last executing test programs:

27.992462591s ago: executing program 3 (id=1282):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf0500050012fe", 0x2e}], 0x1}, 0x48000)

27.887774373s ago: executing program 3 (id=1287):
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb89080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd80003742f1a2222f19935e6996c7096fb7e40300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
pselect6(0x40, &(0x7f00000001c0)={0xfe, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

27.408775422s ago: executing program 3 (id=1294):
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)

27.337795114s ago: executing program 3 (id=1295):
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46b, &(0x7f0000000740)="$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")
r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r3 = dup(r2)
recvmmsg$unix(r3, &(0x7f0000000200)=[{{0x0, 0x3044312bf0e0a8eb, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/207}], 0x0, &(0x7f00000007c0)=[@rights, @cred, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}], 0x1, 0x22, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2})
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18)
r7 = socket(0x10, 0x3, 0x0)
timer_create(0x0, 0x0, &(0x7f0000044000)=<r8=>0x0)
timer_gettime(r8, &(0x7f0000000040))
timer_gettime(r8, &(0x7f0000000100))
connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000040)={&(0x7f0000000180)=""/120, 0x78})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0))

26.980830831s ago: executing program 3 (id=1302):
r0 = socket$kcm(0x10, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x40, &(0x7f0000000080), 0xc1, 0x7c0, &(0x7f0000000f80)="$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")
mkdir(&(0x7f0000000000)='./control\x00', 0x81)
r1 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x48000)

26.404835342s ago: executing program 3 (id=1310):
unshare(0x20060400)
epoll_create1(0x80000)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

26.323363144s ago: executing program 32 (id=1310):
unshare(0x20060400)
epoll_create1(0x80000)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

2.03792261s ago: executing program 5 (id=1902):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0)

1.98570132s ago: executing program 5 (id=1903):
prlimit64(0x0, 0xa, &(0x7f0000000340)={0x7fffffffffffffff, 0x88}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
socket$inet6(0xa, 0x802, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000040))
close_range(r1, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
mkdir(&(0x7f0000000580)='./file0\x00', 0x92)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:policy_config_t:s0\x00', 0x25, 0x0)

1.624764068s ago: executing program 1 (id=1908):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x4000, &(0x7f0000000300)={[{@resuid}, {@dioread_nolock}, {@noblock_validity}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32)

1.593729488s ago: executing program 1 (id=1910):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e25, 0x0, @remote, 0x7}, 0x1c)
write(r0, &(0x7f0000000200)="89", 0xffe3)

1.571300349s ago: executing program 1 (id=1912):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0x1000000000000}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x0, 0x0, 0x0, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x40}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x1, 0x0, 0x0, 0x401}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x1d4ce113}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {0x2}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x400000}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}], [{}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x6}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x721119ea02b29831}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x4000)

1.559100169s ago: executing program 1 (id=1914):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x10)
r1 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e2", 0xc7}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

1.457187221s ago: executing program 2 (id=1917):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe56, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f00000002c0)='./file1\x00', 0x1a0cc8a, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRESDEC, @ANYRESDEC, @ANYRES8=r1, @ANYRES32], 0x43, 0xa02, &(0x7f0000003640)="$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")
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) (async)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001e40)=@newtaction={0x18, 0x58, 0x284f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x4c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x0)

1.205666636s ago: executing program 2 (id=1918):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x10)
r1 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30", 0x6e}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

1.148597007s ago: executing program 5 (id=1919):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf3", 0xb2}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

948.774741ms ago: executing program 4 (id=1920):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), &(0x7f0000000640)=r2}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004801}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="54000000090603000000000000000000070000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070588000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
syz_open_dev$loop(&(0x7f0000000000), 0xf2d, 0x4000)
socket$nl_rdma(0x10, 0x3, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r6 = dup(r5)
fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0)

925.410702ms ago: executing program 4 (id=1921):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000340)={0x9, 0xf})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x4c, r1, 0xcd3a991b146a25f, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x20, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008804}, 0xa4)

911.924812ms ago: executing program 4 (id=1922):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', r2, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1d0b19e2, <r3=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000006000000000000f183850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000060900010073797a310000000014000480100001800c000100636f756e746572000900020073797a320000000005000740f200000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)
close_range(r4, 0xffffffffffffffff, 0x0)

886.237372ms ago: executing program 4 (id=1923):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', r2, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1d0b19e2, <r3=>0x0}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r5=>0xffffffffffffffff})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000006000000000000f183850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000060900010073797a310000000014000480100001800c000100636f756e746572000900020073797a320000000005000740f200000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r7, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)
close_range(r5, 0xffffffffffffffff, 0x0)

861.333482ms ago: executing program 4 (id=1924):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x10)
r1 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7", 0xa5}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

711.278386ms ago: executing program 1 (id=1925):
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4)
close(r1)

699.242686ms ago: executing program 1 (id=1926):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x10)
r1 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783", 0xc1}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

656.559377ms ago: executing program 0 (id=1929):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)

626.103357ms ago: executing program 0 (id=1930):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xa, &(0x7f0000000180)=@raw=[@map_idx={0x18, 0x8, 0x5, 0x0, 0xd}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @ringbuf_query, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x61, &(0x7f0000000340)=""/97, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xc, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r0, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x10001}, 0x94)
pipe2$watch_queue(&(0x7f0000000580)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x851)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xffffffffffffff03, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
statx(r2, &(0x7f00000005c0)='./file1\x00', 0x1000, 0x800, &(0x7f0000000680))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
chown(&(0x7f0000000240)='./file1\x00', 0xee00, 0x0)

565.709958ms ago: executing program 0 (id=1931):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11)
setfsuid(0xee00)

484.2946ms ago: executing program 0 (id=1932):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b0000000500000000040000090000"], 0x48)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', r3, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1d0b19e2, <r4=>0x0}, 0x8)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r6=>0xffffffffffffffff})
r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x0)
fchdir(r8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000006000000000000f183850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r8}, 0x94)
open(&(0x7f00000003c0)='.\x00', 0x800, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)
close_range(r6, 0xffffffffffffffff, 0x0)

460.842481ms ago: executing program 0 (id=1933):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18)
ppoll(&(0x7f0000000100)=[{r0, 0x1004}], 0x1, 0x0, 0x0, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14)
close(r0)

398.190282ms ago: executing program 2 (id=1934):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', r2, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1d0b19e2, <r3=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000006000000000000f183850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000060900010073797a310000000014000480100001800c000100636f756e746572000900020073797a320000000005000740f200000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)
close_range(r4, 0xffffffffffffffff, 0x0)

374.123632ms ago: executing program 2 (id=1935):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvmmsg(r0, &(0x7f0000005c80), 0x400030f, 0x0, 0x0)
listen(r0, 0xd3)
sendmsg$inet(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xf3b04ff45d9e12fb)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

363.308983ms ago: executing program 0 (id=1936):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x10)
r1 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e2", 0xc7}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

294.221164ms ago: executing program 5 (id=1937):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), &(0x7f0000000640)=r2}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004801}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="54000000090603000000000000000000070000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070588000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
syz_open_dev$loop(&(0x7f0000000000), 0xf2d, 0x4000)
socket$nl_rdma(0x10, 0x3, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = dup(r5)
fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0)

239.738155ms ago: executing program 5 (id=1938):
r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x80})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x121030, r0, 0x10000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") (fail_nth: 10)

193.763896ms ago: executing program 2 (id=1939):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00'})
sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1a, 0x0, 0x0, 0x0)

27.668779ms ago: executing program 2 (id=1940):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5d9, &(0x7f0000000a40)="$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")
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf250b"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x844)

27.313249ms ago: executing program 5 (id=1941):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
setfsuid(0xee00)

0s ago: executing program 4 (id=1942):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11)
setfsuid(0xee00)

kernel console output (not intermixed with test programs):

 T6642]  __dump_stack+0x1d/0x30
[   90.643063][ T6642]  dump_stack_lvl+0xe8/0x140
[   90.643111][ T6642]  dump_stack+0x15/0x1b
[   90.643185][ T6642]  should_fail_ex+0x265/0x280
[   90.643210][ T6642]  should_failslab+0x8c/0xb0
[   90.643234][ T6642]  __kmalloc_noprof+0xa5/0x3e0
[   90.643286][ T6642]  ? security_sk_alloc+0x52/0x120
[   90.643367][ T6642]  security_sk_alloc+0x52/0x120
[   90.643396][ T6642]  sk_prot_alloc+0xc2/0x190
[   90.643485][ T6642]  sk_alloc+0x34/0x360
[   90.643506][ T6642]  bpf_prog_test_run_skb+0x234/0xbd0
[   90.643527][ T6642]  ? __rcu_read_unlock+0x4f/0x70
[   90.643544][ T6642]  ? __fget_files+0x184/0x1c0
[   90.643611][ T6642]  ? __rcu_read_unlock+0x4f/0x70
[   90.643641][ T6642]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[   90.643709][ T6642]  bpf_prog_test_run+0x227/0x390
[   90.643795][ T6642]  __sys_bpf+0x4b9/0x7b0
[   90.643851][ T6642]  __x64_sys_bpf+0x41/0x50
[   90.643870][ T6642]  x64_sys_call+0x2aea/0x2ff0
[   90.643887][ T6642]  do_syscall_64+0xd2/0x200
[   90.643913][ T6642]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   90.643958][ T6642]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   90.643980][ T6642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.643997][ T6642] RIP: 0033:0x7f0cd748eec9
[   90.644010][ T6642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.644034][ T6642] RSP: 002b:00007f0cd5eef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   90.644071][ T6642] RAX: ffffffffffffffda RBX: 00007f0cd76e5fa0 RCX: 00007f0cd748eec9
[   90.644082][ T6642] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a
[   90.644092][ T6642] RBP: 00007f0cd5eef090 R08: 0000000000000000 R09: 0000000000000000
[   90.644105][ T6642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   90.644117][ T6642] R13: 00007f0cd76e6038 R14: 00007f0cd76e5fa0 R15: 00007fff48fe5f78
[   90.644136][ T6642]  </TASK>
[   90.937918][ T6646] bridge_slave_0: left allmulticast mode
[   90.943682][ T6646] bridge_slave_0: left promiscuous mode
[   90.949384][ T6646] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.958987][ T6646] bridge_slave_1: left allmulticast mode
[   90.964773][ T6646] bridge_slave_1: left promiscuous mode
[   90.970468][ T6646] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.981331][ T6646] bond0: (slave bond_slave_0): Releasing backup interface
[   90.990903][ T6646] bond0: (slave bond_slave_1): Releasing backup interface
[   91.002884][ T6646] team0: Port device team_slave_0 removed
[   91.032999][ T6647] netlink: 'syz.1.1172': attribute type 10 has an invalid length.
[   91.041122][ T6647] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1172'.
[   91.065370][ T6646] team0: Port device team_slave_1 removed
[   91.080533][ T6646] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.087998][ T6646] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.097259][ T6653] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6653 comm=syz.3.1175
[   91.109974][ T6653] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=6653 comm=syz.3.1175
[   91.126293][ T6646] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.133814][ T6646] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.155381][ T6647] batman_adv: batadv0: Adding interface: veth1_vlan
[   91.162196][ T6647] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.190038][ T6647] batman_adv: batadv0: Interface activated: veth1_vlan
[   91.406365][ T6694] loop2: detected capacity change from 0 to 512
[   91.463462][ T6694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.476246][ T6694] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.504283][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.585070][ T6724] SELinux: failed to load policy
[   91.598834][ T6724] loop2: detected capacity change from 0 to 512
[   91.613744][ T6724] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   91.621845][ T6724] EXT4-fs (loop2): orphan cleanup on readonly fs
[   91.629562][ T6724] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1190: corrupted inode contents
[   91.642126][ T6724] EXT4-fs (loop2): Remounting filesystem read-only
[   91.648688][ T6724] EXT4-fs (loop2): 1 truncate cleaned up
[   91.654785][   T51] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   91.665435][   T51] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   91.677997][   T51] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[   91.688906][ T6724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   91.725212][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.771642][ T6752] FAULT_INJECTION: forcing a failure.
[   91.771642][ T6752] name failslab, interval 1, probability 0, space 0, times 0
[   91.784317][ T6752] CPU: 0 UID: 0 PID: 6752 Comm: syz.0.1194 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   91.784351][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   91.784362][ T6752] Call Trace:
[   91.784367][ T6752]  <TASK>
[   91.784373][ T6752]  __dump_stack+0x1d/0x30
[   91.784395][ T6752]  dump_stack_lvl+0xe8/0x140
[   91.784414][ T6752]  dump_stack+0x15/0x1b
[   91.784444][ T6752]  should_fail_ex+0x265/0x280
[   91.784463][ T6752]  should_failslab+0x8c/0xb0
[   91.784629][ T6752]  kmem_cache_alloc_noprof+0x50/0x310
[   91.784657][ T6752]  ? getname_flags+0x80/0x3b0
[   91.784685][ T6752]  getname_flags+0x80/0x3b0
[   91.784717][ T6752]  getname_uflags+0x21/0x30
[   91.784743][ T6752]  __x64_sys_execveat+0x5d/0x90
[   91.784808][ T6752]  x64_sys_call+0x1fec/0x2ff0
[   91.784826][ T6752]  do_syscall_64+0xd2/0x200
[   91.784856][ T6752]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   91.784880][ T6752]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   91.784913][ T6752]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.784934][ T6752] RIP: 0033:0x7f0bce5beec9
[   91.784948][ T6752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   91.784962][ T6752] RSP: 002b:00007f0bcd027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[   91.784979][ T6752] RAX: ffffffffffffffda RBX: 00007f0bce815fa0 RCX: 00007f0bce5beec9
[   91.784990][ T6752] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[   91.785012][ T6752] RBP: 00007f0bcd027090 R08: 0000000000001000 R09: 0000000000000000
[   91.785025][ T6752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.785038][ T6752] R13: 00007f0bce816038 R14: 00007f0bce815fa0 R15: 00007ffded5a7048
[   91.785056][ T6752]  </TASK>
[   92.051620][ T6778] loop2: detected capacity change from 0 to 1024
[   92.058489][ T6778] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   92.067378][ T6778] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   92.089892][ T6778] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[   92.101712][ T6778] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1201: Freeing blocks not in datazone - block = 0, count = 4096
[   92.115653][ T6778] EXT4-fs (loop2): Remounting filesystem read-only
[   92.122295][ T6778] EXT4-fs (loop2): 1 orphan inode deleted
[   92.128690][ T6778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.141230][   T51] EXT4-fs (loop2): Quota write (off=3072, len=1024) cancelled because transaction is not started
[   92.154226][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.171110][ T6799] FAULT_INJECTION: forcing a failure.
[   92.171110][ T6799] name failslab, interval 1, probability 0, space 0, times 0
[   92.183817][ T6799] CPU: 0 UID: 0 PID: 6799 Comm: syz.2.1202 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   92.183842][ T6799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   92.183923][ T6799] Call Trace:
[   92.183930][ T6799]  <TASK>
[   92.183938][ T6799]  __dump_stack+0x1d/0x30
[   92.183960][ T6799]  dump_stack_lvl+0xe8/0x140
[   92.183979][ T6799]  dump_stack+0x15/0x1b
[   92.184013][ T6799]  should_fail_ex+0x265/0x280
[   92.184032][ T6799]  ? __se_sys_memfd_create+0x1cc/0x590
[   92.184116][ T6799]  should_failslab+0x8c/0xb0
[   92.184139][ T6799]  __kmalloc_cache_noprof+0x4c/0x320
[   92.184165][ T6799]  ? fput+0x8f/0xc0
[   92.184193][ T6799]  __se_sys_memfd_create+0x1cc/0x590
[   92.184294][ T6799]  __x64_sys_memfd_create+0x31/0x40
[   92.184377][ T6799]  x64_sys_call+0x2abe/0x2ff0
[   92.184457][ T6799]  do_syscall_64+0xd2/0x200
[   92.184532][ T6799]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   92.184626][ T6799]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   92.184661][ T6799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.184682][ T6799] RIP: 0033:0x7ff37e77eec9
[   92.184698][ T6799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.184714][ T6799] RSP: 002b:00007ff37d1e6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   92.184734][ T6799] RAX: ffffffffffffffda RBX: 00000000000005fc RCX: 00007ff37e77eec9
[   92.184747][ T6799] RDX: 00007ff37d1e6ef0 RSI: 0000000000000000 RDI: 00007ff37e802960
[   92.184796][ T6799] RBP: 0000200000000600 R08: 00007ff37d1e6bb7 R09: 00007ff37d1e6e40
[   92.184809][ T6799] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040
[   92.184821][ T6799] R13: 00007ff37d1e6ef0 R14: 00007ff37d1e6eb0 R15: 0000200000000440
[   92.184906][ T6799]  </TASK>
[   92.391463][ T6804] netlink: 'syz.1.1204': attribute type 13 has an invalid length.
[   92.400607][ T6802] loop2: detected capacity change from 0 to 512
[   92.407466][ T6802] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   92.442250][ T6802] EXT4-fs (loop2): 1 truncate cleaned up
[   92.448406][ T6802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.467139][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1206'.
[   92.543847][ T6804] batman_adv: batadv0: Interface deactivated: veth1_vlan
[   92.580010][ T6802] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1203'.
[   92.595610][ T6826] can0: slcan on ttyS3.
[   92.608799][   T57] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.628403][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.644208][   T31] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.654354][   T31] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.676582][   T31] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.709515][ T6824] can0 (unregistered): slcan off ttyS3.
[   92.756695][ T6870] loop2: detected capacity change from 0 to 512
[   92.771126][ T6870] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   92.779415][ T6870] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1216: invalid indirect mapped block 8 (level 2)
[   92.793052][ T6870] EXT4-fs (loop2): Remounting filesystem read-only
[   92.799834][ T6870] EXT4-fs (loop2): 1 truncate cleaned up
[   92.805843][ T6877] loop4: detected capacity change from 0 to 1024
[   92.813028][ T6870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.822463][ T6877] ext4: Unknown parameter 'uid<00000000000000000000'
[   92.853041][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.904099][ T6877] FAULT_INJECTION: forcing a failure.
[   92.904099][ T6877] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   92.917206][ T6877] CPU: 0 UID: 0 PID: 6877 Comm: syz.4.1217 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   92.917230][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   92.917240][ T6877] Call Trace:
[   92.917246][ T6877]  <TASK>
[   92.917251][ T6877]  __dump_stack+0x1d/0x30
[   92.917269][ T6877]  dump_stack_lvl+0xe8/0x140
[   92.917357][ T6877]  dump_stack+0x15/0x1b
[   92.917370][ T6877]  should_fail_ex+0x265/0x280
[   92.917405][ T6877]  should_fail+0xb/0x20
[   92.917491][ T6877]  should_fail_usercopy+0x1a/0x20
[   92.917511][ T6877]  _copy_from_iter+0xd2/0xe80
[   92.917533][ T6877]  ? __build_skb_around+0x1a0/0x200
[   92.917595][ T6877]  ? __alloc_skb+0x223/0x320
[   92.917613][ T6877]  netlink_sendmsg+0x471/0x6b0
[   92.917636][ T6877]  ? __pfx_netlink_sendmsg+0x10/0x10
[   92.917656][ T6877]  __sock_sendmsg+0x142/0x180
[   92.917714][ T6877]  ____sys_sendmsg+0x31e/0x4e0
[   92.917736][ T6877]  ___sys_sendmsg+0x17b/0x1d0
[   92.917837][ T6877]  __x64_sys_sendmsg+0xd4/0x160
[   92.917860][ T6877]  x64_sys_call+0x191e/0x2ff0
[   92.917922][ T6877]  do_syscall_64+0xd2/0x200
[   92.917946][ T6877]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   92.918017][ T6877]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   92.918040][ T6877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.918114][ T6877] RIP: 0033:0x7f4c046beec9
[   92.918195][ T6877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.918209][ T6877] RSP: 002b:00007f4c02fdb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   92.918262][ T6877] RAX: ffffffffffffffda RBX: 00007f4c04916090 RCX: 00007f4c046beec9
[   92.918272][ T6877] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000009
[   92.918282][ T6877] RBP: 00007f4c02fdb090 R08: 0000000000000000 R09: 0000000000000000
[   92.918293][ T6877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   92.918303][ T6877] R13: 00007f4c04916128 R14: 00007f4c04916090 R15: 00007ffe297c8888
[   92.918393][ T6877]  </TASK>
[   92.922835][ T6867] lo speed is unknown, defaulting to 1000
[   92.964812][ T6891] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1220'.
[   93.001829][ T6895] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1218'.
[   93.176742][ T6901] loop4: detected capacity change from 0 to 1024
[   93.186406][ T6901] ext4: Unknown parameter 'uid<00000000000000000000'
[   93.238439][ T6901] lo speed is unknown, defaulting to 1000
[   93.296819][ T6938] loop4: detected capacity change from 0 to 512
[   93.308351][ T6938] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   93.317846][ T6938] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1229: invalid indirect mapped block 8 (level 2)
[   93.331270][ T6938] EXT4-fs (loop4): Remounting filesystem read-only
[   93.337978][ T6938] EXT4-fs (loop4): 1 truncate cleaned up
[   93.343967][ T6938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.357358][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'.
[   93.385275][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.521986][ T6960] loop4: detected capacity change from 0 to 512
[   93.530439][ T6960] EXT4-fs (loop4): orphan cleanup on readonly fs
[   93.537049][ T6960] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1238: bad orphan inode 13
[   93.548365][ T6960] ext4_test_bit(bit=12, block=18) = 1
[   93.553891][ T6960] is_bad_inode(inode)=0
[   93.558046][ T6960] NEXT_ORPHAN(inode)=2130706432
[   93.562931][ T6960] max_ino=32
[   93.566113][ T6960] i_nlink=1
[   93.570798][ T6960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   93.606782][ T6965] FAULT_INJECTION: forcing a failure.
[   93.606782][ T6965] name failslab, interval 1, probability 0, space 0, times 0
[   93.619562][ T6965] CPU: 0 UID: 0 PID: 6965 Comm: syz.1.1240 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   93.619589][ T6965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   93.619613][ T6965] Call Trace:
[   93.619619][ T6965]  <TASK>
[   93.619626][ T6965]  __dump_stack+0x1d/0x30
[   93.619647][ T6965]  dump_stack_lvl+0xe8/0x140
[   93.619664][ T6965]  dump_stack+0x15/0x1b
[   93.619679][ T6965]  should_fail_ex+0x265/0x280
[   93.619698][ T6965]  ? resv_map_alloc+0x32/0x190
[   93.619725][ T6965]  should_failslab+0x8c/0xb0
[   93.619764][ T6965]  __kmalloc_cache_noprof+0x4c/0x320
[   93.619780][ T6965]  ? vfs_write+0x7e8/0x960
[   93.619792][ T6965]  resv_map_alloc+0x32/0x190
[   93.619863][ T6965]  hugetlbfs_get_inode+0x67/0x370
[   93.619931][ T6965]  hugetlb_file_setup+0x192/0x3d0
[   93.619944][ T6965]  ksys_mmap_pgoff+0x157/0x310
[   93.620007][ T6965]  x64_sys_call+0x14a3/0x2ff0
[   93.620037][ T6965]  do_syscall_64+0xd2/0x200
[   93.620054][ T6965]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   93.620067][ T6965]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   93.620163][ T6965]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.620204][ T6965] RIP: 0033:0x7f0cd748eec9
[   93.620216][ T6965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.620225][ T6965] RSP: 002b:00007f0cd5eef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   93.620237][ T6965] RAX: ffffffffffffffda RBX: 00007f0cd76e5fa0 RCX: 00007f0cd748eec9
[   93.620244][ T6965] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000200000000000
[   93.620251][ T6965] RBP: 00007f0cd5eef090 R08: ffffffffffffffff R09: 0000000000000000
[   93.620257][ T6965] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001
[   93.620292][ T6965] R13: 00007f0cd76e6038 R14: 00007f0cd76e5fa0 R15: 00007fff48fe5f78
[   93.620302][ T6965]  </TASK>
[   93.620635][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.825798][ T6966] loop2: detected capacity change from 0 to 512
[   93.825801][   T29] kauditd_printk_skb: 107 callbacks suppressed
[   93.825815][   T29] audit: type=1326 audit(1758816943.319:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.4.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c046beec9 code=0x7ffc0000
[   93.835032][ T6970] loop3: detected capacity change from 0 to 512
[   93.862920][   T29] audit: type=1326 audit(1758816943.359:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.4.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c046beec9 code=0x7ffc0000
[   93.892479][   T29] audit: type=1326 audit(1758816943.389:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.4.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c046beec9 code=0x7ffc0000
[   93.916052][   T29] audit: type=1326 audit(1758816943.389:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.4.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c046beec9 code=0x7ffc0000
[   93.938108][ T6970] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   93.939495][   T29] audit: type=1326 audit(1758816943.389:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.4.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c046beec9 code=0x7ffc0000
[   93.952797][ T6966] EXT4-fs (loop2): too many log groups per flexible block group
[   93.972598][   T29] audit: type=1326 audit(1758816943.389:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.4.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c046beec9 code=0x7ffc0000
[   93.980299][ T6966] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   94.003582][   T29] audit: type=1326 audit(1758816943.389:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.4.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c046beec9 code=0x7ffc0000
[   94.010461][ T6966] EXT4-fs (loop2): mount failed
[   94.033781][   T29] audit: type=1326 audit(1758816943.389:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.4.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c046beec9 code=0x7ffc0000
[   94.061969][   T29] audit: type=1326 audit(1758816943.389:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.4.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f4c046beec9 code=0x7ffc0000
[   94.087151][   T29] audit: type=1326 audit(1758816943.389:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.4.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c046beec9 code=0x7ffc0000
[   94.118161][ T6970] EXT4-fs (loop3): 1 truncate cleaned up
[   94.124566][ T6970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.170825][ T6983] FAULT_INJECTION: forcing a failure.
[   94.170825][ T6983] name failslab, interval 1, probability 0, space 0, times 0
[   94.184019][ T6983] CPU: 0 UID: 0 PID: 6983 Comm: syz.4.1247 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   94.184046][ T6983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   94.184059][ T6983] Call Trace:
[   94.184134][ T6983]  <TASK>
[   94.184141][ T6983]  __dump_stack+0x1d/0x30
[   94.184162][ T6983]  dump_stack_lvl+0xe8/0x140
[   94.184181][ T6983]  dump_stack+0x15/0x1b
[   94.184223][ T6983]  should_fail_ex+0x265/0x280
[   94.184291][ T6983]  should_failslab+0x8c/0xb0
[   94.184305][ T6983]  __kmalloc_noprof+0xa5/0x3e0
[   94.184328][ T6983]  ? security_prepare_creds+0x52/0x120
[   94.184341][ T6983]  security_prepare_creds+0x52/0x120
[   94.184352][ T6983]  prepare_creds+0x34a/0x4c0
[   94.184365][ T6983]  selinux_lsm_setattr+0x1a4/0x660
[   94.184379][ T6983]  selinux_setprocattr+0x4f/0x70
[   94.184471][ T6983]  security_setprocattr+0x1a4/0x1d0
[   94.184486][ T6983]  proc_pid_attr_write+0x1eb/0x220
[   94.184543][ T6983]  vfs_writev+0x403/0x8b0
[   94.184558][ T6983]  ? __pfx_proc_pid_attr_write+0x10/0x10
[   94.184575][ T6983]  ? mutex_lock+0xd/0x30
[   94.184646][ T6983]  do_writev+0xe7/0x210
[   94.184662][ T6983]  __x64_sys_writev+0x45/0x50
[   94.184738][ T6983]  x64_sys_call+0x1e9a/0x2ff0
[   94.184750][ T6983]  do_syscall_64+0xd2/0x200
[   94.184787][ T6983]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   94.184800][ T6983]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   94.184843][ T6983]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.184920][ T6983] RIP: 0033:0x7f4c046beec9
[   94.184929][ T6983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.184939][ T6983] RSP: 002b:00007f4c0311f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[   94.185021][ T6983] RAX: ffffffffffffffda RBX: 00007f4c04915fa0 RCX: 00007f4c046beec9
[   94.185029][ T6983] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000006
[   94.185049][ T6983] RBP: 00007f4c0311f090 R08: 0000000000000000 R09: 0000000000000000
[   94.185055][ T6983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   94.185097][ T6983] R13: 00007f4c04916038 R14: 00007f4c04915fa0 R15: 00007ffe297c8888
[   94.185108][ T6983]  </TASK>
[   94.406637][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.528105][ T7010] __nla_validate_parse: 2 callbacks suppressed
[   94.528121][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'.
[   94.538746][ T7008] loop3: detected capacity change from 0 to 2048
[   94.631491][ T7008]  loop3: p1 < > p4
[   94.636120][ T7008] loop3: p4 size 8388608 extends beyond EOD, truncated
[   94.705375][ T7018] FAULT_INJECTION: forcing a failure.
[   94.705375][ T7018] name failslab, interval 1, probability 0, space 0, times 0
[   94.718052][ T7018] CPU: 0 UID: 0 PID: 7018 Comm: syz.3.1261 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   94.718080][ T7018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   94.718092][ T7018] Call Trace:
[   94.718099][ T7018]  <TASK>
[   94.718107][ T7018]  __dump_stack+0x1d/0x30
[   94.718182][ T7018]  dump_stack_lvl+0xe8/0x140
[   94.718201][ T7018]  dump_stack+0x15/0x1b
[   94.718218][ T7018]  should_fail_ex+0x265/0x280
[   94.718242][ T7018]  should_failslab+0x8c/0xb0
[   94.718267][ T7018]  kmem_cache_alloc_node_noprof+0x57/0x320
[   94.718324][ T7018]  ? __alloc_skb+0x101/0x320
[   94.718352][ T7018]  __alloc_skb+0x101/0x320
[   94.718446][ T7018]  netlink_alloc_large_skb+0xba/0xf0
[   94.718470][ T7018]  netlink_sendmsg+0x3cf/0x6b0
[   94.718542][ T7018]  ? __pfx_netlink_sendmsg+0x10/0x10
[   94.718567][ T7018]  __sock_sendmsg+0x142/0x180
[   94.718598][ T7018]  ____sys_sendmsg+0x31e/0x4e0
[   94.718624][ T7018]  ___sys_sendmsg+0x17b/0x1d0
[   94.718696][ T7018]  __x64_sys_sendmsg+0xd4/0x160
[   94.718725][ T7018]  x64_sys_call+0x191e/0x2ff0
[   94.718787][ T7018]  do_syscall_64+0xd2/0x200
[   94.718817][ T7018]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   94.718846][ T7018]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.718947][ T7018] RIP: 0033:0x7f3e173deec9
[   94.718962][ T7018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.718978][ T7018] RSP: 002b:00007f3e15e3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   94.718998][ T7018] RAX: ffffffffffffffda RBX: 00007f3e17635fa0 RCX: 00007f3e173deec9
[   94.719032][ T7018] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000004
[   94.719045][ T7018] RBP: 00007f3e15e3f090 R08: 0000000000000000 R09: 0000000000000000
[   94.719058][ T7018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   94.719071][ T7018] R13: 00007f3e17636038 R14: 00007f3e17635fa0 R15: 00007ffe02b32c78
[   94.719116][ T7018]  </TASK>
[   95.006147][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'.
[   95.400168][ T7047] can0: slcan on ttyS3.
[   95.498345][ T7052] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1274'.
[   95.516164][ T7046] can0 (unregistered): slcan off ttyS3.
[   95.613103][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1280'.
[   95.623563][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1281'.
[   95.670262][ T7072] ipvlan3: entered promiscuous mode
[   95.675793][ T7072] bridge0: port 1(ipvlan3) entered blocking state
[   95.682382][ T7072] bridge0: port 1(ipvlan3) entered disabled state
[   95.689336][ T7072] ipvlan3: entered allmulticast mode
[   95.694699][ T7072] bridge0: entered allmulticast mode
[   95.700835][ T7072] ipvlan3: left allmulticast mode
[   95.705854][ T7072] bridge0: left allmulticast mode
[   95.811962][ T7088] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1288'.
[   96.140447][ T7098] loop2: detected capacity change from 0 to 512
[   96.165079][ T7098] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   96.179853][ T7098] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1292: invalid indirect mapped block 8 (level 2)
[   96.249576][ T7098] EXT4-fs (loop2): Remounting filesystem read-only
[   96.264363][ T7098] EXT4-fs (loop2): 1 truncate cleaned up
[   96.268268][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1294'.
[   96.284312][ T7098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.331270][ T7106] loop3: detected capacity change from 0 to 512
[   96.338680][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.349009][ T7106] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.1295: missing EA_INODE flag
[   96.361626][ T7106] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1295: error while reading EA inode 11 err=-117
[   96.374686][ T7106] EXT4-fs (loop3): 1 orphan inode deleted
[   96.380656][ T7109] FAULT_INJECTION: forcing a failure.
[   96.380656][ T7109] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   96.393714][ T7109] CPU: 1 UID: 0 PID: 7109 Comm: syz.0.1297 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   96.393737][ T7109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   96.393821][ T7109] Call Trace:
[   96.393827][ T7109]  <TASK>
[   96.393834][ T7109]  __dump_stack+0x1d/0x30
[   96.393853][ T7109]  dump_stack_lvl+0xe8/0x140
[   96.393869][ T7109]  dump_stack+0x15/0x1b
[   96.393882][ T7109]  should_fail_ex+0x265/0x280
[   96.393903][ T7109]  should_fail+0xb/0x20
[   96.393938][ T7109]  should_fail_usercopy+0x1a/0x20
[   96.393962][ T7109]  _copy_to_user+0x20/0xa0
[   96.394046][ T7109]  simple_read_from_buffer+0xb5/0x130
[   96.394111][ T7109]  proc_fail_nth_read+0x10e/0x150
[   96.394155][ T7109]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   96.394179][ T7109]  vfs_read+0x1a8/0x770
[   96.394186][ T7106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.394199][ T7109]  ? __rcu_read_unlock+0x4f/0x70
[   96.394219][ T7109]  ? __fget_files+0x184/0x1c0
[   96.394241][ T7109]  ksys_read+0xda/0x1a0
[   96.394334][ T7109]  __x64_sys_read+0x40/0x50
[   96.394355][ T7109]  x64_sys_call+0x27bc/0x2ff0
[   96.394376][ T7109]  do_syscall_64+0xd2/0x200
[   96.394466][ T7109]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   96.394488][ T7109]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   96.394519][ T7109]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.394539][ T7109] RIP: 0033:0x7f0bce5bd8dc
[   96.394554][ T7109] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   96.394644][ T7109] RSP: 002b:00007f0bcd027030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   96.394662][ T7109] RAX: ffffffffffffffda RBX: 00007f0bce815fa0 RCX: 00007f0bce5bd8dc
[   96.394675][ T7109] RDX: 000000000000000f RSI: 00007f0bcd0270a0 RDI: 0000000000000009
[   96.394750][ T7109] RBP: 00007f0bcd027090 R08: 0000000000000000 R09: 0000000000000000
[   96.394762][ T7109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   96.394774][ T7109] R13: 00007f0bce816038 R14: 00007f0bce815fa0 R15: 00007ffded5a7048
[   96.394792][ T7109]  </TASK>
[   96.525734][ T7115] loop2: detected capacity change from 0 to 512
[   96.650286][ T7123] binfmt_misc: register: failed to install interpreter file ./file2
[   96.674700][ T3302] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   96.734965][ T3302] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15
[   96.756961][ T3302] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15
[   96.762039][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1305'.
[   96.888173][ T7139] loop2: detected capacity change from 0 to 512
[   96.911778][ T7139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.957271][ T7145] FAULT_INJECTION: forcing a failure.
[   96.957271][ T7145] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   96.970729][ T7145] CPU: 0 UID: 0 PID: 7145 Comm: syz.0.1309 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   96.970757][ T7145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   96.970769][ T7145] Call Trace:
[   96.970775][ T7145]  <TASK>
[   96.970792][ T7145]  __dump_stack+0x1d/0x30
[   96.970818][ T7145]  dump_stack_lvl+0xe8/0x140
[   96.970857][ T7145]  dump_stack+0x15/0x1b
[   96.970882][ T7145]  should_fail_ex+0x265/0x280
[   96.970971][ T7145]  should_fail+0xb/0x20
[   96.970991][ T7145]  should_fail_usercopy+0x1a/0x20
[   96.971016][ T7145]  _copy_from_user+0x1c/0xb0
[   96.971043][ T7145]  io_submit_one+0x52/0x11d0
[   96.971104][ T7145]  __se_sys_io_submit+0xfb/0x280
[   96.971131][ T7145]  __x64_sys_io_submit+0x43/0x50
[   96.971154][ T7145]  x64_sys_call+0x2d5d/0x2ff0
[   96.971173][ T7145]  do_syscall_64+0xd2/0x200
[   96.971264][ T7145]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   96.971289][ T7145]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   96.971314][ T7145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.971350][ T7145] RIP: 0033:0x7f0bce5beec9
[   96.971365][ T7145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   96.971379][ T7145] RSP: 002b:00007f0bcd027038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[   96.971398][ T7145] RAX: ffffffffffffffda RBX: 00007f0bce815fa0 RCX: 00007f0bce5beec9
[   96.971411][ T7145] RDX: 00002000000005c0 RSI: 0000000000000001 RDI: 00007f0bcf34e000
[   96.971500][ T7145] RBP: 00007f0bcd027090 R08: 0000000000000000 R09: 0000000000000000
[   96.971513][ T7145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   96.971526][ T7145] R13: 00007f0bce816038 R14: 00007f0bce815fa0 R15: 00007ffded5a7048
[   96.971571][ T7145]  </TASK>
[   97.211661][ T7118] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.222328][   T41] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.232178][   T41] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.276205][ T7147] binfmt_misc: register: failed to install interpreter file ./file2
[   97.294124][ T7149] ipvlan4: entered promiscuous mode
[   97.303711][   T41] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.313551][   T41] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.313707][ T7149] loop4: detected capacity change from 0 to 1024
[   97.351007][ T7149] EXT4-fs: Ignoring removed orlov option
[   97.358344][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.381009][   T41] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.390841][   T41] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.405794][ T7149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.446269][ T7161] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   97.471312][   T41] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.481152][   T41] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.508480][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.527516][ T7165] FAULT_INJECTION: forcing a failure.
[   97.527516][ T7165] name failslab, interval 1, probability 0, space 0, times 0
[   97.540253][ T7165] CPU: 1 UID: 0 PID: 7165 Comm: syz.2.1317 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   97.540280][ T7165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   97.540346][ T7165] Call Trace:
[   97.540351][ T7165]  <TASK>
[   97.540357][ T7165]  __dump_stack+0x1d/0x30
[   97.540374][ T7165]  dump_stack_lvl+0xe8/0x140
[   97.540396][ T7165]  dump_stack+0x15/0x1b
[   97.540413][ T7165]  should_fail_ex+0x265/0x280
[   97.540432][ T7165]  should_failslab+0x8c/0xb0
[   97.540455][ T7165]  kmem_cache_alloc_noprof+0x50/0x310
[   97.540571][ T7165]  ? skb_clone+0x151/0x1f0
[   97.540592][ T7165]  skb_clone+0x151/0x1f0
[   97.540688][ T7165]  __netlink_deliver_tap+0x2c9/0x500
[   97.540711][ T7165]  netlink_dump+0x836/0x8a0
[   97.540734][ T7165]  netlink_recvmsg+0x420/0x550
[   97.540830][ T7165]  ? __pfx_netlink_recvmsg+0x10/0x10
[   97.540907][ T7165]  sock_recvmsg+0x136/0x170
[   97.540932][ T7165]  ____sys_recvmsg+0xf5/0x280
[   97.540957][ T7165]  ___sys_recvmsg+0x11f/0x370
[   97.541026][ T7165]  do_recvmmsg+0x1ef/0x540
[   97.541051][ T7165]  ? fput+0x8f/0xc0
[   97.541125][ T7165]  __x64_sys_recvmmsg+0xe5/0x170
[   97.541196][ T7165]  x64_sys_call+0x27a6/0x2ff0
[   97.541227][ T7165]  do_syscall_64+0xd2/0x200
[   97.541252][ T7165]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   97.541300][ T7165]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   97.541322][ T7165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.541340][ T7165] RIP: 0033:0x7ff37e77eec9
[   97.541352][ T7165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.541376][ T7165] RSP: 002b:00007ff37d1e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   97.541392][ T7165] RAX: ffffffffffffffda RBX: 00007ff37e9d5fa0 RCX: 00007ff37e77eec9
[   97.541402][ T7165] RDX: 0000000000000003 RSI: 00002000000018c0 RDI: 0000000000000003
[   97.541420][ T7165] RBP: 00007ff37d1e7090 R08: 0000000000000000 R09: 0000000000000000
[   97.541469][ T7165] R10: 0000000000002060 R11: 0000000000000246 R12: 0000000000000001
[   97.541479][ T7165] R13: 00007ff37e9d6038 R14: 00007ff37e9d5fa0 R15: 00007ffdf0a2ab18
[   97.541493][ T7165]  </TASK>
[   97.835537][   T41] batadv1: left allmulticast mode
[   97.840819][   T41] batadv1: left promiscuous mode
[   97.846015][   T41] bridge0: port 1(batadv1) entered disabled state
[   97.947332][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1327'.
[   98.001847][   T41] bond0 (unregistering): Released all slaves
[   98.104585][ T7218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.150893][ T7218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.150941][ T7151] lo speed is unknown, defaulting to 1000
[   98.181298][   T41] hsr_slave_0: left promiscuous mode
[   98.186982][   T41] hsr_slave_1: left promiscuous mode
[   98.193696][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'.
[   98.203177][   T41] veth1_vlan: left promiscuous mode
[   98.208561][   T41] veth0_vlan: left promiscuous mode
[   98.368240][ T7151] chnl_net:caif_netlink_parms(): no params data found
[   98.404214][ T7151] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.411378][ T7151] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.418788][ T7151] bridge_slave_0: entered allmulticast mode
[   98.425300][ T7151] bridge_slave_0: entered promiscuous mode
[   98.433344][ T7151] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.440424][ T7151] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.459798][ T7151] bridge_slave_1: entered allmulticast mode
[   98.467064][ T7151] bridge_slave_1: entered promiscuous mode
[   98.488658][ T7151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.500145][ T7151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.521833][ T7151] team0: Port device team_slave_0 added
[   98.528469][ T7151] team0: Port device team_slave_1 added
[   98.550179][ T7151] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.557152][ T7151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.583117][ T7151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.631834][ T7151] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.638787][ T7151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.664725][ T7151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.734876][ T7151] hsr_slave_0: entered promiscuous mode
[   98.745452][ T7151] hsr_slave_1: entered promiscuous mode
[   98.752212][ T7151] debugfs: 'hsr0' already exists in 'hsr'
[   98.757958][ T7151] Cannot create hsr debugfs directory
[   98.825639][ T7151] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   98.918178][ T7151] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   98.939857][ T7151] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   98.955928][ T7151] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   99.014905][ T7151] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.022049][ T7151] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.029303][ T7151] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.036375][ T7151] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.110576][ T7151] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.134175][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.142026][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.159113][ T7151] 8021q: adding VLAN 0 to HW filter on device team0
[   99.171808][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.178917][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.199394][ T1639] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.206543][ T1639] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.317033][ T7151] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.443751][   T29] kauditd_printk_skb: 433 callbacks suppressed
[   99.443765][   T29] audit: type=1326 audit(1758816948.939:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bce5beec9 code=0x7ffc0000
[   99.477360][   T29] audit: type=1326 audit(1758816948.939:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bce5beec9 code=0x7ffc0000
[   99.500959][   T29] audit: type=1326 audit(1758816948.939:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bce5beec9 code=0x7ffc0000
[   99.516334][ T7151] veth0_vlan: entered promiscuous mode
[   99.524627][   T29] audit: type=1326 audit(1758816948.939:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bce5beec9 code=0x7ffc0000
[   99.535403][ T7151] veth1_vlan: entered promiscuous mode
[   99.553177][   T29] audit: type=1326 audit(1758816948.939:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bce5beec9 code=0x7ffc0000
[   99.553203][   T29] audit: type=1326 audit(1758816948.939:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bce5beec9 code=0x7ffc0000
[   99.605379][   T29] audit: type=1326 audit(1758816948.939:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bce5beec9 code=0x7ffc0000
[   99.614102][ T7151] veth0_macvtap: entered promiscuous mode
[   99.628961][   T29] audit: type=1326 audit(1758816948.939:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f0bce5beec9 code=0x7ffc0000
[   99.641622][ T7151] veth1_macvtap: entered promiscuous mode
[   99.657925][   T29] audit: type=1326 audit(1758816948.939:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bce5beec9 code=0x7ffc0000
[   99.685435][   T29] audit: type=1326 audit(1758816949.159:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.0.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bce5beec9 code=0x7ffc0000
[   99.687949][ T7326] __nla_validate_parse: 3 callbacks suppressed
[   99.687960][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1367'.
[   99.717907][ T7151] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.736123][ T7151] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.747105][   T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.756232][   T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.768515][   T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.777766][   T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.809423][ T7329] loop5: detected capacity change from 0 to 512
[   99.817578][ T7329] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[   99.826106][ T7329] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1313: invalid indirect mapped block 8 (level 2)
[   99.839688][ T7329] EXT4-fs (loop5): Remounting filesystem read-only
[   99.846376][ T7329] EXT4-fs (loop5): 1 truncate cleaned up
[   99.852297][ T7329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.879068][ T7151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.897374][ T7333] can0: slcan on ttyS3.
[   99.949342][ T7337] loop5: detected capacity change from 0 to 512
[   99.955802][ T7332] can0 (unregistered): slcan off ttyS3.
[   99.963222][ T7337] EXT4-fs (loop5): orphan cleanup on readonly fs
[   99.970589][ T7337] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.1370: bad orphan inode 13
[   99.980966][ T7337] ext4_test_bit(bit=12, block=18) = 1
[   99.986338][ T7337] is_bad_inode(inode)=0
[   99.990535][ T7337] NEXT_ORPHAN(inode)=2130706432
[   99.995387][ T7337] max_ino=32
[   99.998629][ T7337] i_nlink=1
[  100.002301][ T7337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  100.026870][ T7151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.222714][ T7359] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1378'.
[  100.317391][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1384'.
[  100.341915][ T7376] FAULT_INJECTION: forcing a failure.
[  100.341915][ T7376] name failslab, interval 1, probability 0, space 0, times 0
[  100.354608][ T7376] CPU: 0 UID: 0 PID: 7376 Comm: syz.0.1385 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  100.354687][ T7376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  100.354695][ T7376] Call Trace:
[  100.354698][ T7376]  <TASK>
[  100.354704][ T7376]  __dump_stack+0x1d/0x30
[  100.354725][ T7376]  dump_stack_lvl+0xe8/0x140
[  100.354763][ T7376]  dump_stack+0x15/0x1b
[  100.354777][ T7376]  should_fail_ex+0x265/0x280
[  100.354808][ T7376]  should_failslab+0x8c/0xb0
[  100.354828][ T7376]  kmem_cache_alloc_node_noprof+0x57/0x320
[  100.354845][ T7376]  ? __alloc_skb+0x101/0x320
[  100.354937][ T7376]  __alloc_skb+0x101/0x320
[  100.355003][ T7376]  netlink_alloc_large_skb+0xba/0xf0
[  100.355016][ T7376]  netlink_sendmsg+0x3cf/0x6b0
[  100.355042][ T7376]  ? __pfx_netlink_sendmsg+0x10/0x10
[  100.355055][ T7376]  __sock_sendmsg+0x142/0x180
[  100.355138][ T7376]  ____sys_sendmsg+0x31e/0x4e0
[  100.355153][ T7376]  ___sys_sendmsg+0x17b/0x1d0
[  100.355174][ T7376]  __x64_sys_sendmsg+0xd4/0x160
[  100.355261][ T7376]  x64_sys_call+0x191e/0x2ff0
[  100.355272][ T7376]  do_syscall_64+0xd2/0x200
[  100.355367][ T7376]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  100.355380][ T7376]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  100.355431][ T7376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.355443][ T7376] RIP: 0033:0x7f0bce5beec9
[  100.355452][ T7376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.355519][ T7376] RSP: 002b:00007f0bcd027038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  100.355530][ T7376] RAX: ffffffffffffffda RBX: 00007f0bce815fa0 RCX: 00007f0bce5beec9
[  100.355537][ T7376] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000004
[  100.355544][ T7376] RBP: 00007f0bcd027090 R08: 0000000000000000 R09: 0000000000000000
[  100.355551][ T7376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.355557][ T7376] R13: 00007f0bce816038 R14: 00007f0bce815fa0 R15: 00007ffded5a7048
[  100.355646][ T7376]  </TASK>
[  100.874302][ T7392] binfmt_misc: register: failed to install interpreter file ./file2
[  100.926259][ T7400] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1396'.
[  100.952671][ T7402] can0: slcan on ttyS3.
[  101.009742][ T7407] FAULT_INJECTION: forcing a failure.
[  101.009742][ T7407] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  101.022930][ T7407] CPU: 0 UID: 0 PID: 7407 Comm: syz.0.1397 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  101.023008][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  101.023018][ T7407] Call Trace:
[  101.023023][ T7407]  <TASK>
[  101.023030][ T7407]  __dump_stack+0x1d/0x30
[  101.023052][ T7407]  dump_stack_lvl+0xe8/0x140
[  101.023071][ T7407]  dump_stack+0x15/0x1b
[  101.023110][ T7407]  should_fail_ex+0x265/0x280
[  101.023129][ T7407]  should_fail+0xb/0x20
[  101.023249][ T7407]  should_fail_usercopy+0x1a/0x20
[  101.023272][ T7407]  _copy_from_user+0x1c/0xb0
[  101.023345][ T7407]  sg_write+0x610/0x750
[  101.023372][ T7407]  ? __pfx_sg_write+0x10/0x10
[  101.023386][ T7407]  vfs_write+0x269/0x960
[  101.023453][ T7407]  ? __rcu_read_unlock+0x4f/0x70
[  101.023471][ T7407]  ? __fget_files+0x184/0x1c0
[  101.023568][ T7407]  ksys_write+0xda/0x1a0
[  101.023648][ T7407]  __x64_sys_write+0x40/0x50
[  101.023738][ T7407]  x64_sys_call+0x27fe/0x2ff0
[  101.023755][ T7407]  do_syscall_64+0xd2/0x200
[  101.023780][ T7407]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  101.023802][ T7407]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  101.023917][ T7407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.023934][ T7407] RIP: 0033:0x7f0bce5beec9
[  101.023947][ T7407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.023960][ T7407] RSP: 002b:00007f0bcd006038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  101.024030][ T7407] RAX: ffffffffffffffda RBX: 00007f0bce816090 RCX: 00007f0bce5beec9
[  101.024041][ T7407] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 0000000000000004
[  101.024051][ T7407] RBP: 00007f0bcd006090 R08: 0000000000000000 R09: 0000000000000000
[  101.024062][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  101.024074][ T7407] R13: 00007f0bce816128 R14: 00007f0bce816090 R15: 00007ffded5a7048
[  101.024093][ T7407]  </TASK>
[  101.222418][ T7401] can0 (unregistered): slcan off ttyS3.
[  101.226035][ T7409] loop5: detected capacity change from 0 to 512
[  101.236403][ T7409] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  101.254569][ T7409] EXT4-fs (loop5): 1 truncate cleaned up
[  101.261312][ T7409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.279194][ T7415] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1401'.
[  101.305046][ T7151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.327545][ T7425] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1402'.
[  101.392885][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1408'.
[  101.510557][ T7452] can0: slcan on ttyS3.
[  101.559637][ T7451] can0 (unregistered): slcan off ttyS3.
[  102.107660][ T7471] FAULT_INJECTION: forcing a failure.
[  102.107660][ T7471] name failslab, interval 1, probability 0, space 0, times 0
[  102.120402][ T7471] CPU: 1 UID: 0 PID: 7471 Comm: syz.2.1423 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  102.120435][ T7471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  102.120447][ T7471] Call Trace:
[  102.120453][ T7471]  <TASK>
[  102.120460][ T7471]  __dump_stack+0x1d/0x30
[  102.120496][ T7471]  dump_stack_lvl+0xe8/0x140
[  102.120547][ T7471]  dump_stack+0x15/0x1b
[  102.120563][ T7471]  should_fail_ex+0x265/0x280
[  102.120616][ T7471]  should_failslab+0x8c/0xb0
[  102.120636][ T7471]  kmem_cache_alloc_node_noprof+0x57/0x320
[  102.120660][ T7471]  ? __alloc_skb+0x101/0x320
[  102.120683][ T7471]  __alloc_skb+0x101/0x320
[  102.120700][ T7471]  ? audit_log_start+0x365/0x6c0
[  102.120847][ T7471]  audit_log_start+0x380/0x6c0
[  102.120877][ T7471]  audit_seccomp+0x48/0x100
[  102.120955][ T7471]  ? __seccomp_filter+0x68c/0x10d0
[  102.120980][ T7471]  __seccomp_filter+0x69d/0x10d0
[  102.120998][ T7471]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  102.121025][ T7471]  ? vfs_write+0x7e8/0x960
[  102.121046][ T7471]  ? __rcu_read_unlock+0x4f/0x70
[  102.121067][ T7471]  ? __fget_files+0x184/0x1c0
[  102.121127][ T7471]  __secure_computing+0x82/0x150
[  102.121144][ T7471]  syscall_trace_enter+0xcf/0x1e0
[  102.121201][ T7471]  do_syscall_64+0xac/0x200
[  102.121244][ T7471]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  102.121263][ T7471]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  102.121319][ T7471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.121352][ T7471] RIP: 0033:0x7ff37e77eec9
[  102.121377][ T7471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  102.121391][ T7471] RSP: 002b:00007ff37d1e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  102.121407][ T7471] RAX: ffffffffffffffda RBX: 00007ff37e9d5fa0 RCX: 00007ff37e77eec9
[  102.121421][ T7471] RDX: 0000000000000000 RSI: 0000000032f8306a RDI: 000000000000001d
[  102.121441][ T7471] RBP: 00007ff37d1e7090 R08: 0000000000000000 R09: 0000000000000000
[  102.121454][ T7471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  102.121466][ T7471] R13: 00007ff37e9d6038 R14: 00007ff37e9d5fa0 R15: 00007ffdf0a2ab18
[  102.121540][ T7471]  </TASK>
[  102.469857][ T7481] can0: slcan on ttyS3.
[  102.534282][ T7484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1428'.
[  102.559600][ T7480] can0 (unregistered): slcan off ttyS3.
[  102.857978][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1448'.
[  102.890902][ T7536] netlink: 360 bytes leftover after parsing attributes in process `syz.0.1450'.
[  102.903998][ T7538] loop2: detected capacity change from 0 to 512
[  102.914477][ T7538] EXT4-fs (loop2): orphan cleanup on readonly fs
[  102.921250][ T7538] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1451: bad orphan inode 13
[  102.931573][ T7538] ext4_test_bit(bit=12, block=18) = 1
[  102.937025][ T7538] is_bad_inode(inode)=0
[  102.941326][ T7538] NEXT_ORPHAN(inode)=2130706432
[  102.946253][ T7538] max_ino=32
[  102.948227][ T7541] binfmt_misc: register: failed to install interpreter file ./file2
[  102.949437][ T7538] i_nlink=1
[  102.962192][ T7538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  102.988857][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.405983][ T7563] loop2: detected capacity change from 0 to 512
[  103.421483][ T7563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.444041][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.531242][ T7578] binfmt_misc: register: failed to install interpreter file ./file2
[  103.553970][ T7580] binfmt_misc: register: failed to install interpreter file ./file2
[  103.765039][ T7593] can0: slcan on ttyS3.
[  103.889800][ T7592] can0 (unregistered): slcan off ttyS3.
[  104.157296][ T7621] loop4: detected capacity change from 0 to 512
[  104.170984][ T7621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.192938][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.268386][ T7627] loop4: detected capacity change from 0 to 2048
[  104.302764][ T7631] can0: slcan on ttyS3.
[  104.310115][ T7627]  loop4: p1 < > p4
[  104.314298][ T7627] loop4: p4 size 8388608 extends beyond EOD, truncated
[  104.379548][ T7630] can0 (unregistered): slcan off ttyS3.
[  104.467432][ T7641] loop5: detected capacity change from 0 to 128
[  104.483333][   T29] kauditd_printk_skb: 250 callbacks suppressed
[  104.483347][   T29] audit: type=1326 audit(1758816953.979:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd748eec9 code=0x7ffc0000
[  104.513494][   T29] audit: type=1326 audit(1758816953.979:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd748eec9 code=0x7ffc0000
[  104.537031][   T29] audit: type=1326 audit(1758816953.979:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cd748eec9 code=0x7ffc0000
[  104.560687][   T29] audit: type=1326 audit(1758816953.979:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd748eec9 code=0x7ffc0000
[  104.584214][   T29] audit: type=1326 audit(1758816953.979:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cd748eec9 code=0x7ffc0000
[  104.608005][   T29] audit: type=1326 audit(1758816953.979:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd748eec9 code=0x7ffc0000
[  104.612873][ T7650] loop4: detected capacity change from 0 to 1024
[  104.631433][   T29] audit: type=1326 audit(1758816953.979:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd748eec9 code=0x7ffc0000
[  104.631463][   T29] audit: type=1326 audit(1758816953.979:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cd748eec9 code=0x7ffc0000
[  104.639224][ T7650] journal_path: Non-blockdev passed as './file0'
[  104.661270][   T29] audit: type=1326 audit(1758816953.979:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd748eec9 code=0x7ffc0000
[  104.661344][   T29] audit: type=1326 audit(1758816953.979:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f0cd748eec9 code=0x7ffc0000
[  104.668600][ T7649] binfmt_misc: register: failed to install interpreter file ./file2
[  104.684959][ T7650] EXT4-fs: error: could not find journal device path
[  104.771897][ T7654] binfmt_misc: register: failed to install interpreter file ./file2
[  104.800917][ T7660] __nla_validate_parse: 3 callbacks suppressed
[  104.800931][ T7660] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1501'.
[  104.873169][ T7678] FAULT_INJECTION: forcing a failure.
[  104.873169][ T7678] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  104.886413][ T7678] CPU: 1 UID: 0 PID: 7678 Comm: syz.1.1508 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  104.886436][ T7678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  104.886447][ T7678] Call Trace:
[  104.886454][ T7678]  <TASK>
[  104.886460][ T7678]  __dump_stack+0x1d/0x30
[  104.886480][ T7678]  dump_stack_lvl+0xe8/0x140
[  104.886513][ T7678]  dump_stack+0x15/0x1b
[  104.886564][ T7678]  should_fail_ex+0x265/0x280
[  104.886583][ T7678]  should_fail+0xb/0x20
[  104.886599][ T7678]  should_fail_usercopy+0x1a/0x20
[  104.886621][ T7678]  _copy_from_user+0x1c/0xb0
[  104.886706][ T7678]  ___sys_sendmsg+0xc1/0x1d0
[  104.886756][ T7678]  __x64_sys_sendmsg+0xd4/0x160
[  104.886779][ T7678]  x64_sys_call+0x191e/0x2ff0
[  104.886868][ T7678]  do_syscall_64+0xd2/0x200
[  104.886892][ T7678]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  104.886912][ T7678]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  104.886965][ T7678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.886982][ T7678] RIP: 0033:0x7f0cd748eec9
[  104.886994][ T7678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.887008][ T7678] RSP: 002b:00007f0cd5eef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  104.887027][ T7678] RAX: ffffffffffffffda RBX: 00007f0cd76e5fa0 RCX: 00007f0cd748eec9
[  104.887047][ T7678] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  104.887057][ T7678] RBP: 00007f0cd5eef090 R08: 0000000000000000 R09: 0000000000000000
[  104.887067][ T7678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  104.887077][ T7678] R13: 00007f0cd76e6038 R14: 00007f0cd76e5fa0 R15: 00007fff48fe5f78
[  104.887112][ T7678]  </TASK>
[  105.066712][ T7681] loop2: detected capacity change from 0 to 512
[  105.082760][ T7681] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  105.104473][ T7681] EXT4-fs (loop2): 1 truncate cleaned up
[  105.111403][ T7681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.135977][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.152579][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1511'.
[  105.189108][ T7689] binfmt_misc: register: failed to install interpreter file ./file2
[  105.230646][ T7695] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1515'.
[  105.243121][ T7693] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1514'.
[  105.252456][ T7693] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1514'.
[  105.280120][ T7698] loop2: detected capacity change from 0 to 2048
[  105.330037][ T7698]  loop2: p1 < > p4
[  105.334619][ T7698] loop2: p4 size 8388608 extends beyond EOD, truncated
[  105.345763][ T7704] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1518'.
[  105.381398][ T7707] binfmt_misc: register: failed to install interpreter file ./file2
[  105.402567][ T7709] erspan0: entered promiscuous mode
[  105.412479][ T7709] siw: device registration error -23
[  105.418139][ T7709] smc: removing ib device syz!
[  105.838078][ T7736] loop4: detected capacity change from 0 to 512
[  105.851707][ T7736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.873107][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.176108][ T7757] FAULT_INJECTION: forcing a failure.
[  106.176108][ T7757] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  106.189269][ T7757] CPU: 1 UID: 0 PID: 7757 Comm: syz.5.1538 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  106.189286][ T7757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  106.189293][ T7757] Call Trace:
[  106.189364][ T7757]  <TASK>
[  106.189369][ T7757]  __dump_stack+0x1d/0x30
[  106.189382][ T7757]  dump_stack_lvl+0xe8/0x140
[  106.189392][ T7757]  dump_stack+0x15/0x1b
[  106.189401][ T7757]  should_fail_ex+0x265/0x280
[  106.189497][ T7757]  should_fail+0xb/0x20
[  106.189517][ T7757]  should_fail_usercopy+0x1a/0x20
[  106.189538][ T7757]  _copy_to_user+0x20/0xa0
[  106.189576][ T7757]  simple_read_from_buffer+0xb5/0x130
[  106.189599][ T7757]  proc_fail_nth_read+0x10e/0x150
[  106.189682][ T7757]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  106.189776][ T7757]  vfs_read+0x1a8/0x770
[  106.189796][ T7757]  ? __fput+0x555/0x650
[  106.189844][ T7757]  ? __rcu_read_unlock+0x4f/0x70
[  106.189902][ T7757]  ? __fget_files+0x184/0x1c0
[  106.189965][ T7757]  ksys_read+0xda/0x1a0
[  106.190018][ T7757]  __x64_sys_read+0x40/0x50
[  106.190037][ T7757]  x64_sys_call+0x27bc/0x2ff0
[  106.190057][ T7757]  do_syscall_64+0xd2/0x200
[  106.190078][ T7757]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  106.190107][ T7757]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  106.190181][ T7757]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.190192][ T7757] RIP: 0033:0x7f83c183d8dc
[  106.190262][ T7757] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  106.190276][ T7757] RSP: 002b:00007f83c029f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  106.190362][ T7757] RAX: ffffffffffffffda RBX: 00007f83c1a95fa0 RCX: 00007f83c183d8dc
[  106.190368][ T7757] RDX: 000000000000000f RSI: 00007f83c029f0a0 RDI: 0000000000000004
[  106.190375][ T7757] RBP: 00007f83c029f090 R08: 0000000000000000 R09: 0000000000000000
[  106.190382][ T7757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  106.190388][ T7757] R13: 00007f83c1a96038 R14: 00007f83c1a95fa0 R15: 00007ffc74ae09f8
[  106.190398][ T7757]  </TASK>
[  106.423164][ T7766] binfmt_misc: register: failed to install interpreter file ./file2
[  106.520621][ T7776] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1545'.
[  107.184015][ T7790] loop4: detected capacity change from 0 to 512
[  107.190958][ T7790] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  107.202172][ T7790] EXT4-fs (loop4): 1 truncate cleaned up
[  107.208194][ T7790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.263432][ T7790] program syz.4.1550 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  107.292690][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.293490][ T7793] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1551'.
[  107.329706][ T7798] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1554'.
[  107.338904][ T7795] loop4: detected capacity change from 0 to 512
[  107.359422][ T7795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.379637][ T7803] loop5: detected capacity change from 0 to 512
[  107.386565][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.387513][ T7803] EXT4-fs (loop5): orphan cleanup on readonly fs
[  107.402334][ T7803] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.1555: bad orphan inode 13
[  107.412801][ T7803] ext4_test_bit(bit=12, block=18) = 1
[  107.418198][ T7803] is_bad_inode(inode)=0
[  107.422434][ T7803] NEXT_ORPHAN(inode)=2130706432
[  107.427278][ T7803] max_ino=32
[  107.430520][ T7803] i_nlink=1
[  107.434412][ T7803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  107.462158][ T7151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.487617][ T7809] ipvlan2: entered promiscuous mode
[  107.494445][ T7809] bridge0: port 3(ipvlan2) entered blocking state
[  107.501034][ T7809] bridge0: port 3(ipvlan2) entered disabled state
[  107.508725][ T7809] ipvlan2: entered allmulticast mode
[  107.514062][ T7809] bridge0: entered allmulticast mode
[  107.522327][ T7809] ipvlan2: left allmulticast mode
[  107.527378][ T7809] bridge0: left allmulticast mode
[  107.553976][ T7798] sctp: [Deprecated]: syz.1.1554 (pid 7798) Use of int in maxseg socket option.
[  107.553976][ T7798] Use struct sctp_assoc_value instead
[  107.768635][ T7831] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1564'.
[  107.997912][ T7852] loop4: detected capacity change from 0 to 512
[  108.011509][ T7852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.033792][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.060248][ T7856] can0: slcan on ttyS3.
[  108.129507][ T7855] can0 (unregistered): slcan off ttyS3.
[  108.446732][ T7867] loop5: detected capacity change from 0 to 512
[  108.465723][ T7867] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  108.467390][ T7875] loop4: detected capacity change from 0 to 2048
[  108.491330][ T7867] EXT4-fs (loop5): 1 truncate cleaned up
[  108.497414][ T7867] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.539806][ T7875]  loop4: p1 < > p4
[  108.547157][ T7875] loop4: p4 size 8388608 extends beyond EOD, truncated
[  108.726645][ T7151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.736145][ T7882] loop4: detected capacity change from 0 to 4096
[  108.773405][ T7882] EXT4-fs: Ignoring removed nomblk_io_submit option
[  108.786670][ T7882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.810321][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.833496][ T7892] FAULT_INJECTION: forcing a failure.
[  108.833496][ T7892] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  108.846681][ T7892] CPU: 1 UID: 0 PID: 7892 Comm: syz.1.1588 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  108.846704][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  108.846714][ T7892] Call Trace:
[  108.846719][ T7892]  <TASK>
[  108.846751][ T7892]  __dump_stack+0x1d/0x30
[  108.846809][ T7892]  dump_stack_lvl+0xe8/0x140
[  108.846827][ T7892]  dump_stack+0x15/0x1b
[  108.846844][ T7892]  should_fail_ex+0x265/0x280
[  108.846868][ T7892]  should_fail+0xb/0x20
[  108.846889][ T7892]  should_fail_usercopy+0x1a/0x20
[  108.847027][ T7892]  _copy_from_iter+0xd2/0xe80
[  108.847052][ T7892]  ? __build_skb_around+0x1a0/0x200
[  108.847120][ T7892]  ? __alloc_skb+0x223/0x320
[  108.847139][ T7892]  netlink_sendmsg+0x471/0x6b0
[  108.847161][ T7892]  ? __pfx_netlink_sendmsg+0x10/0x10
[  108.847211][ T7892]  __sock_sendmsg+0x142/0x180
[  108.847238][ T7892]  ____sys_sendmsg+0x31e/0x4e0
[  108.847266][ T7892]  ___sys_sendmsg+0x17b/0x1d0
[  108.847339][ T7892]  __x64_sys_sendmsg+0xd4/0x160
[  108.847367][ T7892]  x64_sys_call+0x191e/0x2ff0
[  108.847385][ T7892]  do_syscall_64+0xd2/0x200
[  108.847466][ T7892]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  108.847486][ T7892]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  108.847509][ T7892]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.847584][ T7892] RIP: 0033:0x7f0cd748eec9
[  108.847598][ T7892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.847633][ T7892] RSP: 002b:00007f0cd5eef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  108.847652][ T7892] RAX: ffffffffffffffda RBX: 00007f0cd76e5fa0 RCX: 00007f0cd748eec9
[  108.847665][ T7892] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003
[  108.847744][ T7892] RBP: 00007f0cd5eef090 R08: 0000000000000000 R09: 0000000000000000
[  108.847755][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  108.847767][ T7892] R13: 00007f0cd76e6038 R14: 00007f0cd76e5fa0 R15: 00007fff48fe5f78
[  108.847792][ T7892]  </TASK>
[  109.152498][ T7896] binfmt_misc: register: failed to install interpreter file ./file2
[  109.171715][ T7902] binfmt_misc: register: failed to install interpreter file ./file2
[  109.309957][ T7933] binfmt_misc: register: failed to install interpreter file ./file2
[  109.373566][ T7940] FAULT_INJECTION: forcing a failure.
[  109.373566][ T7940] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  109.386773][ T7940] CPU: 1 UID: 0 PID: 7940 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) 
[  109.386797][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  109.386841][ T7940] Call Trace:
[  109.386846][ T7940]  <TASK>
[  109.386909][ T7940]  __dump_stack+0x1d/0x30
[  109.386929][ T7940]  dump_stack_lvl+0xe8/0x140
[  109.386946][ T7940]  dump_stack+0x15/0x1b
[  109.387005][ T7940]  should_fail_ex+0x265/0x280
[  109.387025][ T7940]  should_fail+0xb/0x20
[  109.387042][ T7940]  should_fail_usercopy+0x1a/0x20
[  109.387068][ T7940]  _copy_from_user+0x1c/0xb0
[  109.387096][ T7940]  ___sys_sendmsg+0xc1/0x1d0
[  109.387237][ T7940]  __x64_sys_sendmsg+0xd4/0x160
[  109.387318][ T7940]  x64_sys_call+0x191e/0x2ff0
[  109.387380][ T7940]  do_syscall_64+0xd2/0x200
[  109.387404][ T7940]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  109.387428][ T7940]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  109.387469][ T7940]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.387559][ T7940] RIP: 0033:0x7f0bce5beec9
[  109.387574][ T7940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.387591][ T7940] RSP: 002b:00007f0bcd027038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  109.387610][ T7940] RAX: ffffffffffffffda RBX: 00007f0bce815fa0 RCX: 00007f0bce5beec9
[  109.387651][ T7940] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000008
[  109.387732][ T7940] RBP: 00007f0bcd027090 R08: 0000000000000000 R09: 0000000000000000
[  109.387742][ T7940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  109.387753][ T7940] R13: 00007f0bce816038 R14: 00007f0bce815fa0 R15: 00007ffded5a7048
[  109.387777][ T7940]  </TASK>
[  109.587026][   T29] kauditd_printk_skb: 131 callbacks suppressed
[  109.587040][   T29] audit: type=1400 audit(1758816959.079:4380): avc:  denied  { read append } for  pid=7941 comm="syz.1.1608" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  109.618606][   T29] audit: type=1400 audit(1758816959.079:4381): avc:  denied  { open } for  pid=7941 comm="syz.1.1608" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  109.677997][ T7956] loop5: detected capacity change from 0 to 512
[  109.687547][ T7956] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  109.696833][ T7956] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1612: invalid indirect mapped block 8 (level 2)
[  109.711116][ T7956] EXT4-fs (loop5): Remounting filesystem read-only
[  109.717994][ T7956] EXT4-fs (loop5): 1 truncate cleaned up
[  109.725194][ T7956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.753477][ T7151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.805224][   T29] audit: type=1400 audit(1758816959.299:4382): avc:  denied  { setopt } for  pid=7963 comm="syz.5.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  109.852341][ T7970] loop2: detected capacity change from 0 to 512
[  109.859204][ T7970] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  109.871263][ T7970] EXT4-fs (loop2): 1 truncate cleaned up
[  109.877322][ T7970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.901949][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.918123][ T7974] __nla_validate_parse: 4 callbacks suppressed
[  109.918205][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1618'.
[  109.943345][ T7974] loop2: detected capacity change from 0 to 2048
[  109.960756][ T7974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  110.089675][   T29] audit: type=1400 audit(1758816959.589:4383): avc:  denied  { map } for  pid=7973 comm="syz.2.1618" path="/293/file2/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  110.132952][ T7977] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  110.159688][ T7977] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  110.162313][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1619'.
[  110.172252][ T7977] EXT4-fs (loop2): This should not happen!! Data will be lost
[  110.172252][ T7977] 
[  110.172271][ T7977] EXT4-fs (loop2): Total free blocks count 0
[  110.172282][ T7977] EXT4-fs (loop2): Free/Dirty block details
[  110.202685][ T7977] EXT4-fs (loop2): free_blocks=2415919104
[  110.208421][ T7977] EXT4-fs (loop2): dirty_blocks=2320
[  110.213716][ T7977] EXT4-fs (loop2): Block reservation details
[  110.219695][ T7977] EXT4-fs (loop2): i_reserved_data_blocks=145
[  110.304421][ T7987] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1623'.
[  110.360783][   T29] audit: type=1400 audit(1758816959.859:4384): avc:  denied  { bind } for  pid=7973 comm="syz.2.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  110.394528][   T29] audit: type=1400 audit(1758816959.859:4385): avc:  denied  { listen } for  pid=7973 comm="syz.2.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  110.414025][   T29] audit: type=1400 audit(1758816959.859:4386): avc:  denied  { accept } for  pid=7973 comm="syz.2.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  110.429581][ T7977] sctp: [Deprecated]: syz.2.1618 (pid 7977) Use of int in maxseg socket option.
[  110.429581][ T7977] Use struct sctp_assoc_value instead
[  110.467548][ T7995] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1626'.
[  110.508951][   T29] audit: type=1326 audit(1758816959.989:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.1.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd748eec9 code=0x7ffc0000
[  110.532631][   T29] audit: type=1326 audit(1758816959.989:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.1.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd748eec9 code=0x7ffc0000
[  110.556055][   T29] audit: type=1326 audit(1758816959.989:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.1.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cd748eec9 code=0x7ffc0000
[  110.824333][   T57] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  110.858136][ T8020] loop2: detected capacity change from 0 to 512
[  110.867564][ T8020] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  110.876055][ T8020] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1635: invalid indirect mapped block 8 (level 2)
[  110.889716][ T8020] EXT4-fs (loop2): Remounting filesystem read-only
[  110.896809][ T8020] EXT4-fs (loop2): 1 truncate cleaned up
[  110.903403][ T8020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.911278][ T8027] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1639'.
[  110.939261][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.994715][ T8033] FAULT_INJECTION: forcing a failure.
[  110.994715][ T8033] name failslab, interval 1, probability 0, space 0, times 0
[  111.007914][ T8033] CPU: 0 UID: 0 PID: 8033 Comm: syz.2.1641 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  111.008007][ T8033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  111.008016][ T8033] Call Trace:
[  111.008022][ T8033]  <TASK>
[  111.008029][ T8033]  __dump_stack+0x1d/0x30
[  111.008050][ T8033]  dump_stack_lvl+0xe8/0x140
[  111.008142][ T8033]  dump_stack+0x15/0x1b
[  111.008157][ T8033]  should_fail_ex+0x265/0x280
[  111.008178][ T8033]  should_failslab+0x8c/0xb0
[  111.008213][ T8033]  kmem_cache_alloc_noprof+0x50/0x310
[  111.008383][ T8033]  ? security_inode_alloc+0x37/0x100
[  111.008411][ T8033]  security_inode_alloc+0x37/0x100
[  111.008432][ T8033]  inode_init_always_gfp+0x4b7/0x500
[  111.008505][ T8033]  ? __pfx_sock_alloc_inode+0x10/0x10
[  111.008536][ T8033]  alloc_inode+0x58/0x170
[  111.008557][ T8033]  __sock_create+0x122/0x5b0
[  111.008574][ T8033]  __sys_socket+0xb0/0x180
[  111.008591][ T8033]  __x64_sys_socket+0x3f/0x50
[  111.008681][ T8033]  x64_sys_call+0x1147/0x2ff0
[  111.008701][ T8033]  do_syscall_64+0xd2/0x200
[  111.008732][ T8033]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  111.008752][ T8033]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  111.008806][ T8033]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.008825][ T8033] RIP: 0033:0x7ff37e780de7
[  111.008838][ T8033] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.008852][ T8033] RSP: 002b:00007ff37d1e5fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  111.008869][ T8033] RAX: ffffffffffffffda RBX: 00007ff37e9d5fa0 RCX: 00007ff37e780de7
[  111.008946][ T8033] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  111.008957][ T8033] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  111.008971][ T8033] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000001
[  111.008982][ T8033] R13: 00007ff37e9d6038 R14: 00007ff37e9d5fa0 R15: 00007ffdf0a2ab18
[  111.008999][ T8033]  </TASK>
[  111.009010][ T8033] socket: no more sockets
[  111.287908][ T8048] loop2: detected capacity change from 0 to 128
[  111.306155][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1648'.
[  111.355651][ T8060] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1651'.
[  111.545410][ T8071] binfmt_misc: register: failed to install interpreter file ./file2
[  112.078148][ T8088] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8088 comm=syz.2.1662
[  112.093339][ T8088] netlink: 'syz.2.1662': attribute type 13 has an invalid length.
[  112.101205][ T8088] netlink: 'syz.2.1662': attribute type 17 has an invalid length.
[  112.135564][ T8088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  112.155565][ T8090] bridge0: entered promiscuous mode
[  112.167688][ T8090] bridge0: port 3(macsec0) entered blocking state
[  112.174355][ T8090] bridge0: port 3(macsec0) entered disabled state
[  112.185162][ T8090] macsec0: entered allmulticast mode
[  112.190499][ T8090] bridge0: entered allmulticast mode
[  112.196312][ T8090] macsec0: left allmulticast mode
[  112.201511][ T8090] bridge0: left allmulticast mode
[  112.207376][ T8090] bridge0: left promiscuous mode
[  112.266376][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1669'.
[  112.286866][ T8105] loop5: detected capacity change from 0 to 2048
[  112.295882][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1670'.
[  112.315108][ T8107] loop2: detected capacity change from 0 to 2048
[  112.323104][ T8105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  112.338229][ T8107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  112.445941][ T8119] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  112.463116][ T8119] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1654 with error 28
[  112.465707][ T8120] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, 
[  112.475687][ T8119] EXT4-fs (loop5): This should not happen!! Data will be lost
[  112.475687][ T8119] 
[  112.475706][ T8119] EXT4-fs (loop5): Total free blocks count 0
[  112.483998][ T8120] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  112.485897][ T8120] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1004 with error 28
[  112.493645][ T8119] EXT4-fs (loop5): Free/Dirty block details
[  112.499664][ T8120] EXT4-fs (loop2): This should not happen!! Data will be lost
[  112.499664][ T8120] 
[  112.508439][ T8119] EXT4-fs (loop5): free_blocks=2415919104
[  112.508454][ T8119] EXT4-fs (loop5): dirty_blocks=1664
[  112.508464][ T8119] EXT4-fs (loop5): Block reservation details
[  112.508474][ T8119] EXT4-fs (loop5): i_reserved_data_blocks=104
[  112.520907][ T8120] EXT4-fs (loop2): Total free blocks count 0
[  112.565549][ T8120] EXT4-fs (loop2): Free/Dirty block details
[  112.565614][ T8120] EXT4-fs (loop2): free_blocks=2415919104
[  112.565626][ T8120] EXT4-fs (loop2): dirty_blocks=1008
[  112.565636][ T8120] EXT4-fs (loop2): Block reservation details
[  112.565645][ T8120] EXT4-fs (loop2): i_reserved_data_blocks=63
[  112.578140][ T8128] FAULT_INJECTION: forcing a failure.
[  112.578140][ T8128] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  112.578170][ T8128] CPU: 0 UID: 0 PID: 8128 Comm: syz.1.1674 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  112.578194][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  112.578206][ T8128] Call Trace:
[  112.578213][ T8128]  <TASK>
[  112.578220][ T8128]  __dump_stack+0x1d/0x30
[  112.578286][ T8128]  dump_stack_lvl+0xe8/0x140
[  112.578306][ T8128]  dump_stack+0x15/0x1b
[  112.578323][ T8128]  should_fail_ex+0x265/0x280
[  112.578347][ T8128]  should_fail_alloc_page+0xf2/0x100
[  112.578440][ T8128]  __alloc_frozen_pages_noprof+0xff/0x360
[  112.578484][ T8128]  alloc_pages_mpol+0xb3/0x250
[  112.578515][ T8128]  alloc_pages_noprof+0x90/0x130
[  112.578544][ T8128]  get_free_pages_noprof+0xc/0x40
[  112.578563][ T8128]  __pollwait+0xc2/0x270
[  112.578662][ T8128]  ? __pfx___pollwait+0x10/0x10
[  112.578683][ T8128]  pipe_poll+0x101/0x250
[  112.578714][ T8128]  ? __pfx_pipe_poll+0x10/0x10
[  112.578738][ T8128]  do_sys_poll+0x65e/0xbd0
[  112.578843][ T8128]  ? __pfx___pollwait+0x10/0x10
[  112.578864][ T8128]  ? __pfx_pollwake+0x10/0x10
[  112.578888][ T8128]  ? __pfx_pollwake+0x10/0x10
[  112.578939][ T8128]  ? __pfx_pollwake+0x10/0x10
[  112.578963][ T8128]  ? __pfx_pollwake+0x10/0x10
[  112.578987][ T8128]  ? __pfx_pollwake+0x10/0x10
[  112.579010][ T8128]  ? __pfx_pollwake+0x10/0x10
[  112.579051][ T8128]  ? __pfx_pollwake+0x10/0x10
[  112.579074][ T8128]  ? __pfx_pollwake+0x10/0x10
[  112.579121][ T8128]  ? __pfx_pollwake+0x10/0x10
[  112.579146][ T8128]  __se_sys_poll+0xdd/0x200
[  112.579170][ T8128]  __x64_sys_poll+0x43/0x50
[  112.579237][ T8128]  x64_sys_call+0x27d2/0x2ff0
[  112.579258][ T8128]  do_syscall_64+0xd2/0x200
[  112.579287][ T8128]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  112.579310][ T8128]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  112.579373][ T8128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.579390][ T8128] RIP: 0033:0x7f0cd748eec9
[  112.579403][ T8128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.579418][ T8128] RSP: 002b:00007f0cd5eef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007
[  112.579436][ T8128] RAX: ffffffffffffffda RBX: 00007f0cd76e5fa0 RCX: 00007f0cd748eec9
[  112.579457][ T8128] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000
[  112.579468][ T8128] RBP: 00007f0cd5eef090 R08: 0000000000000000 R09: 0000000000000000
[  112.579479][ T8128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.579491][ T8128] R13: 00007f0cd76e6038 R14: 00007f0cd76e5fa0 R15: 00007fff48fe5f78
[  112.579506][ T8128]  </TASK>
[  112.665081][ T8134] FAULT_INJECTION: forcing a failure.
[  112.665081][ T8134] name failslab, interval 1, probability 0, space 0, times 0
[  112.896690][ T8134] CPU: 1 UID: 0 PID: 8134 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) 
[  112.896715][ T8134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  112.896724][ T8134] Call Trace:
[  112.896794][ T8134]  <TASK>
[  112.896802][ T8134]  __dump_stack+0x1d/0x30
[  112.896822][ T8134]  dump_stack_lvl+0xe8/0x140
[  112.896837][ T8134]  dump_stack+0x15/0x1b
[  112.896851][ T8134]  should_fail_ex+0x265/0x280
[  112.896870][ T8134]  should_failslab+0x8c/0xb0
[  112.896943][ T8134]  kmem_cache_alloc_node_noprof+0x57/0x320
[  112.896967][ T8134]  ? __alloc_skb+0x101/0x320
[  112.896990][ T8134]  __alloc_skb+0x101/0x320
[  112.897038][ T8134]  batadv_netlink_set_mesh+0x777/0x8a0
[  112.897058][ T8134]  genl_family_rcv_msg_doit+0x140/0x1b0
[  112.897087][ T8134]  genl_rcv_msg+0x422/0x460
[  112.897132][ T8134]  ? __pfx_batadv_pre_doit+0x10/0x10
[  112.897189][ T8134]  ? __pfx_batadv_netlink_set_mesh+0x10/0x10
[  112.897208][ T8134]  ? __pfx_batadv_post_doit+0x10/0x10
[  112.897226][ T8134]  netlink_rcv_skb+0x120/0x220
[  112.897244][ T8134]  ? __pfx_genl_rcv_msg+0x10/0x10
[  112.897348][ T8134]  genl_rcv+0x28/0x40
[  112.897370][ T8134]  netlink_unicast+0x5c0/0x690
[  112.897388][ T8134]  netlink_sendmsg+0x58b/0x6b0
[  112.897477][ T8134]  ? __pfx_netlink_sendmsg+0x10/0x10
[  112.897497][ T8134]  __sock_sendmsg+0x142/0x180
[  112.897521][ T8134]  ____sys_sendmsg+0x31e/0x4e0
[  112.897600][ T8134]  ___sys_sendmsg+0x17b/0x1d0
[  112.897629][ T8134]  __x64_sys_sendmsg+0xd4/0x160
[  112.897652][ T8134]  x64_sys_call+0x191e/0x2ff0
[  112.897670][ T8134]  do_syscall_64+0xd2/0x200
[  112.897774][ T8134]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  112.897793][ T8134]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  112.897815][ T8134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.897870][ T8134] RIP: 0033:0x7f0cd748eec9
[  112.897909][ T8134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.897923][ T8134] RSP: 002b:00007f0cd5eef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  112.897940][ T8134] RAX: ffffffffffffffda RBX: 00007f0cd76e5fa0 RCX: 00007f0cd748eec9
[  112.897951][ T8134] RDX: 0000000000000018 RSI: 0000200000000540 RDI: 0000000000000007
[  112.897961][ T8134] RBP: 00007f0cd5eef090 R08: 0000000000000000 R09: 0000000000000000
[  112.897971][ T8134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.897981][ T8134] R13: 00007f0cd76e6038 R14: 00007f0cd76e5fa0 R15: 00007fff48fe5f78
[  112.898003][ T8134]  </TASK>
[  112.899353][   T57] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  113.157123][   T41] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  113.269435][ T8157] FAULT_INJECTION: forcing a failure.
[  113.269435][ T8157] name failslab, interval 1, probability 0, space 0, times 0
[  113.282346][ T8157] CPU: 1 UID: 0 PID: 8157 Comm: syz.4.1686 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  113.282417][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  113.282429][ T8157] Call Trace:
[  113.282435][ T8157]  <TASK>
[  113.282454][ T8157]  __dump_stack+0x1d/0x30
[  113.282472][ T8157]  dump_stack_lvl+0xe8/0x140
[  113.282487][ T8157]  dump_stack+0x15/0x1b
[  113.282499][ T8157]  should_fail_ex+0x265/0x280
[  113.282517][ T8157]  should_failslab+0x8c/0xb0
[  113.282579][ T8157]  __kmalloc_noprof+0xa5/0x3e0
[  113.282598][ T8157]  ? __list_lru_init+0x72/0x2e0
[  113.282614][ T8157]  __list_lru_init+0x72/0x2e0
[  113.282686][ T8157]  alloc_super+0x4df/0x570
[  113.282706][ T8157]  sget_fc+0x24e/0x6e0
[  113.282757][ T8157]  ? __pfx_set_anon_super_fc+0x10/0x10
[  113.282774][ T8157]  ? __pfx_mqueue_fill_super+0x10/0x10
[  113.282794][ T8157]  get_tree_nodev+0x2a/0x100
[  113.282815][ T8157]  mqueue_get_tree+0x63/0x90
[  113.282852][ T8157]  vfs_get_tree+0x54/0x1d0
[  113.282868][ T8157]  fc_mount_longterm+0x18/0xb0
[  113.282891][ T8157]  mq_init_ns+0x249/0x2f0
[  113.282972][ T8157]  copy_ipcs+0x214/0x3b0
[  113.282991][ T8157]  create_new_namespaces+0x12a/0x3d0
[  113.283017][ T8157]  unshare_nsproxy_namespaces+0xe8/0x120
[  113.283070][ T8157]  ksys_unshare+0x3d0/0x6d0
[  113.283090][ T8157]  ? ksys_write+0x192/0x1a0
[  113.283108][ T8157]  __x64_sys_unshare+0x1f/0x30
[  113.283173][ T8157]  x64_sys_call+0x2911/0x2ff0
[  113.283189][ T8157]  do_syscall_64+0xd2/0x200
[  113.283270][ T8157]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  113.283297][ T8157]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  113.283357][ T8157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.283373][ T8157] RIP: 0033:0x7f4c046beec9
[  113.283386][ T8157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.283398][ T8157] RSP: 002b:00007f4c0311f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  113.283434][ T8157] RAX: ffffffffffffffda RBX: 00007f4c04915fa0 RCX: 00007f4c046beec9
[  113.283462][ T8157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200
[  113.283472][ T8157] RBP: 00007f4c0311f090 R08: 0000000000000000 R09: 0000000000000000
[  113.283481][ T8157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  113.283490][ T8157] R13: 00007f4c04916038 R14: 00007f4c04915fa0 R15: 00007ffe297c8888
[  113.283585][ T8157]  </TASK>
[  113.663766][ T8184] loop5: detected capacity change from 0 to 2048
[  113.710096][ T8184]  loop5: p1 < > p4
[  113.721877][ T8184] loop5: p4 size 8388608 extends beyond EOD, truncated
[  113.746165][ T8194] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1697'.
[  113.839753][ T8203] FAULT_INJECTION: forcing a failure.
[  113.839753][ T8203] name failslab, interval 1, probability 0, space 0, times 0
[  113.852485][ T8203] CPU: 1 UID: 0 PID: 8203 Comm: syz.4.1695 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  113.852513][ T8203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  113.852559][ T8203] Call Trace:
[  113.852567][ T8203]  <TASK>
[  113.852574][ T8203]  __dump_stack+0x1d/0x30
[  113.852592][ T8203]  dump_stack_lvl+0xe8/0x140
[  113.852608][ T8203]  dump_stack+0x15/0x1b
[  113.852621][ T8203]  should_fail_ex+0x265/0x280
[  113.852704][ T8203]  ? inherit_task_group+0x142/0x690
[  113.852733][ T8203]  should_failslab+0x8c/0xb0
[  113.852754][ T8203]  __kmalloc_cache_noprof+0x4c/0x320
[  113.852839][ T8203]  ? __rcu_read_unlock+0x4f/0x70
[  113.852857][ T8203]  inherit_task_group+0x142/0x690
[  113.852893][ T8203]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[  113.852919][ T8203]  perf_event_init_task+0x16c/0x3b0
[  113.852947][ T8203]  copy_process+0xb4a/0x2000
[  113.852967][ T8203]  ? kstrtouint+0x76/0xc0
[  113.853047][ T8203]  ? __rcu_read_unlock+0x4f/0x70
[  113.853069][ T8203]  kernel_clone+0x16c/0x5c0
[  113.853129][ T8203]  ? vfs_write+0x7e8/0x960
[  113.853159][ T8203]  __x64_sys_clone+0xe6/0x120
[  113.853192][ T8203]  x64_sys_call+0x119c/0x2ff0
[  113.853214][ T8203]  do_syscall_64+0xd2/0x200
[  113.853239][ T8203]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  113.853334][ T8203]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  113.853361][ T8203]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.853378][ T8203] RIP: 0033:0x7f4c046beec9
[  113.853392][ T8203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.853405][ T8203] RSP: 002b:00007f4c030dcfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  113.853489][ T8203] RAX: ffffffffffffffda RBX: 00007f4c04916180 RCX: 00007f4c046beec9
[  113.853500][ T8203] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000000004021400
[  113.853511][ T8203] RBP: 00007f4c030dd090 R08: 0000000000000000 R09: 0000000000000000
[  113.853521][ T8203] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  113.853531][ T8203] R13: 00007f4c04916218 R14: 00007f4c04916180 R15: 00007ffe297c8888
[  113.853546][ T8203]  </TASK>
[  114.198477][ T8222] binfmt_misc: register: failed to install interpreter file ./file2
[  114.228153][ T8225] loop5: detected capacity change from 0 to 2048
[  114.280465][ T8225]  loop5: p1 < > p4
[  114.284941][ T8225] loop5: p4 size 8388608 extends beyond EOD, truncated
[  114.624093][ T8254] loop4: detected capacity change from 0 to 512
[  114.642151][ T8254] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  114.647794][ T8260] binfmt_misc: register: failed to install interpreter file ./file2
[  114.681078][ T8254] EXT4-fs (loop4): 1 truncate cleaned up
[  114.687122][ T8254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.711888][ T8264] loop2: detected capacity change from 0 to 512
[  114.718575][ T8264] EXT4-fs: Ignoring removed oldalloc option
[  114.748085][ T8264] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.1726: Parent and EA inode have the same ino 15
[  114.762162][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.773996][ T8264] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.1726: Parent and EA inode have the same ino 15
[  114.792117][ T8264] EXT4-fs (loop2): 1 orphan inode deleted
[  114.798411][ T8264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.806679][   T29] kauditd_printk_skb: 207 callbacks suppressed
[  114.806694][   T29] audit: type=1326 audit(1758816964.289:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd748eec9 code=0x7ffc0000
[  114.813474][ T8269] can0: slcan on ttyS3.
[  114.816702][   T29] audit: type=1326 audit(1758816964.309:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd748eec9 code=0x7ffc0000
[  114.868227][   T29] audit: type=1326 audit(1758816964.309:4599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cd748eec9 code=0x7ffc0000
[  114.891629][   T29] audit: type=1326 audit(1758816964.309:4600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd748eec9 code=0x7ffc0000
[  114.906901][ T8274] EXT4-fs warning (device loop2): __ext4_unlink:3278: inode #15: comm syz.2.1726: Deleting file 'file1' with no links
[  114.915081][   T29] audit: type=1326 audit(1758816964.309:4601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cd748eec9 code=0x7ffc0000
[  114.915108][   T29] audit: type=1326 audit(1758816964.309:4602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd748eec9 code=0x7ffc0000
[  114.974189][   T29] audit: type=1326 audit(1758816964.309:4603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0cd748eec9 code=0x7ffc0000
[  114.997596][   T29] audit: type=1326 audit(1758816964.339:4604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd748eec9 code=0x7ffc0000
[  115.021033][   T29] audit: type=1326 audit(1758816964.339:4605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd748eec9 code=0x7ffc0000
[  115.044432][   T29] audit: type=1326 audit(1758816964.359:4606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f0cd748eec9 code=0x7ffc0000
[  115.134998][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.149519][ T8268] can0 (unregistered): slcan off ttyS3.
[  115.194705][ T8283] loop2: detected capacity change from 0 to 2048
[  115.221261][ T8289] __nla_validate_parse: 2 callbacks suppressed
[  115.221278][ T8289] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1736'.
[  115.223907][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1737'.
[  115.255849][ T8283]  loop2: p1 < > p4
[  115.261035][ T8283] loop2: p4 size 8388608 extends beyond EOD, truncated
[  115.294721][ T3405] hid_parser_main: 16 callbacks suppressed
[  115.294739][ T3405] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  115.308503][ T3405] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  115.427031][ T8309] FAULT_INJECTION: forcing a failure.
[  115.427031][ T8309] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  115.429953][ T8310] loop2: detected capacity change from 0 to 512
[  115.440249][ T8309] CPU: 0 UID: 0 PID: 8309 Comm: syz.5.1745 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  115.440319][ T8309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  115.440361][ T8309] Call Trace:
[  115.440368][ T8309]  <TASK>
[  115.440375][ T8309]  __dump_stack+0x1d/0x30
[  115.440400][ T8309]  dump_stack_lvl+0xe8/0x140
[  115.440485][ T8309]  dump_stack+0x15/0x1b
[  115.440501][ T8309]  should_fail_ex+0x265/0x280
[  115.440530][ T8309]  should_fail+0xb/0x20
[  115.440550][ T8309]  should_fail_usercopy+0x1a/0x20
[  115.440638][ T8309]  _copy_to_user+0x20/0xa0
[  115.440744][ T8309]  simple_read_from_buffer+0xb5/0x130
[  115.440827][ T8309]  proc_fail_nth_read+0x10e/0x150
[  115.440879][ T8309]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  115.440959][ T8309]  vfs_read+0x1a8/0x770
[  115.440979][ T8309]  ? __rcu_read_unlock+0x4f/0x70
[  115.441006][ T8309]  ? __fget_files+0x184/0x1c0
[  115.441030][ T8309]  ksys_read+0xda/0x1a0
[  115.441051][ T8309]  __x64_sys_read+0x40/0x50
[  115.441238][ T8309]  x64_sys_call+0x27bc/0x2ff0
[  115.441258][ T8309]  do_syscall_64+0xd2/0x200
[  115.441287][ T8309]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  115.441308][ T8309]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  115.441380][ T8309]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.441400][ T8309] RIP: 0033:0x7f83c183d8dc
[  115.441459][ T8309] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  115.441475][ T8309] RSP: 002b:00007f83c029f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  115.441494][ T8309] RAX: ffffffffffffffda RBX: 00007f83c1a95fa0 RCX: 00007f83c183d8dc
[  115.441525][ T8309] RDX: 000000000000000f RSI: 00007f83c029f0a0 RDI: 0000000000000004
[  115.441537][ T8309] RBP: 00007f83c029f090 R08: 0000000000000000 R09: 0000000000000000
[  115.441603][ T8309] R10: 00000000fffffffe R11: 0000000000000246 R12: 0000000000000001
[  115.441615][ T8309] R13: 00007f83c1a96038 R14: 00007f83c1a95fa0 R15: 00007ffc74ae09f8
[  115.441631][ T8309]  </TASK>
[  115.482294][ T8312] loop5: detected capacity change from 0 to 512
[  115.486272][ T8310] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  115.492036][ T8312] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  115.495663][ T8310] EXT4-fs (loop2): 1 truncate cleaned up
[  115.501568][ T8312] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1746: invalid indirect mapped block 8 (level 2)
[  115.504580][ T8310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.512488][ T8312] EXT4-fs (loop5): Remounting filesystem read-only
[  115.572079][ T8304] SELinux:  Context system_u:object_r:policy_config_t:s0 is not valid (left unmapped).
[  115.575440][ T8312] EXT4-fs (loop5): 1 truncate cleaned up
[  115.721468][ T8312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.722409][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.752693][ T8319] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1747'.
[  115.762548][ T7151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.787901][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1750'.
[  115.814231][ T8325] loop5: detected capacity change from 0 to 512
[  115.825414][ T8327] loop2: detected capacity change from 0 to 2048
[  115.832468][ T8325] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.855950][ T7151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.865331][ T8327]  loop2: p1 < > p4
[  115.869886][ T8327] loop2: p4 size 8388608 extends beyond EOD, truncated
[  116.116802][ T8342] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1756'.
[  116.144970][ T8344] binfmt_misc: register: failed to install interpreter file ./file2
[  116.187984][ T8350] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.197748][ T8350] FAT-fs (loop8): unable to read boot sector
[  116.204473][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1760'.
[  116.213426][ T8350] netlink: 'syz.4.1760': attribute type 30 has an invalid length.
[  116.226835][ T1639] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.235622][ T1639] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  116.251530][ T1639] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  116.260121][ T1639] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  116.325077][ T8359] binfmt_misc: register: failed to install interpreter file ./file2
[  116.475124][ T8380] loop4: detected capacity change from 0 to 512
[  116.481919][ T8380] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  116.492964][ T8380] EXT4-fs (loop4): 1 truncate cleaned up
[  116.499031][ T8380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.521530][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.646716][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1776'.
[  116.682183][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1778'.
[  116.765925][ T8401] lo speed is unknown, defaulting to 1000
[  116.914182][ T8410] loop2: detected capacity change from 0 to 512
[  116.934288][ T8410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.981088][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1787'.
[  117.002392][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.082621][ T8430] can0: slcan on ttyS3.
[  117.129584][ T8429] can0 (unregistered): slcan off ttyS3.
[  117.168476][ T8438] loop2: detected capacity change from 0 to 512
[  117.178508][ T8438] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[  117.214565][ T8442] FAULT_INJECTION: forcing a failure.
[  117.214565][ T8442] name failslab, interval 1, probability 0, space 0, times 0
[  117.227296][ T8442] CPU: 1 UID: 0 PID: 8442 Comm: syz.0.1798 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  117.227362][ T8442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  117.227374][ T8442] Call Trace:
[  117.227381][ T8442]  <TASK>
[  117.227389][ T8442]  __dump_stack+0x1d/0x30
[  117.227409][ T8442]  dump_stack_lvl+0xe8/0x140
[  117.227427][ T8442]  dump_stack+0x15/0x1b
[  117.227440][ T8442]  should_fail_ex+0x265/0x280
[  117.227494][ T8442]  ? __se_sys_memfd_create+0x1cc/0x590
[  117.227512][ T8442]  should_failslab+0x8c/0xb0
[  117.227531][ T8442]  __kmalloc_cache_noprof+0x4c/0x320
[  117.227591][ T8442]  ? fput+0x8f/0xc0
[  117.227672][ T8442]  __se_sys_memfd_create+0x1cc/0x590
[  117.227690][ T8442]  __x64_sys_memfd_create+0x31/0x40
[  117.227707][ T8442]  x64_sys_call+0x2abe/0x2ff0
[  117.227726][ T8442]  do_syscall_64+0xd2/0x200
[  117.227803][ T8442]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  117.227864][ T8442]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  117.227890][ T8442]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.227907][ T8442] RIP: 0033:0x7f0bce5beec9
[  117.227935][ T8442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.227955][ T8442] RSP: 002b:00007f0bcd026e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  117.227975][ T8442] RAX: ffffffffffffffda RBX: 0000000000000545 RCX: 00007f0bce5beec9
[  117.227989][ T8442] RDX: 00007f0bcd026ef0 RSI: 0000000000000000 RDI: 00007f0bce642960
[  117.227999][ T8442] RBP: 0000200000002100 R08: 00007f0bcd026bb7 R09: 00007f0bcd026e40
[  117.228010][ T8442] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140
[  117.228027][ T8442] R13: 00007f0bcd026ef0 R14: 00007f0bcd026eb0 R15: 0000200000000080
[  117.228042][ T8442]  </TASK>
[  117.443392][ T8448] netlink: 'syz.2.1799': attribute type 3 has an invalid length.
[  117.518393][ T8455] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1804'.
[  118.072629][ T8503] FAULT_INJECTION: forcing a failure.
[  118.072629][ T8503] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  118.086089][ T8503] CPU: 0 UID: 0 PID: 8503 Comm: syz.0.1819 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  118.086117][ T8503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  118.086129][ T8503] Call Trace:
[  118.086136][ T8503]  <TASK>
[  118.086143][ T8503]  __dump_stack+0x1d/0x30
[  118.086164][ T8503]  dump_stack_lvl+0xe8/0x140
[  118.086262][ T8503]  dump_stack+0x15/0x1b
[  118.086278][ T8503]  should_fail_ex+0x265/0x280
[  118.086300][ T8503]  should_fail_alloc_page+0xf2/0x100
[  118.086321][ T8503]  alloc_pages_bulk_noprof+0xef/0x540
[  118.086409][ T8503]  copy_splice_read+0xf3/0x660
[  118.086432][ T8503]  ? __pfx_shmem_file_splice_read+0x10/0x10
[  118.086458][ T8503]  splice_direct_to_actor+0x290/0x680
[  118.086479][ T8503]  ? __pfx_direct_splice_actor+0x10/0x10
[  118.086647][ T8503]  do_splice_direct+0xda/0x150
[  118.086688][ T8503]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  118.086714][ T8503]  do_sendfile+0x380/0x650
[  118.086741][ T8503]  __x64_sys_sendfile64+0x105/0x150
[  118.086787][ T8503]  x64_sys_call+0x2bb0/0x2ff0
[  118.086806][ T8503]  do_syscall_64+0xd2/0x200
[  118.086832][ T8503]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  118.086857][ T8503]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  118.086903][ T8503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.086920][ T8503] RIP: 0033:0x7f0bce5beec9
[  118.086933][ T8503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.087029][ T8503] RSP: 002b:00007f0bcd006038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  118.087047][ T8503] RAX: ffffffffffffffda RBX: 00007f0bce816090 RCX: 00007f0bce5beec9
[  118.087059][ T8503] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006
[  118.087069][ T8503] RBP: 00007f0bcd006090 R08: 0000000000000000 R09: 0000000000000000
[  118.087094][ T8503] R10: 0100000800000009 R11: 0000000000000246 R12: 0000000000000001
[  118.087105][ T8503] R13: 00007f0bce816128 R14: 00007f0bce816090 R15: 00007ffded5a7048
[  118.087124][ T8503]  </TASK>
[  118.316758][ T8507] loop4: detected capacity change from 0 to 512
[  118.324801][ T8507] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  118.333639][ T8507] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1821: invalid indirect mapped block 8 (level 2)
[  118.346914][ T8507] EXT4-fs (loop4): Remounting filesystem read-only
[  118.354467][ T8507] EXT4-fs (loop4): 1 truncate cleaned up
[  118.360718][ T8507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.399910][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.477018][ T8515] binfmt_misc: register: failed to install interpreter file ./file2
[  118.573067][ T8524] loop4: detected capacity change from 0 to 512
[  118.618587][ T8536] FAULT_INJECTION: forcing a failure.
[  118.618587][ T8536] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  118.631713][ T8536] CPU: 0 UID: 0 PID: 8536 Comm: syz.1.1834 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  118.631740][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  118.631751][ T8536] Call Trace:
[  118.631834][ T8536]  <TASK>
[  118.631843][ T8536]  __dump_stack+0x1d/0x30
[  118.631906][ T8536]  dump_stack_lvl+0xe8/0x140
[  118.631926][ T8536]  dump_stack+0x15/0x1b
[  118.631966][ T8536]  should_fail_ex+0x265/0x280
[  118.631990][ T8536]  should_fail+0xb/0x20
[  118.632007][ T8536]  should_fail_usercopy+0x1a/0x20
[  118.632111][ T8536]  _copy_from_user+0x1c/0xb0
[  118.632161][ T8536]  kstrtouint_from_user+0x69/0xf0
[  118.632285][ T8536]  ? 0xffffffff81000000
[  118.632298][ T8536]  ? selinux_file_permission+0x1e4/0x320
[  118.632318][ T8536]  proc_fail_nth_write+0x50/0x160
[  118.632340][ T8536]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  118.632440][ T8536]  vfs_write+0x269/0x960
[  118.632457][ T8536]  ? vfs_read+0x4e6/0x770
[  118.632472][ T8536]  ? __rcu_read_unlock+0x4f/0x70
[  118.632594][ T8536]  ? __fget_files+0x184/0x1c0
[  118.632616][ T8536]  ksys_write+0xda/0x1a0
[  118.632635][ T8536]  __x64_sys_write+0x40/0x50
[  118.632654][ T8536]  x64_sys_call+0x27fe/0x2ff0
[  118.632800][ T8536]  do_syscall_64+0xd2/0x200
[  118.632830][ T8536]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  118.632874][ T8536]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  118.632899][ T8536]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.633000][ T8536] RIP: 0033:0x7f0cd748d97f
[  118.633013][ T8536] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  118.633026][ T8536] RSP: 002b:00007f0cd5eef030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  118.633042][ T8536] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0cd748d97f
[  118.633053][ T8536] RDX: 0000000000000001 RSI: 00007f0cd5eef0a0 RDI: 0000000000000004
[  118.633065][ T8536] RBP: 00007f0cd5eef090 R08: 0000000000000000 R09: 0000000000000000
[  118.633078][ T8536] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  118.633169][ T8536] R13: 00007f0cd76e6038 R14: 00007f0cd76e5fa0 R15: 00007fff48fe5f78
[  118.633186][ T8536]  </TASK>
[  119.224020][ T8550] binfmt_misc: register: failed to install interpreter file ./file2
[  119.408924][ T8557] openvswitch: netlink: Message has 6 unknown bytes.
[  119.459131][ T8559] loop4: detected capacity change from 0 to 512
[  119.470816][ T8559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.484207][ T8559] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.513430][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.774703][ T8580] binfmt_misc: register: failed to install interpreter file ./file2
[  120.088196][ T8608] binfmt_misc: register: failed to install interpreter file ./file2
[  120.164652][   T29] kauditd_printk_skb: 269 callbacks suppressed
[  120.164705][   T29] audit: type=1326 audit(1758816969.659:4876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bce5beec9 code=0x7ffc0000
[  120.166733][ T8617] can0: slcan on ttyS3.
[  120.171033][   T29] audit: type=1326 audit(1758816969.659:4877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bce5beec9 code=0x7ffc0000
[  120.222962][   T29] audit: type=1326 audit(1758816969.659:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bce5beec9 code=0x7ffc0000
[  120.235755][ T8619] loop4: detected capacity change from 0 to 2048
[  120.246487][   T29] audit: type=1326 audit(1758816969.659:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bce5beec9 code=0x7ffc0000
[  120.276188][   T29] audit: type=1326 audit(1758816969.659:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bce5beec9 code=0x7ffc0000
[  120.299573][   T29] audit: type=1326 audit(1758816969.659:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bce5beec9 code=0x7ffc0000
[  120.322975][   T29] audit: type=1326 audit(1758816969.689:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bce5beec9 code=0x7ffc0000
[  120.346378][   T29] audit: type=1326 audit(1758816969.689:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bce5beec9 code=0x7ffc0000
[  120.369778][   T29] audit: type=1326 audit(1758816969.689:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f0bce5beec9 code=0x7ffc0000
[  120.393158][   T29] audit: type=1326 audit(1758816969.689:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bce5beec9 code=0x7ffc0000
[  120.418226][ T8623] loop2: detected capacity change from 0 to 256
[  120.459836][ T8616] can0 (unregistered): slcan off ttyS3.
[  120.468228][ T8619]  loop4: p1 < > p4
[  120.472709][ T8619] loop4: p4 size 8388608 extends beyond EOD, truncated
[  120.567431][ T8635] loop4: detected capacity change from 0 to 2048
[  120.610465][ T8635]  loop4: p1 < > p4
[  120.622019][ T8635] loop4: p4 size 8388608 extends beyond EOD, truncated
[  120.682855][ T8641] loop2: detected capacity change from 0 to 512
[  120.705654][ T8641] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  120.714006][ T8641] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1875: invalid indirect mapped block 8 (level 2)
[  120.732773][ T8641] EXT4-fs (loop2): Remounting filesystem read-only
[  120.739650][ T8641] EXT4-fs (loop2): 1 truncate cleaned up
[  120.745783][ T8641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.775939][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.841745][ T8651] loop4: detected capacity change from 0 to 2048
[  120.880013][ T8651]  loop4: p1 < > p4
[  120.884429][ T8651] loop4: p4 size 8388608 extends beyond EOD, truncated
[  121.211970][ T8694] binfmt_misc: register: failed to install interpreter file ./file2
[  121.234682][ T8696] binfmt_misc: register: failed to install interpreter file ./file2
[  121.631515][   T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  121.649589][   T10] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  121.834945][   T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  121.849833][   T10] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  121.908887][ T8718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8718 comm=syz.1.1906
[  122.034963][ T8725] binfmt_misc: register: failed to install interpreter file ./file2
[  122.202162][ T8745] __nla_validate_parse: 1 callbacks suppressed
[  122.202177][ T8745] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1917'.
[  122.348483][ T8745] netlink: 'syz.2.1917': attribute type 1 has an invalid length.
[  122.708965][ T8755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1920'.
[  122.980566][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1928'.
[  123.003091][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1929'.
[  123.047761][ T8783] can0: slcan on ttyS3.
[  123.109545][ T8782] can0 (unregistered): slcan off ttyS3.
[  123.360260][ T8796] netlink: 'syz.2.1935': attribute type 4 has an invalid length.
[  123.381894][ T8802] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1937'.
[  123.392281][ T8796] netlink: 'syz.2.1935': attribute type 4 has an invalid length.
[  123.418896][ T8804] FAULT_INJECTION: forcing a failure.
[  123.418896][ T8804] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  123.432265][ T8804] CPU: 0 UID: 0 PID: 8804 Comm: syz.5.1938 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  123.432292][ T8804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  123.432304][ T8804] Call Trace:
[  123.432309][ T8804]  <TASK>
[  123.432316][ T8804]  __dump_stack+0x1d/0x30
[  123.432336][ T8804]  dump_stack_lvl+0xe8/0x140
[  123.432364][ T8804]  dump_stack+0x15/0x1b
[  123.432378][ T8804]  should_fail_ex+0x265/0x280
[  123.432402][ T8804]  should_fail_alloc_page+0xf2/0x100
[  123.432427][ T8804]  __alloc_frozen_pages_noprof+0xff/0x360
[  123.432552][ T8804]  alloc_pages_mpol+0xb3/0x250
[  123.432583][ T8804]  alloc_pages_noprof+0x90/0x130
[  123.432609][ T8804]  __pmd_alloc+0x47/0x470
[  123.432629][ T8804]  handle_mm_fault+0x19d4/0x2c20
[  123.432738][ T8804]  do_user_addr_fault+0x636/0x1090
[  123.432766][ T8804]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  123.432792][ T8804]  exc_page_fault+0x62/0xa0
[  123.432816][ T8804]  asm_exc_page_fault+0x26/0x30
[  123.432853][ T8804] RIP: 0033:0x7f83c1700c03
[  123.432867][ T8804] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  123.432882][ T8804] RSP: 002b:00007f83c029e4a0 EFLAGS: 00010206
[  123.432935][ T8804] RAX: 0000000000000000 RBX: 00007f83c029e540 RCX: 00007f83b7e7f000
[  123.432994][ T8804] RDX: 00007f83c029e6e0 RSI: 000000000000000f RDI: 00007f83c029e5e0
[  123.433006][ T8804] RBP: 000000000000013c R08: 000000000000000a R09: 00000000000003be
[  123.433016][ T8804] R10: 00000000000003d2 R11: 00007f83c029e540 R12: 00007f83c029e540
[  123.433027][ T8804] R13: 00007f83c18ddb80 R14: 0000000000000060 R15: 00007f83c029e5e0
[  123.433043][ T8804]  </TASK>
[  123.433068][ T8804] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  123.609177][ T8804] loop5: detected capacity change from 0 to 256
[  123.634649][ T8809] loop2: detected capacity change from 0 to 512
[  123.652989][ T3293] ==================================================================
[  123.661158][ T3293] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_disable_cb
[  123.669401][ T3293] 
[  123.671727][ T3293] write to 0xffff888103343078 of 2 bytes by interrupt on cpu 1:
[  123.679330][ T3293]  virtqueue_disable_cb+0x7a/0x150
[  123.684419][ T3293]  skb_xmit_done+0x65/0x140
[  123.688916][ T3293]  vring_interrupt+0x155/0x180
[  123.693676][ T3293]  __handle_irq_event_percpu+0x90/0x440
[  123.699214][ T3293]  handle_irq_event+0x64/0xf0
[  123.703868][ T3293]  handle_edge_irq+0x154/0x470
[  123.708611][ T3293]  __common_interrupt+0x60/0xb0
[  123.713461][ T3293]  common_interrupt+0x7e/0x90
[  123.718112][ T3293]  asm_common_interrupt+0x26/0x40
[  123.723111][ T3293]  _raw_spin_unlock_irqrestore+0x3c/0x60
[  123.728740][ T3293]  hrtimer_start_range_ns+0x6e3/0x740
[  123.734093][ T3293]  do_nanosleep+0x79/0x330
[  123.738482][ T3293]  hrtimer_nanosleep+0xdd/0x280
[  123.743306][ T3293]  common_nsleep+0x62/0x80
[  123.747693][ T3293]  __se_sys_clock_nanosleep+0x217/0x250
[  123.753216][ T3293]  __x64_sys_clock_nanosleep+0x55/0x70
[  123.758658][ T3293]  x64_sys_call+0x272d/0x2ff0
[  123.763310][ T3293]  do_syscall_64+0xd2/0x200
[  123.767895][ T3293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.773763][ T3293] 
[  123.776062][ T3293] read to 0xffff888103343078 of 2 bytes by task 3293 on cpu 0:
[  123.783573][ T3293]  virtqueue_disable_cb+0x58/0x150
[  123.788664][ T3293]  start_xmit+0x103/0x17a0
[  123.793053][ T3293]  dev_hard_start_xmit+0x122/0x3e0
[  123.798146][ T3293]  sch_direct_xmit+0x192/0x550
[  123.802884][ T3293]  __dev_queue_xmit+0xe9a/0x2000
[  123.807811][ T3293]  ip_finish_output2+0x77f/0x8b0
[  123.812729][ T3293]  ip_finish_output+0x114/0x2a0
[  123.817570][ T3293]  ip_output+0xbd/0x190
[  123.821714][ T3293]  __ip_queue_xmit+0xb4b/0xb80
[  123.826465][ T3293]  ip_queue_xmit+0x39/0x50
[  123.830867][ T3293]  __tcp_transmit_skb+0x1641/0x1a60
[  123.836062][ T3293]  tcp_write_xmit+0x1210/0x2fd0
[  123.840896][ T3293]  __tcp_push_pending_frames+0x6d/0x1b0
[  123.846421][ T3293]  tcp_push+0x311/0x330
[  123.850558][ T3293]  tcp_sendmsg_locked+0x2458/0x2c00
[  123.855761][ T3293]  tcp_sendmsg+0x2f/0x50
[  123.859976][ T3293]  inet_sendmsg+0x76/0xd0
[  123.864312][ T3293]  __sock_sendmsg+0x102/0x180
[  123.868967][ T3293]  sock_write_iter+0x165/0x1b0
[  123.873728][ T3293]  vfs_write+0x52a/0x960
[  123.877946][ T3293]  ksys_write+0xda/0x1a0
[  123.882162][ T3293]  __x64_sys_write+0x40/0x50
[  123.886726][ T3293]  x64_sys_call+0x27fe/0x2ff0
[  123.891378][ T3293]  do_syscall_64+0xd2/0x200
[  123.895864][ T3293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.901730][ T3293] 
[  123.904030][ T3293] value changed: 0x0000 -> 0x0001
[  123.909023][ T3293] 
[  123.911320][ T3293] Reported by Kernel Concurrency Sanitizer on:
[  123.917445][ T3293] CPU: 0 UID: 0 PID: 3293 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
SYZFAIL: failed to send rpc
fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe)
[  123.927309][ T3293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  123.937339][ T3293] ==================================================================
[  123.955623][ T8812] can0: slcan on ttyS3.
[  123.966099][ T8809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.031254][ T8811] can0 (unregistered): slcan off ttyS3.
[  124.048912][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1940'.
[  124.367278][ T8807] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.650772][   T51] bond0 (unregistering): Released all slaves
[  124.693389][   T51] hsr_slave_0: left promiscuous mode
[  124.699050][   T51] hsr_slave_1: left promiscuous mode
[  124.704565][   T51] batman_adv: batadv0: Removing interface: veth1_vlan
[  125.002761][   T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.052361][   T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.091397][   T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.171143][   T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.231690][   T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.292131][   T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.351278][   T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.392006][   T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.451991][   T51] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.492075][   T51] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.561792][   T51] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.631795][   T51] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.681330][   T51] bridge_slave_1: left allmulticast mode
[  125.686967][   T51] bridge_slave_1: left promiscuous mode
[  125.692640][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.700408][   T51] bridge_slave_0: left allmulticast mode
[  125.706032][   T51] bridge_slave_0: left promiscuous mode
[  125.711662][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.719998][   T51] bridge_slave_1: left allmulticast mode
[  125.725622][   T51] bridge_slave_1: left promiscuous mode
[  125.731395][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.739055][   T51] bridge_slave_0: left allmulticast mode
[  125.744696][   T51] bridge_slave_0: left promiscuous mode
[  125.750361][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.758790][   T51] bridge_slave_1: left allmulticast mode
[  125.764518][   T51] bridge_slave_1: left promiscuous mode
[  125.770354][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.778067][   T51] bridge_slave_0: left allmulticast mode
[  125.783722][   T51] bridge_slave_0: left promiscuous mode
[  125.789582][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.901437][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.911184][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.920449][   T51] bond0 (unregistering): Released all slaves
[  126.091289][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  126.100808][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.110109][   T51] bond0 (unregistering): Released all slaves
[  126.181227][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  126.190533][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.199736][   T51] bond0 (unregistering): Released all slaves
[  126.262286][   T51] tipc: Left network mode
[  126.267905][   T51] IPVS: stopping backup sync thread 6448 ...
[  126.274653][   T51] hsr_slave_0: left promiscuous mode
[  126.280396][   T51] hsr_slave_1: left promiscuous mode
[  126.286087][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.293443][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.300858][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.308215][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.316379][   T51] hsr_slave_0: left promiscuous mode
[  126.322111][   T51] hsr_slave_1: left promiscuous mode
[  126.327623][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.335011][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.342428][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.349803][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.358265][   T51] hsr_slave_0: left promiscuous mode
[  126.363961][   T51] hsr_slave_1: left promiscuous mode
[  126.369631][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.376984][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.384370][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.391765][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.405140][   T51] veth1_vlan: left promiscuous mode
[  126.410452][   T51] veth0_vlan: left promiscuous mode
[  126.416060][   T51] veth1_vlan: left promiscuous mode
[  126.421298][   T51] veth0_vlan: left promiscuous mode
[  126.499281][   T51] team0 (unregistering): Port device team_slave_1 removed
[  126.508602][   T51] team0 (unregistering): Port device team_slave_0 removed
[  126.533851][   T51] pimreg (unregistering): left allmulticast mode
[  126.556105][   T51] team0 (unregistering): Port device team_slave_1 removed
[  126.565365][   T51] team0 (unregistering): Port device team_slave_0 removed
[  126.606660][   T51] team0 (unregistering): Port device team_slave_1 removed
[  126.615514][   T51] team0 (unregistering): Port device team_slave_0 removed
[  126.642636][ T3359] lo speed is unknown, defaulting to 1000
[  126.648363][ T3359] infiniband syz2: ib_query_port failed (-19)