last executing test programs:

6.338352409s ago: executing program 1 (id=492):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
recvmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000640)=""/170, 0xaa}], 0x1}, 0x3}], 0x1, 0x26, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x110, 0x4)
sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x16)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10)
inotify_rm_watch(0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x21c91c, &(0x7f0000000900)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@i_version}, {@noload}, {@jqfmt_vfsold}, {@usrjquota}, {@nomblk_io_submit}, {@usrjquota}, {@commit={'commit', 0x3d, 0xc}}, {@dax_inode, 0x32}], [{@context={'context', 0x3d, 'user_u'}}]}, 0x1e, 0x4ea, &(0x7f00000009c0)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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")
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x141000)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0xc0a85320, &(0x7f00000000c0)={0x1080})
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r2, 0x58, &(0x7f00000003c0)}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r1, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa0, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xc3, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
process_madvise(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000001580)="9c2dc9f0a30e7171163232b3479dad96999f5f62553185f08053587e3221920bc0fae1de390ca57b8c187c6373b5c856f2c15f5529cd06a15f6045621a7654387eb14c3195f2362f6073a2c7dec41a2a95b49ae7d37546e515338f18", 0x5c}, {&(0x7f0000001600)="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", 0x1000}], 0x2, 0xb, 0x0)

6.238224352s ago: executing program 1 (id=496):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000104010200000000000000000000000006000640000600000500010001"], 0x24}}, 0x840)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r1, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2ffffffffffffff7f100070bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095e057608cf6f430ea6de859b26572d7"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000001140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0xa}}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f00000002c0), 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r10, 0x0, 0x2}, 0x18)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001d00)=@newtaction={0x88c, 0x30, 0x12f, 0x3, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xb84, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x3, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x100, 0x5, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffff002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xf, 0xd, 0x0, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe8d0, 0x101, 0x8, 0x200, 0x3, 0x7f, 0x3, 0xffffffff, 0x3, 0x80000001, 0x8000000b, 0x1, 0xfffff0c2, 0x7, 0xa042, 0xfffffc21, 0xffff7ffb, 0x4, 0x4, 0x400, 0x8, 0x7, 0x5d3b2fc3, 0x87f, 0x7ff, 0x5, 0x5, 0x4, 0x1, 0xa0, 0xb, 0xf14, 0xae3, 0x7f, 0x7, 0x1, 0x1, 0x5, 0x1, 0x5, 0x4, 0x1, 0x8, 0x7, 0x8, 0x40000000, 0x5, 0x0, 0x40, 0x1, 0x5, 0x1, 0x9, 0x1ff, 0x0, 0x9, 0x1, 0x6, 0x7fff, 0xfffffffd, 0x3a, 0x5, 0x9, 0x3feb, 0x0, 0x5, 0xeb5, 0x1ff, 0x5, 0x8, 0x0, 0x0, 0x7, 0x4, 0x2597, 0x9, 0x7, 0x4, 0xb8, 0xcb, 0xf, 0x0, 0x2, 0x4, 0x0, 0x27d, 0xc2c, 0x6, 0x1, 0x6, 0x4, 0x0, 0x8, 0x9, 0x10001, 0x3, 0x6, 0x2, 0xc, 0x6, 0x9, 0x3, 0x1c1, 0x3, 0x9, 0x4, 0x3, 0xfffffffa, 0x6, 0x4, 0xa21, 0xffff, 0x3ff, 0x0, 0x8, 0x355a, 0x1, 0x6, 0xffffff60, 0xee, 0x1000, 0x6, 0xfffffffb, 0x2, 0x7, 0x0, 0x2, 0xe0, 0x7f, 0xea50, 0x5, 0x2, 0x1000, 0x8, 0x0, 0x8, 0x1000, 0x7, 0x5, 0xfffffffa, 0x200, 0x7ff, 0xfffffff9, 0xfffffffd, 0x6, 0x1000, 0x8, 0x7ff, 0x81, 0x401, 0xe, 0x0, 0x8, 0x5, 0xfff, 0x1f2, 0x24000, 0x7, 0x100, 0x5, 0x6, 0x7ff, 0x7, 0x1b, 0x3a03, 0x7, 0xffffffff, 0x2, 0x3, 0x5, 0x3, 0x171751e3, 0x5, 0x6, 0x54, 0xfffffffb, 0xfa7, 0x7, 0x60, 0x1, 0x10, 0xcc0b, 0xa, 0x62, 0x8, 0x120000, 0x8, 0x4, 0x1, 0x8001, 0xd, 0x5, 0x5, 0x5c, 0x4, 0x67bd, 0x3866, 0x9, 0xed1, 0x8, 0x5, 0x1, 0x2, 0x2, 0x2, 0x2, 0xb, 0x6, 0xb0c, 0x1, 0x5, 0x5c3b, 0x6, 0xb21, 0x40, 0x9, 0x3, 0x8, 0x3, 0x40000000, 0x2, 0x8, 0x4, 0xfff, 0x80000000, 0x5, 0x2b, 0x0, 0x3, 0x8, 0x9, 0x8001, 0x400, 0x10e, 0x9, 0x101, 0x41a, 0x6, 0x7, 0x6, 0x0, 0x8, 0x6, 0x401, 0xfffffffe, 0xa, 0x0, 0x0, 0x1, 0xfffffff8, 0x9, 0xf87, 0x1, 0x9, 0x5, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x0, 0x1, 0x9, 0x100, {0xc, 0x2, 0x27, 0x2, 0x8000, 0x3}, {0x8, 0x0, 0x7fff, 0x8, 0x1, 0x100}, 0x2, 0x10, 0xe723}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x88c}}, 0xc0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x18)
r12 = socket$inet6(0xa, 0x2, 0x0)
r13 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r13, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
close_range(r12, 0xffffffffffffffff, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x5000)

3.220253354s ago: executing program 1 (id=543):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r0, 0x0, 0xb, &(0x7f00000001c0)=""/2, &(0x7f0000000340)=0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYRESOCT, @ANYRES64=r0], &(0x7f0000000040)='GPL\x00', 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d8}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000940)='+}[@\x00\xbc\x82\xc5\xb1#\xa4\x81\xe8D&h\xaf\x7f\xf1cLG\n\x0e\xee\x17\xbe\xe8\xcb\x9a\xc9')
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
close(r3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10)
getitimer(0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0xd8e1, 0x1, 0x7, 0x7ffc1ffe}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000380)="$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")

3.174629145s ago: executing program 1 (id=545):
socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10)
sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000680)={0x2, 0x5e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000bc0)="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", 0x5ca}, {0x0}], 0x2}}], 0x2, 0xc044)
write$binfmt_misc(r0, 0x0, 0x0)

3.123691056s ago: executing program 1 (id=546):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000e2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x18)
ptrace(0x10, 0x0)
r4 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6)
fallocate(r4, 0x1, 0x2, 0x7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000480)=0x8, 0x3e8, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'gretap0\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000209500"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r9, 0x0, 0x100000000}, 0x18)
r10 = syz_open_dev$sg(&(0x7f0000000380), 0x2, 0x902)
writev(r10, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
read(r10, 0x0, 0x0)
r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r12 = epoll_create(0x7)
epoll_pwait(r12, &(0x7f0000000000)=[{}], 0x1, 0x1, &(0x7f0000000040)={[0x8]}, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r2)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, &(0x7f0000000340))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r13}, 0x10)

2.856707021s ago: executing program 1 (id=551):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8e, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000040000005ed567c6abad00e6267b552b8d9494"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0)
syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r5, 0x0, r4, 0x0, 0x6, 0x0)
pipe2$9p(&(0x7f0000000180), 0x0)
write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file1'}, 0xb)

2.558141887s ago: executing program 4 (id=559):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b4000000100009040000000000000000000022", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004"], 0xb4}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.522349388s ago: executing program 4 (id=560):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})

2.231169324s ago: executing program 4 (id=565):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x8d, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) (fail_nth: 7)

1.895947611s ago: executing program 4 (id=567):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x40000000, 0x0, 0x3}, 0x8})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000240)=[0x0], &(0x7f0000000300)=[0x0, 0x0], <r3=>0x0, 0xb4, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f0000000480), 0x8, 0xce, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffff48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r4, 0x0, 0x5}, 0x18)
openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x4}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0xd, 0x4}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700"], 0x0}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r9}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)

1.759818564s ago: executing program 3 (id=570):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b4000000100009040000000000000000000022", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004"], 0xb4}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.758760274s ago: executing program 3 (id=571):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4024}, 0x4000010)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007})
fcntl$addseals(r0, 0x409, 0xb)
setrlimit(0x40000000000008, &(0x7f0000000000))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x2, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r3}, 0x38)
lsm_set_self_attr(0x69, 0x0, 0x42, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.587891268s ago: executing program 3 (id=572):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0)
r3 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0)
fcntl$setlease(r3, 0x400, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0)

1.569583988s ago: executing program 3 (id=573):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70ae604e2e0000000000", @ANYRES32=0x0, @ANYBLOB="09650000e1cf85731c00128009000100626f6e64000000000c0002800500010005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x9, 0x1c, 0xca, &(0x7f0000000600)})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000080)=""/21, &(0x7f00000000c0)=0x15)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="30000000000000000a010000020000a57e39f540c12c42c100ee7fa2272760c3520104000000d9b82f390000000000d1f4e29c2583e79e4eed2ebadc631b16b8e0399ab991a29302b7e808faa2a9d05efd3fe94a2dcb0e15869baa631cff017fe043b2324b3ebab1295cc42d2626edd60471a2c1e9abc3df8403581e7744f068a9883a2b9a8c6f9fa43000"], 0x30}, 0x2002c404)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x22, 0x2, 0x21)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x80044943, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x2)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xedc623580215bdcd, 0x50, r5, 0x0)
r6 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0xa)
fchdir(r7)
r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x40047459, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000007c0)={'netdevsim0\x00', @broadcast})
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)

1.423083941s ago: executing program 3 (id=577):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e00000065000000500000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) (fail_nth: 14)

1.404742841s ago: executing program 3 (id=578):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='mm_page_alloc\x00', r1, 0x0, 0x100000000}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0x7, 0x9)

673.544146ms ago: executing program 4 (id=586):
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
r4 = socket$pptp(0x18, 0x1, 0x2)
r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
io_uring_setup(0x1ddc, &(0x7f00000000c0)={0x0, 0x45d6})
ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000180)={0x0})
close_range(r4, 0xffffffffffffffff, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26)
close_range(r0, 0xffffffffffffffff, 0x0)

597.615198ms ago: executing program 0 (id=587):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})

554.835029ms ago: executing program 0 (id=589):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001180)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1493cf2c54a75087, 0xac}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040805}, 0x20004094)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r1, <r6=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%-5lx  \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@alu={0x4, 0x1, 0x9, 0x8, 0x1, 0xfffffffffffffffc, 0x4}, @generic={0x7, 0x7, 0x8, 0xfff, 0x71f7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1c5a, 0x7a, &(0x7f0000000100)=""/122, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x2, 0x5, 0x6, 0x6880}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000400)=[r1, r1, r6, r1, r3], &(0x7f0000000580)=[{0x1, 0x1, 0xe}, {0x3, 0x5, 0xe, 0x7}, {0x1, 0x1, 0xd, 0x1}, {0x6, 0x4, 0xd, 0x6}, {0x2, 0x3, 0x10, 0xc}, {0x3, 0x3, 0x3, 0x3}], 0x10, 0x3ff}, 0x94)

471.7903ms ago: executing program 4 (id=590):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r2=>0x0})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f0000000200), 0x4)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000580)='./file0\x00', 0x200a416, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d3166004845160000000000", @ANYRESHEX=r3, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES64=r3], 0x1, 0x2b8, &(0x7f0000000800)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@noquota}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r5, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c7", 0xb)
sendfile(r5, r4, 0x0, 0x3ffff)
sendfile(r5, r4, 0x0, 0x7fffeffd)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000000016089a331736bfc47672aea3ce812dd2afeee7b27c7f3e4e1a3f7467797f2e22724378f81ebedfc6b1135d74c28dc24cc81ce2428bf4f7aff8bec778042bdacad2ffad40d28e01", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r9}, 0x10)
sendmsg$tipc(r7, &(0x7f0000001500)={&(0x7f0000000340)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x2000c041)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10, 0x0, 0x4}, 0x18)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./bus\x00')
bind$can_raw(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

470.935571ms ago: executing program 0 (id=591):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x80000}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
setrlimit(0x9, &(0x7f0000000000))
io_setup(0x2004, &(0x7f0000000680)) (async)
io_setup(0x2004, &(0x7f0000000680))
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]})
munlockall()
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x7fffffffffffffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x814}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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")
chdir(&(0x7f00000000c0)='./file0\x00') (async)
chdir(&(0x7f00000000c0)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)

412.158332ms ago: executing program 0 (id=593):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}}}, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2014c08, &(0x7f0000000140)=ANY=[], 0xfe, 0x6cc, &(0x7f0000000200)="$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")
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="1600"], 0x0)

367.318292ms ago: executing program 0 (id=594):
syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
set_mempolicy(0x3, 0x0, 0x8)
setns(r1, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)

366.721413ms ago: executing program 2 (id=595):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={<r0=>0x0, <r1=>0x0, <r2=>0x0}, &(0x7f00000013c0)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, <r3=>0x0, <r4=>0x0}, &(0x7f0000000180)=0xc)
r5 = socket(0xa, 0x5, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18)
getresuid(&(0x7f0000000e40)=<r9=>0x0, &(0x7f0000000e80), &(0x7f0000000ec0))
stat(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
sendmmsg$unix(r5, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)="b4359ab8682ebe2e50c999452f1855b876c52e962806579b085fe203364d0f91d694a6e887195882f62666668aa1fa15bbde1cf4d9dabdcb6fde800f267a6a752acb4577e5c9e01732ef0537ef5721a74cc7d8e8e88e103f97e7da1e80520031ec064de9d1911702b0f09bd4ccc1cfaaf060b8c6d0de704a82202c792f7e6c5eb4d5aea3e76ef6e841212a1ea0d49fab843e0119500031f0b1e5951c1c08ab23ad3a232181732c6e1ab8f4c825b0ffbfc3ef694dff7ea2ec24afd8efc358ba376ad79293fbdba1408ad19f155c887beb22880790a70ed12027cad34e1b055a220a6906f376b044214872d83183a47ff705c787d0", 0xf4}, {&(0x7f0000000540)="935b05639eb92cd6fff284b8d7e22e3b6b10916661f5481a470b1c88ed9dd9802a0ba21194748bc7532a47b5c386d95ede4ca3fb5e7251b5ed1eb229330103fa2ba66b630d9d1ba77201048a9a812f7d8a341a522dc09ebb81091d0e146f72b265adbaebee4a95091bc395f3523cd2506422e1415e858768407115", 0x7b}, {&(0x7f0000000800)="ce91e2d36ddccac2b52cba51591fa7402f42a444fdb65d614c50372d54f43ea9cfde29486d070b3975c4034e5dcd45dce1667f59d7c77c0e81cac3309a07c7", 0x3f}], 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="1c00000000000000010000000100000097ddb369e494bcd07198ed38776de9237e03c0ebcd36772c174e11e5d90aeabb48a7387dc3589f6095d5dcdda65733ef0cd59b42165fe0f97e67ec622a4b1ffeacde00"/97, @ANYRES32, @ANYRES8=r1, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x8000}}, {{&(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000c40)=[{0xfffffffffffffffe}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYRES32=r8, @ANYRES32=r6, @ANYBLOB="000000001c0000000000000001000000010000004390ea46fb158af26223e5cac46f36a26fcaef7ac1f993c2082ba7f2c51ee231b4f7b5c8a7e12586de46affabc2698559409", @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r8, @ANYRES32, @ANYRES32=r8, @ANYRES32=r7, @ANYRESHEX=r6, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x2c040080}}], 0x2, 0x4004)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmmsg$unix(r11, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0, r3, r4}}}], 0x40, 0x40044}}], 0x1, 0x4)
setgroups(0x7, &(0x7f00000001c0)=[0x0, 0x0, r2, r4, r10, 0x0, 0x0])
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='kmem_cache_free\x00', r13}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYRES32=r13, @ANYRESOCT=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r15}, 0x18)
r16 = socket(0x8000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000600)={'pimreg\x00'})
write(r16, &(0x7f00000002c0)="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", 0xfc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r14}, 0x10)
socket$netlink(0x10, 0x3, 0x10)
r17 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
close(r17)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r17, 0xfe, 0xfffffffffffffffc}, 0x10)

366.269032ms ago: executing program 0 (id=596):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r0, 0x0, 0x5}, 0x18)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x0, 0x2)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_io_uring_setup(0x34b7, &(0x7f0000000000)={0x0, 0x0, 0x30c0}, &(0x7f0000000100), &(0x7f0000000080))
timerfd_create(0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0)

267.811985ms ago: executing program 2 (id=597):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB="08010000160001040000000000000000ac1414aa000000000000000000000000ff02000000000000000000000000000100000fd100000002020080000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000000000000000000000000000000000010000e9f40000000000000000000000000000000000000000000000000000000000000000000000800100008000000000000000000000000000004b0b00000000010100000000000000000000000000000000000000000000090000000000000004000000060000000004000000000000000000000a000000940000000000000000000000ad04000008001f000000000005001900"], 0x108}, 0x1, 0x0, 0x0, 0xa63f3f48d5ff997d}, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f00000004c0)={[{@grpquota}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40c000, 0x5)
r2 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x42, 0x1)
pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8080c61)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')

267.241524ms ago: executing program 2 (id=598):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
close(r0)
r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0'}, 0xb)
fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setuid(r2)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
r4 = getuid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000480)=0xc)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x14)
r7 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r8)
getresgid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=<r9=>0x0)
lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
fstat(r6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
setxattr$system_posix_acl(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x5}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x2}], {0x4, 0x1}, [{0x8, 0x4, r8}, {0x8, 0x2, r9}, {0x8, 0x2, r10}, {0x8, 0x5, r11}], {0x10, 0x2}, {0x20, 0x6}}, 0x74, 0x0)
lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
getresgid(&(0x7f00000008c0)=<r13=>0x0, &(0x7f0000000540), &(0x7f0000000c00))
getgroups(0x7, &(0x7f00000006c0)=[0x0, 0xee01, 0xee01, 0xee00, <r14=>0xee00, 0xee00, 0xee00])
getresgid(&(0x7f0000000700), &(0x7f0000000740)=<r15=>0x0, &(0x7f0000000800))
statx(r0, &(0x7f0000000840)='./file0\x00', 0x6000, 0x80, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0})
stat(&(0x7f0000000880)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0})
setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000010006000000000002000000", @ANYRES32=r2, @ANYBLOB="02000400", @ANYRES32=r3, @ANYBLOB="0a2d0500", @ANYRES32=r4, @ANYBLOB="02000400", @ANYRES32=0xee01, @ANYBLOB="040004000000000008000400", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r11, @ANYBLOB="08000600", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=r13, @ANYBLOB="08000200", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000200", @ANYRES32=r16, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r17, @ANYBLOB="10000000000000002000000000000000"], 0x8c, 0x0)
r18 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r19 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000", @ANYRES32=r18, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r19, 0x0, 0x800000000006}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]})
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

257.137975ms ago: executing program 2 (id=599):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4024}, 0x4000010)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007})
fcntl$addseals(r0, 0x409, 0xb)
setrlimit(0x40000000000008, &(0x7f0000000000))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x2, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r3}, 0x38)
lsm_set_self_attr(0x69, 0x0, 0x42, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x94)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

74.752448ms ago: executing program 2 (id=600):
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x2000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r0, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526894aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae31a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d34264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c66f4f25ffb6d95e07e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e09d24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868db06fd892d68a547477f8ef686ff0dba7b8c18c94d5a89b0567a851750a35d9cc2217db890d89385fcaa00f0f2e524672e6f4c8bedfd5da5b157709b8265cf511dc5846ab1d85916c4a6b2d1b408575982e11230cbac0a9c6eaa03c945645581f678403c2a936c53ae72940aa92bcf22b82c6bc028e0acdddf9fef595f0f7a9f80c0e4c659ced769ec463d26a81e468846761a8e1efd6a031ab7adc8665e267be0065cc315aa23012423ec8b8492d9b50fa4d8c5891959b761eec6dc988532782fda13239c948e27853606e26225c796b79cc04f3d1a5a13000000001e301d82a27010d3ac6119d2b12caf282413672d20c852c50084d7b2d50754775ed63bc18023c31351af76e24788d96103455693b34e09a163a9f613a7e5530222cebd7fa0fbff32dc98088f9fab33648cc38e87dd2dd6ee157f5f018702696915661715c979b7796d4f101a257688af7c148e8615c938c4ca8a69f6fc585ec1dd1857a501f90b161eff23181a11a2b0da4c58d459cbf9db"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
getpid()
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0x7, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000f6cf45d1a8d9bef2502457d4", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002fffac130ee64c799de2d1780000014850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r7, 0x0, 0x80000000000}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ustat(0x801, 0x0)

0s ago: executing program 2 (id=601):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000300)=""/87, 0x57, 0x100, &(0x7f0000000380)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x80, 0x0}}, 0x10)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x26)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="810000000000000000001a000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00')
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r9 = socket(0x11, 0x2, 0x0)
setsockopt(r9, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10)
close(r9)
ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000280)={0x10001, 0x8000, 0x4, 0x5cc})
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000000)='kfree\x00', r10}, 0x18)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000002"], 0x0, 0x26}, 0x28)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000940)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000b80)="7140aa4974d3de08ac80cc76071f3586dd9b0013abb2cbd0678073e40638516303d54a7d74c12221b5960a7fe9b67decc434d3d78bdbd406f562885af8b8bab915661423f99c161d883b05bb3480c11681d39b86ae9a63b477eaf988c9228beb3f4fa6929df7a1ea5751f034105499d34865c4c289cc8fb3dd1001da3a7932fe1b250d", 0x83, r8}, 0x68)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000ffff0000000095"], &(0x7f0000000240)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, r11, 0x8, 0x0, 0x0, 0x60, &(0x7f00000002c0)={0x0, 0x2}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f00000000c0))
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000001240)='./mnt\x00', 0x808086, &(0x7f0000000a80), 0xfe, 0x480, &(0x7f00000004c0)="$eJzs3M1vFOUfAPDvTLul5eXX/hBfQFAUjcSXlpYXOXjBaOJBo4keMJ5qWwhSqKE1EUIUPeDRkHg3Hk38A4wX8WLUk4lXvRsTYriAXFwzuzNl2Td2S18o+/kkQ59nnmeZ5zszz+4zz+xsAD1rd/ZPErE5In6PiOFq9tYKu6t/rl89P/XP1fNTSZTLb/6dVOpdu3p+qqhavG5TnknabPfiOxGTs7MzZ/L82MKp98fmz5577sSpyeMzx2dOTxw+fGD/roFDEweXEtbr9W3K4rq246O5ndtfefvSa1NHL7378zdZ2ea8vDaO5bK7unebenK5N7bGttSkk/41bAhdGYyI7HCVKv1/OPpiaLFsOF7+tOULW5/awDpRLqflDa2LL5SBe1g2mu/S4Io0BFhlxQd9dv1bLKs09LgrXDkSi/MY1/OlWtIfaV6nlF8jrYTsMurohRtfZkus0DwEAECty0ci4tlm4780Hqip97/8HspIRPw/IrZGxH0RsS0i7o+o1H0wIh7qcvv108iN45/y8JIC61A2/nshv7d16/ivGP3FSF+e21KJv5QcOzE7sy/fJ3ujtCHLj7fZxg8v/fZ5q7La8V+2ZNsvxoJ5O/7qr5ugm55cmLyTmGtd+SRiR3+z+JPFMW82Pt4eETuWuI0TT3+9s3HtjcrVx+3jb2MZBuXlryKeqh7/C1EXfyFpeX9y/PlDEwfHBmN2Zt9YcVY0+uXXi2+02v4dxb8Mrlwux8am538Rf/JvMhgxf/bcycr92vku/vP8VtLFPz5rfk1Tqv5Zyvk/kLxVSQ/k6z6cXFg4Mx4xkLzauH7i5muLfFE/O//37mne/7fGzT3xcERkJ/GuiHgkIh7Nj91jEfF4ROxpsxt+evGJ91qVtT7+bWbll1EW/3Tb4x8jWerm8c8SkeaJxTXtEn0nf/yuo/iL/txw/A9UUnvzNZ28/3XSri7PZgAAAFi30sp34JN0dDGdpqOj1e/wb4uN6ezc/MIzx+Y+OD1d/a78SJTSYqZrOI5/G/l86Hg+N1zMj07U5ffn88Zf9A1V8qNTc7PTax089LhNLfp/5s++tW4dsOI8rwW9S/+H3qX/Q+/S/6F36f/Qu5r1/4/XoB3A6rvN5//QarUDWH3G/9C79H/oXfo/9KTqk/BDjc/Gp9H5A/4Sd03i+4H632roKjHQeeVI75KQ75lEKZoW9Xf8YxZLTGxoWlT3RmESEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWKf+CwAA//8A4d+w")

kernel console output (not intermixed with test programs):

ave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.256764][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.267793][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.275006][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.282288][ T3308] bridge_slave_0: entered allmulticast mode
[   31.288857][ T3308] bridge_slave_0: entered promiscuous mode
[   31.295557][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.302738][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.309952][ T3308] bridge_slave_1: entered allmulticast mode
[   31.316546][ T3308] bridge_slave_1: entered promiscuous mode
[   31.323440][ T3299] team0: Port device team_slave_0 added
[   31.339429][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.346575][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.372562][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.391031][ T3299] team0: Port device team_slave_1 added
[   31.397996][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.412855][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.419966][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.427708][ T3306] bridge_slave_0: entered allmulticast mode
[   31.434496][ T3306] bridge_slave_0: entered promiscuous mode
[   31.447821][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.458591][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.473667][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.480844][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.507049][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.517988][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.525120][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.532310][ T3306] bridge_slave_1: entered allmulticast mode
[   31.538967][ T3306] bridge_slave_1: entered promiscuous mode
[   31.551716][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.566588][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.573704][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.599897][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.629103][ T3307] team0: Port device team_slave_0 added
[   31.635670][ T3307] team0: Port device team_slave_1 added
[   31.659125][ T3300] hsr_slave_0: entered promiscuous mode
[   31.665154][ T3300] hsr_slave_1: entered promiscuous mode
[   31.677492][ T3308] team0: Port device team_slave_0 added
[   31.689600][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.699087][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.706252][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.732357][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.755564][ T3308] team0: Port device team_slave_1 added
[   31.763816][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.773687][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.780759][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.806952][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.848205][ T3299] hsr_slave_0: entered promiscuous mode
[   31.854434][ T3299] hsr_slave_1: entered promiscuous mode
[   31.860242][ T3299] debugfs: 'hsr0' already exists in 'hsr'
[   31.866052][ T3299] Cannot create hsr debugfs directory
[   31.877811][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.885209][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.911319][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.922925][ T3306] team0: Port device team_slave_0 added
[   31.929155][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.936173][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.962299][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.989523][ T3306] team0: Port device team_slave_1 added
[   32.009835][ T3307] hsr_slave_0: entered promiscuous mode
[   32.015959][ T3307] hsr_slave_1: entered promiscuous mode
[   32.021740][ T3307] debugfs: 'hsr0' already exists in 'hsr'
[   32.027584][ T3307] Cannot create hsr debugfs directory
[   32.046418][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.053524][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.079581][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.091331][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.098358][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.124353][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.174214][ T3308] hsr_slave_0: entered promiscuous mode
[   32.180217][ T3308] hsr_slave_1: entered promiscuous mode
[   32.186401][ T3308] debugfs: 'hsr0' already exists in 'hsr'
[   32.192148][ T3308] Cannot create hsr debugfs directory
[   32.262320][ T3306] hsr_slave_0: entered promiscuous mode
[   32.268517][ T3306] hsr_slave_1: entered promiscuous mode
[   32.274751][ T3306] debugfs: 'hsr0' already exists in 'hsr'
[   32.280502][ T3306] Cannot create hsr debugfs directory
[   32.394670][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   32.411381][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   32.424266][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   32.438467][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   32.466366][ T3299] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   32.479948][ T3299] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   32.495708][ T3299] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   32.506687][ T3299] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   32.529912][ T3307] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   32.539714][ T3307] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   32.552306][ T3307] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   32.561628][ T3307] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   32.583796][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   32.592787][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   32.602111][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   32.620149][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   32.648516][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.680532][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   32.689580][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   32.699047][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   32.716790][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   32.727489][ T3300] 8021q: adding VLAN 0 to HW filter on device team0
[   32.748949][ T2806] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.756247][ T2806] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.765400][ T2806] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.772553][ T2806] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.784262][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.812025][ T3299] 8021q: adding VLAN 0 to HW filter on device team0
[   32.831074][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.838245][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.858036][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.869779][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.876999][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.891876][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.909443][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.920404][ T3308] 8021q: adding VLAN 0 to HW filter on device team0
[   32.937533][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   32.950264][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.957487][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.973848][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.981148][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.000792][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.020960][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.028280][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.038111][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.045310][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.078159][ T3306] 8021q: adding VLAN 0 to HW filter on device team0
[   33.095134][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.102393][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.116385][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.126389][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.133530][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.236870][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.278753][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.308462][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.342879][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.374387][ T3300] veth0_vlan: entered promiscuous mode
[   33.393471][ T3300] veth1_vlan: entered promiscuous mode
[   33.458725][ T3300] veth0_macvtap: entered promiscuous mode
[   33.474908][ T3306] veth0_vlan: entered promiscuous mode
[   33.496297][ T3300] veth1_macvtap: entered promiscuous mode
[   33.503766][ T3306] veth1_vlan: entered promiscuous mode
[   33.528958][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.539661][ T3307] veth0_vlan: entered promiscuous mode
[   33.551410][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.572379][ T2806] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.582977][ T3308] veth0_vlan: entered promiscuous mode
[   33.588777][ T2806] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.600908][ T3307] veth1_vlan: entered promiscuous mode
[   33.618152][ T2806] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.627563][ T3306] veth0_macvtap: entered promiscuous mode
[   33.637707][ T2806] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.652070][ T3299] veth0_vlan: entered promiscuous mode
[   33.659550][ T3306] veth1_macvtap: entered promiscuous mode
[   33.671550][ T3308] veth1_vlan: entered promiscuous mode
[   33.683875][   T29] kauditd_printk_skb: 9 callbacks suppressed
[   33.683890][   T29] audit: type=1400 audit(1758873051.320:81): avc:  denied  { mounton } for  pid=3300 comm="syz-executor" path="/root/syzkaller.TS23gr/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   33.693964][ T3299] veth1_vlan: entered promiscuous mode
[   33.722123][   T29] audit: type=1400 audit(1758873051.360:82): avc:  denied  { mount } for  pid=3300 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   33.744293][   T29] audit: type=1400 audit(1758873051.360:83): avc:  denied  { mounton } for  pid=3300 comm="syz-executor" path="/root/syzkaller.TS23gr/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   33.755910][ T3308] veth0_macvtap: entered promiscuous mode
[   33.769629][   T29] audit: type=1400 audit(1758873051.360:84): avc:  denied  { mount } for  pid=3300 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   33.777879][ T3308] veth1_macvtap: entered promiscuous mode
[   33.805054][   T29] audit: type=1400 audit(1758873051.360:85): avc:  denied  { mounton } for  pid=3300 comm="syz-executor" path="/root/syzkaller.TS23gr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   33.809804][ T3307] veth0_macvtap: entered promiscuous mode
[   33.831733][   T29] audit: type=1400 audit(1758873051.360:86): avc:  denied  { mounton } for  pid=3300 comm="syz-executor" path="/root/syzkaller.TS23gr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   33.842902][ T3307] veth1_macvtap: entered promiscuous mode
[   33.865437][   T29] audit: type=1400 audit(1758873051.360:87): avc:  denied  { unmount } for  pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   33.891184][   T29] audit: type=1400 audit(1758873051.440:88): avc:  denied  { mounton } for  pid=3300 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   33.895244][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.915415][   T29] audit: type=1400 audit(1758873051.440:89): avc:  denied  { mount } for  pid=3300 comm="syz-executor" name="/" dev="gadgetfs" ino=4695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   33.950323][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   33.957557][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.975968][ T3299] veth0_macvtap: entered promiscuous mode
[   33.991489][   T29] audit: type=1400 audit(1758873051.620:90): avc:  denied  { read write } for  pid=3300 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   33.996551][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.029147][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.044856][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.055871][ T3299] veth1_macvtap: entered promiscuous mode
[   34.064229][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.076311][ T2806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.085386][ T2806] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.124527][ T2806] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.154328][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.161687][   T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.179031][   T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.193899][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.241232][ T3476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   34.253242][ T3478] FAULT_INJECTION: forcing a failure.
[   34.253242][ T3478] name failslab, interval 1, probability 0, space 0, times 1
[   34.256668][ T1398] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.266060][ T3478] CPU: 1 UID: 0 PID: 3478 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   34.266145][ T3478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   34.266165][ T3478] Call Trace:
[   34.266182][ T3478]  <TASK>
[   34.266192][ T3478]  __dump_stack+0x1d/0x30
[   34.266226][ T3478]  dump_stack_lvl+0xe8/0x140
[   34.266251][ T3478]  dump_stack+0x15/0x1b
[   34.266275][ T3478]  should_fail_ex+0x265/0x280
[   34.266384][ T3478]  ? audit_log_d_path+0x8d/0x150
[   34.266426][ T3478]  should_failslab+0x8c/0xb0
[   34.266459][ T3478]  __kmalloc_cache_noprof+0x4c/0x320
[   34.266503][ T3478]  audit_log_d_path+0x8d/0x150
[   34.266544][ T3478]  audit_log_d_path_exe+0x42/0x70
[   34.266643][ T3478]  audit_log_task+0x1e9/0x250
[   34.266682][ T3478]  audit_seccomp+0x61/0x100
[   34.266815][ T3478]  ? __seccomp_filter+0x68c/0x10d0
[   34.266845][ T3478]  __seccomp_filter+0x69d/0x10d0
[   34.266950][ T3478]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   34.267035][ T3478]  ? vfs_write+0x7e8/0x960
[   34.267072][ T3478]  __secure_computing+0x82/0x150
[   34.267106][ T3478]  syscall_trace_enter+0xcf/0x1e0
[   34.267140][ T3478]  do_syscall_64+0xac/0x200
[   34.267187][ T3478]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   34.267231][ T3478]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   34.267269][ T3478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   34.267300][ T3478] RIP: 0033:0x7f7da5c6eec9
[   34.267320][ T3478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   34.267394][ T3478] RSP: 002b:00007f7da46cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f5
[   34.267473][ T3478] RAX: ffffffffffffffda RBX: 00007f7da5ec5fa0 RCX: 00007f7da5c6eec9
[   34.267490][ T3478] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[   34.267507][ T3478] RBP: 00007f7da46cf090 R08: 0000000000000000 R09: 0000000000000000
[   34.267524][ T3478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   34.267541][ T3478] R13: 00007f7da5ec6038 R14: 00007f7da5ec5fa0 R15: 00007ffecc70e248
[   34.267566][ T3478]  </TASK>
[   34.272018][ T3478] loop3: detected capacity change from 0 to 512
[   34.332964][ T3472] loop0: detected capacity change from 0 to 1024
[   34.497755][ T3472] /dev/loop0: Can't open blockdev
[   34.504271][ T3478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.517652][ T3487] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[   34.527501][ T3487] EXT4-fs (loop2): unable to read superblock
[   34.533190][ T3478] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.545848][ T1398] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.554676][ T1398] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.564763][ T3488] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[   34.565084][ T3478] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   34.573325][ T3488] netlink: '+}[@': attribute type 30 has an invalid length.
[   34.588218][ T1398] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.606030][ T1398] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.615006][ T3478] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28
[   34.627643][ T3478] EXT4-fs (loop3): This should not happen!! Data will be lost
[   34.627643][ T3478] 
[   34.637472][ T3478] EXT4-fs (loop3): Total free blocks count 0
[   34.643500][ T3478] EXT4-fs (loop3): Free/Dirty block details
[   34.643613][ T3478] EXT4-fs (loop3): free_blocks=65280
[   34.643626][ T3478] EXT4-fs (loop3): dirty_blocks=2
[   34.643637][ T3478] EXT4-fs (loop3): Block reservation details
[   34.643647][ T3478] EXT4-fs (loop3): i_reserved_data_blocks=2
[   34.698878][ T3488] Zero length message leads to an empty skb
[   34.698890][ T1398] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.698970][ T1398] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.699631][ T1398] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   34.699668][ T1398] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.699739][ T1398] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.699775][ T1398] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.699918][ T1398] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.700009][ T1398] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   34.700127][ T1398] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   34.700159][ T1398] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   34.758711][ T3499] FAULT_INJECTION: forcing a failure.
[   34.758711][ T3499] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   34.758746][ T3499] CPU: 0 UID: 0 PID: 3499 Comm: syz.1.8 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   34.758776][ T3499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   34.758792][ T3499] Call Trace:
[   34.758815][ T3499]  <TASK>
[   34.758824][ T3499]  __dump_stack+0x1d/0x30
[   34.758850][ T3499]  dump_stack_lvl+0xe8/0x140
[   34.758874][ T3499]  dump_stack+0x15/0x1b
[   34.758895][ T3499]  should_fail_ex+0x265/0x280
[   34.758930][ T3499]  should_fail+0xb/0x20
[   34.758956][ T3499]  should_fail_usercopy+0x1a/0x20
[   34.758987][ T3499]  _copy_from_user+0x1c/0xb0
[   34.759027][ T3499]  memdup_user+0x5e/0xd0
[   34.759123][ T3499]  proc_pid_attr_write+0x15e/0x220
[   34.759150][ T3499]  ? __pfx_proc_pid_attr_write+0x10/0x10
[   34.759180][ T3499]  vfs_write+0x269/0x960
[   34.759207][ T3499]  ? __rcu_read_unlock+0x4f/0x70
[   34.759251][ T3499]  ? __fget_files+0x184/0x1c0
[   34.759282][ T3499]  ksys_write+0xda/0x1a0
[   34.759316][ T3499]  __x64_sys_write+0x40/0x50
[   34.759339][ T3499]  x64_sys_call+0x27fe/0x2ff0
[   34.759360][ T3499]  do_syscall_64+0xd2/0x200
[   34.759442][ T3499]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   34.759471][ T3499]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   34.759504][ T3499]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   34.759547][ T3499] RIP: 0033:0x7ff4d8e4eec9
[   34.759566][ T3499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   34.759611][ T3499] RSP: 002b:00007ff4d78af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   34.759631][ T3499] RAX: ffffffffffffffda RBX: 00007ff4d90a5fa0 RCX: 00007ff4d8e4eec9
[   34.759645][ T3499] RDX: 000000000000001d RSI: 0000200000000100 RDI: 0000000000000004
[   34.759660][ T3499] RBP: 00007ff4d78af090 R08: 0000000000000000 R09: 0000000000000000
[   34.759690][ T3499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   34.759705][ T3499] R13: 00007ff4d90a6038 R14: 00007ff4d90a5fa0 R15: 00007ffd9dd46098
[   34.759726][ T3499]  </TASK>
[   34.840513][ T3504] bridge_slave_0: left allmulticast mode
[   34.870903][ T3507] netlink: 'syz.4.5': attribute type 10 has an invalid length.
[   34.877618][ T3504] bridge_slave_0: left promiscuous mode
[   34.886498][ T3507] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5'.
[   35.127826][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.128163][ T3478] syz.3.4 (3478) used greatest stack depth: 10120 bytes left
[   35.144845][ T3504] bridge_slave_1: left allmulticast mode
[   35.150577][ T3504] bridge_slave_1: left promiscuous mode
[   35.156696][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.167555][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.196972][ T3504] bond0: (slave bond_slave_0): Releasing backup interface
[   35.214887][ T3504] bond0: (slave bond_slave_1): Releasing backup interface
[   35.216329][ T3513] loop3: detected capacity change from 0 to 512
[   35.229298][ T3513] journal_path: Non-blockdev passed as './bus'
[   35.235538][ T3513] EXT4-fs: error: could not find journal device path
[   35.259412][ T3504] team0: Port device team_slave_0 removed
[   35.285902][ T3504] team0: Port device team_slave_1 removed
[   35.288373][ T3516] loop2: detected capacity change from 0 to 512
[   35.293143][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   35.305678][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_0
[   35.319457][ T3516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.320163][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   35.339930][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_1
[   35.341922][ T3516] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.373787][ T3516] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   35.402641][ T3516] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28
[   35.415095][ T3516] EXT4-fs (loop2): This should not happen!! Data will be lost
[   35.415095][ T3516] 
[   35.420255][ T3507] batman_adv: batadv0: Adding interface: veth1_vlan
[   35.424852][ T3516] EXT4-fs (loop2): Total free blocks count 0
[   35.424874][ T3516] EXT4-fs (loop2): Free/Dirty block details
[   35.424888][ T3516] EXT4-fs (loop2): free_blocks=65280
[   35.424924][ T3516] EXT4-fs (loop2): dirty_blocks=2
[   35.424938][ T3516] EXT4-fs (loop2): Block reservation details
[   35.424951][ T3516] EXT4-fs (loop2): i_reserved_data_blocks=2
[   35.431591][ T3507] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.525794][ T3507] batman_adv: batadv0: Interface activated: veth1_vlan
[   35.694787][ T3526] smc: net device bond0 applied user defined pnetid SYZ0
[   35.717258][ T3526] loop0: detected capacity change from 0 to 1024
[   35.761660][ T3526] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   35.776955][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.789051][ T3528] ------------[ cut here ]------------
[   35.794959][ T3528] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0x1f, 0x1f] s64=[0x1f, 0x1f] u32=[0x1f, 0x17] s32=[0x1f, 0x1f] var_off=(0x1f, 0x0)(1)
[   35.809529][ T3526] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   35.812151][ T3528] WARNING: CPU: 1 PID: 3528 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680
[   35.832504][ T3528] Modules linked in:
[   35.836432][ T3528] CPU: 1 UID: 0 PID: 3528 Comm: syz.1.14 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   35.846088][ T3528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   35.856205][ T3528] RIP: 0010:reg_bounds_sanity_check+0x673/0x680
[   35.862561][ T3528] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 82 81 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90
[   35.875736][ T3526] jbd2_journal_init_inode: Cannot locate journal superblock
[   35.882379][ T3528] RSP: 0018:ffffc90001d07440 EFLAGS: 00010292
[   35.889786][ T3526] EXT4-fs (loop0): Could not load journal inode
[   35.895891][ T3528] RAX: faad9813b241f500 RBX: ffff88811af3a1a8 RCX: 0000000000080000
[   35.910169][ T3528] RDX: ffffc90002282000 RSI: 0000000000014e34 RDI: 0000000000014e35
[   35.918294][ T3528] RBP: 000000000000001f R08: 0001ffff86a20c4f R09: 0000000000000000
[   35.926342][ T3528] R10: ffffffff88e66958 R11: ffffffff82203c10 R12: ffff88811af3a168
[   35.934481][ T3528] R13: ffff888109be8000 R14: ffff888109be8000 R15: ffff88811af3a1a0
[   35.942610][ T3528] FS:  00007ff4d78af6c0(0000) GS:ffff8882aef43000(0000) knlGS:0000000000000000
[   35.951582][ T3528] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   35.958236][ T3528] CR2: 00007f396edb0000 CR3: 000000011ae6e000 CR4: 00000000003506f0
[   35.966557][ T3528] Call Trace:
[   35.969938][ T3528]  <TASK>
[   35.972913][ T3528]  reg_set_min_max+0x1c1/0x260
[   35.977810][ T3528]  check_cond_jmp_op+0x1080/0x16e0
[   35.983110][ T3528]  do_check+0x332a/0x7a10
[   35.987620][ T3528]  do_check_common+0xc3a/0x12a0
[   35.992552][ T3528]  bpf_check+0x942b/0xd9e0
[   35.997075][ T3528]  ? __rcu_read_unlock+0x4f/0x70
[   36.002057][ T3528]  ? __alloc_frozen_pages_noprof+0x188/0x360
[   36.008189][ T3528]  ? alloc_pages_bulk_noprof+0x4b8/0x540
[   36.013944][ T3528]  ? __vmap_pages_range_noflush+0xbc4/0xcf0
[   36.019921][ T3528]  ? pcpu_block_update+0x232/0x3b0
[   36.025136][ T3528]  ? _find_next_zero_bit+0x64/0xa0
[   36.030280][ T3528]  ? pcpu_block_update+0x232/0x3b0
[   36.035639][ T3528]  ? _find_next_zero_bit+0x64/0xa0
[   36.040832][ T3528]  ? pcpu_block_refresh_hint+0x157/0x170
[   36.046782][ T3528]  ? pcpu_block_update_hint_alloc+0x63d/0x660
[   36.052941][ T3528]  ? css_rstat_updated+0xb7/0x240
[   36.058471][ T3528]  ? __rcu_read_unlock+0x4f/0x70
[   36.063526][ T3528]  ? pcpu_memcg_post_alloc_hook+0xf1/0x150
[   36.069527][ T3528]  ? should_fail_ex+0x30/0x280
[   36.074489][ T3528]  ? selinux_bpf_prog_load+0x36/0xf0
[   36.079873][ T3528]  ? should_failslab+0x8c/0xb0
[   36.084702][ T3528]  ? __kmalloc_cache_noprof+0x189/0x320
[   36.090373][ T3528]  ? selinux_bpf_prog_load+0xbf/0xf0
[   36.095847][ T3528]  ? security_bpf_prog_load+0x2c/0xa0
[   36.101484][ T3528]  bpf_prog_load+0xedd/0x1070
[   36.106271][ T3528]  ? security_bpf+0x2b/0x90
[   36.110805][ T3528]  __sys_bpf+0x462/0x7b0
[   36.115230][ T3528]  __x64_sys_bpf+0x41/0x50
[   36.119686][ T3528]  x64_sys_call+0x2aea/0x2ff0
[   36.124654][ T3528]  do_syscall_64+0xd2/0x200
[   36.129203][ T3528]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   36.135608][ T3528]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   36.139720][ T3533] loop2: detected capacity change from 0 to 512
[   36.141454][ T3528]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   36.153741][ T3528] RIP: 0033:0x7ff4d8e4eec9
[   36.158260][ T3528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   36.177973][ T3528] RSP: 002b:00007ff4d78af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   36.186565][ T3528] RAX: ffffffffffffffda RBX: 00007ff4d90a5fa0 RCX: 00007ff4d8e4eec9
[   36.194673][ T3528] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[   36.202688][ T3528] RBP: 00007ff4d8ed1f91 R08: 0000000000000000 R09: 0000000000000000
[   36.210815][ T3528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   36.218900][ T3528] R13: 00007ff4d90a6038 R14: 00007ff4d90a5fa0 R15: 00007ffd9dd46098
[   36.225629][ T3533] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   36.227282][ T3528]  </TASK>
[   36.243500][ T3528] ---[ end trace 0000000000000000 ]---
[   36.258616][ T3535] loop0: detected capacity change from 0 to 512
[   36.279035][ T3535] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents
[   36.320899][ T3535] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm +}[@: mark_inode_dirty error
[   36.350764][ T3533] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents
[   36.369834][ T3533] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm +}[@: mark_inode_dirty error
[   36.412968][ T3535] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents
[   36.425153][ T3535] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm +}[@: mark_inode_dirty error
[   36.437042][ T3533] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents
[   36.443190][ T3535] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents
[   36.460507][ T3535] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[   36.470991][ T3535] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents
[   36.486305][ T3535] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm +}[@: mark_inode_dirty error
[   36.509383][ T3533] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm +}[@: mark_inode_dirty error
[   36.521218][ T3535] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[   36.535535][ T3542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17'.
[   36.548099][ T3533] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents
[   36.552460][    C1] hrtimer: interrupt took 67125 ns
[   36.567318][ T3533] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[   36.576812][ T3535] EXT4-fs (loop0): 1 truncate cleaned up
[   36.584200][ T3535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.597258][ T3459] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 1
[   36.609214][ T3535] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.616185][ T3533] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents
[   36.640605][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.656439][ T3533] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm +}[@: mark_inode_dirty error
[   36.684095][ T3546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'.
[   36.704229][ T3533] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[   36.746811][ T3533] EXT4-fs (loop2): 1 truncate cleaned up
[   36.757005][ T3533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.770172][ T3459] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 1
[   36.823582][ T3554] loop3: detected capacity change from 0 to 764
[   36.843225][ T3533] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.856966][ T3554] =======================================================
[   36.856966][ T3554] WARNING: The mand mount option has been deprecated and
[   36.856966][ T3554]          and is ignored by this kernel. Remove the mand
[   36.856966][ T3554]          option from the mount to silence this warning.
[   36.856966][ T3554] =======================================================
[   37.017994][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.073341][ T3560] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.094761][ T3559] loop0: detected capacity change from 0 to 512
[   37.133135][ T3559] EXT4-fs: Ignoring removed oldalloc option
[   37.163817][ T3559] EXT4-fs (loop0): 1 truncate cleaned up
[   37.170116][ T3559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.206586][ T3560] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.286058][ T3560] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.361468][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.411773][ T3576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.28'.
[   37.426994][ T3560] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.441304][ T3574] loop2: detected capacity change from 0 to 512
[   37.479463][ T3574] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   37.487827][ T3574] EXT4-fs (loop2): orphan cleanup on readonly fs
[   37.503752][ T3581] loop1: detected capacity change from 0 to 512
[   37.521726][ T1398] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.545665][ T3574] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.27: corrupted inode contents
[   37.560010][ T2806] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.579967][ T3581] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   37.597511][ T3581] EXT4-fs (loop1): mount failed
[   37.597670][ T2806] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.602686][ T3574] EXT4-fs (loop2): Remounting filesystem read-only
[   37.610801][ T2806] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.634493][ T3574] EXT4-fs (loop2): 1 truncate cleaned up
[   37.640465][   T51] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   37.651268][   T51] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   37.677566][ T3588] Driver unsupported XDP return value 0 on prog  (id 30) dev N/A, expect packet loss!
[   37.686775][   T51] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[   37.698753][ T3574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   37.756938][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.790235][ T3589] loop0: detected capacity change from 0 to 1024
[   37.799094][ T3589] EXT4-fs: Ignoring removed bh option
[   37.811530][ T3589] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   37.838965][ T3588] loop3: detected capacity change from 0 to 128
[   37.857251][ T3588] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   37.890898][ T3589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.895370][ T3603] tipc: Started in network mode
[   37.907923][ T3603] tipc: Node identity ac14140f, cluster identity 4711
[   37.915873][ T3603] tipc: New replicast peer: 255.255.255.255
[   37.922017][ T3603] tipc: Enabled bearer <udp:syz2>, priority 10
[   37.924269][ T3588] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   37.980772][ T3589] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.29: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[   38.004142][ T3589] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   38.004926][ T3606] syz.2.35 uses obsolete (PF_INET,SOCK_PACKET)
[   38.092033][ T3610] loop4: detected capacity change from 0 to 512
[   38.101628][ T3610] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   38.114264][ T3612] capability: warning: `syz.2.38' uses deprecated v2 capabilities in a way that may be insecure
[   38.136029][ T3610] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.37: casefold flag without casefold feature
[   38.136485][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   38.151011][ T3610] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.37: couldn't read orphan inode 15 (err -117)
[   38.170261][ T3610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.188413][ T3614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'.
[   38.226411][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.264769][ T3621] netlink: 28 bytes leftover after parsing attributes in process `syz.4.40'.
[   38.273832][ T3621] netlink: 24 bytes leftover after parsing attributes in process `syz.4.40'.
[   38.337471][ T3626] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3626 comm=syz.1.43
[   38.349965][ T3626] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3626 comm=syz.1.43
[   38.387599][ T3626] program syz.1.43 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   38.410168][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.455091][ T3638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46'.
[   38.516301][ T3642] loop0: detected capacity change from 0 to 764
[   38.529287][ T3642] openvswitch: netlink: Message has 6 unknown bytes.
[   38.557354][ T3642] /dev/loop0: Can't open blockdev
[   38.595616][ T3646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3646 comm=syz.1.49
[   38.669980][ T3647] loop4: detected capacity change from 0 to 1024
[   38.697699][ T3647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.728161][   T29] kauditd_printk_skb: 379 callbacks suppressed
[   38.728178][   T29] audit: type=1400 audit(1758873056.360:459): avc:  denied  { read write } for  pid=3653 comm="syz.0.51" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   38.757608][   T29] audit: type=1400 audit(1758873056.360:460): avc:  denied  { open } for  pid=3653 comm="syz.0.51" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   38.780628][   T29] audit: type=1400 audit(1758873056.360:461): avc:  denied  { ioctl } for  pid=3653 comm="syz.0.51" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   38.875210][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.905760][ T3657] loop4: detected capacity change from 0 to 512
[   38.916773][ T3657] journal_path: Non-blockdev passed as './bus'
[   38.923595][ T3657] EXT4-fs: error: could not find journal device path
[   39.020169][   T29] audit: type=1400 audit(1758873056.650:462): avc:  denied  { read } for  pid=3661 comm="syz.0.54" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   39.043365][   T29] audit: type=1400 audit(1758873056.650:463): avc:  denied  { open } for  pid=3661 comm="syz.0.54" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   39.067392][ T1027] tipc: Node number set to 2886997007
[   39.123248][   T29] audit: type=1326 audit(1758873056.740:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da5c6eec9 code=0x7ffc0000
[   39.146169][   T29] audit: type=1326 audit(1758873056.740:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f7da5c6eec9 code=0x7ffc0000
[   39.169144][   T29] audit: type=1326 audit(1758873056.740:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da5c6eec9 code=0x7ffc0000
[   39.192116][   T29] audit: type=1326 audit(1758873056.740:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7da5c6eec9 code=0x7ffc0000
[   39.215038][   T29] audit: type=1326 audit(1758873056.740:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da5c6eec9 code=0x7ffc0000
[   39.310627][ T3664] __nla_validate_parse: 7 callbacks suppressed
[   39.310645][ T3664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'.
[   39.325636][ T3664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55'.
[   39.348106][ T3664] FAULT_INJECTION: forcing a failure.
[   39.348106][ T3664] name failslab, interval 1, probability 0, space 0, times 0
[   39.361005][ T3664] CPU: 0 UID: 0 PID: 3664 Comm: syz.2.55 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   39.361038][ T3664] Tainted: [W]=WARN
[   39.361046][ T3664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   39.361061][ T3664] Call Trace:
[   39.361085][ T3664]  <TASK>
[   39.361092][ T3664]  __dump_stack+0x1d/0x30
[   39.361115][ T3664]  dump_stack_lvl+0xe8/0x140
[   39.361139][ T3664]  dump_stack+0x15/0x1b
[   39.361175][ T3664]  should_fail_ex+0x265/0x280
[   39.361205][ T3664]  should_failslab+0x8c/0xb0
[   39.361232][ T3664]  kmem_cache_alloc_node_noprof+0x57/0x320
[   39.361264][ T3664]  ? __alloc_skb+0x101/0x320
[   39.361289][ T3664]  __alloc_skb+0x101/0x320
[   39.361356][ T3664]  netlink_ack+0xfd/0x500
[   39.361394][ T3664]  netlink_rcv_skb+0x192/0x220
[   39.361414][ T3664]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   39.361509][ T3664]  rtnetlink_rcv+0x1c/0x30
[   39.361535][ T3664]  netlink_unicast+0x5bd/0x690
[   39.361605][ T3664]  netlink_sendmsg+0x58b/0x6b0
[   39.361707][ T3664]  ? __pfx_netlink_sendmsg+0x10/0x10
[   39.361732][ T3664]  __sock_sendmsg+0x145/0x180
[   39.361766][ T3664]  ____sys_sendmsg+0x31e/0x4e0
[   39.361799][ T3664]  ___sys_sendmsg+0x17b/0x1d0
[   39.361845][ T3664]  __x64_sys_sendmsg+0xd4/0x160
[   39.361896][ T3664]  x64_sys_call+0x191e/0x2ff0
[   39.361939][ T3664]  do_syscall_64+0xd2/0x200
[   39.361967][ T3664]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   39.361991][ T3664]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   39.362021][ T3664]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.362051][ T3664] RIP: 0033:0x7f727b51eec9
[   39.362070][ T3664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   39.362090][ T3664] RSP: 002b:00007f7279f7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   39.362112][ T3664] RAX: ffffffffffffffda RBX: 00007f727b775fa0 RCX: 00007f727b51eec9
[   39.362141][ T3664] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[   39.362156][ T3664] RBP: 00007f7279f7f090 R08: 0000000000000000 R09: 0000000000000000
[   39.362171][ T3664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   39.362215][ T3664] R13: 00007f727b776038 R14: 00007f727b775fa0 R15: 00007ffd2456df58
[   39.362232][ T3664]  </TASK>
[   39.678847][ T3679] 8021q: adding VLAN 0 to HW filter on device bond1
[   39.958287][ T3696] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   39.965969][ T3696] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   40.103731][ T3696] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   40.112282][ T3696] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   40.240199][ T3708] loop0: detected capacity change from 0 to 512
[   40.280663][ T3708] journal_path: Non-blockdev passed as './bus'
[   40.286976][ T3708] EXT4-fs: error: could not find journal device path
[   40.406888][ T3710] loop3: detected capacity change from 0 to 512
[   40.413775][ T3710] EXT4-fs: Ignoring removed oldalloc option
[   40.464235][ T3710] EXT4-fs (loop3): 1 truncate cleaned up
[   40.479593][ T3710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.539751][ T3717] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   40.826980][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.926487][ T3728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.74'.
[   40.935489][ T3728] batman_adv: batadv0: Interface deactivated: veth1_vlan
[   40.942682][ T3728] batman_adv: batadv0: Removing interface: veth1_vlan
[   40.971104][ T3732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.75'.
[   40.979907][ T3732] netlink: 'syz.3.75': attribute type 30 has an invalid length.
[   41.001628][ T1398] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   41.013791][ T1398] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   41.040796][ T1398] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   41.070019][ T1398] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   41.080244][ T3734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.76'.
[   41.238406][ T3741] loop3: detected capacity change from 0 to 128
[   41.357983][ T3736] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[   41.368224][ T3736] FAT-fs (loop3): Filesystem has been set read-only
[   41.451748][ T3753] loop3: detected capacity change from 0 to 512
[   41.459071][ T3753] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   41.479940][ T3753] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.81: casefold flag without casefold feature
[   41.501293][ T3759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.82'.
[   41.573421][ T3753] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.81: couldn't read orphan inode 15 (err -117)
[   41.605733][ T3753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.650255][ T3766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'.
[   41.702206][ T3770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.87'.
[   41.714916][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.773546][ T3773] netlink: 'syz.3.88': attribute type 4 has an invalid length.
[   41.781243][ T3773] netlink: 152 bytes leftover after parsing attributes in process `syz.3.88'.
[   41.832824][ T3773] .`: renamed from bond0 (while UP)
[   41.927359][ T3788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'.
[   41.951483][ T3788] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   41.959070][ T3788] batman_adv: batadv0: Removing interface: batadv_slave_0
[   41.973069][ T3788] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   41.980516][ T3788] batman_adv: batadv0: Removing interface: batadv_slave_1
[   42.113163][ T3783] loop3: detected capacity change from 0 to 512
[   42.121605][ T3783] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   42.154638][ T3783] EXT4-fs (loop3): 1 truncate cleaned up
[   42.170876][ T3783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.185875][ T3783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.318542][ T3814] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2
[   42.329561][ T3766] syz.2.82 (3766) used greatest stack depth: 10080 bytes left
[   42.367207][ T3818] loop2: detected capacity change from 0 to 512
[   42.403756][ T3818] EXT4-fs: Ignoring removed oldalloc option
[   42.422135][ T3818] EXT4-fs (loop2): 1 truncate cleaned up
[   42.533730][ T3830] loop4: detected capacity change from 0 to 512
[   42.540463][ T3818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.584286][ T3830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.603043][ T3830] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.620205][ T3838] netlink: 'syz.0.112': attribute type 39 has an invalid length.
[   42.638445][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.655251][ T3830] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   42.671134][ T3830] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28
[   42.683542][ T3830] EXT4-fs (loop4): This should not happen!! Data will be lost
[   42.683542][ T3830] 
[   42.693352][ T3830] EXT4-fs (loop4): Total free blocks count 0
[   42.699366][ T3830] EXT4-fs (loop4): Free/Dirty block details
[   42.705386][ T3830] EXT4-fs (loop4): free_blocks=65280
[   42.710790][ T3830] EXT4-fs (loop4): dirty_blocks=2
[   42.716161][ T3830] EXT4-fs (loop4): Block reservation details
[   42.722169][ T3830] EXT4-fs (loop4): i_reserved_data_blocks=2
[   42.830994][ T3854] loop2: detected capacity change from 0 to 512
[   42.846878][ T3854] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   42.874989][ T3854] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.118: casefold flag without casefold feature
[   42.897629][ T3854] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.118: couldn't read orphan inode 15 (err -117)
[   42.936049][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.967013][ T3854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.088827][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.384134][ T3908] FAULT_INJECTION: forcing a failure.
[   43.384134][ T3908] name failslab, interval 1, probability 0, space 0, times 0
[   43.396986][ T3908] CPU: 1 UID: 0 PID: 3908 Comm: syz.4.130 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   43.397023][ T3908] Tainted: [W]=WARN
[   43.397030][ T3908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   43.397047][ T3908] Call Trace:
[   43.397056][ T3908]  <TASK>
[   43.397066][ T3908]  __dump_stack+0x1d/0x30
[   43.397155][ T3908]  dump_stack_lvl+0xe8/0x140
[   43.397182][ T3908]  dump_stack+0x15/0x1b
[   43.397205][ T3908]  should_fail_ex+0x265/0x280
[   43.397239][ T3908]  should_failslab+0x8c/0xb0
[   43.397278][ T3908]  kmem_cache_alloc_lru_noprof+0x55/0x310
[   43.397355][ T3908]  ? __d_alloc+0x3d/0x340
[   43.397397][ T3908]  __d_alloc+0x3d/0x340
[   43.397436][ T3908]  d_alloc_parallel+0x53/0xc60
[   43.397526][ T3908]  ? selinux_inode_permission+0x62d/0x740
[   43.397638][ T3908]  ? make_vfsuid+0x49/0xa0
[   43.397668][ T3908]  ? lockref_get_not_dead+0x120/0x1c0
[   43.397704][ T3908]  ? __rcu_read_unlock+0x4f/0x70
[   43.397736][ T3908]  __lookup_slow+0x8c/0x250
[   43.397777][ T3908]  lookup_slow+0x3c/0x60
[   43.397821][ T3908]  walk_component+0x1ec/0x220
[   43.397861][ T3908]  path_lookupat+0xfe/0x2a0
[   43.397912][ T3908]  filename_lookup+0x147/0x340
[   43.397969][ T3908]  user_path_at+0x3e/0x130
[   43.398015][ T3908]  __se_sys_inotify_add_watch+0x102/0x7b0
[   43.398100][ T3908]  ? fput+0x8f/0xc0
[   43.398141][ T3908]  ? ksys_write+0x192/0x1a0
[   43.398172][ T3908]  __x64_sys_inotify_add_watch+0x43/0x50
[   43.398270][ T3908]  x64_sys_call+0xfc7/0x2ff0
[   43.398299][ T3908]  do_syscall_64+0xd2/0x200
[   43.398342][ T3908]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   43.398374][ T3908]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   43.398440][ T3908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.398543][ T3908] RIP: 0033:0x7f7abe56eec9
[   43.398560][ T3908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.398583][ T3908] RSP: 002b:00007f7abcfcf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe
[   43.398608][ T3908] RAX: ffffffffffffffda RBX: 00007f7abe7c5fa0 RCX: 00007f7abe56eec9
[   43.398625][ T3908] RDX: 00000000400008bf RSI: 0000200000000200 RDI: 0000000000000006
[   43.398642][ T3908] RBP: 00007f7abcfcf090 R08: 0000000000000000 R09: 0000000000000000
[   43.398738][ T3908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.398808][ T3908] R13: 00007f7abe7c6038 R14: 00007f7abe7c5fa0 R15: 00007fff82e51878
[   43.398834][ T3908]  </TASK>
[   43.704847][ T3913] loop4: detected capacity change from 0 to 512
[   43.711798][ T3913] EXT4-fs: Ignoring removed mblk_io_submit option
[   43.745442][   T29] kauditd_printk_skb: 353 callbacks suppressed
[   43.745523][   T29] audit: type=1400 audit(1758873061.380:820): avc:  denied  { mount } for  pid=3911 comm="syz.0.131" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   43.773983][   T29] audit: type=1400 audit(1758873061.380:821): avc:  denied  { remount } for  pid=3911 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   43.830637][ T3913] EXT4-fs (loop4): orphan cleanup on readonly fs
[   43.838262][ T3913] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[   43.862630][   T29] audit: type=1400 audit(1758873061.500:822): avc:  denied  { unmount } for  pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   43.903528][ T3913] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.132: attempt to clear invalid blocks 2 len 1
[   43.945912][ T3913] EXT4-fs (loop4): Remounting filesystem read-only
[   43.984214][ T3913] EXT4-fs (loop4): 1 truncate cleaned up
[   44.007913][ T3913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   44.051618][   T29] audit: type=1400 audit(1758873061.680:823): avc:  denied  { connect } for  pid=3929 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   44.055695][ T3930] loop2: detected capacity change from 0 to 1024
[   44.071164][   T29] audit: type=1400 audit(1758873061.680:824): avc:  denied  { setopt } for  pid=3929 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   44.096925][   T29] audit: type=1400 audit(1758873061.680:825): avc:  denied  { bind } for  pid=3929 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   44.143758][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.164906][ T3934] capability: warning: `syz.0.138' uses 32-bit capabilities (legacy support in use)
[   44.168799][   T29] audit: type=1326 audit(1758873061.790:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed46deeec9 code=0x7ffc0000
[   44.184557][ T3930] EXT4-fs: Ignoring removed orlov option
[   44.197813][   T29] audit: type=1326 audit(1758873061.800:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed46deeec9 code=0x7ffc0000
[   44.197841][   T29] audit: type=1326 audit(1758873061.800:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed46deeec9 code=0x7ffc0000
[   44.197871][   T29] audit: type=1326 audit(1758873061.800:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed46deeec9 code=0x7ffc0000
[   44.234445][ T3930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.319468][ T3930] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[   44.378766][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.428898][ T3947] loop0: detected capacity change from 0 to 512
[   44.435892][ T3947] EXT4-fs: Ignoring removed nomblk_io_submit option
[   44.462534][ T3947] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   44.480444][ T3950] siw: device registration error -23
[   44.499096][ T3952] __nla_validate_parse: 6 callbacks suppressed
[   44.499115][ T3952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.142'.
[   44.513961][ T3950] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   44.522726][ T3950] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   44.523021][ T3947] EXT4-fs error (device loop0): __ext4_iget:5464: inode #16: block 134217760: comm syz.0.143: invalid block
[   44.556823][ T3947] EXT4-fs (loop0): Remounting filesystem read-only
[   44.563857][ T3947] EXT4-fs (loop0): 1 orphan inode deleted
[   44.599767][ T3957] vhci_hcd: invalid port number 96
[   44.605133][ T3957] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   44.669748][ T3947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.687302][ T3964] bond_slave_1: mtu less than device minimum
[   44.734948][ T3970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.149'.
[   44.744773][ T3970] netlink: 256 bytes leftover after parsing attributes in process `syz.4.149'.
[   44.806287][ T3971] loop4: detected capacity change from 0 to 128
[   44.817973][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.827804][ T3971] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[   44.840737][ T3971] System zones: 1-3, 19-19, 35-36
[   44.854708][ T3971] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   44.919993][ T3971] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   45.036171][ T3981] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   45.044587][ T3981] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   45.064648][ T3984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.155'.
[   45.073661][ T3984] netlink: 52 bytes leftover after parsing attributes in process `syz.0.155'.
[   45.082593][ T3984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.155'.
[   45.133491][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   45.152698][ T3993] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3993 comm=syz.0.160
[   45.165393][ T3993] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3993 comm=syz.0.160
[   45.301226][ T4010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.166'.
[   45.321127][ T4010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4010 comm=syz.0.166
[   45.352678][ T4012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'.
[   45.401743][ T4015] lo speed is unknown, defaulting to 1000
[   45.407593][ T4015] lo speed is unknown, defaulting to 1000
[   45.414315][ T4015] lo speed is unknown, defaulting to 1000
[   45.421071][ T4015] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   45.438743][ T4015] lo speed is unknown, defaulting to 1000
[   45.443069][ T4013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.166'.
[   45.445274][ T4015] lo speed is unknown, defaulting to 1000
[   45.463242][ T4015] lo speed is unknown, defaulting to 1000
[   45.481263][ T4019] vlan2: entered allmulticast mode
[   45.486487][ T4019] bridge_slave_0: entered allmulticast mode
[   45.518600][ T4015] lo speed is unknown, defaulting to 1000
[   45.524958][ T4015] lo speed is unknown, defaulting to 1000
[   45.573815][ T3932] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   45.584198][ T3932] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.598961][ T4010] lo speed is unknown, defaulting to 1000
[   45.707447][ T3932] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   45.718389][ T3932] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.781269][ T4029] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4029 comm=syz.2.172
[   45.794052][ T4029] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4029 comm=syz.2.172
[   45.852461][ T3932] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   45.863088][ T3932] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.925461][ T3932] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   45.935941][ T3932] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.992137][ T1398] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   46.000802][ T1398] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.014772][ T1398] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   46.023144][ T1398] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.041911][ T1398] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   46.050195][ T1398] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.085221][ T1398] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   46.093752][ T1398] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.147109][ T4050] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   46.155477][ T4050] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   46.256886][ T4059] IPv6: Can't replace route, no match found
[   46.278824][ T4053] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4053 comm=syz.0.183
[   46.291503][ T4053] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4053 comm=syz.0.183
[   46.452484][ T3408] IPVS: starting estimator thread 0...
[   46.542485][ T4078] IPVS: using max 1728 ests per chain, 86400 per kthread
[   46.607614][ T4103] loop0: detected capacity change from 0 to 512
[   46.619568][ T4103] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[   46.642144][ T4103] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.203: casefold flag without casefold feature
[   46.681577][ T4109] netlink: 24 bytes leftover after parsing attributes in process `syz.4.188'.
[   46.687736][ T4103] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.203: couldn't read orphan inode 15 (err -117)
[   46.744804][ T4103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.856573][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.908575][ T4118] tipc: Started in network mode
[   46.913551][ T4118] tipc: Node identity ff003a000000003a000000000000002d, cluster identity 4711
[   46.922463][ T4118] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   47.070910][ T4127] syz_tun: entered promiscuous mode
[   47.076366][ T4127] vlan0: entered promiscuous mode
[   47.142826][ T4129] lo speed is unknown, defaulting to 1000
[   47.638776][ T4162] loop4: detected capacity change from 0 to 512
[   47.680954][ T4162] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   47.705933][ T4169] serio: Serial port ttyS3
[   47.720969][ T4162] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.225: casefold flag without casefold feature
[   47.796536][ T4162] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.225: couldn't read orphan inode 15 (err -117)
[   47.877522][ T4162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.923250][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.066217][ T4207] netlink: 'syz.3.243': attribute type 13 has an invalid length.
[   48.102257][ T1037] IPVS: starting estimator thread 0...
[   48.106305][ T4204] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   48.156427][ T4207] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.163774][ T4207] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.193384][ T4210] IPVS: using max 2352 ests per chain, 117600 per kthread
[   48.221678][ T4207] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   48.235309][ T4207] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   48.281070][ T1398] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   48.289710][ T1398] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.309177][ T1398] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   48.317658][ T1398] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.333948][ T1398] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   48.342375][ T1398] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.348159][ T4221] FAULT_INJECTION: forcing a failure.
[   48.348159][ T4221] name failslab, interval 1, probability 0, space 0, times 0
[   48.354899][ T1398] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   48.363549][ T4221] CPU: 1 UID: 0 PID: 4221 Comm: syz.4.247 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   48.363617][ T4221] Tainted: [W]=WARN
[   48.363626][ T4221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   48.363644][ T4221] Call Trace:
[   48.363653][ T4221]  <TASK>
[   48.363686][ T4221]  __dump_stack+0x1d/0x30
[   48.363715][ T4221]  dump_stack_lvl+0xe8/0x140
[   48.363743][ T4221]  dump_stack+0x15/0x1b
[   48.363858][ T4221]  should_fail_ex+0x265/0x280
[   48.363892][ T4221]  should_failslab+0x8c/0xb0
[   48.364006][ T4221]  kmem_cache_alloc_node_noprof+0x57/0x320
[   48.364048][ T4221]  ? __alloc_skb+0x101/0x320
[   48.364075][ T4221]  __alloc_skb+0x101/0x320
[   48.364133][ T4221]  pfkey_sendmsg+0xd7/0x900
[   48.364172][ T4221]  ? avc_has_perm+0xf7/0x180
[   48.364269][ T4221]  ? selinux_socket_sendmsg+0x175/0x1b0
[   48.364316][ T4221]  ? __pfx_pfkey_sendmsg+0x10/0x10
[   48.364394][ T4221]  __sock_sendmsg+0x145/0x180
[   48.364436][ T4221]  ____sys_sendmsg+0x31e/0x4e0
[   48.364538][ T4221]  ___sys_sendmsg+0x17b/0x1d0
[   48.364593][ T4221]  __x64_sys_sendmsg+0xd4/0x160
[   48.364631][ T4221]  x64_sys_call+0x191e/0x2ff0
[   48.364660][ T4221]  do_syscall_64+0xd2/0x200
[   48.364708][ T4221]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   48.364742][ T4221]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   48.364818][ T4221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.364847][ T4221] RIP: 0033:0x7f7abe56eec9
[   48.364868][ T4221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   48.364944][ T4221] RSP: 002b:00007f7abcfcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   48.364969][ T4221] RAX: ffffffffffffffda RBX: 00007f7abe7c5fa0 RCX: 00007f7abe56eec9
[   48.364984][ T4221] RDX: 0000000020000800 RSI: 0000200000000180 RDI: 0000000000000003
[   48.364995][ T4221] RBP: 00007f7abcfcf090 R08: 0000000000000000 R09: 0000000000000000
[   48.365090][ T4221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   48.365107][ T4221] R13: 00007f7abe7c6038 R14: 00007f7abe7c5fa0 R15: 00007fff82e51878
[   48.365135][ T4221]  </TASK>
[   48.585463][ T1398] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.637036][ T4233] loop4: detected capacity change from 0 to 512
[   48.655096][ T4233] EXT4-fs: Ignoring removed oldalloc option
[   48.669029][ T4233] EXT4-fs (loop4): 1 truncate cleaned up
[   48.675955][ T4237] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4237 comm=syz.3.253
[   48.688379][ T4237] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4237 comm=syz.3.253
[   48.702299][ T4233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.727886][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.760053][   T29] kauditd_printk_skb: 252 callbacks suppressed
[   48.760070][   T29] audit: type=1326 audit(1758873066.390:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727b51eec9 code=0x7ffc0000
[   48.791339][   T29] audit: type=1326 audit(1758873066.390:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f727b51eec9 code=0x7ffc0000
[   48.814822][   T29] audit: type=1326 audit(1758873066.390:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727b51eec9 code=0x7ffc0000
[   48.838293][   T29] audit: type=1326 audit(1758873066.430:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727b51eec9 code=0x7ffc0000
[   48.875668][ T4246] syz_tun: refused to change device tx_queue_len
[   48.886114][ T4254] FAULT_INJECTION: forcing a failure.
[   48.886114][ T4254] name failslab, interval 1, probability 0, space 0, times 0
[   48.898912][ T4254] CPU: 1 UID: 0 PID: 4254 Comm: syz.4.260 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   48.898965][ T4254] Tainted: [W]=WARN
[   48.898973][ T4254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   48.898988][ T4254] Call Trace:
[   48.898996][ T4254]  <TASK>
[   48.899004][ T4254]  __dump_stack+0x1d/0x30
[   48.899026][ T4254]  dump_stack_lvl+0xe8/0x140
[   48.899050][ T4254]  dump_stack+0x15/0x1b
[   48.899089][ T4254]  should_fail_ex+0x265/0x280
[   48.899184][ T4254]  should_failslab+0x8c/0xb0
[   48.899217][ T4254]  kmem_cache_alloc_noprof+0x50/0x310
[   48.899314][ T4254]  ? ioctx_alloc+0xf5/0x4e0
[   48.899363][ T4254]  ioctx_alloc+0xf5/0x4e0
[   48.899391][ T4254]  __se_sys_io_setup+0x6b/0x1b0
[   48.899495][ T4254]  __x64_sys_io_setup+0x31/0x40
[   48.899525][ T4254]  x64_sys_call+0x2eff/0x2ff0
[   48.899545][ T4254]  do_syscall_64+0xd2/0x200
[   48.899609][ T4254]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   48.899639][ T4254]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   48.899675][ T4254]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.899702][ T4254] RIP: 0033:0x7f7abe56eec9
[   48.899761][ T4254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   48.899778][ T4254] RSP: 002b:00007f7abcfcf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[   48.899797][ T4254] RAX: ffffffffffffffda RBX: 00007f7abe7c5fa0 RCX: 00007f7abe56eec9
[   48.899813][ T4254] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 00000000000005ff
[   48.899828][ T4254] RBP: 00007f7abcfcf090 R08: 0000000000000000 R09: 0000000000000000
[   48.899843][ T4254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   48.899858][ T4254] R13: 00007f7abe7c6038 R14: 00007f7abe7c5fa0 R15: 00007fff82e51878
[   48.899880][ T4254]  </TASK>
[   49.087497][   T29] audit: type=1326 audit(1758873066.520:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4253 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7abe56eec9 code=0x7ffc0000
[   49.110950][   T29] audit: type=1326 audit(1758873066.520:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4253 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7abe56eec9 code=0x7ffc0000
[   49.134728][   T29] audit: type=1326 audit(1758873066.520:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4253 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7abe56eec9 code=0x7ffc0000
[   49.158433][   T29] audit: type=1326 audit(1758873066.520:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4253 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7abe56d710 code=0x7ffc0000
[   49.181947][   T29] audit: type=1326 audit(1758873066.520:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4253 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7abe56d97f code=0x7ffc0000
[   49.205730][   T29] audit: type=1326 audit(1758873066.520:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4253 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f7abe56eec9 code=0x7ffc0000
[   49.231893][ T4271] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4271 comm=syz.2.266
[   49.248866][ T4262] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   49.257308][ T4262] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   50.309933][ T4321] FAULT_INJECTION: forcing a failure.
[   50.309933][ T4321] name failslab, interval 1, probability 0, space 0, times 0
[   50.322736][ T4321] CPU: 0 UID: 0 PID: 4321 Comm: syz.4.287 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   50.322767][ T4321] Tainted: [W]=WARN
[   50.322773][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   50.322785][ T4321] Call Trace:
[   50.322790][ T4321]  <TASK>
[   50.322797][ T4321]  __dump_stack+0x1d/0x30
[   50.322818][ T4321]  dump_stack_lvl+0xe8/0x140
[   50.322847][ T4321]  dump_stack+0x15/0x1b
[   50.322868][ T4321]  should_fail_ex+0x265/0x280
[   50.322899][ T4321]  should_failslab+0x8c/0xb0
[   50.322930][ T4321]  kmem_cache_alloc_node_noprof+0x57/0x320
[   50.322996][ T4321]  ? __alloc_skb+0x101/0x320
[   50.323106][ T4321]  __alloc_skb+0x101/0x320
[   50.323130][ T4321]  netlink_ack+0xfd/0x500
[   50.323155][ T4321]  ? netlink_rcv_skb+0x14c/0x220
[   50.323180][ T4321]  netlink_rcv_skb+0x192/0x220
[   50.323200][ T4321]  ? __pfx_genl_rcv_msg+0x10/0x10
[   50.323295][ T4321]  genl_rcv+0x28/0x40
[   50.323346][ T4321]  netlink_unicast+0x5bd/0x690
[   50.323400][ T4321]  netlink_sendmsg+0x58b/0x6b0
[   50.323426][ T4321]  ? __pfx_netlink_sendmsg+0x10/0x10
[   50.323455][ T4321]  __sock_sendmsg+0x145/0x180
[   50.323486][ T4321]  __sys_sendto+0x268/0x330
[   50.323517][ T4321]  __x64_sys_sendto+0x76/0x90
[   50.323539][ T4321]  x64_sys_call+0x2d05/0x2ff0
[   50.323571][ T4321]  do_syscall_64+0xd2/0x200
[   50.323666][ T4321]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   50.323691][ T4321]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   50.323719][ T4321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.323741][ T4321] RIP: 0033:0x7f7abe570d5c
[   50.323756][ T4321] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[   50.323845][ T4321] RSP: 002b:00007f7abcfcdec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[   50.323865][ T4321] RAX: ffffffffffffffda RBX: 00007f7abcfcdfc0 RCX: 00007f7abe570d5c
[   50.323877][ T4321] RDX: 0000000000000020 RSI: 00007f7abcfce010 RDI: 0000000000000005
[   50.323889][ T4321] RBP: 0000000000000000 R08: 00007f7abcfcdf14 R09: 000000000000000c
[   50.323902][ T4321] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[   50.323914][ T4321] R13: 00007f7abcfcdf68 R14: 00007f7abcfce010 R15: 0000000000000000
[   50.324011][ T4321]  </TASK>
[   50.568566][ T4325] FAULT_INJECTION: forcing a failure.
[   50.568566][ T4325] name failslab, interval 1, probability 0, space 0, times 0
[   50.581489][ T4325] CPU: 0 UID: 0 PID: 4325 Comm: syz.0.289 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   50.581521][ T4325] Tainted: [W]=WARN
[   50.581538][ T4325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   50.581552][ T4325] Call Trace:
[   50.581559][ T4325]  <TASK>
[   50.581568][ T4325]  __dump_stack+0x1d/0x30
[   50.581595][ T4325]  dump_stack_lvl+0xe8/0x140
[   50.581701][ T4325]  dump_stack+0x15/0x1b
[   50.581721][ T4325]  should_fail_ex+0x265/0x280
[   50.581804][ T4325]  should_failslab+0x8c/0xb0
[   50.581836][ T4325]  kmem_cache_alloc_noprof+0x50/0x310
[   50.581869][ T4325]  ? alloc_empty_file+0x76/0x200
[   50.581979][ T4325]  alloc_empty_file+0x76/0x200
[   50.582013][ T4325]  dentry_open+0x2d/0x90
[   50.582050][ T4325]  pidfs_alloc_file+0xe2/0x180
[   50.582081][ T4325]  pidfd_prepare+0x11d/0x170
[   50.582144][ T4325]  __se_sys_pidfd_open+0x133/0x270
[   50.582174][ T4325]  __x64_sys_pidfd_open+0x31/0x40
[   50.582236][ T4325]  x64_sys_call+0x2adf/0x2ff0
[   50.582263][ T4325]  do_syscall_64+0xd2/0x200
[   50.582311][ T4325]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   50.582372][ T4325]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   50.582409][ T4325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.582436][ T4325] RIP: 0033:0x7fed46deeec9
[   50.582455][ T4325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.582476][ T4325] RSP: 002b:00007fed4584f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2
[   50.582561][ T4325] RAX: ffffffffffffffda RBX: 00007fed47045fa0 RCX: 00007fed46deeec9
[   50.582594][ T4325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000a6
[   50.582609][ T4325] RBP: 00007fed4584f090 R08: 0000000000000000 R09: 0000000000000000
[   50.582624][ T4325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   50.582639][ T4325] R13: 00007fed47046038 R14: 00007fed47045fa0 R15: 00007ffcabba2298
[   50.582744][ T4325]  </TASK>
[   50.807835][ T4338] loop0: detected capacity change from 0 to 512
[   50.814179][ T4334] __nla_validate_parse: 10 callbacks suppressed
[   50.814209][ T4334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.293'.
[   50.829897][ T4338] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[   50.844497][ T4338] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.294: casefold flag without casefold feature
[   50.857612][ T4338] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.294: couldn't read orphan inode 15 (err -117)
[   50.871059][ T4338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.895371][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.928810][ T4349] loop4: detected capacity change from 0 to 512
[   50.935964][ T4349] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   50.947770][ T4349] EXT4-fs (loop4): 1 truncate cleaned up
[   50.954630][ T4349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.972297][ T4349] random: crng reseeded on system resumption
[   50.982790][ T4349] EXT4-fs error (device loop4): ext4_nfs_get_inode:1525: inode #11: comm syz.4.298: iget: bad extra_isize 46 (inode size 256)
[   51.047333][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.080385][ T4364] loop4: detected capacity change from 0 to 512
[   51.087683][ T4366] lo speed is unknown, defaulting to 1000
[   51.096535][ T4364] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   51.120329][ T4364] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.302: casefold flag without casefold feature
[   51.142803][ T4371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'.
[   51.152240][ T4364] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.302: couldn't read orphan inode 15 (err -117)
[   51.165961][ T4364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.179450][ T4356] blkio.reset_stats is deprecated
[   51.205971][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.277342][ T4376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.305'.
[   51.452573][ T4396] loop4: detected capacity change from 0 to 512
[   51.500045][ T4396] journal_path: Non-blockdev passed as './bus'
[   51.506341][ T4396] EXT4-fs: error: could not find journal device path
[   51.645100][ T4403] selinux_netlink_send: 1 callbacks suppressed
[   51.645119][ T4403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4403 comm=syz.1.315
[   51.723981][ T4404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'.
[   51.812297][ T4403] lo speed is unknown, defaulting to 1000
[   52.044480][ T4426] lo speed is unknown, defaulting to 1000
[   52.182882][ T4441] FAULT_INJECTION: forcing a failure.
[   52.182882][ T4441] name failslab, interval 1, probability 0, space 0, times 0
[   52.195786][ T4441] CPU: 1 UID: 0 PID: 4441 Comm: syz.0.330 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   52.195825][ T4441] Tainted: [W]=WARN
[   52.195848][ T4441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   52.195861][ T4441] Call Trace:
[   52.195866][ T4441]  <TASK>
[   52.195873][ T4441]  __dump_stack+0x1d/0x30
[   52.195898][ T4441]  dump_stack_lvl+0xe8/0x140
[   52.196000][ T4441]  dump_stack+0x15/0x1b
[   52.196017][ T4441]  should_fail_ex+0x265/0x280
[   52.196073][ T4441]  should_failslab+0x8c/0xb0
[   52.196165][ T4441]  __kmalloc_noprof+0xa5/0x3e0
[   52.196193][ T4441]  ? do_handle_open+0x3a3/0x6b0
[   52.196228][ T4441]  do_handle_open+0x3a3/0x6b0
[   52.196257][ T4441]  __x64_sys_open_by_handle_at+0x44/0x50
[   52.196285][ T4441]  x64_sys_call+0x279b/0x2ff0
[   52.196343][ T4441]  do_syscall_64+0xd2/0x200
[   52.196424][ T4441]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   52.196449][ T4441]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   52.196477][ T4441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.196578][ T4441] RIP: 0033:0x7fed46deeec9
[   52.196594][ T4441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   52.196612][ T4441] RSP: 002b:00007fed4584f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[   52.196631][ T4441] RAX: ffffffffffffffda RBX: 00007fed47045fa0 RCX: 00007fed46deeec9
[   52.196643][ T4441] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c
[   52.196682][ T4441] RBP: 00007fed4584f090 R08: 0000000000000000 R09: 0000000000000000
[   52.196694][ T4441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   52.196706][ T4441] R13: 00007fed47046038 R14: 00007fed47045fa0 R15: 00007ffcabba2298
[   52.196725][ T4441]  </TASK>
[   52.402630][ T4445] loop4: detected capacity change from 0 to 512
[   52.409703][ T4445] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   52.423934][ T4445] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.332: casefold flag without casefold feature
[   52.461600][ T4445] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.332: couldn't read orphan inode 15 (err -117)
[   52.483348][ T4445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.535756][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.556241][ T4459] macvtap0: refused to change device tx_queue_len
[   52.603854][ T4464] netlink: 24 bytes leftover after parsing attributes in process `syz.1.341'.
[   52.613646][ T4464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4464 comm=syz.1.341
[   52.685152][ T4469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'.
[   52.744017][ T4471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'.
[   52.761162][ T4464] lo speed is unknown, defaulting to 1000
[   52.769428][ T4471] netlink: 256 bytes leftover after parsing attributes in process `syz.4.343'.
[   52.809699][ T4475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4475 comm=syz.3.345
[   52.894223][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'.
[   52.936568][ T4481] loop4: detected capacity change from 0 to 128
[   52.943786][ T4481] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[   52.990079][ T4481] SELinux:  Context system_u:object_r:tun_tap_device_t:s0 is not valid (left unmapped).
[   53.004991][ T1037] IPVS: starting estimator thread 0...
[   53.022586][   T51] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[   53.053593][ T4484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.348'.
[   53.092536][ T4482] IPVS: using max 1824 ests per chain, 91200 per kthread
[   53.126123][ T4484] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   53.154417][ T4475] lo speed is unknown, defaulting to 1000
[   53.549765][ T4511] syz.0.357 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   53.848203][   T29] kauditd_printk_skb: 206 callbacks suppressed
[   53.848222][   T29] audit: type=1326 audit(1758873071.460:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4d8e45d67 code=0x7ffc0000
[   53.877915][   T29] audit: type=1326 audit(1758873071.460:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4d8deaf79 code=0x7ffc0000
[   53.901162][   T29] audit: type=1326 audit(1758873071.460:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4d8e45d67 code=0x7ffc0000
[   53.924643][   T29] audit: type=1326 audit(1758873071.460:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4d8deaf79 code=0x7ffc0000
[   53.947945][   T29] audit: type=1326 audit(1758873071.460:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4d8e45d67 code=0x7ffc0000
[   53.971259][   T29] audit: type=1326 audit(1758873071.460:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4d8deaf79 code=0x7ffc0000
[   53.994648][   T29] audit: type=1326 audit(1758873071.460:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d8e4eec9 code=0x7ffc0000
[   54.018023][   T29] audit: type=1326 audit(1758873071.460:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4d8e45d67 code=0x7ffc0000
[   54.041272][   T29] audit: type=1326 audit(1758873071.460:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4d8deaf79 code=0x7ffc0000
[   54.064535][   T29] audit: type=1326 audit(1758873071.460:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7ff4d8e4eec9 code=0x7ffc0000
[   54.427980][ T4572] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4572 comm=syz.3.380
[   54.440500][ T4572] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4572 comm=syz.3.380
[   54.476205][ T4575] geneve0: entered allmulticast mode
[   54.481728][ T4575] FAULT_INJECTION: forcing a failure.
[   54.481728][ T4575] name failslab, interval 1, probability 0, space 0, times 0
[   54.494410][ T4575] CPU: 0 UID: 0 PID: 4575 Comm: syz.0.382 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   54.494484][ T4575] Tainted: [W]=WARN
[   54.494492][ T4575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   54.494508][ T4575] Call Trace:
[   54.494515][ T4575]  <TASK>
[   54.494523][ T4575]  __dump_stack+0x1d/0x30
[   54.494544][ T4575]  dump_stack_lvl+0xe8/0x140
[   54.494562][ T4575]  dump_stack+0x15/0x1b
[   54.494583][ T4575]  should_fail_ex+0x265/0x280
[   54.494629][ T4575]  should_failslab+0x8c/0xb0
[   54.494661][ T4575]  kmem_cache_alloc_node_noprof+0x57/0x320
[   54.494693][ T4575]  ? __alloc_skb+0x101/0x320
[   54.494792][ T4575]  __alloc_skb+0x101/0x320
[   54.494813][ T4575]  ? _raw_spin_unlock_bh+0x36/0x40
[   54.494852][ T4575]  inet_ifmcaddr_notify+0x64/0x120
[   54.494882][ T4575]  __ip_mc_dec_group+0x1ac/0x3d0
[   54.494909][ T4575]  ip_mc_down+0x13d/0x1c0
[   54.494970][ T4575]  inetdev_event+0x1b3/0xc10
[   54.494995][ T4575]  ? __rcu_read_unlock+0x4f/0x70
[   54.495056][ T4575]  ? ib_netdevice_event+0x281/0x5f0
[   54.495088][ T4575]  ? __pfx_arp_netdev_event+0x10/0x10
[   54.495152][ T4575]  ? __pfx_inetdev_event+0x10/0x10
[   54.495237][ T4575]  raw_notifier_call_chain+0x6f/0x1b0
[   54.495257][ T4575]  ? call_netdevice_notifiers_info+0x9c/0x100
[   54.495294][ T4575]  call_netdevice_notifiers_info+0xae/0x100
[   54.495324][ T4575]  __dev_notify_flags+0xff/0x1a0
[   54.495443][ T4575]  netif_change_flags+0xac/0xd0
[   54.495469][ T4575]  do_setlink+0x9d2/0x2810
[   54.495562][ T4575]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[   54.495596][ T4575]  ? __pfx_autoremove_wake_function+0x10/0x10
[   54.495700][ T4575]  ? synchronize_net+0x55/0x70
[   54.495730][ T4575]  ? geneve_changelink+0x35c/0x3b0
[   54.495759][ T4575]  rtnl_newlink+0xe75/0x12d0
[   54.495802][ T4575]  ? bpf_trace_run3+0x12c/0x1d0
[   54.495832][ T4575]  ? __kfree_skb+0x109/0x150
[   54.495859][ T4575]  ? __rcu_read_unlock+0x4f/0x70
[   54.495885][ T4575]  ? avc_has_perm_noaudit+0x1b1/0x200
[   54.495940][ T4575]  ? cred_has_capability+0x210/0x280
[   54.495969][ T4575]  ? selinux_capable+0x31/0x40
[   54.496004][ T4575]  ? security_capable+0x83/0x90
[   54.496105][ T4575]  ? rtnetlink_rcv_msg+0x300/0x6d0
[   54.496172][ T4575]  ? __pfx_rtnl_newlink+0x10/0x10
[   54.496202][ T4575]  rtnetlink_rcv_msg+0x5fe/0x6d0
[   54.496261][ T4575]  netlink_rcv_skb+0x123/0x220
[   54.496348][ T4575]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   54.496392][ T4575]  rtnetlink_rcv+0x1c/0x30
[   54.496425][ T4575]  netlink_unicast+0x5bd/0x690
[   54.496453][ T4575]  netlink_sendmsg+0x58b/0x6b0
[   54.496561][ T4575]  ? __pfx_netlink_sendmsg+0x10/0x10
[   54.496591][ T4575]  __sock_sendmsg+0x145/0x180
[   54.496627][ T4575]  ____sys_sendmsg+0x31e/0x4e0
[   54.496687][ T4575]  ___sys_sendmsg+0x17b/0x1d0
[   54.496736][ T4575]  __x64_sys_sendmsg+0xd4/0x160
[   54.496827][ T4575]  x64_sys_call+0x191e/0x2ff0
[   54.496891][ T4575]  do_syscall_64+0xd2/0x200
[   54.496926][ T4575]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   54.496955][ T4575]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   54.497034][ T4575]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.497059][ T4575] RIP: 0033:0x7fed46deeec9
[   54.497084][ T4575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   54.497138][ T4575] RSP: 002b:00007fed4584f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   54.497159][ T4575] RAX: ffffffffffffffda RBX: 00007fed47045fa0 RCX: 00007fed46deeec9
[   54.497173][ T4575] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[   54.497188][ T4575] RBP: 00007fed4584f090 R08: 0000000000000000 R09: 0000000000000000
[   54.497203][ T4575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   54.497218][ T4575] R13: 00007fed47046038 R14: 00007fed47045fa0 R15: 00007ffcabba2298
[   54.497242][ T4575]  </TASK>
[   54.893304][ T4575] syz.0.382 (4575) used greatest stack depth: 9992 bytes left
[   54.906590][ T4578] lo speed is unknown, defaulting to 1000
[   54.938915][ T4580] FAULT_INJECTION: forcing a failure.
[   54.938915][ T4580] name failslab, interval 1, probability 0, space 0, times 0
[   54.951668][ T4580] CPU: 1 UID: 0 PID: 4580 Comm: syz.0.385 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   54.951716][ T4580] Tainted: [W]=WARN
[   54.951724][ T4580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   54.951740][ T4580] Call Trace:
[   54.951748][ T4580]  <TASK>
[   54.951758][ T4580]  __dump_stack+0x1d/0x30
[   54.951781][ T4580]  dump_stack_lvl+0xe8/0x140
[   54.951801][ T4580]  dump_stack+0x15/0x1b
[   54.951893][ T4580]  should_fail_ex+0x265/0x280
[   54.951917][ T4580]  should_failslab+0x8c/0xb0
[   54.951941][ T4580]  kmem_cache_alloc_node_noprof+0x57/0x320
[   54.951972][ T4580]  ? __alloc_skb+0x101/0x320
[   54.951991][ T4580]  __alloc_skb+0x101/0x320
[   54.952031][ T4580]  pfkey_sendmsg+0xd7/0x900
[   54.952064][ T4580]  ? avc_has_perm+0xf7/0x180
[   54.952115][ T4580]  ? selinux_socket_sendmsg+0x175/0x1b0
[   54.952150][ T4580]  ? __pfx_pfkey_sendmsg+0x10/0x10
[   54.952180][ T4580]  __sock_sendmsg+0x145/0x180
[   54.952218][ T4580]  ____sys_sendmsg+0x31e/0x4e0
[   54.952267][ T4580]  ___sys_sendmsg+0x17b/0x1d0
[   54.952306][ T4580]  __x64_sys_sendmsg+0xd4/0x160
[   54.952338][ T4580]  x64_sys_call+0x191e/0x2ff0
[   54.952402][ T4580]  do_syscall_64+0xd2/0x200
[   54.952431][ T4580]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   54.952509][ T4580]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   54.952539][ T4580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.952565][ T4580] RIP: 0033:0x7fed46deeec9
[   54.952583][ T4580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   54.952685][ T4580] RSP: 002b:00007fed4584f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   54.952766][ T4580] RAX: ffffffffffffffda RBX: 00007fed47045fa0 RCX: 00007fed46deeec9
[   54.952783][ T4580] RDX: 0000000020000800 RSI: 0000200000000180 RDI: 0000000000000003
[   54.952799][ T4580] RBP: 00007fed4584f090 R08: 0000000000000000 R09: 0000000000000000
[   54.952813][ T4580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   54.952825][ T4580] R13: 00007fed47046038 R14: 00007fed47045fa0 R15: 00007ffcabba2298
[   54.952889][ T4580]  </TASK>
[   55.316542][ T4602] mmap: syz.2.392 (4602) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   55.343264][ T4605] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4605 comm=syz.0.393
[   55.355807][ T4605] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4605 comm=syz.0.393
[   55.687933][ T4635] lo speed is unknown, defaulting to 1000
[   55.891068][ T4661] loop4: detected capacity change from 0 to 512
[   55.898286][ T4661] EXT4-fs: Ignoring removed i_version option
[   55.905037][ T4661] EXT4-fs: Ignoring removed nomblk_io_submit option
[   55.911903][ T4661] ext3: Bad value for 'dax'
[   55.924091][ T4661] loop4: detected capacity change from 0 to 512
[   55.957678][ T4661] EXT4-fs: Mount option(s) incompatible with ext2
[   55.967542][ T4674] FAULT_INJECTION: forcing a failure.
[   55.967542][ T4674] name failslab, interval 1, probability 0, space 0, times 0
[   55.980419][ T4674] CPU: 1 UID: 0 PID: 4674 Comm: syz.0.418 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   55.980470][ T4674] Tainted: [W]=WARN
[   55.980478][ T4674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   55.980492][ T4674] Call Trace:
[   55.980498][ T4674]  <TASK>
[   55.980506][ T4674]  __dump_stack+0x1d/0x30
[   55.980594][ T4674]  dump_stack_lvl+0xe8/0x140
[   55.980629][ T4674]  dump_stack+0x15/0x1b
[   55.980647][ T4674]  should_fail_ex+0x265/0x280
[   55.980671][ T4674]  should_failslab+0x8c/0xb0
[   55.980702][ T4674]  __kmalloc_noprof+0xa5/0x3e0
[   55.980735][ T4674]  ? ip_options_get+0x52/0x350
[   55.980818][ T4674]  ? is_bpf_text_address+0x141/0x160
[   55.980853][ T4674]  ip_options_get+0x52/0x350
[   55.980889][ T4674]  ? unwind_get_return_address+0x16/0x40
[   55.980959][ T4674]  ip_cmsg_send+0x49e/0x5f0
[   55.981002][ T4674]  udp_sendmsg+0x851/0x13c0
[   55.981032][ T4674]  ? _raw_spin_unlock_bh+0x36/0x40
[   55.981080][ T4674]  ? __pfx_ip_generic_getfrag+0x10/0x10
[   55.981116][ T4674]  ? __rcu_read_unlock+0x4f/0x70
[   55.981136][ T4674]  ? __pfx_ip4_datagram_release_cb+0x10/0x10
[   55.981165][ T4674]  ? __pfx_udp_sendmsg+0x10/0x10
[   55.981199][ T4674]  inet_sendmsg+0xac/0xd0
[   55.981228][ T4674]  __sock_sendmsg+0x102/0x180
[   55.981259][ T4674]  ____sys_sendmsg+0x345/0x4e0
[   55.981286][ T4674]  ___sys_sendmsg+0x17b/0x1d0
[   55.981342][ T4674]  __sys_sendmmsg+0x178/0x300
[   55.981381][ T4674]  __x64_sys_sendmmsg+0x57/0x70
[   55.981412][ T4674]  x64_sys_call+0x1c4a/0x2ff0
[   55.981562][ T4674]  do_syscall_64+0xd2/0x200
[   55.981592][ T4674]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   55.981634][ T4674]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   55.981743][ T4674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.981766][ T4674] RIP: 0033:0x7fed46deeec9
[   55.981782][ T4674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   55.981874][ T4674] RSP: 002b:00007fed4584f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   55.981898][ T4674] RAX: ffffffffffffffda RBX: 00007fed47045fa0 RCX: 00007fed46deeec9
[   55.981910][ T4674] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000005
[   55.981923][ T4674] RBP: 00007fed4584f090 R08: 0000000000000000 R09: 0000000000000000
[   55.981938][ T4674] R10: 0000000004008804 R11: 0000000000000246 R12: 0000000000000001
[   55.981974][ T4674] R13: 00007fed47046038 R14: 00007fed47045fa0 R15: 00007ffcabba2298
[   55.981997][ T4674]  </TASK>
[   56.245604][ T4677] lo speed is unknown, defaulting to 1000
[   56.742626][ T4703] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   56.751203][ T4703] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   56.914465][ T4718] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.085112][ T4744] loop4: detected capacity change from 0 to 1024
[   57.102298][ T4744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[   57.128848][ T4744] __nla_validate_parse: 5 callbacks suppressed
[   57.128881][ T4744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.446'.
[   57.227800][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[   57.411521][ T4773] vcan0: tx drop: invalid sa for name 0x0000000000000001
[   57.593560][ T4792] SELinux:  Context system_u:object is not valid (left unmapped).
[   57.629374][ T4795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.466'.
[   57.893124][ T4811] netlink: 40 bytes leftover after parsing attributes in process `'.
[   58.046575][ T4830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'.
[   58.281227][ T4846] loop4: detected capacity change from 0 to 512
[   58.288625][ T4846] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   58.299901][ T4846] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.487: casefold flag without casefold feature
[   58.313273][ T4846] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.487: couldn't read orphan inode 15 (err -117)
[   58.326090][ T4846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.337826][ T4853] macsec1: entered promiscuous mode
[   58.343612][ T4853] bridge0: entered promiscuous mode
[   58.349523][ T4853] bridge0: port 3(macsec1) entered blocking state
[   58.356253][ T4853] bridge0: port 3(macsec1) entered disabled state
[   58.363444][ T4853] macsec1: entered allmulticast mode
[   58.363787][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.368774][ T4853] bridge0: entered allmulticast mode
[   58.384107][ T4853] macsec1: left allmulticast mode
[   58.389192][ T4853] bridge0: left allmulticast mode
[   58.399751][ T4853] bridge0: left promiscuous mode
[   58.506190][ T4870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4870 comm=syz.3.495
[   58.550566][ T4874] process 'syz.0.497' launched '/dev/fd/7' with NULL argv: empty string added
[   58.563704][ T4874] netlink: 2 bytes leftover after parsing attributes in process `syz.0.497'.
[   58.575589][ T4874] sd 0:0:1:0: device reset
[   58.582543][ T4875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.495'.
[   58.610014][ T4878] FAULT_INJECTION: forcing a failure.
[   58.610014][ T4878] name failslab, interval 1, probability 0, space 0, times 0
[   58.623150][ T4878] CPU: 0 UID: 0 PID: 4878 Comm: syz.0.498 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   58.623185][ T4878] Tainted: [W]=WARN
[   58.623215][ T4878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   58.623231][ T4878] Call Trace:
[   58.623239][ T4878]  <TASK>
[   58.623247][ T4878]  __dump_stack+0x1d/0x30
[   58.623279][ T4878]  dump_stack_lvl+0xe8/0x140
[   58.623304][ T4878]  dump_stack+0x15/0x1b
[   58.623325][ T4878]  should_fail_ex+0x265/0x280
[   58.623356][ T4878]  ? uprobe_register+0xf9/0x750
[   58.623458][ T4878]  should_failslab+0x8c/0xb0
[   58.623490][ T4878]  __kmalloc_cache_noprof+0x4c/0x320
[   58.623563][ T4878]  uprobe_register+0xf9/0x750
[   58.623599][ T4878]  bpf_uprobe_multi_link_attach+0x7e3/0x910
[   58.623644][ T4878]  link_create+0x680/0x6e0
[   58.623736][ T4878]  __sys_bpf+0x61d/0x7b0
[   58.623772][ T4878]  __x64_sys_bpf+0x41/0x50
[   58.623796][ T4878]  x64_sys_call+0x2aea/0x2ff0
[   58.623819][ T4878]  do_syscall_64+0xd2/0x200
[   58.623869][ T4878]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   58.623901][ T4878]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   58.623978][ T4878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.624060][ T4878] RIP: 0033:0x7fed46deeec9
[   58.624102][ T4878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.624124][ T4878] RSP: 002b:00007fed4584f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   58.624183][ T4878] RAX: ffffffffffffffda RBX: 00007fed47045fa0 RCX: 00007fed46deeec9
[   58.624196][ T4878] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c
[   58.624207][ T4878] RBP: 00007fed4584f090 R08: 0000000000000000 R09: 0000000000000000
[   58.624223][ T4878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.624238][ T4878] R13: 00007fed47046038 R14: 00007fed47045fa0 R15: 00007ffcabba2298
[   58.624263][ T4878]  </TASK>
[   58.838257][ T4870] lo speed is unknown, defaulting to 1000
[   58.849730][   T29] kauditd_printk_skb: 512 callbacks suppressed
[   58.849791][   T29] audit: type=1400 audit(1758873076.549:1820): avc:  denied  { create } for  pid=4871 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   58.875475][   T29] audit: type=1400 audit(1758873076.549:1821): avc:  denied  { setopt } for  pid=4871 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   58.911697][   T29] audit: type=1326 audit(1758873076.621:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed46deeec9 code=0x7ffc0000
[   58.945209][   T29] audit: type=1326 audit(1758873076.621:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed46deeec9 code=0x7ffc0000
[   58.969123][   T29] audit: type=1326 audit(1758873076.621:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fed46deeec9 code=0x7ffc0000
[   58.992750][   T29] audit: type=1326 audit(1758873076.621:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed46deeec9 code=0x7ffc0000
[   59.016338][   T29] audit: type=1326 audit(1758873076.621:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed46deeec9 code=0x7ffc0000
[   59.040213][   T29] audit: type=1326 audit(1758873076.621:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727b51eec9 code=0x7ffc0000
[   59.064163][   T29] audit: type=1326 audit(1758873076.652:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f727b51eec9 code=0x7ffc0000
[   59.087750][   T29] audit: type=1326 audit(1758873076.652:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727b51eec9 code=0x7ffc0000
[   59.567576][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.510'.
[   59.798626][ T4931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'.
[   59.807765][ T4931] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.816650][ T4931] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.053626][ T4947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.525'.
[   60.124772][ T4952] netlink: 'syz.0.527': attribute type 10 has an invalid length.
[   60.162126][ T4952] team0: Device hsr_slave_0 failed to register rx_handler
[   60.230222][ T4952] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   60.264861][ T4964] netlink: 'syz.3.531': attribute type 7 has an invalid length.
[   61.416570][ T4995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.542'.
[   61.426553][ T4995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4995 comm=syz.0.542
[   61.507134][ T5000] loop4: detected capacity change from 0 to 512
[   61.525327][ T5000] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents
[   61.541579][ T5000] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm +}[@: mark_inode_dirty error
[   61.553072][ T5000] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents
[   61.565193][ T5000] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm +}[@: mark_inode_dirty error
[   61.576664][ T5000] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents
[   61.588668][ T5000] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[   61.597828][ T5000] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents
[   61.610721][ T5000] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm +}[@: mark_inode_dirty error
[   61.621880][ T5000] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[   61.631698][ T5000] EXT4-fs (loop4): 1 truncate cleaned up
[   61.639761][ T5000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.652585][ T5000] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.663623][ T3459] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 1
[   61.684627][ T4995] lo speed is unknown, defaulting to 1000
[   61.704893][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.914235][ T5023] serio: Serial port ptm0
[   62.184223][ T5039] __nla_validate_parse: 1 callbacks suppressed
[   62.184279][ T5039] netlink: 148 bytes leftover after parsing attributes in process `syz.4.559'.
[   62.532659][ T5092] FAULT_INJECTION: forcing a failure.
[   62.532659][ T5092] name failslab, interval 1, probability 0, space 0, times 0
[   62.546116][ T5092] CPU: 1 UID: 0 PID: 5092 Comm: syz.4.565 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   62.546277][ T5092] Tainted: [W]=WARN
[   62.546284][ T5092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   62.546296][ T5092] Call Trace:
[   62.546301][ T5092]  <TASK>
[   62.546307][ T5092]  __dump_stack+0x1d/0x30
[   62.546329][ T5092]  dump_stack_lvl+0xe8/0x140
[   62.546347][ T5092]  dump_stack+0x15/0x1b
[   62.546368][ T5092]  should_fail_ex+0x265/0x280
[   62.546466][ T5092]  ? _request_firmware+0x1a3/0xbb0
[   62.546499][ T5092]  should_failslab+0x8c/0xb0
[   62.546552][ T5092]  __kmalloc_cache_noprof+0x4c/0x320
[   62.546594][ T5092]  _request_firmware+0x1a3/0xbb0
[   62.546632][ T5092]  ? should_fail_ex+0xdb/0x280
[   62.546655][ T5092]  ? __rtnl_unlock+0x95/0xb0
[   62.546698][ T5092]  ? netdev_run_todo+0x7b4/0x810
[   62.546805][ T5092]  request_firmware+0x36/0x50
[   62.546847][ T5092]  reg_reload_regdb+0x53/0x240
[   62.546938][ T5092]  nl80211_reload_regdb+0xe/0x20
[   62.546976][ T5092]  genl_family_rcv_msg_doit+0x143/0x1b0
[   62.547025][ T5092]  genl_rcv_msg+0x422/0x460
[   62.547063][ T5092]  ? __pfx_nl80211_pre_doit+0x10/0x10
[   62.547178][ T5092]  ? __pfx_nl80211_reload_regdb+0x10/0x10
[   62.547207][ T5092]  ? __pfx_nl80211_post_doit+0x10/0x10
[   62.547297][ T5092]  netlink_rcv_skb+0x123/0x220
[   62.547324][ T5092]  ? __pfx_genl_rcv_msg+0x10/0x10
[   62.547432][ T5092]  genl_rcv+0x28/0x40
[   62.547465][ T5092]  netlink_unicast+0x5bd/0x690
[   62.547487][ T5092]  netlink_sendmsg+0x58b/0x6b0
[   62.547589][ T5092]  ? __pfx_netlink_sendmsg+0x10/0x10
[   62.547650][ T5092]  __sock_sendmsg+0x145/0x180
[   62.547689][ T5092]  ____sys_sendmsg+0x31e/0x4e0
[   62.547721][ T5092]  ___sys_sendmsg+0x17b/0x1d0
[   62.547850][ T5092]  __x64_sys_sendmsg+0xd4/0x160
[   62.547879][ T5092]  x64_sys_call+0x191e/0x2ff0
[   62.547904][ T5092]  do_syscall_64+0xd2/0x200
[   62.548004][ T5092]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   62.548036][ T5092]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   62.548101][ T5092]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.548127][ T5092] RIP: 0033:0x7f7abe56eec9
[   62.548147][ T5092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.548169][ T5092] RSP: 002b:00007f7abcfcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   62.548193][ T5092] RAX: ffffffffffffffda RBX: 00007f7abe7c5fa0 RCX: 00007f7abe56eec9
[   62.548209][ T5092] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000003
[   62.548241][ T5092] RBP: 00007f7abcfcf090 R08: 0000000000000000 R09: 0000000000000000
[   62.548253][ T5092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   62.548264][ T5092] R13: 00007f7abe7c6038 R14: 00007f7abe7c5fa0 R15: 00007fff82e51878
[   62.548283][ T5092]  </TASK>
[   62.548295][ T5092] faux_driver regulatory: _request_firmware_prepare: kmalloc(struct firmware) failed
[   62.868976][ T5094] ALSA: seq fatal error: cannot create timer (-22)
[   62.882369][ T5096] netlink: 2 bytes leftover after parsing attributes in process `syz.3.566'.
[   62.974465][ T5104] netlink: 148 bytes leftover after parsing attributes in process `syz.3.570'.
[   63.269018][ T5116] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   63.300875][ T5118] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   63.309261][ T5118] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   63.317983][ T5111] delete_channel: no stack
[   63.680422][ T5142] FAULT_INJECTION: forcing a failure.
[   63.680422][ T5142] name failslab, interval 1, probability 0, space 0, times 0
[   63.693223][ T5142] CPU: 1 UID: 0 PID: 5142 Comm: syz.0.585 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   63.693301][ T5142] Tainted: [W]=WARN
[   63.693307][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   63.693320][ T5142] Call Trace:
[   63.693326][ T5142]  <TASK>
[   63.693332][ T5142]  __dump_stack+0x1d/0x30
[   63.693405][ T5142]  dump_stack_lvl+0xe8/0x140
[   63.693429][ T5142]  dump_stack+0x15/0x1b
[   63.693534][ T5142]  should_fail_ex+0x265/0x280
[   63.693564][ T5142]  should_failslab+0x8c/0xb0
[   63.693590][ T5142]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[   63.693649][ T5142]  ? sidtab_sid2str_get+0xa0/0x130
[   63.693673][ T5142]  kmemdup_noprof+0x2b/0x70
[   63.693700][ T5142]  sidtab_sid2str_get+0xa0/0x130
[   63.693747][ T5142]  security_sid_to_context_core+0x1eb/0x2e0
[   63.693848][ T5142]  security_sid_to_context+0x27/0x40
[   63.693868][ T5142]  selinux_lsmprop_to_secctx+0x67/0xf0
[   63.693926][ T5142]  security_lsmprop_to_secctx+0x43/0x80
[   63.693955][ T5142]  audit_log_task_context+0x77/0x190
[   63.693991][ T5142]  audit_log_task+0xf4/0x250
[   63.694021][ T5142]  audit_seccomp+0x61/0x100
[   63.694104][ T5142]  ? __seccomp_filter+0x68c/0x10d0
[   63.694190][ T5142]  __seccomp_filter+0x69d/0x10d0
[   63.694213][ T5142]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   63.694252][ T5142]  ? vfs_write+0x7e8/0x960
[   63.694338][ T5142]  ? __rcu_read_unlock+0x4f/0x70
[   63.694359][ T5142]  ? should_fail_ex+0xdb/0x280
[   63.694387][ T5142]  __secure_computing+0x82/0x150
[   63.694409][ T5142]  syscall_trace_enter+0xcf/0x1e0
[   63.694489][ T5142]  do_syscall_64+0xac/0x200
[   63.694596][ T5142]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   63.694620][ T5142]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   63.694667][ T5142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.694688][ T5142] RIP: 0033:0x7fed46ded8dc
[   63.694704][ T5142] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   63.694747][ T5142] RSP: 002b:00007fed4584f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   63.694766][ T5142] RAX: ffffffffffffffda RBX: 00007fed47045fa0 RCX: 00007fed46ded8dc
[   63.694778][ T5142] RDX: 000000000000000f RSI: 00007fed4584f0a0 RDI: 0000000000000006
[   63.694790][ T5142] RBP: 00007fed4584f090 R08: 0000000000000000 R09: 0000000000000000
[   63.694802][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   63.694814][ T5142] R13: 00007fed47046038 R14: 00007fed47045fa0 R15: 00007ffcabba2298
[   63.694834][ T5142]  </TASK>
[   63.949161][   T29] kauditd_printk_skb: 183 callbacks suppressed
[   63.949185][   T29] audit: type=1326 audit(1758873081.503:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5141 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fed46ded8dc code=0x7ffc0000
[   63.976383][   T29] audit: type=1326 audit(1758873081.778:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5141 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fed46ded97f code=0x7ffc0000
[   63.999762][   T29] audit: type=1326 audit(1758873081.778:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5141 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fed46dedb2a code=0x7ffc0000
[   64.023014][   T29] audit: type=1326 audit(1758873081.778:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5141 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed46deeec9 code=0x7ffc0000
[   64.046457][   T29] audit: type=1326 audit(1758873081.778:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5141 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed46deeec9 code=0x7ffc0000
[   64.096468][   T29] audit: type=1400 audit(1758873081.921:2016): avc:  denied  { read } for  pid=5143 comm="syz.4.586" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   64.119869][   T29] audit: type=1400 audit(1758873081.921:2017): avc:  denied  { open } for  pid=5143 comm="syz.4.586" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   64.143701][   T29] audit: type=1400 audit(1758873081.921:2018): avc:  denied  { ioctl } for  pid=5143 comm="syz.4.586" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   64.173662][ T5149] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   64.182085][ T5149] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   64.215764][ T5154] loop4: detected capacity change from 0 to 128
[   64.226624][ T5154] loop4: detected capacity change from 0 to 512
[   64.233257][   T29] audit: type=1400 audit(1758873082.043:2019): avc:  denied  { ioctl } for  pid=5152 comm="syz.4.590" path="socket:[9726]" dev="sockfs" ino=9726 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   64.259262][   T29] audit: type=1400 audit(1758873082.043:2020): avc:  denied  { setopt } for  pid=5152 comm="syz.4.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   64.279479][ T5154] EXT4-fs: Ignoring removed mblk_io_submit option
[   64.286457][ T5154] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   64.299058][ T5154] EXT4-fs (loop4): 1 truncate cleaned up
[   64.305764][ T5154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.426029][ T5168] netlink: 'syz.2.595': attribute type 12 has an invalid length.
[   64.778165][ T5154] ==================================================================
[   64.786321][ T5154] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark
[   64.794255][ T5154] 
[   64.796585][ T5154] write to 0xffff88811a48e54c of 4 bytes by task 5164 on cpu 1:
[   64.804228][ T5154]  xas_set_mark+0x12b/0x140
[   64.808758][ T5154]  tag_pages_for_writeback+0xc2/0x290
[   64.814145][ T5154]  ext4_do_writepages+0x6b2/0x2750
[   64.819284][ T5154]  ext4_writepages+0x176/0x300
[   64.824197][ T5154]  do_writepages+0x1c6/0x310
[   64.828972][ T5154]  file_write_and_wait_range+0x156/0x2c0
[   64.834691][ T5154]  generic_buffers_fsync_noflush+0x45/0x120
[   64.840619][ T5154]  ext4_sync_file+0x1ab/0x690
[   64.845303][ T5154]  vfs_fsync_range+0x10d/0x130
[   64.850078][ T5154]  ext4_buffered_write_iter+0x34f/0x3c0
[   64.855656][ T5154]  ext4_file_write_iter+0xdbf/0xf00
[   64.860893][ T5154]  iter_file_splice_write+0x663/0xa60
[   64.866363][ T5154]  direct_splice_actor+0x153/0x2a0
[   64.871593][ T5154]  splice_direct_to_actor+0x30f/0x680
[   64.876980][ T5154]  do_splice_direct+0xda/0x150
[   64.881772][ T5154]  do_sendfile+0x380/0x650
[   64.886196][ T5154]  __x64_sys_sendfile64+0x105/0x150
[   64.891427][ T5154]  x64_sys_call+0x2bb0/0x2ff0
[   64.896107][ T5154]  do_syscall_64+0xd2/0x200
[   64.900704][ T5154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.906790][ T5154] 
[   64.909294][ T5154] read to 0xffff88811a48e54c of 4 bytes by task 5154 on cpu 0:
[   64.916927][ T5154]  __writeback_single_inode+0x1f9/0x7c0
[   64.922523][ T5154]  writeback_single_inode+0x167/0x3e0
[   64.928455][ T5154]  sync_inode_metadata+0x5b/0x90
[   64.933415][ T5154]  generic_buffers_fsync_noflush+0xd9/0x120
[   64.939338][ T5154]  ext4_sync_file+0x1ab/0x690
[   64.944047][ T5154]  vfs_fsync_range+0x10d/0x130
[   64.948836][ T5154]  ext4_buffered_write_iter+0x34f/0x3c0
[   64.954426][ T5154]  ext4_file_write_iter+0xdbf/0xf00
[   64.959823][ T5154]  iter_file_splice_write+0x663/0xa60
[   64.965253][ T5154]  direct_splice_actor+0x153/0x2a0
[   64.970366][ T5154]  splice_direct_to_actor+0x30f/0x680
[   64.975761][ T5154]  do_splice_direct+0xda/0x150
[   64.980615][ T5154]  do_sendfile+0x380/0x650
[   64.985057][ T5154]  __x64_sys_sendfile64+0x105/0x150
[   64.990286][ T5154]  x64_sys_call+0x2bb0/0x2ff0
[   64.995507][ T5154]  do_syscall_64+0xd2/0x200
[   65.000048][ T5154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.005946][ T5154] 
[   65.008390][ T5154] value changed: 0x02000021 -> 0x04000021
[   65.014106][ T5154] 
[   65.016429][ T5154] Reported by Kernel Concurrency Sanitizer on:
[   65.022674][ T5154] CPU: 0 UID: 0 PID: 5154 Comm: syz.4.590 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   65.033887][ T5154] Tainted: [W]=WARN
[   65.037706][ T5154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   65.047760][ T5154] ==================================================================
[   65.130278][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.