last executing test programs:

1m24.242897891s ago: executing program 1 (id=1022):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x14, &(0x7f00000001c0), 0x10}, 0x94)

1m24.205099792s ago: executing program 1 (id=1025):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xf7d4, 0x8, 0x1, 0x8001, 0x8, 0x80b, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==")
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0, 0xebec93e830f96115})
prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
socket$kcm(0x11, 0xa, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socket$key(0xf, 0x3, 0x2)

1m23.775178441s ago: executing program 1 (id=1029):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x81, 0x0, 0x1, 0x2000100, 0x0})
ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0)

1m23.392611058s ago: executing program 1 (id=1033):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getpgrp(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x80, &(0x7f0000000480), 0x1, 0x3f5, &(0x7f00000004c0)="$eJzs3N1qHFUcAPD/TDeJTasbtXqhhUaKGPzIR1PSBgsqeOmV9QVikpbotrFNBFtyYUHsA2gfQLxsH8EL8U4QvClee6cUiiS5lshsZpNJsps2H+tU5/eDgXPmg3P+M7N7zp5z2AAqazAivoyI3oj4JCLq+f4k3+Ld9S07b3V5aTrbklhbu/hX0jy+srw0HYVrMsfyzFAakX6VxMttyl24cfPTqUZj9nqeH1m88tnIwo2bb81dmbo8e3n26vjo5OTo+PmJyYlDi/WPuP37hfvv17/55fRvP3384URW3+P5sWIch2UwBjfuyXbDh11YyZ4qpJNaiRVhT9KIOBIRtebnvx5HYvPh1eOHeqmVAwC6Ym3tnW15AOD/L9HmA0DFtH73rywvTbe2MsYhyvLwvfXJq5V8bnN1I/7axkxIz7b5rcM0GBH37pw7lW2x6zxk2qUaAABV82PW/znfrv+XxsnCeUcjoj9f23U8Ip6OiGcK68X2a3Bbfmf/J31wwCJ2lfX/LhTWtq0W4s8NHMlzWcwD0ZNcmmvMjubxD0VPX5Yf26WMkxdf/LvTsWL/717t3Kms/FZfMK/Hg1rf1mtmphanDhJz0cNbES/V2sWfbPR/k2bcHdx6dBlvX7v7QqdjW+K/0y7+7lr7LuK1ts9/c+Vesvv6xJHm+zDSeit2uv36q9c6lV92/Nnz7989/oGkuF5zYe9l/Hx27tdOxx4df/v3vzf5qJnuzfd9MbW4eH0sojf5YOf+M5vXtvKt87P4h063//yfiM078WxEPBcRz0c093d8odt4s/H9K/uPv7uy+Gf29Pz3nuj/+u79TuW3jX/LT93s+Z9tpobyPY/z/fe4Fdz/nQMAAID/jrQ5npukwxvpNB0eXh/nPRH9aWN+YfGNS/OfX51ZH/cdiJ60NdJVL4yHjuVjhK38mW358XwM5du+o8388PR8Y6bs4AGgoo51aP8zf/aVXTsAoGu6tbgdAHhyaf8BoHq0/wBQPdp/AKge7T8AVI/2HwAq5SD/61eFRBpPRDUkJP7lRNnfTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5fonAAD//2Wz014=")
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r4 = socket$inet6(0xa, 0x3, 0x9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r6, 0x4, 0xffffffff, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000091}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0x2, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
r7 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r7, &(0x7f0000000b80)=[{{&(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c00000000000000000000000700000044181533"], 0x30}}], 0x1, 0x4040)
write$binfmt_register(r1, &(0x7f0000000340)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46, 0x43]}, 0x2b)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x10)

1m22.381306539s ago: executing program 1 (id=1052):
socket$inet(0xa, 0x801, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, {0x2}})
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0)

1m22.024725155s ago: executing program 1 (id=1059):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c00000000000000000000000700000044181533"], 0x30}}], 0x1, 0x4040)

1m22.012282645s ago: executing program 32 (id=1059):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c00000000000000000000000700000044181533"], 0x30}}], 0x1, 0x4040)

13.609750512s ago: executing program 4 (id=2614):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0], 0x50)
r1 = socket$inet6(0xa, 0x3, 0x5)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
r3 = dup3(r2, r1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000}}], 0x18}}], 0x1, 0x810)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r5, 0x0, 0x4}, 0x18)
r6 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000900)=""/4097, 0x1001}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}, {&(0x7f0000000100)=""/153, 0x99}, {&(0x7f00000001c0)=""/174, 0xae}, {&(0x7f0000000040)=""/37, 0x25}], 0x6}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)

13.510289254s ago: executing program 4 (id=2617):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[], 0x10}}, 0x14)

13.449223616s ago: executing program 4 (id=2619):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xf7d4, 0x8, 0x1, 0x8001, 0x8, 0x80b, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xebec93e830f96115})
prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x11, 0xa, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socket$key(0xf, 0x3, 0x2)

13.19871854s ago: executing program 4 (id=2633):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x7e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x3c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000d10040c41090ead1d6f984000109022400010000000009040000010300000009210000000122030009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00\b\f9'], 0x0, 0x0, 0x0, 0x0}, 0x0)
socket(0x10, 0x3, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x46, 0x8, 0xfffffffffffffffd, 0x3f})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r1 = inotify_init1(0x0)
fcntl$setstatus(r1, 0x4, 0x2800)
r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262)

12.266222999s ago: executing program 4 (id=2654):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000340)="00214717a70700000000030600710a5eeb9d04710400bbd6e76880000000005c786d17fd8beb29b773c0c6b84caec25c498e", 0x32}], 0x1, 0xee, 0x4000004)

11.329983327s ago: executing program 4 (id=2668):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xf7d4, 0x8, 0x1, 0x8001, 0x8, 0x80b, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xebec93e830f96115})
prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x11, 0xa, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socket$key(0xf, 0x3, 0x2)

11.329887447s ago: executing program 33 (id=2668):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xf7d4, 0x8, 0x1, 0x8001, 0x8, 0x80b, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xebec93e830f96115})
prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x11, 0xa, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socket$key(0xf, 0x3, 0x2)

3.04090556s ago: executing program 2 (id=2786):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x18, 0x0, 0x2}, 0x28)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.140000838s ago: executing program 2 (id=2794):
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!\x00'/14], 0x48)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r5, 0x0)

1.444113001s ago: executing program 6 (id=2818):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x3, [@func={0x10, 0x0, 0x0, 0xc, 0x4}, @union={0x7, 0x3, 0x0, 0x5, 0x0, 0x6, [{0xb, 0x3, 0x2}, {0xa, 0x2, 0x8}, {0xe, 0x1, 0x8308}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x8, 0x2}, {0x0, 0x3}]}]}, {0x0, [0x30]}}, &(0x7f0000000380)=""/20, 0x73, 0x14, 0x1, 0x5}, 0x28)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@setneightbl={0x24, 0x43, 0x1, 0xffff7ffe, 0x0, {0xa}, [@NDTA_NAME={0xf, 0x1, '\xaa\xaa\xaa\xaa\xaa\xc47\xa5m\"0'}]}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d576c0008000000040000000800", @ANYRES64=r5], 0x24}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000002}}]}}]}, 0x58}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140))
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r8}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r9, 0x0, 0xfffffffffffffffe}, 0x18)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0xff7f, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0)
ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f00000000c0)=0x41)
ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000080)=0x8000000)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r12, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
ioctl$SIOCGETVIFCNT(r12, 0x89e0, &(0x7f00000000c0)={0xffffffffffffffff})
setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4)

1.362815913s ago: executing program 3 (id=2820):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000220000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000957a07743fb594fc05fb33940b2d8bda7a3a75fbdef5becd88fe25d4b7933b4fcb51c0cc93746903d083f08ce0ab24476bcccf5257c4841294cd3661728e4b1c12d8a8e65e4fea04448aeecd3d16ee1dfd1a089ef61a2197c16b7253c840ba645165d69f7f89659634f06e35d1d521e1afc1766d110b726735412a9dd0e6ef6c7f9fe04adb0d903c08fcd7d46c7d280151ed3734cc3261930be2bc340e6ff8a3"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={<r3=>0x0, @loopback, @broadcast}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000f5a6838f64a7c565af749d340228c5cdf3402c7d7078d02f23141f045e8444ea3e9059e1eaf69000685dc7b332c55cabdd188afee1d8a7b7004f7fd742adf9eecb8b6c89ab881eb2f2ffa2a20a3cc4da2e1a5f9644db", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fchdir(r7)
r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0)
write(r8, &(0x7f0000000300)="2cd889f035a53e14f3d5ac", 0xb)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x8], 0x0, 0x0, 0x1}}, 0x40)
r11 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r11, 0x2007ffb)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10b, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r12}, 0x10)
r13 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_access(r13, &(0x7f0000000400)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6472b6e3325f657865635f743a733020756e636f6e66696e65640597eaea1c77939856da355120303030304f303030303030303030303030"], 0x42)

1.313766324s ago: executing program 3 (id=2824):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58)

1.216569576s ago: executing program 3 (id=2826):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) (fail_nth: 4)

1.164944237s ago: executing program 2 (id=2828):
perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x30190, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a45, 0x1, @perf_bp={0x0, 0x2}, 0x12ba4, 0x5, 0x0, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
pwritev(r0, 0x0, 0x0, 0xee, 0x4000004)

971.316941ms ago: executing program 5 (id=2829):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80)

970.63531ms ago: executing program 3 (id=2830):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58)

967.549401ms ago: executing program 0 (id=2831):
perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCL_BLANKSCREEN(r2, 0x4b67, &(0x7f0000000180))

909.886132ms ago: executing program 5 (id=2832):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x82, &(0x7f0000000840)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1b5df2", 0x4c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x13, 0x10, 0x0, 0x0, 0x2, {[@sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @eol, @md5sig={0x13, 0x12, "24099582ea9a5037381707a44a42c70b"}, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0x2}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x3, '='}, @timestamp={0x8, 0xa, 0x28000000, 0x9}]}}}}}}}}, 0x0)

879.230593ms ago: executing program 2 (id=2833):
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2, 0xd7, 0x8c, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}})
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0)
getrlimit(0x5, &(0x7f00000000c0))
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r1, 0x0, 0x2}, 0x18)
r3 = creat(&(0x7f00000009c0)='./file0/file0\x00', 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0c0100001000130428bd700000000000e0000001000000000000000000000000000000000000000000000000000000014e2100004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000001000000003c0000000a0101000000000000000000000000000400000000000000060000000000000002000000000000000400000000004000ffffffffffffffff03000000000000007f00000000000000000000000000000000000000000000000800150000000000cc000000000000000000000000000000f600000000000000000000002abd7000000000000200010500000000000000001c00040002004e2100270000fe880000000000000000000000000101"], 0x10c}}, 0x804)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x60, 0x0, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x384}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xde1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4254}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88b5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}]}, 0x60}}, 0x8000)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20)
r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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")
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18)
r8 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x8003, 0x1c2}, &(0x7f0000000040)=<r9=>0x0, &(0x7f0000000680)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1})
io_uring_enter(r8, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0)

878.836132ms ago: executing program 0 (id=2834):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, 0x0)
mq_timedreceive(r3, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)

835.171973ms ago: executing program 0 (id=2835):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f00000003c0)=@x25, 0x80, &(0x7f0000000c00)=[{&(0x7f00000004c0)=""/141, 0x8d}, {&(0x7f0000000580)=""/66, 0x42}, {&(0x7f0000000740)=""/127, 0x7f}, {&(0x7f0000000a00)=""/232, 0xe8}, {&(0x7f00000007c0)=""/179, 0xb3}, {&(0x7f0000000940)=""/108, 0x6c}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/240, 0xf0}], 0x8, &(0x7f0000003480)=""/4096, 0x1000}, 0x81}], 0x1, 0x2, 0x0)
sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20004014}, 0x0)

834.677123ms ago: executing program 3 (id=2836):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getxattr(0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c833, 0xffffffffffffffff, 0x0)
lsm_list_modules(&(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000400)=0x10, 0x0)
ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c0000000306050000000000200000000000000605000100070000002ec559a574155c67526d8fae41ced83ae2b9e7d5541f70b1ccfe98ff52"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\xff\x01\x00\x00\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\x0f\x1b:\xff\x11~')
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000001f80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x7ff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)='X', 0x1}], 0x1}}], 0x1, 0x4000001)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

790.337714ms ago: executing program 5 (id=2837):
r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8)
r2 = dup(r1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
sendfile(r2, r0, 0x0, 0x8000fffffffc)

786.852564ms ago: executing program 0 (id=2838):
r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8)
r2 = dup(r1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
sendfile(r2, r0, 0x0, 0x8000fffffffc)

771.362795ms ago: executing program 3 (id=2839):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, &(0x7f0000001040))
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
mmap$qrtrtun(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x100010, r3, 0x100000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b008000"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000010000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000840000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400004d44e5c585000000820000009500000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(r6, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0x20000014})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x400)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r9, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x18}}, 0x40000)
r11 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$SG_IO(r12, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})

603.531308ms ago: executing program 6 (id=2840):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x8, 0x47, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[r0], &(0x7f0000000440)=[{0x4, 0x2, 0x5, 0xe}, {0x0, 0x3, 0x0, 0xb}, {0x4, 0x1, 0x0, 0xa342ee5f8a52f168}], 0x10, 0x3}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18)
r6 = socket(0x3, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r6, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10)
write$selinux_access(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030", @ANYRESHEX, @ANYRES64=r1, @ANYRESHEX=r5, @ANYRES8=r5], 0x56)

405.072072ms ago: executing program 0 (id=2841):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000600)=<r4=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}})
io_uring_enter(r2, 0x3516, 0xf420, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000018000000bfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff0000000015040000000002000f040000000000003404ffc101ed0a0065040000170000801f400000000000007b0a00fe000000002c04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9"], 0x0}, 0x94)

356.055983ms ago: executing program 6 (id=2842):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000220000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000957a07743fb594fc05fb33940b2d8bda7a3a75fbdef5becd88fe25d4b7933b4fcb51c0cc93746903d083f08ce0ab24476bcccf5257c4841294cd3661728e4b1c12d8a8e65e4fea04448aeecd3d16ee1dfd1a089ef61a2197c16b7253c840ba645165d69f7f89659634f06e35d1d521e1afc1766d110b726735412a9dd0e6ef6c7f9fe04adb0d903c08fcd7d46c7d280151ed3734cc3261930be2bc340e6ff8a3"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={<r3=>0x0, @loopback, @broadcast}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000f5a6838f64a7c565af749d340228c5cdf3402c7d7078d02f23141f045e8444ea3e9059e1eaf69000685dc7b332c55cabdd188afee1d8a7b7004f7fd742adf9eecb8b6c89ab881eb2f2ffa2a20a3cc4da2e1a5f9644db", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fchdir(r7)
r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0)
write(r8, &(0x7f0000000300)="2cd889f035a53e14f3d5ac", 0xb)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x8], 0x0, 0x0, 0x1}}, 0x40)
r11 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r11, 0x2007ffb)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10b, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r12}, 0x10)
r13 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_access(r13, &(0x7f0000000400)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6472b6e3325f657865635f743a733020756e636f6e66696e65640597eaea1c77939856da355120303030304f303030303030303030303030"], 0x42)

355.758953ms ago: executing program 5 (id=2843):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1600020100000000"], 0x8)

354.730853ms ago: executing program 2 (id=2844):
r0 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil)
shmctl$IPC_INFO(r0, 0x3, &(0x7f00000004c0)=""/236)

284.916474ms ago: executing program 6 (id=2845):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000002db, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0x110, &(0x7f00000002c0)={0x0, 0xb358, 0x0, 0x210000, 0x3e}, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)

284.687064ms ago: executing program 5 (id=2846):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f00000000c0)={0x9, 0x1, 0x5, 0x7f, 0x4924924924925e5})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={&(0x7f0000000180)='kfree\x00', r3}, 0x18)
ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

279.853924ms ago: executing program 2 (id=2847):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x1, 'netdevsim0\x00', {}, 0x6})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
write(r6, &(0x7f00000001c0)="f14a18f6913026", 0x7)
sendfile(r6, r4, 0x0, 0x40001)
sendfile(r6, r5, 0x0, 0x7ffff000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000100008558e2bf2a0000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r8 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r8, 0x0, 0x3, 0x0, 0x0)
sendmmsg$inet(r8, &(0x7f0000007140)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, 0x0}}, {{&(0x7f00000003c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x18}}], 0x2, 0x404c890)
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x10000f, &(0x7f0000000600)={[{@block_validity}]}, 0x3, 0x459, &(0x7f0000001400)="$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")
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYRESHEX=r1, @ANYRES16=r2, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003e34319e2ad9d47b73c30a5cb98c35f594c259cb30c757c75ad05389c8a750b6c8bea92d9e70898cb84bb8e7c8bcb6f1"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r9}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='test_pages_isolated\x00', r7, 0x0, 0x7f}, 0x18)

261.655255ms ago: executing program 6 (id=2848):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getxattr(0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c833, 0xffffffffffffffff, 0x0)
lsm_list_modules(&(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000400)=0x10, 0x0)
ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c0000000306050000000000200000000000000605000100070000002ec559a574155c67526d8fae41ced83ae2b9e7d5541f70b1ccfe98ff52"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\xff\x01\x00\x00\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\x0f\x1b:\xff\x11~')
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
socket$inet6_sctp(0xa, 0x801, 0x84)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

191.497386ms ago: executing program 0 (id=2849):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x7e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x3c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=")
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000d10040c41090ead1d6f984000109022400010000000009040000010300000009210000000122030009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00\b\f9'], 0x0, 0x0, 0x0, 0x0}, 0x0)
socket(0x10, 0x3, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x46, 0x8, 0xfffffffffffffffd, 0x3f})
mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262)

190.915206ms ago: executing program 6 (id=2850):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x1, 'netdevsim0\x00', {}, 0x6})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
write(r6, &(0x7f00000001c0)="f14a18f6913026", 0x7)
sendfile(r6, r4, 0x0, 0x40001)
sendfile(r6, r5, 0x0, 0x7ffff000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000100008558e2bf2a0000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r8 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r8, 0x0, 0x3, 0x0, 0x0)
sendmmsg$inet(r8, &(0x7f0000007140)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, 0x0}}, {{&(0x7f00000003c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x18}}], 0x2, 0x404c890)
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x10000f, &(0x7f0000000600)={[{@block_validity}]}, 0x3, 0x459, &(0x7f0000001400)="$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")
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYRESHEX=r1, @ANYRES16=r2, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003e34319e2ad9d47b73c30a5cb98c35f594c259cb30c757c75ad05389c8a750b6c8bea92d9e70898cb84bb8e7c8bcb6f1"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r9, <r10=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

0s ago: executing program 5 (id=2851):
perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x30190, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a45, 0x1, @perf_bp={0x0, 0x2}, 0x12ba4, 0x5, 0x0, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0xee, 0x4000004)

kernel console output (not intermixed with test programs):

][ T9287] macsec0: entered promiscuous mode
[  127.073307][ T9287] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2139'.
[  127.084059][ T9280] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152)
[  127.091915][ T9280] FAT-fs (loop2): Filesystem has been set read-only
[  127.110918][ T9280] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152)
[  127.276514][ T9295] lo speed is unknown, defaulting to 1000
[  127.285750][ T9308] loop2: detected capacity change from 0 to 256
[  127.315496][ T9308] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  127.324360][ T9308] FAT-fs (loop2): Filesystem has been set read-only
[  127.393338][ T9313] loop5: detected capacity change from 0 to 1024
[  127.404801][ T9317] loop3: detected capacity change from 0 to 1024
[  127.414464][ T9313] EXT4-fs: Ignoring removed bh option
[  127.420552][ T9317] EXT4-fs: Ignoring removed bh option
[  127.427216][ T9313] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  127.453624][ T9321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.462131][ T9321] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.470092][ T9317] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  127.536513][ T9327] lo speed is unknown, defaulting to 1000
[  127.571761][ T9330] loop5: detected capacity change from 0 to 256
[  127.585530][ T9334] FAULT_INJECTION: forcing a failure.
[  127.585530][ T9334] name failslab, interval 1, probability 0, space 0, times 0
[  127.598319][ T9334] CPU: 1 UID: 0 PID: 9334 Comm: syz.3.2163 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  127.598352][ T9334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  127.598367][ T9334] Call Trace:
[  127.598375][ T9334]  <TASK>
[  127.598385][ T9334]  __dump_stack+0x1d/0x30
[  127.598409][ T9334]  dump_stack_lvl+0xe8/0x140
[  127.598433][ T9334]  dump_stack+0x15/0x1b
[  127.598531][ T9334]  should_fail_ex+0x265/0x280
[  127.598563][ T9334]  should_failslab+0x8c/0xb0
[  127.598596][ T9334]  __kmalloc_noprof+0xa5/0x3e0
[  127.598682][ T9334]  ? bpf_ctx_init+0x87/0x170
[  127.598766][ T9334]  bpf_ctx_init+0x87/0x170
[  127.598795][ T9334]  bpf_prog_test_run_flow_dissector+0x157/0x340
[  127.598833][ T9334]  ? kstrtouint+0x76/0xc0
[  127.598895][ T9334]  ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10
[  127.599035][ T9334]  bpf_prog_test_run+0x22a/0x390
[  127.599139][ T9334]  __sys_bpf+0x4b9/0x7b0
[  127.599184][ T9334]  __x64_sys_bpf+0x41/0x50
[  127.599216][ T9334]  x64_sys_call+0x2aea/0x2ff0
[  127.599306][ T9334]  do_syscall_64+0xd2/0x200
[  127.599345][ T9334]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  127.599378][ T9334]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  127.599480][ T9334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.599509][ T9334] RIP: 0033:0x7efeb379eec9
[  127.599528][ T9334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.599551][ T9334] RSP: 002b:00007efeb21ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  127.599631][ T9334] RAX: ffffffffffffffda RBX: 00007efeb39f5fa0 RCX: 00007efeb379eec9
[  127.599648][ T9334] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 000000000000000a
[  127.599664][ T9334] RBP: 00007efeb21ff090 R08: 0000000000000000 R09: 0000000000000000
[  127.599678][ T9334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.599689][ T9334] R13: 00007efeb39f6038 R14: 00007efeb39f5fa0 R15: 00007ffeaf6da0f8
[  127.599708][ T9334]  </TASK>
[  127.861844][ T9330] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152)
[  127.869732][ T9330] FAT-fs (loop5): Filesystem has been set read-only
[  127.892213][ T9330] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152)
[  127.949949][ T9345] lo speed is unknown, defaulting to 1000
[  127.973024][ T9347] loop5: detected capacity change from 0 to 512
[  128.023338][ T9347] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.051547][ T9356] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.061916][ T9356] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.098074][ T9356] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.108481][ T9356] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.187958][ T9356] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.198528][ T9356] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.278614][ T9368] loop2: detected capacity change from 0 to 1024
[  128.289348][ T9356] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.300009][ T9356] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.304694][ T9368] EXT4-fs: inline encryption not supported
[  128.347095][ T9370] FAULT_INJECTION: forcing a failure.
[  128.347095][ T9370] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  128.360378][ T9370] CPU: 0 UID: 0 PID: 9370 Comm: syz.5.2175 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  128.360411][ T9370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  128.360479][ T9370] Call Trace:
[  128.360484][ T9370]  <TASK>
[  128.360491][ T9370]  __dump_stack+0x1d/0x30
[  128.360592][ T9370]  dump_stack_lvl+0xe8/0x140
[  128.360612][ T9370]  dump_stack+0x15/0x1b
[  128.360628][ T9370]  should_fail_ex+0x265/0x280
[  128.360658][ T9370]  should_fail+0xb/0x20
[  128.360752][ T9370]  should_fail_usercopy+0x1a/0x20
[  128.360783][ T9370]  _copy_to_user+0x20/0xa0
[  128.360901][ T9370]  bpf_test_finish+0x106/0x500
[  128.360926][ T9370]  ? ktime_get+0x1eb/0x210
[  128.360961][ T9370]  bpf_prog_test_run_flow_dissector+0x2b5/0x340
[  128.361010][ T9370]  ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10
[  128.361072][ T9370]  bpf_prog_test_run+0x22a/0x390
[  128.361105][ T9370]  __sys_bpf+0x4b9/0x7b0
[  128.361149][ T9370]  __x64_sys_bpf+0x41/0x50
[  128.361176][ T9370]  x64_sys_call+0x2aea/0x2ff0
[  128.361269][ T9370]  do_syscall_64+0xd2/0x200
[  128.361298][ T9370]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  128.361341][ T9370]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  128.361372][ T9370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.361402][ T9370] RIP: 0033:0x7f8c9880eec9
[  128.361421][ T9370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.361444][ T9370] RSP: 002b:00007f8c97277038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  128.361523][ T9370] RAX: ffffffffffffffda RBX: 00007f8c98a65fa0 RCX: 00007f8c9880eec9
[  128.361536][ T9370] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 000000000000000a
[  128.361588][ T9370] RBP: 00007f8c97277090 R08: 0000000000000000 R09: 0000000000000000
[  128.361599][ T9370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.361624][ T9370] R13: 00007f8c98a66038 R14: 00007f8c98a65fa0 R15: 00007ffe970dbf08
[  128.361644][ T9370]  </TASK>
[  128.372998][ T3673] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  128.376590][ T9368] EXT4-fs: Ignoring removed mblk_io_submit option
[  128.383627][ T3673] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.672317][ T9374] lo speed is unknown, defaulting to 1000
[  128.709124][ T9380] loop4: detected capacity change from 0 to 256
[  128.718190][ T9380] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  128.727161][ T9380] FAT-fs (loop4): Filesystem has been set read-only
[  128.750900][ T3673] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.759181][ T3673] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.902147][ T3673] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.910511][ T3673] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.962805][ T3673] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.971095][ T3673] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.028912][ T9403] sd 0:0:1:0: device reset
[  129.070010][ T9408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2186'.
[  129.079084][ T9408] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2186'.
[  129.088149][ T9408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2186'.
[  129.129901][ T9407] loop3: detected capacity change from 0 to 512
[  129.156291][ T9407] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  129.170984][ T9408] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2186'.
[  129.180018][ T9408] netlink: 'syz.5.2186': attribute type 6 has an invalid length.
[  129.213160][ T9407] EXT4-fs (loop3): 1 truncate cleaned up
[  129.298599][ T9423] FAULT_INJECTION: forcing a failure.
[  129.298599][ T9423] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  129.311729][ T9423] CPU: 0 UID: 0 PID: 9423 Comm: syz.5.2190 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  129.311809][ T9423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  129.311823][ T9423] Call Trace:
[  129.311829][ T9423]  <TASK>
[  129.311837][ T9423]  __dump_stack+0x1d/0x30
[  129.311859][ T9423]  dump_stack_lvl+0xe8/0x140
[  129.311929][ T9423]  dump_stack+0x15/0x1b
[  129.311995][ T9423]  should_fail_ex+0x265/0x280
[  129.312026][ T9423]  should_fail+0xb/0x20
[  129.312067][ T9423]  should_fail_usercopy+0x1a/0x20
[  129.312154][ T9423]  _copy_from_user+0x1c/0xb0
[  129.312271][ T9423]  ___sys_sendmsg+0xc1/0x1d0
[  129.312311][ T9423]  __x64_sys_sendmsg+0xd4/0x160
[  129.312339][ T9423]  x64_sys_call+0x191e/0x2ff0
[  129.312366][ T9423]  do_syscall_64+0xd2/0x200
[  129.312419][ T9423]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  129.312443][ T9423]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  129.312475][ T9423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.312571][ T9423] RIP: 0033:0x7f8c9880eec9
[  129.312595][ T9423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.312631][ T9423] RSP: 002b:00007f8c97277038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  129.312656][ T9423] RAX: ffffffffffffffda RBX: 00007f8c98a65fa0 RCX: 00007f8c9880eec9
[  129.312669][ T9423] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004
[  129.312681][ T9423] RBP: 00007f8c97277090 R08: 0000000000000000 R09: 0000000000000000
[  129.312696][ T9423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  129.312776][ T9423] R13: 00007f8c98a66038 R14: 00007f8c98a65fa0 R15: 00007ffe970dbf08
[  129.312793][ T9423]  </TASK>
[  129.670731][ T9399] FAULT_INJECTION: forcing a failure.
[  129.670731][ T9399] name failslab, interval 1, probability 0, space 0, times 0
[  129.683427][ T9399] CPU: 0 UID: 0 PID: 9399 Comm: syz.4.2185 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  129.683543][ T9399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  129.683560][ T9399] Call Trace:
[  129.683568][ T9399]  <TASK>
[  129.683584][ T9399]  __dump_stack+0x1d/0x30
[  129.683657][ T9399]  dump_stack_lvl+0xe8/0x140
[  129.683686][ T9399]  dump_stack+0x15/0x1b
[  129.683709][ T9399]  should_fail_ex+0x265/0x280
[  129.683743][ T9399]  should_failslab+0x8c/0xb0
[  129.683802][ T9399]  kmem_cache_alloc_node_noprof+0x57/0x320
[  129.683843][ T9399]  ? __alloc_skb+0x101/0x320
[  129.683870][ T9399]  __alloc_skb+0x101/0x320
[  129.683894][ T9399]  ? audit_log_start+0x365/0x6c0
[  129.683961][ T9399]  audit_log_start+0x380/0x6c0
[  129.684061][ T9399]  audit_seccomp+0x48/0x100
[  129.684196][ T9399]  ? __seccomp_filter+0x68c/0x10d0
[  129.684227][ T9399]  __seccomp_filter+0x69d/0x10d0
[  129.684257][ T9399]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  129.684293][ T9399]  ? vfs_write+0x7e8/0x960
[  129.684387][ T9399]  ? __rcu_read_unlock+0x4f/0x70
[  129.684416][ T9399]  ? __fget_files+0x184/0x1c0
[  129.684453][ T9399]  __secure_computing+0x82/0x150
[  129.684481][ T9399]  syscall_trace_enter+0xcf/0x1e0
[  129.684600][ T9399]  do_syscall_64+0xac/0x200
[  129.684640][ T9399]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  129.684684][ T9399]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  129.684796][ T9399]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.684825][ T9399] RIP: 0033:0x7f85e508eec9
[  129.684844][ T9399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.684869][ T9399] RSP: 002b:00007f85e3af7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098
[  129.684894][ T9399] RAX: ffffffffffffffda RBX: 00007f85e52e5fa0 RCX: 00007f85e508eec9
[  129.684950][ T9399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  129.684962][ T9399] RBP: 00007f85e3af7090 R08: 0000000000000000 R09: 0000000000000000
[  129.684979][ T9399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  129.684995][ T9399] R13: 00007f85e52e6038 R14: 00007f85e52e5fa0 R15: 00007ffe936707f8
[  129.685017][ T9399]  </TASK>
[  129.908961][ T9440] lo speed is unknown, defaulting to 1000
[  130.062502][ T9455] loop5: detected capacity change from 0 to 256
[  130.085688][ T9455] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  130.094454][ T9455] FAT-fs (loop5): Filesystem has been set read-only
[  130.101198][ T9447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2200'.
[  130.110274][ T9447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2200'.
[  130.120134][ T9447] netlink: 'syz.3.2200': attribute type 6 has an invalid length.
[  130.167002][ T9449] lo speed is unknown, defaulting to 1000
[  130.352024][ T9465] FAULT_INJECTION: forcing a failure.
[  130.352024][ T9465] name failslab, interval 1, probability 0, space 0, times 0
[  130.364807][ T9465] CPU: 0 UID: 0 PID: 9465 Comm: syz.4.2206 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  130.364848][ T9465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  130.364862][ T9465] Call Trace:
[  130.364869][ T9465]  <TASK>
[  130.364878][ T9465]  __dump_stack+0x1d/0x30
[  130.364920][ T9465]  dump_stack_lvl+0xe8/0x140
[  130.364939][ T9465]  dump_stack+0x15/0x1b
[  130.364956][ T9465]  should_fail_ex+0x265/0x280
[  130.364984][ T9465]  should_failslab+0x8c/0xb0
[  130.365052][ T9465]  kmem_cache_alloc_noprof+0x50/0x310
[  130.365085][ T9465]  ? skb_clone+0x151/0x1f0
[  130.365111][ T9465]  skb_clone+0x151/0x1f0
[  130.365164][ T9465]  __netlink_deliver_tap+0x2c9/0x500
[  130.365232][ T9465]  netlink_unicast+0x66b/0x690
[  130.365358][ T9465]  netlink_sendmsg+0x58b/0x6b0
[  130.365391][ T9465]  ? __pfx_netlink_sendmsg+0x10/0x10
[  130.365423][ T9465]  __sock_sendmsg+0x145/0x180
[  130.365463][ T9465]  ____sys_sendmsg+0x31e/0x4e0
[  130.365577][ T9465]  ___sys_sendmsg+0x17b/0x1d0
[  130.365625][ T9465]  __x64_sys_sendmsg+0xd4/0x160
[  130.365662][ T9465]  x64_sys_call+0x191e/0x2ff0
[  130.365690][ T9465]  do_syscall_64+0xd2/0x200
[  130.365789][ T9465]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  130.365824][ T9465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.365894][ T9465] RIP: 0033:0x7f85e508eec9
[  130.365912][ T9465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.365930][ T9465] RSP: 002b:00007f85e3af7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  130.365951][ T9465] RAX: ffffffffffffffda RBX: 00007f85e52e5fa0 RCX: 00007f85e508eec9
[  130.365964][ T9465] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  130.366000][ T9465] RBP: 00007f85e3af7090 R08: 0000000000000000 R09: 0000000000000000
[  130.366014][ T9465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  130.366026][ T9465] R13: 00007f85e52e6038 R14: 00007f85e52e5fa0 R15: 00007ffe936707f8
[  130.366046][ T9465]  </TASK>
[  130.374575][ T9465] xt_l2tp: missing protocol rule (udp|l2tpip)
[  130.679718][ T9477] __nla_validate_parse: 4 callbacks suppressed
[  130.679738][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2212'.
[  130.700904][   T29] kauditd_printk_skb: 188 callbacks suppressed
[  130.700921][   T29] audit: type=1326 audit(1758986235.320:6228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.4.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e508eec9 code=0x7ffc0000
[  130.738371][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2212'.
[  130.747975][ T9481] loop4: detected capacity change from 0 to 1024
[  130.764526][ T9481] EXT4-fs: Ignoring removed bh option
[  130.769982][   T29] audit: type=1326 audit(1758986235.340:6229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.4.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e508eec9 code=0x7ffc0000
[  130.793495][   T29] audit: type=1326 audit(1758986235.350:6230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.4.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85e508eec9 code=0x7ffc0000
[  130.816916][   T29] audit: type=1326 audit(1758986235.350:6231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.4.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e508eec9 code=0x7ffc0000
[  130.840379][   T29] audit: type=1326 audit(1758986235.350:6232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.4.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e508eec9 code=0x7ffc0000
[  130.863807][   T29] audit: type=1326 audit(1758986235.350:6233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.4.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f85e508eec9 code=0x7ffc0000
[  130.887245][   T29] audit: type=1326 audit(1758986235.350:6234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.4.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f85e508ef03 code=0x7ffc0000
[  130.910626][   T29] audit: type=1326 audit(1758986235.350:6235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.4.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f85e508d97f code=0x7ffc0000
[  130.934022][   T29] audit: type=1326 audit(1758986235.370:6236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.4.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f85e508ef57 code=0x7ffc0000
[  130.944409][ T9481] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  130.957374][   T29] audit: type=1326 audit(1758986235.370:6237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9479 comm="syz.4.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f85e508d710 code=0x7ffc0000
[  131.190718][ T9494] loop3: detected capacity change from 0 to 1024
[  131.211643][ T9494] EXT4-fs: Ignoring removed bh option
[  131.245620][ T9494] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  131.351628][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2225'.
[  131.465969][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2225'.
[  131.579564][ T9518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.589220][ T9518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.822273][ T3310] EXT4-fs unmount: 53 callbacks suppressed
[  131.822288][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.842282][ T9546] loop5: detected capacity change from 0 to 512
[  131.856501][ T9544] loop4: detected capacity change from 0 to 1024
[  131.869827][ T9544] EXT4-fs: Ignoring removed bh option
[  131.885730][ T9546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.903925][ T9544] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  131.914590][ T9546] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.937336][ T9546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.949940][ T9550] loop3: detected capacity change from 0 to 1024
[  131.957947][ T9546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.968122][ T9544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.996927][ T9550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.035371][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.090398][ T9550] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  132.129816][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.141907][ T9557] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2237'.
[  132.164829][ T9556] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2237'.
[  132.240701][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2242'.
[  132.249724][ T9567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2242'.
[  132.258694][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2242'.
[  132.279640][ T9567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2242'.
[  132.288743][ T9567] netlink: 'syz.4.2242': attribute type 6 has an invalid length.
[  132.317400][ T9571] loop2: detected capacity change from 0 to 1024
[  132.352958][ T9571] EXT4-fs: Ignoring removed bh option
[  132.364071][ T9571] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  132.382985][ T9577] loop3: detected capacity change from 0 to 1024
[  132.394914][ T9577] EXT4-fs: Ignoring removed bh option
[  132.401448][ T9577] EXT4-fs: inline encryption not supported
[  132.409278][ T9571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.421995][ T9577] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  132.449813][ T9577] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  132.474755][ T9577] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.2247: lblock 2 mapped to illegal pblock 2 (length 1)
[  132.519221][ T6303] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.555885][ T9577] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.2247: lblock 0 mapped to illegal pblock 48 (length 1)
[  132.602208][ T9593] FAULT_INJECTION: forcing a failure.
[  132.602208][ T9593] name failslab, interval 1, probability 0, space 0, times 0
[  132.614976][ T9593] CPU: 1 UID: 0 PID: 9593 Comm: syz.4.2252 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  132.615000][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  132.615011][ T9593] Call Trace:
[  132.615018][ T9593]  <TASK>
[  132.615026][ T9593]  __dump_stack+0x1d/0x30
[  132.615118][ T9593]  dump_stack_lvl+0xe8/0x140
[  132.615140][ T9593]  dump_stack+0x15/0x1b
[  132.615158][ T9593]  should_fail_ex+0x265/0x280
[  132.615203][ T9593]  ? audit_log_d_path+0x8d/0x150
[  132.615233][ T9593]  should_failslab+0x8c/0xb0
[  132.615262][ T9593]  __kmalloc_cache_noprof+0x4c/0x320
[  132.615297][ T9593]  audit_log_d_path+0x8d/0x150
[  132.615373][ T9593]  audit_log_d_path_exe+0x42/0x70
[  132.615407][ T9593]  audit_log_task+0x1e9/0x250
[  132.615441][ T9593]  audit_seccomp+0x61/0x100
[  132.615513][ T9593]  ? __seccomp_filter+0x68c/0x10d0
[  132.615536][ T9593]  __seccomp_filter+0x69d/0x10d0
[  132.615567][ T9593]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  132.615599][ T9593]  ? vfs_write+0x7e8/0x960
[  132.615627][ T9593]  __secure_computing+0x82/0x150
[  132.615694][ T9593]  syscall_trace_enter+0xcf/0x1e0
[  132.615722][ T9593]  do_syscall_64+0xac/0x200
[  132.615815][ T9593]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  132.615837][ T9593]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  132.615862][ T9593]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.615887][ T9593] RIP: 0033:0x7f85e508eec9
[  132.615903][ T9593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.615980][ T9593] RSP: 002b:00007f85e3af7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b6
[  132.616067][ T9593] RAX: ffffffffffffffda RBX: 00007f85e52e5fa0 RCX: 00007f85e508eec9
[  132.616078][ T9593] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005
[  132.616088][ T9593] RBP: 00007f85e3af7090 R08: 0000000000000000 R09: 0000000000000000
[  132.616100][ T9593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  132.616110][ T9593] R13: 00007f85e52e6038 R14: 00007f85e52e5fa0 R15: 00007ffe936707f8
[  132.616147][ T9593]  </TASK>
[  132.634235][ T9577] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2247: Failed to acquire dquot type 0
[  132.743002][ T9537] syz.0.2232 (9537) used greatest stack depth: 6392 bytes left
[  132.795471][ T9599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9599 comm=syz.4.2255
[  132.876327][ T9597] SELinux:  policydb version -1008808486 does not match my version range 15-35
[  132.889986][ T9602] netlink: 'syz.5.2257': attribute type 6 has an invalid length.
[  132.894138][ T9597] SELinux: failed to load policy
[  132.923853][ T9577] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  132.942774][ T9577] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.2247: mark_inode_dirty error
[  132.964038][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.973474][ T9577] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  132.988308][ T9610] loop4: detected capacity change from 0 to 1024
[  133.016019][ T9577] EXT4-fs (loop3): 1 orphan inode deleted
[  133.031292][ T9612] lo speed is unknown, defaulting to 1000
[  133.032729][ T9577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.051082][ T9610] EXT4-fs: inline encryption not supported
[  133.053950][ T3665] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1)
[  133.073167][ T9610] EXT4-fs: Ignoring removed mblk_io_submit option
[  133.100560][ T9615] loop5: detected capacity change from 0 to 512
[  133.103737][ T3665] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:25: Failed to release dquot type 0
[  133.125004][ T9577] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm syz.3.2247: lblock 1 mapped to illegal pblock 1 (length 1)
[  133.155428][ T9610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.175528][ T9615] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.2262: error while reading EA inode 32 err=-116
[  133.242756][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.252429][ T9615] EXT4-fs (loop5): Remounting filesystem read-only
[  133.259028][ T9615] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  133.277833][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.323605][ T3310] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  133.341017][ T9615] EXT4-fs (loop5): 1 orphan inode deleted
[  133.363360][ T9615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.379874][ T9630] netlink: 'syz.2.2268': attribute type 6 has an invalid length.
[  133.387745][ T3310] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  133.414458][ T3310] EXT4-fs error (device loop3): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error
[  133.451748][ T9633] loop2: detected capacity change from 0 to 1024
[  133.460395][ T9633] EXT4-fs: Ignoring removed bh option
[  133.482145][ T9633] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  133.503198][ T9636] loop4: detected capacity change from 0 to 2048
[  133.542583][ T9633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.566205][ T9636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.568703][ T9642] loop3: detected capacity change from 0 to 256
[  133.661718][ T9636] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.2270: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  133.734072][ T9636] EXT4-fs (loop4): Remounting filesystem read-only
[  133.752997][ T9646] lo speed is unknown, defaulting to 1000
[  133.785957][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.840651][ T6303] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.918841][ T9652] loop5: detected capacity change from 0 to 1024
[  133.968383][ T9652] EXT4-fs: inline encryption not supported
[  134.012901][ T9652] EXT4-fs: Ignoring removed mblk_io_submit option
[  134.033508][ T9658] loop3: detected capacity change from 0 to 512
[  134.046683][ T9652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.063852][ T9658] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  134.086231][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.098114][ T6303] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.134538][ T9658] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal
[  134.234379][ T9658] loop3: detected capacity change from 0 to 8192
[  134.238650][ T9670] lo speed is unknown, defaulting to 1000
[  134.357894][ T9658] can0: slcan on ttyS3.
[  134.385490][ T9677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.404544][ T9677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.453764][ T9658] can0 (unregistered): slcan off ttyS3.
[  134.566592][ T9681] loop3: detected capacity change from 0 to 1024
[  134.575091][ T9681] EXT4-fs: Ignoring removed bh option
[  134.611955][ T9681] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  134.698370][ T9681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.742153][ T9676] Set syz1 is full, maxelem 65536 reached
[  134.805192][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.807669][ T9693] loop4: detected capacity change from 0 to 1024
[  134.823177][ T9693] EXT4-fs: Ignoring removed bh option
[  134.850962][ T9693] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  134.883377][ T9693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.909927][ T9707] loop3: detected capacity change from 0 to 1024
[  134.919309][ T9707] EXT4-fs: Ignoring removed bh option
[  134.931766][ T9707] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  134.966994][ T9707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.015133][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.106521][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.174652][ T9727] loop4: detected capacity change from 0 to 1024
[  135.184150][ T9727] EXT4-fs: Ignoring removed bh option
[  135.198059][ T9730] FAULT_INJECTION: forcing a failure.
[  135.198059][ T9730] name failslab, interval 1, probability 0, space 0, times 0
[  135.210698][ T9730] CPU: 1 UID: 0 PID: 9730 Comm: syz.5.2305 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  135.210727][ T9730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  135.210742][ T9730] Call Trace:
[  135.210749][ T9730]  <TASK>
[  135.210757][ T9730]  __dump_stack+0x1d/0x30
[  135.210817][ T9730]  dump_stack_lvl+0xe8/0x140
[  135.210834][ T9730]  dump_stack+0x15/0x1b
[  135.210918][ T9730]  should_fail_ex+0x265/0x280
[  135.210963][ T9730]  should_failslab+0x8c/0xb0
[  135.211004][ T9730]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  135.211033][ T9730]  ? sidtab_sid2str_get+0xa0/0x130
[  135.211096][ T9730]  kmemdup_noprof+0x2b/0x70
[  135.211128][ T9730]  sidtab_sid2str_get+0xa0/0x130
[  135.211155][ T9730]  security_sid_to_context_core+0x1eb/0x2e0
[  135.211177][ T9730]  security_sid_to_context+0x27/0x40
[  135.211246][ T9730]  selinux_lsmprop_to_secctx+0x67/0xf0
[  135.211273][ T9730]  security_lsmprop_to_secctx+0x43/0x80
[  135.211367][ T9730]  audit_log_task_context+0x77/0x190
[  135.211400][ T9730]  audit_log_task+0xf4/0x250
[  135.211466][ T9730]  audit_seccomp+0x61/0x100
[  135.211497][ T9730]  ? __seccomp_filter+0x68c/0x10d0
[  135.211524][ T9730]  __seccomp_filter+0x69d/0x10d0
[  135.211549][ T9730]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  135.211681][ T9730]  ? vfs_write+0x7e8/0x960
[  135.211747][ T9730]  ? __rcu_read_unlock+0x4f/0x70
[  135.211768][ T9730]  ? __fget_files+0x184/0x1c0
[  135.211795][ T9730]  __secure_computing+0x82/0x150
[  135.211814][ T9730]  syscall_trace_enter+0xcf/0x1e0
[  135.211879][ T9730]  do_syscall_64+0xac/0x200
[  135.211911][ T9730]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  135.211933][ T9730]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  135.211963][ T9730]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.211993][ T9730] RIP: 0033:0x7f8c9880eec9
[  135.212010][ T9730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.212034][ T9730] RSP: 002b:00007f8c97277038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  135.212089][ T9730] RAX: ffffffffffffffda RBX: 00007f8c98a65fa0 RCX: 00007f8c9880eec9
[  135.212102][ T9730] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003
[  135.212115][ T9730] RBP: 00007f8c97277090 R08: 0000200000000040 R09: 0000000000000010
[  135.212130][ T9730] R10: 00000000040008c0 R11: 0000000000000246 R12: 0000000000000001
[  135.212156][ T9730] R13: 00007f8c98a66038 R14: 00007f8c98a65fa0 R15: 00007ffe970dbf08
[  135.212178][ T9730]  </TASK>
[  135.543964][ T9727] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  135.580636][ T9727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.607804][ T9745] loop2: detected capacity change from 0 to 1024
[  135.639360][ T9745] EXT4-fs: Ignoring removed bh option
[  135.668071][ T9745] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  135.686753][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.717395][ T9745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.750399][   T29] kauditd_printk_skb: 363 callbacks suppressed
[  135.750412][   T29] audit: type=1326 audit(1758986240.360:6596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.2.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f08f802d710 code=0x7ffc0000
[  135.782462][ T9752] loop4: detected capacity change from 0 to 256
[  135.797714][   T29] audit: type=1326 audit(1758986240.360:6597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.2.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f08f802dc17 code=0x7ffc0000
[  135.821044][   T29] audit: type=1326 audit(1758986240.360:6598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.2.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f08f802d710 code=0x7ffc0000
[  135.822210][ T9752] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152)
[  135.844499][   T29] audit: type=1326 audit(1758986240.360:6599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.2.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  135.844542][   T29] audit: type=1326 audit(1758986240.360:6600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.2.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  135.844572][   T29] audit: type=1326 audit(1758986240.360:6601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.2.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  135.852365][ T9752] FAT-fs (loop4): Filesystem has been set read-only
[  135.875721][   T29] audit: type=1326 audit(1758986240.360:6602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.2.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  135.875753][   T29] audit: type=1326 audit(1758986240.360:6603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.2.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  135.952110][ T9752] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152)
[  135.952667][   T29] audit: type=1326 audit(1758986240.360:6604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.2.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  136.099444][ T9763] pim6reg: entered allmulticast mode
[  136.107523][   T29] audit: type=1326 audit(1758986240.690:6605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.2.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  136.132868][ T9763] pim6reg: left allmulticast mode
[  136.189634][ T9763] __nla_validate_parse: 22 callbacks suppressed
[  136.189651][ T9763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2319'.
[  136.205916][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.294994][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2323'.
[  136.318638][ T9792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2324'.
[  136.322652][ T9788] vlan2: entered allmulticast mode
[  136.332978][ T9788] bridge0: entered allmulticast mode
[  136.339087][ T9788] bridge1: port 1(vlan2) entered blocking state
[  136.345530][ T9788] bridge1: port 1(vlan2) entered disabled state
[  136.352622][ T9788] vlan2: entered promiscuous mode
[  136.357741][ T9788] bridge0: entered promiscuous mode
[  136.366067][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2324'.
[  136.625117][ T9818] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2334'.
[  136.634487][ T9818] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2334'.
[  136.643660][ T9818] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2334'.
[  136.653222][ T9818] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2334'.
[  136.662408][ T9818] netlink: 'syz.5.2334': attribute type 6 has an invalid length.
[  136.673217][ T9820] FAULT_INJECTION: forcing a failure.
[  136.673217][ T9820] name failslab, interval 1, probability 0, space 0, times 0
[  136.686021][ T9820] CPU: 1 UID: 0 PID: 9820 Comm: syz.3.2336 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  136.686196][ T9820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  136.686212][ T9820] Call Trace:
[  136.686219][ T9820]  <TASK>
[  136.686228][ T9820]  __dump_stack+0x1d/0x30
[  136.686254][ T9820]  dump_stack_lvl+0xe8/0x140
[  136.686274][ T9820]  dump_stack+0x15/0x1b
[  136.686291][ T9820]  should_fail_ex+0x265/0x280
[  136.686420][ T9820]  should_failslab+0x8c/0xb0
[  136.686509][ T9820]  kmem_cache_alloc_noprof+0x50/0x310
[  136.686541][ T9820]  ? audit_log_start+0x365/0x6c0
[  136.686576][ T9820]  audit_log_start+0x365/0x6c0
[  136.686606][ T9820]  ? kernelmode_fixup_or_oops+0x59/0xb0
[  136.686684][ T9820]  audit_seccomp+0x48/0x100
[  136.686795][ T9820]  ? __seccomp_filter+0x68c/0x10d0
[  136.686872][ T9820]  __seccomp_filter+0x69d/0x10d0
[  136.686903][ T9820]  ? getname_flags+0x2be/0x3b0
[  136.686933][ T9820]  ? kmem_cache_free+0xdf/0x300
[  136.686978][ T9820]  __secure_computing+0x82/0x150
[  136.687005][ T9820]  syscall_trace_enter+0xcf/0x1e0
[  136.687036][ T9820]  do_syscall_64+0xac/0x200
[  136.687120][ T9820]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  136.687161][ T9820]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  136.687202][ T9820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.687229][ T9820] RIP: 0033:0x7efeb379d8dc
[  136.687299][ T9820] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  136.687319][ T9820] RSP: 002b:00007efeb21ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  136.687342][ T9820] RAX: ffffffffffffffda RBX: 00007efeb39f5fa0 RCX: 00007efeb379d8dc
[  136.687356][ T9820] RDX: 000000000000000f RSI: 00007efeb21ff0a0 RDI: 0000000000000006
[  136.687371][ T9820] RBP: 00007efeb21ff090 R08: 0000000000000000 R09: 0000000000000000
[  136.687386][ T9820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  136.687401][ T9820] R13: 00007efeb39f6038 R14: 00007efeb39f5fa0 R15: 00007ffeaf6da0f8
[  136.687447][ T9820]  </TASK>
[  136.963563][ T9831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2339'.
[  136.980820][ T9833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.026030][ T9833] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.045894][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2339'.
[  137.188986][ T9843] FAULT_INJECTION: forcing a failure.
[  137.188986][ T9843] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  137.202171][ T9843] CPU: 1 UID: 0 PID: 9843 Comm: syz.3.2344 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  137.202201][ T9843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  137.202229][ T9843] Call Trace:
[  137.202237][ T9843]  <TASK>
[  137.202246][ T9843]  __dump_stack+0x1d/0x30
[  137.202309][ T9843]  dump_stack_lvl+0xe8/0x140
[  137.202332][ T9843]  dump_stack+0x15/0x1b
[  137.202351][ T9843]  should_fail_ex+0x265/0x280
[  137.202381][ T9843]  should_fail+0xb/0x20
[  137.202449][ T9843]  should_fail_usercopy+0x1a/0x20
[  137.202475][ T9843]  _copy_to_user+0x20/0xa0
[  137.202507][ T9843]  simple_read_from_buffer+0xb5/0x130
[  137.202534][ T9843]  proc_fail_nth_read+0x10e/0x150
[  137.202563][ T9843]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  137.202667][ T9843]  vfs_read+0x1a5/0x770
[  137.202688][ T9843]  ? __rcu_read_unlock+0x4f/0x70
[  137.202709][ T9843]  ? __fget_files+0x184/0x1c0
[  137.202786][ T9843]  ksys_read+0xda/0x1a0
[  137.202832][ T9843]  __x64_sys_read+0x40/0x50
[  137.202856][ T9843]  x64_sys_call+0x27bc/0x2ff0
[  137.202882][ T9843]  do_syscall_64+0xd2/0x200
[  137.202916][ T9843]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  137.202968][ T9843]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  137.202995][ T9843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.203021][ T9843] RIP: 0033:0x7efeb379d8dc
[  137.203038][ T9843] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  137.203059][ T9843] RSP: 002b:00007efeb21ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  137.203145][ T9843] RAX: ffffffffffffffda RBX: 00007efeb39f5fa0 RCX: 00007efeb379d8dc
[  137.203173][ T9843] RDX: 000000000000000f RSI: 00007efeb21ff0a0 RDI: 0000000000000008
[  137.203188][ T9843] RBP: 00007efeb21ff090 R08: 0000000000000000 R09: 0000000000000000
[  137.203230][ T9843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  137.203245][ T9843] R13: 00007efeb39f6038 R14: 00007efeb39f5fa0 R15: 00007ffeaf6da0f8
[  137.203267][ T9843]  </TASK>
[  137.548520][ T9849] loop3: detected capacity change from 0 to 1024
[  137.569327][ T9849] EXT4-fs: inline encryption not supported
[  137.585789][ T9849] EXT4-fs: Ignoring removed mblk_io_submit option
[  137.632463][ T9849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.669455][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.695043][ T9856] lo speed is unknown, defaulting to 1000
[  137.842292][ T9862] loop4: detected capacity change from 0 to 2048
[  137.850746][ T9862] EXT4-fs: Ignoring removed nobh option
[  137.876299][ T9862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.889152][ T9862] ext4 filesystem being mounted at /441/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.902786][ T9866] FAULT_INJECTION: forcing a failure.
[  137.902786][ T9866] name failslab, interval 1, probability 0, space 0, times 0
[  137.915472][ T9866] CPU: 1 UID: 0 PID: 9866 Comm: syz.2.2352 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  137.915567][ T9866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  137.915582][ T9866] Call Trace:
[  137.915589][ T9866]  <TASK>
[  137.915598][ T9866]  __dump_stack+0x1d/0x30
[  137.915623][ T9866]  dump_stack_lvl+0xe8/0x140
[  137.915690][ T9866]  dump_stack+0x15/0x1b
[  137.915710][ T9866]  should_fail_ex+0x265/0x280
[  137.915739][ T9866]  should_failslab+0x8c/0xb0
[  137.915824][ T9866]  kmem_cache_alloc_node_noprof+0x57/0x320
[  137.915855][ T9866]  ? __alloc_skb+0x101/0x320
[  137.915878][ T9866]  __alloc_skb+0x101/0x320
[  137.915899][ T9866]  netlink_alloc_large_skb+0xba/0xf0
[  137.915921][ T9866]  netlink_sendmsg+0x3cf/0x6b0
[  137.916004][ T9866]  ? __pfx_netlink_sendmsg+0x10/0x10
[  137.916029][ T9866]  __sock_sendmsg+0x145/0x180
[  137.916061][ T9866]  ____sys_sendmsg+0x31e/0x4e0
[  137.916089][ T9866]  ___sys_sendmsg+0x17b/0x1d0
[  137.916201][ T9866]  __x64_sys_sendmsg+0xd4/0x160
[  137.916231][ T9866]  x64_sys_call+0x191e/0x2ff0
[  137.916253][ T9866]  do_syscall_64+0xd2/0x200
[  137.916339][ T9866]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  137.916381][ T9866]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  137.916410][ T9866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.916464][ T9866] RIP: 0033:0x7f08f802eec9
[  137.916493][ T9866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.916511][ T9866] RSP: 002b:00007f08f6a8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  137.916593][ T9866] RAX: ffffffffffffffda RBX: 00007f08f8285fa0 RCX: 00007f08f802eec9
[  137.916606][ T9866] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000006
[  137.916619][ T9866] RBP: 00007f08f6a8f090 R08: 0000000000000000 R09: 0000000000000000
[  137.916631][ T9866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  137.916718][ T9866] R13: 00007f08f8286038 R14: 00007f08f8285fa0 R15: 00007ffcbdb4c308
[  137.916739][ T9866]  </TASK>
[  138.214019][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.229070][ T9881] qrtr: Invalid version 183
[  138.251992][ T9885] loop2: detected capacity change from 0 to 256
[  138.311673][ T9885] FAT-fs (loop2): Directory bread(block 64) failed
[  138.337740][ T9885] FAT-fs (loop2): Directory bread(block 65) failed
[  138.353677][ T9897] lo speed is unknown, defaulting to 1000
[  138.385599][ T9885] FAT-fs (loop2): Directory bread(block 66) failed
[  138.423768][ T9885] FAT-fs (loop2): Directory bread(block 67) failed
[  138.430346][ T9885] FAT-fs (loop2): Directory bread(block 68) failed
[  138.437277][ T9885] FAT-fs (loop2): Directory bread(block 69) failed
[  138.445301][ T9885] FAT-fs (loop2): Directory bread(block 70) failed
[  138.452161][ T9885] FAT-fs (loop2): Directory bread(block 71) failed
[  138.459133][ T9885] FAT-fs (loop2): Directory bread(block 72) failed
[  138.470085][ T9885] FAT-fs (loop2): Directory bread(block 73) failed
[  138.495354][ T9904] vlan2: left promiscuous mode
[  138.500260][ T9904] bridge0: left promiscuous mode
[  138.505717][ T9904] bridge1: port 1(vlan2) entered disabled state
[  138.521184][ T9885] 9pnet_fd: Insufficient options for proto=fd
[  138.555451][ T9915] lo speed is unknown, defaulting to 1000
[  138.632440][ T9921] loop5: detected capacity change from 0 to 512
[  138.655855][ T9921] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.2365: error while reading EA inode 32 err=-116
[  138.670758][ T9921] EXT4-fs (loop5): Remounting filesystem read-only
[  138.677488][ T9921] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  138.690782][ T9921] EXT4-fs (loop5): 1 orphan inode deleted
[  138.698262][ T9921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.774644][ T6303] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.912509][ T9944] loop5: detected capacity change from 0 to 164
[  138.950360][ T9946] loop3: detected capacity change from 0 to 512
[  138.979078][ T9946] msdos: Bad value for 'nfs'
[  138.995980][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811a9d4800: rx timeout, send abort
[  139.138429][ T9963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.146458][ T9969] FAULT_INJECTION: forcing a failure.
[  139.146458][ T9969] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  139.147023][ T9963] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.160033][ T9969] CPU: 1 UID: 0 PID: 9969 Comm: syz.4.2387 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  139.160078][ T9969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  139.160097][ T9969] Call Trace:
[  139.160106][ T9969]  <TASK>
[  139.160119][ T9969]  __dump_stack+0x1d/0x30
[  139.160162][ T9969]  dump_stack_lvl+0xe8/0x140
[  139.160192][ T9969]  dump_stack+0x15/0x1b
[  139.160215][ T9969]  should_fail_ex+0x265/0x280
[  139.160251][ T9969]  should_fail_alloc_page+0xf2/0x100
[  139.160292][ T9969]  __alloc_frozen_pages_noprof+0xff/0x360
[  139.160409][ T9969]  alloc_pages_mpol+0xb3/0x250
[  139.160459][ T9969]  vma_alloc_folio_noprof+0x1aa/0x300
[  139.160554][ T9969]  handle_mm_fault+0xec2/0x2c20
[  139.160588][ T9969]  ? __rcu_read_unlock+0x4f/0x70
[  139.160633][ T9969]  do_user_addr_fault+0x3fe/0x1090
[  139.160688][ T9969]  exc_page_fault+0x62/0xa0
[  139.160728][ T9969]  asm_exc_page_fault+0x26/0x30
[  139.160758][ T9969] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  139.160833][ T9969] Code: f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  139.160860][ T9969] RSP: 0018:ffffc90002aa7bc0 EFLAGS: 00050202
[  139.160882][ T9969] RAX: ffff888119b02ba0 RBX: ffffc90002aa7d40 RCX: 000000000000019b
[  139.160901][ T9969] RDX: 0000000000000000 RSI: ffff88810a55ae50 RDI: 0000200000001000
[  139.160919][ T9969] RBP: 0000000000000030 R08: 0000000000000711 R09: 0000000000000000
[  139.160937][ T9969] R10: 000188810a55a000 R11: 000188810a55afea R12: ffffc90002aa7d28
[  139.161010][ T9969] R13: 0000000000000feb R14: 0000000000000feb R15: 0000000000000feb
[  139.161043][ T9969]  _copy_to_iter+0x2df/0xe70
[  139.161091][ T9969]  ? if6_seq_show+0x96/0xb0
[  139.161122][ T9969]  seq_read_iter+0x76a/0x940
[  139.161250][ T9969]  seq_read+0x270/0x2b0
[  139.161311][ T9969]  ? __pfx_seq_read+0x10/0x10
[  139.161402][ T9969]  proc_reg_read+0x128/0x1c0
[  139.161456][ T9969]  ? __pfx_proc_reg_read+0x10/0x10
[  139.161503][ T9969]  vfs_read+0x1a5/0x770
[  139.161535][ T9969]  ? __fget_files+0x184/0x1c0
[  139.161572][ T9969]  ? __rcu_read_unlock+0x4f/0x70
[  139.161649][ T9969]  ? __fget_files+0x184/0x1c0
[  139.161690][ T9969]  __x64_sys_pread64+0xfd/0x150
[  139.161745][ T9969]  x64_sys_call+0x29e2/0x2ff0
[  139.161776][ T9969]  do_syscall_64+0xd2/0x200
[  139.161819][ T9969]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  139.161878][ T9969]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  139.161991][ T9969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.162031][ T9969] RIP: 0033:0x7f85e508eec9
[  139.162053][ T9969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  139.162079][ T9969] RSP: 002b:00007f85e3af7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  139.162155][ T9969] RAX: ffffffffffffffda RBX: 00007f85e52e5fa0 RCX: 00007f85e508eec9
[  139.162177][ T9969] RDX: 000000000000fd8a RSI: 0000200000000180 RDI: 0000000000000003
[  139.162194][ T9969] RBP: 00007f85e3af7090 R08: 0000000000000000 R09: 0000000000000000
[  139.162213][ T9969] R10: 000000000000003c R11: 0000000000000246 R12: 0000000000000001
[  139.162231][ T9969] R13: 00007f85e52e6038 R14: 00007f85e52e5fa0 R15: 00007ffe936707f8
[  139.162259][ T9969]  </TASK>
[  139.501721][ T3664] bio_check_eod: 1 callbacks suppressed
[  139.501734][ T3664] kworker/u8:24: attempt to access beyond end of device
[  139.501734][ T3664] loop2: rw=1, sector=1224, nr_sectors = 256 limit=256
[  139.507469][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811a9d4800: abort rx timeout. Force session deactivation
[  139.536929][ T3664] kworker/u8:24: attempt to access beyond end of device
[  139.536929][ T3664] loop2: rw=1, sector=1512, nr_sectors = 320 limit=256
[  139.551586][ T3664] kworker/u8:24: attempt to access beyond end of device
[  139.551586][ T3664] loop2: rw=1, sector=1864, nr_sectors = 448 limit=256
[  139.566339][ T3664] kworker/u8:24: attempt to access beyond end of device
[  139.566339][ T3664] loop2: rw=1, sector=2344, nr_sectors = 32 limit=256
[  139.582524][ T3664] kworker/u8:24: attempt to access beyond end of device
[  139.582524][ T3664] loop2: rw=1, sector=2408, nr_sectors = 32 limit=256
[  139.609480][ T3664] kworker/u8:24: attempt to access beyond end of device
[  139.609480][ T3664] loop2: rw=1, sector=2472, nr_sectors = 32 limit=256
[  139.623366][ T3664] kworker/u8:24: attempt to access beyond end of device
[  139.623366][ T3664] loop2: rw=1, sector=2536, nr_sectors = 32 limit=256
[  139.644928][ T3664] kworker/u8:24: attempt to access beyond end of device
[  139.644928][ T3664] loop2: rw=1, sector=2600, nr_sectors = 32 limit=256
[  139.660524][ T3664] kworker/u8:24: attempt to access beyond end of device
[  139.660524][ T3664] loop2: rw=1, sector=2664, nr_sectors = 32 limit=256
[  139.676581][ T3664] kworker/u8:24: attempt to access beyond end of device
[  139.676581][ T3664] loop2: rw=1, sector=2728, nr_sectors = 32 limit=256
[  139.922349][T10001] loop4: detected capacity change from 0 to 1024
[  139.934441][T10001] EXT4-fs: Ignoring removed bh option
[  139.951760][T10001] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  140.004671][T10001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.066377][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.210455][ T9992] loop2: detected capacity change from 0 to 512
[  140.255600][T10019] lo speed is unknown, defaulting to 1000
[  140.267585][ T9992] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.2398: bad orphan inode 11862016
[  140.298432][ T9992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  140.382447][ T9992] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.606331][T10016] loop3: detected capacity change from 0 to 512
[  140.639019][T10016] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.2407: bad orphan inode 11862016
[  140.690026][T10016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  140.719142][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  140.728884][T10016] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.919294][T10052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.936096][T10052] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.977487][   T29] kauditd_printk_skb: 224 callbacks suppressed
[  140.977509][   T29] audit: type=1326 audit(1758986245.560:6826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10015 comm="syz.3.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb379eec9 code=0x7ffc0000
[  141.007275][   T29] audit: type=1326 audit(1758986245.560:6827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10015 comm="syz.3.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb379eec9 code=0x7ffc0000
[  141.070275][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  141.292342][T10040] Set syz1 is full, maxelem 65536 reached
[  141.438966][   T29] audit: type=1400 audit(1758986246.050:6828): avc:  denied  { execute } for  pid=10077 comm="syz.3.2432" path="/460/file1" dev="tmpfs" ino=2463 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  141.545936][T10085] loop4: detected capacity change from 0 to 1024
[  141.553598][T10085] EXT4-fs: Ignoring removed bh option
[  141.589925][   T29] audit: type=1326 audit(1758986246.150:6829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10084 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e508eec9 code=0x7ffc0000
[  141.613456][   T29] audit: type=1326 audit(1758986246.150:6830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10084 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85e508eec9 code=0x7ffc0000
[  141.637075][   T29] audit: type=1326 audit(1758986246.150:6831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10084 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e508eec9 code=0x7ffc0000
[  141.661036][   T29] audit: type=1326 audit(1758986246.150:6832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10084 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e508eec9 code=0x7ffc0000
[  141.684633][   T29] audit: type=1326 audit(1758986246.150:6833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10084 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f85e508eec9 code=0x7ffc0000
[  141.708436][   T29] audit: type=1326 audit(1758986246.150:6834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10084 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f85e508ef03 code=0x7ffc0000
[  141.731823][   T29] audit: type=1326 audit(1758986246.150:6835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10084 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f85e508d97f code=0x7ffc0000
[  141.745682][T10085] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  141.779830][T10090] __nla_validate_parse: 20 callbacks suppressed
[  141.779847][T10090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2436'.
[  141.795229][T10090] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2436'.
[  141.804210][T10090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2436'.
[  141.829188][T10085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.863060][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.321534][T10131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.342100][T10131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.431273][T10139] loop5: detected capacity change from 0 to 1024
[  142.464678][T10139] EXT4-fs: Ignoring removed bh option
[  142.482996][T10139] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  142.514742][T10139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.587648][ T6303] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.716007][T10156] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2448'.
[  142.745177][T10151] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2448'.
[  142.776979][T10160] syzkaller0: entered allmulticast mode
[  142.782775][T10160] syzkaller0: entered promiscuous mode
[  142.794933][T10160] syzkaller0 (unregistering): left allmulticast mode
[  142.801750][T10160] syzkaller0 (unregistering): left promiscuous mode
[  142.845978][T10161] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2450'.
[  142.874690][T10155] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2450'.
[  143.048603][T10186] lo speed is unknown, defaulting to 1000
[  143.090821][T10199] loop4: detected capacity change from 0 to 512
[  143.154482][T10199] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.2461: error while reading EA inode 32 err=-116
[  143.194873][T10199] EXT4-fs (loop4): Remounting filesystem read-only
[  143.201432][T10199] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  143.218887][T10199] EXT4-fs (loop4): 1 orphan inode deleted
[  143.240456][T10199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.304933][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.318508][T10217] lo speed is unknown, defaulting to 1000
[  143.352702][T10212] lo speed is unknown, defaulting to 1000
[  143.692071][T10241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2478'.
[  143.965021][T10261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2487'.
[  144.000416][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2487'.
[  144.235909][T10279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.270299][T10279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.430157][T10296] loop4: detected capacity change from 0 to 512
[  144.466673][T10300] lo speed is unknown, defaulting to 1000
[  144.486831][T10296] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2504: Failed to acquire dquot type 1
[  144.500204][T10298] lo speed is unknown, defaulting to 1000
[  144.510180][T10303] loop5: detected capacity change from 0 to 512
[  144.520305][T10296] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2504: Failed to acquire dquot type 1
[  144.536100][T10296] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2504: bg 0: block 248: padding at end of block bitmap is not set
[  144.573673][T10296] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  144.585154][T10303] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.2505: error while reading EA inode 32 err=-116
[  144.608289][T10296] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2504: Failed to acquire dquot type 1
[  144.630368][T10296] EXT4-fs (loop4): 1 orphan inode deleted
[  144.637656][T10303] EXT4-fs (loop5): Remounting filesystem read-only
[  144.644277][T10303] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  144.655034][T10296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.681424][T10303] EXT4-fs (loop5): 1 orphan inode deleted
[  144.687910][T10296] ext4 filesystem being mounted at /485/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.696208][T10303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.734454][ T6303] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.785197][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.056419][T10340] FAULT_INJECTION: forcing a failure.
[  145.056419][T10340] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  145.069612][T10340] CPU: 1 UID: 0 PID: 10340 Comm: syz.5.2519 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  145.069637][T10340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  145.069656][T10340] Call Trace:
[  145.069663][T10340]  <TASK>
[  145.069670][T10340]  __dump_stack+0x1d/0x30
[  145.069692][T10340]  dump_stack_lvl+0xe8/0x140
[  145.069715][T10340]  dump_stack+0x15/0x1b
[  145.069734][T10340]  should_fail_ex+0x265/0x280
[  145.069762][T10340]  should_fail+0xb/0x20
[  145.069812][T10340]  should_fail_usercopy+0x1a/0x20
[  145.069851][T10338] loop2: detected capacity change from 0 to 1024
[  145.069931][T10340]  _copy_from_user+0x1c/0xb0
[  145.070053][T10340]  do_ip_getsockopt+0x12a/0xfe0
[  145.070122][T10340]  ? avc_has_perm_noaudit+0x1b1/0x200
[  145.070230][T10340]  ? avc_has_perm+0xf7/0x180
[  145.070269][T10340]  ip_getsockopt+0x5c/0x180
[  145.070440][T10340]  raw_getsockopt+0xb0/0x190
[  145.070472][T10340]  sock_common_getsockopt+0x5d/0x70
[  145.070516][T10340]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  145.070562][T10340]  do_sock_getsockopt+0x1fd/0x240
[  145.070660][T10340]  __x64_sys_getsockopt+0x11e/0x1a0
[  145.070697][T10340]  x64_sys_call+0x2bc6/0x2ff0
[  145.070728][T10340]  do_syscall_64+0xd2/0x200
[  145.070771][T10340]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  145.070862][T10340]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  145.070900][T10340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.070976][T10340] RIP: 0033:0x7f8c9880eec9
[  145.070998][T10340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.071024][T10340] RSP: 002b:00007f8c97277038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  145.071051][T10340] RAX: ffffffffffffffda RBX: 00007f8c98a65fa0 RCX: 00007f8c9880eec9
[  145.071103][T10340] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000006
[  145.071193][T10340] RBP: 00007f8c97277090 R08: 0000200000000040 R09: 0000000000000000
[  145.071211][T10340] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  145.071229][T10340] R13: 00007f8c98a66038 R14: 00007f8c98a65fa0 R15: 00007ffe970dbf08
[  145.071330][T10340]  </TASK>
[  145.169254][T10346] FAULT_INJECTION: forcing a failure.
[  145.169254][T10346] name failslab, interval 1, probability 0, space 0, times 0
[  145.295488][T10346] CPU: 1 UID: 0 PID: 10346 Comm: syz.4.2522 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  145.295567][T10346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  145.295580][T10346] Call Trace:
[  145.295586][T10346]  <TASK>
[  145.295594][T10346]  __dump_stack+0x1d/0x30
[  145.295619][T10346]  dump_stack_lvl+0xe8/0x140
[  145.295640][T10346]  dump_stack+0x15/0x1b
[  145.295716][T10346]  should_fail_ex+0x265/0x280
[  145.295740][T10346]  should_failslab+0x8c/0xb0
[  145.295764][T10346]  kmem_cache_alloc_node_noprof+0x57/0x320
[  145.295823][T10346]  ? __alloc_skb+0x101/0x320
[  145.295868][T10346]  __alloc_skb+0x101/0x320
[  145.295887][T10346]  netlink_alloc_large_skb+0xba/0xf0
[  145.295907][T10346]  netlink_sendmsg+0x3cf/0x6b0
[  145.295934][T10346]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.295964][T10346]  __sock_sendmsg+0x145/0x180
[  145.296027][T10346]  ____sys_sendmsg+0x31e/0x4e0
[  145.296056][T10346]  ___sys_sendmsg+0x17b/0x1d0
[  145.296184][T10346]  __x64_sys_sendmsg+0xd4/0x160
[  145.296221][T10346]  x64_sys_call+0x191e/0x2ff0
[  145.296249][T10346]  do_syscall_64+0xd2/0x200
[  145.296281][T10346]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  145.296325][T10346]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  145.296436][T10346]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.296463][T10346] RIP: 0033:0x7f85e508eec9
[  145.296481][T10346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.296506][T10346] RSP: 002b:00007f85e3af7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  145.296565][T10346] RAX: ffffffffffffffda RBX: 00007f85e52e5fa0 RCX: 00007f85e508eec9
[  145.296582][T10346] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007
[  145.296594][T10346] RBP: 00007f85e3af7090 R08: 0000000000000000 R09: 0000000000000000
[  145.296606][T10346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  145.296617][T10346] R13: 00007f85e52e6038 R14: 00007f85e52e5fa0 R15: 00007ffe936707f8
[  145.296714][T10346]  </TASK>
[  145.506948][T10338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  145.516382][T10349] loop5: detected capacity change from 0 to 1024
[  145.519524][T10338] ext4 filesystem being mounted at /489/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.532754][T10349] EXT4-fs: Ignoring removed bh option
[  145.589344][T10349] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  145.595863][T10354] lo speed is unknown, defaulting to 1000
[  145.677778][T10349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.808000][ T6303] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.983494][T10361] lo speed is unknown, defaulting to 1000
[  146.143942][T10361] chnl_net:caif_netlink_parms(): no params data found
[  146.174219][T10392] loop3: detected capacity change from 0 to 1024
[  146.182600][T10392] EXT4-fs: Ignoring removed oldalloc option
[  146.188636][T10392] EXT4-fs: Ignoring removed bh option
[  146.210466][T10392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.250405][T10361] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.257516][T10361] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.297187][T10361] bridge_slave_0: entered allmulticast mode
[  146.304243][T10361] bridge_slave_0: entered promiscuous mode
[  146.311340][T10361] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.318513][T10361] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.326545][T10361] bridge_slave_1: entered allmulticast mode
[  146.333177][T10361] bridge_slave_1: entered promiscuous mode
[  146.387140][T10407] raw_sendmsg: syz.3.2536 forgot to set AF_INET. Fix it!
[  146.505435][ T3672] bond0 (unregistering): Released all slaves
[  146.530453][T10361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.551088][T10361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.565882][T10406] loop4: detected capacity change from 0 to 512
[  146.566006][ T3672] hsr_slave_0: left promiscuous mode
[  146.629744][ T3672] hsr_slave_1: left promiscuous mode
[  146.638414][T10406] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.2540: error while reading EA inode 32 err=-116
[  146.667024][T10406] EXT4-fs (loop4): Remounting filesystem read-only
[  146.673768][T10406] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  146.729911][T10406] EXT4-fs (loop4): 1 orphan inode deleted
[  146.736265][T10406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.837383][T10419] loop5: detected capacity change from 0 to 512
[  146.882488][T10419] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.2543: error while reading EA inode 32 err=-116
[  146.927327][T10361] team0: Port device team_slave_0 added
[  146.946897][T10419] EXT4-fs (loop5): Remounting filesystem read-only
[  146.953515][T10419] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  146.965017][T10361] team0: Port device team_slave_1 added
[  146.983760][T10419] EXT4-fs (loop5): 1 orphan inode deleted
[  146.990009][T10419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.006044][T10411] lo speed is unknown, defaulting to 1000
[  147.041696][T10418] lo speed is unknown, defaulting to 1000
[  147.068589][T10361] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.075649][T10361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.101567][T10361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  147.112786][ T3664] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm kworker/u8:24: lblock 0 mapped to illegal pblock 0 (length 1)
[  147.127272][ T3664] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  147.139649][ T3664] EXT4-fs (loop2): This should not happen!! Data will be lost
[  147.139649][ T3664] 
[  147.150803][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  147.165542][T10361] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.172575][T10361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.198596][T10361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  147.255052][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.273685][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.303405][T10361] hsr_slave_0: entered promiscuous mode
[  147.314348][ T6303] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.324449][T10361] hsr_slave_1: entered promiscuous mode
[  147.330292][T10361] debugfs: 'hsr0' already exists in 'hsr'
[  147.336095][T10361] Cannot create hsr debugfs directory
[  147.372937][T10428] lo speed is unknown, defaulting to 1000
[  147.417084][T10435] loop4: detected capacity change from 0 to 512
[  147.426336][T10435] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.2546: error while reading EA inode 32 err=-116
[  147.441328][   T29] kauditd_printk_skb: 236 callbacks suppressed
[  147.441344][   T29] audit: type=1400 audit(1758986252.060:7066): avc:  denied  { write } for  pid=10430 comm="syz.3.2548" path="socket:[28044]" dev="sockfs" ino=28044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  147.476058][T10435] EXT4-fs (loop4): Remounting filesystem read-only
[  147.482618][T10435] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  147.503216][T10435] EXT4-fs (loop4): 1 orphan inode deleted
[  147.509417][T10435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.595055][   T29] audit: type=1326 audit(1758986252.220:7067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.2.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  147.618683][   T29] audit: type=1326 audit(1758986252.220:7068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.2.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  147.642434][   T29] audit: type=1326 audit(1758986252.220:7069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.2.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  147.652960][T10446] loop2: detected capacity change from 0 to 512
[  147.666022][   T29] audit: type=1326 audit(1758986252.220:7070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.2.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  147.666059][   T29] audit: type=1326 audit(1758986252.220:7071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.2.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  147.719590][   T29] audit: type=1326 audit(1758986252.220:7072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.2.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  147.743118][   T29] audit: type=1326 audit(1758986252.220:7073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.2.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  147.766658][   T29] audit: type=1326 audit(1758986252.220:7074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.2.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  147.792333][   T29] audit: type=1326 audit(1758986252.220:7075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.2.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  147.872386][T10446] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.2551: bad orphan inode 11862016
[  147.898375][T10446] ext4 filesystem being mounted at /491/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.946914][T10441] lo speed is unknown, defaulting to 1000
[  148.000091][T10456] __nla_validate_parse: 2 callbacks suppressed
[  148.000105][T10456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2554'.
[  148.035619][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2554'.
[  148.205060][T10474] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2556'.
[  148.225204][T10465] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2556'.
[  148.253136][T10480] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2563'.
[  148.262930][T10476] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2563'.
[  148.287663][T10484] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2564'.
[  148.311414][T10487] loop2: detected capacity change from 0 to 256
[  148.318288][T10478] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2564'.
[  148.329616][T10487] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152)
[  148.337695][T10487] FAT-fs (loop2): Filesystem has been set read-only
[  148.394887][T10494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2569'.
[  148.452633][T10494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2569'.
[  148.476248][T10361] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  148.509272][T10361] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  148.533394][T10361] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  148.558817][T10361] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  148.639939][T10361] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.655619][T10361] 8021q: adding VLAN 0 to HW filter on device team0
[  148.665576][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.672844][ T3665] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.690002][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.697215][ T3665] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.748594][T10542] loop3: detected capacity change from 0 to 256
[  148.759312][T10542] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152)
[  148.767216][T10542] FAT-fs (loop3): Filesystem has been set read-only
[  148.808892][T10361] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.903150][T10361] veth0_vlan: entered promiscuous mode
[  148.910033][T10553] loop3: detected capacity change from 0 to 8192
[  148.912691][T10361] veth1_vlan: entered promiscuous mode
[  148.923046][T10553] FAULT_INJECTION: forcing a failure.
[  148.923046][T10553] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  148.936212][T10553] CPU: 0 UID: 0 PID: 10553 Comm: syz.3.2582 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  148.936243][T10553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  148.936271][T10553] Call Trace:
[  148.936278][T10553]  <TASK>
[  148.936286][T10553]  __dump_stack+0x1d/0x30
[  148.936315][T10553]  dump_stack_lvl+0xe8/0x140
[  148.936337][T10553]  dump_stack+0x15/0x1b
[  148.936352][T10553]  should_fail_ex+0x265/0x280
[  148.936436][T10553]  should_fail+0xb/0x20
[  148.936460][T10553]  should_fail_usercopy+0x1a/0x20
[  148.936489][T10553]  strncpy_from_user+0x25/0x230
[  148.936534][T10553]  ? kmem_cache_alloc_noprof+0x186/0x310
[  148.936589][T10553]  ? getname_flags+0x80/0x3b0
[  148.936625][T10553]  getname_flags+0xae/0x3b0
[  148.936660][T10553]  __x64_sys_mkdirat+0x40/0x60
[  148.936685][T10553]  x64_sys_call+0x2b7/0x2ff0
[  148.936772][T10553]  do_syscall_64+0xd2/0x200
[  148.936805][T10553]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  148.936834][T10553]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  148.936919][T10553]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.936945][T10553] RIP: 0033:0x7efeb379eec9
[  148.936964][T10553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  148.937059][T10553] RSP: 002b:00007efeb21ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  148.937112][T10553] RAX: ffffffffffffffda RBX: 00007efeb39f5fa0 RCX: 00007efeb379eec9
[  148.937194][T10553] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  148.937235][T10553] RBP: 00007efeb21ff090 R08: 0000000000000000 R09: 0000000000000000
[  148.937251][T10553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  148.937263][T10553] R13: 00007efeb39f6038 R14: 00007efeb39f5fa0 R15: 00007ffeaf6da0f8
[  148.937280][T10553]  </TASK>
[  148.951926][T10361] veth0_macvtap: entered promiscuous mode
[  149.134487][T10361] veth1_macvtap: entered promiscuous mode
[  149.160151][T10361] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.175053][T10361] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.186680][ T3665] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.222242][ T3664] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.246691][ T3664] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.264027][ T3664] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.440608][T10598] process 'syz.2.2592' launched '/dev/fd/4' with NULL argv: empty string added
[  149.551741][T10607] lo speed is unknown, defaulting to 1000
[  149.633545][T10615] loop4: detected capacity change from 0 to 512
[  149.662043][T10615] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.2596: error while reading EA inode 32 err=-116
[  149.715705][T10615] EXT4-fs (loop4): Remounting filesystem read-only
[  149.722369][T10615] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  149.746399][T10615] EXT4-fs (loop4): 1 orphan inode deleted
[  150.225869][T10697] loop5: detected capacity change from 0 to 512
[  150.275716][T10702] 9pnet_fd: Insufficient options for proto=fd
[  150.311478][T10697] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.344118][T10711] loop2: detected capacity change from 0 to 1024
[  150.351438][T10711] EXT4-fs: Ignoring removed mblk_io_submit option
[  150.394103][T10711] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal
[  150.403083][T10716] loop4: detected capacity change from 0 to 512
[  150.453327][T10716] ext4 filesystem being mounted at /511/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.485391][T10716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.507251][T10716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.554628][T10738] netlink: 'syz.5.2637': attribute type 6 has an invalid length.
[  150.574971][T10711] infiniband syz!: set down
[  150.579519][T10711] infiniband syz!: added team_slave_0
[  150.648135][T10711] RDS/IB: syz!: added
[  150.652177][T10711] smc: adding ib device syz! with port count 1
[  150.660763][T10711] smc:    ib device syz! port 1 has pnetid 
[  150.719307][T10738] loop5: detected capacity change from 0 to 2048
[  150.821019][T10738]  loop5: p2 p3 p7
[  150.910310][T10761] FAULT_INJECTION: forcing a failure.
[  150.910310][T10761] name failslab, interval 1, probability 0, space 0, times 0
[  150.923204][T10761] CPU: 1 UID: 0 PID: 10761 Comm: syz.0.2645 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  150.923230][T10761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  150.923271][T10761] Call Trace:
[  150.923277][T10761]  <TASK>
[  150.923302][T10761]  __dump_stack+0x1d/0x30
[  150.923326][T10761]  dump_stack_lvl+0xe8/0x140
[  150.923366][T10761]  dump_stack+0x15/0x1b
[  150.923386][T10761]  should_fail_ex+0x265/0x280
[  150.923486][T10761]  should_failslab+0x8c/0xb0
[  150.923515][T10761]  kmem_cache_alloc_node_noprof+0x57/0x320
[  150.923547][T10761]  ? __alloc_skb+0x101/0x320
[  150.923592][T10761]  __alloc_skb+0x101/0x320
[  150.923686][T10761]  inet_netconf_notify_devconf+0x173/0x230
[  150.923739][T10761]  inetdev_event+0x743/0xc10
[  150.923815][T10761]  ? __pfx_ib_netdevice_event+0x10/0x10
[  150.923841][T10761]  ? ib_netdevice_event+0x186/0x5f0
[  150.923869][T10761]  ? __pfx_arp_netdev_event+0x10/0x10
[  150.923901][T10761]  ? __pfx_inetdev_event+0x10/0x10
[  150.923975][T10761]  raw_notifier_call_chain+0x6c/0x1b0
[  150.923999][T10761]  ? call_netdevice_notifiers_info+0x9c/0x100
[  150.924070][T10761]  call_netdevice_notifiers_info+0xae/0x100
[  150.924102][T10761]  unregister_netdevice_many_notify+0xda9/0x15d0
[  150.924136][T10761]  unregister_netdevice_queue+0x1f5/0x220
[  150.924197][T10761]  unregister_netdev+0xb3/0xe0
[  150.924287][T10761]  slip_close+0xe4/0x100
[  150.924308][T10761]  ? __pfx_slip_close+0x10/0x10
[  150.924330][T10761]  tty_ldisc_close+0x71/0xa0
[  150.924412][T10761]  tty_set_ldisc+0x1b9/0x380
[  150.924453][T10761]  tiocsetd+0x51/0x60
[  150.924578][T10761]  tty_ioctl+0xa7f/0xb80
[  150.924595][T10761]  ? __pfx_tty_ioctl+0x10/0x10
[  150.924611][T10761]  __se_sys_ioctl+0xce/0x140
[  150.924631][T10761]  __x64_sys_ioctl+0x43/0x50
[  150.924649][T10761]  x64_sys_call+0x1816/0x2ff0
[  150.924709][T10761]  do_syscall_64+0xd2/0x200
[  150.924742][T10761]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  150.924835][T10761]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  150.924868][T10761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.924892][T10761] RIP: 0033:0x7f7c4dcfeec9
[  150.924909][T10761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.924947][T10761] RSP: 002b:00007f7c4c75f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  150.924965][T10761] RAX: ffffffffffffffda RBX: 00007f7c4df55fa0 RCX: 00007f7c4dcfeec9
[  150.924978][T10761] RDX: 0000200000000100 RSI: 0000000000005423 RDI: 0000000000000003
[  150.925054][T10761] RBP: 00007f7c4c75f090 R08: 0000000000000000 R09: 0000000000000000
[  150.925095][T10761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  150.925183][T10761] R13: 00007f7c4df56038 R14: 00007f7c4df55fa0 R15: 00007fff2fd014d8
[  150.925204][T10761]  </TASK>
[  151.212861][ T2991]  loop5: p2 p3 p7
[  151.230013][T10766] loop3: detected capacity change from 0 to 1024
[  151.242660][T10766] EXT4-fs: Ignoring removed oldalloc option
[  151.248780][T10766] EXT4-fs: Ignoring removed bh option
[  151.311435][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  151.326741][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  151.365268][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  151.366104][T10783] lo speed is unknown, defaulting to 1000
[  151.389609][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  151.404720][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory
[  151.422156][ T3550] udevd[3550]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  151.431793][ T3597] udevd[3597]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  151.437591][T10788] bridge_slave_0: left allmulticast mode
[  151.447334][T10788] bridge_slave_0: left promiscuous mode
[  151.451229][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  151.453043][T10788] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.480270][T10788] bridge_slave_1: left allmulticast mode
[  151.486055][T10788] bridge_slave_1: left promiscuous mode
[  151.491684][T10788] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.531965][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  151.555951][T10788] bond0: (slave bond_slave_0): Releasing backup interface
[  151.571537][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  151.598296][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  151.612604][T10788] bond0: (slave bond_slave_1): Releasing backup interface
[  151.625568][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  151.651994][T10788] team0: Port device team_slave_0 removed
[  151.660175][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  151.677131][T10793] FAULT_INJECTION: forcing a failure.
[  151.677131][T10793] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  151.691302][T10793] CPU: 1 UID: 0 PID: 10793 Comm: syz.5.2656 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  151.691396][T10793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  151.691490][T10793] Call Trace:
[  151.691497][T10793]  <TASK>
[  151.691506][T10793]  __dump_stack+0x1d/0x30
[  151.691538][T10793]  dump_stack_lvl+0xe8/0x140
[  151.691563][T10793]  dump_stack+0x15/0x1b
[  151.691586][T10793]  should_fail_ex+0x265/0x280
[  151.691617][T10793]  should_fail+0xb/0x20
[  151.691705][T10793]  should_fail_usercopy+0x1a/0x20
[  151.691789][T10793]  strncpy_from_user+0x25/0x230
[  151.691832][T10793]  ? __kmalloc_cache_noprof+0x189/0x320
[  151.692008][T10793]  __se_sys_memfd_create+0x1ff/0x590
[  151.692039][T10793]  __x64_sys_memfd_create+0x31/0x40
[  151.692062][T10793]  x64_sys_call+0x2abe/0x2ff0
[  151.692108][T10793]  do_syscall_64+0xd2/0x200
[  151.692190][T10793]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  151.692229][T10793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.692256][T10793] RIP: 0033:0x7f8c9880eec9
[  151.692271][T10793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.692355][T10793] RSP: 002b:00007f8c97276d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  151.692381][T10793] RAX: ffffffffffffffda RBX: 0000000000000593 RCX: 00007f8c9880eec9
[  151.692468][T10793] RDX: 00007f8c97276dec RSI: 0000000000000000 RDI: 00007f8c98892960
[  151.692481][T10793] RBP: 00002000000005c0 R08: 00007f8c97276b07 R09: 0000000000000000
[  151.692493][T10793] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001
[  151.692505][T10793] R13: 00007f8c97276dec R14: 00007f8c97276df0 R15: 00007ffe970dbf08
[  151.692524][T10793]  </TASK>
[  151.695343][T10788] team0: Port device team_slave_1 removed
[  151.913859][T10788] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.921277][T10788] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.932259][T10788] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.939844][T10788] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.104872][T10825] loop2: detected capacity change from 0 to 512
[  152.113540][T10823] loop3: detected capacity change from 0 to 512
[  152.140110][T10825] ext4 filesystem being mounted at /515/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.156300][T10825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.165928][T10825] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.168161][T10823] journal_path: Lookup failure for './file1'
[  152.179708][T10823] EXT4-fs: error: could not find journal device path
[  152.252899][T10837] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  152.252899][T10837] The task syz.5.2665 (10837) triggered the difference, watch for misbehavior.
[  152.348040][ T3666] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.374268][T10837] Falling back ldisc for ttyS3.
[  152.389281][T10840] lo speed is unknown, defaulting to 1000
[  152.417400][ T3666] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.478258][ T3666] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.512162][T10840] chnl_net:caif_netlink_parms(): no params data found
[  152.519637][   T29] kauditd_printk_skb: 25 callbacks suppressed
[  152.519651][   T29] audit: type=1326 audit(1758986257.120:7101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb379eec9 code=0x7ffc0000
[  152.526321][T10871] loop3: detected capacity change from 0 to 1024
[  152.549323][   T29] audit: type=1326 audit(1758986257.120:7102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb379eec9 code=0x7ffc0000
[  152.560601][T10871] EXT4-fs: Ignoring removed bh option
[  152.579527][   T29] audit: type=1326 audit(1758986257.120:7103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efeb379eec9 code=0x7ffc0000
[  152.602913][T10871] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  152.608187][   T29] audit: type=1326 audit(1758986257.120:7104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb379eec9 code=0x7ffc0000
[  152.641538][   T29] audit: type=1326 audit(1758986257.130:7105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb379eec9 code=0x7ffc0000
[  152.665213][   T29] audit: type=1326 audit(1758986257.130:7106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efeb379eec9 code=0x7ffc0000
[  152.688872][   T29] audit: type=1326 audit(1758986257.130:7107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb379eec9 code=0x7ffc0000
[  152.714280][   T29] audit: type=1326 audit(1758986257.130:7108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efeb379eec9 code=0x7ffc0000
[  152.737861][   T29] audit: type=1326 audit(1758986257.130:7109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efeb379ef03 code=0x7ffc0000
[  152.761346][   T29] audit: type=1326 audit(1758986257.130:7110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efeb379d97f code=0x7ffc0000
[  152.787693][ T3666] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.842898][T10840] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.850095][T10840] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.857480][T10840] bridge_slave_0: entered allmulticast mode
[  152.864418][T10840] bridge_slave_0: entered promiscuous mode
[  152.875540][T10840] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.882640][T10840] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.890809][T10840] bridge_slave_1: entered allmulticast mode
[  152.899688][T10840] bridge_slave_1: entered promiscuous mode
[  152.926815][T10840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.958334][T10879] lo speed is unknown, defaulting to 1000
[  152.964609][T10882] loop2: detected capacity change from 0 to 512
[  152.965450][T10840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.993233][T10882] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.2673: error while reading EA inode 32 err=-116
[  153.037953][T10882] EXT4-fs (loop2): Remounting filesystem read-only
[  153.044589][T10882] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  153.057382][T10882] EXT4-fs (loop2): 1 orphan inode deleted
[  153.225695][ T3666] bond0 (unregistering): Released all slaves
[  153.240521][T10840] team0: Port device team_slave_0 added
[  153.253349][T10840] team0: Port device team_slave_1 added
[  153.293136][T10840] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.300159][T10840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.326143][T10840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.361006][T10840] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.368028][T10840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.394005][T10840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.435247][ T3666] hsr_slave_0: left promiscuous mode
[  153.451181][ T3666] hsr_slave_1: left promiscuous mode
[  153.453772][T10910] __nla_validate_parse: 18 callbacks suppressed
[  153.453790][T10910] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.2681'.
[  153.472455][ T3666] veth1_macvtap: left promiscuous mode
[  153.481063][ T3666] veth0_macvtap: left promiscuous mode
[  153.487159][ T3666] veth1_vlan: left promiscuous mode
[  153.493834][ T3666] veth0_vlan: left promiscuous mode
[  153.811872][T10924] loop5: detected capacity change from 0 to 512
[  153.834365][T10924] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.2684: error while reading EA inode 32 err=-116
[  153.848372][T10924] EXT4-fs (loop5): Remounting filesystem read-only
[  153.855043][T10924] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  153.865394][T10924] EXT4-fs (loop5): 1 orphan inode deleted
[  153.888517][T10840] hsr_slave_0: entered promiscuous mode
[  153.912588][T10840] hsr_slave_1: entered promiscuous mode
[  153.928756][T10840] debugfs: 'hsr0' already exists in 'hsr'
[  153.934594][T10840] Cannot create hsr debugfs directory
[  153.940174][T10926] lo speed is unknown, defaulting to 1000
[  154.202858][T10947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.211451][T10947] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.518957][T10840] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  154.565050][T10840] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  154.601008][T10840] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  154.615962][T10840] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  154.705670][T10840] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.737881][T10840] 8021q: adding VLAN 0 to HW filter on device team0
[  154.765283][ T3673] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.772426][ T3673] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.787809][T10969] lo speed is unknown, defaulting to 1000
[  154.797397][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.804512][ T3665] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.982089][T10840] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.200656][T10840] veth0_vlan: entered promiscuous mode
[  155.210482][T10840] veth1_vlan: entered promiscuous mode
[  155.232831][T10840] veth0_macvtap: entered promiscuous mode
[  155.241319][T10840] veth1_macvtap: entered promiscuous mode
[  155.255095][T10840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.267612][T10840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.280964][ T3666] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.300780][ T3666] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.312036][T11004] lo speed is unknown, defaulting to 1000
[  155.329037][ T3666] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.339459][ T3666] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.434585][T11011] lo speed is unknown, defaulting to 1000
[  155.468975][T11013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2699'.
[  155.486079][T11014] loop6: detected capacity change from 0 to 512
[  155.509358][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2699'.
[  155.525470][T11014] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.2698: error while reading EA inode 32 err=-116
[  155.544391][T11014] EXT4-fs (loop6): Remounting filesystem read-only
[  155.550976][T11014] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  155.603970][T11014] EXT4-fs (loop6): 1 orphan inode deleted
[  155.790400][T11031] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2702'.
[  155.800931][T11024] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2702'.
[  155.837148][T11033] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2707'.
[  155.846305][T11033] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  155.853614][T11033] 0ªî{X¹¦: entered allmulticast mode
[  155.861384][T11033] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  156.012692][T11046] FAULT_INJECTION: forcing a failure.
[  156.012692][T11046] name failslab, interval 1, probability 0, space 0, times 0
[  156.025389][T11046] CPU: 0 UID: 0 PID: 11046 Comm: syz.6.2713 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  156.025412][T11046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  156.025480][T11046] Call Trace:
[  156.025487][T11046]  <TASK>
[  156.025493][T11046]  __dump_stack+0x1d/0x30
[  156.025511][T11046]  dump_stack_lvl+0xe8/0x140
[  156.025576][T11046]  dump_stack+0x15/0x1b
[  156.025594][T11046]  should_fail_ex+0x265/0x280
[  156.025620][T11046]  should_failslab+0x8c/0xb0
[  156.025714][T11046]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  156.025772][T11046]  ? sidtab_sid2str_get+0xa0/0x130
[  156.025792][T11046]  kmemdup_noprof+0x2b/0x70
[  156.025879][T11046]  sidtab_sid2str_get+0xa0/0x130
[  156.025899][T11046]  security_sid_to_context_core+0x1eb/0x2e0
[  156.025925][T11046]  security_sid_to_context+0x27/0x40
[  156.025944][T11046]  selinux_lsmprop_to_secctx+0x67/0xf0
[  156.026004][T11046]  security_lsmprop_to_secctx+0x43/0x80
[  156.026037][T11046]  audit_log_task_context+0x77/0x190
[  156.026130][T11046]  audit_log_task+0xf4/0x250
[  156.026210][T11046]  audit_seccomp+0x61/0x100
[  156.026239][T11046]  ? __seccomp_filter+0x68c/0x10d0
[  156.026334][T11046]  __seccomp_filter+0x69d/0x10d0
[  156.026360][T11046]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  156.026386][T11046]  ? vfs_write+0x7e8/0x960
[  156.026405][T11046]  ? __rcu_read_unlock+0x4f/0x70
[  156.026429][T11046]  ? __fget_files+0x184/0x1c0
[  156.026468][T11046]  __secure_computing+0x82/0x150
[  156.026517][T11046]  syscall_trace_enter+0xcf/0x1e0
[  156.026546][T11046]  do_syscall_64+0xac/0x200
[  156.026577][T11046]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  156.026661][T11046]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  156.026691][T11046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.026716][T11046] RIP: 0033:0x7ff44d54eec9
[  156.026733][T11046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.026788][T11046] RSP: 002b:00007ff44bfaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  156.026866][T11046] RAX: ffffffffffffffda RBX: 00007ff44d7a5fa0 RCX: 00007ff44d54eec9
[  156.026880][T11046] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003
[  156.026894][T11046] RBP: 00007ff44bfaf090 R08: 0000000000000000 R09: 0000000000000000
[  156.026907][T11046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  156.026917][T11046] R13: 00007ff44d7a6038 R14: 00007ff44d7a5fa0 R15: 00007ffc5a806648
[  156.026933][T11046]  </TASK>
[  156.348672][T11059] program syz.6.2717 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  156.398819][T11061] sit0: entered allmulticast mode
[  156.408996][T11061] sit0: entered promiscuous mode
[  156.435326][T11066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.454267][T11066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.791970][T11067] lo speed is unknown, defaulting to 1000
[  157.155774][T11078] loop6: detected capacity change from 0 to 2048
[  157.252934][T11078] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2724'.
[  157.261991][T11078] netlink: 'syz.6.2724': attribute type 14 has an invalid length.
[  157.304400][T11085] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.2724: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  157.310904][T11078] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2724'.
[  157.329875][T11078] netlink: 'syz.6.2724': attribute type 14 has an invalid length.
[  157.338246][ T3676] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  157.400295][ T3676] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  157.426817][T11087] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.2724: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  157.433795][ T3676] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  157.459424][T11091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2729'.
[  157.472120][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2729'.
[  157.481562][ T3676] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  157.772618][T11112] lo speed is unknown, defaulting to 1000
[  157.923215][T11126] lo speed is unknown, defaulting to 1000
[  158.210239][T11157] loop2: detected capacity change from 0 to 1024
[  158.224643][T11157] EXT4-fs: Ignoring removed bh option
[  158.252469][T11157] EXT4-fs: Ignoring removed orlov option
[  158.258295][T11157] EXT4-fs: Ignoring removed nomblk_io_submit option
[  158.318487][T11167] loop5: detected capacity change from 0 to 512
[  158.329412][T11168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.343125][T11168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.351533][T11167] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  158.378651][T11167] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.407763][T11172] lo speed is unknown, defaulting to 1000
[  158.429673][   T29] kauditd_printk_skb: 115 callbacks suppressed
[  158.429689][   T29] audit: type=1400 audit(1758986263.050:7225): avc:  denied  { remount } for  pid=11165 comm="syz.5.2746" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  158.460217][T11167] EXT4-fs error (device loop5): __ext4_remount:6740: comm syz.5.2746: Abort forced by user
[  158.477108][T11167] EXT4-fs (loop5): Remounting filesystem read-only
[  158.483654][T11167] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000d40000 ro.
[  158.519502][T11179] loop3: detected capacity change from 0 to 512
[  158.544165][T11179] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.2749: error while reading EA inode 32 err=-116
[  158.571765][   T29] audit: type=1326 audit(1758986263.180:7226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  158.574382][T11189] __nla_validate_parse: 1 callbacks suppressed
[  158.574401][T11189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2754'.
[  158.595348][   T29] audit: type=1326 audit(1758986263.180:7227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  158.617969][T11179] EXT4-fs (loop3): Remounting filesystem read-only
[  158.634184][   T29] audit: type=1326 audit(1758986263.180:7228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  158.640596][T11179] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  158.664237][T11179] EXT4-fs (loop3): 1 orphan inode deleted
[  158.674354][   T29] audit: type=1326 audit(1758986263.180:7229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  158.674395][   T29] audit: type=1326 audit(1758986263.180:7230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  158.674428][   T29] audit: type=1326 audit(1758986263.180:7231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  158.674495][   T29] audit: type=1326 audit(1758986263.180:7232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  158.774170][   T29] audit: type=1326 audit(1758986263.180:7233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  158.797686][   T29] audit: type=1326 audit(1758986263.180:7234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f802eec9 code=0x7ffc0000
[  158.958945][T11206] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2760'.
[  159.005672][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2760'.
[  159.058133][T11213] loop2: detected capacity change from 0 to 128
[  159.094038][T11213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  159.101905][T11213] FAT-fs (loop2): Filesystem has been set read-only
[  159.104847][T11215] lo speed is unknown, defaulting to 1000
[  159.117896][T11213] bio_check_eod: 114 callbacks suppressed
[  159.117907][T11213] syz.2.2762: attempt to access beyond end of device
[  159.117907][T11213] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  159.152583][T11213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  159.160681][T11213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  159.172334][T11213] syz.2.2762: attempt to access beyond end of device
[  159.172334][T11213] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  159.189396][T11213] syz.2.2762: attempt to access beyond end of device
[  159.189396][T11213] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  159.203474][T11213] syz.2.2762: attempt to access beyond end of device
[  159.203474][T11213] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  159.216906][T11213] syz.2.2762: attempt to access beyond end of device
[  159.216906][T11213] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  159.230692][T11213] syz.2.2762: attempt to access beyond end of device
[  159.230692][T11213] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  159.244447][T11213] syz.2.2762: attempt to access beyond end of device
[  159.244447][T11213] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  159.261171][T11223] syz.2.2762: attempt to access beyond end of device
[  159.261171][T11223] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128
[  159.274546][T11223] Buffer I/O error on dev loop2, logical block 2065, async page read
[  159.274803][T11225] loop3: detected capacity change from 0 to 512
[  159.287900][T11220] lo speed is unknown, defaulting to 1000
[  159.344316][T11223] syz.2.2762: attempt to access beyond end of device
[  159.344316][T11223] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128
[  159.346479][T11225] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.2763: error while reading EA inode 32 err=-116
[  159.357691][T11223] Buffer I/O error on dev loop2, logical block 2066, async page read
[  159.378238][T11223] syz.2.2762: attempt to access beyond end of device
[  159.378238][T11223] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128
[  159.391558][T11223] Buffer I/O error on dev loop2, logical block 2067, async page read
[  159.396543][T11225] EXT4-fs (loop3): Remounting filesystem read-only
[  159.402727][T11223] Buffer I/O error on dev loop2, logical block 2068, async page read
[  159.406299][T11225] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  159.414390][T11223] Buffer I/O error on dev loop2, logical block 2069, async page read
[  159.439731][T11223] Buffer I/O error on dev loop2, logical block 2070, async page read
[  159.447861][T11223] Buffer I/O error on dev loop2, logical block 2071, async page read
[  159.456016][T11223] Buffer I/O error on dev loop2, logical block 2072, async page read
[  159.464224][T11223] Buffer I/O error on dev loop2, logical block 2065, async page read
[  159.472609][T11223] Buffer I/O error on dev loop2, logical block 2066, async page read
[  159.481540][T11225] EXT4-fs (loop3): 1 orphan inode deleted
[  159.832121][T11257] lo speed is unknown, defaulting to 1000
[  159.857709][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2771'.
[  159.866720][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2771'.
[  159.955738][T11263] FAULT_INJECTION: forcing a failure.
[  159.955738][T11263] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  159.968896][T11263] CPU: 0 UID: 0 PID: 11263 Comm: syz.2.2774 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  159.968927][T11263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  159.968940][T11263] Call Trace:
[  159.968946][T11263]  <TASK>
[  159.968953][T11263]  __dump_stack+0x1d/0x30
[  159.968999][T11263]  dump_stack_lvl+0xe8/0x140
[  159.969021][T11263]  dump_stack+0x15/0x1b
[  159.969037][T11263]  should_fail_ex+0x265/0x280
[  159.969087][T11263]  should_fail+0xb/0x20
[  159.969108][T11263]  should_fail_usercopy+0x1a/0x20
[  159.969138][T11263]  _copy_from_iter+0xd2/0xe80
[  159.969182][T11263]  ? __build_skb_around+0x1a0/0x200
[  159.969271][T11263]  ? __alloc_skb+0x223/0x320
[  159.969294][T11263]  netlink_sendmsg+0x471/0x6b0
[  159.969329][T11263]  ? __pfx_netlink_sendmsg+0x10/0x10
[  159.969354][T11263]  __sock_sendmsg+0x145/0x180
[  159.969418][T11263]  ____sys_sendmsg+0x31e/0x4e0
[  159.969515][T11263]  ___sys_sendmsg+0x17b/0x1d0
[  159.969565][T11263]  __x64_sys_sendmsg+0xd4/0x160
[  159.969641][T11263]  x64_sys_call+0x191e/0x2ff0
[  159.969663][T11263]  do_syscall_64+0xd2/0x200
[  159.969757][T11263]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  159.969782][T11263]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  159.969836][T11263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.969858][T11263] RIP: 0033:0x7f08f802eec9
[  159.969873][T11263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.969897][T11263] RSP: 002b:00007f08f6a8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  159.969923][T11263] RAX: ffffffffffffffda RBX: 00007f08f8285fa0 RCX: 00007f08f802eec9
[  159.969940][T11263] RDX: 0000000004000000 RSI: 0000200000001b40 RDI: 0000000000000003
[  159.970027][T11263] RBP: 00007f08f6a8f090 R08: 0000000000000000 R09: 0000000000000000
[  159.970043][T11263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.970060][T11263] R13: 00007f08f8286038 R14: 00007f08f8285fa0 R15: 00007ffcbdb4c308
[  159.970085][T11263]  </TASK>
[  160.318379][T11277] loop6: detected capacity change from 0 to 512
[  160.385750][T11277] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.402980][T11288] lo speed is unknown, defaulting to 1000
[  160.458585][T11277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.470334][T11290] loop5: detected capacity change from 0 to 512
[  160.519734][T11277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.559474][T11290] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.2784: error while reading EA inode 32 err=-116
[  160.588611][T11290] EXT4-fs (loop5): Remounting filesystem read-only
[  160.595380][T11290] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  160.688179][T11290] EXT4-fs (loop5): 1 orphan inode deleted
[  161.191918][T11300] lo speed is unknown, defaulting to 1000
[  161.358778][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'.
[  161.395540][T11310] bond0: entered promiscuous mode
[  161.400774][T11310] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  161.504015][T11310] bond0: left promiscuous mode
[  161.536153][T11325] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2793'.
[  161.546474][T11317] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2793'.
[  161.719454][T11344] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2804'.
[  161.744867][T11346] lo speed is unknown, defaulting to 1000
[  161.970138][T11380] lo speed is unknown, defaulting to 1000
[  162.092081][T11394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2816'.
[  162.149151][T11399] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  162.206081][T11399] IPv6: sit1: Disabled Multicast RS
[  162.218775][T11399] sit1: entered allmulticast mode
[  162.384129][T11419] FAULT_INJECTION: forcing a failure.
[  162.384129][T11419] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  162.397249][T11419] CPU: 0 UID: 0 PID: 11419 Comm: syz.3.2826 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  162.397333][T11419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  162.397360][T11419] Call Trace:
[  162.397368][T11419]  <TASK>
[  162.397376][T11419]  __dump_stack+0x1d/0x30
[  162.397403][T11419]  dump_stack_lvl+0xe8/0x140
[  162.397427][T11419]  dump_stack+0x15/0x1b
[  162.397448][T11419]  should_fail_ex+0x265/0x280
[  162.397496][T11419]  should_fail+0xb/0x20
[  162.397518][T11419]  should_fail_usercopy+0x1a/0x20
[  162.397588][T11419]  strncpy_from_user+0x25/0x230
[  162.397699][T11419]  ? kmem_cache_alloc_noprof+0x186/0x310
[  162.397732][T11419]  ? getname_flags+0x80/0x3b0
[  162.397785][T11419]  getname_flags+0xae/0x3b0
[  162.397821][T11419]  __x64_sys_renameat2+0x6c/0x90
[  162.397897][T11419]  x64_sys_call+0x3f9/0x2ff0
[  162.397924][T11419]  do_syscall_64+0xd2/0x200
[  162.397967][T11419]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  162.398073][T11419]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  162.398104][T11419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.398143][T11419] RIP: 0033:0x7efeb379eec9
[  162.398161][T11419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.398212][T11419] RSP: 002b:00007efeb21ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  162.398237][T11419] RAX: ffffffffffffffda RBX: 00007efeb39f5fa0 RCX: 00007efeb379eec9
[  162.398253][T11419] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: ffffffffffffff9c
[  162.398268][T11419] RBP: 00007efeb21ff090 R08: 0000000000000000 R09: 0000000000000000
[  162.398281][T11419] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001
[  162.398293][T11419] R13: 00007efeb39f6038 R14: 00007efeb39f5fa0 R15: 00007ffeaf6da0f8
[  162.398326][T11419]  </TASK>
[  162.698330][T11428] lo speed is unknown, defaulting to 1000
[  162.757782][T11435] loop2: detected capacity change from 0 to 512
[  162.866679][T11435] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.2833: error while reading EA inode 32 err=-116
[  162.919513][T11435] EXT4-fs (loop2): Remounting filesystem read-only
[  162.926122][T11435] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  162.975340][T11435] EXT4-fs (loop2): 1 orphan inode deleted
[  162.981475][T11435] EXT4-fs mount: 35 callbacks suppressed
[  162.981488][T11435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.241476][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.319126][T11500] loop2: detected capacity change from 0 to 1024
[  163.328892][T11498] lo speed is unknown, defaulting to 1000
[  163.346505][T11500] EXT4-fs: Ignoring removed oldalloc option
[  163.352466][T11500] EXT4-fs: Ignoring removed bh option
[  163.403937][T11505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.414071][T11505] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.427076][T11507] loop6: detected capacity change from 0 to 1024
[  163.435451][T11500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.448931][T11507] EXT4-fs: Ignoring removed oldalloc option
[  163.455010][T11507] EXT4-fs: Ignoring removed bh option
[  163.477846][T11507] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.620866][T11515] ==================================================================
[  163.628990][T11515] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark
[  163.636127][T11515] 
[  163.638458][T11515] write to 0xffff8881194e29a4 of 4 bytes by task 11507 on cpu 0:
[  163.646197][T11515]  xas_set_mark+0x12b/0x140
[  163.650724][T11515]  __folio_start_writeback+0x1dd/0x440
[  163.656198][T11515]  ext4_bio_write_folio+0x5ad/0x9f0
[  163.661419][T11515]  mpage_process_page_bufs+0x4a1/0x620
[  163.666887][T11515]  mpage_prepare_extent_to_map+0x786/0xc00
[  163.672722][T11515]  ext4_do_writepages+0xa05/0x2750
[  163.677874][T11515]  ext4_writepages+0x176/0x300
[  163.682660][T11515]  do_writepages+0x1c3/0x310
[  163.687285][T11515]  file_write_and_wait_range+0x156/0x2c0
[  163.692947][T11515]  generic_buffers_fsync_noflush+0x45/0x120
[  163.698849][T11515]  ext4_sync_file+0x1ab/0x690
[  163.703531][T11515]  vfs_fsync_range+0x10a/0x130
[  163.708333][T11515]  ext4_buffered_write_iter+0x34f/0x3c0
[  163.713905][T11515]  ext4_file_write_iter+0x383/0xf00
[  163.719141][T11515]  iter_file_splice_write+0x666/0xa60
[  163.724539][T11515]  direct_splice_actor+0x156/0x2a0
[  163.729689][T11515]  splice_direct_to_actor+0x312/0x680
[  163.735073][T11515]  do_splice_direct+0xda/0x150
[  163.739847][T11515]  do_sendfile+0x380/0x650
[  163.744290][T11515]  __x64_sys_sendfile64+0x105/0x150
[  163.749518][T11515]  x64_sys_call+0x2bb0/0x2ff0
[  163.754227][T11515]  do_syscall_64+0xd2/0x200
[  163.758769][T11515]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.764677][T11515] 
[  163.767015][T11515] read to 0xffff8881194e29a4 of 4 bytes by task 11515 on cpu 1:
[  163.774661][T11515]  xas_find_marked+0x5dc/0x620
[  163.779460][T11515]  find_get_entry+0x5d/0x380
[  163.784072][T11515]  filemap_get_folios_tag+0x92/0x210
[  163.789376][T11515]  mpage_prepare_extent_to_map+0x320/0xc00
[  163.795202][T11515]  ext4_do_writepages+0x708/0x2750
[  163.800336][T11515]  ext4_writepages+0x176/0x300
[  163.805187][T11515]  do_writepages+0x1c3/0x310
[  163.809784][T11515]  file_write_and_wait_range+0x156/0x2c0
[  163.815469][T11515]  generic_buffers_fsync_noflush+0x45/0x120
[  163.821366][T11515]  ext4_sync_file+0x1ab/0x690
[  163.826043][T11515]  vfs_fsync_range+0x10a/0x130
[  163.830816][T11515]  ext4_buffered_write_iter+0x34f/0x3c0
[  163.836377][T11515]  ext4_file_write_iter+0x383/0xf00
[  163.841599][T11515]  iter_file_splice_write+0x666/0xa60
[  163.846975][T11515]  direct_splice_actor+0x156/0x2a0
[  163.852112][T11515]  splice_direct_to_actor+0x312/0x680
[  163.857488][T11515]  do_splice_direct+0xda/0x150
[  163.862252][T11515]  do_sendfile+0x380/0x650
[  163.866674][T11515]  __x64_sys_sendfile64+0x105/0x150
[  163.871887][T11515]  x64_sys_call+0x2bb0/0x2ff0
[  163.876568][T11515]  do_syscall_64+0xd2/0x200
[  163.881082][T11515]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.886984][T11515] 
[  163.889306][T11515] value changed: 0x0a000021 -> 0x04000021
[  163.895020][T11515] 
[  163.897343][T11515] Reported by Kernel Concurrency Sanitizer on:
[  163.903497][T11515] CPU: 1 UID: 0 PID: 11515 Comm: syz.6.2850 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  163.913329][T11515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  163.923387][T11515] ==================================================================
[  164.281936][T10840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.306250][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.