last executing test programs:

10.825787109s ago: executing program 3 (id=1494):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0x4}, 0x18)
socket$inet6_sctp(0xa, 0x1, 0x84)
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x9, 0x2, 0x0, 0x40, 0x0, 0x8, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x2, 0x7, 0x2, 0x0, 0x1, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0xc2}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
unshare(0x2040600)
r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x8010, r2, 0x0)
perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r2, 0x3)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TRIM(r3, 0x0, 0x40)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, &(0x7f00000002c0), {0x39}, &(0x7f0000000300)=""/37, 0x25, &(0x7f00000004c0)=""/237, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0xe)
fchdir(r6)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2000, 0x181)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

10.706598109s ago: executing program 3 (id=1496):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x202000000050be}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
syz_open_dev$loop(0x0, 0x7, 0x180862)
r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
syz_open_dev$sg(&(0x7f0000000340), 0x8, 0x24102)
mount_setattr(r5, 0x0, 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a2d0000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x20100, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r5}, 0x8)

10.490636706s ago: executing program 3 (id=1501):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000600000000000000000085"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10)
mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000c80)={[{@name={'name', 0x3d, 'lox-/\xd6\x8cb\x00'}}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x80000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x5f}]}, 0x98}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0)

10.370637596s ago: executing program 3 (id=1503):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x2, 0x0, 0x100, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000006c8b, 0x37}, 0x7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9aa}, 0x94)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$eJzs3T9rJGUcB/DfbGb/qMVuYSWCA1pYHZdrbTbIHYipPLY4LTR4dyDZRUgg4h9cU4mdjaWvQBB8ITZ2loKtYGeEwMjMzmR3k3GzkWxE8/kUyZOZ5zvP73lmkkyTJ++9ONl/nMXT489+iV4vidawG3GSxCBaUfsilgy/DgDgv+wkz+P3fKbh9M9frcj2NlgXALA5l/z+r6Tlx0dFjx9urjYAYDMePnr7zZ3d3ftvZVkvHky+PBolEVF8np3feRofxDiexN3ox2lE+aLQjvJtoWg+yPN8mmaFQbwymR6NiuTk3R+r6+/8FlHmt6Mfg/LQ2dtGmX9j9/52NrOQnxZ1PFuNPyzy96Ifz5+Fl/L3GvIx6sSrLy/Ufyf68dP78WGM43FZxDz/+XaWvZ5/88en7xTlFflkejTqlv3m8q168OkN3yMAAAAAAAAAAAAAAAAAAAAAAP5/7lR753Sj3L+nOFTtv7N1WnzRjqw2WN6fZ5ZP6gvN9weKVp7n0zy+rffXuZtlWV51nOfTeCGtNhYEAAAAAAAAAAAAAAAAAACAW+7w40/298bjJwfX0qh3A0gj4s+HEf/0OsOFIy/F6s7dasy98bhVNZf7pItHYqvuk0SsLKOYxDUty2WNZy7UXDW++74xVczoMI2mU73LB203j3XFxkft2To29qmfrv29pHkNu2fF94obF+dvXCeaR2/HuSOdv6uwfhTXm06n8VT/ysvSea5sTFf0iWTV98Vrv87KXpjFUp9OuaqN8XbVWIifezbWep6jN4tf/FmR2K0DAAAAAAAAAAAAAAAAAAA2av7Xvw0nj1dGW3l3Y2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI2a////dRrpcniNVCcODv+tuQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB7/BUAAP//vaZV2Q==")
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x103940)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000040)={0x80, 0x18, 0x2, 0xfffffff7, 0x0, 0x9})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r8, 0x0, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
sendmmsg$unix(r7, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="46771690078383cb4957baad667c185124f593743317b0218062669c561840c784dc244c142d5bfd45562751aa27f86fbeead7dfbf264e1b9899055a81192ec2bb0b74db67de28caa2214c5e7aa381d93e7a7078cdecff1cca33b6fa46494dca94cf608e72b4b4b28c43a79cd3dc6a3b4b48f11e0f13a6", 0x77}, {&(0x7f0000000540)="1bb58ff73e372644f13f7621535b3565ca937d", 0x13}, {&(0x7f0000000580)="d397ca546e004358491088256f16300f3576f3544c8dbfadebda53bb3f6b4b35c6f0e9f9e8da89", 0x27}], 0x3, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x20, 0x80}}], 0x1, 0x4000000)
setuid(0xee01)
fspick(0xffffffffffffffff, 0x0, 0x1)
write$cgroup_subtree(r6, 0x0, 0x32600)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f00000003c0), &(0x7f00000001c0)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18)
getpid()
r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0)
syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080))
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000000d00)={'syztnl0\x00', &(0x7f0000000c80)={'gre0\x00', 0x0, 0x20, 0x20, 0x3, 0xcaf7, {{0xb, 0x4, 0x3, 0x3, 0x2c, 0x65, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @rand_addr=0x64010101, {[@timestamp={0x44, 0x18, 0xb3, 0x0, 0x6, [0x8, 0x1, 0x0, 0xa54f, 0x9]}]}}}}})

10.293078802s ago: executing program 3 (id=1505):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e6400"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010300000000fbdbdf251c0000001800018014000200626f6e6430"], 0x2c}}, 0x40006)

10.012755445s ago: executing program 3 (id=1509):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x1, 0x1, 0xd01, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4040841}, 0x48000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r2}, 0x38)
unshare(0x20000400)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000001900)=""/4108, &(0x7f00000000c0), &(0x7f0000000440), 0x2, r2}, 0x38)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1100000004000000040000000100750000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
statx(0xffffffffffffffff, 0x0, 0x100, 0x800, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)

9.952220329s ago: executing program 32 (id=1509):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x1, 0x1, 0xd01, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4040841}, 0x48000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r2}, 0x38)
unshare(0x20000400)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000001900)=""/4108, &(0x7f00000000c0), &(0x7f0000000440), 0x2, r2}, 0x38)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1100000004000000040000000100750000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
statx(0xffffffffffffffff, 0x0, 0x100, 0x800, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)

2.389091688s ago: executing program 2 (id=1664):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0xfffffe23, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0)

2.299536424s ago: executing program 2 (id=1667):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1})
mount$9p_unix(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f00000004c0)=ANY=[@ANYBLOB='trqyans=unix'])
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2440, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0, 0x15}, 0xc92, 0xffffffff, 0xd15, 0x6, 0x0, 0x9, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x9)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="500100001000130428bd700000000000e0000001000000000000000000000000ac1e0101000000000000000000000000000000004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}}, 0x804)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000340)="390000001300090468fe0700000000000000ff3f040000000800001000000000040100000a00010014a4ee1ee438d2fd00000000000000720811e1ac588b4dcc30becedf66a8bdf13d06e44c975ed8d3c6c7cad3a794db96ddefed0c98edd6b448096bab7744d82095b949b843e08efb9fef204c70645f7e43969dffa20dfee484a2bae6552388a1fd75b6a176c1bf703c5fb3c9fc1e6c25769ace662b0bf51ae37720", 0xa3}], 0x1)
writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680))
sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="301aadf06f8c99013d1c000000", @ANYRES16=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x30}, 0x8000)
sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x44040}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getgroups(0x0, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000000000000046400010073797a300000000044000000090a01040000000000000000010000000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900bcd55a7107cd99c54d65020073797a32000000000900010073797a30000000003800038061e9d8733fd1370b638f72a32d06b9b9296eff58afe8f71557eb284a16daa9874d90f882f94c16f2dc"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2)
socket(0x10, 0x3, 0x0)
link(&(0x7f0000000300)='.\x00', &(0x7f0000000480)='./file0/file0\x00')

2.145615747s ago: executing program 0 (id=1670):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50)
syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c6e6f6e756d7461696c003130dbbb3121258e322c262b537f5d0000006e695f7804590000000000003d312c696f63686172538c6c90392bc69373686f72746e616d65653ff959f53d6d697865642c636f6465706167653d3821332c696f6368617273650000000031323831e54f1bb0a3d72c007e3db5a829498e2a721ae5804ff8ccb41eff157cfdfcef90a6010100003ceeeac934b3165b4a0ea182cdd0666ab32f2d041a99ac9fc865ba946f1bb7759d02742dfcc68937ff86d7a54d6de8823119c767d45d6047209f4436383ee21373a9c3f450cb6d7c37b59a34407d4a0e6a382108ddd52580281f1d8ad71c4ceafb49960f1429b090d1429f519f9c2b0cb88ffa6fc04fa61c275bf560b9eeeb2d0c8b3ddeb56783f9908c21cf9b2ba0b76b9b60c991bb17c7d0accad1cdaf3259b7dc405d72e2bc3abe0cf37bda3dbfc05e2e55f8aa272b5ea736019c3c0a9b34115a445e0c5da1bd7352ec9529f5caa71f1ae71b36b500c79fffb487ed081232b5d93d3162c7f71f4d5756c9e5442fa3692127266a0c15dac9171edda86b148d17a48d4d90470e79620eeab5acf6f78f807298315e2b80fe1874098d75ab47837a96699e2a7db456f2a4368bece813135ed970951c7471ac16703820a799421cb24f32a5f49ab45bec637c38bcbdae4da3a05f96b2162c47d0b1277e1b1bcc981cce8f6f7f3dd8d06352eb387997b498a732d8442115755ff14d508891abd401b3cafcba75a6901fbe08002674d8663b8c40e9cf13fa4c4a092cb8004a1d2a6fe18cd5d702493d52a7110b17e64b9fa22fb3ace98b9ca35cb98c65f0902dd430373f6ae43c4a60c423b6f65b5ecc2093698072abc857ab2d36a261a7fc5776d39c3d5d5fad291c88ff9726d5ee32c6bcac1799ade9459eb39b56d985d29b988c72c9ad7e82b589f454a58d7cd5ace9436cf69acc217737c863d8938cc95767a0c9b14cb79f5b45ea2408d1da65a2ed8cf55a"], 0x4, 0x24e, &(0x7f0000000a00)="$eJzs3cFLk38YAPBnOtGf8GMeAkmC3ug+1OiuhII0KJId6pSkUjgTEoQ6qJ06d+pS/0Jdgq5Bh+jaPxBBWNBFO3kIFvqq07nlrLZFfj6XPez7PPt+33cv+26HPe/NM/Nz0wuLsxsba9HTk+nKjsTLgc1M9EVHdEZqNQCAf8lmuRzr5VS71wIAtIb9HwBOnsr+nzm0/2dW974TXG39ygCAZvH7HwBOnsnrNy6PFgpj19aTnoj5R0vFpWL6mI6PzsadKMVMDEYuvkeU96Txk4nC2GCy5XNfFOdXdupXloqdB+uHIhd9h+vHJwpjQ0nqYH1X9O7Uf+iNmRiOXJyqXT9cq74rIs7vmz8fuXh/KxaiFNOxVVupXx5KkktXClXzd2/nAQAAAAAAAAAAAAAAAAAAAABAM+Q7tlvnlLuTpGb/nnw+2VU1ntbv7w/0X43+QON7/YGq+/tkYyDb3mMHAAAAAAAAAAAAAAAAAACAv8Xi/QdzU6XSzL2fBXffPX9zVE6DQWZn3po53RHx+1M0GPx/7tPT+jkPj3N+/mzw+myLJ9067cetert2+/SFxf6L9XIi27Q1d/zKm/I117RL68VuMPLtyOTHk626wjurn+l/NjL1avnjl0Zfp40fSgAAAAAAAAAAAAAAAAAAcEJV/vTb7pUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQPtU7v9fJ8hE3aEGg9V2HyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwIAAD//8pHpIo=")
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0))
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/fscaps', 0xa0042, 0x148)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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")
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$eJzs3c9rJFkdAPBvdbpjMpOZZNWDLrj+2JXMoNOdbNzd4GFdQfS0oK73MSadENJJh3RndxIWN4N/gCCigie9eBH8AwRZ8OJRhAU9KyqK6IwevDgl1V2dmWS6O5mZnnQ2/flAdb2qV1Xf9zqp6npVj6oARtYnIuK1iLiXpun1iJjO5xfyIQ7aQ7bc3TtvL2dDEmn6xj+TSPJ5nW0l+fhyvtpERHz9KxHfSh6O29jb31iq1ao7+XSlubldaezt31jfXFqrrlW3FhbmX158ZfGlxbmB1PNKRLz6pb/+4Ls/+/Krv/rsW3+6+fdr386KNZXnP1iPR1RsfU50z2xXvXQkO1th5zGDnUfFVg1zk92WGHtozu2nXCYAALrLzvE/GBGfiojrMR1j+eksAAAAcHGkX5iKsSQi7W68x3wAAADgfaTQ6gObFMp5X4CpKBTK5XYf3g/HpUKt3mh+ZrW+u7XS7is7E6XC6nqtOpf3FZ6JUpJNz7fS96dfPDa9EBHPRMT3pydb0+Xlem1l2Bc/AAAAYERcPtb+/890u/0PAAAAXDAzwy4AAAAA8NRp/wMAAMDFp/0PAAAAF9pXX389G9LO+69X3tzb3ai/eWOl2tgob+4ul5frO9vltXp9rfXMvs2Ttler17c/F1u7tyrNaqNZaezt39ys7241b673ekM2AAAA8LQ98/F3/5BExMHnJ1tDZvx0q55yMeC8Kh6mknzcZbf+49X2+C9nVCjgTIwNuwDA0BSHXQBgaErDLgAwdMkJ+T077/w2H39ysOUBAAAGb/ajve//F/quedA/Gzj37MQwutz/h9HVuv9/2p68ThbgQik5A4CR98T3/0+Upo9UIAAAYOCmWkNSKOeX96aiUCiXI660XgtQSlbXa9W5iLgaEb+fLn0gm55vrZmc2GYAAAAAAAAAAAAAAAAAAAAAAAAAANrSNIkUAAAAuNAiCn9Lft1+lv/s9AtTx68PjCf/nY78FaFv/fiNH95aajZ35rP5/zqc3/xRPv/FYVzBAAAAgJHwSC/w77TTO+14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiku3feXu4MJyz6ziDj/uOLETHTLX4xJlrjiShFxKV/J1F8YL0kIsYGEH8y+/hIt/hJVqzDkN3iTw4g/sHtvvFjJv8WusW/PID4MMrezY4/rx3b/44cWLrvf8WII9OPq/fxLw6Pf2M99v8rp4zx7Hu/qPSMfzvi2WL3408nftIj/vOnjP/Nb+zv98pLfxIx2/X3JzkSq9Lc3K409vZvrG8urVXXqlsLC/MvL76y+NLiXGV1vVbNP7vG+N7HfnmvX/0v9Yg/06f+VyPihVPW/3/v3brzoXay1C3+tefz+Encj/+bn+ZLPBy/kP/2fTpPZ/mznfRBO/2g537+u+f61X+lR/1P+vtf61/t8U7i+te+8+f+iwIAZ6mxt7+xVKtVdy5sImuln4NiSOSJ8XP0X/fOQDeYpmma7VNPsJ0kzsPX0koM+8gEAAAM2v2T/mGXBAAAAAAAAAAAAAAAAAAAAEbXWTxO7HjMg8NUMohHaAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMT/AwAA//+VPdXC")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

1.802884534s ago: executing program 0 (id=1672):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

1.536713846s ago: executing program 2 (id=1679):
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x28, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x64}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40c00}, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20044451)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS    \x00'}, 0x20)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file1\x00', 0x3000046, &(0x7f00000005c0)={[{@dioread_nolock}, {@data_err_abort}, {@jqfmt_vfsold}, {@delalloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@block_validity}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
writev(r2, &(0x7f0000000700)=[{&(0x7f0000000280)="eeeb7a7d44819c95867b95bb180a731b2b49d53fbfe52dfbf7a556615a69a3a3456888676ba566a66d97b71d44294eb341bc9764078b26470e255edfd9b6a6a3a24d23b1f1bc85ed8fa9b15654acb5e054573ef2d1c0e92769024b4b0155a038f08f238f13512ff62b9d42ae18c0dc63e536ff683b00ac0b10a9db929a6c92eaca88d4f7fbf8a7384e0c61410c60bc4ada8419cde514fca1d59b906ae3", 0x9d}, {&(0x7f0000000340)="3f9c50b57744d6d4d47ce6275be1c74599699abbe895100a0b98dfaa2bac67fe76289b3f2312e28eb022d45c237aea271b1ee14dc388b4b1209cf2ede2bb7e887181d2d09660f1e19323e15e1f0c84ea6dfdba629f9b801b99ff2df0c0c5e2654a3d7de0def6a09aa869cdecc6718497ed9185186101e9", 0x77}, {&(0x7f00000007c0)="f2e17a7fabe1ab64343624a24192678db46ab01c03aff615bd5f326136a298cd4198b97b9a187069f193d90306ddedf1ee1616d9d0057b1ca6037d0996b545e91fac9b6a5a73d1f23f0fd51ed1e2176e28c3f8e318f2e5228682c6bb555789bc9ffffd4defb290787652f0f6ce6eeeeb3710262d5c3abe0da8ae25937f9f10b0872409e2bb", 0x85}, {&(0x7f0000000880)="ac719ecd922f2fc1e79d1385371a10146ea506458f026eb7c045eebce1cba4b321459151e5272e3d919a74da6384cb957f851381a170e3aa449a4e3e81214d8ef1a6a684146bbf2fce8a872dc4b35fcecb1451d096d02a2e5045df10248bde2e49261fd4f7284bf2441b4c7a01e0f084f6db93fe3524857e7e622b249840afa50d59d20d057b44b9b9a27cfd345c614ac7c985dcec5d2e44bd387dfc91a9ae7cab9ffd688dcd", 0xa6}, {&(0x7f0000001600)="57683094d8390248f340e787c25dbcad974d3577bff1f69aeb85199e1c31daa438b70f8685bda731fff5031ac9886ecf822d9c875e5a6d89f2272d62c3ee40dae4294c01316e27dd7edd173edc934dcb11c6ccd1fe87e2be9a6aab800f49c107dbd1bec20f9ed3997d3187f5fc327a0de9f3b3bd28aa34a381f6353cbaa0b065d805cb1fc601a31c5c453d5cf5d009d02c0707c52d0d9f8d7b7dbbbaf07d44ec50fa0b895ca6665cd6bba225e907509ab154eda40450af84435927a56b4d1055ac27a755bef578ea31bc2fdf03c02b9d70c7b47877098bc31aed758de6465adba1dd164cb35f91f2d0e187be251836a69b5efb85a6de331a5d2a77be7f8110a3dc4502e6fea669df4a3a7e8327cc3784681c4b96de16b6e227e9e1812f2b2aa87409d2cc6550760efced6e7098a223bb1eb762f032eaf2dd55a1369581563cd97f9f304b7d7318cdbb535ecffa9030d99460c465719a60bbb682e4f42cce8264e2eb96d24c1b2de63ca30160c5f9686ea2452b329302dde36e9c036a0c6a5a3e06cc0ba6a24a30b66a3d4c8cc67740af6326f57db03f78f60d5313ac4be00819f75a6341833ab54eb20efd5acaa00469f533b6511e0352d8faa34ed254abeeedae368b08b518be558a88e82a13220e5644680872fa7216be7b83a1560d4152c5124b2b39430d8810d79b8fe670908bf429e05e37994150379855f6f27d55e6c02ec822aee575a9486b2ec148e9aed15682ec6a8dc42df08ffe1f31a6cf1a1153d1e21e2c86620c9275251f0507aea98cd499a1127c0a5ecfe109f2e9b4515bc6381cebbf527cb1bc63328e94c4c61375577c31d9fafa1fb7ca24e12bd98f388742c5f59c9e73e254fc9e09a651e87b1ab1176255c442b6186b56421e92a09da025b2ccb1ef3a33dcd871b6cdf27b39dd6ba253690010d423de979f0f7b075224d9af2726ecd81df6d42491f03f98ac19dfc42b62c965f950b85e8e0da38ba8df3ab4f5c6eff29cd00a81994a05cfb9d7e162f3b4b2e9bc3f4cc0c5a3cac487e65b0f87cf739e8f7303b9e0972616117fcc19105946e39b038e92557f64b57ddbef3469bade009d26f33a7ae0f9cef097141b6d26fe94f9eca293d32c95fa047e7d294229833d17224c2dfe3567fab7811b855b96351226267febb2064c61894b69ebe654710dfc2fb168c81702ebf8f72433a2919d85970fe6daf10e15d469efba5962308063d96af248a708f81114a1a48d5bd3b35555093ddd2039d27b91f02384e4c7a63a51b205d9c6dac0b65bbc5888a2fe9ce218897e0f0738232f55b97c9bedd1dd19dd90763c679a9fabe0e6859d1498c14d93d478b818bdbec2fd8e047696777ef64b36f3babe54060cfa4b2566e689c8cdd50a6c0deca6b4600ebfa4ec0896ffe39f277c984c8b1b0a74ea0d508d380feb949cc617652b782e2f08d9305b9394fc314e118ced2020681f720fa58687bd30d898ca410dcf8be8bb9ecea024223fbcea84758abde64ea35048e6869b3d9c9afb93a5ee840b76b9c0c9cc46be9ea3bd23fec20fd22397d755b22bc7237f96c1459484a85b466de8ac26c047e2870747cd033da823dabce72bebdc25e7265d70f3d78924ee77220964e584c3b9e236c0e7cb2f5de227e77c076689c59660d1050a33bbf7c37b2c1c7c93d84348f47a4e9e7bbc0ca3cbff37a4ac36ad75e7cbfcd0a8b457684129d83322ac7a39b30ca3a19072825f69a63addafa666cc5bba340fb68d35d851f4a3ad1ffdf117d6c4fca9ae7c23dade21ee3d7961f85609a6d3077ebf1ba8c8926d2f4d9a357779102de268c05807a5c424470fcc049224f98e4ceaaca09991abc8485926046b757a5a01e21a638b129e45c09c01c254d60bfbfc36443a2e88abd68aac586e560fdb2b0dfe4d8685aa2287398ce2dca005823fc1b190188e36d814b345e79482018034e838cfff8855145d80c0422d6ee01c00346f9611d4b8d4c065a8151f4e6a6475933f0588595671d98a7f6bdf59eef45ce667b6e2632f8970c770516f1a086ece34bc9b830fc5662513a1c77ad5e67a115d8555ad1ab9a068275f0598def64ba466c3f05c5f60523d79d8b0074ded0962addf6d92bb32e5382a01338b2e73950ce6158f541099074f6005a8a0efb4b8dc8528bd845bfe0d76a8ba154fc9332284637dba26b548737354b4eaafce38c6a4015b21d915c668c1b34c85637c111b44c53fa46bf49f9da6146dc00d8e34424f656df006094072ac046489095853baab2278cf91c649921fc198fde5a665fb6fc7d315b2b1fed9519012bd3e703501b48dd33d7e38af9ef886c2ea6d1c403259ccb27addce143dd0fc4f61664fad9d0685aafa54f8235c25094b2fb05cea045f09382e8994cf0f31a257c62a7efdac175aa9768806fa06df23f23875efb1cab463b964f7ca7cae124cd3e9a902dc2e48149b2d7988d7a0cb540384ecbf3b673e7cf0e7dfd3816ab723fd9b6ae983adf02ddd3c50baa3aeec9eb4c7caeb0078a03fa20d53cf3db584e33849f0956a0257584135604f5a35b223de688b379430f32c18d52367df21a796002e2362dadc683473dd8143bc0045705ab352be36452afb52757dbce8434bc5115fd8e35330ecfde190cbe42b2fb026665de013ff27c229e194785959b7c16c5bcd745fb692ddd8882c1d58762221615c17506269c34d9e3974d70fe477e652adc756e3969a333be61505ef6d59fd6cfd11b63d5aa8993dc9e529dca3f9e7d161b985c03816115e56bfb434b65649be8534662f003c6ec9ebc105bedf0eba240a87ba766fe5b2ed33b8ec4cdeda2fd38e00578a1edd62b8abad02315d9706746923d35723b1fa7e81784035445bf5368eddf459dee09357e4bf9f7f4314755df023e1d25acead5cdb261c183563c826abb31ed60f7c60dcaeef5019f0c35c1128774681823997b61d743584ba1d9a7f47087c106b3c8a47a10699b328f42b47a3e5e1c554422c3f8ba68616c338a3506eb14f8c9c2fb515bb66ecc9f2a2d76a3bb5261436848b3fe4084ac0cdcc0c76560a9bad265a9438fa6242e3c138d66de7c093617dae888d43a56876ad8a8b5412ba558a26e6ffa02cec1f45621a5d62f6076a0af806cb120c5bab736fc2ba7fce4760ebbca7dde5730971b20d08e65b7bc4a49b30b4c9420669f9b45dd7947c0f78a3fba8c8b1646710870189aed67e35f54f042824620cb3ffa5258e82a151a41a7fbe5b82ba33ac0b0d0f4576fd4cfdb95bf105f53b3dce6dc59986233768956513929d0e3167c0d2f099c748af9c0f54b5fb045890fc09277827babc186095153682e8c0b5879dfd48b7ee7140981ab1f200be5c6a6783f2c03c611492df0e6ed1e13ef482ce4dde75c4cb481cdc995e47ba8ef388f74a1bb547ffa4c5b6d2c7ecbb4429b0a315077029e175630da47a6d75898e8e08167ba5fee307a83020397ecaa6a8a9db03c16151baf8509db4ea9ea8ba12e4e131f7d14a741240c4c0d61a6932ba30aca785b4042b302e164d42a6177e998066129161e7d52e694372cc260d5f7e5303b6de78de2c44294243655b3a95db04977a6cfff45a871bd490eb33aaadc1612cf1dddc481f7654030b29dbb8d46de010f2613fc3658e34838064e85c2d74be26fed32ba4a7404742ef50dc83784ffc641fad1ece73f61b3e9d66dfd4d967103ca90c59d5bfc0318184696c5a33e33e3700dd328d12e4a8cf760f0ad0e151b44f2722720451d7718302ef402cb0ec515df469f7ab27946ec78fb8355636eecf36e79b35a60a5cb5ee2d18486ff5dbe0ce184a8b2a467cf4aa15218bd9b213d5300eaf2ecdf20f4e4c1602ffd30cd3e8358289d7258a5d49be4f03763ad870289f471ec1c3ec4c7c7c79e7ea50edbdfa14b4f14582d137a78421e8f0cc7112d27bc85475231fac9b5003052da4bce80b97a81e542668b8983bfc99ef8121957c308499b2610eb8ea11dbfaf62cb178d46e879d504b0ad9f6224a6c15975fb253541963144dcb4ceab04725001911f6b6c590f887897b3cbc56ba934b844b29b46374a7aea87c4a755033ec6b07f93b74c43c4e31e8586012d59c0427c8dded16eb430eed78031030a688d20010c51c8f82bcedbcf827893f07e81582dd3ae253122fe403bef3d6317d1c45b43aafc7ead95d5fc2f06322bd4b03649b3130ab637ecb60017a9c87150f5b072149361d7a5923cfec8fe285ee5cbae7e43dc88ea13513f74ea36da639e21d96bd052d606773bbfd65c168b1024f4366a22f7a9e610f1c251b27f734444cff8f5e795b001be9f66e52592ac8dcbc8a82cfd44d65c30f5809700f1eb8554c259a42aa940577ae2855e327744f7cabe8f56328e6e1257bf33ca17b7c38f04365f1839331e01865e67b4ae97b35905c7c6e335f9765fa6ca308d6b4cda57e00bc16cee16050c12fd0749b0930981e053c679718c95b6766a11896515eac631eff77bcfb36befe084d83d153063893b10a702e2e8484438e56e89164386fcb2f57c498fa2d374672c04db377b40f14cee4fb198da2bf0394e5b63482b094a441b570bfce156ee3645bfeed135e45568b1e66d7029bea6ca17b95d43e675408f04cfb14942919eb959f0aa37538dc6dc99b53edf3f4fc964f0ef1a46f1d1e9f30688cd5980a5a6c795aa84f62a4ecdf596d8a69118c30312999253b45687815f3bf8955dca7359b4598302ffa6c6777a4509cd41b1abca5bfcce919d074f0cbf692d34651e5e1f6da6d39be73b323bd112c55bef5a6035be0b95b9e6a9517869462aa13ef48a3fca28bf82f3f6c66e07b9aac97f076dc8046c882d6aac21aaaf9ff329348909ec9ef03f163a02b55ceae8a140e1cad8a12176c61d09d9ff0e9dbd70a8a40253b49d386de710da0f5c686c3a349e424e19abb1a6ef630c1295f48bb4f0313c916833fe2179e8ce2c3694145dc389cbc2b5a26724976f1238febde5d1f769d1f2a6d288e378dfbc7a75cf106cfd94f767c2c1b7aa2c9974b69598a0f508d9cbadfd6f4aed1e10792db6aa39503bd05436ed838da5b22ece9b9fc3a618fd39f2e078954f986b41ecb56d5cfdba3c71d6b486aae3de7d39da1a64a943b0da2027b822f60bd31aa828176400f5c3502c0ef47f112ff8861b6a7f76fbca18ace1af5c1ed524e0cb4c83272d31016327e60550bb255acfc074df8c1b20615dc562bf5ee8aa99bacaa4af93ec692ef625b7a2ab61abd2ba56de0d91b9933a00da740fcc6eff993b74b4bd2304d66490a6a21a61fa7eddc5d923fb21ff6829c9284aa35e6106a30b57826c8df2e9cb05368cd6e317c25587868fd3846e168b902d86f5aba34a7a9439c7d2ab740f54f8c4dfb2162b8c410209bc56b93d7b3b69fca0686bdefec692e197da660383e8628dd2f5bbe73bcaae253929b371d1f1354d1d37426d23436c86f81313f451ba139926f8a9ba905e9cdc41c73d44722caef38f03757de09b9e15c0c790f6fe5e7280196ff12d13e5261a1c8a021a7a89b32cd0c1b5cc04bbb4eeb05a38651dc470a9b5b4b27eb86778a521c41476693996c0f2695f0514b85dbf674b46f6603a3eaf771e89bad5792b57c1e3bc535586535b3415b209087f7ea182003972dc5895f034e4458a7a9543121e06259c4af105cf9b2c4a3c133e50b9dfea5939b902e3482fb86b62cd9ed06603a4172d92ecf439cf96b38208016bc19945207f56c7dc81e86f96dd1a00879e13c6d13921700d9cd72366b353fa2822e3cbb31199a56ff84efe82079095b5f5edaa706a9f38e", 0x1000}, {&(0x7f0000000a00)="46dffe55d3496f3655057862fc4cf08dfecf4c447dacba93101c1ea23a17d7b199f8c3383d76c98cc3cfc64ef1a43eaf6d637259ac8278a876d2997e3675c4bc75d507800f336833a30bc43cac5938117bf4949ba7de3ad4bf9fc1b36b1ba9ca63d47be50d2ca91d731617413760897a6e009f8f325978981aff04a11145ec73f417fb6a883d38fe957cd5918d67f6a3884c338f1058a1c0187254ce4f5879f81031aaf6b609fa", 0xa7}, {&(0x7f0000000180)="69dae28fbd4fbe77f86d2fed5895c05899b16c855f78e9115fc88697515a790705c9902abec6af85f54c25849cf3afeb3b967a25081a", 0x36}], 0x7)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f00000000c0)={0x0, 0x8000000003ff, 0x5, 0x6, 0x1e})
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1.352290131s ago: executing program 2 (id=1682):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00')
r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x4040, 0x10000, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_usb_connect$uac1(0x3, 0x97, &(0x7f0000000240)=ANY=[], 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000340)})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r4 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xece7, 0x0, @perf_bp={0x0, 0x4}, 0x3, 0x40000, 0x1007, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000fc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
socket(0x3, 0x6, 0xe5)
syz_io_uring_setup(0x4ee9, &(0x7f0000000400)={0x0, 0xce52, 0x80, 0x0, 0x24f, 0x0, r0}, &(0x7f0000000180), &(0x7f0000000480))
perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xc7d7}, 0x0, 0x0, r4, 0xa)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
syz_open_dev$vcsu(&(0x7f0000000500), 0x81, 0x80400)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000880)='kmem_cache_free\x00', r10, 0x0, 0x20000}, 0x18)
syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832})

1.300652445s ago: executing program 0 (id=1683):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid}]}})

1.268089348s ago: executing program 5 (id=1684):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$eJzs3c9rHGUfAPDvbJKmTfu+yQsvaL0YEDRQmpgaWwWFigcRLBT0bLtstqFmky3ZTWlCQIsIXgQVD4JeevLgj3rz6o+r/hcexFI1LVY8SGQ2s+2m2U03abIbzecDk32emdl8n+/Or2d3hpkA9qzh9E8u4nBEvJtEDGbjk4joq5V6I06uzndreamQDkmsrLz8a1Kb5+byUiEa3pM6mFUejIhv34o4klsft7KwOJ0vlYpzWX2sOnNhrLKwePT8TH6qOFWcPT4+MXHsxJMnjm9frr//sHjo2nsvPPbFyT/ffODqO98lcTIOZdMa89iyZ9dWh2M4+0z60o9wjefvO9juknS7AWxJumn2rG7lcTgGo6dWAgD+zV6PiBUAYI9JHP8BYI+p/w5wc3mpUB+6+4tEZ11/LiL2r+ZfP7+5OqU3O2e3v3YedOBmsubMSBIRQ9sQfzgiPv7q1c/SIbbrPCRAG964HBFnh4bX7/+TddcsbNbjG0zbl70O3zU+je8MNHTG12n/56lm/b/c7f5PNOn/9DfZdrei2fa/ZsSBbQiygeufRDzTcG3brYb8M0M9We0/tT5fX3LufKmY7tv+GxEj0def1sc3iDFy468braY19v9+e/+1T9P46eudOXI/9/avfc9kvpq/n5wbXb8c8VBvs/yT28s/adH/Pd1mjBeffvujVtPS/NN868P6/CO7OmlnrFyJeLTp8r9zRVuy4fWJY7XVYay+UjTx5Y8fDrSK37j80yGNX/8u0Anp8h/YOP+hpPF6zcrmY3x/ZfCbVtPunX/z9X9f8kqtXO9HXMpXq3PjEfuSl9aPP3bnvZfyD2el1fnT/Eceab79b7T+p98Jz7aZf++1Xz7fev47K81/clPLf/OFq7eme1rFb2/5T9RKI9mYdvZ/7Tbwfj47AAAAAAAAAAAAAAAAAAAAAAAAAGhXLiIORZIbvV3O5UZHV5/h/f8YyJXKleqRc+X52cmoPSt7KPpy9VtdDjbcD3U8ux9+vX7srvoTEfG/iPig/0BSv4/iZJdzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6gy2e/5/6qb/brQMAdsz+bjcAAOg4x38A2Hsc/wFg72nv+N+z4+0AADrH938A2Hsc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhp0+dSoeVP5aXCml98uLC/HT54tHJYmV6dGa+MFooz10YnSqXp0rF0UJ55l7/r1QuX5iI2flLY9VipTpWWVg8M1Oen62eOT+TnyqeKfZ1JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JzKwuJ0vlQqzilsobCyO5rR/UJPtjrtlvZ0tJDsjmZsc6HLOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4i/AwAA//+3ACFj")
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x3000, 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='start_task_reaping\x00', r4, 0x0, 0x7}, 0x18)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
socket$unix(0x1, 0x1, 0x0)
r7 = io_uring_setup(0x177e, &(0x7f0000000140))
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8, <r9=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0xa0000004})
close_range(r7, 0xffffffffffffffff, 0x0)

1.23861817s ago: executing program 0 (id=1685):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x202000000050be}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
syz_open_dev$loop(0x0, 0x7, 0x180862)
r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
syz_open_dev$sg(&(0x7f0000000340), 0x8, 0x24102)
mount_setattr(r5, 0x0, 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a2d0000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x20100, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r5}, 0x8)

1.018819938s ago: executing program 1 (id=1688):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
chdir(&(0x7f0000000480)='./cgroup\x00')
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
r1 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000100)='./control\x00', 0x0)
unlinkat(r1, &(0x7f0000000140)='./control\x00', 0x200)
rmdir(&(0x7f0000000040)='./control\x00')
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu<=0||!')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66b2c000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES32], 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="ac0000000002010400000000000000000a0000000400018004000380900002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c000280050001001100000006000340000300000c000280050001"], 0xac}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xd8, &(0x7f0000000780)=[@in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x9ee9}, @in6={0xa, 0x4e21, 0x8, @remote}, @in6={0xa, 0x4e23, 0x7ff, @mcast2, 0xd}, @in6={0xa, 0x4e23, 0xfffffe00, @mcast2, 0xf}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e22, 0xfffffff8, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8}, @in6={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}]}, &(0x7f0000000340)=0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000240)}], 0x1)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS    \x00'}, 0x20)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0)
write(r7, &(0x7f0000000240)="94", 0x1)
vmsplice(r10, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0xc4}, {&(0x7f0000000280)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0)
tee(r6, r10, 0x8f5, 0x0)
write(r8, 0x0, 0x0)

1.016406858s ago: executing program 5 (id=1689):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = dup2(r1, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18)
epoll_pwait2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/12, @ANYRES32, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1)
r5 = fsmount(r4, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00')
readlinkat(r5, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000200)={@mcast2, @multicast2, 0x1f, 0x13}})
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
migrate_pages(r6, 0x80000001, 0x0, 0x0) (fail_nth: 11)

739.85623ms ago: executing program 5 (id=1692):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4f}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000380), 0x10)
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @remote}, 0x1d, r7})
r8 = dup(r0)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='veth1_vlan\x00', 0x10)
shutdown(r0, 0x1)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x4, @empty, 0xffffffc0}}, 0x0, 0x3, 0x1, 0xaa, 0x60, 0xf6a, 0xa}, &(0x7f0000000180)=0x9c)

738.811831ms ago: executing program 0 (id=1693):
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x50028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCGKEY(r2, 0x80404518, 0x0)
ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00000001c0)=""/212)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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")

709.019542ms ago: executing program 5 (id=1695):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_create\x00', r1}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0x100}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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")
ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000080)={'veth0_virt_wifi\x00', {0x2, 0x0, @initdev}})
r4 = syz_open_dev$hidraw(&(0x7f0000000300), 0xfffffffffffffffe, 0x200800)
ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000340))
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x24)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r8 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000096)
chmod(&(0x7f0000000a00)='./file0\x00', 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r10, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r12, 0x0, 0x80000000}, 0x18)
clock_adjtime(0x0, &(0x7f00000002c0)={0x19b1, 0xc1bdf10000000003, 0x100000000, 0x2, 0x0, 0x3, 0x80000001, 0x200, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282, 0x0, 0x0, 0x9})
mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)

660.815527ms ago: executing program 4 (id=1696):
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00')
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x6000)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]})
arch_prctl$ARCH_GET_CPUID(0x1011)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r4, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)

660.364457ms ago: executing program 4 (id=1697):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0x4}, 0x18)
socket$inet6_sctp(0xa, 0x1, 0x84)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1)
unshare(0x2040600)
r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x8010, r2, 0x0)
perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r2, 0x3)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TRIM(r3, 0x0, 0x40)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, &(0x7f00000002c0), {0x39}, &(0x7f0000000300)=""/37, 0x25, &(0x7f00000004c0)=""/237, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0xe)
fchdir(r6)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2000, 0x181)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

613.11489ms ago: executing program 4 (id=1698):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
fspick(0xffffffffffffffff, 0x0, 0x2e1c2e842e65e15f)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0xfd517738d3b9a375, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xf7}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5', 0x0)
pwritev(r3, &(0x7f00000000c0), 0x0, 0x800004, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009050000000000000000021f0020", @ANYRES32, @ANYBLOB="08000100e0000002080002000a01010008000400ac1414aa08000400ffffffff08000a000100000008000200e000"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e24, @empty=0xe00}})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7, 0x0, 0x4}, 0x18)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x1b, 0x0, "99aed94cb0b35c64fb781b79363b6fb8a279443e8522854bec7fabec4372cd962a8f57216a5d981041890c6fdb1fd901c2a073dbe6dbc04a3f122251b9ca5327885f62686ff3857d13997543ff74265e"}, 0xd8)

591.054932ms ago: executing program 1 (id=1699):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x7, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4c840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

583.244623ms ago: executing program 0 (id=1700):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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")
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x3000, 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='start_task_reaping\x00', r4, 0x0, 0x7}, 0x18)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
socket$unix(0x1, 0x1, 0x0)
r7 = io_uring_setup(0x177e, &(0x7f0000000140))
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8, <r9=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0xa0000004})
close_range(r7, 0xffffffffffffffff, 0x0)

549.260955ms ago: executing program 4 (id=1701):
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x111, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r2, 0xb}}, 0x48)

546.348676ms ago: executing program 1 (id=1702):
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x50028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCGKEY(r2, 0x80404518, 0x0)
ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00000001c0)=""/212)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x2}, 0x18)
syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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")

525.320447ms ago: executing program 4 (id=1703):
syz_emit_ethernet(0x82, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x2000000, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000880)={@empty, @multicast, @void, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0xd, 0x2, 0x0, 0x0, "8806203a414d64fc4d8afcc1480f854abdbc70468b6eaa88700d298b8887719680dadf51c7ac0ccf90d6fdf6743918a909304c90c77fa6e2ff706e55150a5430"}}}}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000500)={0x800000, 0x210002, 0xffffffdd, 0x7fffffff, 0x2, 0x69})

496.84146ms ago: executing program 5 (id=1704):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "c172f5", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0xffbf, {0x5, 0x6, "54d03a", 0x400, 0x88, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00'}}}}}}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000001880)=0x3, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071106300000000006600"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000001100)=0x2000000009)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0x20004041)
syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r1)
socket(0x10, 0x803, 0x0)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) (fail_nth: 11)

292.826396ms ago: executing program 2 (id=1705):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x7, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4c840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

292.312896ms ago: executing program 5 (id=1706):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x18)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='unlock i'], 0xe)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r6, 0x0, 0x0, 0xe7b, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x0, &(0x7f00000006c0), 0x4, 0x24d, &(0x7f0000000840)="$eJzs3T1oJGUcBvBnZnc9c7fIqY0gfoCIaCCcnWBzNgoHchwiggoRERslEWKCXdbKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFjZnURisqLJJjuS+f1gdmZ2Pv7vsPO8s827G6CxLie5mqSVZDpJJ0lxcId7q+ny3urK1MZs0u8/9Usx3K9ar+wfdylJL8kjSdbLIq+0k6W157Z/23zigbcXO/d/uPbs1EQvcs/O9taTux9cf+uTaw8vffXNT9eLXE33b9d1+ooR77WL5LazKPY/UbTrbgH/xY03Pv52kPvbk9w3zH8nZaoP752Fm9Y7eej9fzr23Z+/vnOSbQVOX7/fGTwDe32gccok3RTlTJJquSxnZqrv8N+1Lpavzi+8Pv3y/OLcS3X3VMBp6SZbj3924dNLh/L/Y6vKP3B+DfL/9I3V7wfLu626WwNMxF3VbJD/6ReWH4z8Q+PIPzSX/ENzyT80l/xDc8k/NJf8wznW2V/ojdx8jPzXMlYHODue/9Bc8g/NdTD/AECz9C/UPQIZqEvd/Q8AAAAAAAAAAAAAAAAAAHDUytTG7P40qZpfvJfsPJakPap+a/h/xMnNw9eLvxaD3f5SVIeN5fl7xjzBmD6qefT1LT/UW//Lu+utvzyX9N5McqXdPnr/FXv338nd+i/bOy+OWeCYikPrjz4z2fqH/bFab/1rm8nng/7nyqj+p8wdw/no/qd78CeWT+i138c8AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPzZwAAAP//Fllt1Q==")
timer_settime(0x0, 0x1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
read(r1, &(0x7f0000032440)=""/102364, 0x18fdc)

274.923337ms ago: executing program 2 (id=1707):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa54000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x18)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='unlock i'], 0xe)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r6, 0x0, 0x0, 0xe7b, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x0, &(0x7f00000006c0), 0x4, 0x24d, &(0x7f0000000840)="$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")
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
read(r1, &(0x7f0000032440)=""/102364, 0x18fdc)

72.019524ms ago: executing program 1 (id=1708):
socket$unix(0x1, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8"], 0x0)

25.213908ms ago: executing program 1 (id=1709):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0x4}, 0x18)
socket$inet6_sctp(0xa, 0x1, 0x84)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1)
unshare(0x2040600)
r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x8010, r2, 0x0)
perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r2, 0x3)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TRIM(r3, 0x0, 0x40)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, &(0x7f00000002c0), {0x39}, &(0x7f0000000300)=""/37, 0x25, &(0x7f00000004c0)=""/237, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0xe)
fchdir(r6)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2000, 0x181)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

24.175898ms ago: executing program 4 (id=1710):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
chdir(&(0x7f0000000480)='./cgroup\x00')
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
r1 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000100)='./control\x00', 0x0)
unlinkat(r1, &(0x7f0000000140)='./control\x00', 0x200)
rmdir(&(0x7f0000000040)='./control\x00')
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu<=0||!')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66b2c000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES32], 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="ac0000000002010400000000000000000a0000000400018004000380900002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c000280050001001100000006000340000300000c000280050001"], 0xac}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xd8, &(0x7f0000000780)=[@in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x9ee9}, @in6={0xa, 0x4e21, 0x8, @remote}, @in6={0xa, 0x4e23, 0x7ff, @mcast2, 0xd}, @in6={0xa, 0x4e23, 0xfffffe00, @mcast2, 0xf}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e22, 0xfffffff8, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8}, @in6={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}]}, &(0x7f0000000340)=0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000240)}], 0x1)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS    \x00'}, 0x20)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0)
write(r7, &(0x7f0000000240)="94", 0x1)
vmsplice(r10, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0xc4}, {&(0x7f0000000280)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0)
tee(r6, r10, 0x8f5, 0x0)
write(r8, 0x0, 0x0)

0s ago: executing program 1 (id=1711):
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r1], 0x1}, 0x58)
tkill(r1, 0xe) (async)
tkill(r1, 0xe)

kernel console output (not intermixed with test programs):

unted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  115.138871][ T7046] netlink: 'syz.0.1125': attribute type 13 has an invalid length.
[  115.172582][ T7056] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1129'.
[  115.181735][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1129'.
[  115.219969][ T7046] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.321131][ T7068] loop2: detected capacity change from 0 to 2048
[  115.414417][ T7077] cgroup: Invalid name
[  115.425576][ T7068] hub 6-0:1.0: USB hub found
[  115.442590][ T7068] hub 6-0:1.0: 8 ports detected
[  115.461634][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1134'.
[  115.486011][   T51] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.494979][   T51] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  115.540703][ T7063] syzkaller0: entered promiscuous mode
[  115.546374][ T7063] syzkaller0: entered allmulticast mode
[  115.636603][   T51] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.645653][   T51] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  115.655284][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1136'.
[  115.664338][ T7095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1136'.
[  115.674907][   T51] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.683798][   T51] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  115.695107][   T51] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.706298][   T51] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  115.757802][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1136'.
[  115.766770][ T7095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1136'.
[  115.801598][ T7102] loop4: detected capacity change from 0 to 2048
[  115.857289][ T7111] loop1: detected capacity change from 0 to 1024
[  115.909935][ T7111] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  115.956974][ T7120] loop2: detected capacity change from 0 to 128
[  115.959353][ T7123] loop0: detected capacity change from 0 to 512
[  115.991468][ T7120] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.017112][ T7127] loop4: detected capacity change from 0 to 512
[  116.048406][ T7123] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  116.060619][ T7127] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  116.122791][ T7127] netlink: 'syz.4.1145': attribute type 13 has an invalid length.
[  116.288115][ T7136] wireguard0: entered promiscuous mode
[  116.293642][ T7136] wireguard0: entered allmulticast mode
[  116.323678][ T7139] wireguard0: entered promiscuous mode
[  116.329281][ T7139] wireguard0: entered allmulticast mode
[  116.371888][ T7142] loop1: detected capacity change from 0 to 512
[  116.393974][ T7143] loop4: detected capacity change from 0 to 512
[  116.412042][ T7143] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1148: bg 0: block 393: padding at end of block bitmap is not set
[  116.431743][ T7143] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  116.441652][ T7143] EXT4-fs (loop4): 2 truncates cleaned up
[  116.510722][ T7152] loop1: detected capacity change from 0 to 128
[  116.519158][ T7152] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.553732][ T7155] loop3: detected capacity change from 0 to 128
[  116.572553][ T7155] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.814336][ T7160] loop0: detected capacity change from 0 to 512
[  116.834647][ T7159] loop2: detected capacity change from 0 to 2048
[  116.843321][ T7160] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  116.860109][ T7160] netlink: 'syz.0.1156': attribute type 13 has an invalid length.
[  116.905044][ T7166] cgroup: Invalid name
[  116.991151][ T7176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1158'.
[  117.000247][ T7176] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1158'.
[  117.012674][ T7176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1158'.
[  117.056426][ T7185] cgroup: Invalid name
[  117.205499][ T7204] loop2: detected capacity change from 0 to 1024
[  117.306738][ T7210] loop2: detected capacity change from 0 to 512
[  117.326496][ T7210] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  117.342716][ T7210] netlink: 'syz.2.1165': attribute type 13 has an invalid length.
[  117.421236][ T7210] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.428493][ T7210] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.449227][ T7222] loop4: detected capacity change from 0 to 2048
[  117.488331][ T7221] FAULT_INJECTION: forcing a failure.
[  117.488331][ T7221] name failslab, interval 1, probability 0, space 0, times 0
[  117.501183][ T7221] CPU: 1 UID: 0 PID: 7221 Comm: syz.3.1169 Tainted: G        W           6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) 
[  117.501223][ T7221] Tainted: [W]=WARN
[  117.501231][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  117.501245][ T7221] Call Trace:
[  117.501251][ T7221]  <TASK>
[  117.501259][ T7221]  __dump_stack+0x1d/0x30
[  117.501303][ T7221]  dump_stack_lvl+0xe8/0x140
[  117.501331][ T7221]  dump_stack+0x15/0x1b
[  117.501349][ T7221]  should_fail_ex+0x265/0x280
[  117.501372][ T7221]  should_failslab+0x8c/0xb0
[  117.501426][ T7221]  __kmalloc_noprof+0xa5/0x3e0
[  117.501467][ T7221]  ? io_alloc_ocqe+0x51/0x250
[  117.501502][ T7221]  io_alloc_ocqe+0x51/0x250
[  117.501542][ T7221]  ? should_fail_ex+0xdb/0x280
[  117.501573][ T7221]  io_cqe_overflow_locked+0x26/0x40
[  117.501608][ T7221]  __io_submit_flush_completions+0x258/0xa00
[  117.501730][ T7221]  io_submit_sqes+0xeb7/0x1050
[  117.501771][ T7221]  __se_sys_io_uring_enter+0x1c1/0x1b70
[  117.501873][ T7221]  ? 0xffffffff81000000
[  117.501891][ T7221]  ? __rcu_read_unlock+0x4f/0x70
[  117.502000][ T7221]  ? get_pid_task+0x96/0xd0
[  117.502030][ T7221]  ? proc_fail_nth_write+0x13b/0x160
[  117.502070][ T7221]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  117.502102][ T7221]  ? vfs_write+0x7e8/0x960
[  117.502168][ T7221]  ? __rcu_read_unlock+0x4f/0x70
[  117.502195][ T7221]  ? __fget_files+0x184/0x1c0
[  117.502271][ T7221]  ? fput+0x8f/0xc0
[  117.502343][ T7221]  __x64_sys_io_uring_enter+0x78/0x90
[  117.502369][ T7221]  x64_sys_call+0x2de1/0x2ff0
[  117.502400][ T7221]  do_syscall_64+0xd2/0x200
[  117.502434][ T7221]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  117.502485][ T7221]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  117.502627][ T7221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.502677][ T7221] RIP: 0033:0x7f4161c7ebe9
[  117.502778][ T7221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.502805][ T7221] RSP: 002b:00007f41606df038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  117.502899][ T7221] RAX: ffffffffffffffda RBX: 00007f4161ea5fa0 RCX: 00007f4161c7ebe9
[  117.502916][ T7221] RDX: 0000000000000000 RSI: 0000000000002d3e RDI: 0000000000000004
[  117.502934][ T7221] RBP: 00007f41606df090 R08: 0000000000000000 R09: 0000000000000000
[  117.502948][ T7221] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[  117.502963][ T7221] R13: 00007f4161ea6038 R14: 00007f4161ea5fa0 R15: 00007ffd2ada4b88
[  117.503060][ T7221]  </TASK>
[  117.803639][   T29] kauditd_printk_skb: 637 callbacks suppressed
[  117.803721][   T29] audit: type=1326 audit(1755397805.060:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4161c7ebe9 code=0x7ffc0000
[  117.861449][   T29] audit: type=1326 audit(1755397805.060:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4161c7ebe9 code=0x7ffc0000
[  117.885023][   T29] audit: type=1326 audit(1755397805.070:4442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4161c7ebe9 code=0x7ffc0000
[  117.908593][   T29] audit: type=1326 audit(1755397805.070:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4161c7ebe9 code=0x7ffc0000
[  117.932283][   T29] audit: type=1326 audit(1755397805.070:4444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4161c7ebe9 code=0x7ffc0000
[  117.956078][   T29] audit: type=1326 audit(1755397805.070:4445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4161c7ebe9 code=0x7ffc0000
[  117.959533][ T7239] loop0: detected capacity change from 0 to 512
[  117.979710][   T29] audit: type=1326 audit(1755397805.070:4446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4161c7ebe9 code=0x7ffc0000
[  118.009637][   T29] audit: type=1326 audit(1755397805.100:4447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4161c7ebe9 code=0x7ffc0000
[  118.033312][   T29] audit: type=1326 audit(1755397805.110:4448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4161c7ebe9 code=0x7ffc0000
[  118.056763][   T29] audit: type=1326 audit(1755397805.120:4449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f4161c7ebe9 code=0x7ffc0000
[  118.068676][ T7239] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  118.161437][ T7228] syzkaller0: entered promiscuous mode
[  118.167000][ T7228] syzkaller0: entered allmulticast mode
[  118.173872][ T3432] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  118.182800][ T3432] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  118.206614][ T7238] loop3: detected capacity change from 0 to 1024
[  118.229041][ T7238] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  118.259780][ T3432] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  118.268503][ T3432] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  118.280279][ T3432] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  118.288894][ T3432] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  118.313546][ T3432] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  118.322111][ T3432] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  118.385155][ T7252] cgroup: Invalid name
[  118.425024][ T7257] loop1: detected capacity change from 0 to 512
[  118.449745][ T7262] loop2: detected capacity change from 0 to 164
[  118.450090][ T7257] ext4 filesystem being mounted at /281/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  118.466853][ T7262] Unable to read rock-ridge attributes
[  118.477792][ T7262] ISOFS: unable to read i-node block
[  118.503065][ T7257] netlink: 'syz.1.1175': attribute type 13 has an invalid length.
[  118.555205][ T7272] loop1: detected capacity change from 0 to 128
[  118.592954][ T7272] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.716117][ T7284] loop3: detected capacity change from 0 to 512
[  118.752157][ T7284] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  118.771663][ T7284] netlink: 'syz.3.1180': attribute type 13 has an invalid length.
[  118.836220][ T7284] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.843640][ T7284] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.002751][ T7295] loop0: detected capacity change from 0 to 1024
[  119.017519][ T7284] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.043495][ T7284] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.268761][ T7296] lo speed is unknown, defaulting to 1000
[  119.274777][  T299] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.283680][  T299] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  119.292837][  T299] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.301904][  T299] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  119.334534][  T299] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.343544][  T299] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  119.343671][ T7307] loop0: detected capacity change from 0 to 2048
[  119.354486][  T299] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.367840][  T299] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  119.474271][ T7317] loop1: detected capacity change from 0 to 128
[  119.495333][ T7317] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.519934][ T7322] loop2: detected capacity change from 0 to 512
[  119.556928][ T7322] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  119.573260][ T7303] hub 6-0:1.0: USB hub found
[  119.578237][ T7303] hub 6-0:1.0: 8 ports detected
[  119.583932][ T7322] netlink: 'syz.2.1192': attribute type 13 has an invalid length.
[  119.618236][ T7330] loop3: detected capacity change from 0 to 512
[  119.638455][ T7303] syzkaller0: entered promiscuous mode
[  119.644223][ T7303] syzkaller0: entered allmulticast mode
[  119.736552][ T7330] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.765373][ T7347] loop1: detected capacity change from 0 to 1024
[  119.775513][ T7330] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #18: comm syz.3.1193: corrupted inode contents
[  119.805369][ T7330] EXT4-fs (loop3): Remounting filesystem read-only
[  119.815276][ T7330] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30)
[  119.990029][ T7363] loop1: detected capacity change from 0 to 1024
[  120.231159][ T7378] loop1: detected capacity change from 0 to 512
[  120.238993][ T7365] __nla_validate_parse: 17 callbacks suppressed
[  120.239010][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1205'.
[  120.257288][ T7365] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1205'.
[  120.285401][ T7378] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  120.299573][ T7378] netlink: 'syz.1.1210': attribute type 13 has an invalid length.
[  120.388716][ T7392] loop3: detected capacity change from 0 to 512
[  120.426738][ T7390] loop4: detected capacity change from 0 to 1024
[  120.443136][ T7395] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1215'.
[  120.468164][ T7395] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1215'.
[  120.468489][ T7392] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1214: bg 0: block 248: padding at end of block bitmap is not set
[  120.497127][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1216'.
[  120.535766][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'.
[  120.544805][ T7403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1217'.
[  120.596135][ T7392] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1214: Failed to acquire dquot type 1
[  120.636410][ T7411] loop4: detected capacity change from 0 to 512
[  120.638656][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'.
[  120.651621][ T7403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1217'.
[  120.671730][ T7392] EXT4-fs (loop3): 1 truncate cleaned up
[  120.679988][ T7411] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  120.711292][ T7392] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.751377][ T7411] netlink: 'syz.4.1219': attribute type 13 has an invalid length.
[  120.812849][ T7392] EXT4-fs (loop3): shut down requested (1)
[  120.841127][ T7392] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=16
[  120.865113][ T7420] loop2: detected capacity change from 0 to 512
[  120.866057][ T7424] sg_write: data in/out 808464396/3 bytes for SCSI command 0xdb-- guessing data in;
[  120.866057][ T7424]    program syz.2.1223 not setting count and/or reply_len properly
[  120.896514][ T7392] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=16
[  120.910130][ T7427] loop4: detected capacity change from 0 to 512
[  120.917629][ T7392] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=16
[  120.950224][ T7427] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1225: bg 0: block 248: padding at end of block bitmap is not set
[  120.980912][ T7427] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1225: Failed to acquire dquot type 1
[  121.009802][ T7432] loop2: detected capacity change from 0 to 1024
[  121.016324][ T7392] syz.3.1214 (7392) used greatest stack depth: 9200 bytes left
[  121.055093][ T7427] EXT4-fs (loop4): 1 truncate cleaned up
[  121.096629][ T7427] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.096691][ T7438] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1228'.
[  121.157375][ T7427] EXT4-fs (loop4): shut down requested (1)
[  121.179199][ T7427] FAULT_INJECTION: forcing a failure.
[  121.179199][ T7427] name failslab, interval 1, probability 0, space 0, times 0
[  121.191926][ T7427] CPU: 1 UID: 0 PID: 7427 Comm: syz.4.1225 Tainted: G        W           6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) 
[  121.191970][ T7427] Tainted: [W]=WARN
[  121.191974][ T7442] loop1: detected capacity change from 0 to 512
[  121.191978][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  121.191995][ T7427] Call Trace:
[  121.192003][ T7427]  <TASK>
[  121.192013][ T7427]  __dump_stack+0x1d/0x30
[  121.192062][ T7427]  dump_stack_lvl+0xe8/0x140
[  121.192138][ T7427]  dump_stack+0x15/0x1b
[  121.192161][ T7427]  should_fail_ex+0x265/0x280
[  121.192196][ T7427]  should_failslab+0x8c/0xb0
[  121.192284][ T7427]  kmem_cache_alloc_noprof+0x50/0x310
[  121.192357][ T7427]  ? alloc_empty_file+0x76/0x200
[  121.192399][ T7427]  ? mntput+0x4b/0x80
[  121.192534][ T7427]  alloc_empty_file+0x76/0x200
[  121.192627][ T7427]  path_openat+0x68/0x2170
[  121.192655][ T7427]  ? _parse_integer_limit+0x170/0x190
[  121.192688][ T7427]  ? kstrtoull+0x111/0x140
[  121.192716][ T7427]  ? kstrtouint+0x76/0xc0
[  121.192800][ T7427]  do_filp_open+0x109/0x230
[  121.192839][ T7427]  do_sys_openat2+0xa6/0x110
[  121.192888][ T7427]  __x64_sys_openat+0xf2/0x120
[  121.192937][ T7427]  x64_sys_call+0x2e9c/0x2ff0
[  121.192967][ T7427]  do_syscall_64+0xd2/0x200
[  121.193103][ T7427]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  121.193138][ T7427]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  121.193252][ T7427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.193283][ T7427] RIP: 0033:0x7f7f37d1ebe9
[  121.193313][ T7427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.193383][ T7427] RSP: 002b:00007f7f36787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  121.193416][ T7427] RAX: ffffffffffffffda RBX: 00007f7f37f45fa0 RCX: 00007f7f37d1ebe9
[  121.193434][ T7427] RDX: 0000000000008442 RSI: 0000200000000a00 RDI: ffffffffffffff9c
[  121.193550][ T7427] RBP: 00007f7f36787090 R08: 0000000000000000 R09: 0000000000000000
[  121.193580][ T7427] R10: 000000000000005c R11: 0000000000000246 R12: 0000000000000001
[  121.193598][ T7427] R13: 00007f7f37f46038 R14: 00007f7f37f45fa0 R15: 00007ffe581d26f8
[  121.193625][ T7427]  </TASK>
[  121.212259][ T7446] loop2: detected capacity change from 0 to 2048
[  121.237118][ T7448] geneve3: entered promiscuous mode
[  121.250771][ T7440] loop3: detected capacity change from 0 to 128
[  121.255320][ T7448] geneve3: entered allmulticast mode
[  121.311722][ T7442] ext4 filesystem being mounted at /300/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  121.322075][ T7440] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.494955][ T7446] hub 6-0:1.0: USB hub found
[  121.499907][ T7446] hub 6-0:1.0: 8 ports detected
[  121.550096][ T7467] loop0: detected capacity change from 0 to 512
[  121.568270][ T7446] syzkaller0: entered promiscuous mode
[  121.573791][ T7446] syzkaller0: entered allmulticast mode
[  121.602809][ T7467] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  121.636239][ T7467] netlink: 'syz.0.1239': attribute type 13 has an invalid length.
[  121.850261][ T7493] loop4: detected capacity change from 0 to 128
[  121.885902][ T7493] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.903404][ T7500] loop2: detected capacity change from 0 to 1024
[  121.922646][ T7504] netlink: 'syz.0.1251': attribute type 6 has an invalid length.
[  121.934397][ T7504] netlink: 'syz.0.1251': attribute type 21 has an invalid length.
[  122.021085][ T7510] openvswitch: netlink: Message has 6 unknown bytes.
[  122.035488][ T7512] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  122.042976][ T7512] vhci_hcd: default hub control req: 2314 v0008 i0002 l0
[  122.147774][ T7525] FAULT_INJECTION: forcing a failure.
[  122.147774][ T7525] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  122.159816][ T7528] loop0: detected capacity change from 0 to 512
[  122.160942][ T7525] CPU: 0 UID: 0 PID: 7525 Comm: syz.2.1259 Tainted: G        W           6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) 
[  122.161068][ T7525] Tainted: [W]=WARN
[  122.161076][ T7525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  122.161094][ T7525] Call Trace:
[  122.161102][ T7525]  <TASK>
[  122.161114][ T7525]  __dump_stack+0x1d/0x30
[  122.161145][ T7525]  dump_stack_lvl+0xe8/0x140
[  122.161211][ T7525]  dump_stack+0x15/0x1b
[  122.161236][ T7525]  should_fail_ex+0x265/0x280
[  122.161266][ T7525]  should_fail+0xb/0x20
[  122.161309][ T7525]  should_fail_usercopy+0x1a/0x20
[  122.161421][ T7525]  _copy_from_user+0x1c/0xb0
[  122.161462][ T7525]  ___sys_sendmsg+0xc1/0x1d0
[  122.161633][ T7525]  __x64_sys_sendmsg+0xd4/0x160
[  122.161678][ T7525]  x64_sys_call+0x191e/0x2ff0
[  122.161709][ T7525]  do_syscall_64+0xd2/0x200
[  122.161803][ T7525]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  122.161839][ T7525]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  122.161875][ T7525]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.161984][ T7525] RIP: 0033:0x7ff06bc7ebe9
[  122.162007][ T7525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.162034][ T7525] RSP: 002b:00007ff06a6df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  122.162060][ T7525] RAX: ffffffffffffffda RBX: 00007ff06bea5fa0 RCX: 00007ff06bc7ebe9
[  122.162087][ T7525] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000005
[  122.162105][ T7525] RBP: 00007ff06a6df090 R08: 0000000000000000 R09: 0000000000000000
[  122.162131][ T7525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  122.162188][ T7525] R13: 00007ff06bea6038 R14: 00007ff06bea5fa0 R15: 00007ffeead86358
[  122.162216][ T7525]  </TASK>
[  122.280091][ T7532] loop4: detected capacity change from 0 to 128
[  122.366715][ T7532] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.378425][ T7528] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  122.395043][ T7535] loop3: detected capacity change from 0 to 1024
[  122.462727][ T7535] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.1264: Allocating blocks 449-513 which overlap fs metadata
[  122.479496][ T7544] loop0: detected capacity change from 0 to 2048
[  122.505607][ T7534] EXT4-fs (loop3): pa ffff88810764b700: logic 48, phys. 177, len 21
[  122.505997][ T7546] loop1: detected capacity change from 0 to 512
[  122.513732][ T7534] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  122.523858][ T7546] EXT4-fs: Ignoring removed nomblk_io_submit option
[  122.567361][ T7546] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  122.575360][ T7546] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002]
[  122.587860][ T7546] System zones: 0-1, 15-15, 18-18, 34-34
[  122.593915][ T7546] EXT4-fs (loop1): orphan cleanup on readonly fs
[  122.601642][ T7546] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #16: comm syz.1.1267: casefold flag without casefold feature
[  122.615398][ T7546] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1267: couldn't read orphan inode 16 (err -117)
[  122.650686][ T7553] FAULT_INJECTION: forcing a failure.
[  122.650686][ T7553] name failslab, interval 1, probability 0, space 0, times 0
[  122.663490][ T7553] CPU: 1 UID: 0 PID: 7553 Comm: syz.0.1269 Tainted: G        W           6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) 
[  122.663593][ T7553] Tainted: [W]=WARN
[  122.663599][ T7553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  122.663670][ T7553] Call Trace:
[  122.663676][ T7553]  <TASK>
[  122.663682][ T7553]  __dump_stack+0x1d/0x30
[  122.663703][ T7553]  dump_stack_lvl+0xe8/0x140
[  122.663720][ T7553]  dump_stack+0x15/0x1b
[  122.663734][ T7553]  should_fail_ex+0x265/0x280
[  122.663853][ T7553]  should_failslab+0x8c/0xb0
[  122.663875][ T7553]  __kvmalloc_node_noprof+0x123/0x4e0
[  122.663901][ T7553]  ? alloc_netdev_mqs+0x553/0xa30
[  122.663992][ T7553]  alloc_netdev_mqs+0x553/0xa30
[  122.664031][ T7553]  rtnl_create_link+0x239/0x710
[  122.664133][ T7553]  rtnl_newlink_create+0x14c/0x620
[  122.664172][ T7553]  ? security_capable+0x83/0x90
[  122.664203][ T7553]  ? netlink_ns_capable+0x86/0xa0
[  122.664244][ T7553]  rtnl_newlink+0xf29/0x12d0
[  122.664315][ T7553]  ? xas_load+0x413/0x430
[  122.664338][ T7553]  ? __rcu_read_unlock+0x4f/0x70
[  122.664357][ T7553]  ? xa_load+0xb1/0xe0
[  122.664380][ T7553]  ? __rcu_read_unlock+0x4f/0x70
[  122.664468][ T7553]  ? avc_has_perm_noaudit+0x1b1/0x200
[  122.664504][ T7553]  ? cred_has_capability+0x210/0x280
[  122.664538][ T7553]  ? selinux_capable+0x31/0x40
[  122.664623][ T7553]  ? security_capable+0x83/0x90
[  122.664650][ T7553]  ? ns_capable+0x7d/0xb0
[  122.664669][ T7553]  ? __pfx_rtnl_newlink+0x10/0x10
[  122.664692][ T7553]  rtnetlink_rcv_msg+0x5fe/0x6d0
[  122.664733][ T7553]  ? avc_has_perm_noaudit+0x1b1/0x200
[  122.664863][ T7553]  netlink_rcv_skb+0x123/0x220
[  122.664880][ T7553]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  122.664911][ T7553]  rtnetlink_rcv+0x1c/0x30
[  122.664933][ T7553]  netlink_unicast+0x5bd/0x690
[  122.664990][ T7553]  netlink_sendmsg+0x58b/0x6b0
[  122.665026][ T7553]  ? __pfx_netlink_sendmsg+0x10/0x10
[  122.665046][ T7553]  __sock_sendmsg+0x142/0x180
[  122.665073][ T7553]  ____sys_sendmsg+0x31e/0x4e0
[  122.665096][ T7553]  ___sys_sendmsg+0x17b/0x1d0
[  122.665167][ T7553]  __x64_sys_sendmsg+0xd4/0x160
[  122.665192][ T7553]  x64_sys_call+0x191e/0x2ff0
[  122.665211][ T7553]  do_syscall_64+0xd2/0x200
[  122.665236][ T7553]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  122.665335][ T7553]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  122.665358][ T7553]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.665377][ T7553] RIP: 0033:0x7f157385ebe9
[  122.665391][ T7553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.665416][ T7553] RSP: 002b:00007f15722c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  122.665433][ T7553] RAX: ffffffffffffffda RBX: 00007f1573a85fa0 RCX: 00007f157385ebe9
[  122.665444][ T7553] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  122.665455][ T7553] RBP: 00007f15722c7090 R08: 0000000000000000 R09: 0000000000000000
[  122.665466][ T7553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  122.665476][ T7553] R13: 00007f1573a86038 R14: 00007f1573a85fa0 R15: 00007ffe8d8c92a8
[  122.665494][ T7553]  </TASK>
[  122.970961][   T29] kauditd_printk_skb: 436 callbacks suppressed
[  122.970979][   T29] audit: type=1400 audit(1755397809.930:4880): avc:  denied  { connect } for  pid=7545 comm="syz.1.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  122.997112][   T29] audit: type=1400 audit(1755397809.930:4881): avc:  denied  { getopt } for  pid=7545 comm="syz.1.1267" lport=54646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  123.017901][   T29] audit: type=1400 audit(1755397809.930:4882): avc:  denied  { read } for  pid=7545 comm="syz.1.1267" dev="nsfs" ino=4026532416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  123.039167][   T29] audit: type=1400 audit(1755397809.930:4883): avc:  denied  { open } for  pid=7545 comm="syz.1.1267" path="net:[4026532416]" dev="nsfs" ino=4026532416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  123.062571][   T29] audit: type=1400 audit(1755397809.930:4884): avc:  denied  { ioctl } for  pid=7545 comm="syz.1.1267" path="socket:[15234]" dev="sockfs" ino=15234 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  123.088560][   T29] audit: type=1400 audit(1755397809.930:4885): avc:  denied  { read write } for  pid=7545 comm="syz.1.1267" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  123.113033][   T29] audit: type=1400 audit(1755397809.930:4886): avc:  denied  { open } for  pid=7545 comm="syz.1.1267" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  123.140913][ T7562] loop0: detected capacity change from 0 to 128
[  123.161079][ T7562] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.211100][   T29] audit: type=1326 audit(1755397810.470:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.1.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7734febe9 code=0x7ffc0000
[  123.234702][   T29] audit: type=1326 audit(1755397810.470:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.1.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7734febe9 code=0x7ffc0000
[  123.278858][   T29] audit: type=1326 audit(1755397810.530:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.1.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7734febe9 code=0x7ffc0000
[  123.321466][ T7577] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  123.344726][ T7577] SELinux: failed to load policy
[  123.426171][ T7590] loop4: detected capacity change from 0 to 1024
[  123.513295][ T7597] loop1: detected capacity change from 0 to 512
[  123.538322][ T7597] ext4 filesystem being mounted at /308/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  123.549787][ T7602] loop3: detected capacity change from 0 to 512
[  123.558398][ T7597] netlink: 'syz.1.1285': attribute type 13 has an invalid length.
[  123.572179][ T7602] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  123.606139][ T7602] netlink: 'syz.3.1287': attribute type 13 has an invalid length.
[  123.753236][ T7611] loop4: detected capacity change from 0 to 128
[  123.767584][ T7611] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.813371][ T7614] loop4: detected capacity change from 0 to 128
[  123.828030][ T7614] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.881942][ T7617] loop4: detected capacity change from 0 to 2048
[  123.951783][ T7617] hub 6-0:1.0: USB hub found
[  123.957101][ T7617] hub 6-0:1.0: 8 ports detected
[  124.002051][ T7617] syzkaller0: entered promiscuous mode
[  124.007631][ T7617] syzkaller0: entered allmulticast mode
[  124.202520][ T7623] loop2: detected capacity change from 0 to 1024
[  124.325043][ T7631] cgroup: Invalid name
[  124.626836][ T7653] loop2: detected capacity change from 0 to 128
[  124.628752][ T7647] lo speed is unknown, defaulting to 1000
[  124.664906][ T7653] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.857098][ T7660] loop2: detected capacity change from 0 to 8192
[  125.026552][ T7674] loop4: detected capacity change from 0 to 128
[  125.051335][ T7674] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.278874][ T7684] loop0: detected capacity change from 0 to 764
[  125.288112][ T7684] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  125.304700][ T7684] Symlink component flag not implemented
[  125.319104][ T7684] Symlink component flag not implemented (7)
[  125.379602][ T7690] syz.2.1311(7690): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  125.410095][ T7690] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  125.414451][ T7692] loop0: detected capacity change from 0 to 1024
[  125.517594][ T7702] loop0: detected capacity change from 0 to 2048
[  125.595956][ T7702] hub 6-0:1.0: USB hub found
[  125.600970][ T7702] hub 6-0:1.0: 8 ports detected
[  125.632928][ T7702] syzkaller0: entered promiscuous mode
[  125.638561][ T7702] syzkaller0: entered allmulticast mode
[  125.854255][ T7719] netlink: 'syz.0.1320': attribute type 13 has an invalid length.
[  125.862159][ T7719] netlink: 'syz.0.1320': attribute type 17 has an invalid length.
[  125.935301][ T7726] __nla_validate_parse: 38 callbacks suppressed
[  125.935322][ T7726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1322'.
[  125.971936][ T7728] loop4: detected capacity change from 0 to 512
[  125.991625][ T7728] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  126.010802][ T7728] netlink: 'syz.4.1323': attribute type 13 has an invalid length.
[  126.057216][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1324'.
[  126.066181][ T7732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1324'.
[  126.086040][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1324'.
[  126.095060][ T7732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1324'.
[  126.150341][ T7736] loop4: detected capacity change from 0 to 1024
[  126.258006][ T7744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1329'.
[  126.267133][ T7744] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1329'.
[  126.277254][ T7744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1329'.
[  126.294315][ T7744] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1329'.
[  126.340443][ T7747] loop1: detected capacity change from 0 to 512
[  126.376371][ T7747] ext4 filesystem being mounted at /313/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  126.401135][ T7747] netlink: 'syz.1.1330': attribute type 13 has an invalid length.
[  126.410837][ T7751] loop2: detected capacity change from 0 to 512
[  126.422426][ T7751] EXT4-fs (loop2): orphan cleanup on readonly fs
[  126.442944][ T7751] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1326: bg 0: block 248: padding at end of block bitmap is not set
[  126.458765][ T7751] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1326: Failed to acquire dquot type 1
[  126.472068][ T7751] EXT4-fs (loop2): 1 truncate cleaned up
[  126.492048][ T7751] 9pnet_fd: Insufficient options for proto=fd
[  126.499446][ T7751] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  126.509402][ T7751] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 0
[  126.546556][ T7756] loop1: detected capacity change from 0 to 128
[  126.560409][ T7756] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.672428][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'.
[  127.146721][ T7805] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  127.291312][ T7817] loop4: detected capacity change from 0 to 512
[  127.322316][ T7817] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.364173][ T7817] EXT4-fs (loop4): shut down requested (1)
[  127.384171][ T7817] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=16
[  127.393082][ T7817] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=16
[  127.408681][ T7817] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=16
[  127.612935][ T7828] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.621138][ T7828] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.737537][ T7835] loop3: detected capacity change from 0 to 1024
[  127.775093][ T7836] loop2: detected capacity change from 0 to 2048
[  127.813942][ T7842] loop1: detected capacity change from 0 to 512
[  127.824866][ T7842] EXT4-fs: Ignoring removed nobh option
[  127.843837][ T7842] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  127.844805][ T7836] hub 6-0:1.0: USB hub found
[  127.850893][ T7836] hub 6-0:1.0: 8 ports detected
[  127.899848][ T7845] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.1357: Allocating blocks 449-513 which overlap fs metadata
[  127.926236][ T7833] EXT4-fs (loop3): pa ffff888107597380: logic 48, phys. 177, len 21
[  127.934387][ T7833] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  127.959947][ T7836] syzkaller0: entered promiscuous mode
[  127.965610][ T7836] syzkaller0: entered allmulticast mode
[  127.973683][ T7842] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.1363: corrupted inode contents
[  127.994261][ T7842] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.1363: mark_inode_dirty error
[  128.016924][ T7842] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.1363: corrupted inode contents
[  128.032690][ T7842] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.1363: mark_inode_dirty error
[  128.057448][ T7842] __quota_error: 402 callbacks suppressed
[  128.057523][ T7842] Quota error (device loop1): write_blk: dquota write failed
[  128.076567][ T7842] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  128.088572][ T7859] loop3: detected capacity change from 0 to 128
[  128.104971][ T7859] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.121143][ T7842] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1363: Failed to acquire dquot type 0
[  128.181066][ T7842] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1363: corrupted inode contents
[  128.216570][ T7842] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.1363: mark_inode_dirty error
[  128.235774][ T7871] bond0: entered promiscuous mode
[  128.240890][ T7871] bond_slave_0: entered promiscuous mode
[  128.245205][ T7842] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1363: corrupted inode contents
[  128.246868][ T7871] bond_slave_1: entered promiscuous mode
[  128.266005][ T7871] bond0: left promiscuous mode
[  128.270857][ T7871] bond_slave_0: left promiscuous mode
[  128.276362][ T7871] bond_slave_1: left promiscuous mode
[  128.282563][ T7842] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1363: mark_inode_dirty error
[  128.301555][ T7842] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1363: corrupted inode contents
[  128.319707][ T7842] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  128.332655][ T7842] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1363: corrupted inode contents
[  128.345602][ T7842] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.1363: mark_inode_dirty error
[  128.357656][ T7842] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  128.378432][ T7842] EXT4-fs (loop1): 1 truncate cleaned up
[  128.431815][ T7842] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.463671][ T7842] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7842 comm=syz.1.1363
[  128.464894][ T7890] loop0: detected capacity change from 0 to 512
[  128.475461][   T29] audit: type=1326 audit(1755397815.740:5288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.4.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f37d1ebe9 code=0x7ffc0000
[  128.513354][   T29] audit: type=1326 audit(1755397815.780:5289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.4.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f37d1ebe9 code=0x7ffc0000
[  128.536953][   T29] audit: type=1326 audit(1755397815.780:5290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.4.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f37d1ebe9 code=0x7ffc0000
[  128.560416][   T29] audit: type=1326 audit(1755397815.780:5291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.4.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f37d1ebe9 code=0x7ffc0000
[  128.583919][   T29] audit: type=1326 audit(1755397815.780:5292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.4.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7f37d1ebe9 code=0x7ffc0000
[  128.607494][   T29] audit: type=1326 audit(1755397815.780:5293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.4.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f37d1ebe9 code=0x7ffc0000
[  128.631033][   T29] audit: type=1326 audit(1755397815.780:5294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.4.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f37d1ebe9 code=0x7ffc0000
[  128.654531][   T29] audit: type=1326 audit(1755397815.780:5295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.4.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7f37d1ebe9 code=0x7ffc0000
[  128.693411][ T7890] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  128.726377][ T7905] loop1: detected capacity change from 0 to 128
[  128.733232][ T7906] loop2: detected capacity change from 0 to 512
[  128.770834][ T7905] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.793738][ T7906] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  128.821592][ T7906] netlink: 'syz.2.1378': attribute type 13 has an invalid length.
[  128.932932][ T7924] loop3: detected capacity change from 0 to 512
[  128.947481][ T7924] EXT4-fs (loop3): too many log groups per flexible block group
[  128.955268][ T7924] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  128.962132][ T7924] EXT4-fs (loop3): mount failed
[  129.034058][ T7932] loop3: detected capacity change from 0 to 512
[  129.042804][ T7934] FAULT_INJECTION: forcing a failure.
[  129.042804][ T7934] name failslab, interval 1, probability 0, space 0, times 0
[  129.055527][ T7934] CPU: 1 UID: 0 PID: 7934 Comm: syz.2.1387 Tainted: G        W           6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) 
[  129.055562][ T7934] Tainted: [W]=WARN
[  129.055644][ T7934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  129.055656][ T7934] Call Trace:
[  129.055664][ T7934]  <TASK>
[  129.055672][ T7934]  __dump_stack+0x1d/0x30
[  129.055698][ T7934]  dump_stack_lvl+0xe8/0x140
[  129.055725][ T7934]  dump_stack+0x15/0x1b
[  129.055803][ T7934]  should_fail_ex+0x265/0x280
[  129.055887][ T7934]  should_failslab+0x8c/0xb0
[  129.055919][ T7934]  kmem_cache_alloc_lru_noprof+0x55/0x310
[  129.056004][ T7934]  ? __d_alloc+0x3d/0x340
[  129.056035][ T7934]  __d_alloc+0x3d/0x340
[  129.056070][ T7934]  ? mpol_shared_policy_init+0xbd/0x4c0
[  129.056117][ T7934]  d_alloc_pseudo+0x1e/0x80
[  129.056300][ T7934]  alloc_file_pseudo+0x71/0x160
[  129.056335][ T7934]  __shmem_file_setup+0x1de/0x210
[  129.056380][ T7934]  shmem_file_setup+0x3b/0x50
[  129.056502][ T7934]  __se_sys_memfd_create+0x2c3/0x590
[  129.056573][ T7934]  __x64_sys_memfd_create+0x31/0x40
[  129.056594][ T7934]  x64_sys_call+0x2abe/0x2ff0
[  129.056618][ T7934]  do_syscall_64+0xd2/0x200
[  129.056652][ T7934]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  129.056727][ T7934]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  129.056818][ T7934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.056918][ T7934] RIP: 0033:0x7ff06bc7ebe9
[  129.056959][ T7934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.056985][ T7934] RSP: 002b:00007ff06a6dee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  129.057009][ T7934] RAX: ffffffffffffffda RBX: 00000000000004f2 RCX: 00007ff06bc7ebe9
[  129.057022][ T7934] RDX: 00007ff06a6deef0 RSI: 0000000000000000 RDI: 00007ff06bd027e8
[  129.057034][ T7934] RBP: 0000200000000600 R08: 00007ff06a6debb7 R09: 00007ff06a6dee40
[  129.057048][ T7934] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000
[  129.057063][ T7934] R13: 00007ff06a6deef0 R14: 00007ff06a6deeb0 R15: 00002000000002c0
[  129.057154][ T7934]  </TASK>
[  129.274109][ T7932] ext4 filesystem being mounted at /255/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  129.590114][ T7948] loop2: detected capacity change from 0 to 512
[  129.611302][ T7952] loop1: detected capacity change from 0 to 1024
[  129.619547][ T7948] ext4 filesystem being mounted at /300/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  129.637736][ T7948] netlink: 'syz.2.1391': attribute type 13 has an invalid length.
[  129.827864][ T7971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.844397][ T7971] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.985695][ T7996] loop2: detected capacity change from 0 to 512
[  130.027720][ T7997] netlink: 'syz.0.1403': attribute type 12 has an invalid length.
[  130.043971][ T8001] loop4: detected capacity change from 0 to 512
[  130.066369][ T8001] EXT4-fs mount: 158 callbacks suppressed
[  130.066390][ T8001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.079621][ T8007] loop3: detected capacity change from 0 to 128
[  130.091832][ T8001] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  130.095285][ T8007] FAT-fs (loop3): Directory bread(block 32) failed
[  130.109803][ T8007] FAT-fs (loop3): Directory bread(block 33) failed
[  130.116565][ T8007] FAT-fs (loop3): Directory bread(block 34) failed
[  130.123133][ T8007] FAT-fs (loop3): Directory bread(block 35) failed
[  130.137832][ T8007] FAT-fs (loop3): Directory bread(block 36) failed
[  130.144838][ T8007] FAT-fs (loop3): Directory bread(block 37) failed
[  130.151416][ T8007] FAT-fs (loop3): Directory bread(block 38) failed
[  130.158440][ T8007] FAT-fs (loop3): Directory bread(block 39) failed
[  130.165103][ T8007] FAT-fs (loop3): Directory bread(block 40) failed
[  130.171800][ T8007] FAT-fs (loop3): Directory bread(block 41) failed
[  130.241184][ T8016] loop2: detected capacity change from 0 to 512
[  130.263874][ T8016] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  130.280470][ T8016] EXT4-fs (loop2): orphan cleanup on readonly fs
[  130.294716][ T8016] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1412: Failed to acquire dquot type 1
[  130.307898][ T8016] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1412: bg 0: block 40: padding at end of block bitmap is not set
[  130.322601][ T8016] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  130.331774][ T8016] EXT4-fs (loop2): 1 truncate cleaned up
[  130.338379][ T8016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  130.354320][ T8016] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #16: comm syz.2.1412: corrupted xattr block 31: invalid header
[  130.368901][ T8016] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=16
[  130.378278][ T8024] lo speed is unknown, defaulting to 1000
[  130.388162][ T8016] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #16: comm syz.2.1412: corrupted xattr block 31: invalid header
[  130.414376][ T8016] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=16
[  130.430282][ T8016] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.1412: bad symlink.
[  130.482510][ T8016] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #16: comm syz.2.1412: corrupted xattr block 31: invalid header
[  130.503684][ T8016] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=16
[  130.513079][ T8016] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.1412: bad symlink.
[  130.528526][ T8030] loop3: detected capacity change from 0 to 128
[  130.541287][ T8030] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  130.569605][ T8030] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.607488][ T8030] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  130.676012][ T8037] loop3: detected capacity change from 0 to 2048
[  130.683824][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.767202][ T8048] loop2: detected capacity change from 0 to 1024
[  130.789245][ T8037]  loop3: unable to read partition table
[  130.804618][ T8037] loop3: partition table beyond EOD, truncated
[  130.810845][ T8037] loop_reread_partitions: partition scan of loop3 () failed (rc=-5)
[  130.826705][ T8048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.959124][ T8066] FAULT_INJECTION: forcing a failure.
[  130.959124][ T8066] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  130.972515][ T8066] CPU: 0 UID: 0 PID: 8066 Comm: syz.3.1427 Tainted: G        W           6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) 
[  130.972555][ T8066] Tainted: [W]=WARN
[  130.972563][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  130.972578][ T8066] Call Trace:
[  130.972587][ T8066]  <TASK>
[  130.972596][ T8066]  __dump_stack+0x1d/0x30
[  130.972624][ T8066]  dump_stack_lvl+0xe8/0x140
[  130.972645][ T8066]  dump_stack+0x15/0x1b
[  130.972753][ T8066]  should_fail_ex+0x265/0x280
[  130.972779][ T8066]  should_fail_alloc_page+0xf2/0x100
[  130.972813][ T8066]  __alloc_frozen_pages_noprof+0xff/0x360
[  130.972891][ T8066]  alloc_pages_mpol+0xb3/0x250
[  130.972956][ T8066]  vma_alloc_folio_noprof+0x1aa/0x300
[  130.973002][ T8066]  handle_mm_fault+0xec2/0x2c20
[  130.973098][ T8066]  ? __rcu_read_lock+0x37/0x50
[  130.973122][ T8066]  ? __pte_offset_map_lock+0x1d4/0x230
[  130.973248][ T8066]  __get_user_pages+0x102e/0x1fa0
[  130.973291][ T8066]  __gup_longterm_locked+0x2fb/0xe60
[  130.973399][ T8066]  ? ___pte_offset_map+0xea/0x150
[  130.973442][ T8066]  gup_fast_fallback+0x1f5/0x1420
[  130.973474][ T8066]  ? alloc_pages_mpol+0x201/0x250
[  130.973524][ T8066]  pin_user_pages_fast+0x5f/0x90
[  130.973604][ T8066]  io_pin_pages+0xb5/0x170
[  130.973639][ T8066]  io_sqe_buffer_register+0x184/0x1430
[  130.973683][ T8066]  ? __memcg_slab_post_alloc_hook+0x44c/0x580
[  130.973730][ T8066]  ? __kvmalloc_node_noprof+0x398/0x4e0
[  130.973832][ T8066]  io_sqe_buffers_register+0x2ac/0x530
[  130.973869][ T8066]  __se_sys_io_uring_register+0xa9f/0xeb0
[  130.973976][ T8066]  ? fput+0x8f/0xc0
[  130.974034][ T8066]  ? ksys_write+0x192/0x1a0
[  130.974145][ T8066]  __x64_sys_io_uring_register+0x55/0x70
[  130.974183][ T8066]  x64_sys_call+0x18a3/0x2ff0
[  130.974213][ T8066]  do_syscall_64+0xd2/0x200
[  130.974249][ T8066]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  130.974307][ T8066]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  130.974335][ T8066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.974355][ T8066] RIP: 0033:0x7f4161c7ebe9
[  130.974376][ T8066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.974401][ T8066] RSP: 002b:00007f41606df038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  130.974427][ T8066] RAX: ffffffffffffffda RBX: 00007f4161ea5fa0 RCX: 00007f4161c7ebe9
[  130.974501][ T8066] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000003
[  130.974531][ T8066] RBP: 00007f41606df090 R08: 0000000000000000 R09: 0000000000000000
[  130.974568][ T8066] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000002
[  130.974585][ T8066] R13: 00007f4161ea6038 R14: 00007f4161ea5fa0 R15: 00007ffd2ada4b88
[  130.974609][ T8066]  </TASK>
[  130.994195][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.026012][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.048362][ T8071] FAULT_INJECTION: forcing a failure.
[  131.048362][ T8071] name failslab, interval 1, probability 0, space 0, times 0
[  131.274414][ T8071] CPU: 1 UID: 0 PID: 8071 Comm: syz.3.1430 Tainted: G        W           6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) 
[  131.274445][ T8071] Tainted: [W]=WARN
[  131.274450][ T8071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  131.274461][ T8071] Call Trace:
[  131.274468][ T8071]  <TASK>
[  131.274475][ T8071]  __dump_stack+0x1d/0x30
[  131.274544][ T8071]  dump_stack_lvl+0xe8/0x140
[  131.274561][ T8071]  dump_stack+0x15/0x1b
[  131.274576][ T8071]  should_fail_ex+0x265/0x280
[  131.274594][ T8071]  should_failslab+0x8c/0xb0
[  131.274620][ T8071]  kmem_cache_alloc_noprof+0x50/0x310
[  131.274654][ T8071]  ? getname_flags+0x80/0x3b0
[  131.274678][ T8071]  getname_flags+0x80/0x3b0
[  131.274703][ T8071]  __x64_sys_rename+0x33/0x70
[  131.274789][ T8071]  x64_sys_call+0x1f9/0x2ff0
[  131.274808][ T8071]  do_syscall_64+0xd2/0x200
[  131.274831][ T8071]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  131.274858][ T8071]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  131.274880][ T8071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.274900][ T8071] RIP: 0033:0x7f4161c7ebe9
[  131.274912][ T8071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.274955][ T8071] RSP: 002b:00007f41606df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  131.274978][ T8071] RAX: ffffffffffffffda RBX: 00007f4161ea5fa0 RCX: 00007f4161c7ebe9
[  131.274990][ T8071] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  131.275000][ T8071] RBP: 00007f41606df090 R08: 0000000000000000 R09: 0000000000000000
[  131.275011][ T8071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.275023][ T8071] R13: 00007f4161ea6038 R14: 00007f4161ea5fa0 R15: 00007ffd2ada4b88
[  131.275048][ T8071]  </TASK>
[  131.468133][ T8074] loop4: detected capacity change from 0 to 128
[  131.488268][ T8080] loop1: detected capacity change from 0 to 1024
[  131.498165][ T8078] netlink: 'syz.3.1431': attribute type 21 has an invalid length.
[  131.500780][ T8074] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  131.507648][ T8078] __nla_validate_parse: 24 callbacks suppressed
[  131.507668][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1431'.
[  131.518647][ T8074] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.552112][ T8074] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  131.577238][ T8080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.627593][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.779028][ T8101] loop2: detected capacity change from 0 to 1024
[  131.790371][ T8104] loop0: detected capacity change from 0 to 512
[  131.806725][ T8101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.823147][ T8104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.842918][ T8104] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  131.846984][ T8113] FAULT_INJECTION: forcing a failure.
[  131.846984][ T8113] name failslab, interval 1, probability 0, space 0, times 0
[  131.865929][ T8113] CPU: 0 UID: 0 PID: 8113 Comm: syz.3.1442 Tainted: G        W           6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) 
[  131.865993][ T8113] Tainted: [W]=WARN
[  131.865999][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  131.866012][ T8113] Call Trace:
[  131.866019][ T8113]  <TASK>
[  131.866048][ T8113]  __dump_stack+0x1d/0x30
[  131.866074][ T8113]  dump_stack_lvl+0xe8/0x140
[  131.866097][ T8113]  dump_stack+0x15/0x1b
[  131.866171][ T8113]  should_fail_ex+0x265/0x280
[  131.866198][ T8113]  should_failslab+0x8c/0xb0
[  131.866228][ T8113]  kmem_cache_alloc_node_noprof+0x57/0x320
[  131.866263][ T8113]  ? __alloc_skb+0x101/0x320
[  131.866429][ T8113]  __alloc_skb+0x101/0x320
[  131.866471][ T8113]  netlink_alloc_large_skb+0xba/0xf0
[  131.866553][ T8113]  netlink_sendmsg+0x3cf/0x6b0
[  131.866609][ T8113]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.866631][ T8113]  __sock_sendmsg+0x142/0x180
[  131.866675][ T8113]  ____sys_sendmsg+0x31e/0x4e0
[  131.866707][ T8113]  ___sys_sendmsg+0x17b/0x1d0
[  131.866760][ T8113]  __x64_sys_sendmsg+0xd4/0x160
[  131.866793][ T8113]  x64_sys_call+0x191e/0x2ff0
[  131.866855][ T8113]  do_syscall_64+0xd2/0x200
[  131.866890][ T8113]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  131.866922][ T8113]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  131.866951][ T8113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.867042][ T8113] RIP: 0033:0x7f4161c7ebe9
[  131.867061][ T8113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.867085][ T8113] RSP: 002b:00007f41606df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  131.867105][ T8113] RAX: ffffffffffffffda RBX: 00007f4161ea5fa0 RCX: 00007f4161c7ebe9
[  131.867152][ T8113] RDX: 0000000000008840 RSI: 0000200000000240 RDI: 0000000000000003
[  131.867164][ T8113] RBP: 00007f41606df090 R08: 0000000000000000 R09: 0000000000000000
[  131.867178][ T8113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.867271][ T8113] R13: 00007f4161ea6038 R14: 00007f4161ea5fa0 R15: 00007ffd2ada4b88
[  131.867433][ T8113]  </TASK>
[  132.095304][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.106857][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.134349][ T8106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1441'.
[  132.135022][ T8117] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1443'.
[  132.152414][ T8117] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1443'.
[  132.164894][ T8117] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1443'.
[  132.173599][ T8121] loop3: detected capacity change from 0 to 1024
[  132.176282][ T8117] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1443'.
[  132.193125][ T8121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.209233][ T8119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1444'.
[  132.218348][ T8119] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1444'.
[  132.229742][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.243651][ T8119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1444'.
[  132.252876][ T8119] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1444'.
[  132.258367][ T8125] loop2: detected capacity change from 0 to 512
[  132.282144][ T8125] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  132.303574][ T8129] loop1: detected capacity change from 0 to 128
[  132.314427][ T8125] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended
[  132.323875][ T8132] loop3: detected capacity change from 0 to 512
[  132.332155][ T8125] EXT4-fs error (device loop2): ext4_orphan_get:1392: comm syz.2.1447: inode #15: comm syz.2.1447: iget: illegal inode #
[  132.346474][ T8129] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  132.359425][ T8125] EXT4-fs (loop2): Remounting filesystem read-only
[  132.368595][ T8129] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.379712][ T8125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.384448][ T8137] loop4: detected capacity change from 0 to 512
[  132.394509][ T8132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.411844][ T8129] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  132.421062][ T8132] ext4 filesystem being mounted at /270/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  132.421894][ T8125] FAULT_INJECTION: forcing a failure.
[  132.421894][ T8125] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  132.444452][ T8125] CPU: 0 UID: 0 PID: 8125 Comm: syz.2.1447 Tainted: G        W           6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) 
[  132.444487][ T8125] Tainted: [W]=WARN
[  132.444494][ T8125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  132.444506][ T8125] Call Trace:
[  132.444515][ T8125]  <TASK>
[  132.444524][ T8125]  __dump_stack+0x1d/0x30
[  132.444576][ T8125]  dump_stack_lvl+0xe8/0x140
[  132.444672][ T8125]  dump_stack+0x15/0x1b
[  132.444693][ T8125]  should_fail_ex+0x265/0x280
[  132.444720][ T8125]  should_fail+0xb/0x20
[  132.444739][ T8125]  should_fail_usercopy+0x1a/0x20
[  132.444762][ T8125]  _copy_from_user+0x1c/0xb0
[  132.444801][ T8125]  io_register_rsrc_update+0x5f/0x120
[  132.444836][ T8125]  __se_sys_io_uring_register+0x6d9/0xeb0
[  132.444895][ T8125]  ? fput+0x8f/0xc0
[  132.444996][ T8125]  ? ksys_write+0x192/0x1a0
[  132.445021][ T8125]  __x64_sys_io_uring_register+0x55/0x70
[  132.445050][ T8125]  x64_sys_call+0x18a3/0x2ff0
[  132.445073][ T8125]  do_syscall_64+0xd2/0x200
[  132.445180][ T8125]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  132.445250][ T8125]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  132.445277][ T8125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.445300][ T8125] RIP: 0033:0x7ff06bc7ebe9
[  132.445315][ T8125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.445377][ T8125] RSP: 002b:00007ff06a6df038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  132.445397][ T8125] RAX: ffffffffffffffda RBX: 00007ff06bea5fa0 RCX: 00007ff06bc7ebe9
[  132.445429][ T8125] RDX: 0000200000000240 RSI: 0000000000000010 RDI: 0000000000000005
[  132.445442][ T8125] RBP: 00007ff06a6df090 R08: 0000000000000000 R09: 0000000000000000
[  132.445455][ T8125] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001
[  132.445468][ T8125] R13: 00007ff06bea6038 R14: 00007ff06bea5fa0 R15: 00007ffeead86358
[  132.445489][ T8125]  </TASK>
[  132.451873][ T8137] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  132.657175][ T8137] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended
[  132.684866][ T8137] EXT4-fs error (device loop4): ext4_orphan_get:1392: comm syz.4.1450: inode #15: comm syz.4.1450: iget: illegal inode #
[  132.698893][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.713197][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.713367][ T8137] EXT4-fs (loop4): Remounting filesystem read-only
[  132.743905][ T8137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.809069][ T8149] process 'syz.3.1452' launched '/dev/fd/12' with NULL argv: empty string added
[  132.829650][ T8151] loop2: detected capacity change from 0 to 512
[  132.846242][ T8151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.859625][ T8151] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  132.871143][ T8158] ÿ: renamed from bond_slave_0
[  132.875923][ T8151] netlink: 'syz.2.1455': attribute type 13 has an invalid length.
[  132.905439][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.971123][ T8171] cgroup: Invalid name
[  133.066657][   T29] kauditd_printk_skb: 456 callbacks suppressed
[  133.066677][   T29] audit: type=1326 audit(1755397820.330:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.2.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff06bc75ba7 code=0x7ffc0000
[  133.096899][   T29] audit: type=1326 audit(1755397820.330:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.2.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff06bc1add9 code=0x7ffc0000
[  133.120325][   T29] audit: type=1326 audit(1755397820.330:5752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.2.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06bc7ebe9 code=0x7ffc0000
[  133.143964][   T29] audit: type=1326 audit(1755397820.330:5753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.2.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06bc7ebe9 code=0x7ffc0000
[  133.167598][   T29] audit: type=1326 audit(1755397820.330:5754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.2.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06bc7ebe9 code=0x7ffc0000
[  133.191201][   T29] audit: type=1326 audit(1755397820.330:5755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.2.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff06bc75ba7 code=0x7ffc0000
[  133.214601][   T29] audit: type=1326 audit(1755397820.330:5756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.2.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff06bc1add9 code=0x7ffc0000
[  133.237977][   T29] audit: type=1326 audit(1755397820.330:5757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.2.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06bc7ebe9 code=0x7ffc0000
[  133.261514][   T29] audit: type=1326 audit(1755397820.330:5758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.2.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06bc7ebe9 code=0x7ffc0000
[  133.285119][   T29] audit: type=1326 audit(1755397820.330:5759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.2.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7ff06bc7ebe9 code=0x7ffc0000
[  133.339621][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.356708][ T8194] loop2: detected capacity change from 0 to 512
[  133.383744][ T8194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.394294][ T8205] loop1: detected capacity change from 0 to 512
[  133.405888][ T8194] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  133.426201][ T8205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.450292][ T8205] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  133.548053][ T8205] netlink: 'syz.1.1469': attribute type 13 has an invalid length.
[  133.565676][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.601265][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.674575][ T8228] loop0: detected capacity change from 0 to 1024
[  133.686795][ T8228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.719596][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.742979][ T8236] FAULT_INJECTION: forcing a failure.
[  133.742979][ T8236] name failslab, interval 1, probability 0, space 0, times 0
[  133.755741][ T8236] CPU: 0 UID: 0 PID: 8236 Comm: syz.0.1476 Tainted: G        W           6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) 
[  133.755787][ T8236] Tainted: [W]=WARN
[  133.755826][ T8236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  133.755843][ T8236] Call Trace:
[  133.755851][ T8236]  <TASK>
[  133.755862][ T8236]  __dump_stack+0x1d/0x30
[  133.755885][ T8236]  dump_stack_lvl+0xe8/0x140
[  133.755905][ T8236]  dump_stack+0x15/0x1b
[  133.755990][ T8236]  should_fail_ex+0x265/0x280
[  133.756012][ T8236]  ? bpf_prog_alloc_no_stats+0xc4/0x3a0
[  133.756086][ T8236]  should_failslab+0x8c/0xb0
[  133.756191][ T8236]  __kmalloc_cache_noprof+0x4c/0x320
[  133.756250][ T8236]  bpf_prog_alloc_no_stats+0xc4/0x3a0
[  133.756286][ T8236]  bpf_prog_alloc+0x3c/0x150
[  133.756322][ T8236]  bpf_prog_load+0x514/0x1070
[  133.756394][ T8236]  ? security_bpf+0x2b/0x90
[  133.756437][ T8236]  __sys_bpf+0x462/0x7b0
[  133.756498][ T8236]  __x64_sys_bpf+0x41/0x50
[  133.756530][ T8236]  x64_sys_call+0x2aea/0x2ff0
[  133.756641][ T8236]  do_syscall_64+0xd2/0x200
[  133.756739][ T8236]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  133.756793][ T8236]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  133.756841][ T8236]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.756904][ T8236] RIP: 0033:0x7f157385ebe9
[  133.756988][ T8236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.757012][ T8236] RSP: 002b:00007f15722c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  133.757051][ T8236] RAX: ffffffffffffffda RBX: 00007f1573a85fa0 RCX: 00007f157385ebe9
[  133.757138][ T8236] RDX: 000000000000001d RSI: 00002000000017c0 RDI: 0000000000000005
[  133.757150][ T8236] RBP: 00007f15722c7090 R08: 0000000000000000 R09: 0000000000000000
[  133.757162][ T8236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  133.757206][ T8236] R13: 00007f1573a86038 R14: 00007f1573a85fa0 R15: 00007ffe8d8c92a8
[  133.757230][ T8236]  </TASK>
[  134.023665][ T8241] loop0: detected capacity change from 0 to 512
[  134.043410][ T8245] loop3: detected capacity change from 0 to 512
[  134.067871][ T8245] ext4: Unknown parameter ''
[  134.068618][ T8250] loop0: detected capacity change from 0 to 512
[  134.131675][ T8250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.151687][ T8257] loop3: detected capacity change from 0 to 2048
[  134.156354][ T8250] ext4 filesystem being mounted at /263/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  134.176673][ T8250] netlink: 'syz.0.1481': attribute type 13 has an invalid length.
[  134.187579][ T8257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.214725][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.249639][ T8257] hub 6-0:1.0: USB hub found
[  134.253820][ T8265] loop4: detected capacity change from 0 to 128
[  134.261869][ T8257] hub 6-0:1.0: 8 ports detected
[  134.276917][ T8265] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  134.294684][ T8265] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.323388][ T8265] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  134.348278][ T8257] syzkaller0: entered promiscuous mode
[  134.353850][ T8257] syzkaller0: entered allmulticast mode
[  134.366862][ T8263] lo speed is unknown, defaulting to 1000
[  134.486666][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.529800][ T1036] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  134.537413][ T1036] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  134.544904][ T1036] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  134.553030][ T1036] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  134.560569][ T1036] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  134.568186][ T1036] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  134.575650][ T1036] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  134.583152][ T1036] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  134.590635][ T1036] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  134.598111][ T1036] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  134.608139][ T1036] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v8.00 Device [syz1] on syz0
[  134.827783][ T8313] cgroup: Invalid name
[  134.858521][ T8320] loop0: detected capacity change from 0 to 1024
[  134.866123][ T8320] EXT4-fs: quotafile must be on filesystem root
[  134.877913][ T8320] siw: device registration error -23
[  134.888523][ T8320] loop0: detected capacity change from 0 to 512
[  134.906725][ T8320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.919664][ T8320] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.954941][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.964649][ T8333] loop3: detected capacity change from 0 to 256
[  135.009070][ T3308] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  135.016981][ T3308] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  135.041213][ T8337] FAULT_INJECTION: forcing a failure.
[  135.041213][ T8337] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.054546][ T8337] CPU: 0 UID: 0 PID: 8337 Comm: syz.0.1504 Tainted: G        W           6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) 
[  135.054604][ T8337] Tainted: [W]=WARN
[  135.054613][ T8337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  135.054629][ T8337] Call Trace:
[  135.054638][ T8337]  <TASK>
[  135.054647][ T8337]  __dump_stack+0x1d/0x30
[  135.054671][ T8337]  dump_stack_lvl+0xe8/0x140
[  135.054693][ T8337]  dump_stack+0x15/0x1b
[  135.054762][ T8337]  should_fail_ex+0x265/0x280
[  135.054820][ T8337]  should_fail+0xb/0x20
[  135.054838][ T8337]  should_fail_usercopy+0x1a/0x20
[  135.054924][ T8337]  _copy_to_user+0x20/0xa0
[  135.054962][ T8337]  simple_read_from_buffer+0xb5/0x130
[  135.054985][ T8337]  proc_fail_nth_read+0x10e/0x150
[  135.055063][ T8337]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  135.055150][ T8337]  vfs_read+0x1a5/0x770
[  135.055199][ T8337]  ? __rcu_read_unlock+0x4f/0x70
[  135.055222][ T8337]  ? __fget_files+0x184/0x1c0
[  135.055254][ T8337]  ksys_read+0xda/0x1a0
[  135.055276][ T8337]  __x64_sys_read+0x40/0x50
[  135.055373][ T8337]  x64_sys_call+0x27bc/0x2ff0
[  135.055396][ T8337]  do_syscall_64+0xd2/0x200
[  135.055432][ T8337]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  135.055462][ T8337]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  135.055512][ T8337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.055538][ T8337] RIP: 0033:0x7f157385d5fc
[  135.055627][ T8337] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  135.055671][ T8337] RSP: 002b:00007f15722a6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  135.055694][ T8337] RAX: ffffffffffffffda RBX: 00007f1573a86090 RCX: 00007f157385d5fc
[  135.055711][ T8337] RDX: 000000000000000f RSI: 00007f15722a60a0 RDI: 000000000000000a
[  135.055750][ T8337] RBP: 00007f15722a6090 R08: 0000000000000000 R09: 0000000000000000
[  135.055825][ T8337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.055837][ T8337] R13: 00007f1573a86128 R14: 00007f1573a86090 R15: 00007ffe8d8c92a8
[  135.055888][ T8337]  </TASK>
[  135.305081][ T8340] loop4: detected capacity change from 0 to 256
[  135.320822][ T8340] msdos: Unknown parameter 'kfree'
[  135.364571][ T8340] tipc: Started in network mode
[  135.369749][ T8340] tipc: Node identity 7acc21612665, cluster identity 4711
[  135.377136][ T8340] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.405068][ T8352] cgroup: Invalid name
[  135.424868][ T8340] loop4: detected capacity change from 0 to 512
[  135.439500][ T8340] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  135.455842][ T8340] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1507: bg 0: block 4: invalid block bitmap
[  135.457798][ T8354] SELinux: failed to load policy
[  135.477150][ T8340] EXT4-fs (loop4): Remounting filesystem read-only
[  135.486895][ T8340] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  135.501118][ T8340] EXT4-fs (loop4): 1 truncate cleaned up
[  135.520405][ T8340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.547453][ T8339] tipc: Resetting bearer <eth:syzkaller0>
[  135.564112][ T8339] tipc: Disabling bearer <eth:syzkaller0>
[  135.624895][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.626008][ T8381] loop1: detected capacity change from 0 to 2048
[  135.656563][   T31] bridge_slave_1: left allmulticast mode
[  135.662354][   T31] bridge_slave_1: left promiscuous mode
[  135.665355][ T8381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.668215][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.691060][   T31] bridge_slave_0: left allmulticast mode
[  135.696889][   T31] bridge_slave_0: left promiscuous mode
[  135.702632][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.734749][   T31] bond1 (unregistering): (slave geneve2): Releasing backup interface
[  135.763685][ T8381] hub 6-0:1.0: USB hub found
[  135.782752][ T8381] hub 6-0:1.0: 8 ports detected
[  135.867789][   T31] bond0 (unregistering): (slave 
c
1ÿ): Releasing backup interface
[  135.877389][   T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  135.888836][   T31] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  135.898013][   T31] bond0 (unregistering): Released all slaves
[  135.908937][   T31] bond1 (unregistering): Released all slaves
[  135.919899][   T31] bond2 (unregistering): Released all slaves
[  135.951094][ T8398] syzkaller0: entered promiscuous mode
[  135.956754][ T8398] syzkaller0: entered allmulticast mode
[  135.972636][ T8357] lo speed is unknown, defaulting to 1000
[  136.001867][   T31] hsr_slave_0: left promiscuous mode
[  136.007856][   T31] hsr_slave_1: left promiscuous mode
[  136.013569][   T31] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.022279][   T31] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.070967][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.090775][   T31] team0 (unregistering): Port device team_slave_1 removed
[  136.111219][   T31] team0 (unregistering): Port device team_slave_0 removed
[  136.264628][ T8357] chnl_net:caif_netlink_parms(): no params data found
[  136.331705][ T8436] loop1: detected capacity change from 0 to 1024
[  136.338865][ T8436] EXT4-fs: Ignoring removed orlov option
[  136.346196][ T8357] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.348018][ T8436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.353386][ T8357] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.375727][ T8357] bridge_slave_0: entered allmulticast mode
[  136.382856][ T8357] bridge_slave_0: entered promiscuous mode
[  136.391370][ T8357] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.398504][ T8357] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.406160][ T8357] bridge_slave_1: entered allmulticast mode
[  136.412756][ T8357] bridge_slave_1: entered promiscuous mode
[  136.435486][ T8357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.446334][ T8357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.470598][ T8357] team0: Port device team_slave_0 added
[  136.479454][ T8357] team0: Port device team_slave_1 added
[  136.503901][ T8357] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.510996][ T8357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.537007][ T8357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.548758][ T8357] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.555800][ T8357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.581815][ T8357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.621489][ T8445] cgroup: Invalid name
[  136.638474][ T8357] hsr_slave_0: entered promiscuous mode
[  136.646314][ T8357] hsr_slave_1: entered promiscuous mode
[  136.652584][ T8357] debugfs: 'hsr0' already exists in 'hsr'
[  136.658440][ T8357] Cannot create hsr debugfs directory
[  136.850699][ T8357] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  136.881891][ T8357] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  136.901407][ T8357] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  136.921823][ T8357] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  136.975059][ T8357] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.982190][ T8357] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.989567][ T8357] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.989618][ T8477] loop2: detected capacity change from 0 to 512
[  136.996686][ T8357] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.014535][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.022749][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.036563][ T8477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.057599][ T8477] ext4 filesystem being mounted at /332/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  137.070715][ T8357] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.089065][ T8357] 8021q: adding VLAN 0 to HW filter on device team0
[  137.103731][ T3432] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.110912][ T3432] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.124322][ T8477] syz.2.1534 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  137.140285][ T3432] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.147420][ T3432] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.168377][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.194301][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.218481][ T8489] __nla_validate_parse: 14 callbacks suppressed
[  137.218501][ T8489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1539'.
[  137.233881][ T8489] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1539'.
[  137.245375][ T8489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1539'.
[  137.254731][ T8489] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1539'.
[  137.290256][ T8492] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1540'.
[  137.303332][ T8486] lo speed is unknown, defaulting to 1000
[  137.382884][ T8357] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.481010][ T8514] cgroup: Invalid name
[  137.652877][ T8543] loop2: detected capacity change from 0 to 128
[  137.667961][ T8543] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  137.692700][ T8543] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.713941][ T8543] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  137.749284][ T8551] loop0: detected capacity change from 0 to 512
[  137.756152][ T8548] loop4: detected capacity change from 0 to 1024
[  137.758561][ T8357] veth0_vlan: entered promiscuous mode
[  137.773018][ T8357] veth1_vlan: entered promiscuous mode
[  137.780760][ T8548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.787593][ T8357] veth0_macvtap: entered promiscuous mode
[  137.800781][ T8357] veth1_macvtap: entered promiscuous mode
[  137.805211][ T8551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.812644][ T8357] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.828293][ T8551] ext4 filesystem being mounted at /281/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  137.844777][ T8357] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.858693][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.884975][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.935550][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.972219][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.983632][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.004139][ T8560] lo speed is unknown, defaulting to 1000
[  138.016344][ T8560] lo speed is unknown, defaulting to 1000
[  138.029079][ T8560] lo speed is unknown, defaulting to 1000
[  138.042820][ T8560] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  138.066013][ T8564] loop5: detected capacity change from 0 to 512
[  138.070651][ T8563] loop4: detected capacity change from 0 to 1024
[  138.080914][ T8560] lo speed is unknown, defaulting to 1000
[  138.095099][ T8560] lo speed is unknown, defaulting to 1000
[  138.102407][ T8564] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.1511: error while reading EA inode 32 err=-116
[  138.104160][ T8563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.124744][ T8560] lo speed is unknown, defaulting to 1000
[  138.139728][ T8564] EXT4-fs (loop5): Remounting filesystem read-only
[  138.146437][ T8564] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  138.160442][ T8560] lo speed is unknown, defaulting to 1000
[  138.176527][ T8560] lo speed is unknown, defaulting to 1000
[  138.187514][   T29] kauditd_printk_skb: 465 callbacks suppressed
[  138.187565][   T29] audit: type=1400 audit(1755397825.450:6225): avc:  denied  { write } for  pid=8562 comm="syz.4.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  138.190112][ T8564] EXT4-fs (loop5): 1 orphan inode deleted
[  138.199975][   T29] audit: type=1400 audit(1755397825.450:6226): avc:  denied  { write } for  pid=8562 comm="syz.4.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  138.242861][ T8564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.318660][ T8357] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.345923][   T29] audit: type=1326 audit(1755397825.610:6227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8569 comm="syz.5.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f401ebe9 code=0x7ffc0000
[  138.387874][   T29] audit: type=1326 audit(1755397825.610:6228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8569 comm="syz.5.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f401ebe9 code=0x7ffc0000
[  138.388238][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.411371][   T29] audit: type=1326 audit(1755397825.640:6229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8569 comm="syz.5.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59f401ebe9 code=0x7ffc0000
[  138.443831][   T29] audit: type=1326 audit(1755397825.640:6230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8569 comm="syz.5.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f401ebe9 code=0x7ffc0000
[  138.467424][   T29] audit: type=1326 audit(1755397825.640:6231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8569 comm="syz.5.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f401ebe9 code=0x7ffc0000
[  138.491008][   T29] audit: type=1326 audit(1755397825.640:6232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8569 comm="syz.5.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f59f401ebe9 code=0x7ffc0000
[  138.514527][   T29] audit: type=1326 audit(1755397825.640:6233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8569 comm="syz.5.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f401ebe9 code=0x7ffc0000
[  138.538128][   T29] audit: type=1326 audit(1755397825.640:6234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8569 comm="syz.5.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f401ebe9 code=0x7ffc0000
[  138.579433][ T8581] netlink: 'syz.1.1555': attribute type 13 has an invalid length.
[  138.601448][ T8581] gretap0: refused to change device tx_queue_len
[  138.608018][ T8581] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  138.633252][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.646270][ T8585] cgroup: Invalid name
[  138.651576][ T8581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8581 comm=syz.1.1555
[  138.700448][ T8593] loop1: detected capacity change from 0 to 1024
[  138.723071][ T8593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.758136][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.878031][ T8628] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8628 comm=’
[  138.892973][ T8628] FAULT_INJECTION: forcing a failure.
[  138.892973][ T8628] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  138.906449][ T8628] CPU: 0 UID: 0 PID: 8628 Comm: ’ Tainted: G        W           6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) 
[  138.906490][ T8628] Tainted: [W]=WARN
[  138.906530][ T8628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  138.906545][ T8628] Call Trace:
[  138.906553][ T8628]  <TASK>
[  138.906562][ T8628]  __dump_stack+0x1d/0x30
[  138.906586][ T8628]  dump_stack_lvl+0xe8/0x140
[  138.906609][ T8628]  dump_stack+0x15/0x1b
[  138.906628][ T8628]  should_fail_ex+0x265/0x280
[  138.906731][ T8628]  should_fail+0xb/0x20
[  138.906751][ T8628]  should_fail_usercopy+0x1a/0x20
[  138.906806][ T8628]  _copy_to_user+0x20/0xa0
[  138.906840][ T8628]  simple_read_from_buffer+0xb5/0x130
[  138.906867][ T8628]  proc_fail_nth_read+0x10e/0x150
[  138.906900][ T8628]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  138.906989][ T8628]  vfs_read+0x1a5/0x770
[  138.907012][ T8628]  ? __rcu_read_unlock+0x4f/0x70
[  138.907065][ T8628]  ? __fget_files+0x184/0x1c0
[  138.907099][ T8628]  ksys_read+0xda/0x1a0
[  138.907129][ T8628]  __x64_sys_read+0x40/0x50
[  138.907156][ T8628]  x64_sys_call+0x27bc/0x2ff0
[  138.907238][ T8628]  do_syscall_64+0xd2/0x200
[  138.907280][ T8628]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  138.907311][ T8628]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  138.907363][ T8628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.907390][ T8628] RIP: 0033:0x7f157385d5fc
[  138.907408][ T8628] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  138.907448][ T8628] RSP: 002b:00007f15722c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  138.907467][ T8628] RAX: ffffffffffffffda RBX: 00007f1573a85fa0 RCX: 00007f157385d5fc
[  138.907479][ T8628] RDX: 000000000000000f RSI: 00007f15722c70a0 RDI: 000000000000000c
[  138.907493][ T8628] RBP: 00007f15722c7090 R08: 0000000000000000 R09: 0000000000000000
[  138.907587][ T8628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.907601][ T8628] R13: 00007f1573a86038 R14: 00007f1573a85fa0 R15: 00007ffe8d8c92a8
[  138.907627][ T8628]  </TASK>
[  139.165522][ T8637] lo speed is unknown, defaulting to 1000
[  139.173251][ T8637] lo speed is unknown, defaulting to 1000
[  139.212114][ T8643] loop2: detected capacity change from 0 to 1024
[  139.242096][ T8651] loop0: detected capacity change from 0 to 512
[  139.250437][ T8643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.268195][ T8651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.280874][ T8651] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  139.405894][ T8665] pim6reg: entered allmulticast mode
[  139.418375][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'.
[  139.472611][ T8671] pim6reg: left allmulticast mode
[  139.520380][ T8675] IPv4: Oversized IP packet from 127.202.26.0
[  139.701640][ T8692] loop1: detected capacity change from 0 to 2048
[  139.757977][ T8692]  loop1: unable to read partition table
[  139.763724][ T8692] loop1: partition table beyond EOD, truncated
[  139.770006][ T8692] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
[  139.793619][ T8696] loop5: detected capacity change from 0 to 1024
[  139.851919][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'.
[  139.861070][ T8706] loop5: detected capacity change from 0 to 128
[  139.861769][ T8704] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1595'.
[  139.879819][ T8706] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.893822][ T8704] netlink: 'syz.1.1595': attribute type 1 has an invalid length.
[  139.901762][ T8704] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1595'.
[  140.008358][ T8720] loop2: detected capacity change from 0 to 512
[  140.015220][ T8720] EXT4-fs: Ignoring removed nomblk_io_submit option
[  140.022060][ T8720] EXT4-fs: Ignoring removed nomblk_io_submit option
[  140.029209][ T8720] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  140.039601][ T8720] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  140.050384][ T8720] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  140.060553][ T8720] EXT4-fs (loop2): 1 truncate cleaned up
[  140.076736][ T8727] loop4: detected capacity change from 0 to 2048
[  140.083654][ T8720] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  140.118640][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1604'.
[  140.146505][ T8727]  loop4: unable to read partition table
[  140.152375][ T8727] loop4: partition table beyond EOD, truncated
[  140.158635][ T8727] loop_reread_partitions: partition scan of loop4 () failed (rc=-5)
[  140.167112][ T8734] FAULT_INJECTION: forcing a failure.
[  140.167112][ T8734] name failslab, interval 1, probability 0, space 0, times 0
[  140.179927][ T8734] CPU: 1 UID: 0 PID: 8734 Comm: syz.1.1606 Tainted: G        W           6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) 
[  140.180039][ T8734] Tainted: [W]=WARN
[  140.180047][ T8734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  140.180064][ T8734] Call Trace:
[  140.180072][ T8734]  <TASK>
[  140.180080][ T8734]  __dump_stack+0x1d/0x30
[  140.180109][ T8734]  dump_stack_lvl+0xe8/0x140
[  140.180129][ T8734]  dump_stack+0x15/0x1b
[  140.180145][ T8734]  should_fail_ex+0x265/0x280
[  140.180240][ T8734]  should_failslab+0x8c/0xb0
[  140.180265][ T8734]  __kvmalloc_node_noprof+0x123/0x4e0
[  140.180332][ T8734]  ? simple_xattr_set+0x6e/0x2b0
[  140.180367][ T8734]  ? kmem_cache_alloc_noprof+0x186/0x310
[  140.180400][ T8734]  simple_xattr_set+0x6e/0x2b0
[  140.180485][ T8734]  ? __kernfs_iattrs+0x132/0x1a0
[  140.180521][ T8734]  kernfs_vfs_user_xattr_set+0x18e/0x220
[  140.180546][ T8734]  ? __pfx_kernfs_vfs_user_xattr_set+0x10/0x10
[  140.180572][ T8734]  __vfs_setxattr+0x2e6/0x310
[  140.180599][ T8734]  __vfs_setxattr_noperm+0xe8/0x410
[  140.180690][ T8734]  __vfs_setxattr_locked+0x1af/0x1d0
[  140.180759][ T8734]  vfs_setxattr+0x132/0x270
[  140.180788][ T8734]  filename_setxattr+0x1ad/0x400
[  140.180822][ T8734]  path_setxattrat+0x2c9/0x310
[  140.180875][ T8734]  __x64_sys_setxattr+0x6e/0x90
[  140.180953][ T8734]  x64_sys_call+0xad2/0x2ff0
[  140.180981][ T8734]  do_syscall_64+0xd2/0x200
[  140.181017][ T8734]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  140.181118][ T8734]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  140.181146][ T8734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.181171][ T8734] RIP: 0033:0x7fc7734febe9
[  140.181263][ T8734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.181282][ T8734] RSP: 002b:00007fc771f67038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  140.181381][ T8734] RAX: ffffffffffffffda RBX: 00007fc773725fa0 RCX: 00007fc7734febe9
[  140.181394][ T8734] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000080
[  140.181406][ T8734] RBP: 00007fc771f67090 R08: 0000000000000001 R09: 0000000000000000
[  140.181418][ T8734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.181433][ T8734] R13: 00007fc773726038 R14: 00007fc773725fa0 R15: 00007ffc242537c8
[  140.181507][ T8734]  </TASK>
[  140.451554][ T8741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.460210][ T8740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.460777][ T8741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.468874][ T8740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.546718][ T8750] FAULT_INJECTION: forcing a failure.
[  140.546718][ T8750] name failslab, interval 1, probability 0, space 0, times 0
[  140.559474][ T8750] CPU: 1 UID: 0 PID: 8750 Comm: syz.2.1612 Tainted: G        W           6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) 
[  140.559517][ T8750] Tainted: [W]=WARN
[  140.559525][ T8750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  140.559539][ T8750] Call Trace:
[  140.559604][ T8750]  <TASK>
[  140.559613][ T8750]  __dump_stack+0x1d/0x30
[  140.559669][ T8750]  dump_stack_lvl+0xe8/0x140
[  140.559693][ T8750]  dump_stack+0x15/0x1b
[  140.559714][ T8750]  should_fail_ex+0x265/0x280
[  140.559806][ T8750]  ? nf_tables_newtable+0x375/0xea0
[  140.559825][ T8750]  should_failslab+0x8c/0xb0
[  140.559846][ T8750]  __kmalloc_cache_noprof+0x4c/0x320
[  140.559931][ T8750]  ? __nla_validate_parse+0x1652/0x1d00
[  140.560002][ T8750]  nf_tables_newtable+0x375/0xea0
[  140.560097][ T8750]  nfnetlink_rcv+0xb96/0x1690
[  140.560186][ T8750]  netlink_unicast+0x5bd/0x690
[  140.560269][ T8750]  netlink_sendmsg+0x58b/0x6b0
[  140.560290][ T8750]  ? __pfx_netlink_sendmsg+0x10/0x10
[  140.560310][ T8750]  __sock_sendmsg+0x142/0x180
[  140.560390][ T8750]  ____sys_sendmsg+0x31e/0x4e0
[  140.560412][ T8750]  ___sys_sendmsg+0x17b/0x1d0
[  140.560490][ T8750]  __x64_sys_sendmsg+0xd4/0x160
[  140.560514][ T8750]  x64_sys_call+0x191e/0x2ff0
[  140.560533][ T8750]  do_syscall_64+0xd2/0x200
[  140.560557][ T8750]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  140.560630][ T8750]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  140.560652][ T8750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.560672][ T8750] RIP: 0033:0x7ff06bc7ebe9
[  140.560685][ T8750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.560728][ T8750] RSP: 002b:00007ff06a6df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  140.560752][ T8750] RAX: ffffffffffffffda RBX: 00007ff06bea5fa0 RCX: 00007ff06bc7ebe9
[  140.560767][ T8750] RDX: 0000000004000024 RSI: 0000200000000040 RDI: 0000000000000003
[  140.560779][ T8750] RBP: 00007ff06a6df090 R08: 0000000000000000 R09: 0000000000000000
[  140.560791][ T8750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.560803][ T8750] R13: 00007ff06bea6038 R14: 00007ff06bea5fa0 R15: 00007ffeead86358
[  140.560827][ T8750]  </TASK>
[  140.812470][ T8756] loop5: detected capacity change from 0 to 128
[  140.820803][ T8756] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.878936][ T8761] netlink: 'syz.4.1616': attribute type 10 has an invalid length.
[  140.887320][ T8761] bridge0: port 3(netdevsim1) entered blocking state
[  140.894200][ T8761] bridge0: port 3(netdevsim1) entered disabled state
[  140.901366][ T8761] netdevsim netdevsim4 netdevsim1: entered allmulticast mode
[  140.909530][ T8761] netdevsim netdevsim4 netdevsim1: entered promiscuous mode
[  140.936335][ T8767] FAULT_INJECTION: forcing a failure.
[  140.936335][ T8767] name failslab, interval 1, probability 0, space 0, times 0
[  140.949110][ T8767] CPU: 0 UID: 0 PID: 8767 Comm: syz.4.1619 Tainted: G        W           6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) 
[  140.949202][ T8767] Tainted: [W]=WARN
[  140.949209][ T8767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  140.949266][ T8767] Call Trace:
[  140.949274][ T8767]  <TASK>
[  140.949282][ T8767]  __dump_stack+0x1d/0x30
[  140.949306][ T8767]  dump_stack_lvl+0xe8/0x140
[  140.949328][ T8767]  dump_stack+0x15/0x1b
[  140.949346][ T8767]  should_fail_ex+0x265/0x280
[  140.949370][ T8767]  should_failslab+0x8c/0xb0
[  140.949471][ T8767]  __kmalloc_noprof+0xa5/0x3e0
[  140.949573][ T8767]  ? io_cache_alloc_new+0x2a/0xb0
[  140.949618][ T8767]  io_cache_alloc_new+0x2a/0xb0
[  140.949713][ T8767]  io_send_zc_prep+0x30e/0x5d0
[  140.949745][ T8767]  io_submit_sqes+0x5db/0x1050
[  140.949774][ T8767]  __se_sys_io_uring_enter+0x1c1/0x1b70
[  140.949838][ T8767]  ? 0xffffffff81000000
[  140.949854][ T8767]  ? __rcu_read_unlock+0x4f/0x70
[  140.949881][ T8767]  ? get_pid_task+0x96/0xd0
[  140.949906][ T8767]  ? proc_fail_nth_write+0x13b/0x160
[  140.949935][ T8767]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  140.950041][ T8767]  ? vfs_write+0x7e8/0x960
[  140.950068][ T8767]  ? __rcu_read_unlock+0x4f/0x70
[  140.950095][ T8767]  ? __fget_files+0x184/0x1c0
[  140.950122][ T8767]  ? fput+0x8f/0xc0
[  140.950212][ T8767]  __x64_sys_io_uring_enter+0x78/0x90
[  140.950238][ T8767]  x64_sys_call+0x2de1/0x2ff0
[  140.950264][ T8767]  do_syscall_64+0xd2/0x200
[  140.950292][ T8767]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  140.950378][ T8767]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  140.950439][ T8767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.950463][ T8767] RIP: 0033:0x7f7f37d1ebe9
[  140.950479][ T8767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.950553][ T8767] RSP: 002b:00007f7f36787038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  140.950573][ T8767] RAX: ffffffffffffffda RBX: 00007f7f37f45fa0 RCX: 00007f7f37d1ebe9
[  140.950586][ T8767] RDX: 0000000000000004 RSI: 000000000000749f RDI: 0000000000000003
[  140.950599][ T8767] RBP: 00007f7f36787090 R08: 0000000000000000 R09: fffffffffffffef5
[  140.950612][ T8767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.950625][ T8767] R13: 00007f7f37f46038 R14: 00007f7f37f45fa0 R15: 00007ffe581d26f8
[  140.950646][ T8767]  </TASK>
[  141.219753][ T8769] loop2: detected capacity change from 0 to 2048
[  141.316627][ T3304] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  141.331866][ T3304] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  141.380638][ T8778] loop2: detected capacity change from 0 to 2048
[  141.441892][ T8782] cgroup: Invalid name
[  141.491695][ T8778]  loop2: unable to read partition table
[  141.505719][ T8778] loop2: partition table beyond EOD, truncated
[  141.511986][ T8778] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[  141.743730][ T8814] loop1: detected capacity change from 0 to 512
[  141.751186][ T8814] EXT4-fs: Ignoring removed nomblk_io_submit option
[  141.757967][ T8814] EXT4-fs: Ignoring removed nomblk_io_submit option
[  141.765398][ T8814] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  141.774794][ T8814] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  141.782859][ T8814] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  141.791929][ T8814] EXT4-fs (loop1): 1 truncate cleaned up
[  141.810513][ T8814] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  141.811729][ T8826] loop5: detected capacity change from 0 to 512
[  142.014262][ T8848] FAULT_INJECTION: forcing a failure.
[  142.014262][ T8848] name failslab, interval 1, probability 0, space 0, times 0
[  142.026977][ T8848] CPU: 0 UID: 0 PID: 8848 Comm: syz.1.1644 Tainted: G        W           6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) 
[  142.027077][ T8848] Tainted: [W]=WARN
[  142.027085][ T8848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  142.027165][ T8848] Call Trace:
[  142.027173][ T8848]  <TASK>
[  142.027180][ T8848]  __dump_stack+0x1d/0x30
[  142.027206][ T8848]  dump_stack_lvl+0xe8/0x140
[  142.027231][ T8848]  dump_stack+0x15/0x1b
[  142.027275][ T8848]  should_fail_ex+0x265/0x280
[  142.027304][ T8848]  should_failslab+0x8c/0xb0
[  142.027335][ T8848]  __kmalloc_noprof+0xa5/0x3e0
[  142.027382][ T8848]  ? nla_strdup+0x78/0xc0
[  142.027419][ T8848]  nla_strdup+0x78/0xc0
[  142.027450][ T8848]  nf_tables_newtable+0x3ba/0xea0
[  142.027485][ T8848]  nfnetlink_rcv+0xb96/0x1690
[  142.027654][ T8848]  netlink_unicast+0x5bd/0x690
[  142.027693][ T8848]  netlink_sendmsg+0x58b/0x6b0
[  142.027799][ T8848]  ? __pfx_netlink_sendmsg+0x10/0x10
[  142.027828][ T8848]  __sock_sendmsg+0x142/0x180
[  142.027866][ T8848]  ____sys_sendmsg+0x31e/0x4e0
[  142.027965][ T8848]  ___sys_sendmsg+0x17b/0x1d0
[  142.028011][ T8848]  __x64_sys_sendmsg+0xd4/0x160
[  142.028069][ T8848]  x64_sys_call+0x191e/0x2ff0
[  142.028097][ T8848]  do_syscall_64+0xd2/0x200
[  142.028147][ T8848]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  142.028215][ T8848]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  142.028247][ T8848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.028274][ T8848] RIP: 0033:0x7fc7734febe9
[  142.028293][ T8848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.028393][ T8848] RSP: 002b:00007fc771f67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  142.028417][ T8848] RAX: ffffffffffffffda RBX: 00007fc773725fa0 RCX: 00007fc7734febe9
[  142.028433][ T8848] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  142.028448][ T8848] RBP: 00007fc771f67090 R08: 0000000000000000 R09: 0000000000000000
[  142.028463][ T8848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  142.028478][ T8848] R13: 00007fc773726038 R14: 00007fc773725fa0 R15: 00007ffc242537c8
[  142.028502][ T8848]  </TASK>
[  142.268873][ T8853] loop0: detected capacity change from 0 to 512
[  142.303150][ T8859] loop4: detected capacity change from 0 to 512
[  142.319772][ T8853] ext4 filesystem being mounted at /296/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  142.330339][ T8856] cgroup: Invalid name
[  142.336882][ T8862] loop1: detected capacity change from 0 to 512
[  142.347121][ T8859] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  142.385185][ T8862] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1650: bg 0: block 248: padding at end of block bitmap is not set
[  142.434876][ T8862] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1650: Failed to acquire dquot type 1
[  142.472355][ T8862] EXT4-fs (loop1): 1 truncate cleaned up
[  142.492223][ T8862] ext4 filesystem being mounted at /382/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.513577][ T8883] __nla_validate_parse: 4 callbacks suppressed
[  142.513592][ T8883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1652'.
[  142.529092][ T8883] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1652'.
[  142.539465][ T8883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1652'.
[  142.549107][ T8883] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1652'.
[  142.579294][ T8862] syz.1.1650 (8862) used greatest stack depth: 9128 bytes left
[  142.665132][ T8889] syzkaller0: entered promiscuous mode
[  142.670721][ T8889] syzkaller0: entered allmulticast mode
[  142.686328][ T8898] cgroup: Invalid name
[  142.696978][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1656'.
[  142.859181][ T8901] can0: slcan on ttyS3.
[  142.859203][ T8924] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1661'.
[  142.875316][ T8924] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1661'.
[  142.940746][ T8929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1663'.
[  142.949805][ T8929] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1663'.
[  142.959524][ T8929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1663'.
[  143.006056][ T8901] can0 (unregistered): slcan off ttyS3.
[  143.036054][ T8935] loop1: detected capacity change from 0 to 1024
[  143.073224][ T8935] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  143.111613][ T8944] 0ªX¹¦D: renamed from gretap0
[  143.138230][ T8944] 0ªX¹¦D: entered allmulticast mode
[  143.151083][ T8944] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  143.194498][   T29] kauditd_printk_skb: 982 callbacks suppressed
[  143.194515][   T29] audit: type=1326 audit(1755397830.440:7215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8932 comm="syz.4.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f37d1ebe9 code=0x7ffc0000
[  143.224166][   T29] audit: type=1326 audit(1755397830.440:7216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8932 comm="syz.4.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f37d1ebe9 code=0x7ffc0000
[  143.264659][ T8950] loop5: detected capacity change from 0 to 2048
[  143.271521][   T29] audit: type=1326 audit(1755397830.520:7217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8932 comm="syz.4.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f37d1ebe9 code=0x7ffc0000
[  143.322875][ T8956] loop0: detected capacity change from 0 to 256
[  143.366815][ T8956] FAT-fs (loop0): Directory bread(block 1285) failed
[  143.381074][   T29] audit: type=1326 audit(1755397830.640:7218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8932 comm="syz.4.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f37d1ebe9 code=0x7ffc0000
[  143.404663][   T29] audit: type=1326 audit(1755397830.640:7219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8932 comm="syz.4.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f37d1ebe9 code=0x7ffc0000
[  143.416057][ T8956] FAT-fs (loop0): Directory bread(block 1285) failed
[  143.450945][ T8950] hub 6-0:1.0: USB hub found
[  143.462443][ T8950] hub 6-0:1.0: 8 ports detected
[  143.572355][   T29] audit: type=1400 audit(1755397830.830:7220): avc:  denied  { create } for  pid=8968 comm="syz.4.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  143.650694][ T8974] cgroup: Invalid name
[  143.720998][ T8984] loop4: detected capacity change from 0 to 512
[  143.736294][   T29] audit: type=1400 audit(1755397830.990:7221): avc:  denied  { unlink } for  pid=3304 comm="syz-executor" name="file0" dev="tmpfs" ino=1997 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  143.738759][ T8984] journal_path: Non-blockdev passed as './bus'
[  143.765322][ T8984] EXT4-fs: error: could not find journal device path
[  143.785607][ T8989] loop2: detected capacity change from 0 to 1024
[  143.795677][   T29] audit: type=1326 audit(1755397831.040:7222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.1.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7734febe9 code=0x7ffc0000
[  143.819182][   T29] audit: type=1326 audit(1755397831.040:7223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.1.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7734febe9 code=0x7ffc0000
[  143.842900][   T29] audit: type=1326 audit(1755397831.040:7224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.1.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc7734febe9 code=0x7ffc0000
[  143.970635][ T9004] loop4: detected capacity change from 0 to 512
[  144.013379][ T9004] ext4 filesystem being mounted at /313/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  144.055245][ T9013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.075607][ T9013] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.119356][ T9014] loop5: detected capacity change from 0 to 2048
[  144.155393][ T9022] 9pnet_fd: Insufficient options for proto=fd
[  144.185298][ T9014] hub 6-0:1.0: USB hub found
[  144.192972][ T9022] loop4: detected capacity change from 0 to 512
[  144.201983][ T9014] hub 6-0:1.0: 8 ports detected
[  144.208911][ T9022] journal_path: Non-blockdev passed as './bus'
[  144.215182][ T9022] EXT4-fs: error: could not find journal device path
[  144.318937][ T9033] FAULT_INJECTION: forcing a failure.
[  144.318937][ T9033] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  144.332754][ T9033] CPU: 0 UID: 0 PID: 9033 Comm: syz.5.1689 Tainted: G        W           6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) 
[  144.332792][ T9033] Tainted: [W]=WARN
[  144.332798][ T9033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  144.332811][ T9033] Call Trace:
[  144.332819][ T9033]  <TASK>
[  144.332869][ T9033]  __dump_stack+0x1d/0x30
[  144.332890][ T9033]  dump_stack_lvl+0xe8/0x140
[  144.332914][ T9033]  dump_stack+0x15/0x1b
[  144.332933][ T9033]  should_fail_ex+0x265/0x280
[  144.332954][ T9033]  should_fail+0xb/0x20
[  144.332986][ T9033]  should_fail_usercopy+0x1a/0x20
[  144.333013][ T9033]  _copy_to_user+0x20/0xa0
[  144.333050][ T9033]  simple_read_from_buffer+0xb5/0x130
[  144.333076][ T9033]  proc_fail_nth_read+0x10e/0x150
[  144.333119][ T9033]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  144.333148][ T9033]  vfs_read+0x1a5/0x770
[  144.333173][ T9033]  ? __cond_resched+0x4e/0x90
[  144.333194][ T9033]  ksys_read+0xda/0x1a0
[  144.333217][ T9033]  __x64_sys_read+0x40/0x50
[  144.333239][ T9033]  x64_sys_call+0x27bc/0x2ff0
[  144.333261][ T9033]  do_syscall_64+0xd2/0x200
[  144.333290][ T9033]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  144.333318][ T9033]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  144.333400][ T9033]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.333453][ T9033] RIP: 0033:0x7f59f401d5fc
[  144.333469][ T9033] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  144.333489][ T9033] RSP: 002b:00007f59f2a87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  144.333509][ T9033] RAX: ffffffffffffffda RBX: 00007f59f4245fa0 RCX: 00007f59f401d5fc
[  144.333522][ T9033] RDX: 000000000000000f RSI: 00007f59f2a870a0 RDI: 0000000000000005
[  144.333538][ T9033] RBP: 00007f59f2a87090 R08: 0000000000000000 R09: 0000000000000000
[  144.333551][ T9033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  144.333563][ T9033] R13: 00007f59f4246038 R14: 00007f59f4245fa0 R15: 00007ffcbba36678
[  144.333583][ T9033]  </TASK>
[  144.593593][ T9041] loop0: detected capacity change from 0 to 2048
[  144.615088][ T9046] loop5: detected capacity change from 0 to 512
[  144.625477][ T9046] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  144.641915][ T9046] EXT4-fs (loop5): mount failed
[  144.677720][ T9041]  loop0: unable to read partition table
[  144.683581][ T9041] loop0: partition table beyond EOD, truncated
[  144.689826][ T9041] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  144.792728][ T9059] loop0: detected capacity change from 0 to 2048
[  144.802208][ T9063] loop1: detected capacity change from 0 to 2048
[  144.825999][ T9070] FAULT_INJECTION: forcing a failure.
[  144.825999][ T9070] name failslab, interval 1, probability 0, space 0, times 0
[  144.838747][ T9070] CPU: 0 UID: 0 PID: 9070 Comm: syz.5.1704 Tainted: G        W           6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) 
[  144.838792][ T9070] Tainted: [W]=WARN
[  144.838798][ T9070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  144.838813][ T9070] Call Trace:
[  144.838821][ T9070]  <TASK>
[  144.838831][ T9070]  __dump_stack+0x1d/0x30
[  144.838858][ T9070]  dump_stack_lvl+0xe8/0x140
[  144.838883][ T9070]  dump_stack+0x15/0x1b
[  144.838903][ T9070]  should_fail_ex+0x265/0x280
[  144.838941][ T9070]  should_failslab+0x8c/0xb0
[  144.839018][ T9070]  kmem_cache_alloc_noprof+0x50/0x310
[  144.839054][ T9070]  ? __kernfs_new_node+0x6d/0x350
[  144.839158][ T9070]  __kernfs_new_node+0x6d/0x350
[  144.839192][ T9070]  ? __rcu_read_unlock+0x4f/0x70
[  144.839218][ T9070]  ? __rcu_read_unlock+0x4f/0x70
[  144.839244][ T9070]  ? __rcu_read_unlock+0x4f/0x70
[  144.839298][ T9070]  ? kernfs_next_descendant_post+0xd3/0x110
[  144.839331][ T9070]  kernfs_new_node+0xd0/0x140
[  144.839368][ T9070]  __kernfs_create_file+0x4b/0x180
[  144.839409][ T9070]  ? __pfx_rx_queue_attr_show+0x10/0x10
[  144.839509][ T9070]  ? __pfx_rx_queue_attr_store+0x10/0x10
[  144.839550][ T9070]  sysfs_add_file_mode_ns+0x132/0x1c0
[  144.839698][ T9070]  internal_create_group+0x441/0x9e0
[  144.839727][ T9070]  ? dev_ethtool+0x1577/0x1660
[  144.839753][ T9070]  ? sock_ioctl+0x41b/0x610
[  144.839781][ T9070]  ? __se_sys_ioctl+0xcb/0x140
[  144.839819][ T9070]  ? __x64_sys_ioctl+0x43/0x50
[  144.839937][ T9070]  sysfs_create_groups+0x3f/0xf0
[  144.839963][ T9070]  net_rx_queue_update_kobjects+0x1ce/0x540
[  144.840021][ T9070]  netif_set_real_num_rx_queues+0x163/0x1e0
[  144.840103][ T9070]  veth_set_channels+0x239/0x8c0
[  144.840184][ T9070]  ? should_fail_ex+0xdb/0x280
[  144.840211][ T9070]  ethtool_set_channels+0x38a/0x3e0
[  144.840319][ T9070]  dev_ethtool+0x1577/0x1660
[  144.840346][ T9070]  ? full_name_hash+0x92/0xe0
[  144.840383][ T9070]  dev_ioctl+0x2e0/0x960
[  144.840469][ T9070]  sock_do_ioctl+0x197/0x220
[  144.840501][ T9070]  sock_ioctl+0x41b/0x610
[  144.840531][ T9070]  ? __pfx_sock_ioctl+0x10/0x10
[  144.840563][ T9070]  __se_sys_ioctl+0xcb/0x140
[  144.840606][ T9070]  __x64_sys_ioctl+0x43/0x50
[  144.840650][ T9070]  x64_sys_call+0x1816/0x2ff0
[  144.840712][ T9070]  do_syscall_64+0xd2/0x200
[  144.840799][ T9070]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  144.840830][ T9070]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  144.840862][ T9070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.840890][ T9070] RIP: 0033:0x7f59f401ebe9
[  144.840948][ T9070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.840966][ T9070] RSP: 002b:00007f59f2a87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  144.841055][ T9070] RAX: ffffffffffffffda RBX: 00007f59f4245fa0 RCX: 00007f59f401ebe9
[  144.841071][ T9070] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000009
[  144.841087][ T9070] RBP: 00007f59f2a87090 R08: 0000000000000000 R09: 0000000000000000
[  144.841103][ T9070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  144.841115][ T9070] R13: 00007f59f4246038 R14: 00007f59f4245fa0 R15: 00007ffcbba36678
[  144.841136][ T9070]  </TASK>
[  144.857360][ T9059] hub 6-0:1.0: USB hub found
[  144.976401][ T9063]  loop1: unable to read partition table
[  144.979173][ T9059] hub 6-0:1.0: 8 ports detected
[  144.993032][ T9063] loop1: partition table beyond EOD, 
[  145.068676][ T9077] loop2: detected capacity change from 0 to 128
[  145.072811][ T9063] truncated
[  145.072820][ T9063] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
[  145.089408][ T9065] lo speed is unknown, defaulting to 1000
[  145.145024][ T9078] loop5: detected capacity change from 0 to 128
[  145.166110][ T9065] lo speed is unknown, defaulting to 1000
[  145.172831][ T9077] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.256602][ T9078] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.336671][ T9090] ==================================================================
[  145.344807][ T9090] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter
[  145.352218][ T9090] 
[  145.354563][ T9090] write to 0xffff88811c10a000 of 4096 bytes by task 9089 on cpu 0:
[  145.362458][ T9090]  _copy_from_iter+0x130/0xe40
[  145.367237][ T9090]  copy_page_from_iter+0x178/0x2a0
[  145.372364][ T9090]  process_vm_rw+0x659/0x960
[  145.376970][ T9090]  __x64_sys_process_vm_writev+0x78/0x90
[  145.382703][ T9090]  x64_sys_call+0x2a7c/0x2ff0
[  145.387384][ T9090]  do_syscall_64+0xd2/0x200
[  145.391905][ T9090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.397802][ T9090] 
[  145.400123][ T9090] write to 0xffff88811c10a000 of 4096 bytes by task 9090 on cpu 1:
[  145.408039][ T9090]  _copy_from_iter+0x130/0xe40
[  145.412909][ T9090]  copy_page_from_iter+0x178/0x2a0
[  145.418032][ T9090]  process_vm_rw+0x659/0x960
[  145.422646][ T9090]  __x64_sys_process_vm_writev+0x78/0x90
[  145.428292][ T9090]  x64_sys_call+0x2a7c/0x2ff0
[  145.432981][ T9090]  do_syscall_64+0xd2/0x200
[  145.437500][ T9090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.443401][ T9090] 
[  145.445729][ T9090] Reported by Kernel Concurrency Sanitizer on:
[  145.451885][ T9090] CPU: 1 UID: 0 PID: 9090 Comm: syz.1.1711 Tainted: G        W           6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) 
[  145.465871][ T9090] Tainted: [W]=WARN
[  145.469677][ T9090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  145.479738][ T9090] ==================================================================