last executing test programs:

2.177227644s ago: executing program 0 (id=2220):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0)

1.548286486s ago: executing program 3 (id=2222):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]})
write(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r0 = gettid()
r1 = getpid()
rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f00000019c0)={0x0, 0x3, 0x4})

1.547672646s ago: executing program 0 (id=2223):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x4}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
r2 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = inotify_init()
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
inotify_add_watch(r6, &(0x7f0000000240)='./file0\x00', 0x4000cdd)
close_range(r5, 0xffffffffffffffff, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24040088}, 0x40)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r7 = getpid()
ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000300)=""/69)
sched_setscheduler(r7, 0x2, 0x0)

1.521386199s ago: executing program 2 (id=2224):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x2f6}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x98d}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x2}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x6}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004014}, 0x8000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff)

1.517930299s ago: executing program 1 (id=2225):
r0 = socket(0x2a, 0x1, 0x3)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c0000000004000000fc000000000000000000000000000002e000000200000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000400000000000008000000000000000000000000000fcffffffffffffff0000000000000000020000000002000000000000000000000000000000000000000400000000000000000000000000000a00100001"], 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x4c050)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001d0001"], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
setresgid(0xee00, 0xee01, 0x0)
setgroups(0x0, 0x0)
setuid(0xee00)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x0)
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, r5, 0x0)
setrlimit(0x8, &(0x7f0000000040)={0x4, 0x1800000})
shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
io_setup(0x20, &(0x7f0000001140)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f00000001c0)=[&(0x7f0000000d80)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r6, &(0x7f0000000c40)='\r2', 0x2}])
sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="f00000001a0001000000000000000000fe880000000000000000000000000101fc0000000000000000000000000000000000000000000002ff80000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000001000000000000000000aa00000a0032000000e000000100000000000000000000000004000000000000000000000000000000000000000000000000000057bd97bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff020000000000000000000000000000002abd7000083500000a00020062000000000000008df6908a0817a8491de9e24b3562a36ea5a9f4d1f3330bf5be40dbae302e1cf662dbf372087b01f6a95950162fc321b37eb33cabb3b40306ec8e708be90d2e1474a6df371f9100"/243], 0xf0}}, 0x0)

1.427360448s ago: executing program 0 (id=2226):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000b6950bb33fce48bbe9942b07b92196442dcd6dfeeeaa72c24edb2250e29e2c240fbdc7f734bcf0819c361fa44e1f844a3fc24a12d10316cf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x4}, 0x18)
r3 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r5, 0x0, 0x4804}, 0x18)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'ip6gretap0\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r8 = socket(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x20, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8, 0x1d, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffffffdc, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0)

1.426682658s ago: executing program 2 (id=2227):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="020300030e0000002cbd7040fcdbdf2502000900400000001cdc0dca1d9f6884030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a000000000000000002001300"], 0x70}, 0x1, 0x7}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000200)={0x1, 0xb2, 0x2})
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x9, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES64=r2, @ANYRES8=r1], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x3d, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000)
capset(0x0, &(0x7f0000000080))
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$netlink(r3, 0x10e, 0xa, 0x0, &(0x7f0000000240))
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000b00)={<r4=>0x0, "c6a99270c1caaa3e00000000fc5b3af2"})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000002000)={r4, "3d5e7fadabe9c35b876717591f836a86"})
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/if_inet6\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3)
getdents(r5, &(0x7f0000000f40)=""/243, 0xf3)
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
munmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000)
pipe2$9p(&(0x7f0000000000), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x8000}, 0x18)
r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
fsmount(r6, 0x0, 0x6)

1.234553807s ago: executing program 3 (id=2228):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48)
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
write$binfmt_elf32(r2, &(0x7f0000001440)=ANY=[@ANYBLOB="7f454c460b397a2dd4000000000000000300060007000000ba03000038000000fd2600000180ffff060020000100020004000600000000000300000000000000040000000900e6fffe"], 0x58)
inotify_init1(0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
write$tcp_mem(r3, &(0x7f0000000000)={0x6, 0x2d, 0xfffffffffffffffc, 0x3a, 0x0, 0x2c}, 0x48)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000880)=ANY=[@ANYBLOB="0300000000000000000000000020000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000e8ff00000000"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="020300030c0000000007000000000000020009001000000053bb00000000000003000600000000000200100000000000000000000000000002000100000000000000060d00000000030005000000000002000000"], 0x60}, 0x1, 0x7}, 0x0)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6bb04527f514ee0f)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0x2, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000240)=0x9)
sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x91}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @fallback=0x36}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000002000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")

1.122304959s ago: executing program 2 (id=2229):
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x11, 0xffffffffffffffff, 0x338c0000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18)
syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x2b, 0x0, @local, @local, {[@hopopts={0x3c}], {{0x0, 0xfffd, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

1.074322523s ago: executing program 0 (id=2231):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000900000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xa, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811000014678ee5f3ca0e9864f586086cc2794695dbf1fbe843846ef9005d6a2254aa4e6b85e0efdcce187606df0e51bb13bdfad634bfa9aeb27b49056db421a42c0b2f41c9bfb17250da44dc71a7a75b35ebb7255eadc927bb8ba92022b20d545eb5cf96afcb185cdade1b8096387764e3570307ed6c96d73189ba463eb4c4adb2cebb9860c40ccceaeab147b23d60f35987d2caa0cdfd292f", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r1], 0x28}}, 0x24000080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8701)
ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0xbe, 0x2, 0x7ffc9ffe}]})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r4}, 0x10)
getpgrp(0x0)
r5 = fcntl$dupfd(r3, 0x406, r3)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x47, &(0x7f0000000680)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r6)
inotify_rm_watch(0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000140)='netlink_extack\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400009bf)
openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x105000, 0x10)

1.070447463s ago: executing program 2 (id=2232):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000900000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xa, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811000014678ee5f3ca0e9864f586086cc2794695dbf1fbe843846ef9005d6a2254aa4e6b85e0efdcce187606df0e51bb13bdfad634bfa9aeb27b49056db421a42c0b2f41c9bfb17250da44dc71a7a75b35ebb7255eadc927bb8ba92022b20d545eb5cf96afcb185cdade1b8096387764e3570307ed6c96d73189ba463eb4c4adb2cebb9860c40ccceaeab147b23d60f35987d2caa0cdfd292f", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r1], 0x28}}, 0x24000080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8701)
ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0xbe, 0x2, 0x7ffc9ffe}]})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r4}, 0x10)
getpgrp(0x0)
r5 = fcntl$dupfd(r3, 0x406, r3)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x47, &(0x7f0000000680)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r6)
inotify_rm_watch(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0xedf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400009bf)
openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x105000, 0x10)

1.034964717s ago: executing program 3 (id=2233):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x702, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f00000003c0)=r0}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000700)=ANY=[], 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4b7e139044387aa"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x33, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
setpriority(0x1, 0x0, 0xb842)
io_uring_setup(0x606a, &(0x7f00000002c0)={0x0, 0xee15, 0x4000, 0x0, 0x260})
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)

1.018374869s ago: executing program 1 (id=2234):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010003000000000000002600"], 0x2c}}, 0x0)

934.322717ms ago: executing program 1 (id=2236):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000000000283cb70800000000ff0f0000000000000000001a020000f8ffffffb703000008000000b7040000000000008500000016000000950000a100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)
syz_clone(0x22000, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb89, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x900000003fffc, 0x4, 0xbe, 0x10005, 0xde7, 0x6], 0x11, 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1]}, 0x8c)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

887.829142ms ago: executing program 4 (id=2239):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="44eb7ffc9d32d50cc0f0d43ee4b9e5d3a4e909daa6a672fee3b8f4f4c9ebce3f4d3acfdd3cee338cbb4e4fba74d2645119eece786cd1a5d4ac97f1e9413411e24fffac297440a21ad0cc6d861b1019082cd966e1a9c5c1ee16497dc784e8c47ab6b7ef3eb34b8859db8e0c7bd5f8027ef2fdd97d0a61683ecc64dcdecbed03311e1920a15564a967cefbada0f23044a4513d4bc832b1807472ced446ee95877350ccdde055b8c0d9bcc5246de4704e49529ca919c69e2abbc7fee8a0f1", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf2501000000050004000100000006001a004e230000050021000100000008001800ac1414bb06000300070000000500220000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e0000008500000007"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000007c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x4000)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r6, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r8, 0x0, 0x3}, 0x18)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="35020000812800001800"], 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0)

856.765375ms ago: executing program 3 (id=2240):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000"], 0x48)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="15452f1c17ce03519634b0f248cd4f35bfbe040d6bec3aac6dbdaea4e21f786824ca85", 0x23}, {&(0x7f0000000100)="445fad3126ce24909e1424d14663981d8c0359c7bc376dafed5c51728053486f03e6c2c2c7c2", 0x26}], 0x2}, 0x404c080)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414350000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000002abd700028bd7000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x1a0}}, 0x0)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000280)={'ipvlan0\x00', {0x2, 0x4e24, @rand_addr=0xac141437}})
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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")
r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
write$binfmt_register(r5, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b)
write$selinux_load(0xffffffffffffffff, &(0x7f0000001780)={0xf97cff8c, 0x8, 'SE Linux', "7cde086fa01c3bd14f1fc3440f8c4eafb2632c2e27c9d895705bc56d7111509203df4ecc225e651cea1ab8286569f8412b1a84c91afb00c0b5042aa88548826e995b826caef7c562032d1c712f3814bc61ccbbd598e33ea94f46a7cf1a4fd928a81ea125ff426ff55a32dc8a0c6821428353919f6cbf9d561ffe31d49119faad392c36a9e6489f53dd94901bf75ecef4d8145924d3197802e4ddfd5094f97b3c3eb5c33c99883428d21ae09acd0d2abc1bf3a60cca01560c549df9e7b76224695c7e39eb267ec156cce412b6b7d5c13a4295d236386891702678392f40900d4e45881d0f470a51842856d25d180af7b94514bfda15bbff661c06b7f0163accf17584f431e605d7c8f5247bde77fcf776f1988ab20f83b793ac9b23fb69bfd681f8c63ce894e4a425d9a2ff83b6293e146227db7da8238d5cf618f9e59345ff70625780a986b54244e22f15a91197d096101d7d37454486b863222a19d283ff928dff67d3bf9d92e1962eb3e13cb7ba3a9ec6255948ae2e81345e76e4fc50a7fb56a823f765b1987b2dbe7468bbbdce953f3e1caa8263ce5cfb3f92e7a4458da908acd606bbb84cea1c3e5754f1a86c68d755feb0078cfcdf9fea32b79ed7aa8c98a241fd8b9ee86ea87cd623759725445e9a89533ce29865d29a42754ebbb765a7a93df443a39a74278bdf51a0c93a31d321c2b3b65bc93ba94bb62cf7f48e0d0127958060fb6d37dc1a5cf8fa8acee30f4951e7b9f6c9a0a87c5c5b84bc8638f10adb519afb3e055b8152383cdcec935b214b287b45908f238c1a9aa619a2012fb79d0daafb81ba1ca956a773c92ef1a54d075c23655dcddb4936f69e2b384c75188c1e538016d5d7276739a52032b1f5ba2e8f9d9832033c5b9c24f28c4abd1aed9347b8aecb199bed86db4df591d216db713df365714d7f5867fab13e2c67f1c1aacba247c5d28a18b1c11fb901ee75c4816eeaf9619c31c30d71a4cbd01486797bfdf2778256117c753f20bf1a2edf2a41adbd29f5076cda50683d6f455f7195446f9bdc3576f963b539d41cb0907a00ce110dbca67f5125db734a1c0579e6975e5b3cea839c558ae5843921b1a900a8335f82b708c1d4d501145b1ef32b62483477657a4c9685bb33143146f7c9cec44113b92c6b657e94b192c84a2a321c79319232cccab8e6f6ea32a59dd3e716ee92b3c8aa619ec1d4996ce240baa375997eed61fb2e52f15728aef395a22ae500ca9ca10a14c271fa22d1f87ca22a7832a2c27341bd0ba53cde524e30a0ace4f56a3c6b450ac23194d21a204d65f42a9685f8f335aa547c9401799181d53c856ef8f010290029f4b43183451f4c8feedd98410c7ddbf7cbe4a44a285e066fdbacd2c3ac21f8b6b48860718fc7bb70d70321a65e55a423c6e0430c250b05849d8d40c7d26a3831b68b4b5a7e61c6b83c500789c95aa7c2bea87acd1cb784ddcee44765e838ca23868842835be3ae494b42a5bffe6a25b13dabf977ab806352c5eb9c7159fee01f30c73181cfe9ab9e730cb885b754a093f05de5515c037cfe53de2de7edfc0773049d22e12733abd40fab6ff2af35e13db81dcc93f7b124c9edc78038e42a9bd7cf4eb3ad6b7ace9434c0516597e0106f43c4325fade510fe4bc35b1d0704d1e198c0d6856bf031d06482021537ec00276b873c46e34e3e0a4131f2a85e5003869db38ba0a5cacd4a54128c4c7126fed7505beed7a477d142491c6c35da3f801853670997d6721c205c6ef38a71773a93a43b63ae66219ad14c4841140cd0a3237b2ddbf44a5273f6464859e20f983cc249674d6a1480503c7dbebff1822bf7d986cb1a1e98eccb0b5649e23adc6a8fdca0fbc7624375128d738df062e8f371918b8e1336e6f1dfd4e70a5b374d8f74da83e501069d7f79259f411dc6415dd3f2b8ccd1306e617c6395b23969d271985cfde9215c03d8ddac7c420bf1aab7f7b613ba3128b2eadc8712223ee6b231c120930262e4f362439c5875d30b9103458e04f557fbaad7172c787d568de9d1bdb8d782f37b233fd848bef735cac0988bc1fc05f41e879df2b4a4c01f53a38ca3f5ddc6617e3548f4b34a1fae2e5785e870d2732ce75447a24975ebdfe077974b265432b957c8771f0115c7aa5fcf7c396c28775583fbcc15c467d141344ab62420b87da76c751f8ef8643f38690b0fc231777beb928a600f3e1a1500cc6e5d23c2bd2b16427d9e5ca7b7280d8e5cd4214464016d5729fee6e99195344eb88d173872ce9b3942ec767d6227d12ea285c12b65ce4080686438b676a7cae620e920919b329aede7f23f4a47dd1821a29c951fe53f6d7c40b12229ee22010a5bcf6934620c31dda8153da173ae9398e59351f1e8c58432cd9f01b6a810fa8b5f329636ecea46b3fe27d66b0aa5644489f045c155fa641bafce13e7f32deae500a1d644dec998ebcfac67df7b24f8037e3f6473439173ccf803dc29739c85460e68f52c3505d3d9cd6445ee0dd009e7e44879e3e72bb72547fa47848318dde24cd0a4a5f365bd38d23ad656f65a7a9f854d3cc1d3431d4c37436ae30bf18ba98f0ae6128d6652900a5ba3585b864ada0bee757629c7c2ecb599beb815abb37e069668c67fc7afd478c3cf3332d2aa401e5cb192654dc3e68bb5e3bcc6bb0ae0c7de480a92b3395400b8a0b57536984c1117c2a65db55133dab3fd95942917f48c3278351baca2b1f2523f95b7de84eafdcd61f4c3754218ce88e924accee6e0285a6dd4d7e9cb21b247c5a1f7c5d63ce833244e03bd1ab4157a8a6c1d440f36b5224d43ab765768f38d7a8f2aff1e949df758e9fe0ff14ad6ab337901ba0bab343f5ff775a675672f3ba0349f47a7164954f7fa218c007eb1e491be6b635ef2b9a1005166daa7da642042067bb9e39d7bd791a0aae88344d6c5ee7a1715ae1d2c29431a8835c152942bf6b503b91fe32f777bb986b94da6d8aca518443b67c1725615caa8e31e8a64d59bd480c00a83fb4003913dd54baba08e8837047307f4f7437c69100dba38051aae48fbfe2416ef8910bf857e46c4b50ff7baca750207aa34da80d173f8ced1365ab5bea1b873c9ae77dd378804cbafd93bd12beb2d3d781505d3c35faf850445054c4c7dfd8866e985d2a3176a3486eafe3b48c1acf72608c5bf819daa02a754c5d1493666b2d34b42328219f3971a16b669b12c097a63062cbbf52fec9960134da6289553f03e863148bdfad9430631f148459ad20749df8ae3e4673ffea588509c63cfa8e8e3fe63564bcbf557a978073633659ee33f511b6f6943d352f03ea56a9f0f182d5c909c87abfc02b95671546a5188ff2e4c25a3b0be5a931a0b1d9ab2e94d224b0aeb3afcf55f096685ac591eed5da256539fe5f7f6fa0d1ee577e57e927e128d42340550ac2d59f17c70feb93987a8b320d69c9d25d80f501f5968534115500ef620aa03479360ad6890ef70607120be0a3274f6a4e75d7d8f7f0c6ea4d52b4c9929a76b2186453b3ae701cb07565ec467aff41786dc6c6aec26a07372e10ebd0fe9ae2274d2d085b5a5e959fb612bf2e44b815ddf24cae6e959ac6d4736170747c5fbef313848bb214937f9750f767c4aab5a0832881b8b8bcbd2e90e1cd6bb3a6d2d8da1ff1c55792ff46de073065e0a31410ecda333e9e42307323552f93bda973b1a7f5a8ea9fe24b8a625aabb4d6dbc88122e216331f5f6a5f4b2f99f4982431fc43dbed845ff9ddb05164840dbed0b3da1d69d3a6e86c7b2d4d8d0fa1e2de43f90df7a3fe4e3d4f2fc93419c3fb6854f8d856e80ee1c73250173586bd82b9c8f2257737fe7fdc472ad8fa8d7c2650beb52e7661ec58303656f306af51bfe0ec4b2ccf092fd0b18b710e1acc9238f1592b878dbbf4a55e92ffdca2c6d4e4d786e7a96cca0227ae4e16be974e8b9f2e96980966da1a2bb105aa8fbb3d5f4a15b29b8e6e4f079bf252bd75975748f1c4d98be4ee0bd4d01279684777297dc65cf7efe209cbca27689071babba13fdc3ff2daf2b4b01c4a93e013da44626d9a94d64c428c13a4eff9b8cb95e3fcc5d420652314a6cf4eebd4bcbe03c789bf9d49e05450c07646962e73feb8e8400e8280d26042c7dbd7dce4f393fd5be3023da5161896dccf4e3e68efee63a76b3396f4954a9d3b2cd3022883f910cac6ef9d0520dfb898727d75f71dd778a7386b7fecf4d4d7ceb8e8b0598775cfab1f4e1aea007e1b2f0cca371dc2252ccd3c049bae405bbacda0e7874f096498ff4390c5794663fe5d2cc3bba53a3698473df8e24e9159453a61dc07be33823803983deda9decb113f71b0a33ab80ba1a1b72e0271652cd9f436180f9cb93cfac85c10db8c4b9b945941bf83502f39ddbd536ff8b5ae704da8c06a9c916fd79fcba7823e67222a281fbd1b6699398fd9fcf390b252aab44e9f2a724a8ab09d4ef754714223df6846992281638f54540efb2f5e5a42ea737ce2892ef3435d04d08653f3a56569ac70349d236adc2bd1ab3db1c3b551c602e2ca1b5d807eec0343833b28dd1aa63d304625ccb54da2f643cc7fadbb658653b1cecb91dcd056690702abc09fa1e938a0c55318d28e19d8da43a8de2eceb41de7eed5f526b23b1fa22c7f1ee2dfa74e435ecbef24c66ed2a8b2b33f092a622ebad66c1e9afe05517c2ef4b0b2ab40c6c08d28d1b85ed90c7cb58fce8eac5f0d41732bc9e0d981ab0240f3770eeebc81fbe32416c98b0dc757b76a851234b7c329504de71e264ffbec948248477fad57ed17bae818daa81e6eee4736a0c50f2b90f239e8dc7c33b94b174c4db664ee39128da6c674ad382624964046362bbfc456427df293ece79bdb3878f5bb5232cc7d38bca08793b507c081c62033a8305c613050d7b75ae006161d9b4c688b9e188ef66efb57394a71f730591f49424dbae40f95119171fbb6cddd8c1ce7abb9e714281561c040cf0f4147112e5162122c007c9d3ffdc6221734bd45e68334e74afaa72d145e0690aeb71d600613882a34897021ce17b8cf8f9d7f92504429fa1ac73d53d205b8d57df8a49a74ada77018958965d93b3fc4a8a78c03aab88f1a6a2c5e3d62e7a30ebe784e558f154f3a775f9ccaab55c2ffa6c69b482ffe6898a6204624099c485ce8431a9d6486d8d8f2824ef3c2a64c5cd022071c34e07f90106b02a2dd138477d55b02354ebf2b91c83d5895a6633dea22fe70b71bd281b7541d98020142b316c5493ea871bb59c280753da34931e76b54d36803f48765c2586c1e5bc770f0dab9f309be4daf133fdca7a978a97607d689795ba1ab3318aa84540680f890e5c60ab1ed2bd66fd21f26d99d4708b51d55af85954ac693bb1e9260ad9ff80c1997dd44e6810b384937ca150604bd833a19d431f2364d20b9c56a8aaf4cd71bcabf035"}, 0xf10)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
write$binfmt_script(r6, &(0x7f0000002f80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000000), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kfree\x00', r7, 0x0, 0x8}, 0x18)

785.747852ms ago: executing program 4 (id=2241):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x702, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f00000003c0)=r0}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000700)=ANY=[], 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
setpriority(0x1, 0x0, 0xb842)
io_uring_setup(0x606a, &(0x7f00000002c0)={0x0, 0xee15, 0x4000, 0x0, 0x260})
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)

688.629141ms ago: executing program 1 (id=2242):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000002010000000000000018afdf0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'hsr0\x00', <r2=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff"], 0x50)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3, <r3=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r5}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, &(0x7f0000000200), &(0x7f00000002c0)=""/56}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10, 0x80000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0x40}, 0x18)

617.802928ms ago: executing program 4 (id=2243):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x33}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x87)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/49, 0x2d)
getdents(r2, 0xfffffffffffffffd, 0x58)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2b, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xe, 0x12}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b5}, 0x0)

509.125529ms ago: executing program 1 (id=2244):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48)
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
write$binfmt_elf32(r2, &(0x7f0000001440)=ANY=[@ANYBLOB="7f454c460b397a2dd4000000000000000300060007000000ba03000038000000fd2600000180ffff060020000100020004000600000000000300000000000000040000000900e6fffe"], 0x58)
inotify_init1(0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
write$tcp_mem(r3, &(0x7f0000000000)={0x6, 0x2d, 0xfffffffffffffffc, 0x3a, 0x0, 0x2c}, 0x48)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000880)=ANY=[@ANYBLOB="0300000000000000000000000020000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000e8ff00000000"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="020300030c0000000007000000000000020009001000000053bb00000000000003000600000000000200100000000000000000000000000002000100000000000000060d00000000030005000000000002000000"], 0x60}, 0x1, 0x7}, 0x0)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6bb04527f514ee0f)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0x2, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000240)=0x9)
sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x91}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @fallback=0x36}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000002000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")

501.43456ms ago: executing program 4 (id=2245):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00')
close_range(r1, 0xffffffffffffffff, 0x0)

477.756062ms ago: executing program 4 (id=2246):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x80, 0x3, 0x285}, &(0x7f00000004c0)=<r5=>0x0, &(0x7f0000000680)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0})
io_uring_enter(r4, 0x3498, 0x969, 0x0, 0x0, 0x0) (fail_nth: 2)
dup3(r4, r0, 0x80000)

129.631837ms ago: executing program 0 (id=2247):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010003000000000000002600"], 0x2c}}, 0x0)

128.557797ms ago: executing program 2 (id=2248):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0)

111.296849ms ago: executing program 1 (id=2249):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}})

57.522724ms ago: executing program 0 (id=2250):
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fcntl$setlease(r0, 0x400, 0x1)
syz_clone3(&(0x7f0000001080)={0x80201000, &(0x7f0000000640), &(0x7f0000000740)=<r1=>0x0, &(0x7f0000000e80), {0xc}, &(0x7f0000000ec0)=""/225, 0xe1, &(0x7f0000000fc0)=""/38, &(0x7f0000001000)=[0x0, 0x0], 0x2}, 0x58) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c00000002030108000000000000000083130001080001000100000bd77283d4e74891cc8bf79256918ce651f67d3b7fc17d9e8d52cc1d2261c9ed17b5bcfd0b446dd618d866120f00000096d05ff37f09d2c82a3c7dc2d5a378af0c1747b1e5bb8320392dad090d5730697b0f5d0e08e903aaa73e14a7362bf674854b2e7fc501c345a89b4d381b5f037155e89ad6313ac601d7f704c4186cac1e9dfadba9e77a019528ee0fa5cb72c770eab461e119fec8d73bc3e2bc1590d1b4f64c386b4c77758c3399e9e5"], 0x1c}, 0x1, 0x0, 0x0, 0x20008050}, 0x4010) (async)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x80080}, 0x43084)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001dfff0080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r5}, 0x10) (async)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") (async, rerun: 64)
lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x19a)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000f9000000950000009500000000000000411d78d849ff3906d746f93baed404b9fb5297d328ca8673610c6965a04bdd42e9a753c632016e45410e2c42a1a929ce4eb71489a12ece1ebbe209f89f3115fb29544927fb35cc36d097f3118a98e1e7e443dbdc088bb3259c14f41147e115b544985d141c3231416318ed4c344145e565773099865836c389e665e197d7b2a448de63e969cf01d483ff64d5019b9f6249f93745f1dab1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0700000004000000000100000104000028000000", @ANYRES32, @ANYBLOB="0000000000ea3100"/22, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000001100)={0x11c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe61}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3d447c00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8000}, 0xc001) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r8}, 0x18) (async)
io_pgetevents(0x0, 0x70b6, 0x0, 0x0, 0x0, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) (async)
accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000) (async)
fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00')

50.456364ms ago: executing program 3 (id=2251):
r0 = socket$pptp(0x18, 0x1, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

42.209975ms ago: executing program 2 (id=2252):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000240)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56f, &(0x7f0000000b00)="$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")
mbind(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000140)=0x2, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="8c00000010001fff0000", @ANYRES32=0x0, @ANYBLOB="00000000000400002c0012800b00010067656e65766500001c0002800500040008000000050003000100000005000d000100000008000a00", @ANYRES32=r2, @ANYBLOB="24000e0002000000000000000600000000000000070000000059000008057c0300000000140035007369743000"/56], 0x8c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$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")
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14)
syz_emit_ethernet(0x9a, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa0086dd602abe0000641100fc0100000000000000000000000000010000000000000000000000000000000000004f22006490780200000002000000030000008a8bebc4b04ccb77e7f3a5ca93d7c73e6c0c42d91e27fb2f15030dcafcdaca76e24fcb751eeaa8add0b2f075633f64c7249908bc00b1854a877644fe7cdb30a91c7ae5000000000000002000000051f3b6750c654f5d43fbb564be51ddae"], 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xfffffd26)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000000c0), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008002, &(0x7f0000000400))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
add_key(0x0, 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff)
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000007c0)=""/126)
sendto$inet6(r5, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

602.51µs ago: executing program 4 (id=2253):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmmsg$sock(r2, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000100)="98b2cd9870302734a1e5ee24410e45653cdd2d01f65e6b04354282bbf7eabce1694da78c87a5e9c93ca46d7fb0fc8531652a8d52872670b04189e34cf6baed48a20eed4c412ec2ab7d99c1273aebadab2cac8136", 0x54}, {&(0x7f0000000280)="b938abbb7062d660f903a1f1b104c71ffcdff77f74503a9f7f57591953b878d06a8f3e1147254423e9c9db200012987eab6d58c61fc009b638acbb4f94c0e91f309fdabb598da79afb70c6ffeb26a2efe1c493120ad87a273358c20e0652c01f3ed79e5dfb63e032158452a5f2e51129c98e78c36adb8117321fbe0ccb86e91f30f96754f3a05e971c68b403f9bafa7f706629fd71ac384b7e0d35811e275abe510430664ae9a7093b4f88204609a0fe859a02242b35a52cba33cd84245be25278bc5f399bd502a03134992999ade0d14a6af28f93c1004ba1e8782f9cb2fc8deb82b0d94cb94760c99da511d322568d48e935392ccc46ede20ffec5850529", 0xff}, {&(0x7f0000000380)="5b37572f88a52daf76711e55173a0517e19aea932d8f5703bec86e58dd4c1f0cae30872b102abb4de8fd1d68f517ba6c4d4d72b7731774e15f5427d8f472ae697c77a0d3cfc4fa69cf4134aa121609fa83f434996b", 0x55}, {&(0x7f0000000600)="35c265c09c48c8921ec25b747de89ef880b6de21c7e99ad0f14283484ff6f10b8402b31ccc43dc191b1566667926941f7314f3cd3aa0049d833262d1b8755f0e5ed9e0e2d8d22f43360bfc0112ec21a8ba00fe40662c86bab26096caaf3ac48f143fb5bf0e357a4b414ab58047cbdcf3fa90f23ea28a00394fb93d5e299d363a264c71d1134d4119866931f5d38172204d9f32a9a9bae7c20b076f342ca5dbc1d4ec4f7e1dcce0955884d7a59c9a8695dc9635b62c5d730a4480796575ede20add78677cc0", 0xc5}, {&(0x7f00000004c0)="9a9c91d5500ef8a5aa4a501442a689c47a2ee184b1428fe6da3a8544d9a55844509a432da5bcb983cfab96559aa0f0472aa4b28b817bf0a6ea053c5da9cc4fb5b6f4570afa65b8", 0x47}, {&(0x7f0000000700)="c62de09927bf1292139614fd40f812d36e57f13278d9e13968c76b38bfcc2b84154c9a78b134df3bd6701db2d2506e07d5dced6a3fdf58dcc0096bb4e6260d49ff83d2b997c35640e376284545e3b6c152bf60a4042517aec377fcc4bf17340625c6e9d7c4f20eab25379779eb9bffc517dc5dd383688e42599cf54505ea3d1f066c5084b36a17f7166941528ea7a26bc78d67fbbf172856f0173e68f564e11af5f07da266e3ba83b97cd156cd531900f11709a51ad344df557b06a7227c347625474e0b8562d62d5e9120f2f671d447fc4ca12d28399dc6e728e47adf34f7ae5cdbd1218e8e", 0xe6}, {&(0x7f0000000840)="891b87cbb84854b0bf27bff54b7f82d33a31af2b6717085a5397afe3304fa08884995168763a253fa479ffa6d6f09abe24c0d04b28f52f3c636eac9ec62654f1dcdee01a1f21525c0abe49e12eab800ea634171ba191a2b2e7f3f664c3d48c762bbe3c791be873", 0x67}, {&(0x7f00000008c0)="9a4cb686b1b5615ec73ec59a94e319a8fb74f6689bf6126eeecf4319e823f10ac5f1df0875129f5d2c985eb0f293517c6270069af0131211555363c41d02df3f80c8e97513f9285663fa49a7a1ac2db9eeb67178bf20a05102f70aa397da0325f7eda72d6f040148ae49c8e40c3e93a20adf698c823e7e183de149c9a64839958f250bcc082332129213441107f0a60689f034410dfa14cec03cb421472d7aa8b2b7e61255230324a11ca74e7d0add1d9bca3acbf8e8482814ba08df7f851b6f07f67ecde175d99392f612", 0xcb}, {&(0x7f0000000040)}, {&(0x7f0000000200)="c42004", 0x3}], 0xa, &(0x7f00000009c0)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xc}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x78}}, {{&(0x7f0000000bc0)=@sco, 0x80, &(0x7f0000000400)=[{&(0x7f0000000c40)="ceff5cb442ac1ab82b97709077ae2f02afa0e936f35a5f499948c95f9ebf509908ebd54b21d4562fd162624b2dbbfbc72f35be69bcf9d01adee62f522f7d076585cf80bbbc42c8e35af97fc6f87b61acc4a0d499d6431e2a598a216e9b47b10bfa600dd1bd14ce203b371c6411192c11c85ec3dbe9eafc5252a69c7a334a498dfbe89c6626726dabe51e33c41d281e68d01298bd48f93c03e3716485a13ab5b0d89458a1c5a118", 0xa7}], 0x1, &(0x7f0000000d00)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x48}}], 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="2d000000020601020000000000000000000000000500010007000000050001000700000005000400000000001382386e0f192174efef4a91ee7e05c6d326f46acdab2c7296cb8a04cb59bdd6dbaf743d62e6ecf902ea4684aed4bf56453798556f6cc8f49d1e6450ab3e7b77cfb7a0fa108fa5983e3f4d8bd50e0122970b9873fbbb41b031c2f8eee85441541ae9dcca4af907be0899aac7b580d66c5981eae8fbab21ad4043664de64d2339f3074beaa55129841a476dd10fa9176dc277208016555a86b8bb3f1364d4b5616c6fc37ecacfe0bae9e9ac60e146ef14090846b37c69174ea50b34"], 0x2c}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="a80000003c0007010000000001000000017c00000400fc800c"], 0xa8}, 0x1, 0x0, 0x0, 0xc008}, 0x4040)

0s ago: executing program 3 (id=2254):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="a80000003c0007010000000001000000017c00000400fc800c"], 0xa8}, 0x1, 0x0, 0x0, 0xc008}, 0x4040)

kernel console output (not intermixed with test programs):

ave been left with an inconsistent configuration, please check.
[  128.393153][ T1834] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.411176][ T8297] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  128.428481][ T1834] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.447640][ T1834] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.469801][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.539962][ T8338] loop0: detected capacity change from 0 to 512
[  128.684962][ T8338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.731458][ T8338] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  128.794813][ T8355] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  133.672110][ T8366] loop2: detected capacity change from 0 to 512
[  133.690457][ T8369] xt_hashlimit: max too large, truncated to 1048576
[  133.706958][ T8373] FAULT_INJECTION: forcing a failure.
[  133.706958][ T8373] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  133.720531][ T8373] CPU: 1 UID: 0 PID: 8373 Comm: syz.1.1722 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  133.720638][ T8373] Tainted: [W]=WARN
[  133.720646][ T8373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  133.720659][ T8373] Call Trace:
[  133.720720][ T8373]  <TASK>
[  133.720730][ T8373]  __dump_stack+0x1d/0x30
[  133.720768][ T8373]  dump_stack_lvl+0xe8/0x140
[  133.720795][ T8373]  dump_stack+0x15/0x1b
[  133.720815][ T8373]  should_fail_ex+0x265/0x280
[  133.720858][ T8373]  should_fail+0xb/0x20
[  133.720965][ T8373]  should_fail_usercopy+0x1a/0x20
[  133.720992][ T8373]  _copy_from_user+0x1c/0xb0
[  133.721040][ T8373]  ___sys_sendmsg+0xc1/0x1d0
[  133.721118][ T8373]  __x64_sys_sendmsg+0xd4/0x160
[  133.721165][ T8373]  x64_sys_call+0x191e/0x3000
[  133.721240][ T8373]  do_syscall_64+0xd2/0x200
[  133.721271][ T8373]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  133.721308][ T8373]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  133.721337][ T8373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.721385][ T8373] RIP: 0033:0x7fedb252eec9
[  133.721410][ T8373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.721477][ T8373] RSP: 002b:00007fedb0f8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  133.721502][ T8373] RAX: ffffffffffffffda RBX: 00007fedb2785fa0 RCX: 00007fedb252eec9
[  133.721598][ T8373] RDX: 0000000000000090 RSI: 00002000000008c0 RDI: 0000000000000003
[  133.721615][ T8373] RBP: 00007fedb0f8f090 R08: 0000000000000000 R09: 0000000000000000
[  133.721631][ T8373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  133.721646][ T8373] R13: 00007fedb2786038 R14: 00007fedb2785fa0 R15: 00007fffafedd428
[  133.721669][ T8373]  </TASK>
[  133.726796][ T8377] __nla_validate_parse: 9 callbacks suppressed
[  133.726847][ T8377] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1723'.
[  133.783477][ T8366] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  133.890540][   T29] kauditd_printk_skb: 283 callbacks suppressed
[  133.890562][   T29] audit: type=1400 audit(1760090456.669:6112): avc:  denied  { sqpoll } for  pid=8380 comm="syz.1.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  133.922295][ T8387] netlink: 4 bytes leftover after parsing attributes in process `wޣ�'.
[  133.972274][ T8390] netlink: 'syz.3.1725': attribute type 1 has an invalid length.
[  133.983728][ T8390] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1725'.
[  134.121521][ T8403] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1731'.
[  134.166576][   T29] audit: type=1400 audit(1760090456.949:6113): avc:  denied  { bind } for  pid=8409 comm="syz.4.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  134.187252][   T29] audit: type=1400 audit(1760090456.949:6114): avc:  denied  { name_bind } for  pid=8409 comm="syz.4.1734" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  134.209008][   T29] audit: type=1400 audit(1760090456.949:6115): avc:  denied  { node_bind } for  pid=8409 comm="syz.4.1734" saddr=172.20.20.187 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  134.234178][ T8410] hsr0: entered promiscuous mode
[  134.238954][ T8412] xt_hashlimit: max too large, truncated to 1048576
[  134.241194][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1734'.
[  134.257477][ T8410] hsr_slave_0: left promiscuous mode
[  134.267675][ T8410] hsr_slave_1: left promiscuous mode
[  134.274559][ T8410] hsr0 (unregistering): left promiscuous mode
[  134.284862][ T8415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1735'.
[  134.314961][ T8420] FAULT_INJECTION: forcing a failure.
[  134.314961][ T8420] name failslab, interval 1, probability 0, space 0, times 0
[  134.328637][ T8420] CPU: 1 UID: 0 PID: 8420 Comm: syz.0.1739 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  134.328686][ T8420] Tainted: [W]=WARN
[  134.328694][ T8420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  134.328713][ T8420] Call Trace:
[  134.328721][ T8420]  <TASK>
[  134.328732][ T8420]  __dump_stack+0x1d/0x30
[  134.328786][ T8420]  dump_stack_lvl+0xe8/0x140
[  134.328805][ T8420]  dump_stack+0x15/0x1b
[  134.328866][ T8420]  should_fail_ex+0x265/0x280
[  134.328945][ T8420]  should_failslab+0x8c/0xb0
[  134.328979][ T8420]  __kmalloc_node_track_caller_noprof+0xa5/0x580
[  134.329115][ T8420]  ? sidtab_sid2str_get+0xa0/0x130
[  134.329186][ T8420]  kmemdup_noprof+0x2b/0x70
[  134.329211][ T8420]  sidtab_sid2str_get+0xa0/0x130
[  134.329299][ T8420]  security_sid_to_context_core+0x1eb/0x2e0
[  134.329330][ T8420]  security_sid_to_context+0x27/0x40
[  134.329419][ T8420]  selinux_lsmprop_to_secctx+0x67/0xf0
[  134.329450][ T8420]  security_lsmprop_to_secctx+0x1a0/0x1c0
[  134.329487][ T8420]  audit_log_subj_ctx+0xa4/0x3e0
[  134.329529][ T8420]  ? skb_put+0xa9/0xf0
[  134.329556][ T8420]  audit_log_task_context+0x48/0x70
[  134.329612][ T8420]  audit_log_task+0xf4/0x250
[  134.329647][ T8420]  ? kstrtouint+0x76/0xc0
[  134.329694][ T8420]  audit_seccomp+0x61/0x100
[  134.329734][ T8420]  ? __seccomp_filter+0x82d/0x1250
[  134.329763][ T8420]  __seccomp_filter+0x83e/0x1250
[  134.329793][ T8420]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  134.329841][ T8420]  ? vfs_write+0x7e8/0x960
[  134.329871][ T8420]  ? __rcu_read_unlock+0x4f/0x70
[  134.329899][ T8420]  ? __fget_files+0x184/0x1c0
[  134.329939][ T8420]  __secure_computing+0x82/0x150
[  134.329973][ T8420]  syscall_trace_enter+0xcf/0x1e0
[  134.330024][ T8420]  do_syscall_64+0xac/0x200
[  134.330049][ T8420]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  134.330081][ T8420]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  134.330125][ T8420]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.330232][ T8420] RIP: 0033:0x7fe6f6a9eec9
[  134.330359][ T8420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.330385][ T8420] RSP: 002b:00007fe6f5507038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a
[  134.330407][ T8420] RAX: ffffffffffffffda RBX: 00007fe6f6cf5fa0 RCX: 00007fe6f6a9eec9
[  134.330419][ T8420] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000000
[  134.330448][ T8420] RBP: 00007fe6f5507090 R08: 0000000000000000 R09: 0000000000000000
[  134.330465][ T8420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.330477][ T8420] R13: 00007fe6f6cf6038 R14: 00007fe6f6cf5fa0 R15: 00007fffa6e85988
[  134.330498][ T8420]  </TASK>
[  134.330511][ T8420] audit: error in audit_log_subj_ctx
[  134.334441][   T29] audit: type=1326 audit(1760090457.099:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f6a9eec9 code=0x7ffc0000
[  134.455604][ T8425] bridge0: entered promiscuous mode
[  134.460350][   T29] audit: type=1326 audit(1760090457.099:6117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe6f6a9d710 code=0x7ffc0000
[  134.677624][   T29] audit: type=1326 audit(1760090457.099:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe6f6a9d97f code=0x7ffc0000
[  134.706772][   T29] audit: type=1326 audit(1760090457.099:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8419 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fe6f6a9eec9 code=0x7ffc0000
[  134.728989][   T29] audit: type=1326 audit(1760090457.129:6120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe6f6a9d8dc code=0x7ffc0000
[  134.758004][ T8428] FAULT_INJECTION: forcing a failure.
[  134.758004][ T8428] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  134.772701][ T8428] CPU: 0 UID: 0 PID: 8428 Comm: syz.0.1740 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  134.772741][ T8428] Tainted: [W]=WARN
[  134.772747][ T8428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  134.772816][ T8428] Call Trace:
[  134.772823][ T8428]  <TASK>
[  134.772830][ T8428]  __dump_stack+0x1d/0x30
[  134.772854][ T8428]  dump_stack_lvl+0xe8/0x140
[  134.772875][ T8428]  dump_stack+0x15/0x1b
[  134.772897][ T8428]  should_fail_ex+0x265/0x280
[  134.772986][ T8428]  should_fail+0xb/0x20
[  134.773027][ T8428]  should_fail_usercopy+0x1a/0x20
[  134.773054][ T8428]  _copy_from_iter+0xd2/0xe80
[  134.773081][ T8428]  ? __build_skb_around+0x1ab/0x200
[  134.773131][ T8428]  ? __alloc_skb+0x223/0x320
[  134.773167][ T8428]  netlink_sendmsg+0x471/0x6b0
[  134.773205][ T8428]  ? __pfx_netlink_sendmsg+0x10/0x10
[  134.773245][ T8428]  __sock_sendmsg+0x142/0x180
[  134.773278][ T8428]  ____sys_sendmsg+0x31e/0x4e0
[  134.773319][ T8428]  ___sys_sendmsg+0x17b/0x1d0
[  134.773374][ T8428]  __x64_sys_sendmsg+0xd4/0x160
[  134.773420][ T8428]  x64_sys_call+0x191e/0x3000
[  134.773477][ T8428]  do_syscall_64+0xd2/0x200
[  134.773510][ T8428]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  134.773548][ T8428]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  134.773579][ T8428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.773614][ T8428] RIP: 0033:0x7fe6f6a9eec9
[  134.773635][ T8428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.773660][ T8428] RSP: 002b:00007fe6f5507038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  134.773685][ T8428] RAX: ffffffffffffffda RBX: 00007fe6f6cf5fa0 RCX: 00007fe6f6a9eec9
[  134.773703][ T8428] RDX: 0000000000000040 RSI: 00002000000038c0 RDI: 000000000000000a
[  134.773732][ T8428] RBP: 00007fe6f5507090 R08: 0000000000000000 R09: 0000000000000000
[  134.773749][ T8428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.773765][ T8428] R13: 00007fe6f6cf6038 R14: 00007fe6f6cf5fa0 R15: 00007fffa6e85988
[  134.773795][ T8428]  </TASK>
[  135.024453][ T8434] loop3: detected capacity change from 0 to 512
[  135.038642][ T8430] netlink: 4 bytes leftover after parsing attributes in process `wޣ�'.
[  135.092664][ T8440] loop0: detected capacity change from 0 to 512
[  135.125394][ T8434] EXT4-fs mount: 3 callbacks suppressed
[  135.125418][ T8434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.135422][ T8440] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.1744: corrupted inode contents
[  135.159126][ T8440] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #16: comm syz.0.1744: mark_inode_dirty error
[  135.182013][ T8434] ext4 filesystem being mounted at /315/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  135.184668][ T8440] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.1744: corrupted inode contents
[  135.205804][ T8434] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.237169][ T8440] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1744: mark_inode_dirty error
[  135.257763][ T8451] siw: device registration error -23
[  135.266399][ T8450] xt_hashlimit: max too large, truncated to 1048576
[  135.288891][ T8440] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.1744: corrupted inode contents
[  135.304459][ T8440] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem
[  135.321363][ T8440] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.1744: corrupted inode contents
[  135.334153][ T8456] loop2: detected capacity change from 0 to 164
[  135.346716][ T8440] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.1744: mark_inode_dirty error
[  135.364872][ T8440] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem
[  135.374204][ T8456] ISOFS: unable to read i-node block
[  135.380700][ T8456] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  135.391475][ T8440] EXT4-fs (loop0): 1 truncate cleaned up
[  135.407532][ T1834] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:8: Failed to release dquot type 1
[  135.420460][ T8456] netlink: 'syz.2.1750': attribute type 1 has an invalid length.
[  135.422361][ T8463] FAULT_INJECTION: forcing a failure.
[  135.422361][ T8463] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.442319][ T8463] CPU: 0 UID: 0 PID: 8463 Comm: syz.1.1753 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  135.442362][ T8463] Tainted: [W]=WARN
[  135.442370][ T8463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  135.442387][ T8463] Call Trace:
[  135.442396][ T8463]  <TASK>
[  135.442406][ T8463]  __dump_stack+0x1d/0x30
[  135.442433][ T8463]  dump_stack_lvl+0xe8/0x140
[  135.442516][ T8463]  dump_stack+0x15/0x1b
[  135.442609][ T8463]  should_fail_ex+0x265/0x280
[  135.442653][ T8463]  should_fail+0xb/0x20
[  135.442692][ T8463]  should_fail_usercopy+0x1a/0x20
[  135.442775][ T8463]  _copy_from_iter+0xd2/0xe80
[  135.442876][ T8463]  ? __build_skb_around+0x1ab/0x200
[  135.442905][ T8463]  ? __alloc_skb+0x223/0x320
[  135.442933][ T8463]  netlink_sendmsg+0x471/0x6b0
[  135.443034][ T8463]  ? __pfx_netlink_sendmsg+0x10/0x10
[  135.443073][ T8463]  __sock_sendmsg+0x142/0x180
[  135.443099][ T8463]  ____sys_sendmsg+0x31e/0x4e0
[  135.443140][ T8463]  ___sys_sendmsg+0x17b/0x1d0
[  135.443260][ T8463]  __x64_sys_sendmsg+0xd4/0x160
[  135.443303][ T8463]  x64_sys_call+0x191e/0x3000
[  135.443331][ T8463]  do_syscall_64+0xd2/0x200
[  135.443362][ T8463]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  135.443562][ T8463]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  135.443590][ T8463]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.443616][ T8463] RIP: 0033:0x7fedb252eec9
[  135.443644][ T8463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.443668][ T8463] RSP: 002b:00007fedb0f8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  135.443730][ T8463] RAX: ffffffffffffffda RBX: 00007fedb2785fa0 RCX: 00007fedb252eec9
[  135.443746][ T8463] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000004
[  135.443762][ T8463] RBP: 00007fedb0f8f090 R08: 0000000000000000 R09: 0000000000000000
[  135.443777][ T8463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.443801][ T8463] R13: 00007fedb2786038 R14: 00007fedb2785fa0 R15: 00007fffafedd428
[  135.443894][ T8463]  </TASK>
[  135.471263][ T8456] 8021q: adding VLAN 0 to HW filter on device bond4
[  135.521406][ T8440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.539927][ T8461] loop4: detected capacity change from 0 to 512
[  135.544322][ T8440] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.550718][ T8461] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  135.638719][ T8468] netlink: 'syz.3.1754': attribute type 1 has an invalid length.
[  135.672756][ T8461] EXT4-fs (loop4): 1 truncate cleaned up
[  135.675568][ T8468] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1754'.
[  135.690516][ T8461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.758680][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.785568][ T8477] netlink: 'syz.0.1755': attribute type 153 has an invalid length.
[  135.809017][ T8477] loop0: detected capacity change from 0 to 2048
[  135.816342][ T8474] netlink: 4 bytes leftover after parsing attributes in process `wޣ�'.
[  135.859232][ T8485] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  135.905713][ T8494] siw: device registration error -23
[  135.926093][ T8498] FAULT_INJECTION: forcing a failure.
[  135.926093][ T8498] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.939393][ T8498] CPU: 1 UID: 0 PID: 8498 Comm: +}[@ Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  135.939535][ T8498] Tainted: [W]=WARN
[  135.939544][ T8498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  135.939560][ T8498] Call Trace:
[  135.939567][ T8498]  <TASK>
[  135.939576][ T8498]  __dump_stack+0x1d/0x30
[  135.939616][ T8498]  dump_stack_lvl+0xe8/0x140
[  135.939636][ T8498]  dump_stack+0x15/0x1b
[  135.939652][ T8498]  should_fail_ex+0x265/0x280
[  135.939706][ T8498]  should_fail+0xb/0x20
[  135.939755][ T8498]  should_fail_usercopy+0x1a/0x20
[  135.939840][ T8498]  _copy_from_iter+0xd2/0xe80
[  135.939864][ T8498]  ? __build_skb_around+0x1ab/0x200
[  135.939896][ T8498]  ? __alloc_skb+0x223/0x320
[  135.939928][ T8498]  netlink_sendmsg+0x471/0x6b0
[  135.939993][ T8498]  ? __pfx_netlink_sendmsg+0x10/0x10
[  135.940050][ T8498]  __sock_sendmsg+0x142/0x180
[  135.940070][ T8498]  ____sys_sendmsg+0x31e/0x4e0
[  135.940131][ T8498]  ___sys_sendmsg+0x17b/0x1d0
[  135.940185][ T8498]  __x64_sys_sendmsg+0xd4/0x160
[  135.940247][ T8498]  x64_sys_call+0x191e/0x3000
[  135.940277][ T8498]  do_syscall_64+0xd2/0x200
[  135.940325][ T8498]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  135.940408][ T8498]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  135.940481][ T8498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.940510][ T8498] RIP: 0033:0x7fedb252eec9
[  135.940529][ T8498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.940553][ T8498] RSP: 002b:00007fedb0f8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  135.940695][ T8498] RAX: ffffffffffffffda RBX: 00007fedb2785fa0 RCX: 00007fedb252eec9
[  135.940711][ T8498] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004
[  135.940728][ T8498] RBP: 00007fedb0f8f090 R08: 0000000000000000 R09: 0000000000000000
[  135.940741][ T8498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.940764][ T8498] R13: 00007fedb2786038 R14: 00007fedb2785fa0 R15: 00007fffafedd428
[  135.940784][ T8498]  </TASK>
[  135.943145][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.985398][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'.
[  136.144664][ T8508] loop1: detected capacity change from 0 to 1024
[  136.194727][ T7511] kernel read not supported for file /848/net/netfilter (pid: 7511 comm: kworker/1:9)
[  136.196141][ T8508] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1765: Failed to acquire dquot type 0
[  136.217367][ T8508] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  136.243152][ T8508] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #13: comm syz.1.1765: corrupted inode contents
[  136.260171][ T8508] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #13: comm syz.1.1765: mark_inode_dirty error
[  136.273458][ T8508] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #13: comm syz.1.1765: corrupted inode contents
[  136.294398][ T8508] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.1765: mark_inode_dirty error
[  136.313828][ T8508] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #13: comm syz.1.1765: corrupted inode contents
[  136.327164][ T8508] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[  136.337020][ T8508] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #13: comm syz.1.1765: corrupted inode contents
[  136.349530][ T8508] EXT4-fs error (device loop1): ext4_truncate:4637: inode #13: comm syz.1.1765: mark_inode_dirty error
[  136.360876][ T8508] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[  136.370809][ T8508] EXT4-fs (loop1): 1 truncate cleaned up
[  136.377214][ T8508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.468993][ T8501] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  136.549860][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.571151][ T8526] loop4: detected capacity change from 0 to 512
[  136.598769][ T8526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.614274][ T8526] ext4 filesystem being mounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  136.641783][ T8526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.671521][ T8538] loop3: detected capacity change from 0 to 1024
[  136.756725][ T8543] siw: device registration error -23
[  136.775243][ T8540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.850252][ T8540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.915138][ T8538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.021940][ T8538] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.150853][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.292521][ T8555] vlan0: entered allmulticast mode
[  137.298204][ T8555] bridge_slave_0: entered allmulticast mode
[  137.471286][ T7495] kernel read not supported for file /927/net/netfilter (pid: 7495 comm: kworker/0:13)
[  137.718280][ T8547] Set syz1 is full, maxelem 65536 reached
[  137.915278][ T8573] hsr0: entered promiscuous mode
[  138.074614][ T8573] hsr0: left promiscuous mode
[  138.188571][ T8588] loop3: detected capacity change from 0 to 512
[  138.248453][ T8572] loop0: detected capacity change from 0 to 512
[  138.279928][ T8588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.313614][ T8572] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1783: bad orphan inode 11862016
[  138.327622][ T8588] ext4 filesystem being mounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  138.358262][ T8588] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #2: comm syz.3.1791: corrupted inode contents
[  138.371408][ T8572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  138.389543][ T8572] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.397882][ T8588] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #2: comm syz.3.1791: mark_inode_dirty error
[  138.418040][ T8588] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #2: comm syz.3.1791: corrupted inode contents
[  138.433446][ T8604] loop1: detected capacity change from 0 to 1024
[  138.443245][ T8606] netlink: 'syz.4.1796': attribute type 13 has an invalid length.
[  138.469549][ T8588] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1791: mark_inode_dirty error
[  138.484161][ T8604] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  138.495651][ T8604] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  138.509496][ T8612] FAULT_INJECTION: forcing a failure.
[  138.509496][ T8612] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  138.523251][ T8612] CPU: 0 UID: 0 PID: 8612 Comm: syz.2.1798 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  138.523296][ T8612] Tainted: [W]=WARN
[  138.523303][ T8612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  138.523316][ T8612] Call Trace:
[  138.523324][ T8612]  <TASK>
[  138.523334][ T8612]  __dump_stack+0x1d/0x30
[  138.523435][ T8612]  dump_stack_lvl+0xe8/0x140
[  138.523469][ T8612]  dump_stack+0x15/0x1b
[  138.523488][ T8612]  should_fail_ex+0x265/0x280
[  138.523524][ T8612]  should_fail+0xb/0x20
[  138.523629][ T8612]  should_fail_usercopy+0x1a/0x20
[  138.523654][ T8612]  _copy_from_iter+0xd2/0xe80
[  138.523721][ T8612]  ? __build_skb_around+0x1ab/0x200
[  138.523791][ T8612]  ? __alloc_skb+0x223/0x320
[  138.523850][ T8612]  netlink_sendmsg+0x471/0x6b0
[  138.523886][ T8612]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.523920][ T8612]  __sock_sendmsg+0x142/0x180
[  138.524018][ T8612]  ____sys_sendmsg+0x31e/0x4e0
[  138.524066][ T8612]  ___sys_sendmsg+0x17b/0x1d0
[  138.524119][ T8612]  __x64_sys_sendmsg+0xd4/0x160
[  138.524173][ T8612]  x64_sys_call+0x191e/0x3000
[  138.524202][ T8612]  do_syscall_64+0xd2/0x200
[  138.524232][ T8612]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  138.524279][ T8612]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  138.524308][ T8612]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.524335][ T8612] RIP: 0033:0x7f21f379eec9
[  138.524351][ T8612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.524369][ T8612] RSP: 002b:00007f21f2207038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  138.524402][ T8612] RAX: ffffffffffffffda RBX: 00007f21f39f5fa0 RCX: 00007f21f379eec9
[  138.524419][ T8612] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007
[  138.524435][ T8612] RBP: 00007f21f2207090 R08: 0000000000000000 R09: 0000000000000000
[  138.524460][ T8612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.524476][ T8612] R13: 00007f21f39f6038 R14: 00007f21f39f5fa0 R15: 00007ffd87db6318
[  138.524572][ T8612]  </TASK>
[  138.574765][ T8604] JBD2: no valid journal superblock found
[  138.710651][ T8616] sctp: [Deprecated]: syz.2.1798 (pid 8616) Use of int in max_burst socket option.
[  138.710651][ T8616] Use struct sctp_assoc_value instead
[  138.711554][ T8604] EXT4-fs (loop1): Could not load journal inode
[  138.772572][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.825272][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  138.862205][ T8627] __nla_validate_parse: 7 callbacks suppressed
[  138.862221][ T8627] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1801'.
[  138.884657][ T8629] xt_hashlimit: max too large, truncated to 1048576
[  138.950081][   T29] kauditd_printk_skb: 195 callbacks suppressed
[  138.950145][   T29] audit: type=1400 audit(1760090461.724:6313): avc:  denied  { write } for  pid=8634 comm="syz.0.1807" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  138.951522][ T8633] loop1: detected capacity change from 0 to 4096
[  138.992934][   T29] audit: type=1326 audit(1760090461.764:6314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8630 comm="syz.4.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d79eec9 code=0x7ffc0000
[  139.017091][   T29] audit: type=1326 audit(1760090461.764:6315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8630 comm="syz.4.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa09d79eec9 code=0x7ffc0000
[  139.017403][ T8633] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal
[  139.041265][   T29] audit: type=1326 audit(1760090461.764:6316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8630 comm="syz.4.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d79eec9 code=0x7ffc0000
[  139.041305][   T29] audit: type=1326 audit(1760090461.764:6317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8630 comm="syz.4.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa09d79eec9 code=0x7ffc0000
[  139.041338][   T29] audit: type=1326 audit(1760090461.764:6318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8630 comm="syz.4.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d79eec9 code=0x7ffc0000
[  139.122437][   T29] audit: type=1326 audit(1760090461.764:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8630 comm="syz.4.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fa09d79eec9 code=0x7ffc0000
[  139.146533][   T29] audit: type=1326 audit(1760090461.764:6320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8630 comm="syz.4.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d79eec9 code=0x7ffc0000
[  139.170939][   T29] audit: type=1326 audit(1760090461.764:6321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8630 comm="syz.4.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa09d79eec9 code=0x7ffc0000
[  139.195485][   T29] audit: type=1326 audit(1760090461.764:6322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8630 comm="syz.4.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09d79eec9 code=0x7ffc0000
[  139.447294][ T8654] mmap: syz.0.1811 (8654) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  139.543896][ T8658] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  139.645206][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1813'.
[  139.661063][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1813'.
[  139.673051][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1813'.
[  139.909007][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1818'.
[  140.026158][ T8685] loop3: detected capacity change from 0 to 512
[  140.037594][ T8686] netlink: 'syz.0.1821': attribute type 1 has an invalid length.
[  140.046024][ T8686] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1821'.
[  140.064945][ T8685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.106561][ T8685] ext4 filesystem being mounted at /330/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  140.134830][ T8683] loop4: detected capacity change from 0 to 512
[  140.160335][ T8683] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  140.177438][ T8665] loop2: detected capacity change from 0 to 512
[  140.181043][ T8685] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.202449][ T8694] netlink: 4 bytes leftover after parsing attributes in process `wޣ�'.
[  140.215066][ T8665] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1815: bad orphan inode 11862016
[  140.229537][ T8665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  140.242958][ T8665] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.413896][ T8703] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  140.485713][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1828'.
[  140.503240][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1828'.
[  140.513763][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1828'.
[  140.524461][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  140.598743][ T8718] loop3: detected capacity change from 0 to 164
[  140.634182][ T8718] ISOFS: unable to read i-node block
[  140.639767][ T8718] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  140.721592][ T8718] netlink: 'syz.3.1832': attribute type 1 has an invalid length.
[  140.754855][ T8718] 8021q: adding VLAN 0 to HW filter on device bond5
[  140.794811][ T8732] loop1: detected capacity change from 0 to 512
[  140.876878][ T8733] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  140.916112][ T8741] FAULT_INJECTION: forcing a failure.
[  140.916112][ T8741] name failslab, interval 1, probability 0, space 0, times 0
[  140.932010][ T8741] CPU: 1 UID: 0 PID: 8741 Comm: +}[@ Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  140.932067][ T8741] Tainted: [W]=WARN
[  140.932128][ T8741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  140.932141][ T8741] Call Trace:
[  140.932149][ T8741]  <TASK>
[  140.932159][ T8741]  __dump_stack+0x1d/0x30
[  140.932184][ T8741]  dump_stack_lvl+0xe8/0x140
[  140.932203][ T8741]  dump_stack+0x15/0x1b
[  140.932222][ T8741]  should_fail_ex+0x265/0x280
[  140.932402][ T8741]  ? __pfx_loop_control_ioctl+0x10/0x10
[  140.932455][ T8741]  ? loop_add+0x64/0x590
[  140.932483][ T8741]  should_failslab+0x8c/0xb0
[  140.932677][ T8741]  __kmalloc_cache_noprof+0x4c/0x4a0
[  140.932789][ T8741]  ? __pfx_loop_control_ioctl+0x10/0x10
[  140.932826][ T8741]  loop_add+0x64/0x590
[  140.932859][ T8741]  ? __pfx_loop_control_ioctl+0x10/0x10
[  140.932885][ T8741]  loop_control_ioctl+0xd0/0x3f0
[  140.932947][ T8741]  ? __pfx_loop_control_ioctl+0x10/0x10
[  140.932974][ T8741]  __se_sys_ioctl+0xce/0x140
[  140.932995][ T8741]  __x64_sys_ioctl+0x43/0x50
[  140.933014][ T8741]  x64_sys_call+0x1816/0x3000
[  140.933043][ T8741]  do_syscall_64+0xd2/0x200
[  140.933125][ T8741]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  140.933235][ T8741]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  140.933325][ T8741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.933346][ T8741] RIP: 0033:0x7fc187d1eec9
[  140.933401][ T8741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.933426][ T8741] RSP: 002b:00007fc186787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  140.933452][ T8741] RAX: ffffffffffffffda RBX: 00007fc187f75fa0 RCX: 00007fc187d1eec9
[  140.933470][ T8741] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000003
[  140.933496][ T8741] RBP: 00007fc186787090 R08: 0000000000000000 R09: 0000000000000000
[  140.933508][ T8741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.933523][ T8741] R13: 00007fc187f76038 R14: 00007fc187f75fa0 R15: 00007ffc0113cb28
[  140.933559][ T8741]  </TASK>
[  141.185251][ T8732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.208191][ T8732] ext4 filesystem being mounted at /373/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  141.267731][ T8732] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.483734][ T8769] netlink: 'syz.0.1849': attribute type 1 has an invalid length.
[  141.727765][ T8792] loop3: detected capacity change from 0 to 1024
[  141.735512][ T8792] EXT4-fs: Ignoring removed orlov option
[  141.743590][ T8792] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  141.845667][ T8792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.860107][ T8792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.904690][ T8797] 9pnet: Could not find request transport: r
[  142.212980][ T8807] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  142.615097][ T8820] FAULT_INJECTION: forcing a failure.
[  142.615097][ T8820] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  142.631317][ T8820] CPU: 0 UID: 0 PID: 8820 Comm: syz.0.1863 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  142.631380][ T8820] Tainted: [W]=WARN
[  142.631389][ T8820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  142.631402][ T8820] Call Trace:
[  142.631410][ T8820]  <TASK>
[  142.631417][ T8820]  __dump_stack+0x1d/0x30
[  142.631444][ T8820]  dump_stack_lvl+0xe8/0x140
[  142.631463][ T8820]  dump_stack+0x15/0x1b
[  142.631551][ T8820]  should_fail_ex+0x265/0x280
[  142.631612][ T8820]  should_fail+0xb/0x20
[  142.631645][ T8820]  should_fail_usercopy+0x1a/0x20
[  142.631668][ T8820]  _copy_from_user+0x1c/0xb0
[  142.631703][ T8820]  __se_sys_mount+0x10d/0x2e0
[  142.631887][ T8820]  ? fput+0x8f/0xc0
[  142.631928][ T8820]  ? ksys_write+0x192/0x1a0
[  142.631952][ T8820]  __x64_sys_mount+0x67/0x80
[  142.632044][ T8820]  x64_sys_call+0x2b51/0x3000
[  142.632075][ T8820]  do_syscall_64+0xd2/0x200
[  142.632114][ T8820]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  142.632160][ T8820]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  142.632182][ T8820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.632231][ T8820] RIP: 0033:0x7fe6f6a9eec9
[  142.632287][ T8820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.632312][ T8820] RSP: 002b:00007fe6f5507038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  142.632339][ T8820] RAX: ffffffffffffffda RBX: 00007fe6f6cf5fa0 RCX: 00007fe6f6a9eec9
[  142.632356][ T8820] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 0000000000000000
[  142.632372][ T8820] RBP: 00007fe6f5507090 R08: 0000200000000080 R09: 0000000000000000
[  142.632458][ T8820] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001
[  142.632475][ T8820] R13: 00007fe6f6cf6038 R14: 00007fe6f6cf5fa0 R15: 00007fffa6e85988
[  142.632494][ T8820]  </TASK>
[  142.913598][ T8818] loop2: detected capacity change from 0 to 2364
[  142.925169][ T8818] ISOFS: Unable to identify CD-ROM format.
[  142.940062][ T8820] 9pnet: Could not find request transport: r
[  143.037402][ T8824] loop4: detected capacity change from 0 to 164
[  143.067453][ T8824] ISOFS: unable to read i-node block
[  143.073405][ T8824] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  143.126279][ T8824] netlink: 'syz.4.1864': attribute type 1 has an invalid length.
[  143.194611][ T8824] 8021q: adding VLAN 0 to HW filter on device bond4
[  143.329870][ T8842] xt_hashlimit: max too large, truncated to 1048576
[  143.438399][ T8845] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  143.551106][ T8853] loop0: detected capacity change from 0 to 1024
[  143.590450][ T8857] pim6reg: entered allmulticast mode
[  143.610980][ T8857] pim6reg: left allmulticast mode
[  143.646509][ T8853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.659447][ T8866] loop4: detected capacity change from 0 to 164
[  143.667483][ T8866] ISOFS: unable to read i-node block
[  143.680691][ T8866] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  143.721295][ T8866] netlink: 'syz.4.1878': attribute type 1 has an invalid length.
[  143.756259][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.811240][ T8866] 8021q: adding VLAN 0 to HW filter on device bond5
[  143.824883][ T8878] loop3: detected capacity change from 0 to 1024
[  143.836163][ T8878] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1879: Failed to acquire dquot type 0
[  143.864796][ T8878] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  143.897630][ T8878] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.1879: corrupted inode contents
[  143.933387][ T8878] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #13: comm syz.3.1879: mark_inode_dirty error
[  143.948949][ T8883] SELinux:  policydb version 892417561 does not match my version range 15-35
[  143.969030][ T8883] SELinux: failed to load policy
[  143.992230][ T8878] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.1879: corrupted inode contents
[  144.023024][ T8878] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.1879: mark_inode_dirty error
[  144.057530][ T8878] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.1879: corrupted inode contents
[  144.074489][ T8892] __nla_validate_parse: 15 callbacks suppressed
[  144.074510][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1883'.
[  144.100585][ T8878] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem
[  144.114958][ T8878] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.1879: corrupted inode contents
[  144.127792][ T8878] EXT4-fs error (device loop3): ext4_truncate:4637: inode #13: comm syz.3.1879: mark_inode_dirty error
[  144.139460][ T8878] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem
[  144.166866][ T8878] EXT4-fs (loop3): 1 truncate cleaned up
[  144.173779][ T8878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.205975][ T8870] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  144.216922][ T8902] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  144.225616][ T8896] capability: warning: `+}[@' uses 32-bit capabilities (legacy support in use)
[  144.235080][ T8902] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  144.290073][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.335157][   T29] kauditd_printk_skb: 422 callbacks suppressed
[  144.335178][   T29] audit: type=1326 audit(1760090467.104:6743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.3.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc187d1eec9 code=0x7ffc0000
[  144.364371][ T8914] netlink: 'syz.0.1889': attribute type 1 has an invalid length.
[  144.367043][   T29] audit: type=1326 audit(1760090467.104:6744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.3.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc187d1eec9 code=0x7ffc0000
[  144.375183][ T8914] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1889'.
[  144.410558][ T8915] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1892'.
[  144.454202][   T29] audit: type=1326 audit(1760090467.114:6745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.3.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc187d1eec9 code=0x7ffc0000
[  144.479704][   T29] audit: type=1326 audit(1760090467.114:6746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.3.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc187d1eec9 code=0x7ffc0000
[  144.480004][ T8915] loop1: detected capacity change from 0 to 1024
[  144.503490][   T29] audit: type=1326 audit(1760090467.114:6747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.3.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc187d1eec9 code=0x7ffc0000
[  144.503590][   T29] audit: type=1326 audit(1760090467.204:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.3.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fc187d1eec9 code=0x7ffc0000
[  144.559492][   T29] audit: type=1326 audit(1760090467.204:6749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.3.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc187d1eec9 code=0x7ffc0000
[  144.581653][ T8915] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  144.583054][   T29] audit: type=1326 audit(1760090467.204:6750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.3.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc187d1eec9 code=0x7ffc0000
[  144.594301][ T8915] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  144.618569][   T29] audit: type=1326 audit(1760090467.204:6751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.3.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc187d1eec9 code=0x7ffc0000
[  144.652169][   T29] audit: type=1326 audit(1760090467.204:6752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.3.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc187d1eec9 code=0x7ffc0000
[  144.680767][ T8915] JBD2: no valid journal superblock found
[  144.687361][ T8915] EXT4-fs (loop1): Could not load journal inode
[  144.738544][ T8920] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1894'.
[  144.788560][ T8922] loop4: detected capacity change from 0 to 512
[  144.835011][ T8922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.847771][ T8922] ext4 filesystem being mounted at /416/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  144.887865][ T8922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.016459][ T8932] netlink: 4 bytes leftover after parsing attributes in process `wޣ�'.
[  145.104814][ T8942] FAULT_INJECTION: forcing a failure.
[  145.104814][ T8942] name failslab, interval 1, probability 0, space 0, times 0
[  145.117971][ T8942] CPU: 1 UID: 0 PID: 8942 Comm: syz.1.1902 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  145.118007][ T8942] Tainted: [W]=WARN
[  145.118017][ T8942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  145.118034][ T8942] Call Trace:
[  145.118043][ T8942]  <TASK>
[  145.118053][ T8942]  __dump_stack+0x1d/0x30
[  145.118081][ T8942]  dump_stack_lvl+0xe8/0x140
[  145.118123][ T8942]  dump_stack+0x15/0x1b
[  145.118139][ T8942]  should_fail_ex+0x265/0x280
[  145.118186][ T8942]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  145.118213][ T8942]  should_failslab+0x8c/0xb0
[  145.118272][ T8942]  kmem_cache_alloc_lru_noprof+0x55/0x490
[  145.118303][ T8942]  ? debugfs_alloc_inode+0x34/0x40
[  145.118406][ T8942]  ? lookup_noperm+0xc9/0x180
[  145.118536][ T8942]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  145.118599][ T8942]  debugfs_alloc_inode+0x34/0x40
[  145.118619][ T8942]  alloc_inode+0x3d/0x170
[  145.118670][ T8942]  new_inode+0x1d/0xe0
[  145.118701][ T8942]  __debugfs_create_file+0x109/0x330
[  145.118793][ T8942]  debugfs_create_file_full+0x3f/0x60
[  145.118876][ T8942]  ? __pfx_ipgre_tunnel_setup+0x10/0x10
[  145.118899][ T8942]  ref_tracker_dir_debugfs+0x100/0x1e0
[  145.118982][ T8942]  alloc_netdev_mqs+0x1a7/0xa50
[  145.119017][ T8942]  rtnl_create_link+0x239/0x710
[  145.119125][ T8942]  rtnl_newlink_create+0x14c/0x620
[  145.119149][ T8942]  ? security_capable+0x83/0x90
[  145.119190][ T8942]  ? netlink_ns_capable+0x86/0xa0
[  145.119275][ T8942]  rtnl_newlink+0xf29/0x12d0
[  145.119377][ T8942]  ? bpf_trace_run3+0x12c/0x1d0
[  145.119407][ T8942]  ? __kfree_skb+0x109/0x150
[  145.119505][ T8942]  ? __memcg_slab_free_hook+0x135/0x230
[  145.119617][ T8942]  ? __rcu_read_unlock+0x4f/0x70
[  145.119695][ T8942]  ? avc_has_perm_noaudit+0x1b1/0x200
[  145.119733][ T8942]  ? cred_has_capability+0x210/0x280
[  145.119833][ T8942]  ? selinux_capable+0x31/0x40
[  145.119854][ T8942]  ? security_capable+0x83/0x90
[  145.119918][ T8942]  ? ns_capable+0x7d/0xb0
[  145.119942][ T8942]  ? __pfx_rtnl_newlink+0x10/0x10
[  145.119978][ T8942]  rtnetlink_rcv_msg+0x5fb/0x6d0
[  145.120020][ T8942]  netlink_rcv_skb+0x120/0x220
[  145.120125][ T8942]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  145.120202][ T8942]  rtnetlink_rcv+0x1c/0x30
[  145.120250][ T8942]  netlink_unicast+0x5c0/0x690
[  145.120281][ T8942]  netlink_sendmsg+0x58b/0x6b0
[  145.120335][ T8942]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.120401][ T8942]  __sock_sendmsg+0x142/0x180
[  145.120422][ T8942]  ____sys_sendmsg+0x31e/0x4e0
[  145.120522][ T8942]  ___sys_sendmsg+0x17b/0x1d0
[  145.120571][ T8942]  __x64_sys_sendmsg+0xd4/0x160
[  145.120622][ T8942]  x64_sys_call+0x191e/0x3000
[  145.120644][ T8942]  do_syscall_64+0xd2/0x200
[  145.120669][ T8942]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  145.120710][ T8942]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  145.120733][ T8942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.120756][ T8942] RIP: 0033:0x7fedb252eec9
[  145.120773][ T8942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.120792][ T8942] RSP: 002b:00007fedb0f8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  145.120855][ T8942] RAX: ffffffffffffffda RBX: 00007fedb2785fa0 RCX: 00007fedb252eec9
[  145.120893][ T8942] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  145.120906][ T8942] RBP: 00007fedb0f8f090 R08: 0000000000000000 R09: 0000000000000000
[  145.120919][ T8942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  145.120932][ T8942] R13: 00007fedb2786038 R14: 00007fedb2785fa0 R15: 00007fffafedd428
[  145.120954][ T8942]  </TASK>
[  145.120966][ T8942] debugfs: out of free dentries, can not create file 'netdev@ffff88811e343550'
[  145.330057][ T8945] loop0: detected capacity change from 0 to 164
[  145.491778][ T8949] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1906'.
[  145.516991][ T8947] xt_hashlimit: max too large, truncated to 1048576
[  145.539422][ T8945] ISOFS: unable to read i-node block
[  145.544988][ T8945] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  145.595811][ T8945] netlink: 'syz.0.1904': attribute type 1 has an invalid length.
[  145.636102][ T8945] 8021q: adding VLAN 0 to HW filter on device bond7
[  145.695410][ T8959] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1904'.
[  145.707837][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1904'.
[  145.734766][ T8961] xt_hashlimit: max too large, truncated to 1048576
[  145.736472][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1911'.
[  145.809059][ T8968] siw: device registration error -23
[  145.838129][ T8966] netlink: 4 bytes leftover after parsing attributes in process `wޣ�'.
[  146.080463][ T8974] loop1: detected capacity change from 0 to 1024
[  146.112237][ T8974] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1914: Failed to acquire dquot type 0
[  146.131518][ T8974] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  146.141783][ T8982] loop2: detected capacity change from 0 to 512
[  146.149807][ T8974] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #13: comm syz.1.1914: corrupted inode contents
[  146.168377][ T8986] loop3: detected capacity change from 0 to 1024
[  146.176160][ T8974] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #13: comm syz.1.1914: mark_inode_dirty error
[  146.191809][ T8974] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #13: comm syz.1.1914: corrupted inode contents
[  146.217860][ T8974] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.1914: mark_inode_dirty error
[  146.231419][ T8986] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1915: Failed to acquire dquot type 0
[  146.246952][ T8995] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  146.254958][ T8974] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #13: comm syz.1.1914: corrupted inode contents
[  146.277070][ T8986] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  146.298588][ T8974] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[  146.316910][ T8982] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.1916: corrupted inode contents
[  146.334279][ T8986] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.1915: corrupted inode contents
[  146.350677][ T8982] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #16: comm syz.2.1916: mark_inode_dirty error
[  146.367572][ T9004] xt_TCPMSS: Only works on TCP SYN packets
[  146.367762][ T8974] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #13: comm syz.1.1914: corrupted inode contents
[  146.391641][ T8974] EXT4-fs error (device loop1): ext4_truncate:4637: inode #13: comm syz.1.1914: mark_inode_dirty error
[  146.391648][ T8986] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #13: comm syz.3.1915: mark_inode_dirty error
[  146.391927][ T8986] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.1915: corrupted inode contents
[  146.435842][ T8982] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.1916: corrupted inode contents
[  146.438474][ T8974] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[  146.474204][ T8974] EXT4-fs (loop1): 1 truncate cleaned up
[  146.481105][ T8982] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1916: mark_inode_dirty error
[  146.486873][ T9012] loop4: detected capacity change from 0 to 164
[  146.493070][ T8986] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.1915: mark_inode_dirty error
[  146.503086][ T8974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.528449][ T8982] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.1916: corrupted inode contents
[  146.544939][ T8986] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.1915: corrupted inode contents
[  146.559520][ T8982] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem
[  146.572575][ T9012] ISOFS: unable to read i-node block
[  146.572584][ T8986] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem
[  146.580013][ T9012] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  146.599681][ T8986] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.1915: corrupted inode contents
[  146.608208][ T9012] netlink: 'syz.4.1927': attribute type 1 has an invalid length.
[  146.617195][ T8986] EXT4-fs error (device loop3): ext4_truncate:4637: inode #13: comm syz.3.1915: mark_inode_dirty error
[  146.626516][ T8982] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.1916: corrupted inode contents
[  146.640358][ T8986] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem
[  146.658326][ T8982] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.1916: mark_inode_dirty error
[  146.667565][ T8986] EXT4-fs (loop3): 1 truncate cleaned up
[  146.687367][ T8974] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  146.697704][ T8982] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem
[  146.701762][ T8986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.710716][ T8982] EXT4-fs (loop2): 1 truncate cleaned up
[  146.732515][ T1834] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:8: Failed to release dquot type 1
[  146.733775][ T8982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.771922][ T8978] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  146.777684][ T8982] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.800616][ T9012] 8021q: adding VLAN 0 to HW filter on device bond6
[  146.804816][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.864218][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.909863][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.016175][ T9044] loop4: detected capacity change from 0 to 512
[  147.027297][ T9050] loop3: detected capacity change from 0 to 164
[  147.036582][ T9045] !yz!: rxe_newlink: already configured on team_slave_0
[  147.045161][ T9050] ISOFS: unable to read i-node block
[  147.050665][ T9050] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  147.069332][ T9050] netlink: 'syz.3.1941': attribute type 1 has an invalid length.
[  147.089814][ T9050] 8021q: adding VLAN 0 to HW filter on device bond6
[  147.098313][ T9044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.157318][ T9044] ext4 filesystem being mounted at /427/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  147.180020][ T9061] loop2: detected capacity change from 0 to 1024
[  147.188938][ T9044] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.189279][ T9065] SELinux:  Context system_u:object_r:auditd_etc_t:s0 is not valid (left unmapped).
[  147.208033][ T9067] FAULT_INJECTION: forcing a failure.
[  147.208033][ T9067] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  147.209722][ T9061] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1945: Failed to acquire dquot type 0
[  147.222332][ T9067] CPU: 1 UID: 0 PID: 9067 Comm: syz.1.1948 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  147.222379][ T9067] Tainted: [W]=WARN
[  147.222389][ T9067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  147.222407][ T9067] Call Trace:
[  147.222424][ T9067]  <TASK>
[  147.222435][ T9067]  __dump_stack+0x1d/0x30
[  147.222466][ T9067]  dump_stack_lvl+0xe8/0x140
[  147.222551][ T9067]  dump_stack+0x15/0x1b
[  147.222583][ T9067]  should_fail_ex+0x265/0x280
[  147.222673][ T9067]  should_fail+0xb/0x20
[  147.222775][ T9067]  should_fail_usercopy+0x1a/0x20
[  147.222811][ T9067]  _copy_from_user+0x1c/0xb0
[  147.222854][ T9067]  ___sys_sendmsg+0xc1/0x1d0
[  147.223008][ T9067]  __x64_sys_sendmsg+0xd4/0x160
[  147.223059][ T9067]  x64_sys_call+0x191e/0x3000
[  147.223157][ T9067]  do_syscall_64+0xd2/0x200
[  147.223194][ T9067]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  147.223249][ T9067]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  147.223283][ T9067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.223316][ T9067] RIP: 0033:0x7fedb252eec9
[  147.223340][ T9067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.223395][ T9067] RSP: 002b:00007fedb0f8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  147.223423][ T9067] RAX: ffffffffffffffda RBX: 00007fedb2785fa0 RCX: 00007fedb252eec9
[  147.223443][ T9067] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000006
[  147.223462][ T9067] RBP: 00007fedb0f8f090 R08: 0000000000000000 R09: 0000000000000000
[  147.223480][ T9067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  147.223498][ T9067] R13: 00007fedb2786038 R14: 00007fedb2785fa0 R15: 00007fffafedd428
[  147.223527][ T9067]  </TASK>
[  147.434298][ T9061] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  147.451806][ T9061] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.1945: corrupted inode contents
[  147.468531][ T9061] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #13: comm syz.2.1945: mark_inode_dirty error
[  147.480602][ T9061] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.1945: corrupted inode contents
[  147.494306][ T9061] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.1945: mark_inode_dirty error
[  147.508780][ T9061] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.1945: corrupted inode contents
[  147.523612][ T9061] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem
[  147.545887][ T9061] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.1945: corrupted inode contents
[  147.586673][ T9061] EXT4-fs error (device loop2): ext4_truncate:4637: inode #13: comm syz.2.1945: mark_inode_dirty error
[  147.608449][ T9079] loop0: detected capacity change from 0 to 1024
[  147.624641][ T9079] EXT4-fs: Ignoring removed mblk_io_submit option
[  147.632375][ T9075] loop1: detected capacity change from 0 to 1024
[  147.641826][ T9075] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  147.643049][ T9079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.653636][ T9075] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  147.681200][ T9061] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem
[  147.692221][ T9079] EXT4-fs error (device loop0): __ext4_iget:5435: inode #12: block 13: comm syz.0.1952: invalid block
[  147.703779][ T9079] EXT4-fs (loop0): Remounting filesystem read-only
[  147.718997][ T9061] EXT4-fs (loop2): 1 truncate cleaned up
[  147.729555][ T9061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.743066][ T9075] JBD2: no valid journal superblock found
[  147.750186][ T9075] EXT4-fs (loop1): Could not load journal inode
[  147.774896][ T9061] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  147.849889][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.889763][ T9092] loop1: detected capacity change from 0 to 512
[  147.908724][ T9092] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.1957: corrupted inode contents
[  147.934239][ T9094] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  147.943999][ T9094] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  147.944437][ T9092] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #16: comm syz.1.1957: mark_inode_dirty error
[  147.975405][ T9092] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.1957: corrupted inode contents
[  148.011368][ T9092] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1957: mark_inode_dirty error
[  148.037117][ T9108] loop4: detected capacity change from 0 to 512
[  148.059832][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.060386][ T9112] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  148.089924][ T9092] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.1957: corrupted inode contents
[  148.105737][ T9092] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[  148.115175][ T9092] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.1957: corrupted inode contents
[  148.130602][ T9108] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.1963: corrupted inode contents
[  148.157640][ T9108] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #16: comm syz.4.1963: mark_inode_dirty error
[  148.163711][ T9118] xt_hashlimit: max too large, truncated to 1048576
[  148.169375][ T9108] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.1963: corrupted inode contents
[  148.189019][ T9108] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1963: mark_inode_dirty error
[  148.203109][ T9108] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.1963: corrupted inode contents
[  148.209461][ T9120] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  148.216011][ T9108] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem
[  148.245066][ T9118] siw: device registration error -23
[  148.254220][ T9108] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.1963: corrupted inode contents
[  148.271144][ T9092] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.1957: mark_inode_dirty error
[  148.286833][ T9108] EXT4-fs error (device loop4): ext4_truncate:4637: inode #16: comm syz.4.1963: mark_inode_dirty error
[  148.301640][ T9092] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[  148.334326][ T9108] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem
[  148.336038][ T9130] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  148.365413][ T9092] EXT4-fs (loop1): 1 truncate cleaned up
[  148.372854][ T9092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.374369][ T9108] EXT4-fs (loop4): 1 truncate cleaned up
[  148.386350][ T9092] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.395609][ T9134] xt_hashlimit: max too large, truncated to 1048576
[  148.404022][   T52] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1
[  148.421692][ T9108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.435959][ T9137] loop2: detected capacity change from 0 to 1024
[  148.443636][ T9108] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.454584][   T52] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1
[  148.466763][ T9137] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  148.478158][ T9137] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  148.494916][ T9137] JBD2: no valid journal superblock found
[  148.499265][ T9134] siw: device registration error -23
[  148.500850][ T9137] EXT4-fs (loop2): Could not load journal inode
[  148.532580][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.553004][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.576809][ T9144] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  148.601561][ T9150] netlink: 'syz.0.1974': attribute type 1 has an invalid length.
[  148.661474][ T9156] loop4: detected capacity change from 0 to 128
[  148.759554][ T9175] xt_hashlimit: max too large, truncated to 1048576
[  148.831425][ T9183] loop2: detected capacity change from 0 to 1764
[  149.667266][   T29] kauditd_printk_skb: 144 callbacks suppressed
[  149.667285][   T29] audit: type=1326 audit(1760090472.444:6888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.1.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb252eec9 code=0x7ffc0000
[  149.762211][ T9212] __nla_validate_parse: 20 callbacks suppressed
[  149.762234][ T9212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1996'.
[  149.900793][ T9212] IPv6: NLM_F_REPLACE set, but no existing node found!
[  149.947705][   T29] audit: type=1326 audit(1760090472.484:6889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.1.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb252eec9 code=0x7ffc0000
[  149.971876][   T29] audit: type=1326 audit(1760090472.484:6890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.1.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedb252eec9 code=0x7ffc0000
[  149.999047][   T29] audit: type=1326 audit(1760090472.484:6891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.1.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb252eec9 code=0x7ffc0000
[  149.999082][   T29] audit: type=1326 audit(1760090472.484:6892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.1.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb252eec9 code=0x7ffc0000
[  149.999186][   T29] audit: type=1326 audit(1760090472.494:6893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.1.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedb252eec9 code=0x7ffc0000
[  149.999215][   T29] audit: type=1326 audit(1760090472.494:6894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.1.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb252eec9 code=0x7ffc0000
[  149.999248][   T29] audit: type=1326 audit(1760090472.494:6895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.1.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb252eec9 code=0x7ffc0000
[  149.999532][   T29] audit: type=1326 audit(1760090472.494:6896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.1.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fedb252d710 code=0x7ffc0000
[  149.999563][   T29] audit: type=1326 audit(1760090472.494:6897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.1.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb252eec9 code=0x7ffc0000
[  150.138776][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1998'.
[  150.178739][ T9228] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  150.227198][ T9236] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  150.239605][ T9238] loop0: detected capacity change from 0 to 164
[  150.247255][ T9238] ISOFS: unable to read i-node block
[  150.256250][ T9238] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  150.289987][ T9238] netlink: 'syz.0.2003': attribute type 1 has an invalid length.
[  150.313670][ T9238] 8021q: adding VLAN 0 to HW filter on device bond8
[  150.329540][ T9238] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2003'.
[  150.356841][ T9250] netlink: 'syz.4.2006': attribute type 1 has an invalid length.
[  150.365310][ T9250] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2006'.
[  150.485433][ T9261] netlink: 4 bytes leftover after parsing attributes in process `wޣ�'.
[  150.499413][ T9268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2013'.
[  150.523489][ T9268] loop3: detected capacity change from 0 to 1024
[  150.538129][ T9270] FAULT_INJECTION: forcing a failure.
[  150.538129][ T9270] name failslab, interval 1, probability 0, space 0, times 0
[  150.552226][ T9270] CPU: 1 UID: 0 PID: 9270 Comm: syz.0.2015 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  150.552267][ T9270] Tainted: [W]=WARN
[  150.552276][ T9270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  150.552371][ T9270] Call Trace:
[  150.552379][ T9270]  <TASK>
[  150.552388][ T9270]  __dump_stack+0x1d/0x30
[  150.552890][ T9270]  dump_stack_lvl+0xe8/0x140
[  150.552922][ T9270]  dump_stack+0x15/0x1b
[  150.552951][ T9270]  should_fail_ex+0x265/0x280
[  150.553018][ T9270]  ? sctp_add_bind_addr+0x71/0x1e0
[  150.553045][ T9270]  should_failslab+0x8c/0xb0
[  150.553154][ T9270]  __kmalloc_cache_noprof+0x4c/0x4a0
[  150.553193][ T9270]  sctp_add_bind_addr+0x71/0x1e0
[  150.553225][ T9270]  sctp_copy_local_addr_list+0x199/0x220
[  150.553308][ T9270]  sctp_copy_one_addr+0x7f/0x280
[  150.553347][ T9270]  sctp_bind_addr_copy+0x79/0x290
[  150.553569][ T9270]  sctp_assoc_set_bind_addr_from_ep+0xce/0xe0
[  150.553624][ T9270]  sctp_connect_new_asoc+0x1c3/0x3a0
[  150.553749][ T9270]  sctp_sendmsg+0xf10/0x18d0
[  150.553835][ T9270]  ? selinux_socket_sendmsg+0xa1/0x1b0
[  150.553870][ T9270]  ? __pfx_sctp_sendmsg+0x10/0x10
[  150.553909][ T9270]  inet_sendmsg+0xc2/0xd0
[  150.553949][ T9270]  __sock_sendmsg+0x102/0x180
[  150.554052][ T9270]  ____sys_sendmsg+0x345/0x4e0
[  150.554095][ T9270]  ___sys_sendmsg+0x17b/0x1d0
[  150.554150][ T9270]  __sys_sendmmsg+0x178/0x300
[  150.554278][ T9270]  __x64_sys_sendmmsg+0x57/0x70
[  150.554308][ T9270]  x64_sys_call+0x1c4a/0x3000
[  150.554331][ T9270]  do_syscall_64+0xd2/0x200
[  150.554424][ T9270]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  150.554453][ T9270]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  150.554478][ T9270]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.554507][ T9270] RIP: 0033:0x7fe6f6a9eec9
[  150.554528][ T9270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.554562][ T9270] RSP: 002b:00007fe6f5507038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  150.554637][ T9270] RAX: ffffffffffffffda RBX: 00007fe6f6cf5fa0 RCX: 00007fe6f6a9eec9
[  150.554666][ T9270] RDX: 0000000000000002 RSI: 0000200000000880 RDI: 0000000000000004
[  150.554684][ T9270] RBP: 00007fe6f5507090 R08: 0000000000000000 R09: 0000000000000000
[  150.554701][ T9270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  150.554718][ T9270] R13: 00007fe6f6cf6038 R14: 00007fe6f6cf5fa0 R15: 00007fffa6e85988
[  150.554744][ T9270]  </TASK>
[  150.815833][ T9268] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  150.847734][ T9268] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  150.861391][ T9270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2015'.
[  150.871544][ T9268] JBD2: no valid journal superblock found
[  150.877727][ T9268] EXT4-fs (loop3): Could not load journal inode
[  150.907588][ T9274] loop0: detected capacity change from 0 to 512
[  150.939418][ T9274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.959010][ T9281] xt_hashlimit: max too large, truncated to 1048576
[  150.966259][ T9274] ext4 filesystem being mounted at /407/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  150.986136][ T9274] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.011513][ T9276] !yz!: rxe_newlink: already configured on team_slave_0
[  151.192453][ T9296] netlink: 4 bytes leftover after parsing attributes in process `wޣ�'.
[  151.225744][ T9305] xt_hashlimit: max too large, truncated to 1048576
[  151.233984][ T9298] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  151.281227][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2026'.
[  151.291519][ T9304] xt_hashlimit: max too large, truncated to 1048576
[  151.325976][ T9311] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2030'.
[  151.337452][ T9314] xt_hashlimit: max too large, truncated to 1048576
[  151.387712][ T9319] loop4: detected capacity change from 0 to 1024
[  151.395139][ T9319] EXT4-fs: Ignoring removed nobh option
[  151.420280][ T9319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.478035][ T9319] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  151.487805][ T9319] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  151.510307][ T9328] netlink: 'syz.0.2036': attribute type 1 has an invalid length.
[  151.529275][ T9319] ext4: Unknown parameter '��������������18446744073709551615�����@�LqE�:��� �艞�t}�0��$�'
[  151.568478][ T9319] ext4: Unknown parameter '��1844674407370955161500000000000000000000��������������'
[  151.632103][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.795165][ T9346] support for the xor transformation has been removed.
[  151.875745][ T9350] xt_hashlimit: max too large, truncated to 1048576
[  151.876975][ T9351] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  151.891784][ T9351] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  151.912466][ T9353] loop2: detected capacity change from 0 to 512
[  151.922458][ T9264] loop1: detected capacity change from 0 to 1024
[  151.936853][ T9353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.950527][ T9353] ext4 filesystem being mounted at /407/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  151.962142][ T9353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.985188][ T9264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  152.000420][ T9264] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.130574][ T9362] loop2: detected capacity change from 0 to 512
[  152.146085][ T9362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.160072][ T9362] ext4 filesystem being mounted at /409/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  152.172071][ T9362] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.332749][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  152.403699][ T9375] loop0: detected capacity change from 0 to 1024
[  152.413071][ T9375] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  152.424888][ T9375] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  152.436517][ T9375] JBD2: no valid journal superblock found
[  152.442933][ T9375] EXT4-fs (loop0): Could not load journal inode
[  152.708859][ T9412] loop4: detected capacity change from 0 to 1024
[  152.725482][ T9412] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  152.737336][ T9412] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  152.752484][ T9412] JBD2: no valid journal superblock found
[  152.760142][ T9412] EXT4-fs (loop4): Could not load journal inode
[  152.777127][ T9420] xt_hashlimit: max too large, truncated to 1048576
[  152.828396][ T9425] loop1: detected capacity change from 0 to 512
[  152.858881][ T9425] ext4: Bad value for 'max_dir_size_kb'
[  152.892561][ T9422] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  153.101758][ T9437] FAULT_INJECTION: forcing a failure.
[  153.101758][ T9437] name failslab, interval 1, probability 0, space 0, times 0
[  153.118117][ T9437] CPU: 1 UID: 0 PID: 9437 Comm: syz.4.2075 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  153.118198][ T9437] Tainted: [W]=WARN
[  153.118205][ T9437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  153.118218][ T9437] Call Trace:
[  153.118225][ T9437]  <TASK>
[  153.118232][ T9437]  __dump_stack+0x1d/0x30
[  153.118293][ T9437]  dump_stack_lvl+0xe8/0x140
[  153.118314][ T9437]  dump_stack+0x15/0x1b
[  153.118331][ T9437]  should_fail_ex+0x265/0x280
[  153.118367][ T9437]  ? alloc_bprm+0x5c/0x350
[  153.118441][ T9437]  should_failslab+0x8c/0xb0
[  153.118479][ T9437]  __kmalloc_cache_noprof+0x4c/0x4a0
[  153.118513][ T9437]  alloc_bprm+0x5c/0x350
[  153.118536][ T9437]  do_execveat_common+0x12e/0x750
[  153.118563][ T9437]  ? getname_flags+0x154/0x3b0
[  153.118594][ T9437]  __x64_sys_execveat+0x73/0x90
[  153.118619][ T9437]  x64_sys_call+0x1fec/0x3000
[  153.118695][ T9437]  do_syscall_64+0xd2/0x200
[  153.118720][ T9437]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  153.118749][ T9437]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  153.118803][ T9437]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.118825][ T9437] RIP: 0033:0x7fa09d79eec9
[  153.118841][ T9437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.118861][ T9437] RSP: 002b:00007fa09c207038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  153.118957][ T9437] RAX: ffffffffffffffda RBX: 00007fa09d9f5fa0 RCX: 00007fa09d79eec9
[  153.118970][ T9437] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  153.119058][ T9437] RBP: 00007fa09c207090 R08: 0000000000000000 R09: 0000000000000000
[  153.119072][ T9437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.119084][ T9437] R13: 00007fa09d9f6038 R14: 00007fa09d9f5fa0 R15: 00007fff020192f8
[  153.119105][ T9437]  </TASK>
[  153.631523][ T9443] loop2: detected capacity change from 0 to 512
[  153.674555][ T9443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.723252][ T9443] ext4 filesystem being mounted at /414/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  153.772434][ T9443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.894612][ T9461] xt_hashlimit: max too large, truncated to 1048576
[  153.928140][ T9462] xt_hashlimit: max too large, truncated to 1048576
[  154.115236][ T9472] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  154.224225][ T9484] loop2: detected capacity change from 0 to 128
[  154.258617][ T9484] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  154.312270][ T9487] loop0: detected capacity change from 0 to 512
[  154.334961][ T9487] EXT4-fs (loop0): failed to initialize system zone (-117)
[  154.374279][ T9487] EXT4-fs (loop0): mount failed
[  154.379820][ T9484] ext4 filesystem being mounted at /418/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  154.540497][ T9495] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9495 comm=syz.2.2094
[  154.555117][ T9495] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9495 comm=syz.2.2094
[  154.821294][ T9498] FAULT_INJECTION: forcing a failure.
[  154.821294][ T9498] name failslab, interval 1, probability 0, space 0, times 0
[  154.835593][ T9498] CPU: 0 UID: 0 PID: 9498 Comm: syz.0.2097 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  154.835635][ T9498] Tainted: [W]=WARN
[  154.835644][ T9498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  154.835729][ T9498] Call Trace:
[  154.835735][ T9498]  <TASK>
[  154.835742][ T9498]  __dump_stack+0x1d/0x30
[  154.835765][ T9498]  dump_stack_lvl+0xe8/0x140
[  154.835788][ T9498]  dump_stack+0x15/0x1b
[  154.835845][ T9498]  should_fail_ex+0x265/0x280
[  154.835887][ T9498]  should_failslab+0x8c/0xb0
[  154.835925][ T9498]  kmem_cache_alloc_lru_noprof+0x55/0x490
[  154.835972][ T9498]  ? hugetlbfs_alloc_inode+0xbc/0x100
[  154.836100][ T9498]  hugetlbfs_alloc_inode+0xbc/0x100
[  154.836143][ T9498]  ? __pfx_hugetlbfs_alloc_inode+0x10/0x10
[  154.836240][ T9498]  alloc_inode+0x3d/0x170
[  154.836265][ T9498]  new_inode+0x1d/0xe0
[  154.836296][ T9498]  hugetlbfs_get_inode+0x7b/0x370
[  154.836396][ T9498]  hugetlb_file_setup+0x192/0x3d0
[  154.836436][ T9498]  ksys_mmap_pgoff+0x157/0x310
[  154.836542][ T9498]  x64_sys_call+0x14a3/0x3000
[  154.836573][ T9498]  do_syscall_64+0xd2/0x200
[  154.836599][ T9498]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  154.836630][ T9498]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  154.836703][ T9498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.836734][ T9498] RIP: 0033:0x7fe6f6a9eec9
[  154.836755][ T9498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.836777][ T9498] RSP: 002b:00007fe6f54e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  154.836803][ T9498] RAX: ffffffffffffffda RBX: 00007fe6f6cf6090 RCX: 00007fe6f6a9eec9
[  154.836822][ T9498] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000
[  154.836861][ T9498] RBP: 00007fe6f54e6090 R08: ffffffffffffffff R09: 0000000000000000
[  154.836879][ T9498] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001
[  154.836896][ T9498] R13: 00007fe6f6cf6128 R14: 00007fe6f6cf6090 R15: 00007fffa6e85988
[  154.836975][ T9498]  </TASK>
[  155.097726][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  155.182008][ T9502] FAULT_INJECTION: forcing a failure.
[  155.182008][ T9502] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  155.195570][ T9502] CPU: 1 UID: 0 PID: 9502 Comm: syz.0.2099 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  155.195632][ T9502] Tainted: [W]=WARN
[  155.195639][ T9502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  155.195677][ T9502] Call Trace:
[  155.195685][ T9502]  <TASK>
[  155.195694][ T9502]  __dump_stack+0x1d/0x30
[  155.195722][ T9502]  dump_stack_lvl+0xe8/0x140
[  155.195801][ T9502]  dump_stack+0x15/0x1b
[  155.195824][ T9502]  should_fail_ex+0x265/0x280
[  155.195871][ T9502]  should_fail+0xb/0x20
[  155.195908][ T9502]  should_fail_usercopy+0x1a/0x20
[  155.196003][ T9502]  _copy_from_user+0x1c/0xb0
[  155.196028][ T9502]  ___sys_sendmsg+0xc1/0x1d0
[  155.196148][ T9502]  __x64_sys_sendmsg+0xd4/0x160
[  155.196194][ T9502]  x64_sys_call+0x191e/0x3000
[  155.196224][ T9502]  do_syscall_64+0xd2/0x200
[  155.196347][ T9502]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  155.196384][ T9502]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  155.196410][ T9502]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.196433][ T9502] RIP: 0033:0x7fe6f6a9eec9
[  155.196508][ T9502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.196531][ T9502] RSP: 002b:00007fe6f5507038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  155.196557][ T9502] RAX: ffffffffffffffda RBX: 00007fe6f6cf5fa0 RCX: 00007fe6f6a9eec9
[  155.196574][ T9502] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005
[  155.196591][ T9502] RBP: 00007fe6f5507090 R08: 0000000000000000 R09: 0000000000000000
[  155.196608][ T9502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  155.196624][ T9502] R13: 00007fe6f6cf6038 R14: 00007fe6f6cf5fa0 R15: 00007fffa6e85988
[  155.196651][ T9502]  </TASK>
[  155.344152][ T9462] siw: device registration error -23
[  155.393909][ T9490] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  155.586373][ T9513] loop0: detected capacity change from 0 to 128
[  155.635777][   T29] kauditd_printk_skb: 213 callbacks suppressed
[  155.635796][   T29] audit: type=1400 audit(1760090478.414:7107): avc:  denied  { nlmsg_read } for  pid=9503 comm="syz.0.2100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  155.707443][ T9519] __nla_validate_parse: 10 callbacks suppressed
[  155.707466][ T9519] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2104'.
[  155.717203][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2102'.
[  155.726255][ T9513] bio_check_eod: 21 callbacks suppressed
[  155.726288][ T9513] syz.0.2100: attempt to access beyond end of device
[  155.726288][ T9513] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128
[  155.736703][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2105'.
[  155.752646][ T9513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.778653][ T9513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.823775][ T9521] loop3: detected capacity change from 0 to 1024
[  155.836616][ T9521] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5
[  155.846571][ T9521] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  155.856566][ T9521] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2105: Failed to acquire dquot type 0
[  155.869264][ T9528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2106'.
[  155.882806][ T9521] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  155.906334][ T9521] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.2105: corrupted inode contents
[  155.918861][ T9521] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #13: comm syz.3.2105: mark_inode_dirty error
[  155.930772][ T9521] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.2105: corrupted inode contents
[  155.943208][ T9521] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.2105: mark_inode_dirty error
[  155.957333][ T9521] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.2105: corrupted inode contents
[  155.972228][ T9521] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem
[  155.987922][ T9530] loop4: detected capacity change from 0 to 512
[  155.996822][ T9521] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.2105: corrupted inode contents
[  156.010861][ T9521] EXT4-fs error (device loop3): ext4_truncate:4637: inode #13: comm syz.3.2105: mark_inode_dirty error
[  156.024225][ T9521] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem
[  156.034339][ T9521] EXT4-fs (loop3): 1 truncate cleaned up
[  156.043829][   T29] audit: type=1326 audit(1760090478.814:7108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9527 comm="syz.2.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f379eec9 code=0x7ffc0000
[  156.071685][   T29] audit: type=1326 audit(1760090478.814:7109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9527 comm="syz.2.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f21f379eec9 code=0x7ffc0000
[  156.097677][   T29] audit: type=1326 audit(1760090478.814:7110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9527 comm="syz.2.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f379eec9 code=0x7ffc0000
[  156.122075][   T29] audit: type=1326 audit(1760090478.814:7111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9527 comm="syz.2.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f379eec9 code=0x7ffc0000
[  156.148037][ T9530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.162783][ T9521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.176013][ T9530] ext4 filesystem being mounted at /467/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  156.191218][ T9530] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.202455][ T9521] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  156.276925][ T9536] loop2: detected capacity change from 0 to 512
[  156.286172][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.309154][ T9536] ext4 filesystem being mounted at /422/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  156.341332][ T9540] loop3: detected capacity change from 0 to 512
[  156.386247][ T9543] loop4: detected capacity change from 0 to 164
[  156.395538][ T9540] ext4 filesystem being mounted at /383/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  156.406901][ T9543] ISOFS: unable to read i-node block
[  156.412422][ T9543] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  156.423802][ T9543] netlink: 'syz.4.2110': attribute type 1 has an invalid length.
[  156.514362][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2110'.
[  156.612828][ T9552] syz0: rxe_newlink: already configured on team_slave_0
[  156.631874][ T9543] 8021q: adding VLAN 0 to HW filter on device bond7
[  156.681584][ T9558] loop2: detected capacity change from 0 to 1024
[  156.737834][ T9563] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2116'.
[  156.777257][   T29] audit: type=1326 audit(1760090479.554:7112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9566 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc187d1eec9 code=0x7ffc0000
[  156.802798][   T29] audit: type=1326 audit(1760090479.554:7113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9566 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc187d1eec9 code=0x7ffc0000
[  156.859469][ T9571] loop3: detected capacity change from 0 to 164
[  156.866987][ T9568] loop4: detected capacity change from 0 to 512
[  156.885639][ T9571] ISOFS: unable to read i-node block
[  156.891217][ T9571] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  156.909271][ T9568] EXT4-fs (loop4): failed to initialize system zone (-117)
[  156.919290][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2119'.
[  156.929363][ T9568] EXT4-fs (loop4): mount failed
[  156.937268][ T9571] netlink: 'syz.3.2118': attribute type 1 has an invalid length.
[  156.954712][   T29] audit: type=1326 audit(1760090479.614:7114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9566 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc187d1eec9 code=0x7ffc0000
[  156.988647][ T9579] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2118'.
[  157.009108][ T9571] 8021q: adding VLAN 0 to HW filter on device bond7
[  157.009142][ T9580] loop0: detected capacity change from 0 to 1024
[  157.036985][ T9580] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2119: Failed to acquire dquot type 0
[  157.057331][ T9580] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  157.087616][ T9580] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #13: comm syz.0.2119: corrupted inode contents
[  157.100154][ T9580] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #13: comm syz.0.2119: mark_inode_dirty error
[  157.113005][ T9580] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #13: comm syz.0.2119: corrupted inode contents
[  157.125325][ T9580] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.2119: mark_inode_dirty error
[  157.138031][ T9580] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #13: comm syz.0.2119: corrupted inode contents
[  157.153768][ T9583] netlink: 4 bytes leftover after parsing attributes in process `wޣ�'.
[  157.165578][ T9580] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem
[  157.174905][ T9580] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #13: comm syz.0.2119: corrupted inode contents
[  157.191026][ T9580] EXT4-fs error (device loop0): ext4_truncate:4637: inode #13: comm syz.0.2119: mark_inode_dirty error
[  157.231415][ T9580] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem
[  157.242620][ T9580] EXT4-fs (loop0): 1 truncate cleaned up
[  157.251896][ T9587] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2121'.
[  157.262723][ T9575] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  157.268215][ T9587] loop3: detected capacity change from 0 to 1024
[  157.279879][ T9587] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  157.291990][ T9587] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  157.304691][ T9587] JBD2: no valid journal superblock found
[  157.311070][ T9587] EXT4-fs (loop3): Could not load journal inode
[  157.417442][ T9597] loop0: detected capacity change from 0 to 164
[  157.438402][ T9597] ISOFS: unable to read i-node block
[  157.458654][ T9597] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  157.473924][ T9597] netlink: 'syz.0.2126': attribute type 1 has an invalid length.
[  157.516929][ T9597] 8021q: adding VLAN 0 to HW filter on device bond9
[  157.625283][ T9611] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  157.667659][ T9620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  157.781220][ T9636] xt_hashlimit: max too large, truncated to 1048576
[  157.797648][ T9636] siw: device registration error -23
[  157.872419][ T9642] sch_tbf: burst 1821 is lower than device lo mtu (11337746) !
[  158.041874][ T9654] !yz!: rxe_newlink: already configured on team_slave_0
[  158.177562][ T9666] xt_hashlimit: max too large, truncated to 1048576
[  158.232339][ T9670] loop3: detected capacity change from 0 to 1024
[  158.241175][ T9670] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  158.254469][ T9670] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  158.265493][ T9670] JBD2: no valid journal superblock found
[  158.271912][ T9670] EXT4-fs (loop3): Could not load journal inode
[  158.374968][ T9686] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  158.460645][ T9692] loop3: detected capacity change from 0 to 1024
[  158.469817][ T9692] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2158: Failed to acquire dquot type 0
[  158.480747][ T9699] xt_hashlimit: max too large, truncated to 1048576
[  158.488093][ T9692] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  158.508541][ T9692] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.2158: corrupted inode contents
[  158.514868][ T9699] siw: device registration error -23
[  158.522551][ T9692] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #13: comm syz.3.2158: mark_inode_dirty error
[  158.547779][ T9692] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.2158: corrupted inode contents
[  158.562025][ T9692] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.2158: mark_inode_dirty error
[  158.581329][ T9701] xt_hashlimit: max too large, truncated to 1048576
[  158.592269][ T9692] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.2158: corrupted inode contents
[  158.607578][ T9692] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem
[  158.617132][ T9692] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.2158: corrupted inode contents
[  158.635490][ T9706] hsr0: entered promiscuous mode
[  158.642333][ T9692] EXT4-fs error (device loop3): ext4_truncate:4637: inode #13: comm syz.3.2158: mark_inode_dirty error
[  158.655992][ T9692] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem
[  158.666631][ T9692] EXT4-fs (loop3): 1 truncate cleaned up
[  158.674461][ T9706] hsr0: left promiscuous mode
[  158.692152][ T9692] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  158.704499][ T9710] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  158.804932][ T9721] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  158.859133][ T9730] loop3: detected capacity change from 0 to 512
[  158.876208][ T9730] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  158.887549][ T9733] xt_hashlimit: max too large, truncated to 1048576
[  158.907370][ T9737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  158.923277][ T9739] hsr0: entered promiscuous mode
[  158.974928][ T9739] hsr0: left promiscuous mode
[  159.002256][ T9750] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  159.022263][ T9743] loop2: detected capacity change from 0 to 1024
[  159.046684][ T9743] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2176: Failed to acquire dquot type 0
[  159.060487][ T9743] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  159.077499][ T9743] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.2176: corrupted inode contents
[  159.092239][ T9743] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #13: comm syz.2.2176: mark_inode_dirty error
[  159.120324][ T9743] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.2176: corrupted inode contents
[  159.146263][ T9743] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.2176: mark_inode_dirty error
[  159.158925][ T9743] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.2176: corrupted inode contents
[  159.187639][ T9762] xt_hashlimit: max too large, truncated to 1048576
[  159.190109][ T9756] SELinux:  Context system_u:object_r:tun_tap_device_t:s0 is not valid (left unmapped).
[  159.206029][ T9762] siw: device registration error -23
[  159.212413][ T9743] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem
[  159.234477][ T9743] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.2176: corrupted inode contents
[  159.266977][ T9743] EXT4-fs error (device loop2): ext4_truncate:4637: inode #13: comm syz.2.2176: mark_inode_dirty error
[  159.282820][ T9772] xt_hashlimit: max too large, truncated to 1048576
[  159.291905][ T9773] loop3: detected capacity change from 0 to 164
[  159.294873][ T9743] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem
[  159.317444][ T9773] ISOFS: unable to read i-node block
[  159.329393][ T9773] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  159.334874][ T9743] EXT4-fs (loop2): 1 truncate cleaned up
[  159.358460][ T9743] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  159.368420][ T9773] netlink: 'syz.3.2185': attribute type 1 has an invalid length.
[  159.384509][ T9777] loop4: detected capacity change from 0 to 1024
[  159.392431][ T9773] 8021q: adding VLAN 0 to HW filter on device bond8
[  159.401556][ T9778] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  159.457487][ T9784] loop2: detected capacity change from 0 to 1024
[  159.468349][ T9784] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  159.478181][ T9788] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  159.479990][ T9784] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  159.507789][ T9784] JBD2: no valid journal superblock found
[  159.513968][ T9784] EXT4-fs (loop2): Could not load journal inode
[  159.615738][ T9806] xt_hashlimit: max too large, truncated to 1048576
[  159.638880][ T9811] loop4: detected capacity change from 0 to 164
[  159.654246][ T9811] ISOFS: unable to read i-node block
[  159.661163][ T9811] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  159.667558][ T9808] loop3: detected capacity change from 0 to 1024
[  159.673525][ T9811] netlink: 'syz.4.2200': attribute type 1 has an invalid length.
[  159.690916][ T9808] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2199: Failed to acquire dquot type 0
[  159.694945][ T9811] 8021q: adding VLAN 0 to HW filter on device bond8
[  159.711731][ T9808] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  159.727486][ T9808] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.2199: corrupted inode contents
[  159.767972][ T9808] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #13: comm syz.3.2199: mark_inode_dirty error
[  159.792594][ T9825] loop0: detected capacity change from 0 to 512
[  159.792796][ T9824] loop1: detected capacity change from 0 to 1024
[  159.804775][ T9825] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  159.816414][ T9808] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.2199: corrupted inode contents
[  159.816522][ T9824] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  159.816550][ T9824] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  159.819209][ T9808] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.2199: mark_inode_dirty error
[  159.863662][ T9824] JBD2: no valid journal superblock found
[  159.864197][ T9825] EXT4-fs (loop0): 1 truncate cleaned up
[  159.869513][ T9824] EXT4-fs (loop1): Could not load journal inode
[  159.876381][ T9808] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.2199: corrupted inode contents
[  159.908691][ T9808] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem
[  159.923190][ T9808] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.2199: corrupted inode contents
[  159.940646][ T9808] EXT4-fs error (device loop3): ext4_truncate:4637: inode #13: comm syz.3.2199: mark_inode_dirty error
[  159.959499][ T9808] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem
[  159.975273][ T9808] EXT4-fs (loop3): 1 truncate cleaned up
[  159.981368][ T9835] loop0: detected capacity change from 0 to 1024
[  159.988706][ T9808] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  160.057455][ T9843] loop3: detected capacity change from 0 to 512
[  160.070526][ T9843] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  160.082198][ T9843] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #13: comm syz.3.2211: iget: bad i_size value: 12154757448730
[  160.098518][ T9843] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2211: couldn't read orphan inode 13 (err -117)
[  160.115653][ T9843] EXT4-fs warning (device loop3): ext4_lookup:1799: Inconsistent encryption contexts: 2/12
[  160.139228][ T9843] EXT4-fs warning (device loop3): ext4_lookup:1799: Inconsistent encryption contexts: 2/12
[  160.193208][ T9849] loop0: detected capacity change from 0 to 512
[  160.214769][ T9851] loop3: detected capacity change from 0 to 2048
[  160.261108][ T9849] ext4 filesystem being mounted at /453/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  160.293744][ T9851] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  160.312981][ T9862] FAULT_INJECTION: forcing a failure.
[  160.312981][ T9862] name failslab, interval 1, probability 0, space 0, times 0
[  160.328123][ T9862] CPU: 1 UID: 0 PID: 9862 Comm: syz.4.2217 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  160.328199][ T9862] Tainted: [W]=WARN
[  160.328208][ T9862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  160.328223][ T9862] Call Trace:
[  160.328230][ T9862]  <TASK>
[  160.328238][ T9862]  __dump_stack+0x1d/0x30
[  160.328263][ T9862]  dump_stack_lvl+0xe8/0x140
[  160.328293][ T9862]  dump_stack+0x15/0x1b
[  160.328310][ T9862]  should_fail_ex+0x265/0x280
[  160.328345][ T9862]  should_failslab+0x8c/0xb0
[  160.328439][ T9862]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  160.328470][ T9862]  ? __alloc_skb+0x101/0x320
[  160.328495][ T9862]  __alloc_skb+0x101/0x320
[  160.328524][ T9862]  netlink_alloc_large_skb+0xbf/0xf0
[  160.328606][ T9862]  netlink_sendmsg+0x3cf/0x6b0
[  160.328638][ T9862]  ? __pfx_netlink_sendmsg+0x10/0x10
[  160.328668][ T9862]  __sock_sendmsg+0x142/0x180
[  160.328765][ T9862]  ____sys_sendmsg+0x31e/0x4e0
[  160.328807][ T9862]  ___sys_sendmsg+0x17b/0x1d0
[  160.328860][ T9862]  __x64_sys_sendmsg+0xd4/0x160
[  160.328955][ T9862]  x64_sys_call+0x191e/0x3000
[  160.328984][ T9862]  do_syscall_64+0xd2/0x200
[  160.329014][ T9862]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  160.329082][ T9862]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  160.329111][ T9862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.329140][ T9862] RIP: 0033:0x7fa09d79eec9
[  160.329181][ T9862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.329206][ T9862] RSP: 002b:00007fa09c207038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  160.329231][ T9862] RAX: ffffffffffffffda RBX: 00007fa09d9f5fa0 RCX: 00007fa09d79eec9
[  160.329247][ T9862] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  160.329259][ T9862] RBP: 00007fa09c207090 R08: 0000000000000000 R09: 0000000000000000
[  160.329323][ T9862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  160.329335][ T9862] R13: 00007fa09d9f6038 R14: 00007fa09d9f5fa0 R15: 00007fff020192f8
[  160.329353][ T9862]  </TASK>
[  160.351284][ T9864] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  160.351833][ T9851] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 392 with error 28
[  160.626938][ T9851] EXT4-fs (loop3): This should not happen!! Data will be lost
[  160.626938][ T9851] 
[  160.640614][ T9851] EXT4-fs (loop3): Total free blocks count 0
[  160.648908][ T9851] EXT4-fs (loop3): Free/Dirty block details
[  160.657211][ T9851] EXT4-fs (loop3): free_blocks=2415919504
[  160.665920][ T9851] EXT4-fs (loop3): dirty_blocks=400
[  160.673164][ T9851] EXT4-fs (loop3): Block reservation details
[  160.681276][ T9851] EXT4-fs (loop3): i_reserved_data_blocks=25
[  160.692336][ T9861] FAULT_INJECTION: forcing a failure.
[  160.692336][ T9861] name failslab, interval 1, probability 0, space 0, times 0
[  160.708698][ T9861] CPU: 1 UID: 0 PID: 9861 Comm: syz.3.2214 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  160.708768][ T9861] Tainted: [W]=WARN
[  160.708776][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  160.708792][ T9861] Call Trace:
[  160.708798][ T9861]  <TASK>
[  160.708808][ T9861]  __dump_stack+0x1d/0x30
[  160.708881][ T9861]  dump_stack_lvl+0xe8/0x140
[  160.708904][ T9861]  dump_stack+0x15/0x1b
[  160.708923][ T9861]  should_fail_ex+0x265/0x280
[  160.708966][ T9861]  should_failslab+0x8c/0xb0
[  160.709071][ T9861]  kmem_cache_alloc_noprof+0x50/0x480
[  160.709106][ T9861]  ? __es_insert_extent+0x508/0xee0
[  160.709149][ T9861]  __es_insert_extent+0x508/0xee0
[  160.709192][ T9861]  ext4_es_insert_extent+0x435/0x1c10
[  160.709272][ T9861]  ? ext4_es_is_delayed+0x1a/0x30
[  160.709310][ T9861]  ext4_ext_map_blocks+0x172b/0x38a0
[  160.709344][ T9861]  ? __account_obj_stock+0x211/0x350
[  160.709440][ T9861]  ext4_map_query_blocks+0xa8/0x480
[  160.709478][ T9861]  ext4_da_get_block_prep+0x25b/0xbb0
[  160.709520][ T9861]  ? alloc_buffer_head+0x1c3/0x1f0
[  160.709623][ T9861]  ? folio_alloc_buffers+0x2e5/0x310
[  160.709654][ T9861]  __block_write_begin_int+0x3fd/0xf90
[  160.709692][ T9861]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[  160.709789][ T9861]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[  160.709845][ T9861]  block_page_mkwrite+0x1a8/0x3d0
[  160.709887][ T9861]  ext4_page_mkwrite+0x859/0xb90
[  160.709918][ T9861]  do_wp_page+0xa74/0x2510
[  160.710018][ T9861]  ? mntput_no_expire+0x6f/0x440
[  160.710063][ T9861]  ? __rcu_read_lock+0x37/0x50
[  160.710156][ T9861]  ? pte_offset_map_rw_nolock+0x199/0x1f0
[  160.710202][ T9861]  handle_mm_fault+0x77d/0x2be0
[  160.710230][ T9861]  ? __rcu_read_unlock+0x4f/0x70
[  160.710268][ T9861]  ? mt_find+0x208/0x320
[  160.710305][ T9861]  do_user_addr_fault+0x3fe/0x1080
[  160.710407][ T9861]  ? __rcu_read_unlock+0x4f/0x70
[  160.710449][ T9861]  exc_page_fault+0x62/0xa0
[  160.710476][ T9861]  asm_exc_page_fault+0x26/0x30
[  160.710539][ T9861] RIP: 0010:__put_user_4+0xd/0x20
[  160.710606][ T9861] Code: 66 89 01 31 c9 0f 01 ca e9 50 83 01 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90
[  160.710632][ T9861] RSP: 0018:ffffc9000f507e78 EFLAGS: 00050206
[  160.710653][ T9861] RAX: 0000000000000006 RBX: 0000000000000000 RCX: 00002000000000c0
[  160.710671][ T9861] RDX: ffff88811fefb180 RSI: 0000000000000007 RDI: 0000000000000000
[  160.710701][ T9861] RBP: 0000000000000006 R08: 0001ffff8684802f R09: 0000000000000000
[  160.710760][ T9861] R10: 000188811af35200 R11: 000188811af35207 R12: 00002000000000c0
[  160.710774][ T9861] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000
[  160.710796][ T9861]  __sys_socketpair+0xa6/0x430
[  160.710828][ T9861]  ? ksys_write+0x192/0x1a0
[  160.710920][ T9861]  __x64_sys_socketpair+0x52/0x60
[  160.710943][ T9861]  x64_sys_call+0x2bf6/0x3000
[  160.710992][ T9861]  do_syscall_64+0xd2/0x200
[  160.711023][ T9861]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  160.711059][ T9861]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  160.711088][ T9861]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.711141][ T9861] RIP: 0033:0x7fc187d1eec9
[  160.711160][ T9861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.711184][ T9861] RSP: 002b:00007fc186766038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  160.711210][ T9861] RAX: ffffffffffffffda RBX: 00007fc187f76090 RCX: 00007fc187d1eec9
[  160.711227][ T9861] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[  160.711263][ T9861] RBP: 00007fc186766090 R08: 0000000000000000 R09: 0000000000000000
[  160.711275][ T9861] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[  160.711287][ T9861] R13: 00007fc187f76128 R14: 00007fc187f76090 R15: 00007ffc0113cb28
[  160.711379][ T9861]  </TASK>
[  161.221162][   T52] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  161.234754][   T52] EXT4-fs (loop3): This should not happen!! Data will be lost
[  161.234754][   T52] 
[  161.255990][   T29] kauditd_printk_skb: 163 callbacks suppressed
[  161.256008][   T29] audit: type=1400 audit(1760090484.034:7270): avc:  denied  { create } for  pid=9878 comm="syz.1.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  161.302948][   T29] audit: type=1400 audit(1760090484.074:7271): avc:  denied  { setopt } for  pid=9878 comm="syz.1.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  161.335288][ T9879] __nla_validate_parse: 29 callbacks suppressed
[  161.335312][ T9879] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2225'.
[  161.357013][   T29] audit: type=1326 audit(1760090484.114:7272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9880 comm="syz.3.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc187d1eec9 code=0x7ffc0000
[  161.388731][   T29] audit: type=1326 audit(1760090484.114:7273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9880 comm="syz.3.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc187d1eec9 code=0x7ffc0000
[  161.417524][   T29] audit: type=1326 audit(1760090484.114:7274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9880 comm="syz.3.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc187d1eec9 code=0x7ffc0000
[  161.442278][   T29] audit: type=1326 audit(1760090484.114:7275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9880 comm="syz.3.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc187d1eec9 code=0x7ffc0000
[  161.468349][   T29] audit: type=1326 audit(1760090484.114:7276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9880 comm="syz.3.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc187d1eec9 code=0x7ffc0000
[  161.496335][   T29] audit: type=1326 audit(1760090484.124:7277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9880 comm="syz.3.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc187d1eec9 code=0x7ffc0000
[  161.527570][   T29] audit: type=1326 audit(1760090484.124:7278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9880 comm="syz.3.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc187d1eec9 code=0x7ffc0000
[  161.561637][   T29] audit: type=1326 audit(1760090484.124:7279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9880 comm="syz.3.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc187d1eec9 code=0x7ffc0000
[  161.599154][ T9890] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2228'.
[  161.625590][ T9890] loop3: detected capacity change from 0 to 1024
[  161.643702][ T9890] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  161.658952][ T9890] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  161.679840][ T9890] JBD2: no valid journal superblock found
[  161.687329][ T9890] EXT4-fs (loop3): Could not load journal inode
[  161.716959][ T9897] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  161.768318][ T9910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2234'.
[  161.770712][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2233'.
[  161.802731][ T9913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2235'.
[  161.916951][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2240'.
[  161.945792][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2239'.
[  161.982967][ T9928] loop3: detected capacity change from 0 to 1024
[  162.012919][ T9928] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2240: Failed to acquire dquot type 0
[  162.020072][ T9933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2241'.
[  162.039443][ T9928] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  162.079356][ T9928] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.2240: corrupted inode contents
[  162.094527][ T9928] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #13: comm syz.3.2240: mark_inode_dirty error
[  162.098113][ T9939] hsr0: entered promiscuous mode
[  162.111814][ T9928] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.2240: corrupted inode contents
[  162.132670][ T9928] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.2240: mark_inode_dirty error
[  162.146142][ T9938] hsr0: left promiscuous mode
[  162.148222][ T9928] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.2240: corrupted inode contents
[  162.155339][ T9941] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2243'.
[  162.166243][ T9928] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem
[  162.187108][ T9928] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.2240: corrupted inode contents
[  162.203467][ T9928] EXT4-fs error (device loop3): ext4_truncate:4637: inode #13: comm syz.3.2240: mark_inode_dirty error
[  162.217893][ T9928] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem
[  162.237261][ T9943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2244'.
[  162.248722][ T9928] EXT4-fs (loop3): 1 truncate cleaned up
[  162.256248][ T9943] loop1: detected capacity change from 0 to 1024
[  162.264208][ T9943] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  162.276493][ T9943] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  162.290511][ T9943] JBD2: no valid journal superblock found
[  162.297828][ T9943] EXT4-fs (loop1): Could not load journal inode
[  162.301635][ T9928] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  162.318453][ T9947] FAULT_INJECTION: forcing a failure.
[  162.318453][ T9947] name failslab, interval 1, probability 0, space 0, times 0
[  162.333951][ T9947] CPU: 1 UID: 0 PID: 9947 Comm: syz.4.2246 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  162.334047][ T9947] Tainted: [W]=WARN
[  162.334055][ T9947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  162.334068][ T9947] Call Trace:
[  162.334075][ T9947]  <TASK>
[  162.334084][ T9947]  __dump_stack+0x1d/0x30
[  162.334111][ T9947]  dump_stack_lvl+0xe8/0x140
[  162.334182][ T9947]  dump_stack+0x15/0x1b
[  162.334203][ T9947]  should_fail_ex+0x265/0x280
[  162.334242][ T9947]  should_failslab+0x8c/0xb0
[  162.334272][ T9947]  __kmalloc_noprof+0xa5/0x570
[  162.334369][ T9947]  ? io_cache_alloc_new+0x2a/0xb0
[  162.334397][ T9947]  io_cache_alloc_new+0x2a/0xb0
[  162.334423][ T9947]  __io_prep_rw+0xcf/0x6d0
[  162.334481][ T9947]  ? __rcu_read_unlock+0x4f/0x70
[  162.334509][ T9947]  io_prep_rwv+0x33/0x250
[  162.334554][ T9947]  io_prep_writev+0x22/0x30
[  162.334646][ T9947]  io_submit_sqes+0x5ec/0x1060
[  162.334700][ T9947]  __se_sys_io_uring_enter+0x1c1/0x1b70
[  162.334736][ T9947]  ? 0xffffffff81000000
[  162.334751][ T9947]  ? __rcu_read_unlock+0x4f/0x70
[  162.334777][ T9947]  ? get_pid_task+0x96/0xd0
[  162.334851][ T9947]  ? proc_fail_nth_write+0x13b/0x160
[  162.334883][ T9947]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  162.334913][ T9947]  ? vfs_write+0x7e8/0x960
[  162.334976][ T9947]  ? __rcu_read_unlock+0x4f/0x70
[  162.335001][ T9947]  ? __fget_files+0x184/0x1c0
[  162.335030][ T9947]  ? fput+0x8f/0xc0
[  162.335142][ T9947]  __x64_sys_io_uring_enter+0x78/0x90
[  162.335177][ T9947]  x64_sys_call+0x2df0/0x3000
[  162.335200][ T9947]  do_syscall_64+0xd2/0x200
[  162.335227][ T9947]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  162.335277][ T9947]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  162.335300][ T9947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.335323][ T9947] RIP: 0033:0x7fa09d79eec9
[  162.335413][ T9947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.335432][ T9947] RSP: 002b:00007fa09c207038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  162.335453][ T9947] RAX: ffffffffffffffda RBX: 00007fa09d9f5fa0 RCX: 00007fa09d79eec9
[  162.335467][ T9947] RDX: 0000000000000969 RSI: 0000000000003498 RDI: 0000000000000008
[  162.335527][ T9947] RBP: 00007fa09c207090 R08: 0000000000000000 R09: 0000000000000000
[  162.335541][ T9947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  162.335554][ T9947] R13: 00007fa09d9f6038 R14: 00007fa09d9f5fa0 R15: 00007fff020192f8
[  162.335575][ T9947]  </TASK>
[  162.742428][ T9962] loop2: detected capacity change from 0 to 164
[  162.771860][ T9962] ISOFS: unable to read i-node block
[  162.780798][ T9957] ==================================================================
[  162.791363][ T9957] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace
[  162.799429][ T9957] 
[  162.802805][ T9957] write to 0xffff888104185400 of 8 bytes by task 9955 on cpu 0:
[  162.813505][ T9957]  mas_wmb_replace+0xcf4/0xfa0
[  162.820320][ T9957]  mas_wr_store_entry+0x136b/0x26e0
[  162.827117][ T9957]  mas_store_prealloc+0x74d/0xa80
[  162.833176][ T9957]  vma_iter_store_new+0x1c5/0x200
[  162.840017][ T9957]  vma_complete+0x125/0x580
[  162.846057][ T9957]  __split_vma+0x591/0x650
[  162.852322][ T9957]  vma_modify+0x21e/0xc80
[  162.858924][ T9957]  vma_modify_flags+0x101/0x130
[  162.866290][ T9957]  mprotect_fixup+0x2cc/0x570
[  162.872623][ T9957]  do_mprotect_pkey+0x6d6/0x980
[  162.879554][ T9957]  __x64_sys_mprotect+0x48/0x60
[  162.886976][ T9957]  x64_sys_call+0x2752/0x3000
[  162.893190][ T9957]  do_syscall_64+0xd2/0x200
[  162.899427][ T9957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.906784][ T9957] 
[  162.909127][ T9957] read to 0xffff888104185400 of 8 bytes by task 9957 on cpu 1:
[  162.917204][ T9957]  mas_state_walk+0x485/0x650
[  162.922364][ T9957]  mas_walk+0x60/0x150
[  162.926722][ T9957]  lock_vma_under_rcu+0x95/0x170
[  162.932032][ T9957]  do_user_addr_fault+0x233/0x1080
[  162.937444][ T9957]  exc_page_fault+0x62/0xa0
[  162.942311][ T9957]  asm_exc_page_fault+0x26/0x30
[  162.947265][ T9957] 
[  162.949790][ T9957] value changed: 0xffff888104005c06 -> 0xffff888104185400
[  162.958691][ T9957] 
[  162.961169][ T9957] Reported by Kernel Concurrency Sanitizer on:
[  162.967792][ T9957] CPU: 1 UID: 0 PID: 9957 Comm: syz.0.2250 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  162.981414][ T9957] Tainted: [W]=WARN
[  162.986201][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  162.999156][ T9957] ==================================================================
[  163.009333][ T9962] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  163.026227][ T9962] netlink: 'syz.2.2252': attribute type 1 has an invalid length.
[  163.053096][ T9962] 8021q: adding VLAN 0 to HW filter on device bond5