Trace:
[   78.067424][ T5486]  <TASK>
[   78.067431][ T5486]  __dump_stack+0x1d/0x30
[   78.067460][ T5486]  dump_stack_lvl+0xe8/0x140
[   78.067567][ T5486]  dump_stack+0x15/0x1b
[   78.067637][ T5486]  should_fail_ex+0x265/0x280
[   78.067705][ T5486]  ? alloc_fs_context+0x46/0x590
[   78.067737][ T5486]  should_failslab+0x8c/0xb0
[   78.067796][ T5486]  __kmalloc_cache_noprof+0x4c/0x4c0
[   78.067821][ T5486]  alloc_fs_context+0x46/0x590
[   78.067934][ T5486]  fs_context_for_mount+0x22/0x30
[   78.067975][ T5486]  do_new_mount+0xea/0x6a0
[   78.068010][ T5486]  ? security_capable+0x83/0x90
[   78.068035][ T5486]  path_mount+0x4ab/0xb80
[   78.068091][ T5486]  ? user_path_at+0xbf/0x130
[   78.068124][ T5486]  __se_sys_mount+0x28c/0x2e0
[   78.068234][ T5486]  ? fput+0x8f/0xc0
[   78.068264][ T5486]  __x64_sys_mount+0x67/0x80
[   78.068298][ T5486]  x64_sys_call+0x2cca/0x3000
[   78.068403][ T5486]  do_syscall_64+0xd8/0x2a0
[   78.068451][ T5486]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.068480][ T5486] RIP: 0033:0x7f083d89f749
[   78.068496][ T5486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   78.068562][ T5486] RSP: 002b:00007f083c307038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   78.068586][ T5486] RAX: ffffffffffffffda RBX: 00007f083daf5fa0 RCX: 00007f083d89f749
[   78.068602][ T5486] RDX: 0000200000000100 RSI: 0000200000000500 RDI: 0000000000000000
[   78.068618][ T5486] RBP: 00007f083c307090 R08: 00002000000002c0 R09: 0000000000000000
[   78.068646][ T5486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   78.068658][ T5486] R13: 00007f083daf6038 R14: 00007f083daf5fa0 R15: 00007ffccda63208
[   78.068729][ T5486]  </TASK>
[   78.371461][ T5493] loop2: detected capacity change from 0 to 4096
[   78.408878][ T5493] EXT4-fs: Ignoring removed bh option
[   78.412049][ T5489] loop3: detected capacity change from 0 to 128
[   78.441196][ T5499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.701'.
[   78.451622][ T5489] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   78.457624][ T5493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.480192][ T5489] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   78.491964][ T5502] ipvlan1: entered promiscuous mode
[   78.497336][ T5502] ipvlan1: entered allmulticast mode
[   78.502694][ T5502] veth0_vlan: entered allmulticast mode
[   78.738477][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.761956][ T3009] ==================================================================
[   78.770190][ T3009] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath
[   78.778195][ T3009] 
[   78.780532][ T3009] write to 0xffff88810547f6f0 of 8 bytes by task 4041 on cpu 0:
[   78.788168][ T3009]  dentry_unlink_inode+0x65/0x260
[   78.793208][ T3009]  d_delete+0x164/0x180
[   78.797378][ T3009]  d_delete_notify+0x32/0x100
[   78.802093][ T3009]  vfs_unlink+0x32c/0x440
[   78.806445][ T3009]  do_unlinkat+0x1cd/0x4b0
[   78.810879][ T3009]  __x64_sys_unlink+0x2e/0x40
[   78.815574][ T3009]  x64_sys_call+0x2f48/0x3000
[   78.820272][ T3009]  do_syscall_64+0xd8/0x2a0
[   78.824785][ T3009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.830684][ T3009] 
[   78.833017][ T3009] read to 0xffff88810547f6f0 of 8 bytes by task 3009 on cpu 1:
[   78.840564][ T3009]  step_into_slowpath+0x113/0x480
[   78.845626][ T3009]  path_lookupat+0x330/0x500
[   78.850235][ T3009]  filename_lookup+0x147/0x340
[   78.855021][ T3009]  do_readlinkat+0x7d/0x320
[   78.859542][ T3009]  __x64_sys_readlink+0x47/0x60
[   78.864402][ T3009]  x64_sys_call+0x2af1/0x3000
[   78.869091][ T3009]  do_syscall_64+0xd8/0x2a0
[   78.873607][ T3009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.879508][ T3009] 
[   78.881835][ T3009] value changed: 0xffff88811a459d90 -> 0x0000000000000000
[   78.888940][ T3009] 
[   78.891262][ T3009] Reported by Kernel Concurrency Sanitizer on:
[   78.897414][ T3009] CPU: 1 UID: 0 PID: 3009 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) 
[   78.906708][ T3009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   78.916769][ T3009] ==================================================================
[   78.969313][ T5508] can: request_module (can-proto-5) failed.
[   78.977861][  T386] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   78.988613][ T5508] loop1: detected capacity change from 0 to 128
[   79.008058][ T5508] EXT4-fs: Ignoring removed nobh option
[   79.017043][ T5508] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   79.053138][ T5508] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   79.076476][ T3320] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   79.091296][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.