last executing test programs:

1m42.685228236s ago: executing program 1 (id=1630):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff8}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000029c0)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0xffffffff, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x5, 0x7fffffff, 0x5, 0x8, 0x0, 0x1, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x18, 0x1, 0x2f2, 0x7fff, 0x0, 0x4, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x402, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x3, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x8, 0x5, 0x7, 0x6, 0x0, 0x6, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0xffffc848, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x8, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x3, 0xffff, 0x4, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x9, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0x101, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x8, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x19, 0xc, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x3, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0x3845, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x2000006, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000201}, {0x4, 0x2, 0x1, 0xa, 0x1fb, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0)

1m41.610421395s ago: executing program 1 (id=1645):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xb0c9fa2cdd4cf720}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000b80)={[{@usrquota}, {@init_itable}], [{@seclabel}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000e00)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"])
sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0)

1m41.512537535s ago: executing program 1 (id=1646):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r2 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x1, 0x0, r1})
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20)

1m41.36507513s ago: executing program 1 (id=1650):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c)
r0 = socket$packet(0x11, 0xa, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0xfffffffffffffff6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='mctp_key_release\x00', r1, 0x0, 0xba1}, 0x18)
r2 = socket$kcm(0x29, 0x5, 0x0)
sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}], 0x1, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000008c0)={[{@noblock_validity}, {}, {@auto_da_alloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000014c0)=ANY=[@ANYBLOB="ff01000000000000", @ANYRES16, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="b6"])
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000001700)={&(0x7f0000001740)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0xfa, @local, 0x8}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x106)
sendmsg$kcm(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000030c0)="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", 0x800}], 0x1, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x168}, 0x0)
r5 = request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000240)='\x00', 0xfffffffffffffffc)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x101}, 0x18)
r7 = openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0x16, &(0x7f00000007c0)=ANY=[@ANYBLOB="1827030000000100d822579369d901a7a9ba00000000fe19000000001af6", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185900000900000000000000000000001820", @ANYRES32, @ANYBLOB="00000000b68600009500000000000000185300000300000000e229e3273724081fa20a199d2ec76e428d2ff2febf91000000000000b7020000010000008500000084000000b70000000000000095000000"], &(0x7f0000000640)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback=0x33, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pwritev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0)
keyctl$get_keyring_id(0x0, r5, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f00000017c0)='\xd6[\x10\v\bDs1ZT!se\xf1\xd3n\x86\xdb\x1fB,\x8d\xf3\xddk`\x7fNj\xc7\xa39\xe8\x03z\x7f\x01\xce\xa2\xcd\xe6\xed\xb0\xc0\xcc\n\xd4\xbdo\xbdCy\xeco]\xa0i\xbc\xc8%!\x04\x02')
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x20, 0x8, &(0x7f0000000640)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xda6b}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000000000b, 0x3}, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x2)
io_setup(0x7, &(0x7f0000000280))
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)

1m41.141829163s ago: executing program 1 (id=1657):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
futex(0xfffffffffffffffd, 0x6, 0x2, 0x0, 0x0, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00', <r10=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000035c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3183000000000000000019000000200001801400020076657468315f766c616e0000000000000800", @ANYRES32=r10, @ANYBLOB="d14cb2ddf69b79dfd0eb2ded6b93e9097cc2cec80d4ea8c5a595cdd2ffffadc7c40b931c63dc42b85784b8e00179930bf24e583355eff9c826ed08fd76505d998a0ad5e78b2644d5c441617f830eadef488d3fa6252e0c256b0b82c4ff27a73252d94acc5a7819cc167f97800ac6954b33aa517bf100ce516e9261723a75ef6ed77a59817d0e0f876979e105c30f9e599808d1c25513a56e7772d94c3e8c286c6d0a181098"], 0x34}}, 0x40010)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000002c0)={'vcan0\x00'})
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40041}, 0x20000000)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x61016, &(0x7f0000000180), 0x1, 0x5a8, &(0x7f0000000680)="$eJzs3U1sHFcdAPD/rO18OAl2AxWlSGBRBJGi+iNGZINAJD0hFaM2BS5FDUuysd2svZZ3LdUuh0SotDdUxKXqCVk58CWlUhEtFKkSoohD4cAJgcK9qqlUviQQWjSzs6kbb+yETTyV/ftJTzPzZnfff/Y/M5k3b+INYNcaiYiTEdEXEUcjYiivL+UlLrZL+rrVySszaUmi1XrkrSSSiHh28spM57OSfHog/4B9EXF6NaL01MZ2G8srFyq1WnUxXx5rzi2MNZZX7p+dq0xXp6vz5XJ5vFw+fmLi9m3ro4f3H37u11/4z89f++6Hv/K93zyZxnswX7d+O26XkRjJv5OB2Luuvj+JOH+7GytIut/0RzvXN+Pu6nd+eYdD4iZ9/geXSkXHAABsv/QC4HBEfCy7/h+KvuxqLuLkoa+9PRT/fLzo+AAAAIDetYaG4nPpFAAAANixStkzsElpNH8W4GCUSqOj7Wd4PxCDpVq90Tx6vr40f679rOxwDJTOz9aq4/mzwsMxkKTLE9n8O8vHrluejIi7IuKZof3Z8ujZeu1c0Tc/AAAAYIc7GHH10W+9/MEDN+j/p/48VHSUAAAAQC/S/v+hq4PZn+r6u34+AAAA7Ehp///tb//1t6H/DwAAADtWp///0NRUPDQ11VrNf/9qvj49e2Fm4cSx8dG5pbOjZ+uLC6PT9fp09j/257b+3Fq9vjBxLJaeGGtWG82xxvLKmbn60nzzTPa7XmeqA9uwbcDWHj55tlp0DAAAwPa566Ov/jGJiIuf2Z+V1J58nb467Gx+ABx2r76iAwAK0190AEBh9PGBZIv1+2604uLtjwUAALgzPvkh4/+wWxn/h93L+D/sXsb/YffSxweM/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNZarSRaAAAAwI7WWF65UKnVqotmzJgxc22m6DuTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyXPTt5ZaZTtqvNV36xXS1xI2unImK4nf/VvLTX9Me+bLovBiJi8G9J9K97XxIRfT22/e97IkbisSdfbF1+KS2R74c9fiy34OKliLin2/GfpLtFDOd7wfX5L2V7Rm9+8sM0/6u/W18n/9url/wP9tj2yx9J8//g3evr5H/3uPfhoiOgSL9/pugIKNIf1oqOgCKdfqToCCjSlz5ddAQU6fm3io6AV09FxHi3/l8p7RZe6+Vf3//ry+4Q9ebISNr/e/ro+rqN/b/SGz02wybWTkV8NiJWN9z/K3VeMtyXLx3K7gcMJOdna9XxiHhfmsMY2JsuT2zSxuUzS491q3/wdJr/Kz9d+NMLP+uUtP10+s6rSm/07333+85VmpVet5u2tUsR9/Z3y39y7f5vcoP7v++/yTZmXv/G493qJ3+V5v+V5zfPP3dS6/sRn+h6/CfXXpPOjTXnFsYayyv3z85VpqvT1flyuTxeLh8/MTGWnQ7GOieFLobWDny1W/3XH0jz/98p+S9OevwPbp7/7PzfWF65UKnVqouNW2/jX2++vtqt/vBTaf4f+Ob/c/7fk3w5C3BPXvdEpdlcnIjYk3xxY/2xW495p+p8H53vK83/kfu6//vfuf5rn/9LG+7/D+fTdP3IJm0OHH/h6W71H78vG/+7+mLr8kuO/2Kk+T+3xfGfvOv4v/WZ5/7yjx91a/vHe9P8v/ZmZ/w3LWn7nbHgtvT4/1QWzJG8xvXf1m42QUXHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6/0vAAD//wqlOeU=")

1m40.901059747s ago: executing program 1 (id=1667):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1})
io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0)
r1 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0xe75001b60ea68cd8}, 0x6000c054)
recvfrom$rxrpc(r1, 0x0, 0x0, 0x40008043, 0x0, 0x0)
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1f, 0x7, 0x6, 0x3, 0x52487, r0, 0xfc93, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3, 0x0, @void, @value, @value=r1}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x1, 0x0, 0x0, 0x0, 0x51}, 0x94)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18)
mount$9p_unix(0x0, 0x0, 0x0, 0x301200a, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000cc071, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r5 = fcntl$dupfd(r4, 0x0, r4)
read$usbfs(r5, 0x0, 0x23)
write$tun(r5, &(0x7f0000000400)=ANY=[], 0xa2)

1m40.899634897s ago: executing program 32 (id=1667):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1})
io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0)
r1 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0xe75001b60ea68cd8}, 0x6000c054)
recvfrom$rxrpc(r1, 0x0, 0x0, 0x40008043, 0x0, 0x0)
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1f, 0x7, 0x6, 0x3, 0x52487, r0, 0xfc93, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3, 0x0, @void, @value, @value=r1}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x1, 0x0, 0x0, 0x0, 0x51}, 0x94)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18)
mount$9p_unix(0x0, 0x0, 0x0, 0x301200a, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000cc071, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r5 = fcntl$dupfd(r4, 0x0, r4)
read$usbfs(r5, 0x0, 0x23)
write$tun(r5, &(0x7f0000000400)=ANY=[], 0xa2)

56.150825776s ago: executing program 3 (id=2482):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x2)
lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0)

56.129203528s ago: executing program 3 (id=2484):
r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x60b140, 0x0, 0x6, 0x3a2})
r1 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r1, 0x4)
recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
close_range(r0, r1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r4, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)

56.020776769s ago: executing program 3 (id=2488):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38)
ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000300)=""/6)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095", @ANYRES32=r0, @ANYBLOB="18000000000000000000000000000000850000006d00000018110000"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x10, 0x0, r1}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x3}, 0x18)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000d00000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r6 = dup2(r5, r0)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x2)
lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001440), 0x8a441, 0x0)
ioctl$TIOCGWINSZ(r8, 0x5413, &(0x7f0000000080))

55.986395192s ago: executing program 3 (id=2491):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000080)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@quota}, {@nobarrier}, {@jqfmt_vfsold}]}, 0x2, 0x500, &(0x7f0000000500)="$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")
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa)
timer_create(0x2, 0x0, &(0x7f0000000600)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0)
timer_gettime(r0, &(0x7f0000000340))
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000340), 0x26, 0x772, &(0x7f0000000a80)="$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")
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r2 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r3, 0x13)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='virtio_transport_recv_pkt\x00', r1}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0})
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x128)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r4, 0x0, 0x200000000000006}, 0x18)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')

55.429860689s ago: executing program 3 (id=2509):
epoll_create1(0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

55.267901435s ago: executing program 3 (id=2512):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (fail_nth: 7)

55.255358357s ago: executing program 33 (id=2512):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (fail_nth: 7)

6.193172071s ago: executing program 0 (id=3479):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f0000000500)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}})

5.647218636s ago: executing program 0 (id=3485):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x103}, 0x100002, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x200000000000005c, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x2000018c)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

5.366812935s ago: executing program 0 (id=3489):
r0 = socket$igmp(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xe6)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={<r3=>0xffffffffffffffff})
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000240)=0x7)
write(r3, 0x0, 0x0)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000000)=0x18000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000004c0)={0xffffffffffffffff, 0x4, 0x3, 0xffffffff, @vifc_lcl_addr=@private=0xa010102, @empty}, 0x10)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000180)=0xc)

5.250767776s ago: executing program 0 (id=3493):
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0xa4000061)
close(r0)

5.169043665s ago: executing program 0 (id=3498):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x12, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000347420467e00000004000000181100002c07250b8c1f0736410213d020c10e9517a6fe2d43e4383c652a0f40509678910824f63aa9bc03a37b63c5404778f3f18096f8baac4242fe942e543c63f509f448", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001852000008000000000000000000000085100000fbffffffbf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x4, 0xd1, &(0x7f0000000440)=""/209, 0x41100, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x1, 0x2, 0xfffffff7, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000580)=[{0x3, 0x4, 0xe}, {0x5, 0x3, 0x8, 0xa}, {0x0, 0x3, 0x10, 0x6}, {0x0, 0x3, 0xe, 0x9}, {0x4, 0x3, 0xf, 0x7}, {0x2, 0x2, 0x4, 0x5}, {0x1, 0x3, 0x6, 0x3}], 0x10, 0x7}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18)
link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00')
ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

5.066703175s ago: executing program 0 (id=3500):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380102000800c00018006000100d1"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000050}, 0x40)

1.926756194s ago: executing program 4 (id=3549):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

1.884545868s ago: executing program 4 (id=3550):
io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x60b140, 0x0, 0x6, 0x3a2})
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r0, 0x4)
recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)

1.643753393s ago: executing program 6 (id=3556):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r0, r0, 0x0, 0x800000009)

1.172883611s ago: executing program 6 (id=3557):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01", @ANYRES32=0x0, @ANYBLOB="6b83c347383410f1b2bfee29f0d89793a02455a643f3f8558ad4e84d961177ffae3d3a9a8c303f2f67f65fbf199b3031bfb6b191461f2a21339fd60a87b0f1fe0ee838888a8339402ef097baa26bc9f195ee0a3d146e152d2c00fa0593049b", @ANYRES32=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x18)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00ffff0000000000000000000000000000000000000000000000000000000000040000000000000000000000000000feffffff00000000"]}, 0x108)

1.060827412s ago: executing program 6 (id=3559):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x3}, 0x18)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = dup2(r2, r0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

1.035833705s ago: executing program 6 (id=3560):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

1.022220956s ago: executing program 4 (id=3561):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
unshare(0xa000200)
semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0)
unshare(0x20060400)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

992.199339ms ago: executing program 6 (id=3563):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f00000003c0)={[{@grpquota}, {@delalloc}, {@bsdgroups}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@appraise}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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")
syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x315}, &(0x7f0000000340), &(0x7f0000000280))
syz_usb_connect$uac1(0x5, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x17, &(0x7f00000001c0)=@string={0x17, 0x3, "9582c228587b7ed0e5ff9d1e31d3589dc40bee754c"}}]})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

929.255695ms ago: executing program 4 (id=3564):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r2, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x2, 0x4, 0x1000000, 0x0, 0xc08}}, 0x120)
readv(r2, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/149, 0x95}], 0x1)

821.936587ms ago: executing program 4 (id=3567):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r0, r0, 0x0, 0x800000009)

705.289818ms ago: executing program 4 (id=3571):
io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x60b140, 0x0, 0x6, 0x3a2})
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r0, 0x4)
recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)

402.922319ms ago: executing program 2 (id=3573):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x3}, 0x18)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = dup2(r2, r0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

379.991621ms ago: executing program 2 (id=3574):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

340.345755ms ago: executing program 2 (id=3577):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r1, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x2, 0x4, 0x1000000, 0x0, 0xc08}}, 0x120)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/149, 0x95}], 0x1)

276.244522ms ago: executing program 2 (id=3578):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) (fail_nth: 1)

276.028822ms ago: executing program 5 (id=3579):
r0 = socket$igmp(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xe6)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={<r3=>0xffffffffffffffff})
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000240)=0x7)
write(r3, 0x0, 0x0)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000000)=0x18000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000004c0)={0xffffffffffffffff, 0x4, 0x3, 0xffffffff, @vifc_lcl_addr=@private=0xa010102, @empty}, 0x10)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000180)=0xc)

275.864062ms ago: executing program 6 (id=3580):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x68, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002120207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0x2c69}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x26}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100)
readv(r4, &(0x7f0000000300)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fcdbdf2501000000", @ANYRES32=r5, @ANYBLOB="3c00028038000100240001006d636173745f72120ccac9656a6f696e5f696e74657276616c002c21a7050000000000000500030003000000080004"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)

252.174464ms ago: executing program 2 (id=3581):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r0, r0, 0x0, 0x800000009)

251.900454ms ago: executing program 5 (id=3582):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000)

234.984076ms ago: executing program 5 (id=3583):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f0000000500)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}})

137.366676ms ago: executing program 2 (id=3584):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000030601010000080000000000010000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x94)
socket$inet6(0xa, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000001100)='ext4_mballoc_alloc\x00', 0xffffffffffffffff, 0x0, 0x80000000000a}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0))
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401)
bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0200000004000000050000000200000410"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
lsm_set_self_attr(0x67, &(0x7f0000000900)=ANY=[@ANYBLOB="650000000000000005000000000000002300"], 0x23, 0x0)

102.86467ms ago: executing program 5 (id=3585):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x68, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002120207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0x2c69}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x26}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100)
readv(r5, &(0x7f0000000300), 0x0)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf2501000000", @ANYRES32=r7, @ANYBLOB="3c00028038000100240001006d636173745f72120ccac9656a6f696e5f696e74657276616c002c21a7050000000000000500030003000000080004"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'})

26.690627ms ago: executing program 5 (id=3586):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x3}, 0x18)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = dup2(r3, r0)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0)

0s ago: executing program 5 (id=3587):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10)
r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r4)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000005a00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000020000020c000000180001801400020076657468305f746f5f626f6e6400000004000380"], 0x30}}, 0x20000000)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18)
socket$l2tp6(0xa, 0x2, 0x73)
r6 = dup(0xffffffffffffffff)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
r10 = syz_usbip_server_init(0x4)
ppoll(&(0x7f0000000140)=[{r0, 0x8080}, {r5, 0x40c}, {r8, 0x1002}, {r6, 0x3022}, {r2, 0x107}, {0xffffffffffffffff, 0x8408}, {r10, 0x4001}, {0xffffffffffffffff, 0x1080}], 0x8, &(0x7f0000000180), &(0x7f00000001c0)={[0x800]}, 0x8)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x80800)
write$P9_RXATTRWALK(r11, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x8}, 0xf)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10)
socket$inet6(0xa, 0x1, 0x0)

kernel console output (not intermixed with test programs):

netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.505331][T16133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2960'.
[  216.791168][T16156] usb usb7: usbfs: process 16156 (syz.4.2965) did not claim interface 0 before use
[  216.842563][T16161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2967'.
[  216.863801][T16161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2967'.
[  216.982567][T16144] chnl_net:caif_netlink_parms(): no params data found
[  217.005359][T16267] netlink: 'syz.4.2970': attribute type 1 has an invalid length.
[  217.055562][T16144] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.062769][T16144] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.070307][T16144] bridge_slave_0: entered allmulticast mode
[  217.077908][T16144] bridge_slave_0: entered promiscuous mode
[  217.085223][T16144] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.092021][ T3579] hid-generic 0002:0004:1000000.0016: unknown main item tag 0x0
[  217.092382][T16144] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.100205][ T3579] hid-generic 0002:0004:1000000.0016: unknown main item tag 0x0
[  217.109795][T16144] bridge_slave_1: entered allmulticast mode
[  217.115040][ T3579] hid-generic 0002:0004:1000000.0016: unknown main item tag 0x0
[  217.129197][T16144] bridge_slave_1: entered promiscuous mode
[  217.135774][ T3579] hid-generic 0002:0004:1000000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  217.168447][T16144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.184855][T16144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.197660][T16361] netlink: 'syz.4.2973': attribute type 3 has an invalid length.
[  217.205548][T16361] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2973'.
[  217.218276][T16361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2973'.
[  217.227305][T16361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2973'.
[  217.236374][T16361] netlink: 'syz.4.2973': attribute type 12 has an invalid length.
[  217.244294][T16361] netlink: 'syz.4.2973': attribute type 11 has an invalid length.
[  217.265426][T16144] team0: Port device team_slave_0 added
[  217.272759][T10274] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.285684][T16144] team0: Port device team_slave_1 added
[  217.324392][T16144] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.331499][T16144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  217.357482][T16144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.371735][T16144] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.378807][T16144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  217.404948][T16144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.406014][   T29] kauditd_printk_skb: 209 callbacks suppressed
[  217.406070][   T29] audit: type=1326 audit(217.381:31230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16362 comm="syz.2.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fd16beff749 code=0x7ffc0000
[  217.446836][   T29] audit: type=1326 audit(217.421:31231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16362 comm="syz.2.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16beff749 code=0x7ffc0000
[  217.469954][   T29] audit: type=1326 audit(217.421:31232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16362 comm="syz.2.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16beff749 code=0x7ffc0000
[  217.549229][T10274] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.565118][T16144] hsr_slave_0: entered promiscuous mode
[  217.571368][T16144] hsr_slave_1: entered promiscuous mode
[  217.577510][T16144] debugfs: 'hsr0' already exists in 'hsr'
[  217.583274][T16144] Cannot create hsr debugfs directory
[  217.595861][T10274] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.730615][T10274] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.836251][   T29] audit: type=1326 audit(217.811:31233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16497 comm="syz.6.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ebe3f749 code=0x7ffc0000
[  217.862843][T16508] loop4: detected capacity change from 0 to 512
[  217.898675][   T29] audit: type=1326 audit(217.851:31234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16497 comm="syz.6.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ebe3f749 code=0x7ffc0000
[  217.921749][   T29] audit: type=1326 audit(217.851:31235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16497 comm="syz.6.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ebe3f749 code=0x7ffc0000
[  217.944946][   T29] audit: type=1326 audit(217.851:31236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16497 comm="syz.6.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ebe3f749 code=0x7ffc0000
[  217.967938][   T29] audit: type=1326 audit(217.851:31237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16497 comm="syz.6.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f32ebe3f749 code=0x7ffc0000
[  217.990958][   T29] audit: type=1326 audit(217.851:31238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16497 comm="syz.6.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ebe3f749 code=0x7ffc0000
[  218.013983][   T29] audit: type=1326 audit(217.851:31239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16497 comm="syz.6.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ebe3f749 code=0x7ffc0000
[  218.088777][T10274] bridge_slave_1: left allmulticast mode
[  218.094531][T10274] bridge_slave_1: left promiscuous mode
[  218.100408][T10274] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.113496][T10274] bridge_slave_0: left allmulticast mode
[  218.119363][T10274] bridge_slave_0: left promiscuous mode
[  218.125273][T10274] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.166797][T16537] loop6: detected capacity change from 0 to 256
[  218.214575][T10274] dvmrp1 (unregistering): left allmulticast mode
[  218.250892][T16540] 9p: Bad value for 'rfdno'
[  218.279990][T10274] bond0 (unregistering): Released all slaves
[  218.291928][T16536] bridge0: port 3(ipvlan2) entered blocking state
[  218.298537][T16536] bridge0: port 3(ipvlan2) entered disabled state
[  218.361267][T16536] ipvlan2: entered allmulticast mode
[  218.366763][T16536] bridge0: entered allmulticast mode
[  218.373085][T16536] ipvlan2: left allmulticast mode
[  218.378298][T16536] bridge0: left allmulticast mode
[  218.384475][T16547] 9p: Bad value for 'wfdno'
[  218.424552][T16554] loop4: detected capacity change from 0 to 512
[  218.445168][T16554] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.2986: EA inode hash validation failed
[  218.457950][T10274] hsr_slave_0: left promiscuous mode
[  218.463906][T16554] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.2986: corrupted inode contents
[  218.475970][T10274] hsr_slave_1: left promiscuous mode
[  218.481621][T16554] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.2986: mark_inode_dirty error
[  218.493177][T10274] veth1_macvtap: left promiscuous mode
[  218.500872][T16554] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.2986: corrupted inode contents
[  218.502106][T10274] veth0_macvtap: left promiscuous mode
[  218.518932][T16554] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.2986: mark_inode_dirty error
[  218.519008][T10274] veth1_vlan: left promiscuous mode
[  218.536585][T10274] veth0_vlan: left promiscuous mode
[  218.536831][T16554] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.2986: mark inode dirty (error -117)
[  218.554963][T16554] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117)
[  218.564074][T16554] EXT4-fs (loop4): 1 orphan inode deleted
[  218.570470][T16554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.598924][T15526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.624090][T10274] pim6reg (unregistering): left allmulticast mode
[  218.669058][T10274] team0 (unregistering): Port device team_slave_0 removed
[  218.678931][   T12] smc: removing ib device !yz!
[  218.703364][T10274] team0 (unregistering): Port device dummy0 removed
[  218.879624][T16144] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  218.900887][T16144] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  218.923264][T16144] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  218.937746][T16604] loop4: detected capacity change from 0 to 512
[  218.965834][T16144] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  219.055645][T16611] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.106386][T16611] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.134739][T16615] bond_slave_0: entered promiscuous mode
[  219.140458][T16615] bond_slave_1: entered promiscuous mode
[  219.146509][T16615] macvtap1: entered allmulticast mode
[  219.151929][T16615] bond0: entered allmulticast mode
[  219.157158][T16615] bond_slave_0: entered allmulticast mode
[  219.162890][T16615] bond_slave_1: entered allmulticast mode
[  219.170392][T16615] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  219.182751][T16615] bond0: left allmulticast mode
[  219.187745][T16615] bond_slave_0: left allmulticast mode
[  219.193277][T16615] bond_slave_1: left allmulticast mode
[  219.198821][T16615] bond_slave_0: left promiscuous mode
[  219.204219][T16615] bond_slave_1: left promiscuous mode
[  219.227873][T16611] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.280708][T16144] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.293083][T16144] 8021q: adding VLAN 0 to HW filter on device team0
[  219.305381][ T1596] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.312580][ T1596] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.335126][ T1596] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.342231][ T1596] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.374528][T16611] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.454040][T16144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  219.532581][T16672] loop4: detected capacity change from 0 to 2048
[  219.539887][   T52] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.550392][T16144] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.562058][   T52] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.573539][   T52] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.587516][T10274] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.597390][T16672] Alternate GPT is invalid, using primary GPT.
[  219.603959][T16672]  loop4: p2 p3 p7
[  219.709114][T16144] veth0_vlan: entered promiscuous mode
[  219.719424][T16144] veth1_vlan: entered promiscuous mode
[  219.736459][T16144] veth0_macvtap: entered promiscuous mode
[  219.743798][T16144] veth1_macvtap: entered promiscuous mode
[  219.755537][T16144] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.768389][T16144] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.779495][ T1596] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.802749][ T1596] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.814826][ T1596] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.833725][ T1596] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.965768][T16732] loop6: detected capacity change from 0 to 512
[  220.299250][T16747] loop5: detected capacity change from 0 to 2048
[  220.340226][T16750] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.357293][T16747] Alternate GPT is invalid, using primary GPT.
[  220.363790][T16747]  loop5: p2 p3 p7
[  220.396939][T16759] bond_slave_0: entered promiscuous mode
[  220.402692][T16759] bond_slave_1: entered promiscuous mode
[  220.409069][T16759] macvtap1: entered allmulticast mode
[  220.414580][T16759] bond0: entered allmulticast mode
[  220.419753][T16759] bond_slave_0: entered allmulticast mode
[  220.425563][T16759] bond_slave_1: entered allmulticast mode
[  220.432443][T16759] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  220.463326][T16759] bond0: left allmulticast mode
[  220.468280][T16759] bond_slave_0: left allmulticast mode
[  220.473926][T16759] bond_slave_1: left allmulticast mode
[  220.479490][T16759] bond_slave_0: left promiscuous mode
[  220.484942][T16759] bond_slave_1: left promiscuous mode
[  220.498620][T16750] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.608846][T16802] loop5: detected capacity change from 0 to 128
[  220.630627][T16802] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  220.765992][T16831] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3029'.
[  221.008782][T16859] loop6: detected capacity change from 0 to 512
[  221.468625][T16911] loop6: detected capacity change from 0 to 128
[  222.118421][T16750] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.386275][T16940] FAULT_INJECTION: forcing a failure.
[  222.386275][T16940] name failslab, interval 1, probability 0, space 0, times 0
[  222.399151][T16940] CPU: 1 UID: 0 PID: 16940 Comm: syz.5.3055 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  222.399267][T16940] Tainted: [W]=WARN
[  222.399274][T16940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  222.399289][T16940] Call Trace:
[  222.399297][T16940]  <TASK>
[  222.399305][T16940]  __dump_stack+0x1d/0x30
[  222.399331][T16940]  dump_stack_lvl+0x95/0xd0
[  222.399412][T16940]  dump_stack+0x15/0x1b
[  222.399437][T16940]  should_fail_ex+0x265/0x280
[  222.399467][T16940]  should_failslab+0x8c/0xb0
[  222.399600][T16940]  __kmalloc_cache_noprof+0x65/0x4c0
[  222.399628][T16940]  ? resv_map_alloc+0x32/0x190
[  222.399716][T16940]  resv_map_alloc+0x32/0x190
[  222.399748][T16940]  hugetlbfs_get_inode+0x67/0x370
[  222.399778][T16940]  ? xfd_validate_state+0x45/0xf0
[  222.399887][T16940]  hugetlb_file_setup+0x192/0x3d0
[  222.399919][T16940]  ksys_mmap_pgoff+0x157/0x310
[  222.400020][T16940]  x64_sys_call+0x16bb/0x3000
[  222.400109][T16940]  do_syscall_64+0xca/0x2b0
[  222.400201][T16940]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.400298][T16940] RIP: 0033:0x7f080942f749
[  222.400318][T16940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  222.400338][T16940] RSP: 002b:00007f0807e97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  222.400417][T16940] RAX: ffffffffffffffda RBX: 00007f0809685fa0 RCX: 00007f080942f749
[  222.400434][T16940] RDX: 0000000002000002 RSI: 0000000000ff5000 RDI: 0000200000000000
[  222.400452][T16940] RBP: 00007f0807e97090 R08: ffffffffffffffff R09: 0000000000000000
[  222.400469][T16940] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000001
[  222.400486][T16940] R13: 00007f0809686038 R14: 00007f0809685fa0 R15: 00007ffc957b6318
[  222.400509][T16940]  </TASK>
[  222.613778][ T7621] hid-generic 0002:0004:1000000.0017: unknown main item tag 0x0
[  222.621602][ T7621] hid-generic 0002:0004:1000000.0017: unknown main item tag 0x0
[  222.629336][ T7621] hid-generic 0002:0004:1000000.0017: unknown main item tag 0x0
[  222.639244][ T7621] hid-generic 0002:0004:1000000.0017: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  222.704240][T13917] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  222.715455][T13917] CPU: 1 UID: 0 PID: 13917 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  222.715540][T13917] Tainted: [W]=WARN
[  222.715587][T13917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  222.715647][T13917] Call Trace:
[  222.715657][T13917]  <TASK>
[  222.715667][T13917]  __dump_stack+0x1d/0x30
[  222.715763][T13917]  dump_stack_lvl+0x95/0xd0
[  222.715791][T13917]  dump_stack+0x15/0x1b
[  222.715817][T13917]  dump_header+0x81/0x240
[  222.715840][T13917]  oom_kill_process+0x295/0x350
[  222.715862][T13917]  out_of_memory+0x97b/0xb80
[  222.715898][T13917]  try_charge_memcg+0x610/0xa10
[  222.715970][T13917]  charge_memcg+0x51/0xc0
[  222.716005][T13917]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  222.716051][T13917]  __read_swap_cache_async+0x17b/0x2d0
[  222.716150][T13917]  swap_cluster_readahead+0x362/0x3c0
[  222.716244][T13917]  swapin_readahead+0xde/0x820
[  222.716282][T13917]  ? __rcu_read_unlock+0x4f/0x70
[  222.716301][T13917]  ? __perf_event_task_sched_in+0xa5b/0xac0
[  222.716338][T13917]  ? __list_add_valid_or_report+0x38/0xe0
[  222.716375][T13917]  ? __rcu_read_unlock+0x4f/0x70
[  222.716397][T13917]  ? swap_cache_get_folio+0x277/0x280
[  222.716506][T13917]  do_swap_page+0x2b4/0x21e0
[  222.716538][T13917]  ? _raw_spin_unlock+0x26/0x50
[  222.716563][T13917]  ? __schedule+0x85f/0xcd0
[  222.716591][T13917]  ? __pfx_default_wake_function+0x10/0x10
[  222.716688][T13917]  handle_mm_fault+0x9d8/0x2c60
[  222.716784][T13917]  do_user_addr_fault+0x630/0x1080
[  222.716904][T13917]  exc_page_fault+0x62/0xa0
[  222.716942][T13917]  asm_exc_page_fault+0x26/0x30
[  222.716999][T13917] RIP: 0033:0x7f32ebe71fc5
[  222.717015][T13917] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[  222.717034][T13917] RSP: 002b:00007fff364b4088 EFLAGS: 00010246
[  222.717053][T13917] RAX: 0000000000000000 RBX: 00000000000000cb RCX: 00007f32ebe71fc3
[  222.717071][T13917] RDX: 00007fff364b40a0 RSI: 0000000000000000 RDI: 0000000000000000
[  222.717088][T13917] RBP: 00007fff364b410c R08: 00000000275e95ed R09: 0000000000000000
[  222.717169][T13917] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  222.717199][T13917] R13: 00000000000927c0 R14: 000000000003643f R15: 00007fff364b4160
[  222.717222][T13917]  </TASK>
[  222.717254][T13917] memory: usage 307200kB, limit 307200kB, failcnt 2055
[  222.954296][T13917] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0
[  222.962258][T13917] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[  222.969671][T13917] Memory cgroup stats for /syz6:
[  222.970361][T13917] cache 0
[  222.978335][T13917] rss 0
[  222.981168][T13917] shmem 0
[  222.984181][T13917] mapped_file 0
[  222.987726][T13917] dirty 0
[  222.990680][T13917] writeback 0
[  222.994026][T13917] workingset_refault_anon 121
[  222.998725][T13917] workingset_refault_file 0
[  223.003255][T13917] swap 208896
[  223.006591][T13917] swapcached 4096
[  223.010249][T13917] pgpgin 26835
[  223.013648][T13917] pgpgout 26834
[  223.017333][T13917] pgfault 32228
[  223.020927][T13917] pgmajfault 95
[  223.024426][T13917] inactive_anon 0
[  223.028184][T13917] active_anon 4096
[  223.031926][T13917] inactive_file 0
[  223.035685][T13917] active_file 0
[  223.039172][T13917] unevictable 0
[  223.042647][T13917] hierarchical_memory_limit 314572800
[  223.048068][T13917] hierarchical_memsw_limit 9223372036854771712
[  223.052572][T16962] bridge0: port 3(ipvlan2) entered blocking state
[  223.054266][T13917] total_cache 0
[  223.054277][T13917] total_rss 0
[  223.054286][T13917] total_shmem 0
[  223.054295][T13917] total_mapped_file 0
[  223.054305][T13917] total_dirty 0
[  223.060835][T16962] bridge0: port 3(ipvlan2) entered disabled state
[  223.064228][T13917] total_writeback 0
[  223.088824][T13917] total_workingset_refault_anon 121
[  223.091399][T16962] ipvlan2: entered allmulticast mode
[  223.094092][T13917] total_workingset_refault_file 0
[  223.099423][T16962] bridge0: entered allmulticast mode
[  223.104455][T13917] total_swap 208896
[  223.104467][T13917] total_swapcached 4096
[  223.115092][T16965] set_capacity_and_notify: 1 callbacks suppressed
[  223.115169][T16965] loop4: detected capacity change from 0 to 256
[  223.117788][T13917] total_pgpgin 26835
[  223.134337][T13917] total_pgpgout 26834
[  223.138344][T13917] total_pgfault 32228
[  223.142426][T13917] total_pgmajfault 95
[  223.145007][T16962] ipvlan2: left allmulticast mode
[  223.146526][T13917] total_inactive_anon 0
[  223.151532][T16962] bridge0: left allmulticast mode
[  223.161180][T13917] total_active_anon 4096
[  223.165644][T13917] total_inactive_file 0
[  223.169819][T13917] total_active_file 0
[  223.173852][T13917] total_unevictable 0
[  223.178031][T13917] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3054,pid=16933,uid=0
[  223.192773][T13917] Memory cgroup out of memory: Killed process 16933 (syz.6.3054) total-vm:94100kB, anon-rss:1132kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000
[  223.255181][T16938] syz.6.3054 (16938) used greatest stack depth: 8904 bytes left
[  223.287691][T16934] syz.6.3054 (16934) used greatest stack depth: 6824 bytes left
[  223.452268][T16976] usb usb7: usbfs: process 16976 (syz.5.3063) did not claim interface 0 before use
[  223.473447][T16979] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3065'.
[  223.541830][T16985] IPv6: Can't replace route, no match found
[  224.034130][T16997] chnl_net:caif_netlink_parms(): no params data found
[  224.082149][T16997] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.089325][T16997] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.096869][T16997] bridge_slave_0: entered allmulticast mode
[  224.103500][T16997] bridge_slave_0: entered promiscuous mode
[  224.110438][T16997] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.117685][T16997] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.125176][T16997] bridge_slave_1: entered allmulticast mode
[  224.131901][T16997] bridge_slave_1: entered promiscuous mode
[  224.187119][T16997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.198784][T16997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  224.233185][T16997] team0: Port device team_slave_0 added
[  224.243662][T16997] team0: Port device team_slave_1 added
[  224.290187][T16997] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.297241][T16997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  224.323340][T16997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.337026][T16997] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.344057][T16997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  224.370182][T16997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.401363][T16997] hsr_slave_0: entered promiscuous mode
[  224.407825][T16997] hsr_slave_1: entered promiscuous mode
[  224.414114][T16997] debugfs: 'hsr0' already exists in 'hsr'
[  224.419887][T16997] Cannot create hsr debugfs directory
[  224.491336][T16997] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.535178][T16997] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.575951][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3078'.
[  224.592095][T17341] netlink: 320 bytes leftover after parsing attributes in process `syz.5.3078'.
[  224.630014][   T29] kauditd_printk_skb: 396 callbacks suppressed
[  224.630039][   T29] audit: type=1400 audit(224.601:31636): avc:  denied  { ioctl } for  pid=17335 comm="syz.5.3078" path="socket:[40633]" dev="sockfs" ino=40633 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  224.661612][T17336] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3078'.
[  224.678090][T16997] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.694524][T17336] team0: Port device team_slave_1 removed
[  224.710700][T17345] loop6: detected capacity change from 0 to 1024
[  224.718180][T17345] EXT4-fs: Ignoring removed oldalloc option
[  224.728368][T16750] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.751047][T16997] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.772574][T17345] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.786780][T17345] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 16: comm syz.6.3081: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1
[  224.824991][T13917] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.863775][T17365] loop4: detected capacity change from 0 to 512
[  224.874893][  T165] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.901125][  T165] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.923527][  T165] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.941591][T16997] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  224.958510][  T165] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.967200][T16997] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  224.982219][T16997] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  224.993529][T16997] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  225.011399][T16997] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.018662][T16997] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.026031][T16997] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.033096][T16997] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.069861][T16997] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.077940][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.086253][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.105739][T16997] 8021q: adding VLAN 0 to HW filter on device team0
[  225.116006][  T165] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.123263][  T165] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.143766][T16997] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  225.154367][T16997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  225.173018][  T165] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.180211][  T165] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.225368][ T7621] hid-generic 0002:0004:1000000.0018: unknown main item tag 0x0
[  225.233196][ T7621] hid-generic 0002:0004:1000000.0018: unknown main item tag 0x0
[  225.241204][ T7621] hid-generic 0002:0004:1000000.0018: unknown main item tag 0x0
[  225.251802][ T7621] hid-generic 0002:0004:1000000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  225.281693][T16997] 8021q: adding VLAN 0 to HW filter on device batadv0
[  225.365081][T16997] veth0_vlan: entered promiscuous mode
[  225.373659][T16997] veth1_vlan: entered promiscuous mode
[  225.388357][T16997] veth0_macvtap: entered promiscuous mode
[  225.397138][T16997] veth1_macvtap: entered promiscuous mode
[  225.409274][T16997] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.418713][T16997] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.440363][   T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.477284][   T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.498563][   T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.511067][   T29] audit: type=1326 audit(225.491:31637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17426 comm="syz.6.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ebe3f749 code=0x7ffc0000
[  225.541445][   T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.556723][   T29] audit: type=1326 audit(225.491:31638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17426 comm="syz.6.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ebe3f749 code=0x7ffc0000
[  225.639773][T17441] bridge0: port 3(ipvlan2) entered blocking state
[  225.646394][T17441] bridge0: port 3(ipvlan2) entered disabled state
[  225.653274][T17441] ipvlan2: entered allmulticast mode
[  225.658874][T17441] bridge0: entered allmulticast mode
[  225.664905][T17441] ipvlan2: left allmulticast mode
[  225.669972][T17441] bridge0: left allmulticast mode
[  225.742570][T17451] usb usb7: usbfs: process 17451 (syz.5.3093) did not claim interface 0 before use
[  226.090068][   T29] audit: type=1326 audit(226.061:31639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.0.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1375f749 code=0x7ffc0000
[  226.138243][   T29] audit: type=1326 audit(226.091:31640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.0.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fde1375f749 code=0x7ffc0000
[  226.161412][   T29] audit: type=1326 audit(226.091:31641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.0.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1375f749 code=0x7ffc0000
[  226.184446][   T29] audit: type=1326 audit(226.091:31642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.0.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde1375f749 code=0x7ffc0000
[  226.207448][   T29] audit: type=1326 audit(226.091:31643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.0.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1375f749 code=0x7ffc0000
[  226.230467][   T29] audit: type=1326 audit(226.091:31644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.0.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde1375f749 code=0x7ffc0000
[  226.253526][   T29] audit: type=1326 audit(226.091:31645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.0.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1375f749 code=0x7ffc0000
[  226.377690][ T1037] hid-generic 0002:0004:1000000.0019: unknown main item tag 0x0
[  226.385501][ T1037] hid-generic 0002:0004:1000000.0019: unknown main item tag 0x0
[  226.393170][ T1037] hid-generic 0002:0004:1000000.0019: unknown main item tag 0x0
[  226.401394][ T1037] hid-generic 0002:0004:1000000.0019: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  226.451011][T17468] loop0: detected capacity change from 0 to 2048
[  226.528689][T17490] loop5: detected capacity change from 0 to 512
[  226.536357][T17490] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal
[  226.564662][T17468] Alternate GPT is invalid, using primary GPT.
[  226.571059][T17468]  loop0: p2 p3 p7
[  226.627297][T17520] FAULT_INJECTION: forcing a failure.
[  226.627297][T17520] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  226.640493][T17520] CPU: 0 UID: 0 PID: 17520 Comm: syz.2.3107 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  226.640526][T17520] Tainted: [W]=WARN
[  226.640532][T17520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  226.640545][T17520] Call Trace:
[  226.640552][T17520]  <TASK>
[  226.640562][T17520]  __dump_stack+0x1d/0x30
[  226.640665][T17520]  dump_stack_lvl+0x95/0xd0
[  226.640740][T17520]  dump_stack+0x15/0x1b
[  226.640760][T17520]  should_fail_ex+0x265/0x280
[  226.640783][T17520]  should_fail+0xb/0x20
[  226.640802][T17520]  should_fail_usercopy+0x1a/0x20
[  226.640942][T17520]  _copy_from_user+0x1c/0xb0
[  226.640982][T17520]  copy_from_sockptr_offset+0x66/0xa0
[  226.641007][T17520]  do_ipt_set_ctl+0x5c8/0x820
[  226.641027][T17520]  ? _raw_spin_unlock_bh+0x36/0x40
[  226.641108][T17520]  ? tcp_release_cb+0xf1/0x370
[  226.641146][T17520]  nf_setsockopt+0x199/0x1b0
[  226.641170][T17520]  ip_setsockopt+0x102/0x110
[  226.641275][T17520]  tcp_setsockopt+0x98/0xb0
[  226.641309][T17520]  sock_common_setsockopt+0x69/0x80
[  226.641329][T17520]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  226.641422][T17520]  __sys_setsockopt+0x184/0x200
[  226.641451][T17520]  __x64_sys_setsockopt+0x64/0x80
[  226.641498][T17520]  x64_sys_call+0x21d5/0x3000
[  226.641541][T17520]  do_syscall_64+0xca/0x2b0
[  226.641624][T17520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.641646][T17520] RIP: 0033:0x7f80741af749
[  226.641661][T17520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  226.641680][T17520] RSP: 002b:00007f8072c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  226.641777][T17520] RAX: ffffffffffffffda RBX: 00007f8074405fa0 RCX: 00007f80741af749
[  226.641790][T17520] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004
[  226.641889][T17520] RBP: 00007f8072c17090 R08: 0000000000000480 R09: 0000000000000000
[  226.641902][T17520] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001
[  226.641914][T17520] R13: 00007f8074406038 R14: 00007f8074405fa0 R15: 00007ffd8ffb78f8
[  226.641933][T17520]  </TASK>
[  226.643381][T17481] loop4: detected capacity change from 0 to 1024
[  226.783792][T17526] bridge0: port 3(ipvlan2) entered blocking state
[  226.805025][T17481] EXT4-fs: Ignoring removed orlov option
[  226.809961][T17526] bridge0: port 3(ipvlan2) entered disabled state
[  226.861573][T17519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3105'.
[  226.874670][T17526] ipvlan2: entered allmulticast mode
[  226.892566][T17526] bridge0: entered allmulticast mode
[  226.912634][T17526] ipvlan2: left allmulticast mode
[  226.917976][T17526] bridge0: left allmulticast mode
[  226.935273][T17481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.973142][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3111'.
[  227.118471][T17557] FAULT_INJECTION: forcing a failure.
[  227.118471][T17557] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  227.131877][T17557] CPU: 0 UID: 0 PID: 17557 Comm: syz.2.3117 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  227.131918][T17557] Tainted: [W]=WARN
[  227.131927][T17557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  227.131944][T17557] Call Trace:
[  227.131952][T17557]  <TASK>
[  227.131961][T17557]  __dump_stack+0x1d/0x30
[  227.132006][T17557]  dump_stack_lvl+0x95/0xd0
[  227.132038][T17557]  dump_stack+0x15/0x1b
[  227.132063][T17557]  should_fail_ex+0x265/0x280
[  227.132114][T17557]  should_fail+0xb/0x20
[  227.132149][T17557]  should_fail_usercopy+0x1a/0x20
[  227.132179][T17557]  _copy_to_user+0x20/0xa0
[  227.132213][T17557]  simple_read_from_buffer+0xb5/0x130
[  227.132279][T17557]  proc_fail_nth_read+0x10e/0x150
[  227.132315][T17557]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  227.132372][T17557]  vfs_read+0x1a8/0x770
[  227.132388][T17557]  ? __rcu_read_unlock+0x4f/0x70
[  227.132429][T17557]  ? __fget_files+0x184/0x1c0
[  227.132509][T17557]  ? mutex_lock+0x58/0x90
[  227.132563][T17557]  ksys_read+0xda/0x1a0
[  227.132600][T17557]  __x64_sys_read+0x40/0x50
[  227.132617][T17557]  x64_sys_call+0x2889/0x3000
[  227.132649][T17557]  do_syscall_64+0xca/0x2b0
[  227.132690][T17557]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.132718][T17557] RIP: 0033:0x7f80741ae15c
[  227.132734][T17557] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  227.132773][T17557] RSP: 002b:00007f8072c17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  227.132837][T17557] RAX: ffffffffffffffda RBX: 00007f8074405fa0 RCX: 00007f80741ae15c
[  227.132853][T17557] RDX: 000000000000000f RSI: 00007f8072c170a0 RDI: 0000000000000005
[  227.132868][T17557] RBP: 00007f8072c17090 R08: 0000000000000000 R09: 0000000000000000
[  227.132879][T17557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  227.132890][T17557] R13: 00007f8074406038 R14: 00007f8074405fa0 R15: 00007ffd8ffb78f8
[  227.132926][T17557]  </TASK>
[  227.361998][T15526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.388927][T17555] loop5: detected capacity change from 0 to 1024
[  227.396878][T17555] ext4: Bad value for 'stripe'
[  227.414844][T17569] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3122'.
[  227.492700][T17579] loop0: detected capacity change from 0 to 512
[  227.502518][T17579] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.3123: EA inode hash validation failed
[  227.515323][T17579] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.3123: corrupted inode contents
[  227.528184][T17579] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.3123: mark_inode_dirty error
[  227.540362][T17579] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.3123: corrupted inode contents
[  227.553011][T17579] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.3123: mark_inode_dirty error
[  227.565914][T17579] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.3123: mark inode dirty (error -117)
[  227.578946][T17579] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117)
[  227.592844][T17597] FAULT_INJECTION: forcing a failure.
[  227.592844][T17597] name failslab, interval 1, probability 0, space 0, times 0
[  227.597366][T17579] EXT4-fs (loop0): 1 orphan inode deleted
[  227.605704][T17597] CPU: 1 UID: 0 PID: 17597 Comm: syz.6.3130 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  227.605829][T17597] Tainted: [W]=WARN
[  227.605854][T17597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  227.605892][T17597] Call Trace:
[  227.605911][T17597]  <TASK>
[  227.605931][T17597]  __dump_stack+0x1d/0x30
[  227.606007][T17597]  dump_stack_lvl+0x95/0xd0
[  227.606139][T17597]  dump_stack+0x15/0x1b
[  227.606279][T17597]  should_fail_ex+0x265/0x280
[  227.606351][T17597]  should_failslab+0x8c/0xb0
[  227.606593][T17597]  __kmalloc_cache_noprof+0x65/0x4c0
[  227.606665][T17597]  ? rtnl_newlink+0x5c/0x1360
[  227.606715][T17597]  ? __pfx_rtnl_newlink+0x10/0x10
[  227.606766][T17597]  rtnl_newlink+0x5c/0x1360
[  227.606834][T17597]  ? xas_load+0x413/0x430
[  227.606986][T17597]  ? xas_load+0x413/0x430
[  227.607059][T17597]  ? __memcg_slab_free_hook+0x135/0x230
[  227.607200][T17597]  ? __rcu_read_unlock+0x4f/0x70
[  227.607335][T17597]  ? avc_has_perm_noaudit+0xab/0x130
[  227.607428][T17597]  ? cred_has_capability+0x210/0x280
[  227.607524][T17597]  ? selinux_capable+0x31/0x40
[  227.607579][T17597]  ? security_capable+0x83/0x90
[  227.607744][T17597]  ? ns_capable+0x7d/0xb0
[  227.607863][T17597]  ? __pfx_rtnl_newlink+0x10/0x10
[  227.607915][T17597]  rtnetlink_rcv_msg+0x5fe/0x6d0
[  227.607982][T17597]  netlink_rcv_skb+0x123/0x220
[  227.608067][T17597]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  227.608141][T17597]  rtnetlink_rcv+0x1c/0x30
[  227.608249][T17597]  netlink_unicast+0x5c0/0x690
[  227.608335][T17597]  netlink_sendmsg+0x58b/0x6b0
[  227.608423][T17597]  ? __pfx_netlink_sendmsg+0x10/0x10
[  227.608555][T17597]  __sock_sendmsg+0x145/0x180
[  227.608701][T17597]  ____sys_sendmsg+0x31e/0x4a0
[  227.608805][T17597]  ___sys_sendmsg+0x17b/0x1d0
[  227.609021][T17597]  __x64_sys_sendmsg+0xd4/0x160
[  227.609217][T17597]  x64_sys_call+0x17ba/0x3000
[  227.609306][T17597]  do_syscall_64+0xca/0x2b0
[  227.609402][T17597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.609533][T17597] RIP: 0033:0x7f32ebe3f749
[  227.609573][T17597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  227.609622][T17597] RSP: 002b:00007f32ea8a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  227.609678][T17597] RAX: ffffffffffffffda RBX: 00007f32ec095fa0 RCX: 00007f32ebe3f749
[  227.609716][T17597] RDX: 0000000000000880 RSI: 00002000000002c0 RDI: 0000000000000003
[  227.609829][T17597] RBP: 00007f32ea8a7090 R08: 0000000000000000 R09: 0000000000000000
[  227.609866][T17597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  227.609910][T17597] R13: 00007f32ec096038 R14: 00007f32ec095fa0 R15: 00007fff364b3d48
[  227.609981][T17597]  </TASK>
[  227.639196][T17596] FAULT_INJECTION: forcing a failure.
[  227.639196][T17596] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  227.644441][T17579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.647968][T17596] CPU: 1 UID: 0 PID: 17596 Comm: syz.2.3129 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  227.648067][T17596] Tainted: [W]=WARN
[  227.648087][T17596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  227.648125][T17596] Call Trace:
[  227.648143][T17596]  <TASK>
[  227.648220][T17596]  __dump_stack+0x1d/0x30
[  227.648296][T17596]  dump_stack_lvl+0x95/0xd0
[  227.648355][T17596]  dump_stack+0x15/0x1b
[  227.648436][T17596]  should_fail_ex+0x265/0x280
[  227.648497][T17596]  should_fail+0xb/0x20
[  227.648554][T17596]  should_fail_usercopy+0x1a/0x20
[  227.648620][T17596]  _copy_from_user+0x1c/0xb0
[  227.648722][T17596]  proc_do_submiturb+0x866/0x1d20
[  227.648822][T17596]  ? proc_do_submiturb+0x131/0x1d20
[  227.648972][T17596]  ? should_fail_ex+0xdb/0x280
[  227.649034][T17596]  proc_submiturb_compat+0xdc/0x100
[  227.649195][T17596]  usbdev_ioctl+0x1072/0x1700
[  227.649274][T17596]  ? __pfx_usbdev_ioctl+0x10/0x10
[  227.649355][T17596]  __se_sys_ioctl+0xce/0x140
[  227.649521][T17596]  __x64_sys_ioctl+0x43/0x50
[  227.649653][T17596]  x64_sys_call+0x14b0/0x3000
[  227.649855][T17596]  do_syscall_64+0xca/0x2b0
[  227.649997][T17596]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.650061][T17596] RIP: 0033:0x7f80741af749
[  227.650102][T17596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  227.650188][T17596] RSP: 002b:00007f8072c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  227.650312][T17596] RAX: ffffffffffffffda RBX: 00007f8074405fa0 RCX: 00007f80741af749
[  227.650353][T17596] RDX: 0000200000000000 RSI: 00000000802c550a RDI: 0000000000000005
[  227.650387][T17596] RBP: 00007f8072c17090 R08: 0000000000000000 R09: 0000000000000000
[  227.650428][T17596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  227.650454][T17596] R13: 00007f8074406038 R14: 00007f8074405fa0 R15: 00007ffd8ffb78f8
[  227.650477][T17596]  </TASK>
[  228.105929][T17610] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3135'.
[  228.131702][T16144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.155414][T17607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=17607 comm=syz.2.3134
[  228.220530][T17626] loop5: detected capacity change from 0 to 1024
[  228.244070][T17626] EXT4-fs: Ignoring removed nomblk_io_submit option
[  228.256063][T17626] ext4: Unknown parameter 'fsmagic'
[  228.374707][T17643] loop6: detected capacity change from 0 to 512
[  228.386726][T17643] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.3146: EA inode hash validation failed
[  228.408653][T17643] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.3146: corrupted inode contents
[  228.422060][T17647] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3147'.
[  228.431800][T17643] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #15: comm syz.6.3146: mark_inode_dirty error
[  228.453419][T17643] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.3146: corrupted inode contents
[  228.477572][T17643] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3000: inode #15: comm syz.6.3146: mark_inode_dirty error
[  228.493011][T17643] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3003: inode #15: comm syz.6.3146: mark inode dirty (error -117)
[  228.506098][T17643] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117)
[  228.515381][T17643] EXT4-fs (loop6): 1 orphan inode deleted
[  228.521719][T17643] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.565140][T13917] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.631301][T17660] can0: slcan on ttyS3.
[  228.704005][T17660] can0 (unregistered): slcan off ttyS3.
[  228.732441][T17669] FAULT_INJECTION: forcing a failure.
[  228.732441][T17669] name failslab, interval 1, probability 0, space 0, times 0
[  228.745265][T17669] CPU: 0 UID: 0 PID: 17669 Comm: syz.6.3152 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  228.745304][T17669] Tainted: [W]=WARN
[  228.745312][T17669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  228.745390][T17669] Call Trace:
[  228.745398][T17669]  <TASK>
[  228.745407][T17669]  __dump_stack+0x1d/0x30
[  228.745434][T17669]  dump_stack_lvl+0x95/0xd0
[  228.745463][T17669]  dump_stack+0x15/0x1b
[  228.745484][T17669]  should_fail_ex+0x265/0x280
[  228.745536][T17669]  should_failslab+0x8c/0xb0
[  228.745559][T17669]  __kvmalloc_node_noprof+0x149/0x6b0
[  228.745587][T17669]  ? alloc_netdev_mqs+0xa5/0xa40
[  228.745627][T17669]  ? vsnprintf+0x7ee/0x860
[  228.745690][T17669]  ? __pfx_macvlan_setup+0x10/0x10
[  228.745722][T17669]  alloc_netdev_mqs+0xa5/0xa40
[  228.745756][T17669]  rtnl_create_link+0x239/0x6e0
[  228.745788][T17669]  rtnl_newlink_create+0x14c/0x620
[  228.745884][T17669]  ? security_capable+0x83/0x90
[  228.745918][T17669]  ? netlink_ns_capable+0x86/0xa0
[  228.745947][T17669]  rtnl_newlink+0xf5b/0x1360
[  228.746005][T17669]  ? refill_stock+0x32f/0x390
[  228.746037][T17669]  ? css_rstat_updated+0xbb/0x280
[  228.746139][T17669]  ? page_counter_cancel+0xb3/0x1b0
[  228.746243][T17669]  ? __memcg_slab_free_hook+0x135/0x230
[  228.746355][T17669]  ? __rcu_read_unlock+0x4f/0x70
[  228.746375][T17669]  ? avc_has_perm_noaudit+0xab/0x130
[  228.746467][T17669]  ? cred_has_capability+0x210/0x280
[  228.746528][T17669]  ? selinux_capable+0x31/0x40
[  228.746568][T17669]  ? security_capable+0x83/0x90
[  228.746671][T17669]  ? ns_capable+0x7d/0xb0
[  228.746699][T17669]  ? __pfx_rtnl_newlink+0x10/0x10
[  228.746779][T17669]  rtnetlink_rcv_msg+0x5fe/0x6d0
[  228.746855][T17669]  netlink_rcv_skb+0x123/0x220
[  228.746897][T17669]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  228.746923][T17669]  rtnetlink_rcv+0x1c/0x30
[  228.746995][T17669]  netlink_unicast+0x5c0/0x690
[  228.747035][T17669]  netlink_sendmsg+0x58b/0x6b0
[  228.747187][T17669]  ? __pfx_netlink_sendmsg+0x10/0x10
[  228.747288][T17669]  __sock_sendmsg+0x145/0x180
[  228.747402][T17669]  ____sys_sendmsg+0x345/0x4a0
[  228.747437][T17669]  ___sys_sendmsg+0x17b/0x1d0
[  228.747465][T17669]  ? should_fail_ex+0x30/0x280
[  228.747505][T17669]  __sys_sendmmsg+0x178/0x300
[  228.747566][T17669]  __x64_sys_sendmmsg+0x57/0x70
[  228.747611][T17669]  x64_sys_call+0x1e28/0x3000
[  228.747650][T17669]  do_syscall_64+0xca/0x2b0
[  228.747692][T17669]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.747719][T17669] RIP: 0033:0x7f32ebe3f749
[  228.747786][T17669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  228.747887][T17669] RSP: 002b:00007f32ea8a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  228.747911][T17669] RAX: ffffffffffffffda RBX: 00007f32ec095fa0 RCX: 00007f32ebe3f749
[  228.747939][T17669] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000d
[  228.747956][T17669] RBP: 00007f32ea8a7090 R08: 0000000000000000 R09: 0000000000000000
[  228.747971][T17669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  228.747987][T17669] R13: 00007f32ec096038 R14: 00007f32ec095fa0 R15: 00007fff364b3d48
[  228.748011][T17669]  </TASK>
[  229.239545][T17712] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.256766][T17714] bridge0: port 3(ipvlan2) entered blocking state
[  229.263318][T17714] bridge0: port 3(ipvlan2) entered disabled state
[  229.270387][T17714] ipvlan2: entered allmulticast mode
[  229.275765][T17714] bridge0: entered allmulticast mode
[  229.281596][T17714] ipvlan2: left allmulticast mode
[  229.286738][T17714] bridge0: left allmulticast mode
[  229.306570][T17724] loop4: detected capacity change from 0 to 256
[  229.316780][T17712] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.359380][T17719] bond_slave_0: entered promiscuous mode
[  229.365222][T17719] bond_slave_1: entered promiscuous mode
[  229.384027][T17719] macvtap1: entered allmulticast mode
[  229.389589][T17719] bond0: entered allmulticast mode
[  229.394830][T17719] bond_slave_0: entered allmulticast mode
[  229.400594][T17719] bond_slave_1: entered allmulticast mode
[  229.417651][T17719] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  229.427150][T17719] bond0: left allmulticast mode
[  229.432132][T17719] bond_slave_0: left allmulticast mode
[  229.437779][T17719] bond_slave_1: left allmulticast mode
[  229.443370][T17719] bond_slave_0: left promiscuous mode
[  229.448879][T17719] bond_slave_1: left promiscuous mode
[  229.463500][T17712] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.483209][T17734] pimreg: entered allmulticast mode
[  229.501611][T17730] pimreg: left allmulticast mode
[  229.512594][T17746] FAULT_INJECTION: forcing a failure.
[  229.512594][T17746] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  229.525807][T17746] CPU: 1 UID: 0 PID: 17746 Comm: syz.4.3165 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  229.525842][T17746] Tainted: [W]=WARN
[  229.525850][T17746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  229.525863][T17746] Call Trace:
[  229.525869][T17746]  <TASK>
[  229.525877][T17746]  __dump_stack+0x1d/0x30
[  229.525938][T17746]  dump_stack_lvl+0x95/0xd0
[  229.525960][T17746]  dump_stack+0x15/0x1b
[  229.525980][T17746]  should_fail_ex+0x265/0x280
[  229.526035][T17746]  should_fail+0xb/0x20
[  229.526054][T17746]  should_fail_usercopy+0x1a/0x20
[  229.526077][T17746]  _copy_from_iter+0xcf/0xe70
[  229.526102][T17746]  ? __alloc_skb+0x396/0x4b0
[  229.526203][T17746]  ? __alloc_skb+0x228/0x4b0
[  229.526228][T17746]  netlink_sendmsg+0x471/0x6b0
[  229.526337][T17746]  ? __pfx_netlink_sendmsg+0x10/0x10
[  229.526379][T17746]  __sock_sendmsg+0x145/0x180
[  229.526400][T17746]  ____sys_sendmsg+0x31e/0x4a0
[  229.526505][T17746]  ___sys_sendmsg+0x17b/0x1d0
[  229.526544][T17746]  __x64_sys_sendmsg+0xd4/0x160
[  229.526620][T17746]  x64_sys_call+0x17ba/0x3000
[  229.526644][T17746]  do_syscall_64+0xca/0x2b0
[  229.526678][T17746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.526699][T17746] RIP: 0033:0x7f425da3f749
[  229.526715][T17746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  229.526769][T17746] RSP: 002b:00007f425c49f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  229.526789][T17746] RAX: ffffffffffffffda RBX: 00007f425dc95fa0 RCX: 00007f425da3f749
[  229.526801][T17746] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004
[  229.526814][T17746] RBP: 00007f425c49f090 R08: 0000000000000000 R09: 0000000000000000
[  229.526827][T17746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  229.526839][T17746] R13: 00007f425dc96038 R14: 00007f425dc95fa0 R15: 00007ffca02a8178
[  229.526905][T17746]  </TASK>
[  229.727816][   T29] kauditd_printk_skb: 341 callbacks suppressed
[  229.727835][   T29] audit: type=1326 audit(229.711:31987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17727 comm="syz.5.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080942f749 code=0x7ffc0000
[  229.758821][   T29] audit: type=1326 audit(229.711:31988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17727 comm="syz.5.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f080942f749 code=0x7ffc0000
[  229.782481][   T29] audit: type=1326 audit(229.711:31989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17727 comm="syz.5.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080942f749 code=0x7ffc0000
[  229.785101][T17734] loop5: detected capacity change from 0 to 764
[  229.805735][   T29] audit: type=1326 audit(229.711:31990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17727 comm="syz.5.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080942f749 code=0x7ffc0000
[  229.835462][   T29] audit: type=1326 audit(229.711:31991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17727 comm="syz.5.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080942f749 code=0x7ffc0000
[  229.858465][   T29] audit: type=1326 audit(229.711:31992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17727 comm="syz.5.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080942f749 code=0x7ffc0000
[  229.881495][   T29] audit: type=1326 audit(229.711:31993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17727 comm="syz.5.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f080942f749 code=0x7ffc0000
[  229.881582][T17734] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  229.912965][   T29] audit: type=1326 audit(229.711:31994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17727 comm="syz.5.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080942f749 code=0x7ffc0000
[  229.935957][   T29] audit: type=1326 audit(229.711:31995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17727 comm="syz.5.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080942f749 code=0x7ffc0000
[  229.959041][   T29] audit: type=1326 audit(229.711:31996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17727 comm="syz.5.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080942f749 code=0x7ffc0000
[  229.989072][T17712] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.041935][T17757] 8021q: adding VLAN 0 to HW filter on device bond1
[  230.123076][T10274] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.135376][T10274] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.147872][   T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.169356][T10274] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.332230][T17844] loop6: detected capacity change from 0 to 2048
[  230.344098][T17838] loop0: detected capacity change from 0 to 1024
[  230.352386][T17838] EXT4-fs: inline encryption not supported
[  230.358300][T17838] EXT4-fs: Ignoring removed orlov option
[  230.364830][T17838] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  230.397747][T17838] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  230.408923][T17844] Alternate GPT is invalid, using primary GPT.
[  230.415304][T17844]  loop6: p2 p3 p7
[  230.421503][T17838] System zones: 0-1, 3-12
[  230.431827][T17860] FAULT_INJECTION: forcing a failure.
[  230.431827][T17860] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  230.431852][T17838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.445424][T17860] CPU: 1 UID: 0 PID: 17860 Comm: syz.5.3183 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  230.445547][T17860] Tainted: [W]=WARN
[  230.445569][T17860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  230.445687][T17860] Call Trace:
[  230.445707][T17860]  <TASK>
[  230.445730][T17860]  __dump_stack+0x1d/0x30
[  230.445809][T17860]  dump_stack_lvl+0x95/0xd0
[  230.445877][T17860]  dump_stack+0x15/0x1b
[  230.445947][T17860]  should_fail_ex+0x265/0x280
[  230.446038][T17860]  should_fail+0xb/0x20
[  230.446099][T17860]  should_fail_usercopy+0x1a/0x20
[  230.446183][T17860]  _copy_to_user+0x20/0xa0
[  230.446268][T17860]  simple_read_from_buffer+0xb5/0x130
[  230.446367][T17860]  proc_fail_nth_read+0x10e/0x150
[  230.446474][T17860]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  230.446580][T17860]  vfs_read+0x1a8/0x770
[  230.446632][T17860]  ? __rcu_read_unlock+0x4f/0x70
[  230.446693][T17860]  ? __fget_files+0x184/0x1c0
[  230.446757][T17860]  ? mutex_lock+0x58/0x90
[  230.446831][T17860]  ksys_read+0xda/0x1a0
[  230.446951][T17860]  __x64_sys_read+0x40/0x50
[  230.447006][T17860]  x64_sys_call+0x2889/0x3000
[  230.447074][T17860]  do_syscall_64+0xca/0x2b0
[  230.447170][T17860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.447288][T17860] RIP: 0033:0x7f080942e15c
[  230.447334][T17860] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  230.447396][T17860] RSP: 002b:00007f0807e97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  230.447451][T17860] RAX: ffffffffffffffda RBX: 00007f0809685fa0 RCX: 00007f080942e15c
[  230.447504][T17860] RDX: 000000000000000f RSI: 00007f0807e970a0 RDI: 0000000000000004
[  230.447549][T17860] RBP: 00007f0807e97090 R08: 0000000000000000 R09: 0000000000000000
[  230.447620][T17860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  230.447660][T17860] R13: 00007f0809686038 R14: 00007f0809685fa0 R15: 00007ffc957b6318
[  230.447721][T17860]  </TASK>
[  230.554234][T17863] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  230.655724][T17866] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  230.709775][T17885] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.816305][T17885] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.833111][T17894] bond_slave_0: entered promiscuous mode
[  230.838846][T17894] bond_slave_1: entered promiscuous mode
[  230.849063][T17894] macvtap1: entered allmulticast mode
[  230.854562][T17894] bond0: entered allmulticast mode
[  230.859816][T17894] bond_slave_0: entered allmulticast mode
[  230.865657][T17894] bond_slave_1: entered allmulticast mode
[  230.872678][T17894] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  230.892343][T17894] bond0: left allmulticast mode
[  230.897281][T17894] bond_slave_0: left allmulticast mode
[  230.902839][T17894] bond_slave_1: left allmulticast mode
[  230.908411][T17894] bond_slave_0: left promiscuous mode
[  230.913857][T17894] bond_slave_1: left promiscuous mode
[  231.095263][T17885] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.211965][T17902] loop5: detected capacity change from 0 to 512
[  231.219986][T17929] IPv6: Can't replace route, no match found
[  231.347509][T17885] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.468176][T16144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.500913][ T1596] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  231.601051][ T7565] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  231.630077][ T7565] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  231.684285][   T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  231.887448][T17991] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3206'.
[  232.335335][T18037] bridge0: port 3(ipvlan2) entered blocking state
[  232.341992][T18037] bridge0: port 3(ipvlan2) entered disabled state
[  232.352991][T18037] ipvlan2: entered allmulticast mode
[  232.358420][T18037] bridge0: entered allmulticast mode
[  232.366848][T18037] ipvlan2: left allmulticast mode
[  232.372036][T18037] bridge0: left allmulticast mode
[  232.448269][T18050] sctp: [Deprecated]: syz.6.3227 (pid 18050) Use of int in max_burst socket option deprecated.
[  232.448269][T18050] Use struct sctp_assoc_value instead
[  232.465927][T18049] loop6: detected capacity change from 0 to 128
[  232.474629][T18049] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  232.499746][T13917] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  232.820692][T18086] bridge0: port 3(ipvlan2) entered blocking state
[  232.827311][T18086] bridge0: port 3(ipvlan2) entered disabled state
[  232.834474][T18086] ipvlan2: entered allmulticast mode
[  232.839826][T18086] bridge0: entered allmulticast mode
[  232.846350][T18086] ipvlan2: left allmulticast mode
[  232.851430][T18086] bridge0: left allmulticast mode
[  232.869728][T18089] loop0: detected capacity change from 0 to 256
[  232.917151][T18096] FAULT_INJECTION: forcing a failure.
[  232.917151][T18096] name failslab, interval 1, probability 0, space 0, times 0
[  232.929920][T18096] CPU: 1 UID: 0 PID: 18096 Comm: syz.2.3242 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  232.929960][T18096] Tainted: [W]=WARN
[  232.929969][T18096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  232.930025][T18096] Call Trace:
[  232.930033][T18096]  <TASK>
[  232.930044][T18096]  __dump_stack+0x1d/0x30
[  232.930074][T18096]  dump_stack_lvl+0x95/0xd0
[  232.930103][T18096]  dump_stack+0x15/0x1b
[  232.930190][T18096]  should_fail_ex+0x265/0x280
[  232.930213][T18096]  should_failslab+0x8c/0xb0
[  232.930235][T18096]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[  232.930312][T18096]  ? __alloc_skb+0x2ff/0x4b0
[  232.930357][T18096]  __alloc_skb+0x2ff/0x4b0
[  232.930379][T18096]  ? __alloc_skb+0x228/0x4b0
[  232.930405][T18096]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  232.930497][T18096]  nfc_genl_device_removed+0x39/0x1d0
[  232.930538][T18096]  nfc_unregister_device+0x1b/0x150
[  232.930608][T18096]  nci_unregister_device+0x146/0x160
[  232.930647][T18096]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  232.930679][T18096]  virtual_ncidev_close+0x2a/0x50
[  232.930805][T18096]  __fput+0x29b/0x650
[  232.930837][T18096]  fput_close_sync+0xad/0x190
[  232.930888][T18096]  __x64_sys_close+0x56/0xf0
[  232.930927][T18096]  x64_sys_call+0x2c25/0x3000
[  232.930960][T18096]  do_syscall_64+0xca/0x2b0
[  232.931057][T18096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.931086][T18096] RIP: 0033:0x7f80741af749
[  232.931106][T18096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.931160][T18096] RSP: 002b:00007f8072c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  232.931185][T18096] RAX: ffffffffffffffda RBX: 00007f8074405fa0 RCX: 00007f80741af749
[  232.931198][T18096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  232.931210][T18096] RBP: 00007f8072c17090 R08: 0000000000000000 R09: 0000000000000000
[  232.931222][T18096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  232.931234][T18096] R13: 00007f8074406038 R14: 00007f8074405fa0 R15: 00007ffd8ffb78f8
[  232.931255][T18096]  </TASK>
[  233.345699][T18146] netlink: 'syz.4.3255': attribute type 33 has an invalid length.
[  233.353647][T18146] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3255'.
[  233.367401][T18146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3255'.
[  233.674349][T18179] loop0: detected capacity change from 0 to 2048
[  233.684638][T18181] wireguard0: entered promiscuous mode
[  233.690272][T18181] wireguard0: entered allmulticast mode
[  233.717568][T18179] Alternate GPT is invalid, using primary GPT.
[  233.724130][T18179]  loop0: p2 p3 p7
[  233.736725][T18171] netlink: 424 bytes leftover after parsing attributes in process `syz.4.3263'.
[  233.824928][T18207] usb usb7: usbfs: process 18207 (syz.0.3271) did not claim interface 0 before use
[  233.865088][T18215] 9p: Unknown access argument 18446744073709551615: -34
[  233.882511][ T3567] hid-generic 0002:0004:1000000.001A: unknown main item tag 0x0
[  233.890356][ T3567] hid-generic 0002:0004:1000000.001A: unknown main item tag 0x0
[  233.898130][ T3567] hid-generic 0002:0004:1000000.001A: unknown main item tag 0x0
[  233.906586][ T3567] hid-generic 0002:0004:1000000.001A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  233.918362][T18221] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3274'.
[  234.157946][ T3567] hid-generic 0002:0004:1000000.001B: unknown main item tag 0x0
[  234.165778][ T3567] hid-generic 0002:0004:1000000.001B: unknown main item tag 0x0
[  234.173502][ T3567] hid-generic 0002:0004:1000000.001B: unknown main item tag 0x0
[  234.189602][ T3567] hid-generic 0002:0004:1000000.001B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  234.204665][T18261] loop5: detected capacity change from 0 to 512
[  234.219569][T18261] EXT4-fs (loop5): 1 truncate cleaned up
[  234.225829][T18261] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.295009][T18276] loop4: detected capacity change from 0 to 512
[  234.354501][T18265] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  234.394466][T18287] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3291'.
[  234.482115][T18292] tipc: Started in network mode
[  234.487130][T18292] tipc: Node identity 66b63f4287d, cluster identity 4711
[  234.494306][T18292] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  234.575497][T18292] syzkaller0: entered promiscuous mode
[  234.581040][T18292] syzkaller0: entered allmulticast mode
[  234.589085][T18292] tipc: Resetting bearer <eth:syzkaller0>
[  234.723421][ T3567] hid-generic 0002:0004:1000000.001C: unknown main item tag 0x0
[  234.731263][ T3567] hid-generic 0002:0004:1000000.001C: unknown main item tag 0x0
[  234.739130][ T3567] hid-generic 0002:0004:1000000.001C: unknown main item tag 0x0
[  234.746899][   T29] kauditd_printk_skb: 1187 callbacks suppressed
[  234.746917][   T29] audit: type=1326 audit(234.711:33184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18254 comm="syz.5.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08094265e7 code=0x7ffc0000
[  234.776113][   T29] audit: type=1326 audit(234.711:33185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18254 comm="syz.5.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f08093cb829 code=0x7ffc0000
[  234.799198][   T29] audit: type=1326 audit(234.711:33186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18254 comm="syz.5.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f080942f749 code=0x7ffc0000
[  234.822051][   T29] audit: type=1326 audit(234.721:33187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18254 comm="syz.5.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08094265e7 code=0x7ffc0000
[  234.845043][   T29] audit: type=1326 audit(234.721:33188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18254 comm="syz.5.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f08093cb829 code=0x7ffc0000
[  234.868052][   T29] audit: type=1326 audit(234.721:33189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18254 comm="syz.5.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f080942f749 code=0x7ffc0000
[  234.892101][ T3567] hid-generic 0002:0004:1000000.001C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  234.892508][ T9028] tipc: Resetting bearer <eth:syzkaller0>
[  234.904067][   T29] audit: type=1326 audit(234.731:33190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18254 comm="syz.5.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08094265e7 code=0x7ffc0000
[  234.930872][   T29] audit: type=1326 audit(234.731:33191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18254 comm="syz.5.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f08093cb829 code=0x7ffc0000
[  234.953788][   T29] audit: type=1326 audit(234.731:33192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18254 comm="syz.5.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f080942f749 code=0x7ffc0000
[  234.976796][   T29] audit: type=1326 audit(234.741:33193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18254 comm="syz.5.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08094265e7 code=0x7ffc0000
[  235.015205][T18288] tipc: Resetting bearer <eth:syzkaller0>
[  235.030651][T18288] tipc: Disabling bearer <eth:syzkaller0>
[  235.052233][T10199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.191324][T18342] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3301'.
[  235.306806][T18346] loop5: detected capacity change from 0 to 512
[  235.330410][T18333] netlink: 'syz.6.3302': attribute type 1 has an invalid length.
[  235.338284][T18333] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3302'.
[  235.356605][T18333] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3302'.
[  235.366348][T18333] netem: change failed
[  235.435200][T18359] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3306'.
[  235.446761][T18359] openvswitch: netlink: Missing key (keys=40, expected=80)
[  235.797522][ T3529] hid-generic 0002:0004:1000000.001D: unknown main item tag 0x0
[  235.806792][ T3529] hid-generic 0002:0004:1000000.001D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  235.881622][T18396] netlink: 'syz.6.3316': attribute type 7 has an invalid length.
[  235.981935][T18406] FAULT_INJECTION: forcing a failure.
[  235.981935][T18406] name failslab, interval 1, probability 0, space 0, times 0
[  235.994918][T18406] CPU: 1 UID: 0 PID: 18406 Comm: syz.6.3318 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  235.994960][T18406] Tainted: [W]=WARN
[  235.994969][T18406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  235.995061][T18406] Call Trace:
[  235.995068][T18406]  <TASK>
[  235.995077][T18406]  __dump_stack+0x1d/0x30
[  235.995174][T18406]  dump_stack_lvl+0x95/0xd0
[  235.995200][T18406]  dump_stack+0x15/0x1b
[  235.995219][T18406]  should_fail_ex+0x265/0x280
[  235.995241][T18406]  should_failslab+0x8c/0xb0
[  235.995269][T18406]  kmem_cache_alloc_noprof+0x69/0x4b0
[  235.995318][T18406]  ? security_inode_alloc+0x37/0x100
[  235.995341][T18406]  security_inode_alloc+0x37/0x100
[  235.995361][T18406]  inode_init_always_gfp+0x4b7/0x500
[  235.995389][T18406]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  235.995422][T18406]  alloc_inode+0x58/0x170
[  235.995466][T18406]  new_inode+0x1d/0xe0
[  235.995486][T18406]  shmem_get_inode+0x246/0x750
[  235.995551][T18406]  shmem_tmpfile+0x3d/0x110
[  235.995636][T18406]  vfs_tmpfile+0x25a/0x520
[  235.995749][T18406]  do_tmpfile+0xa8/0x190
[  235.995775][T18406]  path_openat+0x2043/0x23b0
[  235.995809][T18406]  ? _parse_integer_limit+0x170/0x190
[  235.995847][T18406]  ? _parse_integer+0x27/0x40
[  235.995865][T18406]  ? kstrtoull+0x111/0x140
[  235.995888][T18406]  ? kstrtouint+0x76/0xc0
[  235.995907][T18406]  do_filp_open+0x109/0x230
[  235.995965][T18406]  do_sys_openat2+0xa6/0x150
[  235.996042][T18406]  __x64_sys_openat+0xf2/0x120
[  235.996069][T18406]  x64_sys_call+0x2b07/0x3000
[  235.996090][T18406]  do_syscall_64+0xca/0x2b0
[  235.996168][T18406]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.996187][T18406] RIP: 0033:0x7f32ebe3f749
[  235.996205][T18406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  235.996224][T18406] RSP: 002b:00007f32ea8a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  235.996305][T18406] RAX: ffffffffffffffda RBX: 00007f32ec095fa0 RCX: 00007f32ebe3f749
[  235.996321][T18406] RDX: 0000000000515401 RSI: 00002000000000c0 RDI: 0000000000000006
[  235.996335][T18406] RBP: 00007f32ea8a7090 R08: 0000000000000000 R09: 0000000000000000
[  235.996351][T18406] R10: 0000000000000408 R11: 0000000000000246 R12: 0000000000000001
[  235.996362][T18406] R13: 00007f32ec096038 R14: 00007f32ec095fa0 R15: 00007fff364b3d48
[  235.996380][T18406]  </TASK>
[  236.327225][T18422] loop6: detected capacity change from 0 to 1024
[  236.334912][T18422] EXT4-fs: Ignoring removed nomblk_io_submit option
[  236.341623][T18422] ext4: Unknown parameter 'fsmagic'
[  236.389810][T18422] netlink: 'syz.6.3325': attribute type 1 has an invalid length.
[  236.702295][T18452] loop6: detected capacity change from 0 to 512
[  236.932937][T18457] __nla_validate_parse: 3 callbacks suppressed
[  236.932950][T18457] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3335'.
[  237.232462][T18479] netlink: 'syz.4.3341': attribute type 13 has an invalid length.
[  237.303328][T18489] pimreg: entered allmulticast mode
[  237.309342][T18488] pimreg: left allmulticast mode
[  237.539852][T18519] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3353'.
[  237.568434][T18524] loop4: detected capacity change from 0 to 512
[  237.694174][T18524] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.3356: inode has both inline data and extents flags
[  237.707774][T18524] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3356: couldn't read orphan inode 15 (err -117)
[  237.720653][T18524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.813318][T15526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.967413][T18542] loop6: detected capacity change from 0 to 1024
[  237.974730][T18542] EXT4-fs: inline encryption not supported
[  237.980916][T18542] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  237.994194][T18542] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #3: block 1: comm syz.6.3359: lblock 1 mapped to illegal pblock 1 (length 1)
[  238.009727][T18542] EXT4-fs (loop6): Remounting filesystem read-only
[  238.016698][T18542] EXT4-fs (loop6): 1 orphan inode deleted
[  238.023001][T18542] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.053597][T18542] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  238.084431][T13917] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.189906][T18553] pimreg: entered allmulticast mode
[  238.213993][T18552] pimreg: left allmulticast mode
[  238.245956][T15526] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  238.257057][T15526] CPU: 0 UID: 0 PID: 15526 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  238.257143][T15526] Tainted: [W]=WARN
[  238.257151][T15526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  238.257163][T15526] Call Trace:
[  238.257170][T15526]  <TASK>
[  238.257177][T15526]  __dump_stack+0x1d/0x30
[  238.257205][T15526]  dump_stack_lvl+0x95/0xd0
[  238.257233][T15526]  dump_stack+0x15/0x1b
[  238.257255][T15526]  dump_header+0x81/0x240
[  238.257317][T15526]  oom_kill_process+0x295/0x350
[  238.257398][T15526]  out_of_memory+0x97b/0xb80
[  238.257429][T15526]  try_charge_memcg+0x610/0xa10
[  238.257474][T15526]  charge_memcg+0x51/0xc0
[  238.257508][T15526]  __mem_cgroup_charge+0x28/0xb0
[  238.257623][T15526]  filemap_add_folio+0x111/0x360
[  238.257651][T15526]  __filemap_get_folio_mpol+0x326/0x650
[  238.257736][T15526]  filemap_fault+0x44d/0xb70
[  238.257772][T15526]  __do_fault+0xbc/0x200
[  238.257811][T15526]  handle_mm_fault+0xfab/0x2c60
[  238.257880][T15526]  do_user_addr_fault+0x630/0x1080
[  238.257964][T15526]  exc_page_fault+0x62/0xa0
[  238.257996][T15526]  asm_exc_page_fault+0x26/0x30
[  238.258045][T15526] RIP: 0033:0x7f425d915fd4
[  238.258076][T15526] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1
[  238.258100][T15526] RSP: 002b:00007ffca02a8500 EFLAGS: 00010202
[  238.258120][T15526] RAX: 0000001b2ed24000 RBX: 00000000000000cc RCX: 000000000003a1b0
[  238.258136][T15526] RDX: 0000000002b1e365 RSI: 00007ffca02a8590 RDI: 0000000000000001
[  238.258151][T15526] RBP: 00007ffca02a853c R08: 000000000a47b702 R09: 7fffffffffffffff
[  238.258164][T15526] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388
[  238.258176][T15526] R13: 00000000000927c0 R14: 000000000003a23a R15: 00007ffca02a8590
[  238.258243][T15526]  </TASK>
[  238.258252][T15526] memory: usage 307200kB, limit 307200kB, failcnt 3163
[  238.450718][T15526] memory+swap: usage 206520kB, limit 9007199254740988kB, failcnt 0
[  238.458666][T15526] kmem: usage 198716kB, limit 9007199254740988kB, failcnt 0
[  238.465995][T15526] Memory cgroup stats for /syz4:
[  238.477325][T15526] cache 0
[  238.487477][T15526] rss 0
[  238.490368][T15526] shmem 0
[  238.493337][T15526] mapped_file 0
[  238.496850][T15526] dirty 0
[  238.499802][T15526] writeback 0
[  238.503157][T15526] workingset_refault_anon 214
[  238.507999][T15526] workingset_refault_file 1051
[  238.512762][T15526] swap 204800
[  238.516203][T15526] swapcached 0
[  238.519595][T15526] pgpgin 226750
[  238.523136][T15526] pgpgout 226741
[  238.526777][T15526] pgfault 276923
[  238.530337][T15526] pgmajfault 132
[  238.533939][T15526] inactive_anon 0
[  238.537594][T15526] active_anon 0
[  238.541061][T15526] inactive_file 0
[  238.544787][T15526] active_file 36864
[  238.548620][T15526] unevictable 0
[  238.552098][T15526] hierarchical_memory_limit 314572800
[  238.557536][T15526] hierarchical_memsw_limit 9223372036854771712
[  238.563735][T15526] total_cache 0
[  238.567420][T15526] total_rss 0
[  238.570793][T15526] total_shmem 0
[  238.574286][T15526] total_mapped_file 0
[  238.578299][T15526] total_dirty 0
[  238.581770][T15526] total_writeback 0
[  238.585660][T15526] total_workingset_refault_anon 214
[  238.590873][T15526] total_workingset_refault_file 1051
[  238.596205][T15526] total_swap 204800
[  238.600031][T15526] total_swapcached 0
[  238.603976][T15526] total_pgpgin 226750
[  238.607989][T15526] total_pgpgout 226741
[  238.612078][T15526] total_pgfault 276923
[  238.616247][T15526] total_pgmajfault 132
[  238.620328][T15526] total_inactive_anon 0
[  238.624528][T15526] total_active_anon 0
[  238.628546][T15526] total_inactive_file 0
[  238.632721][T15526] total_active_file 36864
[  238.637084][T15526] total_unevictable 0
[  238.641095][T15526] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3361,pid=18547,uid=0
[  238.655860][T15526] Memory cgroup out of memory: Killed process 18547 (syz.4.3361) total-vm:93968kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  238.745249][T18574] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  238.821766][T18586] bridge0: port 3(ipvlan2) entered blocking state
[  238.828346][T18586] bridge0: port 3(ipvlan2) entered disabled state
[  238.886272][T18593] loop5: detected capacity change from 0 to 256
[  238.895807][T18586] ipvlan2: entered allmulticast mode
[  238.901236][T18586] bridge0: entered allmulticast mode
[  238.917483][T18591] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  238.924452][ T3500] IPVS: starting estimator thread 0...
[  238.935028][T18586] ipvlan2: left allmulticast mode
[  238.940111][T18586] bridge0: left allmulticast mode
[  239.027605][T18604] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0
[  239.037552][T18599] IPVS: using max 2208 ests per chain, 110400 per kthread
[  239.045106][T18579] IPVS: stopping backup sync thread 18604 ...
[  239.110419][T18608] pimreg: entered allmulticast mode
[  239.139917][T18607] pimreg: left allmulticast mode
[  239.315436][T18634] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3384'.
[  239.349399][ T3500] hid_parser_main: 2 callbacks suppressed
[  239.349481][ T3500] hid-generic 0002:0004:1000000.001E: unknown main item tag 0x0
[  239.363158][ T3500] hid-generic 0002:0004:1000000.001E: unknown main item tag 0x0
[  239.370872][ T3500] hid-generic 0002:0004:1000000.001E: unknown main item tag 0x0
[  239.379191][ T3500] hid-generic 0002:0004:1000000.001E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  239.407683][T18648] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.463502][T18655] bond_slave_0: entered promiscuous mode
[  239.469312][T18655] bond_slave_1: entered promiscuous mode
[  239.475641][T18655] macvtap1: entered allmulticast mode
[  239.481111][T18655] bond0: entered allmulticast mode
[  239.486330][T18655] bond_slave_0: entered allmulticast mode
[  239.492229][T18655] bond_slave_1: entered allmulticast mode
[  239.499227][T18655] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  239.510739][T18655] bond0: left allmulticast mode
[  239.515814][T18655] bond_slave_0: left allmulticast mode
[  239.521416][T18655] bond_slave_1: left allmulticast mode
[  239.526986][T18655] bond_slave_0: left promiscuous mode
[  239.532495][T18655] bond_slave_1: left promiscuous mode
[  239.556236][T18648] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.656139][T18648] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.701232][T18698] bridge0: port 3(ipvlan2) entered blocking state
[  239.707884][T18698] bridge0: port 3(ipvlan2) entered disabled state
[  239.714554][T18698] ipvlan2: entered allmulticast mode
[  239.719857][T18698] bridge0: entered allmulticast mode
[  239.725637][T18698] ipvlan2: left allmulticast mode
[  239.730670][T18698] bridge0: left allmulticast mode
[  239.739539][T18648] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.751740][T18703] loop4: detected capacity change from 0 to 256
[  239.820230][   T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  239.832240][   T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.844455][   T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.856153][   T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.930949][T18718] FAULT_INJECTION: forcing a failure.
[  239.930949][T18718] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  239.944224][T18718] CPU: 1 UID: 0 PID: 18718 Comm: syz.0.3397 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  239.944256][T18718] Tainted: [W]=WARN
[  239.944264][T18718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  239.944318][T18718] Call Trace:
[  239.944325][T18718]  <TASK>
[  239.944333][T18718]  __dump_stack+0x1d/0x30
[  239.944358][T18718]  dump_stack_lvl+0x95/0xd0
[  239.944379][T18718]  dump_stack+0x15/0x1b
[  239.944455][T18718]  should_fail_ex+0x265/0x280
[  239.944536][T18718]  should_fail+0xb/0x20
[  239.944558][T18718]  should_fail_usercopy+0x1a/0x20
[  239.944586][T18718]  _copy_to_iter+0xd2/0xe70
[  239.944616][T18718]  ? lockref_put_return+0xf7/0x130
[  239.944668][T18718]  copy_page_to_iter+0x18f/0x2d0
[  239.944699][T18718]  pipe_to_user+0x5b/0x90
[  239.944807][T18718]  __splice_from_pipe+0x1f6/0x480
[  239.944833][T18718]  ? __pfx_pipe_to_user+0x10/0x10
[  239.944899][T18718]  __se_sys_vmsplice+0x236/0xee0
[  239.944921][T18718]  ? kstrtouint+0x76/0xc0
[  239.944954][T18718]  ? kstrtouint_from_user+0x9f/0xf0
[  239.944974][T18718]  ? get_pid_task+0x96/0xd0
[  239.945035][T18718]  ? mutex_unlock+0x4f/0x90
[  239.945061][T18718]  ? fput+0x8f/0xc0
[  239.945225][T18718]  __x64_sys_vmsplice+0x55/0x70
[  239.945248][T18718]  x64_sys_call+0x2344/0x3000
[  239.945278][T18718]  do_syscall_64+0xca/0x2b0
[  239.945345][T18718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.945435][T18718] RIP: 0033:0x7fde1375f749
[  239.945451][T18718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  239.945517][T18718] RSP: 002b:00007fde121c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  239.945535][T18718] RAX: ffffffffffffffda RBX: 00007fde139b5fa0 RCX: 00007fde1375f749
[  239.945547][T18718] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003
[  239.945558][T18718] RBP: 00007fde121c7090 R08: 0000000000000000 R09: 0000000000000000
[  239.945573][T18718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  239.945584][T18718] R13: 00007fde139b6038 R14: 00007fde139b5fa0 R15: 00007ffc185604f8
[  239.945647][T18718]  </TASK>
[  240.026116][T18722] loop4: detected capacity change from 0 to 4096
[  240.027111][   T29] kauditd_printk_skb: 435 callbacks suppressed
[  240.027151][   T29] audit: type=1326 audit(239.951:33627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18721 comm="syz.4.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425da3f749 code=0x7ffc0000
[  240.033524][T18722] EXT4-fs: Ignoring removed nomblk_io_submit option
[  240.036209][   T29] audit: type=1326 audit(239.951:33628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18721 comm="syz.4.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f425da3f749 code=0x7ffc0000
[  240.036238][   T29] audit: type=1326 audit(239.951:33629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18721 comm="syz.4.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425da3f749 code=0x7ffc0000
[  240.036288][   T29] audit: type=1326 audit(239.951:33630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18721 comm="syz.4.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f425da3f749 code=0x7ffc0000
[  240.036370][   T29] audit: type=1326 audit(239.951:33631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18721 comm="syz.4.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425da3f749 code=0x7ffc0000
[  240.091009][T18722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.093670][   T29] audit: type=1326 audit(239.951:33632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18721 comm="syz.4.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f425da3f749 code=0x7ffc0000
[  240.334452][   T29] audit: type=1326 audit(239.951:33633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18721 comm="syz.4.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f425da3f783 code=0x7ffc0000
[  240.357457][   T29] audit: type=1326 audit(239.981:33634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18721 comm="syz.4.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f425da3e1ff code=0x7ffc0000
[  240.380410][   T29] audit: type=1326 audit(239.991:33635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18721 comm="syz.4.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f425da3f7d7 code=0x7ffc0000
[  240.403348][   T29] audit: type=1326 audit(240.001:33636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18721 comm="syz.4.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f425da3df90 code=0x7ffc0000
[  240.431509][T18735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3399'.
[  240.440826][T18735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3399'.
[  240.530206][T18745] pimreg: entered allmulticast mode
[  240.558973][T18757] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.605850][T18757] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.644341][T18766] bond_slave_0: entered promiscuous mode
[  240.650092][T18766] bond_slave_1: entered promiscuous mode
[  240.659337][T18766] macvtap1: entered allmulticast mode
[  240.664883][T18766] bond0: entered allmulticast mode
[  240.670086][T18766] bond_slave_0: entered allmulticast mode
[  240.675956][T18766] bond_slave_1: entered allmulticast mode
[  240.683316][T18766] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  240.692749][T18766] bond0: left allmulticast mode
[  240.697734][T18766] bond_slave_0: left allmulticast mode
[  240.703263][T18766] bond_slave_1: left allmulticast mode
[  240.708798][T18766] bond_slave_0: left promiscuous mode
[  240.714311][T18766] bond_slave_1: left promiscuous mode
[  240.724835][T18757] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.779676][T18792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3415'.
[  240.797621][T18757] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.864934][T15526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.962974][T18838] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3416'.
[  240.974627][T18839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3423'.
[  241.125162][T18864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3428'.
[  241.175768][T18870] FAULT_INJECTION: forcing a failure.
[  241.175768][T18870] name failslab, interval 1, probability 0, space 0, times 0
[  241.188524][T18870] CPU: 1 UID: 0 PID: 18870 Comm: syz.5.3433 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  241.188585][T18870] Tainted: [W]=WARN
[  241.188593][T18870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  241.188609][T18870] Call Trace:
[  241.188617][T18870]  <TASK>
[  241.188626][T18870]  __dump_stack+0x1d/0x30
[  241.188654][T18870]  dump_stack_lvl+0x95/0xd0
[  241.188680][T18870]  dump_stack+0x15/0x1b
[  241.188709][T18870]  should_fail_ex+0x265/0x280
[  241.188730][T18870]  should_failslab+0x8c/0xb0
[  241.188750][T18870]  __kmalloc_cache_node_noprof+0x6a/0x4d0
[  241.188780][T18870]  ? __get_vm_area_node+0x106/0x1d0
[  241.188859][T18870]  __get_vm_area_node+0x106/0x1d0
[  241.188880][T18870]  __vmalloc_node_range_noprof+0x28e/0x1310
[  241.188905][T18870]  ? copy_process+0x37d/0x1ef0
[  241.188950][T18870]  ? refill_obj_stock+0x254/0x2e0
[  241.188986][T18870]  ? obj_cgroup_charge_account+0xba/0x1a0
[  241.189024][T18870]  ? __rcu_read_unlock+0x4f/0x70
[  241.189049][T18870]  ? __memcg_slab_post_alloc_hook+0x44b/0x530
[  241.189105][T18870]  __vmalloc_node_noprof+0x89/0xc0
[  241.189134][T18870]  ? copy_process+0x37d/0x1ef0
[  241.189155][T18870]  ? copy_process+0x37d/0x1ef0
[  241.189176][T18870]  dup_task_struct+0x219/0x950
[  241.189197][T18870]  ? copy_process+0x36c/0x1ef0
[  241.189236][T18870]  copy_process+0x37d/0x1ef0
[  241.189315][T18870]  ? kstrtouint+0x76/0xc0
[  241.189333][T18870]  ? kstrtouint_from_user+0x9f/0xf0
[  241.189357][T18870]  ? 0xffffffff81000000
[  241.189375][T18870]  kernel_clone+0x16c/0x5c0
[  241.189393][T18870]  ? vfs_write+0x7e8/0x960
[  241.189442][T18870]  __x64_sys_clone+0xe6/0x120
[  241.189468][T18870]  x64_sys_call+0x12d0/0x3000
[  241.189498][T18870]  do_syscall_64+0xca/0x2b0
[  241.189532][T18870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.189601][T18870] RIP: 0033:0x7f080942f749
[  241.189619][T18870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  241.189640][T18870] RSP: 002b:00007f0807e96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  241.189663][T18870] RAX: ffffffffffffffda RBX: 00007f0809685fa0 RCX: 00007f080942f749
[  241.189681][T18870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  241.189696][T18870] RBP: 00007f0807e97090 R08: 0000000000000000 R09: 0000000000000000
[  241.189710][T18870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  241.189867][T18870] R13: 00007f0809686038 R14: 00007f0809685fa0 R15: 00007ffc957b6318
[  241.189890][T18870]  </TASK>
[  241.189960][T18870] syz.5.3433: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[  241.337804][T18876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3436'.
[  241.340258][T18870] ,cpuset=/,mems_allowed=0
[  241.340300][T18870] CPU: 1 UID: 0 PID: 18870 Comm: syz.5.3433 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  241.340479][T18870] Tainted: [W]=WARN
[  241.340508][T18870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  241.340583][T18870] Call Trace:
[  241.340604][T18870]  <TASK>
[  241.340627][T18870]  __dump_stack+0x1d/0x30
[  241.340734][T18870]  dump_stack_lvl+0x95/0xd0
[  241.340808][T18870]  dump_stack+0x15/0x1b
[  241.340873][T18870]  warn_alloc+0x12b/0x1a0
[  241.340990][T18870]  __vmalloc_node_range_noprof+0x2b3/0x1310
[  241.341075][T18870]  ? refill_obj_stock+0x254/0x2e0
[  241.341171][T18870]  ? obj_cgroup_charge_account+0xba/0x1a0
[  241.341265][T18870]  ? __rcu_read_unlock+0x4f/0x70
[  241.341413][T18870]  ? __memcg_slab_post_alloc_hook+0x44b/0x530
[  241.341510][T18870]  __vmalloc_node_noprof+0x89/0xc0
[  241.341585][T18870]  ? copy_process+0x37d/0x1ef0
[  241.341674][T18870]  ? copy_process+0x37d/0x1ef0
[  241.341730][T18870]  dup_task_struct+0x219/0x950
[  241.341795][T18870]  ? copy_process+0x36c/0x1ef0
[  241.341862][T18870]  copy_process+0x37d/0x1ef0
[  241.341925][T18870]  ? kstrtouint+0x76/0xc0
[  241.341991][T18870]  ? kstrtouint_from_user+0x9f/0xf0
[  241.342050][T18870]  ? 0xffffffff81000000
[  241.342160][T18870]  kernel_clone+0x16c/0x5c0
[  241.342284][T18870]  ? vfs_write+0x7e8/0x960
[  241.342347][T18870]  __x64_sys_clone+0xe6/0x120
[  241.342427][T18870]  x64_sys_call+0x12d0/0x3000
[  241.342495][T18870]  do_syscall_64+0xca/0x2b0
[  241.342618][T18870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.342678][T18870] RIP: 0033:0x7f080942f749
[  241.342726][T18870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  241.342775][T18870] RSP: 002b:00007f0807e96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  241.342819][T18870] RAX: ffffffffffffffda RBX: 00007f0809685fa0 RCX: 00007f080942f749
[  241.342856][T18870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  241.342893][T18870] RBP: 00007f0807e97090 R08: 0000000000000000 R09: 0000000000000000
[  241.342957][T18870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  241.342994][T18870] R13: 00007f0809686038 R14: 00007f0809685fa0 R15: 00007ffc957b6318
[  241.343050][T18870]  </TASK>
[  241.343070][T18870] Mem-Info:
[  241.693569][T18870] active_anon:7115 inactive_anon:9 isolated_anon:0
[  241.693569][T18870]  active_file:8776 inactive_file:16605 isolated_file:0
[  241.693569][T18870]  unevictable:0 dirty:103 writeback:0
[  241.693569][T18870]  slab_reclaimable:3565 slab_unreclaimable:20181
[  241.693569][T18870]  mapped:33349 shmem:3228 pagetables:1367
[  241.693569][T18870]  sec_pagetables:0 bounce:0
[  241.693569][T18870]  kernel_misc_reclaimable:0
[  241.693569][T18870]  free:1792360 free_pcp:31411 free_cma:0
[  241.738732][T18870] Node 0 active_anon:28548kB inactive_anon:36kB active_file:35028kB inactive_file:66428kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133468kB dirty:412kB writeback:0kB shmem:12848kB kernel_stack:4080kB pagetables:5580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  241.766231][T18870] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  241.796011][T18870] lowmem_reserve[]: 0 2880 7859 7859
[  241.801390][T18870] Node 0 DMA32 free:2945888kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB
[  241.832744][T18870] lowmem_reserve[]: 0 0 4978 4978
[  241.837880][T18870] Node 0 Normal free:4216196kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28548kB inactive_anon:36kB active_file:35028kB inactive_file:66428kB unevictable:0kB writepending:412kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:113948kB local_pcp:36796kB free_cma:0kB
[  241.871052][T18870] lowmem_reserve[]: 0 0 0 0
[  241.875698][T18870] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  241.888545][T18870] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945888kB
[  241.904685][T18870] Node 0 Normal: 348*4kB (UME) 566*8kB (UME) 588*16kB (UME) 185*32kB (UME) 213*64kB (UME) 215*128kB (UME) 108*256kB (UM) 67*512kB (UME) 92*1024kB (UM) 110*2048kB (UM) 921*4096kB (UM) = 4216256kB
[  241.924017][T18870] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  241.933297][T18870] 28546 total pagecache pages
[  241.938071][T18870] 16 pages in swap cache
[  241.942305][T18870] Free swap  = 124628kB
[  241.946466][T18870] Total swap = 124996kB
[  241.950744][T18870] 2097051 pages RAM
[  241.954564][T18870] 0 pages HighMem/MovableOnly
[  241.959322][T18870] 81271 pages reserved
[  242.154788][T18889] IPv6: Can't replace route, no match found
[  242.301888][T18897] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  242.571053][T18908] pimreg: entered allmulticast mode
[  242.619115][T18915] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3444'.
[  242.673380][T18919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3448'.
[  242.824631][T18926] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3451'.
[  243.264867][T18945] IPv6: Can't replace route, no match found
[  243.308354][ T7631] hid-generic 0002:0004:1000000.001F: unknown main item tag 0x0
[  243.316125][ T7631] hid-generic 0002:0004:1000000.001F: unknown main item tag 0x0
[  243.323864][ T7631] hid-generic 0002:0004:1000000.001F: unknown main item tag 0x0
[  243.333891][ T7631] hid-generic 0002:0004:1000000.001F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  243.545662][T18956] loop5: detected capacity change from 0 to 1024
[  243.553423][T18956] EXT4-fs: Ignoring removed nomblk_io_submit option
[  243.561421][T18956] ext4: Unknown parameter 'fsmagic'
[  243.687042][T18967] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  243.816207][T18973] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3461'.
[  243.899432][T18977] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3463'.
[  244.010540][ T3410] hid-generic 0002:0004:1000000.0020: unknown main item tag 0x0
[  244.018306][ T3410] hid-generic 0002:0004:1000000.0020: unknown main item tag 0x0
[  244.025987][ T3410] hid-generic 0002:0004:1000000.0020: unknown main item tag 0x0
[  244.034930][ T3410] hid-generic 0002:0004:1000000.0020: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  244.110926][T19002] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3471'.
[  244.210104][T10274] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.221989][T10274] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.235586][T19014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3472'.
[  244.253980][   T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.262217][   T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.303499][T19022] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3474'.
[  244.369635][ T1037] hid-generic 0002:0004:1000000.0021: unknown main item tag 0x0
[  244.377393][ T1037] hid-generic 0002:0004:1000000.0021: unknown main item tag 0x0
[  244.385090][ T1037] hid-generic 0002:0004:1000000.0021: unknown main item tag 0x0
[  244.393606][ T1037] hid-generic 0002:0004:1000000.0021: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  244.514084][T19046] netlink: 'syz.4.3482': attribute type 1 has an invalid length.
[  244.533036][T10199] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  244.544090][T10199] CPU: 0 UID: 0 PID: 10199 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  244.544158][T10199] Tainted: [W]=WARN
[  244.544166][T10199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  244.544190][T10199] Call Trace:
[  244.544202][T10199]  <TASK>
[  244.544212][T10199]  __dump_stack+0x1d/0x30
[  244.544253][T10199]  dump_stack_lvl+0x95/0xd0
[  244.544335][T10199]  dump_stack+0x15/0x1b
[  244.544372][T10199]  dump_header+0x81/0x240
[  244.544412][T10199]  oom_kill_process+0x295/0x350
[  244.544440][T10199]  out_of_memory+0x97b/0xb80
[  244.544530][T10199]  try_charge_memcg+0x610/0xa10
[  244.544581][T10199]  charge_memcg+0x51/0xc0
[  244.544679][T10199]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  244.544714][T10199]  __read_swap_cache_async+0x17b/0x2d0
[  244.544778][T10199]  swap_cluster_readahead+0x262/0x3c0
[  244.544821][T10199]  swapin_readahead+0xde/0x820
[  244.544933][T10199]  ? update_load_avg+0x1da/0x820
[  244.544962][T10199]  ? __list_add_valid_or_report+0x38/0xe0
[  244.545004][T10199]  ? __rcu_read_unlock+0x4f/0x70
[  244.545026][T10199]  ? swap_cache_get_folio+0x277/0x280
[  244.545053][T10199]  do_swap_page+0x2b4/0x21e0
[  244.545094][T10199]  ? _raw_spin_unlock+0x26/0x50
[  244.545231][T10199]  ? __schedule+0x85f/0xcd0
[  244.545254][T10199]  ? __pfx_default_wake_function+0x10/0x10
[  244.545298][T10199]  handle_mm_fault+0x9d8/0x2c60
[  244.545420][T10199]  do_user_addr_fault+0x630/0x1080
[  244.545473][T10199]  exc_page_fault+0x62/0xa0
[  244.545502][T10199]  asm_exc_page_fault+0x26/0x30
[  244.545527][T10199] RIP: 0033:0x7f0809461fc5
[  244.545547][T10199] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[  244.545580][T10199] RSP: 002b:00007ffc957b6658 EFLAGS: 00010246
[  244.545598][T10199] RAX: 0000000000000000 RBX: 000000000000035d RCX: 00007f0809461fc3
[  244.545645][T10199] RDX: 00007ffc957b6670 RSI: 0000000000000000 RDI: 0000000000000000
[  244.545661][T10199] RBP: 00007ffc957b66dc R08: 000000001be7e7f1 R09: 0000000000000000
[  244.545726][T10199] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  244.545737][T10199] R13: 00000000000927c0 R14: 000000000003babc R15: 00007ffc957b6730
[  244.545756][T10199]  </TASK>
[  244.545763][T10199] memory: usage 296540kB, limit 307200kB, failcnt 465
[  244.776784][T10199] memory+swap: usage 100244kB, limit 9007199254740988kB, failcnt 0
[  244.784876][T10199] kmem: usage 92348kB, limit 9007199254740988kB, failcnt 0
[  244.792182][T10199] Memory cgroup stats for /syz5:
[  244.798125][T10199] cache 0
[  244.806143][T10199] rss 12288
[  244.809277][T10199] shmem 0
[  244.812239][T10199] mapped_file 0
[  244.815733][T10199] dirty 0
[  244.818699][T10199] writeback 0
[  244.822014][T10199] workingset_refault_anon 41
[  244.826658][T10199] workingset_refault_file 0
[  244.831179][T10199] swap 536576
[  244.834503][T10199] swapcached 8192
[  244.838321][T10199] pgpgin 152812
[  244.841825][T10199] pgpgout 152801
[  244.845411][T10199] pgfault 148526
[  244.849054][T10199] pgmajfault 21
[  244.852536][T10199] inactive_anon 0
[  244.856210][T10199] active_anon 8192
[  244.860004][T10199] inactive_file 0
[  244.863843][T10199] active_file 28672
[  244.867662][T10199] unevictable 0
[  244.871148][T10199] hierarchical_memory_limit 314572800
[  244.876627][T10199] hierarchical_memsw_limit 9223372036854771712
[  244.882866][T10199] total_cache 0
[  244.886376][T10199] total_rss 12288
[  244.890060][T10199] total_shmem 0
[  244.893537][T10199] total_mapped_file 0
[  244.897632][T10199] total_dirty 0
[  244.901115][T10199] total_writeback 0
[  244.904983][T10199] total_workingset_refault_anon 41
[  244.910373][T10199] total_workingset_refault_file 0
[  244.915729][T10199] total_swap 536576
[  244.919566][T10199] total_swapcached 8192
[  244.923793][T10199] total_pgpgin 152812
[  244.928214][T10199] total_pgpgout 152801
[  244.932348][T10199] total_pgfault 148526
[  244.936521][T10199] total_pgmajfault 21
[  244.940608][T10199] total_inactive_anon 0
[  244.944828][T10199] total_active_anon 8192
[  244.949087][T10199] total_inactive_file 0
[  244.953259][T10199] total_active_file 28672
[  244.957736][T10199] total_unevictable 0
[  244.961810][T10199] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3477,pid=19025,uid=0
[  244.976693][T10199] Memory cgroup out of memory: Killed process 19025 (syz.5.3477) total-vm:95884kB, anon-rss:1136kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  244.999507][T19046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3482'.
[  245.026817][T19050] 8021q: adding VLAN 0 to HW filter on device bond3
[  245.034038][   T29] kauditd_printk_skb: 191 callbacks suppressed
[  245.034055][   T29] audit: type=1326 audit(245.011:33826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19087 comm="syz.0.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fde1375f749 code=0x7ffc0000
[  245.048532][T19050] bond2: (slave bond3): making interface the new active one
[  245.063615][   T29] audit: type=1326 audit(245.011:33827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19087 comm="syz.0.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1375f749 code=0x7ffc0000
[  245.092841][T19050] bond2: (slave bond3): Enslaving as an active interface with an up link
[  245.094115][   T29] audit: type=1326 audit(245.011:33828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19087 comm="syz.0.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fde1375f749 code=0x7ffc0000
[  245.125349][   T29] audit: type=1326 audit(245.011:33829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19087 comm="syz.0.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1375f749 code=0x7ffc0000
[  245.148405][   T29] audit: type=1326 audit(245.011:33830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19087 comm="syz.0.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fde1375f749 code=0x7ffc0000
[  245.171375][   T29] audit: type=1326 audit(245.011:33831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19087 comm="syz.0.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1375f749 code=0x7ffc0000
[  245.194419][   T29] audit: type=1326 audit(245.011:33832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19087 comm="syz.0.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fde1375f749 code=0x7ffc0000
[  245.217726][   T29] audit: type=1326 audit(245.011:33833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19087 comm="syz.0.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1375f749 code=0x7ffc0000
[  245.240845][   T29] audit: type=1326 audit(245.011:33834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19087 comm="syz.0.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1375f749 code=0x7ffc0000
[  245.265578][T19046] 8021q: adding VLAN 0 to HW filter on device bond2
[  245.273403][   T29] audit: type=1326 audit(245.241:33835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19132 comm="syz.2.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80741af749 code=0x7ffc0000
[  245.283694][T19126] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3484'.
[  245.356928][ T1037] hid-generic 0002:0004:1000000.0022: unknown main item tag 0x0
[  245.364827][ T1037] hid-generic 0002:0004:1000000.0022: unknown main item tag 0x0
[  245.372587][ T1037] hid-generic 0002:0004:1000000.0022: unknown main item tag 0x0
[  245.381253][ T1037] hid-generic 0002:0004:1000000.0022: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  245.446849][T19160] bridge0: port 3(ipvlan2) entered blocking state
[  245.453369][T19160] bridge0: port 3(ipvlan2) entered disabled state
[  245.461906][T19160] ipvlan2: entered allmulticast mode
[  245.467314][T19160] bridge0: entered allmulticast mode
[  245.474185][T19160] ipvlan2: left allmulticast mode
[  245.479259][T19160] bridge0: left allmulticast mode
[  245.513083][T19169] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  245.610709][T19169] loop5: detected capacity change from 0 to 8192
[  245.625386][T19169] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  245.652366][T19169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.672062][T19169] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.707760][T19148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.765072][T19148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.817522][T19148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.880857][T19148] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.944688][   T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.963842][   T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.981825][   T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.996357][ T9034] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.325894][T19222] bridge0: port 3(ipvlan2) entered blocking state
[  246.332422][T19222] bridge0: port 3(ipvlan2) entered disabled state
[  246.355178][T19222] ipvlan2: entered allmulticast mode
[  246.360664][T19222] bridge0: entered allmulticast mode
[  246.384283][T19222] ipvlan2: left allmulticast mode
[  246.389535][T19222] bridge0: left allmulticast mode
[  246.415839][T19229] loop6: detected capacity change from 0 to 256
[  246.450991][T19234] pimreg: entered allmulticast mode
[  246.467629][T19233] pimreg: left allmulticast mode
[  246.695764][ T3389] IPVS: starting estimator thread 0...
[  246.696841][T19248] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  246.717828][ T3389] hid-generic 0002:0004:1000000.0023: unknown main item tag 0x0
[  246.725639][ T3389] hid-generic 0002:0004:1000000.0023: unknown main item tag 0x0
[  246.733357][ T3389] hid-generic 0002:0004:1000000.0023: unknown main item tag 0x0
[  246.792405][ T3389] hid-generic 0002:0004:1000000.0023: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  246.794409][T19250] IPVS: using max 1824 ests per chain, 91200 per kthread
[  246.829076][T19256] loop5: detected capacity change from 0 to 1024
[  246.854029][T19256] EXT4-fs: Ignoring removed nomblk_io_submit option
[  246.869320][T19256] ext4: Unknown parameter 'fsmagic'
[  247.239534][T19289] bridge0: port 3(ipvlan2) entered blocking state
[  247.246068][T19289] bridge0: port 3(ipvlan2) entered disabled state
[  247.252774][T19289] ipvlan2: entered allmulticast mode
[  247.258276][T19289] bridge0: entered allmulticast mode
[  247.264471][T19289] ipvlan2: left allmulticast mode
[  247.269542][T19289] bridge0: left allmulticast mode
[  247.794989][T19314] FAULT_INJECTION: forcing a failure.
[  247.794989][T19314] name failslab, interval 1, probability 0, space 0, times 0
[  247.807792][T19314] CPU: 1 UID: 0 PID: 19314 Comm: syz.5.3533 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  247.807829][T19314] Tainted: [W]=WARN
[  247.807914][T19314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  247.807931][T19314] Call Trace:
[  247.807938][T19314]  <TASK>
[  247.807945][T19314]  __dump_stack+0x1d/0x30
[  247.807968][T19314]  dump_stack_lvl+0x95/0xd0
[  247.807998][T19314]  dump_stack+0x15/0x1b
[  247.808028][T19314]  should_fail_ex+0x265/0x280
[  247.808049][T19314]  should_failslab+0x8c/0xb0
[  247.808073][T19314]  kmem_cache_alloc_noprof+0x69/0x4b0
[  247.808101][T19314]  ? dst_alloc+0xbd/0x100
[  247.808229][T19314]  ? __pfx_ip6_dst_gc+0x10/0x10
[  247.808259][T19314]  dst_alloc+0xbd/0x100
[  247.808308][T19314]  ip6_pol_route+0x71b/0xbe0
[  247.808337][T19314]  ? ip6_pol_route+0x389/0xbe0
[  247.808418][T19314]  ip6_pol_route_input+0x42/0x60
[  247.808448][T19314]  ? __pfx_ip6_pol_route_input+0x10/0x10
[  247.808474][T19314]  fib6_rule_lookup+0x32c/0x470
[  247.808545][T19314]  ? __pfx_ip6_pol_route_input+0x10/0x10
[  247.808585][T19314]  ip6_route_input+0x40e/0x530
[  247.808618][T19314]  ip6_rcv_finish+0x1c1/0x340
[  247.808641][T19314]  ipv6_rcv+0x72/0x150
[  247.808711][T19314]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  247.808739][T19314]  __netif_receive_skb+0x9e/0x270
[  247.808784][T19314]  ? tun_rx_batched+0xc7/0x430
[  247.808814][T19314]  netif_receive_skb+0x4b/0x2e0
[  247.808904][T19314]  ? should_failslab+0x8c/0xb0
[  247.808926][T19314]  ? tun_rx_batched+0xc7/0x430
[  247.808953][T19314]  tun_rx_batched+0xfc/0x430
[  247.809056][T19314]  tun_get_user+0x1ed0/0x2670
[  247.809088][T19314]  ? ref_tracker_alloc+0x1f2/0x2f0
[  247.809117][T19314]  tun_chr_write_iter+0x15e/0x210
[  247.809160][T19314]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  247.809202][T19314]  vfs_write+0x52a/0x960
[  247.809231][T19314]  ksys_write+0xda/0x1a0
[  247.809256][T19314]  __x64_sys_write+0x40/0x50
[  247.809290][T19314]  x64_sys_call+0x2847/0x3000
[  247.809350][T19314]  do_syscall_64+0xca/0x2b0
[  247.809381][T19314]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.809400][T19314] RIP: 0033:0x7f080942e1ff
[  247.809418][T19314] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  247.809443][T19314] RSP: 002b:00007f0807e97000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  247.809465][T19314] RAX: ffffffffffffffda RBX: 00007f0809685fa0 RCX: 00007f080942e1ff
[  247.809480][T19314] RDX: 000000000000006e RSI: 0000200000000640 RDI: 00000000000000c8
[  247.809495][T19314] RBP: 00007f0807e97090 R08: 0000000000000000 R09: 0000000000000000
[  247.809507][T19314] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001
[  247.809518][T19314] R13: 00007f0809686038 R14: 00007f0809685fa0 R15: 00007ffc957b6318
[  247.809639][T19314]  </TASK>
[  248.095572][T19323] __nla_validate_parse: 6 callbacks suppressed
[  248.095586][T19323] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3535'.
[  248.119351][T19323] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3535'.
[  248.133015][T19323] netlink: 664 bytes leftover after parsing attributes in process `syz.4.3535'.
[  248.282358][T19332] loop5: detected capacity change from 0 to 1024
[  248.289358][T19332] EXT4-fs: Ignoring removed nomblk_io_submit option
[  248.296185][T19332] ext4: Unknown parameter 'fsmagic'
[  248.387100][T19343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3539'.
[  248.774762][T19377] pimreg: entered allmulticast mode
[  248.791274][T19376] pimreg: left allmulticast mode
[  248.864565][ T3481] hid-generic 0002:0004:1000000.0024: unknown main item tag 0x0
[  248.878789][ T3481] hid-generic 0002:0004:1000000.0024: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  248.894954][T19388] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  249.033921][T19399] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3555'.
[  249.045606][T16997] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  249.056593][T16997] CPU: 1 UID: 0 PID: 16997 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  249.056658][T16997] Tainted: [W]=WARN
[  249.056669][T16997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  249.056687][T16997] Call Trace:
[  249.056697][T16997]  <TASK>
[  249.056707][T16997]  __dump_stack+0x1d/0x30
[  249.056739][T16997]  dump_stack_lvl+0x95/0xd0
[  249.056761][T16997]  dump_stack+0x15/0x1b
[  249.056794][T16997]  dump_header+0x81/0x240
[  249.056823][T16997]  oom_kill_process+0x295/0x350
[  249.056854][T16997]  out_of_memory+0x97b/0xb80
[  249.056927][T16997]  try_charge_memcg+0x610/0xa10
[  249.057056][T16997]  charge_memcg+0x51/0xc0
[  249.057088][T16997]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  249.057122][T16997]  __read_swap_cache_async+0x17b/0x2d0
[  249.057176][T16997]  swap_cluster_readahead+0x262/0x3c0
[  249.057224][T16997]  swapin_readahead+0xde/0x820
[  249.057278][T16997]  ? __rcu_read_unlock+0x4f/0x70
[  249.057302][T16997]  ? __perf_event_task_sched_in+0xa5b/0xac0
[  249.057342][T16997]  ? __rcu_read_unlock+0x4f/0x70
[  249.057369][T16997]  ? __rcu_read_unlock+0x4f/0x70
[  249.057395][T16997]  ? swap_cache_get_folio+0x277/0x280
[  249.057449][T16997]  do_swap_page+0x2b4/0x21e0
[  249.057487][T16997]  ? _raw_spin_unlock+0x26/0x50
[  249.057584][T16997]  ? __schedule+0x85f/0xcd0
[  249.057639][T16997]  ? __pfx_default_wake_function+0x10/0x10
[  249.057686][T16997]  handle_mm_fault+0x9d8/0x2c60
[  249.057748][T16997]  do_user_addr_fault+0x630/0x1080
[  249.057791][T16997]  exc_page_fault+0x62/0xa0
[  249.057821][T16997]  asm_exc_page_fault+0x26/0x30
[  249.057884][T16997] RIP: 0033:0x7f80741e1fc5
[  249.057901][T16997] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[  249.057926][T16997] RSP: 002b:00007ffd8ffb7c38 EFLAGS: 00010246
[  249.057947][T16997] RAX: 0000000000000000 RBX: 000000000000013e RCX: 00007f80741e1fc3
[  249.057965][T16997] RDX: 00007ffd8ffb7c50 RSI: 0000000000000000 RDI: 0000000000000000
[  249.058028][T16997] RBP: 00007ffd8ffb7cbc R08: 00000000352d7403 R09: 0000000000000000
[  249.058041][T16997] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  249.058123][T16997] R13: 00000000000927c0 R14: 000000000003cb05 R15: 00007ffd8ffb7d10
[  249.058207][T16997]  </TASK>
[  249.058216][T16997] memory: usage 307200kB, limit 307200kB, failcnt 29507
[  249.293940][T16997] memory+swap: usage 251724kB, limit 9007199254740988kB, failcnt 0
[  249.301842][T16997] kmem: usage 248484kB, limit 9007199254740988kB, failcnt 0
[  249.309191][T16997] Memory cgroup stats for /syz2:
[  249.311586][T16997] cache 0
[  249.319593][T16997] rss 4096
[  249.322759][T16997] shmem 0
[  249.325730][T16997] mapped_file 0
[  249.329271][T16997] dirty 0
[  249.332076][T19398] loop6: detected capacity change from 0 to 8192
[  249.332218][T16997] writeback 8192
[  249.332230][T16997] workingset_refault_anon 30
[  249.346899][T16997] workingset_refault_file 10049
[  249.351760][T16997] swap 172032
[  249.355139][T16997] swapcached 32768
[  249.358869][T16997] pgpgin 360816
[  249.362387][T16997] pgpgout 360806
[  249.365964][T16997] pgfault 347443
[  249.369587][T16997] pgmajfault 18
[  249.373069][T16997] inactive_anon 32768
[  249.377084][T16997] active_anon 4096
[  249.380820][T16997] inactive_file 0
[  249.384531][T16997] active_file 4096
[  249.388271][T16997] unevictable 0
[  249.391740][T16997] hierarchical_memory_limit 314572800
[  249.397358][T19398] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  249.408045][T16997] hierarchical_memsw_limit 9223372036854771712
[  249.414266][T16997] total_cache 0
[  249.417735][T16997] total_rss 4096
[  249.421300][T16997] total_shmem 0
[  249.424796][T16997] total_mapped_file 0
[  249.428809][T16997] total_dirty 0
[  249.432373][T16997] total_writeback 8192
[  249.436580][T16997] total_workingset_refault_anon 30
[  249.441755][T16997] total_workingset_refault_file 10049
[  249.447169][T16997] total_swap 172032
[  249.450997][T16997] total_swapcached 32768
[  249.455318][T16997] total_pgpgin 360816
[  249.459320][T16997] total_pgpgout 360806
[  249.463464][T16997] total_pgfault 347443
[  249.467634][T16997] total_pgmajfault 18
[  249.471683][T16997] total_inactive_anon 32768
[  249.476280][T16997] total_active_anon 4096
[  249.480551][T16997] total_inactive_file 0
[  249.484760][T16997] total_active_file 4096
[  249.489104][T16997] total_unevictable 0
[  249.493149][T16997] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3544,pid=19352,uid=0
[  249.507955][T16997] Memory cgroup out of memory: Killed process 19352 (syz.2.3544) total-vm:93968kB, anon-rss:1136kB, file-rss:22504kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0
[  249.668385][ T3396] hid_parser_main: 2 callbacks suppressed
[  249.668413][ T3396] hid-generic 0002:0004:1000000.0025: unknown main item tag 0x0
[  249.669965][T19419] loop6: detected capacity change from 0 to 1024
[  249.674528][ T3396] hid-generic 0002:0004:1000000.0025: unknown main item tag 0x0
[  249.696391][ T3396] hid-generic 0002:0004:1000000.0025: unknown main item tag 0x0
[  249.705746][T19419] EXT4-fs: Ignoring removed nomblk_io_submit option
[  249.720105][T19419] ext4: Unknown parameter 'fsmagic'
[  249.742330][T19430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3565'.
[  249.754844][ T3396] hid-generic 0002:0004:1000000.0025: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  249.863110][T19443] loop4: detected capacity change from 0 to 8192
[  249.882677][T19443] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  249.983542][T19450] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  250.062557][   T29] kauditd_printk_skb: 453 callbacks suppressed
[  250.062571][   T29] audit: type=1326 audit(250.031:34289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19449 comm="syz.5.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f080942f749 code=0x7ffc0000
[  250.157336][   T29] audit: type=1326 audit(250.081:34290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19444 comm="syz.5.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f08093cb829 code=0x7ffc0000
[  250.180586][   T29] audit: type=1326 audit(250.081:34291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19444 comm="syz.5.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080942f749 code=0x7ffc0000
[  250.203747][   T29] audit: type=1326 audit(250.081:34292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19444 comm="syz.5.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080942f749 code=0x7ffc0000
[  250.294976][T19471] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3576'.
[  250.535142][T19492] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3585'.
[  250.633903][T19489] ==================================================================
[  250.642053][T19489] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64
[  250.651907][T19489] 
[  250.654256][T19489] read-write to 0xffffffff86809a00 of 8 bytes by interrupt on cpu 0:
[  250.662346][T19489]  tick_do_update_jiffies64+0x113/0x1c0
[  250.667922][T19489]  tick_nohz_handler+0x8d/0x3d0
[  250.672818][T19489]  __hrtimer_run_queues+0x20f/0x5a0
[  250.678052][T19489]  hrtimer_interrupt+0x21a/0x460
[  250.683065][T19489]  __sysvec_apic_timer_interrupt+0x5f/0x1d0
[  250.689000][T19489]  sysvec_apic_timer_interrupt+0x6f/0x80
[  250.694669][T19489]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  250.700695][T19489]  __sanitizer_cov_trace_const_cmp4+0x8/0x90
[  250.706719][T19489]  may_open+0x2f3/0x350
[  250.710926][T19489]  path_openat+0x1d29/0x23b0
[  250.715551][T19489]  do_filp_open+0x109/0x230
[  250.720083][T19489]  do_sys_openat2+0xa6/0x150
[  250.724699][T19489]  __x64_sys_openat+0xf2/0x120
[  250.729484][T19489]  x64_sys_call+0x2b07/0x3000
[  250.734180][T19489]  do_syscall_64+0xca/0x2b0
[  250.738801][T19489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.744707][T19489] 
[  250.747058][T19489] read to 0xffffffff86809a00 of 8 bytes by task 19489 on cpu 1:
[  250.754706][T19489]  mem_cgroup_flush_stats_ratelimited+0x29/0x70
[  250.761006][T19489]  count_shadow_nodes+0x6a/0x230
[  250.765981][T19489]  do_shrink_slab+0x63/0x680
[  250.770600][T19489]  shrink_slab+0x4f5/0x840
[  250.775033][T19489]  shrink_node+0x6a9/0x2010
[  250.779554][T19489]  do_try_to_free_pages+0x3f6/0xcd0
[  250.784771][T19489]  try_to_free_mem_cgroup_pages+0x1ab/0x410
[  250.790790][T19489]  try_charge_memcg+0x383/0xa10
[  250.795669][T19489]  charge_memcg+0x51/0xc0
[  250.800020][T19489]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  250.806043][T19489]  __read_swap_cache_async+0x17b/0x2d0
[  250.811528][T19489]  swap_cluster_readahead+0x262/0x3c0
[  250.816921][T19489]  swapin_readahead+0xde/0x820
[  250.821702][T19489]  do_swap_page+0x2b4/0x21e0
[  250.826340][T19489]  handle_mm_fault+0x9d8/0x2c60
[  250.831234][T19489]  do_user_addr_fault+0x630/0x1080
[  250.836387][T19489]  exc_page_fault+0x62/0xa0
[  250.840930][T19489]  asm_exc_page_fault+0x26/0x30
[  250.845806][T19489] 
[  250.848145][T19489] value changed: 0x00000000ffffec7b -> 0x00000000ffffec7c
[  250.855262][T19489] 
[  250.857598][T19489] Reported by Kernel Concurrency Sanitizer on:
[  250.863760][T19489] CPU: 1 UID: 0 PID: 19489 Comm: syz.2.3584 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  250.875149][T19489] Tainted: [W]=WARN
[  250.878975][T19489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  250.889127][T19489] ==================================================================
[  250.956630][T19501] netlink: 'syz.5.3587': attribute type 1 has an invalid length.
[  251.001834][T19501] bond1: entered promiscuous mode
[  251.021799][T19501] 8021q: adding VLAN 0 to HW filter on device bond1
[  251.056834][T19535] bond1: (slave bridge1): making interface the new active one
[  251.064419][T19535] bridge1: entered promiscuous mode
[  251.086434][T19535] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  251.108671][T19501] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10)
[  251.115471][T19501] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  251.122971][T19501] vhci_hcd vhci_hcd.0: Device attached
[  251.160768][T19538] vhci_hcd: connection closed
[  251.160951][ T1824] vhci_hcd vhci_hcd.5: stop threads
[  251.171048][ T1824] vhci_hcd vhci_hcd.5: release socket
[  251.176484][ T1824] vhci_hcd vhci_hcd.5: disconnect device
crond[3105]: time disparity of -29468577 minutes detected