last executing test programs:

11.562991182s ago: executing program 2 (id=330):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000)

11.561260542s ago: executing program 2 (id=331):
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000004b80)={{r0}, &(0x7f0000004b00), &(0x7f0000004b40)='%+9llu \x00'}, 0x20)

11.508566517s ago: executing program 2 (id=333):
times(&(0x7f00000001c0))

11.464551761s ago: executing program 2 (id=335):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
unshare(0x20000600)
r0 = syz_io_uring_setup(0x4553, &(0x7f0000000240)={0x0, 0x59fc, 0x80, 0x3, 0xbd7f7ffd}, &(0x7f0000000480)=<r1=>0x0, &(0x7f0000000080))
r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x2}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x4ef, &(0x7f00000003c0)="$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")
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x41, 0x6000, @fd_index=0x4, 0xd755, &(0x7f0000000cc0)="97eb23f8b8b93d57f355a06b5c54b5c184313e97796d426fc2b0c83f624139caf06c334b638738b8afe62fc0a541bbcd29e00200000017230cba9ec523488a9d81401e7ce090bbae5bf9a7e5dcf82da7487ac3cf1f979b163fcb28ae9a0ffec86685f3045ef5aa578183f86db3e13138112368f6ebd7d052864702761638bacb490868500600a369bc23735db5c64585adf4ca86186a996e6b80b27343ce414262d57fc134b3ae23c37e68435d515796d984f0369b12ae89c90fcdb2e564df0fb5e0ae1822da1b60f35c43b63939888a368730d25e67c861b8d8e60723a8882ff726cd29586f70e79a579752a02bbc5291379c8bafc8f849fcae66a7026285823172453dd51d357532040832ee084a9af1920e33eebfd39e77b35ae53da97decb704175e3379c25cadc00e1e91eee48a449331ee22034a3795acfc5d2bd9cef43dc7c579baae95f9f7d11bb81b0addd7bc38fe734c8c4849a4808bc7044d2e69a36f10a48bc6337ae379441e1a28c63bbe3088c6565ec3d37e9d72c9e729e24bcfd6999d991474088ea1105a286f7caf8f3b2c02ad63a51c124784b4cfa6b685763053aa5bdbc1bead45a7c6a80d0d3939654586d908770f60678f88779d6a1a05ed4cc8a2019cb0dd765a3c1dea71ebb9797ff0c8516bb2424ddfc537fdf48fc9817a51", 0x1e4, 0x8})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000bc0)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000380), 0x101bf)
write(r7, &(0x7f0000000240)='A', 0x1)
ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000080)={0x0, r7, 0x2, 0x0, 0x0, 0x2000000000000000})
setns(r6, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = syz_pidfd_open(r5, 0x0)
setns(r9, 0x24020000)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f0000000180)=0x1, 0x0, 0x4)
r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r10, 0x0, 0xffffffffffffff9c, 0x0, 0x244)
syz_io_uring_submit(r1, r4, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x3, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1})
syz_clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x69)
r11 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0)
read$watch_queue(r11, &(0x7f0000000300)=""/176, 0xb0)
syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
io_uring_enter(r2, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1a08050, &(0x7f0000000540)=ANY=[], 0x2, 0x578, &(0x7f0000000640)="$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")

11.06733165s ago: executing program 2 (id=341):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000)

10.736795113s ago: executing program 2 (id=347):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)

10.721921884s ago: executing program 32 (id=347):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)

3.076410727s ago: executing program 4 (id=474):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0, 0x15}, 0xc92, 0xffffffff, 0xd15, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x9)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200087fc, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
sendto$inet(r2, &(0x7f0000000580)="17", 0xfffffd61, 0x10008895, 0x0, 0x0)

1.936527809s ago: executing program 4 (id=479):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x20}}, 0x40)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000005000000000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
pipe(0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x240088c0}, 0x54)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b)

1.341785097s ago: executing program 4 (id=489):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80}, 0x18)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r2}, 0x18)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x20)
pwritev2(r3, 0x0, 0x0, 0x5405, 0x0, 0x0)
r4 = dup2(r1, r1)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000440)={'wg2\x00', <r5=>0x0})
r6 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r7, 0xffffffffffffffff, 0x24, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x3}}, 0x40)
shmctl$SHM_STAT_ANY(r6, 0xf, &(0x7f0000000380)=""/18)
r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r5, 0x25, 0xf, @void}, 0x10)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r9, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="180000c353f41ae0cf0068060000000000000800", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008092ff07090000003d911000f0ffffffbf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r12 = socket$inet6(0xa, 0x3, 0x0)
setsockopt$inet6_udp_int(r12, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
setsockopt$inet6_udp_encap(r12, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, <r13=>0x0, <r14=>0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r15=>0x0, <r16=>0x0, <r17=>0x0, <r18=>0x0})
syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r18, @ANYRES64=r16, @ANYRES16=r15, @ANYRES16=r18, @ANYRESDEC=r17, @ANYRES16=r14, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32=r13], 0x5, 0x0, &(0x7f0000000000))

1.225597919s ago: executing program 1 (id=492):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x65, 0x0, &(0x7f00000004c0)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50)

1.193038722s ago: executing program 5 (id=493):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x3}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000004b80)={{r2}, &(0x7f0000004b00), &(0x7f0000004b40)='%+9llu \x00'}, 0x20)

1.192037312s ago: executing program 4 (id=494):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='fsi_master_aspeed_opb_read\x00', r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x1}, 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x2}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
acct(0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x800)
ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0)

1.153948376s ago: executing program 1 (id=495):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x8)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0x5)
r2 = socket$inet(0xa, 0x801, 0x84)
listen(r2, 0xfffffffd)
r3 = socket$inet(0xa, 0x801, 0x84)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
listen(r3, 0x1)
r5 = socket$netlink(0x10, 0x3, 0x4)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r6, 0x3)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180)={[{@oldalloc}, {@errors_remount}, {@init_itable}, {@block_validity}, {@block_validity}, {@quota}]}, 0x1, 0x451, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1szvD/mC3tMu2g+znkwx9b+YN7333zdt9M283gIE1kf2TROyMiN8jYqyebS0wUf9z/dqF+X+uXZhPolp9+6+kVu7vaxfmi6LFeTvyzGQakX6WxP4O9S6fO39qrlJZPJvnp1dOvz+9fO78cydPz51YPLF4Zvbo0SOHZ158Yfb5vsR5b9bWfR8tHdj7+juX35w/dvndn78dKuJvi6NPJlY7+GS12ufqyrWrKZ0Ml9gQ1iUbA1l3jdTG/1gMRaPzxuK1T0ttHLChqrkuhy9WgbtYEmW3AChH8UGf3f8W2+bNPsp39eX6DVAW9/V8qx8ZjjQvM9J2f9tPExFx7OK/X2VbbMxzCACAFt9n859nO83/0nigqdw9+drQeL6Wsjsi7ouIPRFxf0St7IMR8dA6629fJLl5/pNe6SmwNcrmfy/la1ut879i9hfjQ3luVy3+keT4ycriofw1mYyRrVl+ZpU6fnj1ty+6HWue/2VbVn8xF8zbcWV4a+s5C3Mrc7cTc7Orn0TsG+4Uf3JjJSCJiL0Rsa/HOk4+/c2BbsduHf8q+rDOVP064ql6/1+MtvgLyerrk9PborJ4aLq4Km72y6+X3upW/23F3wdZ/2/veP3fiH88aV6vXV5/HZf++LzrPc1UT9d/Y8eW/O+HcysrZ2citiRv1BvdvH+2cW6RL8pn8U8e7Dz+d0fjldgfEdlF/HBEPBIRj+Z991hEPB4RB9viar6//umVJ97rFv+d0P8Lbf0/3lqkrf8biS3RvqdzYujUj9+1/o+N5Nre/47UUpP5nrW8/62lXb1dzQAAAPD/k0bEzkjSqRvp0XRqqv4d/j2xPa0sLa88c3zpgzML9d8IjMdIWjzpGmt6HjqT39YX+dm2/OH8ufGXQ6O1/NT8UmWh7OBhwO24afyntfGf+XOo7NYBG87vtWBwNY3/pMx2AJvP5z8MLuMfBleH8T9aRjuAzdfp8//jEtoBbL628W/ZDwaI+38YXMY/DK7m8e8LADAwlkfj1j+S75TYFr2cJXHXJCK9I5rRn0TS4yhYa2Jn2QGuP1H2OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB//BcAAP//pgHvrg==")

1.092724662s ago: executing program 5 (id=497):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='global_dirty_state\x00'}, 0x18)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000800000004000000b47c000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/22], 0x50)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0xc0c8, &(0x7f0000000240)=ANY=[], 0x3c, 0x2e2, &(0x7f0000000e40)="$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")
r1 = syz_open_procfs(0x0, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x20000090)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0xc000)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYRES32=r0], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdfa, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6)
recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x8d, 0x1, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2002, 0x7}]})
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000340)={{0x24, 0xe}, {0xf, 0x9f}, 0x5, 0x4, 0x9})
rmdir(&(0x7f0000000140)='./file0\x00')
r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsmount(r6, 0x0, 0x0)

971.515414ms ago: executing program 5 (id=498):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000200)={0x2, 0xb37d, 0x4, 0x0, 0x0, [{{r0}, 0x8}, {{r0}, 0x101}, {{r0}, 0x8}, {{r0}, 0x473d}]})
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
syz_usbip_server_init(0x1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/uts\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000018110000f70202ed2d46", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x141480)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}})
close_range(r3, 0xffffffffffffffff, 0x400000000000000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]})
sched_getattr(0x0, &(0x7f00000003c0)={0x38}, 0x38, 0x0)

780.776483ms ago: executing program 4 (id=501):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0, 0x15}, 0xc92, 0xffffffff, 0xd15, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x9)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200087fc, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
sendto$inet(r2, &(0x7f0000000580)="17", 0xfffffd61, 0x10008895, 0x0, 0x0)

662.332944ms ago: executing program 0 (id=507):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x3}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000004b80)={{r2}, &(0x7f0000004b00), &(0x7f0000004b40)='%+9llu \x00'}, 0x20)

572.552613ms ago: executing program 3 (id=508):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
pipe2$9p(&(0x7f0000001900), 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
syz_clone3(&(0x7f0000000cc0)={0xa0000100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fsopen(&(0x7f0000000500)='mqueue\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x4a)
statx(r1, 0x0, 0x0, 0x800, &(0x7f0000000780))
openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r2}, 0x10)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x30004b1, &(0x7f0000000080)=ANY=[], 0x0, 0x23e, &(0x7f0000000bc0)="$eJzs3c9qE1EUB+AzSdqmukgWrkRwQBeuStsnSJEKYldKFupCi21BklCwEGgVQ1c+gU/ic7jxDXwAoTtdFEYmSZsWUm0wf0r9vk0uzP3NOTe5Iau5eX2n1dja3ds5/PA9yuUkCrWoJUcR1ShEbiEAgOvmV5bFUdYzWrJUmFRPAMBkXfL3f3GKLQEAE/bs+Ysnaxsb60/TtBzR+tSuJ9F77V1f24m30YztWI5KHEdkp3rjR4831qOU5qpxv9Vp1/Nk69XX/v3XfkR08ytRierw/Eracybfadfn4ka/fi3Pr0Ylbg3Prw7JR30+Htw70/9SVOLbm9iNZmxFnh3kP66k6cPs88/3L/OO83zSadcXuvMGsuLUPxwAAAAAAAAAAAAAAAAAAAAAAK6tpTRN0yz7kmVZ1jl3/k7xuHt9KT1RPX8+Ty9/0flAnTPn6yznJZLe/EG+FLdLUZrl2gEAAAAAAAAAAAAAAAAAAOCq2Ns/aGw2m9vvxjo4eax//Hf+10EU+601k4gr0E93sJj3M51ad2PEWrURS0Rh/6Bxsrsam0n8JVWe0CbJhmy/4oWp+TFVn7853lUkETF3+mb+aXIh5sb8TQEAAAAAAAAAAAAAAAAAAKZs8NDvkIuHM2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZg8P//Iww6/fAlUzNeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+B3wEAAP//bkR7Lg==")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)

571.877923ms ago: executing program 0 (id=509):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
kcmp(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)

567.448313ms ago: executing program 0 (id=510):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

545.570846ms ago: executing program 0 (id=511):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4)
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') (fail_nth: 2)

505.54913ms ago: executing program 3 (id=512):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(r2)

319.511828ms ago: executing program 0 (id=513):
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x20000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)

319.272508ms ago: executing program 1 (id=514):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000)

292.93054ms ago: executing program 3 (id=515):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0x8}, 0x18)
syz_open_procfs(0x0, &(0x7f0000000340)='net/fib_trie\x00')
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101b01, 0x0)
ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000600)=0x14)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
recvfrom(r3, 0x0, 0x0, 0x2101, 0x0, 0x0)
close(r2)

272.019823ms ago: executing program 1 (id=516):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x65, 0x0, &(0x7f00000004c0)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50)

261.518644ms ago: executing program 0 (id=517):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ppoll(&(0x7f0000000180)=[{r0, 0x2}], 0x1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0208004600002c95742f86306b1e93feadd00000000006907800", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c20800090780000"], 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x1b)
r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0', [{}], 0xa, "e839ab9bb30912d2a085fd0c6d6c02624797d1954a23fc13a444b88f024d331e2df2ec162fd93a87ca1548706b9f8ceb0040072d0031052c78a8cbcb97a968f6f71bbacd11652446a8eee55634a14eb45cc1bfb30e8baf3d4f91edf4c01e9e83bd4a"}, 0x6e)
r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d)
syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xc, 0x0, 0x0, {[@generic={0x4, 0x4, "5eee"}]}}}}}}}}, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x43)

234.052356ms ago: executing program 1 (id=518):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x3}, 0x18)
r3 = socket(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @mcast1, 0x6}, 0x1c)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket$tipc(0x1e, 0x5, 0x0)
listen(r5, 0x7)
mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfn', @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00'])
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x80044940, &(0x7f0000000ec0)={<r6=>0x0, ""/256, 0x0, 0x0, <r7=>0x0, 0x0, ""/16, ""/16, ""/16, <r8=>0x0, <r9=>0x0, <r10=>0x0})
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000800)=ANY=[@ANYRES16=r7, @ANYRESDEC=r8, @ANYRESDEC=0x0, @ANYRES8=r10, @ANYRES32=r7, @ANYRESDEC=r5, @ANYRES64=r6, @ANYRES8=r7, @ANYRES64, @ANYRES8=r9], 0x0, 0x0, &(0x7f0000000080))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003180)={0x0, r6, "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", "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"})
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000004bc0)={{r6, 0xf, 0x401, 0x81, 0x8000000000000000, 0x40, 0x3, 0x8409, 0x2, 0x0, 0x8001, 0x8, 0xffffffffffffb65b, 0x9, 0x1}})
sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002909000000000000000000000000000014000000000000002900000034"], 0x30}}], 0x1, 0x20008850)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='initcall_level\x00', r11, 0x0, 0x4000000000000}, 0x18)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r12}, &(0x7f0000000000), &(0x7f00000005c0)=r13}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000004b80)={{r12, <r14=>0xffffffffffffffff}, &(0x7f0000004b00), &(0x7f0000004b40)='%+9llu \x00'}, 0x20)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0})
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r16=>0x0, <r17=>0x0}, 0x1000)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r14, 0xc0c89425, &(0x7f0000000800)={"cbd664ffa17872e5dfd1b5f0f13f58b0", 0x0, <r18=>0x0, {0x4, 0x7}, {0x5e4, 0x8000}, 0xf27, [0xfffffffffffffffc, 0x32d5, 0x2, 0x3, 0x8, 0x100000001, 0xd9d, 0x8, 0xe133, 0x5, 0x3a9e, 0x0, 0xff, 0x3, 0x5, 0x400]})
ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000002000)={{r0}, r18, 0x8, @inherit={0x58, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000000000000200000000000000030000000000000002000000000000003900000000000000460b000000000000c1060080000000000800000000000000c5ac000000000000ff00000000000000ff0300000024cba2"]}, @subvolid=0x3})
chown(&(0x7f0000000040)='./file1\x00', r16, r17)
statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0x12873604e2646fc9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r19=>0x0})
recvmsg$unix(r3, &(0x7f0000000dc0)={&(0x7f00000009c0), 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000000ac0)=""/209, 0xd1}, {&(0x7f0000000380)=""/26, 0x1a}, {&(0x7f0000000bc0)=""/242, 0xf2}, {&(0x7f0000000580)=""/4, 0x4}, {&(0x7f0000000a40)=""/16, 0x10}], 0x6, &(0x7f0000000d40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x40000162)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000980)='./file0\x00', 0x2000000, &(0x7f00000010c0)=ANY=[@ANYBLOB='map=off,hide,showassoc,gid=', @ANYRESHEX=r15, @ANYBLOB=',utf8,nojoliet,check=strict,gid=', @ANYRESHEX=r17, @ANYBLOB="2c6e6f636f6d70726573732c6d61703d6e92eb3d7e949c770d696f726d616c2c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',showassoc,unhide,mode=0x0000000000000000,showassoc,mode=0x0000000000000001,norock,smackfshat=obj_user,nomand,euid<', @ANYRESDEC=r19, @ANYBLOB=',obj_user=\\$:,appraise_type=imasig,hash,\x00'], 0x1, 0x943, &(0x7f0000001500)="$eJzs3c1vHGcZAPBnNl7iuFWakrRx3ENXTYxMBM7uRkmIcsHxrp0tthfZjtSKi4G4KIqhiIIUKg5BQpyI4IA4wC1HThG99ITyV3Dgkj+AS8TJN1fv7PojzX44luN13d9Pmp2dmWfe55l9Z+eVP3Yn+Crb2NjIpz0u3/7nQRbL4XOz9vTR44dp+v1afCOOxZXs84jhiChFDEXEaERxurbYnO/T0L2IlYh4EpFFxPFozXdlJbI/x+vby08i+0fK29uum6eHDb7WBn3+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAYZRN18rlShZzjYXbH5S6y28B3mP7ZnvNQnosNPvmjcjSFMPDm7f6Hj29vfmt9PBenG0tnc1vSB7D8elrb5+6cXqosLl/j4IOxCe//fTej9fWVn816EIGZLa+0FhqNuanZuulxlKzdP3q1fKlWzNLpZnGXH3pw6Xl+nxperE+tdxcLE1Mf7tUuX79cqk++WHz9sJsbWquvrny2ner5fLV0vuTP6xPLS41Fy69P7k0fasxN9dYmM1j0uYUcy2diD9oLJeW61PzpdJHd9dWL/crMgVVdhNU7RdULVerlUq1Wrl65fqVa+Xy0Asryl8SL0QM/qRlsPb9Gg57tdEe/wEAAICjK8t/x55+/i/mv4fPYqYxVy8PuiwAAABgH+V/+T+bZsWIONFe6+d/AAAAOEr6f8aub0T2nTjXijh3pzW/04741/E8YmSmMVefnG7O3ajEt7Y+7de5tWL+7wcXY6wVNTbSmo+0o9qfHBxOUZXJG5W4GO+0It6ZOJ9m5yd2RGYR+b8zVFuR7U/elDYji1uvwlabl1MkABx17/UZj3cz/l+M8VbE+FgadmNorMNoXTayAsBhsfUNNq/wyaCPEQB4nlEaAAAAAAAAAAAAAAAAAAAAAAAAAAAA9t9BfP+/J5548lV7MugrEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA11MWcazT+kLE8YgoR8Slg6/q1Xkw6AIGLFuP9bgfJwddBwAAAAAAAAAAAAAAAAAAAAAAAAAAAADAUdP+/v9CtOavtVbFUCFiPCJWIuJHg65xTzre1SBi/aDrOGR2fP9/6vPYyGKo1e2RFadri8351P35vR8KTx89fpim9q4/f5k8qYGU4bluaGfovteb+V4jtdVP7v3641+WajfzIm8uz8zV5mcXv78d+Hb2WUQpWtOmE+16fzf+7790OPLP0pHuLu9Mnrf2Yt6znfZ+2jNvL3fXVqsp03L9g+Xf/OLu/R2bvhljEecnIiaez/SzNHXJNBbFXtmyZ9kfs5Pxt1jJ+z+9GtlGlrrojfz4T3x0d2118qcfr93pUtOpGI2IOxHDu69pNL+edJSfdYViylrOg9LDmT7t9bSjxUqXY3gzzkXEyEsdw7nux5Dr87q3K7rcpaLT8e5L9/S7fTJ2lD3L/pvdiv/EH3bc/6OQ+n88dvPuTDF55I4zpWtkoRWZH3m1Z5td35XsTaHXxj/FT+J7W/1f2HH9b/fVwVyPdmR89e+L7UHozJdGpPbVp1uV7TrPtKK61PlWXIgYGnupK8qFPleUF/cv7uI4+8ieZX/PJuL/8cD9fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMMvizjWaX0hYjwiTkXEG2m5FLGxH/kKI1n87+R+tLQ3DwaX+lDI1mM97scAewAAAAAAAACA/XSz9vTR44dpytLisbiQfR4x3PpL/1BEnMr+WpyuLTbn+zRUjFiJiCd7qCHtF69vLz9JS6N7aAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCPriwAAAP//hO21Ig==")
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2208c08, 0x0)

233.315086ms ago: executing program 5 (id=519):
r0 = semget$private(0x0, 0x1, 0x400)
semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000003c0)=""/124)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000080000000000000000000000000000001d99b790076cd2b9021aa6358b9a4de9a33bcbe09ceeb3ce7dab9afbe73f018c8c13faaf89d65b78a7a6fe61e526dd7d3dd61bc9cc6a823f317e61e42e1793a8"], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x360, 0x108, 0x288, 0xffffffff, 0x288, 0x1e0, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x22e}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x7f, 0xe, [0x2f, 0x4, 0x3, 0x4, 0x31, 0x2, 0x1, 0x15, 0x21, 0x2c, 0x3e, 0xe, 0x29, 0x3a, 0x0, 0xa], 0x2, 0xd577, 0x300000000000}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @local, @multicast2, @gre_key=0x7, @icmp_id=0x65}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @multicast1, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4)
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

193.10871ms ago: executing program 3 (id=520):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x10001, <r0=>0x0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00')
preadv(r3, &(0x7f0000000400)=[{&(0x7f00000014c0)=""/223, 0xdf}], 0x1, 0x4, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@init_itable}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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")
fchown(0xffffffffffffffff, 0x0, 0xee01)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat(r4, &(0x7f0000000100)='.\x00', 0x515401, 0x408)
syz_emit_ethernet(0x0, 0x0, 0x0)
close(r1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000060000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7)
sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8], 0x30}}, 0x44)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000952e02d23f5e"], &(0x7f0000000000)='GPL\x00', 0x0, 0xffffff72, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r9}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18)

180.108952ms ago: executing program 3 (id=521):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000001c0)={'veth1_to_batadv\x00'})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x809, 0x9, 0x20000000, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x80)

134.379566ms ago: executing program 1 (id=522):
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
pidfd_getfd(r1, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
write(r3, &(0x7f00000001c0)="f1", 0x1)
sendfile(r3, r1, 0x0, 0x40001) (async)
sendfile(r3, r1, 0x0, 0x40001)
sendfile(r3, r2, 0x0, 0x7ffff000)

72.864132ms ago: executing program 5 (id=523):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

72.412852ms ago: executing program 3 (id=524):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000c04fcff", 0x58}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRESDEC=r1], 0x0)
pipe(&(0x7f0000002480)={<r2=>0xffffffffffffffff})
read(r2, &(0x7f0000032440)=""/102364, 0x18fdc)
timerfd_gettime(r2, &(0x7f0000000140))

29.706367ms ago: executing program 5 (id=525):
socket(0x2, 0x6, 0xfffffffc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})

0s ago: executing program 4 (id=526):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 promiscuous mode
[   36.778394][ T3313] team0: Port device team_slave_0 added
[   36.790028][ T3312] team0: Port device team_slave_0 added
[   36.795999][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.803121][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.811093][ T3317] bridge_slave_1: entered allmulticast mode
[   36.817667][ T3317] bridge_slave_1: entered promiscuous mode
[   36.830620][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.840829][ T3320] team0: Port device team_slave_0 added
[   36.847675][ T3313] team0: Port device team_slave_1 added
[   36.854403][ T3312] team0: Port device team_slave_1 added
[   36.866329][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.876567][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.886565][ T3320] team0: Port device team_slave_1 added
[   36.909703][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.955424][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.962530][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.988588][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.999918][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.007092][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.033553][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.045016][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.052666][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.079180][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.091065][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.098418][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.127067][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.139195][ T3319] team0: Port device team_slave_0 added
[   37.146432][ T3317] team0: Port device team_slave_0 added
[   37.156532][ T3317] team0: Port device team_slave_1 added
[   37.163688][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.172534][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.199065][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.210748][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.217794][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.244225][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.259387][ T3319] team0: Port device team_slave_1 added
[   37.290852][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.297970][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.324338][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.337554][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.344711][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.370991][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.398527][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.405645][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.432200][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.464183][ T3312] hsr_slave_0: entered promiscuous mode
[   37.471054][ T3312] hsr_slave_1: entered promiscuous mode
[   37.477983][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.485381][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.512512][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.531935][ T3320] hsr_slave_0: entered promiscuous mode
[   37.538519][ T3320] hsr_slave_1: entered promiscuous mode
[   37.544987][ T3320] debugfs: 'hsr0' already exists in 'hsr'
[   37.551637][ T3320] Cannot create hsr debugfs directory
[   37.578976][ T3313] hsr_slave_0: entered promiscuous mode
[   37.585446][ T3313] hsr_slave_1: entered promiscuous mode
[   37.591923][ T3313] debugfs: 'hsr0' already exists in 'hsr'
[   37.598118][ T3313] Cannot create hsr debugfs directory
[   37.605954][ T3317] hsr_slave_0: entered promiscuous mode
[   37.612400][ T3317] hsr_slave_1: entered promiscuous mode
[   37.618453][ T3317] debugfs: 'hsr0' already exists in 'hsr'
[   37.624337][ T3317] Cannot create hsr debugfs directory
[   37.695636][ T3319] hsr_slave_0: entered promiscuous mode
[   37.701925][ T3319] hsr_slave_1: entered promiscuous mode
[   37.707834][ T3319] debugfs: 'hsr0' already exists in 'hsr'
[   37.713876][ T3319] Cannot create hsr debugfs directory
[   37.886367][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   37.895172][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   37.903977][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   37.916083][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   37.939428][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   37.949786][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   37.966288][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   37.975637][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   38.003941][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   38.013606][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   38.024443][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   38.036201][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   38.078849][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   38.102885][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.114222][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   38.124669][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   38.133742][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   38.166161][ T3313] 8021q: adding VLAN 0 to HW filter on device team0
[   38.181044][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.188417][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.202767][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   38.211715][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   38.222456][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.229959][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.241869][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   38.263142][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   38.283071][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.298851][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.324904][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.346842][ T3320] 8021q: adding VLAN 0 to HW filter on device team0
[   38.356648][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   38.365819][ T3317] 8021q: adding VLAN 0 to HW filter on device team0
[   38.389858][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.397244][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.406579][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.413865][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.422877][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.430567][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.450501][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.457799][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.478521][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.485846][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.495775][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.502874][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.544125][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.565999][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.586552][ T3319] 8021q: adding VLAN 0 to HW filter on device team0
[   38.650165][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.657376][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.666412][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.673531][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.707266][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.741662][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.752977][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.830471][ T3313] veth0_vlan: entered promiscuous mode
[   38.862396][ T3313] veth1_vlan: entered promiscuous mode
[   38.875755][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.890900][ T3317] veth0_vlan: entered promiscuous mode
[   38.917684][ T3313] veth0_macvtap: entered promiscuous mode
[   38.925461][ T3313] veth1_macvtap: entered promiscuous mode
[   38.935035][ T3317] veth1_vlan: entered promiscuous mode
[   38.961006][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.982263][ T3320] veth0_vlan: entered promiscuous mode
[   38.989797][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.012097][ T3320] veth1_vlan: entered promiscuous mode
[   39.024333][   T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.037536][ T3317] veth0_macvtap: entered promiscuous mode
[   39.057351][   T29] kauditd_printk_skb: 9 callbacks suppressed
[   39.057366][   T29] audit: type=1400 audit(1760089516.762:81): avc:  denied  { mounton } for  pid=3313 comm="syz-executor" path="/root/syzkaller.jrL7n1/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   39.068819][ T3320] veth0_macvtap: entered promiscuous mode
[   39.100999][ T3317] veth1_macvtap: entered promiscuous mode
[   39.102261][   T29] audit: type=1400 audit(1760089516.802:82): avc:  denied  { mount } for  pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   39.128829][   T29] audit: type=1400 audit(1760089516.802:83): avc:  denied  { mounton } for  pid=3313 comm="syz-executor" path="/root/syzkaller.jrL7n1/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   39.136798][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.154437][   T29] audit: type=1400 audit(1760089516.802:84): avc:  denied  { mount } for  pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   39.154474][   T29] audit: type=1400 audit(1760089516.802:85): avc:  denied  { mounton } for  pid=3313 comm="syz-executor" path="/root/syzkaller.jrL7n1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   39.187950][ T3319] veth0_vlan: entered promiscuous mode
[   39.210716][   T29] audit: type=1400 audit(1760089516.802:86): avc:  denied  { mounton } for  pid=3313 comm="syz-executor" path="/root/syzkaller.jrL7n1/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   39.220713][ T3319] veth1_vlan: entered promiscuous mode
[   39.243506][   T29] audit: type=1400 audit(1760089516.802:87): avc:  denied  { unmount } for  pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   39.258987][ T3319] veth0_macvtap: entered promiscuous mode
[   39.268596][   T29] audit: type=1400 audit(1760089516.802:88): avc:  denied  { mounton } for  pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   39.277351][   T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.297183][   T29] audit: type=1400 audit(1760089516.802:89): avc:  denied  { mount } for  pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=3813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   39.330384][ T3320] veth1_macvtap: entered promiscuous mode
[   39.330494][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   39.354158][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.365406][ T3319] veth1_macvtap: entered promiscuous mode
[   39.373901][   T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.386824][   T29] audit: type=1400 audit(1760089517.082:90): avc:  denied  { read write } for  pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   39.389318][ T3312] veth0_vlan: entered promiscuous mode
[   39.434405][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.448182][ T2075] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.467800][ T2075] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.472322][ T3482] FAULT_INJECTION: forcing a failure.
[   39.472322][ T3482] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   39.477324][ T2075] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.489921][ T3482] CPU: 1 UID: 0 PID: 3482 Comm: syz.1.6 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   39.489961][ T3482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   39.489981][ T3482] Call Trace:
[   39.489989][ T3482]  <TASK>
[   39.490000][ T3482]  __dump_stack+0x1d/0x30
[   39.490057][ T3482]  dump_stack_lvl+0xe8/0x140
[   39.490145][ T3482]  dump_stack+0x15/0x1b
[   39.490168][ T3482]  should_fail_ex+0x265/0x280
[   39.490218][ T3482]  should_fail+0xb/0x20
[   39.490261][ T3482]  should_fail_usercopy+0x1a/0x20
[   39.490360][ T3482]  _copy_from_iter+0xd2/0xe80
[   39.490390][ T3482]  ? __build_skb_around+0x1ab/0x200
[   39.490426][ T3482]  ? __alloc_skb+0x223/0x320
[   39.490462][ T3482]  netlink_sendmsg+0x471/0x6b0
[   39.490506][ T3482]  ? __pfx_netlink_sendmsg+0x10/0x10
[   39.490620][ T3482]  __sock_sendmsg+0x142/0x180
[   39.490727][ T3482]  ____sys_sendmsg+0x31e/0x4e0
[   39.490771][ T3482]  ___sys_sendmsg+0x17b/0x1d0
[   39.490825][ T3482]  __x64_sys_sendmsg+0xd4/0x160
[   39.490907][ T3482]  x64_sys_call+0x191e/0x3000
[   39.490938][ T3482]  do_syscall_64+0xd2/0x200
[   39.490972][ T3482]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   39.491021][ T3482]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   39.491059][ T3482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.491122][ T3482] RIP: 0033:0x7fe238a4eec9
[   39.491145][ T3482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   39.491169][ T3482] RSP: 002b:00007fe2374af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   39.491244][ T3482] RAX: ffffffffffffffda RBX: 00007fe238ca5fa0 RCX: 00007fe238a4eec9
[   39.491323][ T3482] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[   39.491347][ T3482] RBP: 00007fe2374af090 R08: 0000000000000000 R09: 0000000000000000
[   39.491365][ T3482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   39.491382][ T3482] R13: 00007fe238ca6038 R14: 00007fe238ca5fa0 R15: 00007ffffec20398
[   39.491409][ T3482]  </TASK>
[   39.701247][ T2075] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.711900][ T3312] veth1_vlan: entered promiscuous mode
[   39.720502][ T3484] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   39.728375][ T2075] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.738806][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.747922][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.761117][ T2075] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.775805][ T3312] veth0_macvtap: entered promiscuous mode
[   39.783947][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.797816][ T2075] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.811133][ T3312] veth1_macvtap: entered promiscuous mode
[   39.828120][ T2075] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.841176][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.862991][ T3488] loop0: detected capacity change from 0 to 2364
[   39.869707][ T3488] iso9660: Bad value for 'gid'
[   39.874574][ T3488] iso9660: Bad value for 'gid'
[   39.882497][ T3490] netlink: '+}[@': attribute type 1 has an invalid length.
[   39.891843][ T2075] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.904104][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.924004][ T2075] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.933505][ T3490] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[   39.954135][ T2075] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.963904][ T2075] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.978960][ T3490] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[   39.996008][ T2075] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.052053][ T2075] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.061140][ T2075] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.084198][ T3501] FAULT_INJECTION: forcing a failure.
[   40.084198][ T3501] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   40.097631][ T3501] CPU: 1 UID: 0 PID: 3501 Comm: syz.0.10 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   40.097699][ T3501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   40.097713][ T3501] Call Trace:
[   40.097719][ T3501]  <TASK>
[   40.097727][ T3501]  __dump_stack+0x1d/0x30
[   40.097748][ T3501]  dump_stack_lvl+0xe8/0x140
[   40.097768][ T3501]  dump_stack+0x15/0x1b
[   40.097785][ T3501]  should_fail_ex+0x265/0x280
[   40.097852][ T3501]  should_fail+0xb/0x20
[   40.097929][ T3501]  should_fail_usercopy+0x1a/0x20
[   40.097950][ T3501]  _copy_from_user+0x1c/0xb0
[   40.097976][ T3501]  ___sys_sendmsg+0xc1/0x1d0
[   40.098031][ T3501]  __x64_sys_sendmsg+0xd4/0x160
[   40.098065][ T3501]  x64_sys_call+0x191e/0x3000
[   40.098087][ T3501]  do_syscall_64+0xd2/0x200
[   40.098143][ T3501]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   40.098172][ T3501]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   40.098214][ T3501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.098280][ T3501] RIP: 0033:0x7fced19beec9
[   40.098296][ T3501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.098315][ T3501] RSP: 002b:00007fced041f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   40.098334][ T3501] RAX: ffffffffffffffda RBX: 00007fced1c15fa0 RCX: 00007fced19beec9
[   40.098347][ T3501] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003
[   40.098360][ T3501] RBP: 00007fced041f090 R08: 0000000000000000 R09: 0000000000000000
[   40.098437][ T3501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   40.098449][ T3501] R13: 00007fced1c16038 R14: 00007fced1c15fa0 R15: 00007ffd47803b08
[   40.098467][ T3501]  </TASK>
[   40.276813][ T2075] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.295293][ T2075] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.344658][ T3504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'.
[   40.399000][ T3512] loop2: detected capacity change from 0 to 512
[   40.443860][ T3512] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   40.493112][ T3512] EXT4-fs (loop2): mount failed
[   40.550327][ T3532] FAULT_INJECTION: forcing a failure.
[   40.550327][ T3532] name failslab, interval 1, probability 0, space 0, times 1
[   40.563247][ T3532] CPU: 1 UID: 0 PID: 3532 Comm: syz.2.18 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   40.563278][ T3532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   40.563294][ T3532] Call Trace:
[   40.563303][ T3532]  <TASK>
[   40.563313][ T3532]  __dump_stack+0x1d/0x30
[   40.563340][ T3532]  dump_stack_lvl+0xe8/0x140
[   40.563387][ T3532]  dump_stack+0x15/0x1b
[   40.563408][ T3532]  should_fail_ex+0x265/0x280
[   40.563450][ T3532]  ? nd_alloc_stack+0x50/0xa0
[   40.563540][ T3532]  should_failslab+0x8c/0xb0
[   40.563573][ T3532]  __kmalloc_cache_noprof+0x4c/0x4a0
[   40.563606][ T3532]  ? __pfx_shmem_get_link+0x10/0x10
[   40.563686][ T3532]  nd_alloc_stack+0x50/0xa0
[   40.563718][ T3532]  pick_link+0x78e/0x830
[   40.563752][ T3532]  ? __d_lookup_rcu+0x248/0x2a0
[   40.563864][ T3532]  step_into+0x790/0x7f0
[   40.564040][ T3532]  ? inode_permission+0x106/0x310
[   40.564074][ T3532]  link_path_walk+0x571/0x900
[   40.564107][ T3532]  path_openat+0x1de/0x2170
[   40.564128][ T3532]  ? path_openat+0x1bd4/0x2170
[   40.564148][ T3532]  ? __tsan_read4+0x122/0x190
[   40.564221][ T3532]  ? _parse_integer_limit+0x170/0x190
[   40.564260][ T3532]  do_filp_open+0x109/0x230
[   40.564282][ T3532]  ? __pfx_shmem_put_link+0x10/0x10
[   40.564393][ T3532]  ? __pfx_shmem_put_link+0x10/0x10
[   40.564427][ T3532]  do_open_execat+0xd8/0x260
[   40.564449][ T3532]  alloc_bprm+0x25/0x350
[   40.564491][ T3532]  do_execveat_common+0x12e/0x750
[   40.564519][ T3532]  __x64_sys_execve+0x5c/0x70
[   40.564586][ T3532]  x64_sys_call+0x271a/0x3000
[   40.564614][ T3532]  do_syscall_64+0xd2/0x200
[   40.564640][ T3532]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   40.564672][ T3532]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   40.564733][ T3532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.564757][ T3532] RIP: 0033:0x7f74ccb4eec9
[   40.564773][ T3532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.564791][ T3532] RSP: 002b:00007f74cb5af038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[   40.564899][ T3532] RAX: ffffffffffffffda RBX: 00007f74ccda5fa0 RCX: 00007f74ccb4eec9
[   40.564914][ T3532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200
[   40.564926][ T3532] RBP: 00007f74cb5af090 R08: 0000000000000000 R09: 0000000000000000
[   40.564938][ T3532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   40.564950][ T3532] R13: 00007f74ccda6038 R14: 00007f74ccda5fa0 R15: 00007ffd51250438
[   40.564970][ T3532]  </TASK>
[   40.823828][ T3531] =======================================================
[   40.823828][ T3531] WARNING: The mand mount option has been deprecated and
[   40.823828][ T3531]          and is ignored by this kernel. Remove the mand
[   40.823828][ T3531]          option from the mount to silence this warning.
[   40.823828][ T3531] =======================================================
[   40.871957][ T3531] Zero length message leads to an empty skb
[   40.885717][ T3531] loop4: detected capacity change from 0 to 512
[   40.916236][ T3531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.940400][ T3531] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.941548][ T3537] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[   40.957440][ T3537] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   40.958533][ T3531] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.17: corrupted xattr block 19: overlapping e_value 
[   40.965247][ T3537] vhci_hcd vhci_hcd.0: Device attached
[   40.986376][ T3531] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   40.995712][ T3531] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.17: corrupted xattr block 19: overlapping e_value 
[   41.010447][ T3546] netlink: 36 bytes leftover after parsing attributes in process `syz.4.17'.
[   41.020366][ T3531] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   41.045836][ T3541] vhci_hcd: connection closed
[   41.046052][ T1454] vhci_hcd: stop threads
[   41.051368][ T3531] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.17: corrupted xattr block 19: overlapping e_value 
[   41.055308][ T1454] vhci_hcd: release socket
[   41.071071][ T3522] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   41.073557][ T1454] vhci_hcd: disconnect device
[   41.098469][ T3531] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   41.107929][ T3531] process 'syz.4.17' launched './file1' with NULL argv: empty string added
[   41.116913][ T3531] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.17: corrupted xattr block 19: overlapping e_value 
[   41.131438][ T3531] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   41.149749][ T3531] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.17: corrupted xattr block 19: overlapping e_value 
[   41.164753][ T3531] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   41.191094][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.337927][ T3529] syz.3.15 (3529) used greatest stack depth: 10168 bytes left
[   41.499632][ T3560] loop3: detected capacity change from 0 to 2048
[   41.515977][ T3560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.533944][ T3560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24'.
[   41.572214][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.632435][ T3564] loop0: detected capacity change from 0 to 128
[   41.650199][ T3564] syz.0.26: attempt to access beyond end of device
[   41.650199][ T3564] loop0: rw=2049, sector=138, nr_sectors = 16 limit=128
[   41.672013][ T3564] syz.0.26: attempt to access beyond end of device
[   41.672013][ T3564] loop0: rw=2049, sector=170, nr_sectors = 6 limit=128
[   41.703213][ T3570] FAULT_INJECTION: forcing a failure.
[   41.703213][ T3570] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   41.716712][ T3570] CPU: 1 UID: 0 PID: 3570 Comm: syz.4.28 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   41.716748][ T3570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   41.716834][ T3570] Call Trace:
[   41.716848][ T3570]  <TASK>
[   41.716856][ T3570]  __dump_stack+0x1d/0x30
[   41.716881][ T3570]  dump_stack_lvl+0xe8/0x140
[   41.716907][ T3570]  dump_stack+0x15/0x1b
[   41.716929][ T3570]  should_fail_ex+0x265/0x280
[   41.717021][ T3570]  should_fail+0xb/0x20
[   41.717063][ T3570]  should_fail_usercopy+0x1a/0x20
[   41.717140][ T3570]  _copy_from_user+0x1c/0xb0
[   41.717173][ T3570]  ___sys_sendmsg+0xc1/0x1d0
[   41.717300][ T3570]  __x64_sys_sendmsg+0xd4/0x160
[   41.717341][ T3570]  x64_sys_call+0x191e/0x3000
[   41.717442][ T3570]  do_syscall_64+0xd2/0x200
[   41.717474][ T3570]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   41.717531][ T3570]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   41.717561][ T3570]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.717612][ T3570] RIP: 0033:0x7f6f0be1eec9
[   41.717628][ T3570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   41.717648][ T3570] RSP: 002b:00007f6f0a887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   41.717674][ T3570] RAX: ffffffffffffffda RBX: 00007f6f0c075fa0 RCX: 00007f6f0be1eec9
[   41.717768][ T3570] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000006
[   41.717780][ T3570] RBP: 00007f6f0a887090 R08: 0000000000000000 R09: 0000000000000000
[   41.717814][ T3570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   41.717830][ T3570] R13: 00007f6f0c076038 R14: 00007f6f0c075fa0 R15: 00007ffdedba0928
[   41.717862][ T3570]  </TASK>
[   41.718275][ T3564] syz.0.26: attempt to access beyond end of device
[   41.718275][ T3564] loop0: rw=2049, sector=174, nr_sectors = 2 limit=128
[   41.880513][ T3574] netlink: 'syz.4.29': attribute type 21 has an invalid length.
[   41.886676][ T3564] Buffer I/O error on dev loop0, logical block 87, lost async page write
[   41.920330][ T3564] syz.0.26: attempt to access beyond end of device
[   41.920330][ T3564] loop0: rw=2049, sector=176, nr_sectors = 2 limit=128
[   41.935062][ T3564] Buffer I/O error on dev loop0, logical block 88, lost async page write
[   41.944729][ T3574] netlink: 132 bytes leftover after parsing attributes in process `syz.4.29'.
[   41.954429][ T3564] syz.0.26: attempt to access beyond end of device
[   41.954429][ T3564] loop0: rw=2049, sector=178, nr_sectors = 6 limit=128
[   41.998316][ T3564] syz.0.26: attempt to access beyond end of device
[   41.998316][ T3564] loop0: rw=2049, sector=182, nr_sectors = 2 limit=128
[   42.011934][ T3564] Buffer I/O error on dev loop0, logical block 91, lost async page write
[   42.029309][ T3564] syz.0.26: attempt to access beyond end of device
[   42.029309][ T3564] loop0: rw=2049, sector=184, nr_sectors = 2 limit=128
[   42.042888][ T3564] Buffer I/O error on dev loop0, logical block 92, lost async page write
[   42.061781][ T3564] syz.0.26: attempt to access beyond end of device
[   42.061781][ T3564] loop0: rw=2049, sector=202, nr_sectors = 6 limit=128
[   42.089796][ T3564] syz.0.26: attempt to access beyond end of device
[   42.089796][ T3564] loop0: rw=2049, sector=206, nr_sectors = 2 limit=128
[   42.101730][ T3580] syz.4.31 uses obsolete (PF_INET,SOCK_PACKET)
[   42.103489][ T3564] Buffer I/O error on dev loop0, logical block 103, lost async page write
[   42.128581][ T3564] syz.0.26: attempt to access beyond end of device
[   42.128581][ T3564] loop0: rw=2049, sector=208, nr_sectors = 2 limit=128
[   42.142011][ T3564] Buffer I/O error on dev loop0, logical block 104, lost async page write
[   42.151411][ T3564] Buffer I/O error on dev loop0, logical block 107, lost async page write
[   42.160336][ T3564] Buffer I/O error on dev loop0, logical block 108, lost async page write
[   42.170397][ T3564] Buffer I/O error on dev loop0, logical block 119, lost async page write
[   42.179542][ T3564] Buffer I/O error on dev loop0, logical block 120, lost async page write
[   42.183204][ T3582] netlink: 5 bytes leftover after parsing attributes in process `syz.3.32'.
[   42.201017][ T3582] 0ªî{X¹¦: renamed from gretap0 (while UP)
[   42.209891][ T3582] 0ªî{X¹¦: entered allmulticast mode
[   42.218706][ T3582] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   42.243141][ T3583] loop1: detected capacity change from 0 to 512
[   42.278125][ T3583] mmap: syz.1.27 (3583): VmData 17641472 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[   42.308700][ T3588] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[   42.308700][ T3588]    program syz.2.33 not setting count and/or reply_len properly
[   42.345196][ T3590] loop3: detected capacity change from 0 to 2364
[   42.356242][ T3590] iso9660: Bad value for 'gid'
[   42.361220][ T3590] iso9660: Bad value for 'gid'
[   42.407743][ T3595] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[   42.414315][ T3595] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   42.422231][ T3595] vhci_hcd vhci_hcd.0: Device attached
[   42.452900][ T3596] vhci_hcd: connection closed
[   42.453217][ T1979] vhci_hcd: stop threads
[   42.463455][ T1979] vhci_hcd: release socket
[   42.463467][ T1979] vhci_hcd: disconnect device
[   42.744246][ T3611] netlink: 36 bytes leftover after parsing attributes in process `syz.3.40'.
[   42.760716][ T3611] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   42.770314][ T3611] block device autoloading is deprecated and will be removed.
[   42.893623][ T3614] loop1: detected capacity change from 0 to 512
[   42.989053][ T3614] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.42: corrupted in-inode xattr: invalid ea_ino
[   43.077890][ T3614] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.42: couldn't read orphan inode 15 (err -117)
[   43.093496][ T3614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.201587][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.288403][ T3634] loop1: detected capacity change from 0 to 128
[   43.442034][ T3647] netlink: 'syz.0.55': attribute type 30 has an invalid length.
[   43.454283][ T3645] 9pnet_fd: Insufficient options for proto=fd
[   43.541976][ T3651] usb usb8: usbfs: process 3651 (syz.4.58) did not claim interface 0 before use
[   43.570410][ T3655] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[   43.570410][ T3655]    program syz.3.59 not setting count and/or reply_len properly
[   43.613453][ T3659] netlink: 'syz.4.60': attribute type 13 has an invalid length.
[   43.627162][ T3663] netlink: 100 bytes leftover after parsing attributes in process `syz.3.63'.
[   43.640502][ T3661] netlink: 'syz.1.62': attribute type 13 has an invalid length.
[   43.685780][ T3667] netlink: 'syz.3.64': attribute type 21 has an invalid length.
[   43.736650][ T3671] loop4: detected capacity change from 0 to 256
[   43.751121][ T3670] loop1: detected capacity change from 0 to 256
[   43.759507][ T3661] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.767659][ T3661] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.885223][ T3661] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   43.898612][ T3661] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   44.040376][ T3659] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.047838][ T3659] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.106404][ T3659] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   44.118501][ T3659] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   44.184756][ T3678] loop2: detected capacity change from 0 to 128
[   44.205244][ T3667] netlink: 132 bytes leftover after parsing attributes in process `syz.3.64'.
[   44.233926][   T52] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   44.248653][   T52] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   44.261915][   T52] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   44.275507][   T52] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   44.286454][   T29] kauditd_printk_skb: 154 callbacks suppressed
[   44.286471][   T29] audit: type=1326 audit(1760089521.992:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3679 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   44.301428][   T52] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   44.369187][   T29] audit: type=1326 audit(1760089522.042:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3679 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   44.393949][   T29] audit: type=1326 audit(1760089522.042:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3679 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   44.417146][ T1979] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   44.417205][ T1979] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   44.417250][ T1979] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   44.426328][   T29] audit: type=1326 audit(1760089522.042:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3679 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   44.468118][   T29] audit: type=1326 audit(1760089522.042:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3679 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   44.491282][   T29] audit: type=1326 audit(1760089522.042:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3679 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   44.514472][   T29] audit: type=1326 audit(1760089522.042:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3679 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   44.537401][   T29] audit: type=1326 audit(1760089522.042:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3679 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   44.560330][   T29] audit: type=1326 audit(1760089522.042:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3679 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   44.583364][   T29] audit: type=1326 audit(1760089522.042:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3679 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   44.644556][ T3695] SELinux: syz.3.75 (3695) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   44.697983][ T3700] macvlan0: entered promiscuous mode
[   44.724955][ T3700] batadv0: entered promiscuous mode
[   44.741612][ T3706] netlink: 'syz.1.79': attribute type 13 has an invalid length.
[   44.754914][ T3700] macvlan0: left promiscuous mode
[   44.760876][ T3700] batadv0: left promiscuous mode
[   44.775669][ T3702] loop3: detected capacity change from 0 to 8192
[   44.839684][ T3706] loop1: detected capacity change from 0 to 256
[   44.888415][ T3717] loop4: detected capacity change from 0 to 128
[   45.546007][ T3733] loop1: detected capacity change from 0 to 512
[   45.556078][ T3733] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   45.585664][ T3733] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.88: couldn't read orphan inode 26 (err -116)
[   45.598561][ T3733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.612059][ T3733] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.636076][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.680205][ T3741] loop4: detected capacity change from 0 to 2364
[   45.701653][ T3741] iso9660: Bad value for 'gid'
[   45.706511][ T3741] iso9660: Bad value for 'gid'
[   45.757000][ T3748] netlink: 'syz.0.93': attribute type 21 has an invalid length.
[   45.775154][ T3749] netlink: 'syz.2.94': attribute type 13 has an invalid length.
[   45.781764][ T3748] __nla_validate_parse: 1 callbacks suppressed
[   45.781786][ T3748] netlink: 132 bytes leftover after parsing attributes in process `syz.0.93'.
[   45.813044][ T3753] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[   45.813044][ T3753]    program syz.4.96 not setting count and/or reply_len properly
[   45.816633][ T3751] loop1: detected capacity change from 0 to 128
[   45.935680][ T3749] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.943338][ T3749] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.957904][ T3754] loop2: detected capacity change from 0 to 256
[   45.981529][ T3758] loop0: detected capacity change from 0 to 128
[   46.086266][ T3749] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   46.096946][ T3749] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   46.191858][ T2075] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   46.226864][ T2075] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   46.243015][ T3769] loop4: detected capacity change from 0 to 512
[   46.262761][ T2075] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   46.287895][ T3773] netlink: 256 bytes leftover after parsing attributes in process `syz.2.102'.
[   46.304351][ T2075] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   46.832643][ T3783] nfs: Unknown parameter ''
[   46.938695][ T3786] loop4: detected capacity change from 0 to 2048
[   46.955788][ T3786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.989802][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.031456][ T3791] loop0: detected capacity change from 0 to 1024
[   47.039807][ T3791] EXT4-fs: Ignoring removed oldalloc option
[   47.049660][ T3795] netlink: 'syz.4.109': attribute type 21 has an invalid length.
[   47.057936][ T3795] netlink: 132 bytes leftover after parsing attributes in process `syz.4.109'.
[   47.063962][ T3791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   47.080172][ T3791] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.093191][ T3791] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz.0.108: path /19/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0
[   47.223144][ T3803] loop2: detected capacity change from 0 to 1024
[   47.230198][ T3803] ext4: Bad value for 'max_dir_size_kb'
[   47.236833][ T3803] FAULT_INJECTION: forcing a failure.
[   47.236833][ T3803] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   47.250326][ T3803] CPU: 1 UID: 0 PID: 3803 Comm: syz.2.111 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   47.250354][ T3803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   47.250398][ T3803] Call Trace:
[   47.250407][ T3803]  <TASK>
[   47.250416][ T3803]  __dump_stack+0x1d/0x30
[   47.250443][ T3803]  dump_stack_lvl+0xe8/0x140
[   47.250463][ T3803]  dump_stack+0x15/0x1b
[   47.250479][ T3803]  should_fail_ex+0x265/0x280
[   47.250583][ T3803]  should_fail+0xb/0x20
[   47.250698][ T3803]  should_fail_usercopy+0x1a/0x20
[   47.250721][ T3803]  _copy_to_user+0x20/0xa0
[   47.250749][ T3803]  simple_read_from_buffer+0xb5/0x130
[   47.250772][ T3803]  proc_fail_nth_read+0x10e/0x150
[   47.250836][ T3803]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   47.250872][ T3803]  vfs_read+0x1a5/0x770
[   47.250900][ T3803]  ? __rcu_read_unlock+0x4f/0x70
[   47.251000][ T3803]  ? __fget_files+0x184/0x1c0
[   47.251029][ T3803]  ksys_read+0xda/0x1a0
[   47.251061][ T3803]  __x64_sys_read+0x40/0x50
[   47.251088][ T3803]  x64_sys_call+0x27c0/0x3000
[   47.251109][ T3803]  do_syscall_64+0xd2/0x200
[   47.251196][ T3803]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   47.251223][ T3803]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   47.251250][ T3803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.251279][ T3803] RIP: 0033:0x7f74ccb4d8dc
[   47.251297][ T3803] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   47.251381][ T3803] RSP: 002b:00007f74cb5af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   47.251405][ T3803] RAX: ffffffffffffffda RBX: 00007f74ccda5fa0 RCX: 00007f74ccb4d8dc
[   47.251422][ T3803] RDX: 000000000000000f RSI: 00007f74cb5af0a0 RDI: 0000000000000004
[   47.251438][ T3803] RBP: 00007f74cb5af090 R08: 0000000000000000 R09: 0000000000000000
[   47.251455][ T3803] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[   47.251471][ T3803] R13: 00007f74ccda6038 R14: 00007f74ccda5fa0 R15: 00007ffd51250438
[   47.251555][ T3803]  </TASK>
[   47.555476][ T3809] loop1: detected capacity change from 0 to 2048
[   47.577080][ T3809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.594412][ T3809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'.
[   47.606294][ T3817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'.
[   47.619832][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.824021][ T3832] pim6reg1: entered promiscuous mode
[   47.829692][ T3832] pim6reg1: entered allmulticast mode
[   47.867848][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   47.897817][ T3833] loop1: detected capacity change from 0 to 512
[   48.006479][ T3847] loop4: detected capacity change from 0 to 512
[   48.058249][ T3847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.076193][ T3847] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.106018][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.167245][ T3861] Illegal XDP return value 4294967274 on prog  (id 133) dev N/A, expect packet loss!
[   48.196733][ T3866] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[   48.203800][ T3866] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   48.211513][ T3866] vhci_hcd vhci_hcd.0: Device attached
[   48.220452][ T3867] vhci_hcd: connection closed
[   48.220871][ T1979] vhci_hcd: stop threads
[   48.230365][ T1979] vhci_hcd: release socket
[   48.235181][ T1979] vhci_hcd: disconnect device
[   48.563313][ T3870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.130'.
[   48.759039][ T3883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'.
[   48.809382][ T3894] FAULT_INJECTION: forcing a failure.
[   48.809382][ T3894] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   48.816062][ T3895] netlink: 'syz.0.137': attribute type 13 has an invalid length.
[   48.822817][ T3894] CPU: 1 UID: 0 PID: 3894 Comm: syz.4.136 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   48.822856][ T3894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   48.822874][ T3894] Call Trace:
[   48.822884][ T3894]  <TASK>
[   48.822951][ T3894]  __dump_stack+0x1d/0x30
[   48.822981][ T3894]  dump_stack_lvl+0xe8/0x140
[   48.823011][ T3894]  dump_stack+0x15/0x1b
[   48.823033][ T3894]  should_fail_ex+0x265/0x280
[   48.823084][ T3894]  should_fail+0xb/0x20
[   48.823132][ T3894]  should_fail_usercopy+0x1a/0x20
[   48.823237][ T3894]  _copy_from_iter+0xd2/0xe80
[   48.823320][ T3894]  ? __build_skb_around+0x1ab/0x200
[   48.823372][ T3894]  ? __alloc_skb+0x223/0x320
[   48.823436][ T3894]  pfkey_sendmsg+0x126/0x900
[   48.823508][ T3894]  ? avc_has_perm+0xf7/0x180
[   48.823557][ T3894]  ? selinux_socket_sendmsg+0x175/0x1b0
[   48.823596][ T3894]  ? __pfx_pfkey_sendmsg+0x10/0x10
[   48.823716][ T3894]  __sock_sendmsg+0x142/0x180
[   48.823744][ T3894]  ____sys_sendmsg+0x31e/0x4e0
[   48.823824][ T3894]  ___sys_sendmsg+0x17b/0x1d0
[   48.823937][ T3894]  __x64_sys_sendmsg+0xd4/0x160
[   48.824118][ T3894]  x64_sys_call+0x191e/0x3000
[   48.824148][ T3894]  do_syscall_64+0xd2/0x200
[   48.824183][ T3894]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   48.824224][ T3894]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   48.824267][ T3894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.824380][ T3894] RIP: 0033:0x7f6f0be1eec9
[   48.824402][ T3894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   48.824428][ T3894] RSP: 002b:00007f6f0a887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   48.824484][ T3894] RAX: ffffffffffffffda RBX: 00007f6f0c075fa0 RCX: 00007f6f0be1eec9
[   48.824502][ T3894] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003
[   48.824519][ T3894] RBP: 00007f6f0a887090 R08: 0000000000000000 R09: 0000000000000000
[   48.824612][ T3894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   48.824629][ T3894] R13: 00007f6f0c076038 R14: 00007f6f0c075fa0 R15: 00007ffdedba0928
[   48.824657][ T3894]  </TASK>
[   48.915029][ T3897] loop0: detected capacity change from 0 to 256
[   49.110635][ T3901] loop4: detected capacity change from 0 to 2048
[   49.151905][ T3901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.238458][ T3895] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.245959][ T3895] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.304869][ T3895] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   49.316393][ T3895] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   49.329666][   T29] kauditd_printk_skb: 186 callbacks suppressed
[   49.329734][   T29] audit: type=1400 audit(1760089527.032:438): avc:  denied  { read } for  pid=3900 comm="syz.4.139" path="/38/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   49.395393][ T3912] loop2: detected capacity change from 0 to 512
[   49.457233][   T52] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.473105][   T52] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.485460][   T52] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.495313][   T52] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.535857][ T3915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'.
[   49.685879][   T52] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   49.711059][   T52] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 18 with max blocks 2048 with error 28
[   49.723933][   T52] EXT4-fs (loop4): This should not happen!! Data will be lost
[   49.723933][   T52] 
[   49.734391][   T52] EXT4-fs (loop4): Total free blocks count 0
[   49.740552][   T52] EXT4-fs (loop4): Free/Dirty block details
[   49.746822][   T52] EXT4-fs (loop4): free_blocks=2415919504
[   49.752597][   T52] EXT4-fs (loop4): dirty_blocks=8208
[   49.758101][   T52] EXT4-fs (loop4): Block reservation details
[   49.764264][   T52] EXT4-fs (loop4): i_reserved_data_blocks=513
[   49.770590][   T29] audit: type=1400 audit(1760089527.462:439): avc:  denied  { write } for  pid=3923 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   49.802013][   T35] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 2068 with max blocks 2048 with error 28
[   49.817049][   T29] audit: type=1400 audit(1760089527.522:440): avc:  denied  { shutdown } for  pid=3923 comm="syz.1.146" lport=59648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   49.952288][ T3930] netlink: 'syz.1.148': attribute type 21 has an invalid length.
[   49.960754][ T3930] netlink: 132 bytes leftover after parsing attributes in process `syz.1.148'.
[   49.974764][ T3933] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[   49.981322][ T3933] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   49.988918][ T3933] vhci_hcd vhci_hcd.0: Device attached
[   49.999705][   T29] audit: type=1326 audit(1760089527.702:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3932 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   50.023299][   T29] audit: type=1326 audit(1760089527.702:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3932 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   50.047478][ T3934] vhci_hcd: connection closed
[   50.047958][   T35] vhci_hcd: stop threads
[   50.057085][   T35] vhci_hcd: release socket
[   50.061685][   T35] vhci_hcd: disconnect device
[   50.071487][   T29] audit: type=1326 audit(1760089527.702:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3932 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   50.095247][   T29] audit: type=1326 audit(1760089527.702:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3932 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   50.119129][   T29] audit: type=1326 audit(1760089527.702:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3932 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   50.647657][ T3956] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[   50.654232][ T3956] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   50.661958][ T3956] vhci_hcd vhci_hcd.0: Device attached
[   50.671021][   T29] audit: type=1326 audit(1760089528.372:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3955 comm="syz.4.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   50.697626][ T3957] vhci_hcd: connection closed
[   50.697883][   T29] audit: type=1326 audit(1760089528.372:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3955 comm="syz.4.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   50.716628][   T31] vhci_hcd: stop threads
[   50.731025][   T31] vhci_hcd: release socket
[   50.735631][   T31] vhci_hcd: disconnect device
[   50.745434][ T3960] FAULT_INJECTION: forcing a failure.
[   50.745434][ T3960] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   50.758658][ T3960] CPU: 0 UID: 0 PID: 3960 Comm: syz.3.158 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   50.758694][ T3960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   50.758706][ T3960] Call Trace:
[   50.758712][ T3960]  <TASK>
[   50.758793][ T3960]  __dump_stack+0x1d/0x30
[   50.758813][ T3960]  dump_stack_lvl+0xe8/0x140
[   50.758831][ T3960]  dump_stack+0x15/0x1b
[   50.758846][ T3960]  should_fail_ex+0x265/0x280
[   50.758953][ T3960]  should_fail+0xb/0x20
[   50.759034][ T3960]  should_fail_usercopy+0x1a/0x20
[   50.759054][ T3960]  _copy_from_user+0x1c/0xb0
[   50.759134][ T3960]  ___sys_sendmsg+0xc1/0x1d0
[   50.759176][ T3960]  __x64_sys_sendmsg+0xd4/0x160
[   50.759288][ T3960]  x64_sys_call+0x191e/0x3000
[   50.759339][ T3960]  do_syscall_64+0xd2/0x200
[   50.759361][ T3960]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   50.759388][ T3960]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   50.759452][ T3960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.759472][ T3960] RIP: 0033:0x7ff1bf59eec9
[   50.759487][ T3960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.759577][ T3960] RSP: 002b:00007ff1bdfff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   50.759667][ T3960] RAX: ffffffffffffffda RBX: 00007ff1bf7f5fa0 RCX: 00007ff1bf59eec9
[   50.759706][ T3960] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[   50.759721][ T3960] RBP: 00007ff1bdfff090 R08: 0000000000000000 R09: 0000000000000000
[   50.759735][ T3960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.759750][ T3960] R13: 00007ff1bf7f6038 R14: 00007ff1bf7f5fa0 R15: 00007ffd5ca14cc8
[   50.759773][ T3960]  </TASK>
[   51.111676][ T3969] netlink: 'syz.2.161': attribute type 21 has an invalid length.
[   51.119768][ T3969] netlink: 132 bytes leftover after parsing attributes in process `syz.2.161'.
[   51.221539][ T3972] loop0: detected capacity change from 0 to 512
[   51.275359][ T3973] loop3: detected capacity change from 0 to 512
[   51.306469][ T3985] loop2: detected capacity change from 0 to 1024
[   51.318388][ T3985] EXT4-fs: Ignoring removed orlov option
[   51.327991][ T3985] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   51.343491][ T3985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.863499][ T3999] loop0: detected capacity change from 0 to 2364
[   51.880435][ T3999] iso9660: Bad value for 'gid'
[   51.885352][ T3999] iso9660: Bad value for 'gid'
[   51.896238][ T4001] FAULT_INJECTION: forcing a failure.
[   51.896238][ T4001] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   51.909632][ T4001] CPU: 0 UID: 0 PID: 4001 Comm: syz.1.170 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   51.909755][ T4001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   51.909769][ T4001] Call Trace:
[   51.909775][ T4001]  <TASK>
[   51.909783][ T4001]  __dump_stack+0x1d/0x30
[   51.909805][ T4001]  dump_stack_lvl+0xe8/0x140
[   51.909825][ T4001]  dump_stack+0x15/0x1b
[   51.909842][ T4001]  should_fail_ex+0x265/0x280
[   51.909895][ T4001]  should_fail+0xb/0x20
[   51.909927][ T4001]  should_fail_usercopy+0x1a/0x20
[   51.909997][ T4001]  _copy_from_iter+0xd2/0xe80
[   51.910115][ T4001]  ? __build_skb_around+0x1ab/0x200
[   51.910141][ T4001]  ? __alloc_skb+0x223/0x320
[   51.910168][ T4001]  netlink_sendmsg+0x471/0x6b0
[   51.910202][ T4001]  ? __pfx_netlink_sendmsg+0x10/0x10
[   51.910239][ T4001]  __sock_sendmsg+0x142/0x180
[   51.910321][ T4001]  ____sys_sendmsg+0x31e/0x4e0
[   51.910422][ T4001]  ___sys_sendmsg+0x17b/0x1d0
[   51.910466][ T4001]  __x64_sys_sendmsg+0xd4/0x160
[   51.910526][ T4001]  x64_sys_call+0x191e/0x3000
[   51.910612][ T4001]  do_syscall_64+0xd2/0x200
[   51.910637][ T4001]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   51.910719][ T4001]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   51.910742][ T4001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.910765][ T4001] RIP: 0033:0x7fe238a4eec9
[   51.910856][ T4001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   51.910874][ T4001] RSP: 002b:00007fe2374af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   51.910894][ T4001] RAX: ffffffffffffffda RBX: 00007fe238ca5fa0 RCX: 00007fe238a4eec9
[   51.910906][ T4001] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000004
[   51.910952][ T4001] RBP: 00007fe2374af090 R08: 0000000000000000 R09: 0000000000000000
[   51.910965][ T4001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   51.910978][ T4001] R13: 00007fe238ca6038 R14: 00007fe238ca5fa0 R15: 00007ffffec20398
[   51.910998][ T4001]  </TASK>
[   52.279521][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.288908][ T4007] loop3: detected capacity change from 0 to 2048
[   52.319367][ T4009] loop4: detected capacity change from 0 to 2048
[   52.408899][ T4012] netlink: 36 bytes leftover after parsing attributes in process `syz.0.171'.
[   52.496697][ T4009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.520510][ T4007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.642372][ T4009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.174'.
[   52.696991][ T4007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.173'.
[   52.798251][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.821030][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.878648][ T4029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'.
[   52.900491][ T4033] netlink: 'syz.4.180': attribute type 21 has an invalid length.
[   52.909266][ T4033] netlink: 132 bytes leftover after parsing attributes in process `syz.4.180'.
[   52.925653][ T4031] loop2: detected capacity change from 0 to 2364
[   52.932988][ T4031] iso9660: Bad value for 'gid'
[   52.937794][ T4031] iso9660: Bad value for 'gid'
[   52.977320][ T4038] loop2: detected capacity change from 0 to 512
[   52.989656][ T4038] 9pnet_virtio: no channels available for device 127.0.0.1
[   52.997952][ T4036] usb usb8: usbfs: process 4036 (syz.4.182) did not claim interface 0 before use
[   53.175964][ T4052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.190'.
[   53.222025][ T4057] loop3: detected capacity change from 0 to 2048
[   53.232308][ T4060] netlink: 'syz.4.193': attribute type 13 has an invalid length.
[   53.261834][ T4057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.289912][ T4064] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[   53.294714][ T4049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.189'.
[   53.296614][ T4064] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   53.313501][ T4064] vhci_hcd vhci_hcd.0: Device attached
[   53.321270][ T4060] loop4: detected capacity change from 0 to 256
[   53.328446][ T4066] vhci_hcd: connection closed
[   53.328785][   T52] vhci_hcd: stop threads
[   53.337808][   T52] vhci_hcd: release socket
[   53.342333][   T52] vhci_hcd: disconnect device
[   53.347668][ T4067] usb usb8: usbfs: process 4067 (syz.2.195) did not claim interface 0 before use
[   53.362828][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.502469][ T4071] IPv6: NLM_F_CREATE should be specified when creating new route
[   53.707652][ T4083] netlink: 36 bytes leftover after parsing attributes in process `syz.4.198'.
[   53.825602][ T4085] loop2: detected capacity change from 0 to 1024
[   54.016243][ T4085] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   54.097285][ T4094] netlink: 'syz.1.203': attribute type 1 has an invalid length.
[   54.105137][ T4094] netlink: 224 bytes leftover after parsing attributes in process `syz.1.203'.
[   54.195333][ T4104] loop2: detected capacity change from 0 to 512
[   54.222523][ T4106] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4106 comm=syz.0.207
[   54.244019][ T4104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.265048][ T4104] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.303042][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.448379][ T4119] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[   54.455152][ T4119] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   54.462847][ T4119] vhci_hcd vhci_hcd.0: Device attached
[   54.483699][ T4121] vhci_hcd: connection closed
[   54.483882][   T29] kauditd_printk_skb: 89 callbacks suppressed
[   54.483961][   T29] audit: type=1326 audit(1760089532.192:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4118 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ccb4eec9 code=0x7ffc0000
[   54.520391][   T29] audit: type=1326 audit(1760089532.192:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4118 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f74ccb4eec9 code=0x7ffc0000
[   54.543752][   T29] audit: type=1326 audit(1760089532.192:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4118 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ccb4eec9 code=0x7ffc0000
[   54.551431][   T52] vhci_hcd: stop threads
[   54.567361][   T29] audit: type=1326 audit(1760089532.192:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4118 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ccb4eec9 code=0x7ffc0000
[   54.571541][   T52] vhci_hcd: release socket
[   54.600223][   T52] vhci_hcd: disconnect device
[   54.635380][   T29] audit: type=1400 audit(1760089532.342:541): avc:  denied  { connect } for  pid=4131 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   54.770874][   T29] audit: type=1400 audit(1760089532.472:542): avc:  denied  { write } for  pid=4143 comm="syz.0.220" name="snmp" dev="proc" ino=4026532776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   54.807213][   T29] audit: type=1400 audit(1760089532.472:543): avc:  denied  { create } for  pid=4143 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[   54.827521][   T29] audit: type=1400 audit(1760089532.472:544): avc:  denied  { setopt } for  pid=4143 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   54.847374][   T29] audit: type=1400 audit(1760089532.472:545): avc:  denied  { write } for  pid=4143 comm="syz.0.220" path="socket:[6938]" dev="sockfs" ino=6938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   54.872613][   T29] audit: type=1400 audit(1760089532.472:546): avc:  denied  { read write } for  pid=4143 comm="syz.0.220" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   55.060617][ T4156] wireguard0: entered promiscuous mode
[   55.066309][ T4156] wireguard0: entered allmulticast mode
[   55.515206][ T4176] loop4: detected capacity change from 0 to 2048
[   55.618615][ T4176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.668939][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.702149][ T4181] usb usb8: usbfs: process 4181 (syz.1.229) did not claim interface 0 before use
[   55.830986][ T4187] loop2: detected capacity change from 0 to 2048
[   56.114699][ T4205] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[   56.121444][ T4205] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   56.129107][ T4205] vhci_hcd vhci_hcd.0: Device attached
[   56.142550][ T4206] vhci_hcd: connection closed
[   56.142834][ T1979] vhci_hcd: stop threads
[   56.152249][ T1979] vhci_hcd: release socket
[   56.156971][ T1979] vhci_hcd: disconnect device
[   56.373739][ T4155] syz.0.222 (4155) used greatest stack depth: 7224 bytes left
[   56.479363][ T4214] __nla_validate_parse: 3 callbacks suppressed
[   56.479385][ T4214] netlink: 36 bytes leftover after parsing attributes in process `syz.1.241'.
[   56.816543][ T4231] FAULT_INJECTION: forcing a failure.
[   56.816543][ T4231] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   56.829889][ T4231] CPU: 0 UID: 0 PID: 4231 Comm: syz.0.248 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   56.829919][ T4231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   56.829931][ T4231] Call Trace:
[   56.829938][ T4231]  <TASK>
[   56.829944][ T4231]  __dump_stack+0x1d/0x30
[   56.830038][ T4231]  dump_stack_lvl+0xe8/0x140
[   56.830058][ T4231]  dump_stack+0x15/0x1b
[   56.830076][ T4231]  should_fail_ex+0x265/0x280
[   56.830111][ T4231]  should_fail+0xb/0x20
[   56.830209][ T4231]  should_fail_usercopy+0x1a/0x20
[   56.830235][ T4231]  _copy_from_user+0x1c/0xb0
[   56.830260][ T4231]  copy_from_bpfptr+0x5c/0x90
[   56.830293][ T4231]  bpf_prog_load+0x73b/0x1100
[   56.830322][ T4231]  ? security_bpf+0x2b/0x90
[   56.830355][ T4231]  __sys_bpf+0x469/0x7c0
[   56.830448][ T4231]  __x64_sys_bpf+0x41/0x50
[   56.830477][ T4231]  x64_sys_call+0x2aee/0x3000
[   56.830500][ T4231]  do_syscall_64+0xd2/0x200
[   56.830566][ T4231]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   56.830601][ T4231]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   56.830703][ T4231]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.830755][ T4231] RIP: 0033:0x7fced19beec9
[   56.830775][ T4231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   56.830873][ T4231] RSP: 002b:00007fced041f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   56.830898][ T4231] RAX: ffffffffffffffda RBX: 00007fced1c15fa0 RCX: 00007fced19beec9
[   56.830915][ T4231] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005
[   56.830930][ T4231] RBP: 00007fced041f090 R08: 0000000000000000 R09: 0000000000000000
[   56.830946][ T4231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.830962][ T4231] R13: 00007fced1c16038 R14: 00007fced1c15fa0 R15: 00007ffd47803b08
[   56.830994][ T4231]  </TASK>
[   57.097493][ T4235] loop4: detected capacity change from 0 to 128
[   57.189222][ T4250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.255'.
[   57.198240][ T4250] netlink: 32 bytes leftover after parsing attributes in process `syz.0.255'.
[   57.213112][ T4235] bio_check_eod: 165 callbacks suppressed
[   57.213133][ T4235] syz.4.251: attempt to access beyond end of device
[   57.213133][ T4235] loop4: rw=2049, sector=138, nr_sectors = 16 limit=128
[   57.242966][ T4235] syz.4.251: attempt to access beyond end of device
[   57.242966][ T4235] loop4: rw=2049, sector=170, nr_sectors = 6 limit=128
[   57.275814][ T4235] syz.4.251: attempt to access beyond end of device
[   57.275814][ T4235] loop4: rw=2049, sector=174, nr_sectors = 2 limit=128
[   57.289508][ T4235] buffer_io_error: 100 callbacks suppressed
[   57.289526][ T4235] Buffer I/O error on dev loop4, logical block 87, lost async page write
[   57.305310][ T4235] syz.4.251: attempt to access beyond end of device
[   57.305310][ T4235] loop4: rw=2049, sector=176, nr_sectors = 2 limit=128
[   57.318814][ T4235] Buffer I/O error on dev loop4, logical block 88, lost async page write
[   57.328341][ T4235] syz.4.251: attempt to access beyond end of device
[   57.328341][ T4235] loop4: rw=2049, sector=178, nr_sectors = 6 limit=128
[   57.361759][ T4235] syz.4.251: attempt to access beyond end of device
[   57.361759][ T4235] loop4: rw=2049, sector=182, nr_sectors = 2 limit=128
[   57.375271][ T4235] Buffer I/O error on dev loop4, logical block 91, lost async page write
[   57.384035][ T4235] syz.4.251: attempt to access beyond end of device
[   57.384035][ T4235] loop4: rw=2049, sector=184, nr_sectors = 2 limit=128
[   57.398247][ T4235] Buffer I/O error on dev loop4, logical block 92, lost async page write
[   57.411274][ T4235] syz.4.251: attempt to access beyond end of device
[   57.411274][ T4235] loop4: rw=2049, sector=202, nr_sectors = 6 limit=128
[   57.428219][ T4258] loop1: detected capacity change from 0 to 512
[   57.437855][ T4254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'.
[   57.462078][ T4235] syz.4.251: attempt to access beyond end of device
[   57.462078][ T4235] loop4: rw=2049, sector=206, nr_sectors = 2 limit=128
[   57.475642][ T4235] Buffer I/O error on dev loop4, logical block 103, lost async page write
[   57.505469][ T4235] syz.4.251: attempt to access beyond end of device
[   57.505469][ T4235] loop4: rw=2049, sector=208, nr_sectors = 2 limit=128
[   57.519160][ T4235] Buffer I/O error on dev loop4, logical block 104, lost async page write
[   57.537313][ T4235] Buffer I/O error on dev loop4, logical block 107, lost async page write
[   57.546390][ T4235] Buffer I/O error on dev loop4, logical block 108, lost async page write
[   57.556126][ T4235] Buffer I/O error on dev loop4, logical block 119, lost async page write
[   57.565722][ T4235] Buffer I/O error on dev loop4, logical block 120, lost async page write
[   57.645354][ T4265] loop2: detected capacity change from 0 to 512
[   57.688077][ T4274] vlan2: entered promiscuous mode
[   57.693290][ T4274] bond0: entered promiscuous mode
[   57.698461][ T4274] bond_slave_0: entered promiscuous mode
[   57.704335][ T4274] bond_slave_1: entered promiscuous mode
[   57.745955][ T4274] netlink: 'syz.0.263': attribute type 16 has an invalid length.
[   57.753901][ T4274] netlink: 156 bytes leftover after parsing attributes in process `syz.0.263'.
[   58.166906][ T4286] netlink: 36 bytes leftover after parsing attributes in process `syz.4.264'.
[   58.353840][ T4292] FAULT_INJECTION: forcing a failure.
[   58.353840][ T4292] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   58.367527][ T4292] CPU: 0 UID: 0 PID: 4292 Comm: syz.0.268 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   58.367552][ T4292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   58.367563][ T4292] Call Trace:
[   58.367570][ T4292]  <TASK>
[   58.367577][ T4292]  __dump_stack+0x1d/0x30
[   58.367603][ T4292]  dump_stack_lvl+0xe8/0x140
[   58.367620][ T4292]  dump_stack+0x15/0x1b
[   58.367635][ T4292]  should_fail_ex+0x265/0x280
[   58.367754][ T4292]  should_fail+0xb/0x20
[   58.367782][ T4292]  should_fail_usercopy+0x1a/0x20
[   58.367801][ T4292]  _copy_from_user+0x1c/0xb0
[   58.367824][ T4292]  ___sys_sendmsg+0xc1/0x1d0
[   58.367913][ T4292]  __sys_sendmmsg+0x178/0x300
[   58.367951][ T4292]  __x64_sys_sendmmsg+0x57/0x70
[   58.367977][ T4292]  x64_sys_call+0x1c4a/0x3000
[   58.368076][ T4292]  do_syscall_64+0xd2/0x200
[   58.368097][ T4292]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   58.368122][ T4292]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   58.368245][ T4292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.368320][ T4292] RIP: 0033:0x7fced19beec9
[   58.368334][ T4292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.368350][ T4292] RSP: 002b:00007fced041f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   58.368430][ T4292] RAX: ffffffffffffffda RBX: 00007fced1c15fa0 RCX: 00007fced19beec9
[   58.368441][ T4292] RDX: 0000000000000001 RSI: 0000200000000b00 RDI: 0000000000000007
[   58.368452][ T4292] RBP: 00007fced041f090 R08: 0000000000000000 R09: 0000000000000000
[   58.368483][ T4292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.368497][ T4292] R13: 00007fced1c16038 R14: 00007fced1c15fa0 R15: 00007ffd47803b08
[   58.368524][ T4292]  </TASK>
[   58.557929][ T4295] netlink: 'syz.2.270': attribute type 21 has an invalid length.
[   58.595873][ T4295] netlink: 132 bytes leftover after parsing attributes in process `syz.2.270'.
[   58.874794][ T4330] FAULT_INJECTION: forcing a failure.
[   58.874794][ T4330] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   58.888072][ T4330] CPU: 1 UID: 0 PID: 4330 Comm: syz.0.283 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   58.888108][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   58.888125][ T4330] Call Trace:
[   58.888132][ T4330]  <TASK>
[   58.888140][ T4330]  __dump_stack+0x1d/0x30
[   58.888162][ T4330]  dump_stack_lvl+0xe8/0x140
[   58.888187][ T4330]  dump_stack+0x15/0x1b
[   58.888215][ T4330]  should_fail_ex+0x265/0x280
[   58.888260][ T4330]  should_fail+0xb/0x20
[   58.888318][ T4330]  should_fail_usercopy+0x1a/0x20
[   58.888339][ T4330]  _copy_from_user+0x1c/0xb0
[   58.888398][ T4330]  ___sys_sendmsg+0xc1/0x1d0
[   58.888451][ T4330]  __x64_sys_sendmsg+0xd4/0x160
[   58.888494][ T4330]  x64_sys_call+0x191e/0x3000
[   58.888553][ T4330]  do_syscall_64+0xd2/0x200
[   58.888591][ T4330]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   58.888618][ T4330]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   58.888699][ T4330]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.888728][ T4330] RIP: 0033:0x7fced19beec9
[   58.888747][ T4330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.888794][ T4330] RSP: 002b:00007fced041f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   58.888814][ T4330] RAX: ffffffffffffffda RBX: 00007fced1c15fa0 RCX: 00007fced19beec9
[   58.888869][ T4330] RDX: 0000000000000000 RSI: 0000200000006280 RDI: 0000000000000006
[   58.888886][ T4330] RBP: 00007fced041f090 R08: 0000000000000000 R09: 0000000000000000
[   58.888902][ T4330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.888918][ T4330] R13: 00007fced1c16038 R14: 00007fced1c15fa0 R15: 00007ffd47803b08
[   58.888944][ T4330]  </TASK>
[   59.062492][ T4333] loop4: detected capacity change from 0 to 512
[   59.365761][ T4344] netlink: 36 bytes leftover after parsing attributes in process `syz.3.285'.
[   59.686885][ T4347] netlink: 'syz.0.289': attribute type 21 has an invalid length.
[   59.776607][ T4347] netlink: 132 bytes leftover after parsing attributes in process `syz.0.289'.
[   60.158655][ T4378] netlink: 88 bytes leftover after parsing attributes in process `+}[@'.
[   60.159361][   T29] kauditd_printk_skb: 110 callbacks suppressed
[   60.159415][   T29] audit: type=1400 audit(1760089537.862:657): avc:  denied  { relabelfrom } for  pid=4377 comm="+}[@" name="" dev="pipefs" ino=8307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   60.195856][   T29] audit: type=1400 audit(1760089537.862:658): avc:  denied  { create } for  pid=4377 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   60.214695][   T29] audit: type=1400 audit(1760089537.862:659): avc:  denied  { bind } for  pid=4377 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   60.291363][   T29] audit: type=1326 audit(1760089537.992:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bf59eec9 code=0x7ffc0000
[   60.314990][   T29] audit: type=1326 audit(1760089537.992:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bf59eec9 code=0x7ffc0000
[   60.338753][   T29] audit: type=1326 audit(1760089537.992:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bf59eec9 code=0x7ffc0000
[   60.362061][   T29] audit: type=1326 audit(1760089537.992:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bf59eec9 code=0x7ffc0000
[   60.386252][   T29] audit: type=1326 audit(1760089537.992:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff1bf59eec9 code=0x7ffc0000
[   60.409690][   T29] audit: type=1326 audit(1760089537.992:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bf59eec9 code=0x7ffc0000
[   60.433433][   T29] audit: type=1326 audit(1760089537.992:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bf59eec9 code=0x7ffc0000
[   60.457773][ T4384] netlink: 'syz.1.302': attribute type 1 has an invalid length.
[   60.470213][ T4378] bridge_slave_1: left allmulticast mode
[   60.476092][ T4378] bridge_slave_1: left promiscuous mode
[   60.482092][ T4378] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.492568][ T4378] bridge_slave_0: left allmulticast mode
[   60.498383][ T4378] bridge_slave_0: left promiscuous mode
[   60.504536][ T4378] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.520682][ T4389] netlink: 'syz.3.305': attribute type 21 has an invalid length.
[   60.755922][ T4408] netlink: 'syz.4.308': attribute type 13 has an invalid length.
[   60.786298][ T4408] loop4: detected capacity change from 0 to 256
[   60.963957][ T4415] loop4: detected capacity change from 0 to 2364
[   60.971636][ T4415] iso9660: Bad value for 'gid'
[   60.976566][ T4415] iso9660: Bad value for 'gid'
[   61.029705][ T4419] loop4: detected capacity change from 0 to 128
[   61.171288][    C1] hrtimer: interrupt took 117492 ns
[   61.218608][ T4431] netlink: 'syz.4.318': attribute type 21 has an invalid length.
[   61.464898][ T4442] netlink: 'syz.3.321': attribute type 13 has an invalid length.
[   61.489870][ T4444] loop4: detected capacity change from 0 to 512
[   61.496812][ T4444] EXT4-fs: Ignoring removed nobh option
[   61.674199][ T4444] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.323: iget: bad i_size value: 38620345925642
[   61.689388][ T4444] EXT4-fs (loop4): Remounting filesystem read-only
[   61.697139][ T4444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.710964][ T4444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.818430][ T4451] __nla_validate_parse: 3 callbacks suppressed
[   61.818449][ T4451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.319'.
[   61.835307][ T4451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.319'.
[   61.998126][ T4442] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.005721][ T4442] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.023060][ T4455] loop2: detected capacity change from 0 to 2048
[   62.090645][ T4461] netlink: 'syz.1.325': attribute type 1 has an invalid length.
[   62.091083][ T4455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.098794][ T4461] netlink: 224 bytes leftover after parsing attributes in process `syz.1.325'.
[   62.214573][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.275516][ T4442] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.342626][ T4442] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.475804][ T1979] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.490602][ T1979] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.517429][ T1979] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.526689][ T1979] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.578021][ T4493] netlink: 'syz.3.334': attribute type 13 has an invalid length.
[   62.586192][ T4486] loop4: detected capacity change from 0 to 512
[   62.652983][ T4496] loop2: detected capacity change from 0 to 512
[   62.694782][ T4496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.711592][ T4496] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   62.743682][ T4501] netlink: 132 bytes leftover after parsing attributes in process `syz.3.336'.
[   62.830462][ T4505] bond1 (unregistering): Released all slaves
[   63.001272][ T3320] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[   63.015334][ T3320] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[   63.038354][ T4518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.340'.
[   63.086129][ T4527] loop1: detected capacity change from 0 to 512
[   63.106594][ T4527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.119810][ T4527] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.233596][ T4535] validate_nla: 1 callbacks suppressed
[   63.233611][ T4535] netlink: 'syz.4.346': attribute type 10 has an invalid length.
[   63.254157][ T4502] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.265318][ T4535] team0 (unregistering): Port device team_slave_0 removed
[   63.274362][ T4535] team0 (unregistering): Port device team_slave_1 removed
[   63.345095][ T4540] netlink: 132 bytes leftover after parsing attributes in process `syz.3.349'.
[   63.354889][ T4477] IPVS: starting estimator thread 0...
[   63.368989][ T4537] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20004
[   63.481700][ T4541] IPVS: using max 2352 ests per chain, 117600 per kthread
[   63.533093][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.648895][   T52] bridge_slave_1: left allmulticast mode
[   63.654700][   T52] bridge_slave_1: left promiscuous mode
[   63.660673][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.693699][   T52] bridge_slave_0: left allmulticast mode
[   63.699443][   T52] bridge_slave_0: left promiscuous mode
[   63.705235][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.748812][ T4572] netlink: 168 bytes leftover after parsing attributes in process `ÿÿÿ'.
[   63.780233][ T4578] FAULT_INJECTION: forcing a failure.
[   63.780233][ T4578] name failslab, interval 1, probability 0, space 0, times 0
[   63.792986][ T4578] CPU: 0 UID: 0 PID: 4578 Comm: syz.4.359 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   63.793027][ T4578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   63.793045][ T4578] Call Trace:
[   63.793053][ T4578]  <TASK>
[   63.793063][ T4578]  __dump_stack+0x1d/0x30
[   63.793090][ T4578]  dump_stack_lvl+0xe8/0x140
[   63.793113][ T4578]  dump_stack+0x15/0x1b
[   63.793134][ T4578]  should_fail_ex+0x265/0x280
[   63.793236][ T4578]  should_failslab+0x8c/0xb0
[   63.793269][ T4578]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[   63.793306][ T4578]  ? __alloc_skb+0x101/0x320
[   63.793338][ T4578]  __alloc_skb+0x101/0x320
[   63.793401][ T4578]  ? audit_log_start+0x342/0x720
[   63.793427][ T4578]  audit_log_start+0x3a0/0x720
[   63.793452][ T4578]  ? kstrtouint+0x76/0xc0
[   63.793487][ T4578]  audit_seccomp+0x48/0x100
[   63.793546][ T4578]  ? __seccomp_filter+0x82d/0x1250
[   63.793580][ T4578]  __seccomp_filter+0x83e/0x1250
[   63.793611][ T4578]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   63.793640][ T4578]  ? vfs_write+0x7e8/0x960
[   63.793720][ T4578]  __secure_computing+0x82/0x150
[   63.793755][ T4578]  syscall_trace_enter+0xcf/0x1e0
[   63.793867][ T4578]  do_syscall_64+0xac/0x200
[   63.793899][ T4578]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   63.794014][ T4578]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   63.794044][ T4578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.794094][ T4578] RIP: 0033:0x7f6f0be1eec9
[   63.794114][ T4578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   63.794134][ T4578] RSP: 002b:00007f6f0a887038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e
[   63.794153][ T4578] RAX: ffffffffffffffda RBX: 00007f6f0c075fa0 RCX: 00007f6f0be1eec9
[   63.794165][ T4578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   63.794255][ T4578] RBP: 00007f6f0a887090 R08: 0000000000000000 R09: 0000000000000000
[   63.794272][ T4578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   63.794287][ T4578] R13: 00007f6f0c076038 R14: 00007f6f0c075fa0 R15: 00007ffdedba0928
[   63.794376][ T4578]  </TASK>
[   63.846451][ T4583] xt_hashlimit: max too large, truncated to 1048576
[   64.031816][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.057370][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.067433][   T52] bond0 (unregistering): Released all slaves
[   64.098107][ T4591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.364'.
[   64.133596][ T4601] ieee802154 phy1 wpan1: encryption failed: -22
[   64.154368][   T52] hsr_slave_0: left promiscuous mode
[   64.160236][   T52] hsr_slave_1: left promiscuous mode
[   64.171055][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.178776][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.230239][   T52] team0 (unregistering): Port device team_slave_1 removed
[   64.255864][   T52] team0 (unregistering): Port device team_slave_0 removed
[   64.313476][ T4613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'.
[   64.367193][ T4621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.369'.
[   64.384882][ T4621] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.426745][ T4542] chnl_net:caif_netlink_parms(): no params data found
[   64.470890][ T4629] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[   64.477542][ T4629] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   64.485317][ T4629] vhci_hcd vhci_hcd.0: Device attached
[   64.497758][ T4626] loop1: detected capacity change from 0 to 256
[   64.518917][ T4626] vfat: Bad value for 'nonumtail'
[   64.540565][ T4631] vhci_hcd: connection closed
[   64.550949][ T2075] vhci_hcd: stop threads
[   64.559954][ T2075] vhci_hcd: release socket
[   64.564431][ T2075] vhci_hcd: disconnect device
[   64.588709][ T4542] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.595920][ T4542] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.619251][ T4542] bridge_slave_0: entered allmulticast mode
[   64.626224][ T4542] bridge_slave_0: entered promiscuous mode
[   64.640837][ T4542] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.648009][ T4542] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.657082][ T4542] bridge_slave_1: entered allmulticast mode
[   64.663691][ T4542] bridge_slave_1: entered promiscuous mode
[   64.688358][ T4542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.699511][ T4542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.741243][ T4542] team0: Port device team_slave_0 added
[   64.749408][ T4542] team0: Port device team_slave_1 added
[   64.776709][ T4654] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[   64.783374][ T4654] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   64.791117][ T4654] vhci_hcd vhci_hcd.0: Device attached
[   64.804471][ T4542] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.811508][ T4542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.837725][ T4542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.852613][ T4655] vhci_hcd: connection closed
[   64.853017][   T52] vhci_hcd: stop threads
[   64.862764][   T52] vhci_hcd: release socket
[   64.867209][   T52] vhci_hcd: disconnect device
[   64.873347][ T4542] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.880315][ T4542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.906619][ T4542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.954394][ T4542] hsr_slave_0: entered promiscuous mode
[   64.971053][ T4542] hsr_slave_1: entered promiscuous mode
[   64.980962][ T4542] debugfs: 'hsr0' already exists in 'hsr'
[   64.986966][ T4542] Cannot create hsr debugfs directory
[   65.156576][ T4692] netlink: 'syz.0.377': attribute type 1 has an invalid length.
[   65.172245][   T29] kauditd_printk_skb: 257 callbacks suppressed
[   65.172375][   T29] audit: type=1326 audit(1760089542.882:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   65.206767][ T4542] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   65.222354][   T29] audit: type=1326 audit(1760089542.912:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   65.245775][   T29] audit: type=1326 audit(1760089542.912:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   65.269040][   T29] audit: type=1326 audit(1760089542.912:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   65.292699][   T29] audit: type=1326 audit(1760089542.912:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   65.316032][   T29] audit: type=1326 audit(1760089542.912:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   65.339454][   T29] audit: type=1400 audit(1760089542.912:928): avc:  denied  { create } for  pid=4677 comm="syz.4.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   65.341988][ T4542] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   65.358756][   T29] audit: type=1326 audit(1760089542.912:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   65.388981][   T29] audit: type=1326 audit(1760089542.912:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   65.412503][   T29] audit: type=1326 audit(1760089542.912:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   65.438757][ T4542] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   65.448405][ T4542] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   65.490364][ T4542] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.497710][ T4542] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.505212][ T4542] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.512314][ T4542] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.545506][ T4542] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.557845][ T2075] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.566670][ T2075] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.606245][ T4542] 8021q: adding VLAN 0 to HW filter on device team0
[   65.616815][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.624220][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.635951][ T2075] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.643109][ T2075] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.666940][ T4542] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.677402][ T4542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.736271][ T4542] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.849771][ T4542] veth0_vlan: entered promiscuous mode
[   65.858130][ T4542] veth1_vlan: entered promiscuous mode
[   65.875308][ T4542] veth0_macvtap: entered promiscuous mode
[   65.883866][ T4542] veth1_macvtap: entered promiscuous mode
[   65.895428][ T4542] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.908238][ T4542] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.919654][ T1979] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.941108][ T1979] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.961108][ T1979] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.977060][ T1979] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.119855][ T4750] netlink: 'syz.4.387': attribute type 13 has an invalid length.
[   66.138254][ T4749] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[   66.144890][ T4749] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   66.152673][ T4749] vhci_hcd vhci_hcd.0: Device attached
[   66.174199][ T4752] vhci_hcd: connection closed
[   66.179473][ T2075] vhci_hcd: stop threads
[   66.188643][ T2075] vhci_hcd: release socket
[   66.193220][ T2075] vhci_hcd: disconnect device
[   66.217006][ T4750] loop4: detected capacity change from 0 to 256
[   66.496905][ T4772] loop4: detected capacity change from 0 to 512
[   66.543077][ T4772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.558314][ T4772] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   66.597034][ T4772] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 18: comm syz.4.393: lblock 23 mapped to illegal pblock 18 (length 1)
[   66.620561][ T4772] EXT4-fs (loop4): Remounting filesystem read-only
[   66.660482][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.665376][ T4791] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[   66.676230][ T4791] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   66.683917][ T4791] vhci_hcd vhci_hcd.0: Device attached
[   66.693913][ T4792] vhci_hcd: connection closed
[   66.699070][   T52] vhci_hcd: stop threads
[   66.708170][   T52] vhci_hcd: release socket
[   66.712805][   T52] vhci_hcd: disconnect device
[   66.757455][ T4797] mmap: syz.0.403 (4797) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   67.050645][ T4822] xt_CT: You must specify a L4 protocol and not use inversions on it
[   67.119846][ T4832] netlink: 'syz.0.415': attribute type 13 has an invalid length.
[   67.222069][ T4835] ieee802154 phy1 wpan1: encryption failed: -22
[   67.260930][ T4839] FAULT_INJECTION: forcing a failure.
[   67.260930][ T4839] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   67.274727][ T4839] CPU: 1 UID: 0 PID: 4839 Comm: syz.1.418 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   67.274763][ T4839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   67.274779][ T4839] Call Trace:
[   67.274787][ T4839]  <TASK>
[   67.274796][ T4839]  __dump_stack+0x1d/0x30
[   67.274871][ T4839]  dump_stack_lvl+0xe8/0x140
[   67.274904][ T4839]  dump_stack+0x15/0x1b
[   67.274993][ T4839]  should_fail_ex+0x265/0x280
[   67.275032][ T4839]  should_fail+0xb/0x20
[   67.275073][ T4839]  should_fail_usercopy+0x1a/0x20
[   67.275095][ T4839]  _copy_to_user+0x20/0xa0
[   67.275170][ T4839]  simple_read_from_buffer+0xb5/0x130
[   67.275293][ T4839]  proc_fail_nth_read+0x10e/0x150
[   67.275334][ T4839]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   67.275371][ T4839]  vfs_read+0x1a5/0x770
[   67.275427][ T4839]  ? __rcu_read_unlock+0x4f/0x70
[   67.275459][ T4839]  ? __fget_files+0x184/0x1c0
[   67.275570][ T4839]  ksys_read+0xda/0x1a0
[   67.275601][ T4839]  __x64_sys_read+0x40/0x50
[   67.275661][ T4839]  x64_sys_call+0x27c0/0x3000
[   67.275683][ T4839]  do_syscall_64+0xd2/0x200
[   67.275721][ T4839]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   67.275757][ T4839]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   67.275787][ T4839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.275829][ T4839] RIP: 0033:0x7fe238a4d8dc
[   67.275849][ T4839] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   67.275892][ T4839] RSP: 002b:00007fe2374af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   67.275917][ T4839] RAX: ffffffffffffffda RBX: 00007fe238ca5fa0 RCX: 00007fe238a4d8dc
[   67.275976][ T4839] RDX: 000000000000000f RSI: 00007fe2374af0a0 RDI: 0000000000000007
[   67.275992][ T4839] RBP: 00007fe2374af090 R08: 0000000000000000 R09: 0000000000000000
[   67.276021][ T4839] R10: 0000000000000042 R11: 0000000000000246 R12: 0000000000000001
[   67.276037][ T4839] R13: 00007fe238ca6038 R14: 00007fe238ca5fa0 R15: 00007ffffec20398
[   67.276063][ T4839]  </TASK>
[   67.775233][ T4858] __nla_validate_parse: 5 callbacks suppressed
[   67.775249][ T4858] netlink: 36 bytes leftover after parsing attributes in process `syz.3.419'.
[   67.924364][ T4860] loop1: detected capacity change from 0 to 2048
[   68.029389][ T4860]  loop1: p2 p3 p7
[   68.166482][ T4867] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[   68.173221][ T4867] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   68.180943][ T4867] vhci_hcd vhci_hcd.0: Device attached
[   68.218884][ T4865] bond1: entered promiscuous mode
[   68.224080][ T4865] bond1: entered allmulticast mode
[   68.226199][ T4869] vhci_hcd: connection closed
[   68.230261][ T4865] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.230573][ T1979] vhci_hcd: stop threads
[   68.245908][ T1979] vhci_hcd: release socket
[   68.250430][ T1979] vhci_hcd: disconnect device
[   68.257261][ T4865] bond1 (unregistering): Released all slaves
[   68.333124][ T4875] FAULT_INJECTION: forcing a failure.
[   68.333124][ T4875] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   68.346722][ T4875] CPU: 1 UID: 0 PID: 4875 Comm: syz.0.427 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   68.346823][ T4875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   68.346836][ T4875] Call Trace:
[   68.346842][ T4875]  <TASK>
[   68.346906][ T4875]  __dump_stack+0x1d/0x30
[   68.346927][ T4875]  dump_stack_lvl+0xe8/0x140
[   68.347028][ T4875]  dump_stack+0x15/0x1b
[   68.347050][ T4875]  should_fail_ex+0x265/0x280
[   68.347089][ T4875]  should_fail+0xb/0x20
[   68.347119][ T4875]  should_fail_usercopy+0x1a/0x20
[   68.347167][ T4875]  _copy_from_user+0x1c/0xb0
[   68.347199][ T4875]  ___sys_sendmsg+0xc1/0x1d0
[   68.347276][ T4875]  __x64_sys_sendmsg+0xd4/0x160
[   68.347311][ T4875]  x64_sys_call+0x191e/0x3000
[   68.347332][ T4875]  do_syscall_64+0xd2/0x200
[   68.347377][ T4875]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   68.347413][ T4875]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   68.347436][ T4875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.347488][ T4875] RIP: 0033:0x7fced19beec9
[   68.347536][ T4875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.347561][ T4875] RSP: 002b:00007fced041f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   68.347587][ T4875] RAX: ffffffffffffffda RBX: 00007fced1c15fa0 RCX: 00007fced19beec9
[   68.347603][ T4875] RDX: 0000000004004881 RSI: 0000200000000600 RDI: 0000000000000007
[   68.347617][ T4875] RBP: 00007fced041f090 R08: 0000000000000000 R09: 0000000000000000
[   68.347629][ T4875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   68.347641][ T4875] R13: 00007fced1c16038 R14: 00007fced1c15fa0 R15: 00007ffd47803b08
[   68.347728][ T4875]  </TASK>
[   68.663297][ T4884] loop4: detected capacity change from 0 to 128
[   68.871793][ T4904] syz.0.438 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   68.911163][ T4906] netlink: 'syz.5.439': attribute type 11 has an invalid length.
[   68.926710][ T4909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.433'.
[   68.936633][ T4906] hsr0: entered promiscuous mode
[   68.946671][ T4910] loop4: detected capacity change from 0 to 2048
[   68.985005][ T4906] loop5: detected capacity change from 0 to 2048
[   68.999805][ T4910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.043165][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.257054][ T4924] netlink: 36 bytes leftover after parsing attributes in process `syz.0.441'.
[   69.698223][ T4939] loop1: detected capacity change from 0 to 2364
[   69.718778][ T4939] iso9660: Bad value for 'gid'
[   69.723916][ T4939] iso9660: Bad value for 'gid'
[   69.763928][ T4945] loop5: detected capacity change from 0 to 2048
[   69.840437][ T4945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.864493][ T4950] netlink: 'syz.0.454': attribute type 13 has an invalid length.
[   69.868460][ T4952] loop1: detected capacity change from 0 to 128
[   69.896203][ T4542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.026368][ T4961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4961 comm=syz.0.458
[   70.044800][ T4962] netlink: 3672 bytes leftover after parsing attributes in process `syz.0.458'.
[   70.073870][ T4962] netlink: 3672 bytes leftover after parsing attributes in process `syz.0.458'.
[   70.083170][ T4962] netlink: 3672 bytes leftover after parsing attributes in process `syz.0.458'.
[   70.092910][ T4962] netlink: 3672 bytes leftover after parsing attributes in process `syz.0.458'.
[   70.102327][ T4962] netlink: 3672 bytes leftover after parsing attributes in process `syz.0.458'.
[   70.112003][ T4962] netlink: 3672 bytes leftover after parsing attributes in process `syz.0.458'.
[   70.121998][ T4962] netlink: 3672 bytes leftover after parsing attributes in process `syz.0.458'.
[   70.166743][ T4968] FAULT_INJECTION: forcing a failure.
[   70.166743][ T4968] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   70.180039][ T4968] CPU: 1 UID: 0 PID: 4968 Comm: syz.5.459 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   70.180098][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   70.180114][ T4968] Call Trace:
[   70.180122][ T4968]  <TASK>
[   70.180132][ T4968]  __dump_stack+0x1d/0x30
[   70.180158][ T4968]  dump_stack_lvl+0xe8/0x140
[   70.180229][ T4968]  dump_stack+0x15/0x1b
[   70.180249][ T4968]  should_fail_ex+0x265/0x280
[   70.180284][ T4968]  should_fail+0xb/0x20
[   70.180386][ T4968]  should_fail_usercopy+0x1a/0x20
[   70.180470][ T4968]  _copy_from_user+0x1c/0xb0
[   70.180503][ T4968]  __sys_bpf+0x183/0x7c0
[   70.180586][ T4968]  __x64_sys_bpf+0x41/0x50
[   70.180624][ T4968]  x64_sys_call+0x2aee/0x3000
[   70.180646][ T4968]  do_syscall_64+0xd2/0x200
[   70.180671][ T4968]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   70.180729][ T4968]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   70.180758][ T4968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.180781][ T4968] RIP: 0033:0x7f7ebf96eec9
[   70.180795][ T4968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   70.180814][ T4968] RSP: 002b:00007f7ebe3cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   70.180864][ T4968] RAX: ffffffffffffffda RBX: 00007f7ebfbc5fa0 RCX: 00007f7ebf96eec9
[   70.180877][ T4968] RDX: 000000000000000c RSI: 0000200000000500 RDI: 000000000000000a
[   70.180889][ T4968] RBP: 00007f7ebe3cf090 R08: 0000000000000000 R09: 0000000000000000
[   70.180901][ T4968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   70.180979][ T4968] R13: 00007f7ebfbc6038 R14: 00007f7ebfbc5fa0 R15: 00007ffe1d5abc38
[   70.180999][ T4968]  </TASK>
[   70.387068][   T29] kauditd_printk_skb: 365 callbacks suppressed
[   70.387088][   T29] audit: type=1400 audit(1760090316.187:1297): avc:  denied  { write } for  pid=4971 comm="syz.0.461" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   70.430729][ T4974] netlink: 'syz.5.462': attribute type 10 has an invalid length.
[   70.446982][ T4974] team0: Port device dummy0 added
[   70.454772][ T4974] netlink: 'syz.5.462': attribute type 10 has an invalid length.
[   70.463444][ T4974] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   70.474537][ T4974] team0: Failed to send options change via netlink (err -105)
[   70.482670][ T4974] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   70.492097][ T4974] team0: Port device dummy0 removed
[   70.501760][ T4974] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   70.533268][ T4979] loop4: detected capacity change from 0 to 2364
[   70.540549][   T29] audit: type=1400 audit(1760090316.345:1298): avc:  denied  { search } for  pid=4973 comm="syz.5.462" name="/" dev="configfs" ino=1993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   70.542643][ T4979] iso9660: Bad value for 'gid'
[   70.562912][   T29] audit: type=1400 audit(1760090316.345:1299): avc:  denied  { setattr } for  pid=4973 comm="syz.5.462" name="/" dev="configfs" ino=1993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   70.562977][   T29] audit: type=1400 audit(1760090316.345:1300): avc:  denied  { ioctl } for  pid=4973 comm="syz.5.462" path="socket:[10552]" dev="sockfs" ino=10552 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   70.616545][ T4979] iso9660: Bad value for 'gid'
[   70.646892][ T4983] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[   70.653893][ T4983] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   70.661646][ T4983] vhci_hcd vhci_hcd.0: Device attached
[   70.678949][ T4984] vhci_hcd: connection closed
[   70.679195][ T2075] vhci_hcd: stop threads
[   70.679222][   T29] audit: type=1326 audit(1760090316.493:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.5.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebf96eec9 code=0x7ffc0000
[   70.684005][ T2075] vhci_hcd: release socket
[   70.688434][   T29] audit: type=1326 audit(1760090316.493:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.5.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f7ebf96eec9 code=0x7ffc0000
[   70.711644][ T2075] vhci_hcd: disconnect device
[   70.744274][   T29] audit: type=1326 audit(1760090316.493:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.5.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebf96eec9 code=0x7ffc0000
[   70.744467][ T4987] loop4: detected capacity change from 0 to 128
[   70.767995][   T29] audit: type=1326 audit(1760090316.493:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.5.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebf96eec9 code=0x7ffc0000
[   70.837761][   T29] audit: type=1326 audit(1760090316.641:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4986 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   70.861477][   T29] audit: type=1326 audit(1760090316.641:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4986 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0be1eec9 code=0x7ffc0000
[   70.996594][ T5007] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[   71.003430][ T5007] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   71.011298][ T5007] vhci_hcd vhci_hcd.0: Device attached
[   71.031243][ T5008] vhci_hcd: connection closed
[   71.031634][ T1979] vhci_hcd: stop threads
[   71.041726][ T1979] vhci_hcd: release socket
[   71.046192][ T1979] vhci_hcd: disconnect device
[   71.492433][ T5015] netlink: 'syz.5.476': attribute type 10 has an invalid length.
[   71.501156][ T5015] batadv0: entered promiscuous mode
[   71.506455][ T5015] batadv0: entered allmulticast mode
[   71.515714][ T5015] bridge0: port 3(batadv0) entered blocking state
[   71.522409][ T5015] bridge0: port 3(batadv0) entered disabled state
[   71.532515][ T5015] bridge0: port 3(batadv0) entered blocking state
[   71.539213][ T5015] bridge0: port 3(batadv0) entered forwarding state
[   71.590368][ T5015] loop5: detected capacity change from 0 to 1024
[   71.686209][ T5015] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   72.023332][ T1454] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   72.032740][ T1454] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   72.050072][ T5015] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.149518][ T5015] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.476: lblock 0 mapped to illegal pblock 0 (length 1)
[   72.166349][ T5015] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   72.178895][ T5015] EXT4-fs (loop5): This should not happen!! Data will be lost
[   72.178895][ T5015] 
[   72.205777][ T5028] loop4: detected capacity change from 0 to 128
[   72.214294][ T5015] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.476: lblock 3 mapped to illegal pblock 3 (length 3)
[   72.231012][ T5028] bio_check_eod: 60 callbacks suppressed
[   72.231032][ T5028] syz.4.479: attempt to access beyond end of device
[   72.231032][ T5028] loop4: rw=2049, sector=138, nr_sectors = 16 limit=128
[   72.251788][ T5028] syz.4.479: attempt to access beyond end of device
[   72.251788][ T5028] loop4: rw=2049, sector=170, nr_sectors = 6 limit=128
[   72.265374][ T5015] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   72.265411][ T5015] EXT4-fs (loop5): This should not happen!! Data will be lost
[   72.265411][ T5015] 
[   72.296177][ T5028] syz.4.479: attempt to access beyond end of device
[   72.296177][ T5028] loop4: rw=2049, sector=174, nr_sectors = 2 limit=128
[   72.309733][ T5028] buffer_io_error: 34 callbacks suppressed
[   72.309752][ T5028] Buffer I/O error on dev loop4, logical block 87, lost async page write
[   72.327043][ T5028] syz.4.479: attempt to access beyond end of device
[   72.327043][ T5028] loop4: rw=2049, sector=176, nr_sectors = 2 limit=128
[   72.340724][ T5028] Buffer I/O error on dev loop4, logical block 88, lost async page write
[   72.349507][ T5028] syz.4.479: attempt to access beyond end of device
[   72.349507][ T5028] loop4: rw=2049, sector=178, nr_sectors = 6 limit=128
[   72.363351][ T5028] syz.4.479: attempt to access beyond end of device
[   72.363351][ T5028] loop4: rw=2049, sector=182, nr_sectors = 2 limit=128
[   72.376727][ T5028] Buffer I/O error on dev loop4, logical block 91, lost async page write
[   72.385301][ T5028] syz.4.479: attempt to access beyond end of device
[   72.385301][ T5028] loop4: rw=2049, sector=184, nr_sectors = 2 limit=128
[   72.398712][ T5028] Buffer I/O error on dev loop4, logical block 92, lost async page write
[   72.432434][ T5028] syz.4.479: attempt to access beyond end of device
[   72.432434][ T5028] loop4: rw=2049, sector=202, nr_sectors = 6 limit=128
[   72.446761][ T5028] syz.4.479: attempt to access beyond end of device
[   72.446761][ T5028] loop4: rw=2049, sector=206, nr_sectors = 2 limit=128
[   72.460401][ T5028] Buffer I/O error on dev loop4, logical block 103, lost async page write
[   72.474576][ T5028] syz.4.479: attempt to access beyond end of device
[   72.474576][ T5028] loop4: rw=2049, sector=208, nr_sectors = 2 limit=128
[   72.483030][ T5045] loop1: detected capacity change from 0 to 128
[   72.488089][ T5028] Buffer I/O error on dev loop4, logical block 104, lost async page write
[   72.508168][ T5028] Buffer I/O error on dev loop4, logical block 107, lost async page write
[   72.517091][ T5028] Buffer I/O error on dev loop4, logical block 108, lost async page write
[   72.526852][ T5028] Buffer I/O error on dev loop4, logical block 119, lost async page write
[   72.562230][ T5028] Buffer I/O error on dev loop4, logical block 120, lost async page write
[   72.567356][ T2075] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm kworker/u8:7: lblock 0 mapped to illegal pblock 0 (length 1)
[   72.594519][ T5051] netlink: 'syz.1.486': attribute type 13 has an invalid length.
[   72.609859][ T2075] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   72.622290][ T2075] EXT4-fs (loop5): This should not happen!! Data will be lost
[   72.622290][ T2075] 
[   72.640885][ T2075] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 4: comm kworker/u8:7: lblock 4 mapped to illegal pblock 4 (length 2)
[   72.657091][ T2075] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117
[   72.669669][ T2075] EXT4-fs (loop5): This should not happen!! Data will be lost
[   72.669669][ T2075] 
[   72.681215][ T4542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   72.687350][ T5051] loop1: detected capacity change from 0 to 256
[   72.734261][ T5055] loop5: detected capacity change from 0 to 128
[   72.763310][ T5055] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   72.790759][ T5055] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   72.829542][ T5055] EXT4-fs (loop5): shut down requested (0)
[   72.872305][ T4542] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   72.917760][ T5076] netlink: 'syz.0.496': attribute type 13 has an invalid length.
[   72.943595][ T5078] loop5: detected capacity change from 0 to 128
[   72.979502][ T5080] loop1: detected capacity change from 0 to 512
[   72.986424][ T5080] EXT4-fs: Ignoring removed oldalloc option
[   73.036731][ T5080] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   73.070500][ T5080] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.495: invalid indirect mapped block 4294967295 (level 0)
[   73.129768][ T5080] EXT4-fs (loop1): Remounting filesystem read-only
[   73.153484][ T5080] EXT4-fs (loop1): 1 orphan inode deleted
[   73.159469][ T5080] EXT4-fs (loop1): 1 truncate cleaned up
[   73.173623][ T5088] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[   73.180265][ T5088] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   73.188051][ T5088] vhci_hcd vhci_hcd.0: Device attached
[   73.188706][ T5080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.211258][ T5087] netlink: 'syz.3.500': attribute type 21 has an invalid length.
[   73.219246][ T5087] __nla_validate_parse: 61 callbacks suppressed
[   73.219269][ T5087] netlink: 132 bytes leftover after parsing attributes in process `syz.3.500'.
[   73.233142][ T5089] vhci_hcd: connection closed
[   73.235118][   T12] vhci_hcd: stop threads
[   73.244254][   T12] vhci_hcd: release socket
[   73.248713][   T12] vhci_hcd: disconnect device
[   73.340832][ T5097] netlink: 132 bytes leftover after parsing attributes in process `syz.3.503'.
[   73.449036][ T5105] netlink: 'syz.3.508': attribute type 13 has an invalid length.
[   73.526428][ T5114] FAULT_INJECTION: forcing a failure.
[   73.526428][ T5114] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   73.539837][ T5114] CPU: 0 UID: 0 PID: 5114 Comm: syz.0.511 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   73.539871][ T5114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   73.539956][ T5114] Call Trace:
[   73.539963][ T5114]  <TASK>
[   73.539971][ T5114]  __dump_stack+0x1d/0x30
[   73.539994][ T5114]  dump_stack_lvl+0xe8/0x140
[   73.540014][ T5114]  dump_stack+0x15/0x1b
[   73.540031][ T5114]  should_fail_ex+0x265/0x280
[   73.540079][ T5114]  should_fail+0xb/0x20
[   73.540201][ T5114]  should_fail_usercopy+0x1a/0x20
[   73.540222][ T5114]  strncpy_from_user+0x25/0x230
[   73.540347][ T5114]  ? kmem_cache_alloc_noprof+0x242/0x480
[   73.540375][ T5114]  ? getname_flags+0x80/0x3b0
[   73.540408][ T5114]  getname_flags+0xae/0x3b0
[   73.540495][ T5114]  __x64_sys_rename+0x33/0x70
[   73.540606][ T5114]  x64_sys_call+0x1f9/0x3000
[   73.540629][ T5114]  do_syscall_64+0xd2/0x200
[   73.540697][ T5114]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   73.540743][ T5114]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   73.540765][ T5114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.540788][ T5114] RIP: 0033:0x7fced19beec9
[   73.540803][ T5114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   73.540822][ T5114] RSP: 002b:00007fced041f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[   73.540909][ T5114] RAX: ffffffffffffffda RBX: 00007fced1c15fa0 RCX: 00007fced19beec9
[   73.540922][ T5114] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000080
[   73.540935][ T5114] RBP: 00007fced041f090 R08: 0000000000000000 R09: 0000000000000000
[   73.540947][ T5114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   73.540960][ T5114] R13: 00007fced1c16038 R14: 00007fced1c15fa0 R15: 00007ffd47803b08
[   73.541041][ T5114]  </TASK>
[   73.737024][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.752420][ T5119] netlink: 'syz.0.513': attribute type 21 has an invalid length.
[   73.760469][ T5119] netlink: 132 bytes leftover after parsing attributes in process `syz.0.513'.
[   73.855865][ T5129] loop1: detected capacity change from 0 to 2364
[   73.865808][ T5133] loop5: detected capacity change from 0 to 1024
[   73.872775][ T5129] iso9660: Bad value for 'gid'
[   73.877714][ T5129] iso9660: Bad value for 'gid'
[   73.889972][ T5133] EXT4-fs: Ignoring removed orlov option
[   73.915654][ T5133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.955643][ T5143] loop1: detected capacity change from 0 to 1024
[   73.957700][ T4542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.964636][ T5143] EXT4-fs: Ignoring removed oldalloc option
[   73.977381][ T5143] EXT4-fs: Ignoring removed bh option
[   74.001843][ T5143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.058313][ T5153] pim6reg1: entered promiscuous mode
[   74.063779][ T5153] pim6reg1: entered allmulticast mode
[   74.087713][ T5148] ==================================================================
[   74.095849][ T5148] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark
[   74.103875][ T5148] 
[   74.106213][ T5148] write to 0xffff888105979844 of 4 bytes by task 5143 on cpu 1:
[   74.113869][ T5148]  xas_set_mark+0x12b/0x140
[   74.118400][ T5148]  tag_pages_for_writeback+0xc2/0x290
[   74.123852][ T5148]  ext4_do_writepages+0x6b2/0x2750
[   74.129031][ T5148]  ext4_writepages+0x176/0x300
[   74.133822][ T5148]  do_writepages+0x1c6/0x310
[   74.138447][ T5148]  file_write_and_wait_range+0x156/0x2c0
[   74.144126][ T5148]  generic_buffers_fsync_noflush+0x45/0x120
[   74.150066][ T5148]  ext4_sync_file+0x1ab/0x690
[   74.154873][ T5148]  vfs_fsync_range+0x10d/0x130
[   74.159765][ T5148]  ext4_buffered_write_iter+0x34f/0x3c0
[   74.165451][ T5148]  ext4_file_write_iter+0x387/0xf60
[   74.170705][ T5148]  iter_file_splice_write+0x663/0xa60
[   74.176164][ T5148]  direct_splice_actor+0x153/0x2a0
[   74.181394][ T5148]  splice_direct_to_actor+0x30f/0x680
[   74.186815][ T5148]  do_splice_direct+0xda/0x150
[   74.191746][ T5148]  do_sendfile+0x380/0x650
[   74.196226][ T5148]  __x64_sys_sendfile64+0x105/0x150
[   74.201581][ T5148]  x64_sys_call+0x2bb4/0x3000
[   74.206385][ T5148]  do_syscall_64+0xd2/0x200
[   74.211036][ T5148]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.217075][ T5148] 
[   74.219435][ T5148] read to 0xffff888105979844 of 4 bytes by task 5148 on cpu 0:
[   74.227007][ T5148]  file_write_and_wait_range+0x10e/0x2c0
[   74.232888][ T5148]  generic_buffers_fsync_noflush+0x45/0x120
[   74.239261][ T5148]  ext4_sync_file+0x1ab/0x690
[   74.244188][ T5148]  vfs_fsync_range+0x10d/0x130
[   74.249019][ T5148]  ext4_buffered_write_iter+0x34f/0x3c0
[   74.254774][ T5148]  ext4_file_write_iter+0x387/0xf60
[   74.260217][ T5148]  iter_file_splice_write+0x663/0xa60
[   74.265930][ T5148]  direct_splice_actor+0x153/0x2a0
[   74.271422][ T5148]  splice_direct_to_actor+0x30f/0x680
[   74.277410][ T5148]  do_splice_direct+0xda/0x150
[   74.282308][ T5148]  do_sendfile+0x380/0x650
[   74.286954][ T5148]  __x64_sys_sendfile64+0x105/0x150
[   74.292207][ T5148]  x64_sys_call+0x2bb4/0x3000
[   74.297031][ T5148]  do_syscall_64+0xd2/0x200
[   74.301599][ T5148]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.307531][ T5148] 
[   74.309880][ T5148] value changed: 0x02000021 -> 0x04000021
[   74.315625][ T5148] 
[   74.318020][ T5148] Reported by Kernel Concurrency Sanitizer on:
[   74.324298][ T5148] CPU: 0 UID: 0 PID: 5148 Comm: syz.1.522 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   74.334311][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   74.344398][ T5148] ==================================================================
[   74.747347][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.