last executing test programs:

5.739831422s ago: executing program 1 (id=833):
set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a8", 0x31}], 0x1}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(0x0, 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x989046, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYRES8=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000680383989f93ec5991397ac5370588e65e1507de646d41945f8ea3ba2291cd1c5077fdf9922ec9d72a232b19d4b4e5a92dfdb7ec81e9295a9cb896b22c45bc38aee2ba193774068a3e35493f94005342da29c006ae690adf934eb340c612499fa5616791ec60ff6b36c165165759db", @ANYRES8], 0x48)
socket$kcm(0x21, 0x2, 0x2)
open_tree(0xffffffffffffff9c, &(0x7f0000000540)='\x00', 0x89901)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00120000009404006c0012800b00010062726964676500005c0002800c001e00000000000000000005002a00ff0000000500260001000000050019000000000008001a00d80300000c001f0000000000000000000500240000000000050024000100000008001a0007000000050007000700000008000a00", @ANYRES32=r3], 0x9c}}, 0x40)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0)
syz_clone(0x41000080, 0x0, 0x0, 0x0, 0x0, 0x0)

5.689297124s ago: executing program 1 (id=835):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
r3 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b0, 0x2c0, 0x0, 0x2c0, 0x138, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xff, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xf, 0x7b7b, @remote, 0x4e22}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410)
io_uring_register$IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f00000002c0)={0x0, 0xe0c, 0x2000, 0x2, 0x316}, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, &(0x7f0000000140), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xff000000, 0xffffff00, 0xff000000], [0x0, 0xff000000, 0x0, 0xffffffff], 'ip6gre0\x00', 'sit0\x00', {}, {0xff}, 0x2, 0x9, 0x5, 0x10}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x1, 0x1}, {0x0, 0x2}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x18, 0x9, 0x9, 0x3ff, 'pptp\x00', 'syz0\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10)
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000200), 0x4)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x90}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

5.626433087s ago: executing program 1 (id=838):
open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x33, 0x39, 0x37, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x63, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x0, 0x479, &(0x7f0000001300)="$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")

5.580723759s ago: executing program 1 (id=840):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@nobarrier}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$eJzs28tvG1UXAPAzfrRfX19CVR59AIGCqHgkTVpKF2xAILEACQkWZRmStCp1G9QEiVYRBITKCqFK7BFLJP4CVrBBwAqJLexRpQpl08LKaOyZxHYcNzFOnOLfT5r23plr3XM8c+07c+MABtZI+k8SsTcifouIoXq1ucFI/b/bSwtTfy0tTCVRrb7xZ1Jrd2tpYSpvmr9uT14pRRQ+SeJwm37nrly9MFmpzFzO6mPzF98dm7ty9ZnzFyfPzZybuTRx+vTJE+PPnZp4tid5pnndOvTB7JGDr7x1/bWpM9ff/umbJM+/JY8eGel08PFqtcfd9de+hnJS6mMgbEixPkyjXBv/Q1GMlZM3FC9/3NfggE1VrVar9619eLEK/Icl0e8IgP7Iv+jT+99826Kpx7Zw84X6DVCa9+1sqx8pRSFrU265v+2lkYg4s/j3l+kWm/McAgCgyXfp/OfpdvO/QjQ+F/p/toYyHBH3RMT+iDgVEQci4t6IWtv7I+KBDfbfukiyev5TuNFVYuuUzv+ez9a2mud/+ewvhotZbV8t/3Jy9nxl5nj2nhyL8s60Pt6hj+9f+vXztY41zv/SLe0/nwtmcdwo7Wx+zfTk/GRziN27+VHEoVK7/JPllYAkIg5GxKEu+zj/5NdH1jp25/w76ME6U/WriCfq538xWvLPJZ3XJ8f+F5WZ42P5VbHaz79ce32t/v9V/j2Qnv/dba//5fyHk8b12rmN93Ht90/XvKfp9vrfkbzZtO/9yfn5y+MRO5JX60E37p9oaTex0j7N/9jR9uN/f6y8E4cjIr2IH4yIhyLi4Sz2RyLi0Yg42iH/H1987J3u899caf7TGzr/K4Ud0bqnfaF44Ydvmzod3kj+6fk/WSsdy/Ysf/51sJ64uruaAQAA4O5TiIi9kRRGl8uFwuho/W/4D8TuQmV2bv6ps7PvXZqu/0ZgOMqF/EnXUMPz0PHstj6vT7TUT2TPjb8o7qrVR6dmK9P9Th4G3J4otR3/qT+K/Y4O2HR+rwWDy/iHwWX8w+Ay/mFwtRn/u/oRB7D12n3/f9iHOICt1zL+LfvBAHH/D4PL+IfBZfzDQJrbFXf+kbyCwqpCFLZFGOssfFbeFmHcRYV+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xj8BAAD//3g65pw=")
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001)
renameat2(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4)

5.485960373s ago: executing program 1 (id=841):
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, 0xffffffffffffffff, 0x308000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000580)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kmem_cache_free\x00', r0}, 0x18)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='sched_switch\x00', r5, 0x0, 0xb5b}, 0x18)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x22047cb, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSaOxpQWVhRuNJsZgNNEFLms7kIaBGlqNIJFiDG5MDImujUujf4E7Y2LUlYlb3bgyJETZALqpuXfuLdNpp1A6ZWrn80lue869Z+ac79zXuefMBNCxBrI/ScS2iPg1Ivpq2YUFBmr/rl05O379ytnxJObmXvszyctdvXJ2vCxavm5rkRlMI9IPk6KShaZPnzk+Vq1WThX54ZkTbw1Pnz7zxDsnxo5VjlVOjh46dPDAyNNPjT7ZkjizuK7ueX9q7+4X37j48viRi2/++HXW3m3F9vo4WmUgC/yvuVzd6vxjerTVlbXZ9rp00t3GhrAiXRGR7a6e/Pzvi664sfP64oUP2to4YE1l96ZNzTfPzgEbWBLtbgHQHuWNPnv+LZc71PVYFy4/W3sAyuK+Viy1Ld2RFmV6Gp5vW2kgIo7M/v15tsQajUMAANT7ePyzw70R8d71r17K+h5981vSuCf//3v+d0cxh9IfEf+PiJ0RcVdE7IqIuyPysvdGxH2rbM/i/k96aZVvuays//dMMbe1sP9X9v6iv6vIbc/j70mOTlYr+4vPZDB6NmX5kWXq+Pb5Xz5ptq2+/5ctWf1lX7Box6XuhgG6ibGZsbxT2gKXz0fs6V4q/mR+JiCJiN0RsWdlb72jTEw+9uXeZoVuHv8yWjDPNPdFFt5sFv9sNMRfSurnJycXzU8Ob45qZf9weVQs9tPPF15tVv9AzN1+/C1wuRL/xMLjv7FIf1I/Xzu98jou/PZR02ea2zz+097k9XyeubdY9+7YzMypkYje5HCeX7B+9MZry3xZPjv+B/ctff7vLF6TxX9/RGQH8QMR8WBEPFS0/eGIeCQi9i0T/w/PNd9Wxh9pm/b/+YiJJa9/88d/w/5feaLr+PffNKv/1vb/wTw1WKzJr383sVRzsstFYwNX89kBAADAf0Wafwc+SYfm02k6NFT7Dv+u+F9anZqeefzo1NsnJ2rfle+PnrQc6eorxkOrk9XKSDJbvGNtfHS0GCsux0sPFOPGn3ZtyfND41PViTbHDp1ua5PzP/NHV7tbB6yxLUuuHe294w0B2qBxHj1dmD33SrgYwEbl99rQuZqf/5tjcXcA2Ejc/6FzLXX+n2vImwuAjcn9HzqX8x86VPpdu1sAtJH7P3Sk1fyufw0Tm9dHM9qTWK87JU9ElIl0XbRHYqWJLbdWuN1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA///Xm+pu")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
socket$rxrpc(0x21, 0x2, 0x2)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain)
add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r6)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000000), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='pids.current\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)

3.000945381s ago: executing program 0 (id=893):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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")

2.969751082s ago: executing program 0 (id=894):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00'}, 0x18)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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")
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r0], 0x0)

2.942295983s ago: executing program 0 (id=895):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

2.921327804s ago: executing program 0 (id=896):
set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a8", 0x31}], 0x1}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x989046, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYRES8=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000680383989f93ec5991397ac5370588e65e1507de646d41945f8ea3ba2291cd1c5077fdf9922ec9d72a232b19d4b4e5a92dfdb7ec81e9295a9cb896b22c45bc38aee2ba193774068a3e35493f94005342da29c006ae690adf934eb340c612499fa5616791ec60ff6b36c165165759db", @ANYRES8], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff27)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x956647ed}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100)
open_tree(0xffffffffffffff9c, &(0x7f0000000540)='\x00', 0x89901)
ustat(0x8000000000000001, &(0x7f00000001c0))
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c00000010001fff00"/19, @ANYRES32=0x0, @ANYBLOB="00120000009404006c0012800b00010062726964676500005c0002800c001e00000000000000000005002a00ff0000000500260001000000050019000000000008001a00d80300000c001f0000000000000000000500240000000000050024000100000008001a0007000000050007000700000008000a00", @ANYRES32=r6], 0x9c}}, 0x40)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01"], 0x3c}}, 0x0)
syz_clone(0x41000080, 0x0, 0x0, 0x0, 0x0, 0x0)

2.434760115s ago: executing program 1 (id=903):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8040)
sendmmsg(r1, &(0x7f0000000340)=[{{&(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001540)="34411476acbc95b4a331fac77f743d757dffbdd236283c7fed4ab78e5f201fc233aefc3d38ac3dfe8614e3924f13cfa282115918857a68661cf1e85a8d8d894e939bf46cef66a98adff69a9cf1123904f5d336d008ceca0aa3ca53317d52e02ce3ac3cc83427fdf8477de3869f82d717c826962feb36fcf1c17ee7a8e2dbb6c604789039d69d09bbdfd70edb34411f18c1dda4ae415f1bb39129", 0x9a}, {&(0x7f0000000200)="b9dcdadeef21df99b485c8cc8208b8831bde3c5b41941b32478edfc34262de196ce205903a4555ed7150f78ba8cb853d587d5d2e20a2d22e78a684094f31962577fd92c222542d6da5546c86c65fc5bb93ab9eeabf9d4b7ce694f45305521b1219eb2dee81435d07becc866fbde8ca7564a43285b8e664d4867797a27a4eacc2b2472c7e32ba1fc3b8ff749ac4329db5c294875442026e14b275429318221fce118dd3d3061fffb50d63cb2d061288c4d5b32a4c7f854ef802e2f211fd182a07bd2243e8e55d30fbf6cc7f8843aff75e96a202d1a9efdae3a38ee37d", 0xdc}, {&(0x7f0000001840)="0ff0c514f162751993d9c0602c99f91685a362d909c25a2cff263c52f0471bf34442f5d1d595cd07b6e32e71f7d5d199f0564c2b4126aeaef63f0349e941949ccd35f6443a0fc6eeb78ed87a6bee0541f44d9885142c66ce725e758713a3be8d386f94522b5f2d44791ff8479ff8080c3ff2ccde91add05c28df672078a57f0118f73ff00e66d0f0f769f27fe2a415162b169dc47e34247cfbb74973526c4789192b0bcc1503b9a54ed3f25c1a145cc567d9a6ffd28ba9c0e22f13b7934f714629ed2b1ea45c8bc590cf279ae298b0fe78a86df8cf8dce0723d8347b23ef89485f09f43fc32c41e4ada613ecd87d8c677d3b2201bb1b866d7be4173617a3d01620c951fe0fe29b17e22aa2c70f2561c3ae92011e2c77dddd7fb0caa8bbba278264193f5745f92904b7df1cd6efe15955f73a152ba2dd6497125aad82a27527b2c6d30389f4764daba73ebde6d088c46bb4965b8d742545c2e0780cc0224ecabc07f9c529beebca70895136846247e4dda6f94c38016cbf49f70b49e5e92cd6c2e819d1bcff704685e1f0ace92930289be0545280842998187ed62c35e2c1bd81f830a6d80ad421405e4554f23fd8a99f07775a2c6fe832324bd2dc428db139d4c3fa9bc854fff84f154fb6d916580b05f1c7d8ebbcf0d8725985222dedfeabcae9a597ef3c2c958cd4aa48f164ee65eeec928fad252700c75c44488e3b843f3fafa9ba55bbdbdf3e6cef7edb69b55893aaa71e93017df64d8c24bebae92ff372518265083d2c2cea414bddd0bb437ffc368e65bedc94f12ce7a9f01aee19e917783b23fb88d2d95b6491e3f1319ad3bd55c9a5ad78ce59f13a8bbc9334c495d35b79ab4defe93ed89ca0d939591b644f5f6ad3cfec1918ca96c5a326cc7e3b29209bca22cece73752c267c40bbbbc6c619354413e2ae1f3dc5e43a962bbdcdf6d0d7998c8f4b184fa657509823e802b2ce90b6bb0470a2939fd4cc6895fe65e10e9bc9858c9d2cac52431a7c3a96bd78c68fd82d75255b202e7d6f2f7f965a23fc31b8e6518de0d0db4c0505d10214d6e1876a16230b3be2561d1e9a5eac777e1af75fa5b0dfcc4f9b4ea063a2974aa61855a88ce0659bc26e80a6122bdbfb8280d6c6c2f08c43871db3bfa0539a2d6b1bbe7a34950c3350c376c600c0458cdf052bcd28eb1d789ed2fb96c8977b8166539b3cde170e40543f7cc8fb9402b0f487a6c8b58f13e53b1bdc52cbb8958744665d97d8c5ccc7be88664995f4809ec9689ec118c8151ecfa9b29b920826d3326335c66dff336686d0daa81eb6e26d8c9a1dbe3989305ac67b82cb0a1fef28818c2c640db2d50ef8c8b31772e6eda40aac94ba75a7cfe02be5d5582eaf79db0bda5bd4caf14be624b79b2903a91058a592984bd89dbcaa3c11db679860a7313b784fb13c10e9a65fa60782e7c78e830c06885f74ea444b9a28aa0f5e72074c7ff57424ce8de311172177902e14db6b0da1b41efd8bd9b4b0112459bc6a36e0ed4a58c183b3c9ff9d0c40e0ac9ffe651611b2adb7612b9907fa0b682bee2533787194d8f34fece5d4e31b89d14dd6bb300f0df0f8b9f64cac43bd5732b0ed955b9ba53ac93386617260da973cfbac08d9c6cb65d504f1b70809663705d9737cd458ce5d9dadba41057999cc8aacf13e4b6e87304f40d88ecb18b4ccdab889a0c35540ca3607e3219452371600cfb4c284fa377a54f6f1aeaa99a2ec708e4b3c04757f64a68ebf9a76f088fc25adeaa3fca6a57da39965c1134a34dbe5be6fd771dad7ab2e86bdf970214c7192562e9e021211db418729394cb6f79fa5cfca40529dbd4364e58cd8eb6ef413a45cd8e85b1abef9b06bb990635b3cf4cbc4d154329d79e19422e7fae32d8154d853c559dc1e023f12109499daea1246b1aeb3d5469d7bc8d1c29c0eef2519a6c6d766a34d70d03989d31c3b8022847e2b69987dd485b899d15e54b9bb2ceacf830dac6f163162682a56760d7e251f7bead7281823974000fbe237427a7fd066f74a665282ff26f648bb25581400106263062d5791e6aa65475e802ccd47e0af61dc697d28691df55a49ed1f3d70a403ce9557f829e2920f3f20bdb03710e338e0f12d14a5a336982dbcac8f43298c1b044b801d07316d127dd6ffeb91eef35391c72cfb728e9810355ee08475f3ec5790817faf2b2f761e8e1695210200cd6a869374d5ede75732ea33c5b7bdc0c723c21e38e3c3b6ef89ebfc52dd48fe853f9ddc1c77e6cbe8517f50cd240cbe941ab5808400d22bd03e4ffbb6f340e26cf90d4032c0dccefdf0b2150e36369a347719cd23e599c1949fc66ce4335cf8b3b29307d5a61e88a3b525aa1305cbdf86a63ab9ed99b96ff3e51bf455141abf06cc1ae93c3f2ad645f861267b3f3d86e7fc551c7edec417d81a4634a1f93c2f89e1b039145e679ed7a31e3eab2d708b9f125f4e72c519cda4e728e0aa5f801807e1fe7b9e30bef447681431d8c6b99d47e912546e026c7301d445e7feb209ddf517c8f689cb8b8e62bd525564cb0445bace0c1b68ef51b259cf17198074d6ad09ec26444403aa62a9ca157fc540bba5ec3ef9d1d0794a6c4bfec0aacd3ca846bdecd0adc1348a6834922250bd65287cda6afe0cb38e52be7716d73d4a3d4558302770e31e8712e30711c6783503a9378212c9d781845d991261d53feef9a52badd9d4f1b67e0057bb450a80fd488f98ec7f76655c0843976a37d80da5f7334c345ffa0013c9b8bbae05f5af8d2ffe2c05b87acdbf83dda69f16bbfd346a64562caed4bcc0cc4e955061ed6270211cc0adb54b49b795e31f38a80273f8665a5a5b23200bbe89f77b36ce3e9fed2984a093f2b92693c1c7fff4434a4c7352458a043f3478a6f102936a4a906a4012b21940581ef54e1ab236f3aa1cd2823212e5f41bab759990596fa7b4180439bee57bb0d8827d3d6de53d72e8ebd32ffc509fdecd3026e6751c810479ba6d3911653561c13850cbc966f87ab169223c4e541ccf6c312b08251debcead75b8c1bf3031afc0a8f09249b6890295285c9a380377a208a53ead6e6cb5cbfd9535f0e0a6415d5d454714d88a5b93dc42d32ce9ea88a531b1b6c867e9df7f00e6f589fafe01aca3cd126a2513f9ac8e9b801e8bedaee5374ff897ce457bf7a1598de33417ced296cc19d07241bd20efd61e87d55d531679c346e00196dd0da577f8ea6052c393b307e88b6caddbf565bd970df8566ac58bb1d82d875a5bb2576b08daadb07f31647c413cfaf192e053b5b989da12e9c8fff2bdb2f7546a1d3bb25efd57d094c363b9d6ed5caf5320adfc612da5871ac39ae99a9888f1219f2852e91e564960b92042ef5b4d29b8c21c5757c9b5cd07cded40940eeadb889a1a59d777bae6c6f52d976c3a1ed605ecf33cac60531714ed9c56ddf0b69bda75b7f7dbb7b38ca863d89ff1775a1f1eb9415fe26a8303f7ffc286c1227ed6970f212e014a43c027d2e3760ae6efd8cdfe0613c9fd9ac17736b04d05947defeb7a31eb35643b6b911ac3da96b272a2363276a2b149293f97cb1b2565064fe9a61928336d89bfad6bf80dac107b3ffb96f0d75e33a7ef560250c3b134ee43e77b9a7842633624b3539e30ef0705db5b161c7ea500583b9a13ef53803ceff1453a4a7637d4f131dd85e22f594d19d5185f28a7322e94cc956f82ece85a69df15d6e7e275fb5671f0d38e16e0749fd7bc69c8902be65368e6b4a0cbd25b2fb46b1f06dccf8d4b74d1a08a000025892a9551212a73c97f2bd3ea00b413121d12a0534259d9791f493fea43eaedf5bcbde7c2c0ebd478df316efae1743dd453399270e983a7575d1cec25344e16a3918fb0019f343e1acff7b879e89214a8baa697c85f48bd9dcb92c31e126fb3c4a89c222d98e99da00162d00788c67e47e4236aae0bacac9292f06b9cf510623a3d90ab7c825cfc5f577448529ca9c47477651f7a97d6cce72ea6f103a51ed51c59013c940936ca1dfa88507d88093588d54b5753b7750c893570096daabc6c51af30ae662a2094bfa94f84f3fea5753a4eafb225059f9f1c8fe68f28238ad573c617bb0b3ca57a83f3acdbb55e3fef0dfbf9336fc13398059304e718181c0d0f5621474b73bb9558685d5d9a9f7dbdb21dde94b38cd48871204fc0964eba8a006ecd65c1013ebb061fa66303842d85857eadde86eb13d4f2ce2991271a246399217df1548d40da700c2a24ba1275e2258d6d174a1cf90cb5d4b5beaea680ff4ec690ab84bc9cf51ef1e2a7b1bb684ca37b447698e490c455548d0a33df27b8f5a2044124f06a8e161595e76a5f7cd285b81428ba9db15d47a2179b1b3613b4aa6450321d81aba0ca81ef1d27b3f2236a9a49ecb7c5f46b2f58661a6b41629fe8fa788289ca5a2755b27407d488d02173a198d7c88e5d8e1e7e56ba7d01aab5f1794a45a3fc63d3470ce5e8dfecd5bec3b6ad9256847f09b1a7a70079e64e47f5e9570f4fed6634f1402e18d66b9959fd019c5b91c1ab90868a45e23fc9f9cad688353ebd5bbf031d3db5bf43833714f4df84a34ca3773a12770f7af11a64a1245d3a17a61616f9285ab5de32f3ed80934d8d9df8315cce25e5decaaeba129b6c5023be397490c28ce1a7a0be62b9921c6067e4eede9516156730cdeb9ca85d096063063784b809a486c288eca81dfc0c2f35742ba797c2eb3301ba1cb8761f63146916c7efdccc2c3e5a9184ad4abb6e51fb1891663f486b5c450d2f9767b7cc06bc7684a063956d92296da231bfaa840b65268e357690d7ecb9461d10fde5eb0a5f044c145a248bbce592c7a95627c51f2d5698c5dd7ac94a01edfde98efec2f218c5f3419c8c4e9c0339f72489831cd61c4040aac7c5faef69614a9bc292d7eb082db00385b2566a3ad60f38e0e53f3319863b5b", 0xda2}], 0x3, &(0x7f00000003c0)=ANY=[], 0x110}}], 0x1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6)

2.421073195s ago: executing program 0 (id=905):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}})
splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0)
write$P9_RLERRORu(r3, &(0x7f0000000100)=ANY=[], 0xe)

2.208903564s ago: executing program 0 (id=911):
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, 0xffffffffffffffff, 0x308000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000580)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kmem_cache_free\x00', r0}, 0x18)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='sched_switch\x00', r5, 0x0, 0xb5b}, 0x18)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x22047cb, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSaOxpQWVhRuNJsZgNNEFLms7kIaBGlqNIJFiDG5MDImujUujf4E7Y2LUlYlb3bgyJETZALqpuXfuLdNpp1A6ZWrn80lue869Z+ac79zXuefMBNCxBrI/ScS2iPg1Ivpq2YUFBmr/rl05O379ytnxJObmXvszyctdvXJ2vCxavm5rkRlMI9IPk6KShaZPnzk+Vq1WThX54ZkTbw1Pnz7zxDsnxo5VjlVOjh46dPDAyNNPjT7ZkjizuK7ueX9q7+4X37j48viRi2/++HXW3m3F9vo4WmUgC/yvuVzd6vxjerTVlbXZ9rp00t3GhrAiXRGR7a6e/Pzvi664sfP64oUP2to4YE1l96ZNzTfPzgEbWBLtbgHQHuWNPnv+LZc71PVYFy4/W3sAyuK+Viy1Ld2RFmV6Gp5vW2kgIo7M/v15tsQajUMAANT7ePyzw70R8d71r17K+h5981vSuCf//3v+d0cxh9IfEf+PiJ0RcVdE7IqIuyPysvdGxH2rbM/i/k96aZVvuays//dMMbe1sP9X9v6iv6vIbc/j70mOTlYr+4vPZDB6NmX5kWXq+Pb5Xz5ptq2+/5ctWf1lX7Box6XuhgG6ibGZsbxT2gKXz0fs6V4q/mR+JiCJiN0RsWdlb72jTEw+9uXeZoVuHv8yWjDPNPdFFt5sFv9sNMRfSurnJycXzU8Ob45qZf9weVQs9tPPF15tVv9AzN1+/C1wuRL/xMLjv7FIf1I/Xzu98jou/PZR02ea2zz+097k9XyeubdY9+7YzMypkYje5HCeX7B+9MZry3xZPjv+B/ctff7vLF6TxX9/RGQH8QMR8WBEPFS0/eGIeCQi9i0T/w/PNd9Wxh9pm/b/+YiJJa9/88d/w/5feaLr+PffNKv/1vb/wTw1WKzJr383sVRzsstFYwNX89kBAADAf0Wafwc+SYfm02k6NFT7Dv+u+F9anZqeefzo1NsnJ2rfle+PnrQc6eorxkOrk9XKSDJbvGNtfHS0GCsux0sPFOPGn3ZtyfND41PViTbHDp1ua5PzP/NHV7tbB6yxLUuuHe294w0B2qBxHj1dmD33SrgYwEbl99rQuZqf/5tjcXcA2Ejc/6FzLXX+n2vImwuAjcn9HzqX8x86VPpdu1sAtJH7P3Sk1fyufw0Tm9dHM9qTWK87JU9ElIl0XbRHYqWJLbdWuN1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA///Xm+pu")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
socket$rxrpc(0x21, 0x2, 0x2)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain)
add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r6)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000000), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='pids.current\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)

1.792151382s ago: executing program 3 (id=921):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c00000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008400000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00'}, 0x10)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099", 0x36, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000000440)={0xf, {"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", 0x1000}}, 0x1006)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10)
r4 = open(0x0, 0x44c81, 0x90)
fcntl$setlease(r4, 0x400, 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB="0800000001000000000000000000000000040000b43b0300df8ba83d28b3c817f51db499a8090dce3fad1634b2ab5b4937e2f6c033a82110ab879c9310fffa89d12cd8773dbf1b38b9334269b4dfaef6263219bb9d233120563c6bcb99edff647f38c31e580d240b599605f0c09b0b0c40572190fd20392d9fe7daedf21b00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x14, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x2a080, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000900000061114c00000000008500000003000089a600000000020000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.743797565s ago: executing program 3 (id=923):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)

1.731950795s ago: executing program 3 (id=924):
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"/3816], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
unshare(0x2040400)
inotify_rm_watch(0xffffffffffffffff, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r2 = getpid()
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x49, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fbdbdf25250000000e00ec006e657464657673696d000000290002006e657464657673696d30000008008b00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1301, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x5022, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}})
ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000100))

972.491688ms ago: executing program 4 (id=940):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

954.060879ms ago: executing program 4 (id=941):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

935.21097ms ago: executing program 4 (id=942):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0xa5144411, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioprio_set$pid(0x2, 0x0, 0x4007)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3fb}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x8000, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x3}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000, 0x0, 0xe}, {0x3, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x2}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {0x1}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000001040)='ns/net\x00')
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x54a31, 0x823}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8ae257a062cc3564)
write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})

854.729953ms ago: executing program 3 (id=944):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x20000000000000b)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r3, 0x0, 0x100000400000}, 0x18)
unshare(0x8000000)
semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0)
unshare(0x2c040000)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x0, 0x100000}, 0x8)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x40000003, 0xfffffffffffffffe}, 0x10001, 0x0, 0x0, 0x0, 0x154, 0x10000000, 0xfff, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x2)

853.129973ms ago: executing program 3 (id=945):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xfc, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200, 0x2, 0x40, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
close(r1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x10004}}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
chdir(&(0x7f0000000240)='./file0\x00')
r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getdents64(r4, &(0x7f0000000240)=""/87, 0x57)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
getdents(r3, 0x0, 0xfffffffffffffd46)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10)
timer_create(0x3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
timer_gettime(r6, &(0x7f0000000380))
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0)
close(r8)
ioctl$PIO_UNIMAP(r7, 0x4b67, 0x0)

846.703664ms ago: executing program 2 (id=946):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)

834.986814ms ago: executing program 2 (id=947):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3a, 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x141000, 0x0)
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x1})
io_uring_enter(r2, 0x847ba, 0x2000, 0xe, 0x0, 0x0)

791.138396ms ago: executing program 2 (id=948):
open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x33, 0x39, 0x37, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x63, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x0, 0x479, &(0x7f0000001300)="$eJzs3MtvG8UfAPDvOo82fcW/qj+gDyAIEKVA0qSl9MAFBBIHkJDgUI4hSatSt0FNkEhVQUCoHFElTlwQRyT+Ak5wQcAJCQ4c4I4qVaiXFk5Gm91NHdfOw3Xstv58pHVmdtee+Xpn7NmdeAPoWSPpQxKxIyL+iIjhLLtyh5Hsz41rF6f+uXZxKolq9Y2/k/508/VrF6eKXYvnbS8y/RGlT5LY36DcuYULZyYrlZnzeX5s/uy7Y3MLF545fXby1MypmXMTx48fPTL+3LGJZ9sSZxrX9X0fzB7Y+8pbl1+bOnH57Z++SYr46+K4xW8tFTmy2sbHq9WWXvQONJg+7KxZkbUM7gZ9WTeNgaX+Pxx9cfPgDcfLH3e1csCmqlar1fuab16sAvewJLpdA6A7ii/69Py3WDo09LgjXH0hOwFK476RL9mW/ijl+wzUnd+200hEnFj898t0ibWuQwAAtMF36fjn6Ubjv1LUXhfalc+hlCPifxGxOyKORcSeiPh/xNK+90fEAxssv36S5NbxT+lKS4GtUzr+ez6f21o5/itGf1Huy3M7l+IfSE6erswczt+TgzGwJc2Pr1LG9y/9+lmzbbXjv3RJyy/Ggnk9rvRvWfmc6cn5yduJudbVjyL29TeKP1meCUgiYm9E7GuxjNOHvj7QbNva8a+iDfNM1a8insiO/2LUxV9IsvnJcpP5ybGtUZk5PFa0ihiqefnF9ND9/Mul15uVf1vxt0F6/Lc1bP/L8ZeT2vnauY28+hdPpo+X/vy06TlNq+1/MHlzxbr3J+fnz49HDCavZpWuXT9Rt9/Ezf3T+A8+2rj/746b78T+iEgb8YMR8VBEPJzX/ZHfd635Lvz44mPvtB7/5krjn17/8a8ORxQNYWEw8sTymsaJvjM/fLui0HLj+Hc1Pf5Hl1IH8zXr+fxbT7022poBAADgblWKiB2RlEaX06XS6Gj2P/x7YlupMjs3/9TJ2ffOTWe/ESjHQKm40jVccz10PD+tL/ITdfkj+XXjz/uGlvKjU7OV6W4HDz1ue5P+n/qrr9u1Azad32tB79L/oXfp/9C7sv5fe7a/tWt1ATqrwff/UDfqAXReo/H/h+t54o721wXorLr+b9oPeojrf9C7Wun/PjPg3tC/2i2bBztaFaBz5oZi7R/J32uJrRu4QcDdlyjuXLMZRQykreVQRCxciFLXI5XYxES3P5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa478AAAD//9OC4M8=")

758.097597ms ago: executing program 2 (id=949):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r2}, 0x18)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa083de, &(0x7f0000000480)={[{@sb={'sb', 0x3d, 0x40000100}}], [{@dont_appraise}, {@subj_type={'subj_type', 0x3d, 'Mxu4(M\xea\x85H\v\xab\x1c\x00'}}, {@appraise}, {@dont_measure}, {@fowner_gt}, {@context={'context', 0x3d, 'user_u'}}]}, 0xff, 0x474, &(0x7f00000012c0)="$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")
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r4, 0x6, 0x3, &(0x7f00000000c0)=0x5da, 0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'})
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c)
get_robust_list(0x0, 0x0, 0x0)
setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1, 0xe1}, 0x8)
sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)="08fb51a124ad34f10c81e54a399562175ffe9e9f602cc4eb77a6bafcbb3f0379d9352be639670978d928b5e6ad3e18d469fae196ab3cff4898454518101982f52e923a0915f3f35c1c61177dee2f642a4f", 0x51}], 0x1}, 0xc090)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008000000b70d000000000000850400003400000095"], &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c000180060006008035", @ANYRESHEX=r3, @ANYRESOCT=r1], 0x24}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r8)
close_range(r6, 0xffffffffffffffff, 0x0)
symlink(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='./file0\x00')
lsetxattr$system_posix_acl(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)='system.posix_acl_access\x00', &(0x7f0000000080)=ANY=[@ANYRES16=r5], 0x24, 0x1)

129.277354ms ago: executing program 2 (id=950):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in=@empty, @in6=@private0, 0x4e22, 0x0, 0x4e24, 0x12e, 0xa, 0x20, 0x20, 0x2c}, {0x4, 0xffff, 0x9, 0x7, 0x5ed, 0x7, 0x2, 0x3}, {0xfffffffffffff4d8, 0x3, 0x2e, 0x7}, 0x7, 0x6e6bbe, 0x2, 0x1, 0x1, 0x1}, {{@in=@loopback, 0x4d4, 0x32}, 0xa, @in6=@mcast2, 0x3501, 0x3, 0x1, 0x7, 0xffffffff, 0x3, 0x8}}, 0xe8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRESHEX], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @link_local})
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x4af}, 0x38)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xce)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r3, 0x0, 0x4}, 0x18)
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000008000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="000000e100000002000800000000000000180000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]})
semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="7f000018000000000000000000000000181100000cf094c5ef0d33da818aabd06ac16a0f6b94c0cde409d01965ac2e9a", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000002000000000000110400000000000000000000000000000200000000020000000000000802000000020000000000000e0300000000000000f6ff00"], 0x0, 0x53}, 0x28)

69.054447ms ago: executing program 4 (id=951):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x10, <r0=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xb, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
socket(0x2, 0x2, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0)
close(r4)

48.717238ms ago: executing program 4 (id=952):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

44.948318ms ago: executing program 2 (id=953):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5}, [@mark={0xc}]}, 0x34}}, 0x4040) (async)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5}, [@mark={0xc}]}, 0x34}}, 0x4040)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001100a902000000080000000000000000"], 0x14}, 0x1, 0x6000000}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000080000000000000003000000180600000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4)
r6 = dup2(r5, r5)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8})
ioctl$BLKTRACESETUP(r6, 0x1276, 0x0)
r7 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', <r8=>0x0})
socket$netlink(0x10, 0x3, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x9c, 0x24, 0xd0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x200, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async)
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x9c, 0x24, 0xd0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x200, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000000)={0x0, 'wlan1\x00', {}, 0x2})
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10)
syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000038d3b2e7deec0000000000019078ac1e0001ac1414aa05009078000000004500000000000000006c0000ac1414bbe000000209eeb37af82558a40d00720837b4da856528d7c407a95d8303db"], 0x0) (async)
syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000038d3b2e7deec0000000000019078ac1e0001ac1414aa05009078000000004500000000000000006c0000ac1414bbe000000209eeb37af82558a40d00720837b4da856528d7c407a95d8303db"], 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]})
memfd_create(0x0, 0x4) (async)
memfd_create(0x0, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000056ffffff00040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000050b1dae56a7aa53854f0fae116fae52c00000000000000"], 0x50)
ustat(0xd, 0x0)
setrlimit(0x0, &(0x7f0000000400)={0x180, 0x5})
io_setup(0x2004, &(0x7f0000000680))

28.089429ms ago: executing program 4 (id=954):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @remote}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ffffff, {0x0, 0x0, 0x0, r3, {0x7, 0x9}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000002000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r6}, 0x18)
write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074", 0x15)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r7, 0x58, &(0x7f0000000500)}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000006c0)=@newtaction={0xa0, 0x30, 0x9, 0x100000, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xa, 0x0, 0x0, 0x1}}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {0x0, 0x0, 0x8, 0x43}, {0x3, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x84}, {}, {0x0, 0x0, 0x0, 0xafcd}, {0x6, 0x0, 0x1}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

0s ago: executing program 3 (id=955):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@nobarrier}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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")
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001)
renameat2(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4)

kernel console output (not intermixed with test programs):

4973][ T4311] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 0000000000000009
[   46.474984][ T4311] RBP: 00007f2ee140f090 R08: 0000000000000000 R09: 0000000000000000
[   46.474996][ T4311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   46.475006][ T4311] R13: 00007f2ee2c06038 R14: 00007f2ee2c05fa0 R15: 00007ffc55482f58
[   46.475023][ T4311]  </TASK>
[   46.696894][ T4270] syz.1.249 (4270) used greatest stack depth: 6072 bytes left
[   46.704665][   T29] audit: type=1400 audit(1765177637.519:1828): avc:  denied  { mount } for  pid=4316 comm="syz.3.266" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   46.726781][   T29] audit: type=1400 audit(1765177637.529:1829): avc:  denied  { ioctl } for  pid=4316 comm="syz.3.266" path="socket:[8370]" dev="sockfs" ino=8370 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   46.753186][ T4319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'.
[   46.763232][   T29] audit: type=1400 audit(1765177637.819:1830): avc:  denied  { write } for  pid=4316 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   46.783326][   T29] audit: type=1400 audit(1765177637.819:1831): avc:  denied  { nlmsg_write } for  pid=4316 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   46.802555][ T4325] loop4: detected capacity change from 0 to 128
[   46.804356][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.852580][ T4325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'.
[   46.919470][ T4325] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000)
[   46.928071][ T4325] FAT-fs (loop4): Filesystem has been set read-only
[   46.963666][ T4340] loop2: detected capacity change from 0 to 512
[   46.970938][ T4340] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   46.973988][ T4342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.270'.
[   47.100370][ T4355] netlink: 100 bytes leftover after parsing attributes in process `syz.1.270'.
[   47.253181][ T4325] syz.4.269: attempt to access beyond end of device
[   47.253181][ T4325] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128
[   47.266592][ T4325] Buffer I/O error on dev loop4, logical block 128, lost async page write
[   47.287202][ T4358] dummy0: entered promiscuous mode
[   47.292434][ T4358] macsec1: entered allmulticast mode
[   47.297809][ T4358] dummy0: entered allmulticast mode
[   47.303294][ T4344] syz.4.269: attempt to access beyond end of device
[   47.303294][ T4344] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128
[   47.316650][ T4344] Buffer I/O error on dev loop4, logical block 128, lost async page write
[   47.325437][ T4358] dummy0: left allmulticast mode
[   47.330436][ T4358] dummy0: left promiscuous mode
[   47.345220][ T4344] syz.4.269: attempt to access beyond end of device
[   47.345220][ T4344] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128
[   47.358657][ T4344] Buffer I/O error on dev loop4, logical block 128, lost async page write
[   47.372654][ T4361] FAULT_INJECTION: forcing a failure.
[   47.372654][ T4361] name failslab, interval 1, probability 0, space 0, times 0
[   47.387619][ T4361] CPU: 1 UID: 0 PID: 4361 Comm: syz.1.277 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   47.387650][ T4361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   47.387660][ T4361] Call Trace:
[   47.387663][ T4361]  <TASK>
[   47.387667][ T4361]  __dump_stack+0x1d/0x30
[   47.387720][ T4361]  dump_stack_lvl+0xe8/0x140
[   47.387744][ T4361]  dump_stack+0x15/0x1b
[   47.387754][ T4361]  should_fail_ex+0x265/0x280
[   47.387768][ T4361]  should_failslab+0x8c/0xb0
[   47.387830][ T4361]  __kmalloc_cache_noprof+0x65/0x4c0
[   47.387844][ T4361]  ? init_srcu_struct_fields+0x57/0x600
[   47.387858][ T4361]  ? should_fail_ex+0xdb/0x280
[   47.387877][ T4361]  init_srcu_struct_fields+0x57/0x600
[   47.387889][ T4361]  ? __kmalloc_noprof+0x2b4/0x5a0
[   47.387931][ T4361]  ? hci_alloc_dev_priv+0x24/0xe70
[   47.387943][ T4361]  init_srcu_struct+0x23/0x30
[   47.387955][ T4361]  hci_alloc_dev_priv+0x35/0xe70
[   47.387966][ T4361]  hci_uart_tty_ioctl+0x290/0x5c0
[   47.388018][ T4361]  ? __pfx_hci_uart_tty_ioctl+0x10/0x10
[   47.388034][ T4361]  tty_ioctl+0x83f/0xb80
[   47.388045][ T4361]  ? __pfx_tty_ioctl+0x10/0x10
[   47.388056][ T4361]  __se_sys_ioctl+0xce/0x140
[   47.388082][ T4361]  __x64_sys_ioctl+0x43/0x50
[   47.388118][ T4361]  x64_sys_call+0x14b0/0x3000
[   47.388176][ T4361]  do_syscall_64+0xd8/0x2a0
[   47.388261][ T4361]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.388274][ T4361] RIP: 0033:0x7febd6f8f749
[   47.388283][ T4361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   47.388293][ T4361] RSP: 002b:00007febd59f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   47.388338][ T4361] RAX: ffffffffffffffda RBX: 00007febd71e5fa0 RCX: 00007febd6f8f749
[   47.388345][ T4361] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000007
[   47.388352][ T4361] RBP: 00007febd59f7090 R08: 0000000000000000 R09: 0000000000000000
[   47.388382][ T4361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.388389][ T4361] R13: 00007febd71e6038 R14: 00007febd71e5fa0 R15: 00007ffc43c210d8
[   47.388400][ T4361]  </TASK>
[   47.388543][ T4361] Bluetooth: Can't allocate HCI device
[   47.702590][ T4371] loop3: detected capacity change from 0 to 512
[   47.718536][ T4371] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   47.730122][ T4371] EXT4-fs (loop3): 1 truncate cleaned up
[   47.730775][ T4371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.763560][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.787537][ T4379] netlink: 'syz.4.284': attribute type 10 has an invalid length.
[   47.795432][ T4379] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.284'.
[   47.831939][ T4379] netlink: 'syz.4.284': attribute type 1 has an invalid length.
[   47.839805][ T4379] netlink: 124 bytes leftover after parsing attributes in process `syz.4.284'.
[   47.899806][ T4384] loop1: detected capacity change from 0 to 1024
[   47.907082][ T4384] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   47.918159][ T4384] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   47.928821][ T4384] JBD2: no valid journal superblock found
[   47.934578][ T4384] EXT4-fs (loop1): Could not load journal inode
[   47.944434][ T4388] loop3: detected capacity change from 0 to 1024
[   47.951295][ T4388] EXT4-fs: Ignoring removed orlov option
[   47.972448][ T4388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.107277][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.118968][  T863] Bluetooth: hci0: Frame reassembly failed (-84)
[   48.154055][  T863] Bluetooth: hci1: Frame reassembly failed (-84)
[   48.207268][ T4406] IPv6: NLM_F_CREATE should be specified when creating new route
[   48.215538][ T4418] macvtap0: refused to change device tx_queue_len
[   48.274936][ T4420] netlink: 'syz.3.299': attribute type 1 has an invalid length.
[   48.282647][ T4420] netlink: 224 bytes leftover after parsing attributes in process `syz.3.299'.
[   48.626995][ T4430] FAULT_INJECTION: forcing a failure.
[   48.626995][ T4430] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   48.640110][ T4430] CPU: 0 UID: 0 PID: 4430 Comm: syz.1.302 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   48.640127][ T4430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   48.640134][ T4430] Call Trace:
[   48.640142][ T4430]  <TASK>
[   48.640150][ T4430]  __dump_stack+0x1d/0x30
[   48.640197][ T4430]  dump_stack_lvl+0xe8/0x140
[   48.640218][ T4430]  dump_stack+0x15/0x1b
[   48.640234][ T4430]  should_fail_ex+0x265/0x280
[   48.640253][ T4430]  should_fail+0xb/0x20
[   48.640268][ T4430]  should_fail_usercopy+0x1a/0x20
[   48.640316][ T4430]  _copy_from_user+0x1c/0xb0
[   48.640371][ T4430]  ___sys_sendmsg+0xc1/0x1d0
[   48.640399][ T4430]  __x64_sys_sendmsg+0xd4/0x160
[   48.640421][ T4430]  x64_sys_call+0x17ba/0x3000
[   48.640472][ T4430]  do_syscall_64+0xd8/0x2a0
[   48.640496][ T4430]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.640508][ T4430] RIP: 0033:0x7febd6f8f749
[   48.640518][ T4430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   48.640528][ T4430] RSP: 002b:00007febd59f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   48.640541][ T4430] RAX: ffffffffffffffda RBX: 00007febd71e5fa0 RCX: 00007febd6f8f749
[   48.640548][ T4430] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000009
[   48.640555][ T4430] RBP: 00007febd59f7090 R08: 0000000000000000 R09: 0000000000000000
[   48.640561][ T4430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   48.640568][ T4430] R13: 00007febd71e6038 R14: 00007febd71e5fa0 R15: 00007ffc43c210d8
[   48.640683][ T4430]  </TASK>
[   48.854789][ T4444] loop1: detected capacity change from 0 to 512
[   48.874872][ T4444] EXT4-fs (loop1): too many log groups per flexible block group
[   48.882887][ T4444] EXT4-fs (loop1): failed to initialize mballoc (-12)
[   48.889889][ T4444] EXT4-fs (loop1): mount failed
[   48.962422][ T4454] netlink: 'syz.1.308': attribute type 1 has an invalid length.
[   49.075563][ T4462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.088029][ T4462] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.102779][ T4462] loop1: detected capacity change from 0 to 512
[   49.109491][ T4462] ext4: Unknown parameter 'dont_appraise'
[   49.119507][ T4462] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   49.462529][ T4471] ext4: Unknown parameter 'fsname'
[   49.507666][ T4475] FAULT_INJECTION: forcing a failure.
[   49.507666][ T4475] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   49.521268][ T4475] CPU: 0 UID: 0 PID: 4475 Comm: syz.3.317 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   49.521284][ T4475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   49.521292][ T4475] Call Trace:
[   49.521295][ T4475]  <TASK>
[   49.521300][ T4475]  __dump_stack+0x1d/0x30
[   49.521388][ T4475]  dump_stack_lvl+0xe8/0x140
[   49.521400][ T4475]  dump_stack+0x15/0x1b
[   49.521411][ T4475]  should_fail_ex+0x265/0x280
[   49.521423][ T4475]  should_fail+0xb/0x20
[   49.521463][ T4475]  should_fail_usercopy+0x1a/0x20
[   49.521477][ T4475]  _copy_from_user+0x1c/0xb0
[   49.521568][ T4475]  do_sock_getsockopt+0xf1/0x210
[   49.521592][ T4475]  __x64_sys_getsockopt+0x11e/0x1a0
[   49.521618][ T4475]  x64_sys_call+0x2dc7/0x3000
[   49.521639][ T4475]  do_syscall_64+0xd8/0x2a0
[   49.521741][ T4475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.521754][ T4475] RIP: 0033:0x7f34fe8ef749
[   49.521764][ T4475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   49.521774][ T4475] RSP: 002b:00007f34fd357038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[   49.521786][ T4475] RAX: ffffffffffffffda RBX: 00007f34feb45fa0 RCX: 00007f34fe8ef749
[   49.521793][ T4475] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003
[   49.521821][ T4475] RBP: 00007f34fd357090 R08: 0000200000000600 R09: 0000000000000000
[   49.521828][ T4475] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001
[   49.521835][ T4475] R13: 00007f34feb46038 R14: 00007f34feb45fa0 R15: 00007fff98060f58
[   49.521845][ T4475]  </TASK>
[   50.031270][ T4500] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   50.043728][ T4500] Cannot find add_set index 0 as target
[   50.050231][ T4500] 9pnet_fd: Insufficient options for proto=fd
[   50.073635][ T4502] pimreg: entered allmulticast mode
[   50.080843][ T4502] pimreg: left allmulticast mode
[   50.120657][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   50.200275][ T3581] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   50.246777][ T4519] FAULT_INJECTION: forcing a failure.
[   50.246777][ T4519] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   50.259973][ T4519] CPU: 0 UID: 0 PID: 4519 Comm: syz.2.331 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   50.259997][ T4519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   50.260010][ T4519] Call Trace:
[   50.260017][ T4519]  <TASK>
[   50.260025][ T4519]  __dump_stack+0x1d/0x30
[   50.260050][ T4519]  dump_stack_lvl+0xe8/0x140
[   50.260106][ T4519]  dump_stack+0x15/0x1b
[   50.260127][ T4519]  should_fail_ex+0x265/0x280
[   50.260155][ T4519]  should_fail+0xb/0x20
[   50.260174][ T4519]  should_fail_usercopy+0x1a/0x20
[   50.260199][ T4519]  _copy_from_user+0x1c/0xb0
[   50.260349][ T4519]  do_ipv6_setsockopt+0x124/0x2160
[   50.260381][ T4519]  ? kstrtoull+0x111/0x140
[   50.260399][ T4519]  ? avc_has_perm_noaudit+0xab/0x130
[   50.260475][ T4519]  ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0
[   50.260507][ T4519]  ipv6_setsockopt+0x59/0x130
[   50.260590][ T4519]  udpv6_setsockopt+0x99/0xb0
[   50.260613][ T4519]  sock_common_setsockopt+0x69/0x80
[   50.260630][ T4519]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   50.260647][ T4519]  __sys_setsockopt+0x184/0x200
[   50.260708][ T4519]  __x64_sys_setsockopt+0x64/0x80
[   50.260749][ T4519]  x64_sys_call+0x21d5/0x3000
[   50.260770][ T4519]  do_syscall_64+0xd8/0x2a0
[   50.260850][ T4519]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.260873][ T4519] RIP: 0033:0x7f983dddf749
[   50.260886][ T4519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.260900][ T4519] RSP: 002b:00007f983c847038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   50.260983][ T4519] RAX: ffffffffffffffda RBX: 00007f983e035fa0 RCX: 00007f983dddf749
[   50.260993][ T4519] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004
[   50.261004][ T4519] RBP: 00007f983c847090 R08: 00000000000005e0 R09: 0000000000000000
[   50.261014][ T4519] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001
[   50.261025][ T4519] R13: 00007f983e036038 R14: 00007f983e035fa0 R15: 00007fff39768d38
[   50.261042][ T4519]  </TASK>
[   50.405926][ T4522] 9pnet_fd: Insufficient options for proto=fd
[   50.472017][ T4524] __nla_validate_parse: 1 callbacks suppressed
[   50.472031][ T4524] netlink: 24 bytes leftover after parsing attributes in process `syz.4.333'.
[   50.498892][ T4521] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.515444][ T4528] netlink: 'syz.2.335': attribute type 1 has an invalid length.
[   50.535784][ T4528] bond1: entered promiscuous mode
[   50.540914][ T4528] bond1: entered allmulticast mode
[   50.541724][ T4532] set_capacity_and_notify: 1 callbacks suppressed
[   50.541738][ T4532] loop3: detected capacity change from 0 to 256
[   50.553224][ T4528] netlink: 124 bytes leftover after parsing attributes in process `syz.2.335'.
[   50.572706][ T4532] rdma_op ffff88812fd95580 conn xmit_rdma 0000000000000000
[   50.585052][ T4521] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.682678][ T4521] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.743746][ T4521] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.797537][  T153] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.819211][  T153] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.842210][  T153] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.850748][  T153] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.918905][ T4563] FAULT_INJECTION: forcing a failure.
[   50.918905][ T4563] name failslab, interval 1, probability 0, space 0, times 0
[   50.931743][ T4563] CPU: 0 UID: 0 PID: 4563 Comm: syz.0.350 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   50.931771][ T4563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   50.931784][ T4563] Call Trace:
[   50.931791][ T4563]  <TASK>
[   50.931799][ T4563]  __dump_stack+0x1d/0x30
[   50.931824][ T4563]  dump_stack_lvl+0xe8/0x140
[   50.931861][ T4563]  dump_stack+0x15/0x1b
[   50.931878][ T4563]  should_fail_ex+0x265/0x280
[   50.931943][ T4563]  should_failslab+0x8c/0xb0
[   50.931965][ T4563]  kmem_cache_alloc_noprof+0x69/0x4b0
[   50.931999][ T4563]  ? getname_flags+0x80/0x3b0
[   50.932022][ T4563]  getname_flags+0x80/0x3b0
[   50.932042][ T4563]  getname_uflags+0x21/0x30
[   50.932074][ T4563]  __x64_sys_execveat+0x5d/0x90
[   50.932115][ T4563]  x64_sys_call+0x1c0e/0x3000
[   50.932143][ T4563]  do_syscall_64+0xd8/0x2a0
[   50.932175][ T4563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.932268][ T4563] RIP: 0033:0x7f5d18b5f749
[   50.932283][ T4563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.932300][ T4563] RSP: 002b:00007f5d175bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[   50.932323][ T4563] RAX: ffffffffffffffda RBX: 00007f5d18db5fa0 RCX: 00007f5d18b5f749
[   50.932334][ T4563] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[   50.932344][ T4563] RBP: 00007f5d175bf090 R08: 0000000000001000 R09: 0000000000000000
[   50.932355][ T4563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.932367][ T4563] R13: 00007f5d18db6038 R14: 00007f5d18db5fa0 R15: 00007ffee02e89e8
[   50.932386][ T4563]  </TASK>
[   51.109496][ T4568] loop2: detected capacity change from 0 to 128
[   51.117769][ T4568] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   51.131500][ T4568] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.157052][   T29] kauditd_printk_skb: 70 callbacks suppressed
[   51.157086][   T29] audit: type=1326 audit(1765177642.219:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   51.187640][   T29] audit: type=1326 audit(1765177642.219:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   51.211095][   T29] audit: type=1326 audit(1765177642.219:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   51.214077][ T4573] rdma_op ffff88812680dd80 conn xmit_rdma 0000000000000000
[   51.234431][   T29] audit: type=1326 audit(1765177642.219:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   51.234462][   T29] audit: type=1326 audit(1765177642.219:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   51.234491][   T29] audit: type=1326 audit(1765177642.219:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   51.304673][   T29] audit: type=1326 audit(1765177642.369:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   51.336153][   T29] audit: type=1326 audit(1765177642.369:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   51.383382][ T4568] Cannot find add_set index 0 as target
[   51.391545][ T4568] 9pnet_fd: Insufficient options for proto=fd
[   51.411894][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   51.426913][ T4583] loop1: detected capacity change from 0 to 512
[   51.441969][   T29] audit: type=1326 audit(1765177642.449:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f983ddddf90 code=0x7ffc0000
[   51.449080][ T4583] EXT4-fs (loop1): too many log groups per flexible block group
[   51.465394][   T29] audit: type=1326 audit(1765177642.449:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f983ddddf90 code=0x7ffc0000
[   51.490301][ T4583] EXT4-fs (loop1): failed to initialize mballoc (-12)
[   51.504609][ T4583] EXT4-fs (loop1): mount failed
[   51.584466][ T4598] netlink: 'syz.3.362': attribute type 1 has an invalid length.
[   51.638161][ T4607] netlink: 124 bytes leftover after parsing attributes in process `syz.3.362'.
[   51.644011][ T4598] bond1: entered promiscuous mode
[   51.652949][ T4598] bond1: entered allmulticast mode
[   51.846294][ T4613] loop3: detected capacity change from 0 to 512
[   51.876861][ T4613] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   51.939121][ T4613] EXT4-fs (loop3): 1 truncate cleaned up
[   51.945316][ T4613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.992644][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.010075][ T4614] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   52.127859][ T4628] netlink: 'syz.3.371': attribute type 25 has an invalid length.
[   52.205905][ T4635] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.251405][ T4637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.374'.
[   52.273380][ T4635] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.323220][ T4635] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.334484][ T4639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.375'.
[   52.343348][ T4639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'.
[   52.352175][ T4639] netlink: 'syz.4.375': attribute type 14 has an invalid length.
[   52.359884][ T4639] netlink: 'syz.4.375': attribute type 13 has an invalid length.
[   52.415120][ T4635] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.434964][ T4645] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[   52.522471][   T41] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.547131][   T41] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.577603][   T41] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.589673][   T41] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.603094][ T4676] FAULT_INJECTION: forcing a failure.
[   52.603094][ T4676] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   52.616224][ T4676] CPU: 1 UID: 0 PID: 4676 Comm: syz.0.390 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   52.616279][ T4676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   52.616289][ T4676] Call Trace:
[   52.616295][ T4676]  <TASK>
[   52.616321][ T4676]  __dump_stack+0x1d/0x30
[   52.616341][ T4676]  dump_stack_lvl+0xe8/0x140
[   52.616358][ T4676]  dump_stack+0x15/0x1b
[   52.616431][ T4676]  should_fail_ex+0x265/0x280
[   52.616448][ T4676]  should_fail+0xb/0x20
[   52.616463][ T4676]  should_fail_usercopy+0x1a/0x20
[   52.616482][ T4676]  _copy_from_user+0x1c/0xb0
[   52.616534][ T4676]  do_seccomp+0x118/0xa30
[   52.616557][ T4676]  __x64_sys_seccomp+0x40/0x50
[   52.616631][ T4676]  x64_sys_call+0x28d6/0x3000
[   52.616661][ T4676]  do_syscall_64+0xd8/0x2a0
[   52.616685][ T4676]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.616735][ T4676] RIP: 0033:0x7f5d18b5f749
[   52.616747][ T4676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   52.616761][ T4676] RSP: 002b:00007f5d175bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[   52.616776][ T4676] RAX: ffffffffffffffda RBX: 00007f5d18db5fa0 RCX: 00007f5d18b5f749
[   52.616786][ T4676] RDX: 0000200000000040 RSI: 0000000000000008 RDI: 0000000000000001
[   52.616796][ T4676] RBP: 00007f5d175bf090 R08: 0000000000000000 R09: 0000000000000000
[   52.616806][ T4676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   52.616816][ T4676] R13: 00007f5d18db6038 R14: 00007f5d18db5fa0 R15: 00007ffee02e89e8
[   52.616895][ T4676]  </TASK>
[   52.618659][ T4678] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[   52.928612][ T4711] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.970571][ T4719] netlink: 'syz.4.404': attribute type 1 has an invalid length.
[   52.979822][ T4720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.400'.
[   52.995618][ T4719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.404'.
[   53.004619][ T4719] netlink: 20 bytes leftover after parsing attributes in process `syz.4.404'.
[   53.031042][ T4711] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.033259][ T4723] FAULT_INJECTION: forcing a failure.
[   53.033259][ T4723] name failslab, interval 1, probability 0, space 0, times 0
[   53.054142][ T4723] CPU: 0 UID: 0 PID: 4723 Comm: syz.0.405 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   53.054184][ T4723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   53.054192][ T4723] Call Trace:
[   53.054196][ T4723]  <TASK>
[   53.054203][ T4723]  __dump_stack+0x1d/0x30
[   53.054219][ T4723]  dump_stack_lvl+0xe8/0x140
[   53.054231][ T4723]  dump_stack+0x15/0x1b
[   53.054242][ T4723]  should_fail_ex+0x265/0x280
[   53.054255][ T4723]  should_failslab+0x8c/0xb0
[   53.054284][ T4723]  kmem_cache_alloc_noprof+0x69/0x4b0
[   53.054298][ T4723]  ? audit_log_start+0x342/0x720
[   53.054311][ T4723]  audit_log_start+0x342/0x720
[   53.054471][ T4723]  ? kstrtouint+0x76/0xc0
[   53.054506][ T4723]  audit_seccomp+0x48/0x100
[   53.054523][ T4723]  ? __seccomp_filter+0x832/0x1260
[   53.054593][ T4723]  __seccomp_filter+0x843/0x1260
[   53.054613][ T4723]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   53.054628][ T4723]  ? vfs_write+0x7e8/0x960
[   53.054639][ T4723]  ? __cond_resched+0x4e/0x90
[   53.054688][ T4723]  __secure_computing+0x82/0x150
[   53.054703][ T4723]  syscall_trace_enter+0xcf/0x1e0
[   53.054749][ T4723]  do_syscall_64+0xb2/0x2a0
[   53.054846][ T4723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.054859][ T4723] RIP: 0033:0x7f5d18b5f749
[   53.054868][ T4723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   53.054878][ T4723] RSP: 002b:00007f5d175bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000073
[   53.054890][ T4723] RAX: ffffffffffffffda RBX: 00007f5d18db5fa0 RCX: 00007f5d18b5f749
[   53.054958][ T4723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   53.054964][ T4723] RBP: 00007f5d175bf090 R08: 0000000000000000 R09: 0000000000000000
[   53.054971][ T4723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   53.054978][ T4723] R13: 00007f5d18db6038 R14: 00007f5d18db5fa0 R15: 00007ffee02e89e8
[   53.054989][ T4723]  </TASK>
[   53.055268][ T4719] bridge0: port 1(gretap0) entered blocking state
[   53.255199][ T4719] bridge0: port 1(gretap0) entered disabled state
[   53.262490][ T4719] gretap0: entered allmulticast mode
[   53.268257][ T4719] gretap0: entered promiscuous mode
[   53.273767][ T4719] bridge0: port 1(gretap0) entered blocking state
[   53.280232][ T4719] bridge0: port 1(gretap0) entered forwarding state
[   53.297168][ T4730] gretap0: left allmulticast mode
[   53.302308][ T4730] gretap0: left promiscuous mode
[   53.307539][ T4730] bridge0: port 1(gretap0) entered disabled state
[   53.320120][ T4711] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.347918][ T4737] netlink: 'syz.3.410': attribute type 10 has an invalid length.
[   53.356111][ T4737] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.410'.
[   53.373411][ T4711] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.408298][ T4745] loop4: detected capacity change from 0 to 512
[   53.415557][ T4745] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   53.427638][ T4745] EXT4-fs (loop4): 1 truncate cleaned up
[   53.434057][ T4745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.458907][   T41] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.469248][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.470720][  T153] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.491505][ T4749] netlink: 'syz.3.410': attribute type 1 has an invalid length.
[   53.493903][  T153] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.507722][  T153] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.536273][ T4753] loop1: detected capacity change from 0 to 512
[   53.556403][ T4753] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   53.582671][ T4753] EXT4-fs (loop1): 1 truncate cleaned up
[   53.588848][ T4753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.613680][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.623422][ T4757] loop4: detected capacity change from 0 to 512
[   53.630901][ T4757] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   53.643358][ T4757] EXT4-fs (loop4): 1 truncate cleaned up
[   53.649417][ T4757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.663377][ T4757] FAULT_INJECTION: forcing a failure.
[   53.663377][ T4757] name failslab, interval 1, probability 0, space 0, times 0
[   53.668437][ T4760] loop1: detected capacity change from 0 to 512
[   53.676088][ T4757] CPU: 0 UID: 0 PID: 4757 Comm: syz.4.415 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   53.676111][ T4757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   53.676147][ T4757] Call Trace:
[   53.676155][ T4757]  <TASK>
[   53.676164][ T4757]  __dump_stack+0x1d/0x30
[   53.676189][ T4757]  dump_stack_lvl+0xe8/0x140
[   53.676274][ T4757]  dump_stack+0x15/0x1b
[   53.676293][ T4757]  should_fail_ex+0x265/0x280
[   53.676315][ T4757]  should_failslab+0x8c/0xb0
[   53.676336][ T4757]  kmem_cache_alloc_noprof+0x69/0x4b0
[   53.676394][ T4757]  ? audit_log_start+0x342/0x720
[   53.676417][ T4757]  audit_log_start+0x342/0x720
[   53.676463][ T4757]  ? kstrtouint+0x76/0xc0
[   53.676482][ T4757]  audit_seccomp+0x48/0x100
[   53.676526][ T4757]  ? __seccomp_filter+0x832/0x1260
[   53.676553][ T4757]  __seccomp_filter+0x843/0x1260
[   53.676580][ T4757]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   53.676644][ T4757]  ? vfs_write+0x7e8/0x960
[   53.676675][ T4757]  ? __cond_resched+0x4e/0x90
[   53.676698][ T4757]  __secure_computing+0x82/0x150
[   53.676756][ T4757]  syscall_trace_enter+0xcf/0x1e0
[   53.676780][ T4757]  do_syscall_64+0xb2/0x2a0
[   53.676810][ T4757]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.676839][ T4757] RIP: 0033:0x7f2ee29af749
[   53.676909][ T4757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   53.676926][ T4757] RSP: 002b:00007f2ee140f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[   53.676945][ T4757] RAX: ffffffffffffffda RBX: 00007f2ee2c05fa0 RCX: 00007f2ee29af749
[   53.676990][ T4757] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000000
[   53.677002][ T4757] RBP: 00007f2ee140f090 R08: 0000000000000002 R09: 0000000000000000
[   53.677014][ T4757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   53.677026][ T4757] R13: 00007f2ee2c06038 R14: 00007f2ee2c05fa0 R15: 00007ffc55482f58
[   53.677045][ T4757]  </TASK>
[   53.858937][ T4764] FAULT_INJECTION: forcing a failure.
[   53.858937][ T4764] name failslab, interval 1, probability 0, space 0, times 0
[   53.888328][ T4764] CPU: 0 UID: 0 PID: 4764 Comm: syz.3.419 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   53.888358][ T4764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   53.888368][ T4764] Call Trace:
[   53.888376][ T4764]  <TASK>
[   53.888384][ T4764]  __dump_stack+0x1d/0x30
[   53.888405][ T4764]  dump_stack_lvl+0xe8/0x140
[   53.888450][ T4764]  dump_stack+0x15/0x1b
[   53.888499][ T4764]  should_fail_ex+0x265/0x280
[   53.888519][ T4764]  should_failslab+0x8c/0xb0
[   53.888542][ T4764]  kmem_cache_alloc_noprof+0x69/0x4b0
[   53.888585][ T4764]  ? audit_log_start+0x342/0x720
[   53.888609][ T4764]  audit_log_start+0x342/0x720
[   53.888670][ T4764]  ? kstrtouint+0x76/0xc0
[   53.888698][ T4764]  audit_seccomp+0x48/0x100
[   53.888722][ T4764]  ? __seccomp_filter+0x832/0x1260
[   53.888782][ T4764]  __seccomp_filter+0x843/0x1260
[   53.888810][ T4764]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   53.888859][ T4764]  ? vfs_write+0x7e8/0x960
[   53.888876][ T4764]  ? __cond_resched+0x4e/0x90
[   53.888897][ T4764]  __secure_computing+0x82/0x150
[   53.889001][ T4764]  syscall_trace_enter+0xcf/0x1e0
[   53.889022][ T4764]  do_syscall_64+0xb2/0x2a0
[   53.889053][ T4764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.889090][ T4764] RIP: 0033:0x7f34fe8ef749
[   53.889104][ T4764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   53.889121][ T4764] RSP: 002b:00007f34fd357038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c2
[   53.889142][ T4764] RAX: ffffffffffffffda RBX: 00007f34feb45fa0 RCX: 00007f34fe8ef749
[   53.889155][ T4764] RDX: 0000000000000000 RSI: 000000000000403f RDI: 0000200000ffc000
[   53.889207][ T4764] RBP: 00007f34fd357090 R08: 0000000000000000 R09: 0000000000000000
[   53.889245][ T4764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   53.889273][ T4764] R13: 00007f34feb46038 R14: 00007f34feb45fa0 R15: 00007fff98060f58
[   53.889285][ T4764]  </TASK>
[   53.891530][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.006447][ T4760] EXT4-fs (loop1): too many log groups per flexible block group
[   54.104556][ T4760] EXT4-fs (loop1): failed to initialize mballoc (-12)
[   54.112506][ T4760] EXT4-fs (loop1): mount failed
[   54.142387][ T4779] loop1: detected capacity change from 0 to 512
[   54.155582][ T4779] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.424: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   54.174103][ T4779] EXT4-fs error (device loop1): ext4_quota_enable:7180: comm syz.1.424: Bad quota inode: 3, type: 0
[   54.186166][ T4779] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   54.201240][ T4779] EXT4-fs (loop1): mount failed
[   54.381891][ T4800] rdma_op ffff88813c1b2180 conn xmit_rdma 0000000000000000
[   54.400588][ T4802] loop1: detected capacity change from 0 to 128
[   54.428953][ T4802] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   54.451825][ T4807] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   54.464146][ T4807] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.475030][ T4802] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.505297][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   54.524628][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   54.547389][ T4810] veth0: entered promiscuous mode
[   54.554037][ T4810] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000)
[   54.561943][ T4810] FAT-fs (loop4): Filesystem has been set read-only
[   54.831894][ T4810] syz.4.435: attempt to access beyond end of device
[   54.831894][ T4810] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128
[   54.845341][ T4810] Buffer I/O error on dev loop4, logical block 128, lost async page write
[   54.854141][ T3581] Bluetooth: hci0: command 0x1003 tx timeout
[   54.860369][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   54.866814][ T4810] syz.4.435: attempt to access beyond end of device
[   54.866814][ T4810] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128
[   54.880306][ T4810] Buffer I/O error on dev loop4, logical block 128, lost async page write
[   54.899738][ T4809] veth0: left promiscuous mode
[   55.096269][ T4836] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   55.130295][ T4836] EXT4-fs (loop1): 1 truncate cleaned up
[   55.154009][ T4836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.154013][ T4840] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[   55.213439][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.338868][ T4845] netlink: 'syz.1.451': attribute type 10 has an invalid length.
[   55.366513][ T4845] netlink: 'syz.1.451': attribute type 1 has an invalid length.
[   55.416444][ T4850] macvtap0: refused to change device tx_queue_len
[   55.471978][ T4853] FAULT_INJECTION: forcing a failure.
[   55.471978][ T4853] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   55.485098][ T4853] CPU: 0 UID: 0 PID: 4853 Comm: syz.4.453 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   55.485127][ T4853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   55.485161][ T4853] Call Trace:
[   55.485165][ T4853]  <TASK>
[   55.485169][ T4853]  __dump_stack+0x1d/0x30
[   55.485185][ T4853]  dump_stack_lvl+0xe8/0x140
[   55.485221][ T4853]  dump_stack+0x15/0x1b
[   55.485232][ T4853]  should_fail_ex+0x265/0x280
[   55.485245][ T4853]  should_fail+0xb/0x20
[   55.485256][ T4853]  should_fail_usercopy+0x1a/0x20
[   55.485270][ T4853]  _copy_from_user+0x1c/0xb0
[   55.485291][ T4853]  ___sys_sendmsg+0xc1/0x1d0
[   55.485314][ T4853]  __x64_sys_sendmsg+0xd4/0x160
[   55.485330][ T4853]  x64_sys_call+0x17ba/0x3000
[   55.485348][ T4853]  do_syscall_64+0xd8/0x2a0
[   55.485366][ T4853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.485379][ T4853] RIP: 0033:0x7f2ee29af749
[   55.485388][ T4853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   55.485398][ T4853] RSP: 002b:00007f2ee140f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   55.485476][ T4853] RAX: ffffffffffffffda RBX: 00007f2ee2c05fa0 RCX: 00007f2ee29af749
[   55.485483][ T4853] RDX: 0000000004004880 RSI: 0000200000000200 RDI: 0000000000000004
[   55.485490][ T4853] RBP: 00007f2ee140f090 R08: 0000000000000000 R09: 0000000000000000
[   55.485577][ T4853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   55.485646][ T4853] R13: 00007f2ee2c06038 R14: 00007f2ee2c05fa0 R15: 00007ffc55482f58
[   55.485657][ T4853]  </TASK>
[   55.669996][ T4855] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.454: bg 0: block 248: padding at end of block bitmap is not set
[   55.690430][ T4855] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.454: Failed to acquire dquot type 1
[   55.704609][ T4855] EXT4-fs (loop1): 1 truncate cleaned up
[   55.712992][ T4855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.726190][ T4855] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.747587][ T4855] __nla_validate_parse: 5 callbacks suppressed
[   55.747604][ T4855] netlink: 28 bytes leftover after parsing attributes in process `syz.1.454'.
[   55.762778][ T4855] netlink: 196 bytes leftover after parsing attributes in process `syz.1.454'.
[   55.774945][ T4855] netlink: 28 bytes leftover after parsing attributes in process `syz.1.454'.
[   55.788953][ T4855] netlink: 196 bytes leftover after parsing attributes in process `syz.1.454'.
[   55.903802][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.043719][ T4883] bridge0: port 3(bond0) entered blocking state
[   56.050036][ T4883] bridge0: port 3(bond0) entered disabled state
[   56.070585][ T4883] bond0: entered allmulticast mode
[   56.075749][ T4883] bond_slave_0: entered allmulticast mode
[   56.081723][ T4883] bond_slave_1: entered allmulticast mode
[   56.103924][ T4885] set_capacity_and_notify: 5 callbacks suppressed
[   56.103940][ T4885] loop1: detected capacity change from 0 to 512
[   56.109479][ T4883] bond0: entered promiscuous mode
[   56.110962][ T4885] EXT4-fs: Ignoring removed oldalloc option
[   56.116640][ T4883] bond_slave_0: entered promiscuous mode
[   56.116759][ T4883] bond_slave_1: entered promiscuous mode
[   56.122388][ T4885] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   56.138790][ T4883] bridge0: port 3(bond0) entered blocking state
[   56.154975][ T4883] bridge0: port 3(bond0) entered forwarding state
[   56.163483][ T4885] EXT4-fs (loop1): 1 truncate cleaned up
[   56.169818][ T4885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.235255][ T4888] loop3: detected capacity change from 0 to 128
[   56.259220][ T4888] veth0: entered promiscuous mode
[   56.271883][ T4888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.465'.
[   56.291826][ T4888] veth0 (unregistering): left promiscuous mode
[   56.326208][ T4889] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000)
[   56.334738][ T4889] FAT-fs (loop3): Filesystem has been set read-only
[   56.435015][ T4895] loop2: detected capacity change from 0 to 512
[   56.455388][ T4895] EXT4-fs (loop2): too many log groups per flexible block group
[   56.463379][ T4895] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   56.475340][ T4895] EXT4-fs (loop2): mount failed
[   56.507363][ T4899] loop2: detected capacity change from 0 to 128
[   56.551395][ T4899] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000)
[   56.559251][ T4899] FAT-fs (loop2): Filesystem has been set read-only
[   56.736711][ T4888] syz.3.465: attempt to access beyond end of device
[   56.736711][ T4888] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128
[   56.750778][ T4888] Buffer I/O error on dev loop3, logical block 128, lost async page write
[   56.759879][ T4888] syz.3.465: attempt to access beyond end of device
[   56.759879][ T4888] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128
[   56.773263][ T4888] Buffer I/O error on dev loop3, logical block 128, lost async page write
[   56.795676][   T29] kauditd_printk_skb: 523 callbacks suppressed
[   56.795698][   T29] audit: type=1400 audit(1765177647.859:2427): avc:  denied  { ioctl } for  pid=4906 comm="syz.0.471" path="socket:[9847]" dev="sockfs" ino=9847 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   56.796370][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'.
[   56.845801][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.905343][   T29] audit: type=1400 audit(1765177647.969:2428): avc:  denied  { create } for  pid=4910 comm="syz.1.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   56.932026][ T4907] team0: Port device team_slave_1 removed
[   56.986149][ T4903] syz.2.469: attempt to access beyond end of device
[   56.986149][ T4903] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128
[   56.999573][ T4903] Buffer I/O error on dev loop2, logical block 128, lost async page write
[   57.011820][ T4914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.474'.
[   57.032977][ T4903] syz.2.469: attempt to access beyond end of device
[   57.032977][ T4903] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128
[   57.046425][ T4903] Buffer I/O error on dev loop2, logical block 128, lost async page write
[   57.067193][ T4916] FAULT_INJECTION: forcing a failure.
[   57.067193][ T4916] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   57.080467][ T4916] CPU: 1 UID: 0 PID: 4916 Comm: syz.1.475 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   57.080495][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   57.080507][ T4916] Call Trace:
[   57.080514][ T4916]  <TASK>
[   57.080522][ T4916]  __dump_stack+0x1d/0x30
[   57.080608][ T4916]  dump_stack_lvl+0xe8/0x140
[   57.080657][ T4916]  dump_stack+0x15/0x1b
[   57.080733][ T4916]  should_fail_ex+0x265/0x280
[   57.080756][ T4916]  should_fail+0xb/0x20
[   57.080776][ T4916]  should_fail_usercopy+0x1a/0x20
[   57.080838][ T4916]  _copy_from_user+0x1c/0xb0
[   57.080865][ T4916]  ___sys_sendmsg+0xc1/0x1d0
[   57.080906][ T4916]  __sys_sendmmsg+0x178/0x300
[   57.080979][ T4916]  __x64_sys_sendmmsg+0x57/0x70
[   57.081083][ T4916]  x64_sys_call+0x1e28/0x3000
[   57.081108][ T4916]  do_syscall_64+0xd8/0x2a0
[   57.081139][ T4916]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.081194][ T4916] RIP: 0033:0x7febd6f8f749
[   57.081211][ T4916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   57.081228][ T4916] RSP: 002b:00007febd59f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   57.081248][ T4916] RAX: ffffffffffffffda RBX: 00007febd71e5fa0 RCX: 00007febd6f8f749
[   57.081300][ T4916] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003
[   57.081313][ T4916] RBP: 00007febd59f7090 R08: 0000000000000000 R09: 0000000000000000
[   57.081326][ T4916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   57.081359][ T4916] R13: 00007febd71e6038 R14: 00007febd71e5fa0 R15: 00007ffc43c210d8
[   57.081379][ T4916]  </TASK>
[   57.318405][   T29] audit: type=1326 audit(1765177648.379:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.4.482" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ee29af749 code=0x0
[   57.385776][ T4933] netlink: 'syz.3.479': attribute type 1 has an invalid length.
[   57.412670][ T4944] FAULT_INJECTION: forcing a failure.
[   57.412670][ T4944] name failslab, interval 1, probability 0, space 0, times 0
[   57.425341][ T4944] CPU: 1 UID: 0 PID: 4944 Comm: syz.2.487 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   57.425383][ T4944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   57.425393][ T4944] Call Trace:
[   57.425405][ T4944]  <TASK>
[   57.425413][ T4944]  __dump_stack+0x1d/0x30
[   57.425435][ T4944]  dump_stack_lvl+0xe8/0x140
[   57.425535][ T4944]  dump_stack+0x15/0x1b
[   57.425553][ T4944]  should_fail_ex+0x265/0x280
[   57.425572][ T4944]  should_failslab+0x8c/0xb0
[   57.425591][ T4944]  kmem_cache_alloc_noprof+0x69/0x4b0
[   57.425610][ T4944]  ? audit_log_start+0x342/0x720
[   57.425709][ T4944]  audit_log_start+0x342/0x720
[   57.425728][ T4944]  ? kstrtouint+0x76/0xc0
[   57.425746][ T4944]  audit_seccomp+0x48/0x100
[   57.425870][ T4944]  ? __seccomp_filter+0x832/0x1260
[   57.425891][ T4944]  __seccomp_filter+0x843/0x1260
[   57.425935][ T4944]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   57.425956][ T4944]  ? vfs_write+0x7e8/0x960
[   57.425971][ T4944]  ? __rcu_read_unlock+0x4f/0x70
[   57.425987][ T4944]  ? __fget_files+0x184/0x1c0
[   57.426075][ T4944]  __secure_computing+0x82/0x150
[   57.426096][ T4944]  syscall_trace_enter+0xcf/0x1e0
[   57.426115][ T4944]  do_syscall_64+0xb2/0x2a0
[   57.426142][ T4944]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.426158][ T4944] RIP: 0033:0x7f983dddf749
[   57.426171][ T4944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   57.426201][ T4944] RSP: 002b:00007f983c847038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3
[   57.426217][ T4944] RAX: ffffffffffffffda RBX: 00007f983e035fa0 RCX: 00007f983dddf749
[   57.426228][ T4944] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000
[   57.426238][ T4944] RBP: 00007f983c847090 R08: 0000000000000000 R09: 0000000000000000
[   57.426248][ T4944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   57.426258][ T4944] R13: 00007f983e036038 R14: 00007f983e035fa0 R15: 00007fff39768d38
[   57.426335][ T4944]  </TASK>
[   57.426343][ T4944] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64
[   57.529546][   T29] audit: type=1326 audit(1765177648.479:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   57.533090][ T4944] audit: out of memory in audit_log_start
[   57.549310][ T4945] loop4: detected capacity change from 0 to 512
[   57.553578][   T29] audit: type=1326 audit(1765177648.479:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   57.613101][ T4945] EXT4-fs: Ignoring removed oldalloc option
[   57.614849][   T29] audit: type=1326 audit(1765177648.479:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   57.624004][ T4947] loop1: detected capacity change from 0 to 512
[   57.625919][   T29] audit: type=1326 audit(1765177648.479:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f983ddddf90 code=0x7ffc0000
[   57.634722][ T4949] netlink: 'syz.0.480': attribute type 1 has an invalid length.
[   57.657518][   T29] audit: type=1326 audit(1765177648.479:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f983ddde1ff code=0x7ffc0000
[   57.664278][ T4945] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   57.725889][ T4947] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[   57.734133][ T4950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.480'.
[   57.805066][ T4945] EXT4-fs (loop4): 1 truncate cleaned up
[   57.810591][ T4950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.480'.
[   57.827118][ T4933] bond2: (slave veth1): Enslaving as an active interface with a down link
[   57.827129][ T4945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.839845][ T4950] bridge2: the hash_elasticity option has been deprecated and is always 16
[   57.878550][ T4949] bond1: entered promiscuous mode
[   57.878567][ T4949] bond1: entered allmulticast mode
[   57.880349][ T4954] netlink: 'syz.2.488': attribute type 29 has an invalid length.
[   57.898807][ T4954] netlink: 'syz.2.488': attribute type 29 has an invalid length.
[   57.899332][ T4954] netlink: 500 bytes leftover after parsing attributes in process `syz.2.488'.
[   58.009348][ T4974] FAULT_INJECTION: forcing a failure.
[   58.009348][ T4974] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   58.022620][ T4974] CPU: 0 UID: 0 PID: 4974 Comm: syz.1.495 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   58.022650][ T4974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   58.022662][ T4974] Call Trace:
[   58.022736][ T4974]  <TASK>
[   58.022748][ T4974]  __dump_stack+0x1d/0x30
[   58.022775][ T4974]  dump_stack_lvl+0xe8/0x140
[   58.022794][ T4974]  dump_stack+0x15/0x1b
[   58.022810][ T4974]  should_fail_ex+0x265/0x280
[   58.022829][ T4974]  should_fail+0xb/0x20
[   58.022947][ T4974]  should_fail_usercopy+0x1a/0x20
[   58.022972][ T4974]  _copy_from_user+0x1c/0xb0
[   58.022999][ T4974]  snd_seq_ioctl+0x125/0x300
[   58.023039][ T4974]  ? __pfx_snd_seq_ioctl+0x10/0x10
[   58.023102][ T4974]  __se_sys_ioctl+0xce/0x140
[   58.023128][ T4974]  __x64_sys_ioctl+0x43/0x50
[   58.023152][ T4974]  x64_sys_call+0x14b0/0x3000
[   58.023251][ T4974]  do_syscall_64+0xd8/0x2a0
[   58.023282][ T4974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.023366][ T4974] RIP: 0033:0x7febd6f8f749
[   58.023381][ T4974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.023395][ T4974] RSP: 002b:00007febd59f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   58.023414][ T4974] RAX: ffffffffffffffda RBX: 00007febd71e5fa0 RCX: 00007febd6f8f749
[   58.023496][ T4974] RDX: 0000200000001140 RSI: 000000004058534c RDI: 0000000000000003
[   58.023509][ T4974] RBP: 00007febd59f7090 R08: 0000000000000000 R09: 0000000000000000
[   58.023522][ T4974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.023595][ T4974] R13: 00007febd71e6038 R14: 00007febd71e5fa0 R15: 00007ffc43c210d8
[   58.023614][ T4974]  </TASK>
[   58.031422][ T4972] loop2: detected capacity change from 0 to 128
[   58.211855][ T4972] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   58.224331][ T4972] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.241294][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.262596][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   58.341531][ T4988] macvtap0: refused to change device tx_queue_len
[   58.389385][ T4986] loop2: detected capacity change from 0 to 512
[   58.396535][ T4986] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   58.409720][ T4991] loop1: detected capacity change from 0 to 512
[   58.417248][ T4991] EXT4-fs: dax option not supported
[   58.511151][ T4996] loop1: detected capacity change from 0 to 512
[   58.518420][ T4996] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[   58.609948][ T5007] netlink: 'syz.0.504': attribute type 1 has an invalid length.
[   58.632692][ T5007] bond2: entered promiscuous mode
[   58.637757][ T5007] bond2: entered allmulticast mode
[   58.701060][ T5012] EXT4-fs: Ignoring removed nomblk_io_submit option
[   58.715197][ T5007] bridge3: the hash_elasticity option has been deprecated and is always 16
[   58.741373][ T5012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.744605][ T5015] EXT4-fs: dax option not supported
[   58.850035][ T5022] rdma_op ffff88813c1b2180 conn xmit_rdma 0000000000000000
[   58.969117][ T5036] FAULT_INJECTION: forcing a failure.
[   58.969117][ T5036] name failslab, interval 1, probability 0, space 0, times 0
[   58.982719][ T5036] CPU: 0 UID: 0 PID: 5036 Comm: syz.4.516 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   58.982743][ T5036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   58.982754][ T5036] Call Trace:
[   58.982760][ T5036]  <TASK>
[   58.982766][ T5036]  __dump_stack+0x1d/0x30
[   58.982790][ T5036]  dump_stack_lvl+0xe8/0x140
[   58.982825][ T5036]  dump_stack+0x15/0x1b
[   58.982842][ T5036]  should_fail_ex+0x265/0x280
[   58.982865][ T5036]  should_failslab+0x8c/0xb0
[   58.982947][ T5036]  kmem_cache_alloc_noprof+0x69/0x4b0
[   58.982970][ T5036]  ? audit_log_start+0x342/0x720
[   58.982991][ T5036]  audit_log_start+0x342/0x720
[   58.983069][ T5036]  ? kstrtouint+0x76/0xc0
[   58.983158][ T5036]  audit_seccomp+0x48/0x100
[   58.983183][ T5036]  ? __seccomp_filter+0x832/0x1260
[   58.983205][ T5036]  __seccomp_filter+0x843/0x1260
[   58.983236][ T5036]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   58.983262][ T5036]  ? vfs_write+0x7e8/0x960
[   58.983282][ T5036]  ? __cond_resched+0x4e/0x90
[   58.983378][ T5036]  __secure_computing+0x82/0x150
[   58.983404][ T5036]  syscall_trace_enter+0xcf/0x1e0
[   58.983492][ T5036]  do_syscall_64+0xb2/0x2a0
[   58.983522][ T5036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.983606][ T5036] RIP: 0033:0x7f2ee29af749
[   58.983621][ T5036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.983637][ T5036] RSP: 002b:00007f2ee140f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000083
[   58.983657][ T5036] RAX: ffffffffffffffda RBX: 00007f2ee2c05fa0 RCX: 00007f2ee29af749
[   58.983669][ T5036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   58.983681][ T5036] RBP: 00007f2ee140f090 R08: 0000000000000000 R09: 0000000000000000
[   58.983769][ T5036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.983782][ T5036] R13: 00007f2ee2c06038 R14: 00007f2ee2c05fa0 R15: 00007ffc55482f58
[   58.983800][ T5036]  </TASK>
[   59.119798][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.254790][ T5054] veth0: entered promiscuous mode
[   59.261991][ T5054] veth0 (unregistering): left promiscuous mode
[   59.395902][ T5054] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000)
[   59.403779][ T5054] FAT-fs (loop4): Filesystem has been set read-only
[   59.754041][ T5068] veth0: entered promiscuous mode
[   59.796435][ T5068] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000)
[   59.805112][ T5068] FAT-fs (loop1): Filesystem has been set read-only
[   59.841747][ T5077] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   59.914685][ T5077] EXT4-fs (loop3): 1 truncate cleaned up
[   59.921365][ T5077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.931995][ T5054] syz.4.524: attempt to access beyond end of device
[   59.931995][ T5054] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128
[   59.947762][ T5054] Buffer I/O error on dev loop4, logical block 128, lost async page write
[   59.974518][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.988630][ T5062] syz.4.524: attempt to access beyond end of device
[   59.988630][ T5062] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128
[   60.001991][ T5062] Buffer I/O error on dev loop4, logical block 128, lost async page write
[   60.190924][ T5093] netlink: 'syz.0.538': attribute type 1 has an invalid length.
[   60.232629][ T5092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.241614][ T5093] bond3: entered promiscuous mode
[   60.249707][ T5093] bond3: entered allmulticast mode
[   60.284268][ T5080] syz.1.528: attempt to access beyond end of device
[   60.284268][ T5080] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128
[   60.284769][ T5105] bridge4: the hash_elasticity option has been deprecated and is always 16
[   60.297715][ T5080] Buffer I/O error on dev loop1, logical block 128, lost async page write
[   60.322831][ T5068] syz.1.528: attempt to access beyond end of device
[   60.322831][ T5068] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128
[   60.336176][ T5068] Buffer I/O error on dev loop1, logical block 128, lost async page write
[   60.413304][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.575057][ T5123] EXT4-fs: Ignoring removed nomblk_io_submit option
[   60.604270][ T5123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.751220][ T5142] netlink: 'syz.2.556': attribute type 1 has an invalid length.
[   60.768886][ T5142] bond2: entered promiscuous mode
[   60.773960][ T5142] bond2: entered allmulticast mode
[   60.804080][ T5142] __nla_validate_parse: 7 callbacks suppressed
[   60.804094][ T5142] netlink: 16 bytes leftover after parsing attributes in process `syz.2.556'.
[   60.819165][ T5142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'.
[   60.848306][ T5142] bridge2: the hash_elasticity option has been deprecated and is always 16
[   60.871364][ T5150] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   60.882754][ T5150] EXT4-fs (loop4): 1 truncate cleaned up
[   60.889013][ T5150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.931332][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.942132][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.974296][ T5158] FAULT_INJECTION: forcing a failure.
[   60.974296][ T5158] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   60.987422][ T5158] CPU: 1 UID: 0 PID: 5158 Comm: syz.2.562 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   60.987481][ T5158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   60.987492][ T5158] Call Trace:
[   60.987529][ T5158]  <TASK>
[   60.987537][ T5158]  __dump_stack+0x1d/0x30
[   60.987561][ T5158]  dump_stack_lvl+0xe8/0x140
[   60.987581][ T5158]  dump_stack+0x15/0x1b
[   60.987598][ T5158]  should_fail_ex+0x265/0x280
[   60.987663][ T5158]  should_fail+0xb/0x20
[   60.987683][ T5158]  should_fail_usercopy+0x1a/0x20
[   60.987771][ T5158]  _copy_from_user+0x1c/0xb0
[   60.987796][ T5158]  proc_submiturb+0x43/0xa0
[   60.987833][ T5158]  usbdev_ioctl+0xcb6/0x1700
[   60.987856][ T5158]  ? __pfx_usbdev_ioctl+0x10/0x10
[   60.987947][ T5158]  __se_sys_ioctl+0xce/0x140
[   60.987978][ T5158]  __x64_sys_ioctl+0x43/0x50
[   60.988126][ T5158]  x64_sys_call+0x14b0/0x3000
[   60.988230][ T5158]  do_syscall_64+0xd8/0x2a0
[   60.988306][ T5158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.988330][ T5158] RIP: 0033:0x7f983dddf749
[   60.988343][ T5158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.988358][ T5158] RSP: 002b:00007f983c847038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   60.988377][ T5158] RAX: ffffffffffffffda RBX: 00007f983e035fa0 RCX: 00007f983dddf749
[   60.988416][ T5158] RDX: 0000200000000800 RSI: 000000008038550a RDI: 0000000000000003
[   60.988427][ T5158] RBP: 00007f983c847090 R08: 0000000000000000 R09: 0000000000000000
[   60.988437][ T5158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   60.988448][ T5158] R13: 00007f983e036038 R14: 00007f983e035fa0 R15: 00007fff39768d38
[   60.988465][ T5158]  </TASK>
[   60.989873][ T5160] netlink: 48 bytes leftover after parsing attributes in process `syz.1.561'.
[   61.034551][ T5156] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   61.035849][ T5156] EXT4-fs (loop4): 1 truncate cleaned up
[   61.048579][ T5160] tipc: Started in network mode
[   61.132861][ T5156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.139149][ T5160] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   61.229575][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.243395][ T5160] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   61.268434][ T5175] set_capacity_and_notify: 10 callbacks suppressed
[   61.268450][ T5175] loop4: detected capacity change from 0 to 128
[   61.271386][ T5175] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   61.271502][ T5175] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.284740][ T5171] veth0: entered promiscuous mode
[   61.284838][ T5171] veth0: entered allmulticast mode
[   61.307199][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   61.408706][ T5189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.572'.
[   61.441411][ T5189] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[   61.490109][ T5197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.499088][ T5197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.511238][ T5190] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   61.523563][ T5200] loop4: detected capacity change from 0 to 512
[   61.530919][ T5200] EXT4-fs: Ignoring removed oldalloc option
[   61.537023][ T5197] loop3: detected capacity change from 0 to 512
[   61.537149][ T5200] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   61.553344][ T5197] ext4: Unknown parameter 'dont_appraise'
[   61.566381][ T5200] EXT4-fs (loop4): 1 truncate cleaned up
[   61.574799][ T5197] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   61.580754][ T5200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.084469][ T5228] loop1: detected capacity change from 0 to 256
[   62.096264][ T5228] rdma_op ffff88813dce2980 conn xmit_rdma 0000000000000000
[   62.185767][ T5238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'.
[   62.212196][ T5238] bridge1: the hash_elasticity option has been deprecated and is always 16
[   62.228367][   T29] kauditd_printk_skb: 2382 callbacks suppressed
[   62.228379][   T29] audit: type=1326 audit(1765177653.289:4815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fe8ef749 code=0x7ffc0000
[   62.261620][ T5240] FAULT_INJECTION: forcing a failure.
[   62.261620][ T5240] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   62.268997][   T29] audit: type=1326 audit(1765177653.329:4816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f34fe8ef749 code=0x7ffc0000
[   62.274723][ T5240] CPU: 0 UID: 0 PID: 5240 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) 
[   62.274746][ T5240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   62.274758][ T5240] Call Trace:
[   62.274764][ T5240]  <TASK>
[   62.274772][ T5240]  __dump_stack+0x1d/0x30
[   62.274796][ T5240]  dump_stack_lvl+0xe8/0x140
[   62.274873][ T5240]  dump_stack+0x15/0x1b
[   62.274893][ T5240]  should_fail_ex+0x265/0x280
[   62.274960][ T5240]  should_fail+0xb/0x20
[   62.274978][ T5240]  should_fail_usercopy+0x1a/0x20
[   62.275037][ T5240]  strncpy_from_user+0x27/0x260
[   62.275068][ T5240]  __se_sys_memfd_create+0x206/0x6b0
[   62.275151][ T5240]  __x64_sys_memfd_create+0x31/0x40
[   62.275180][ T5240]  x64_sys_call+0x28cb/0x3000
[   62.275268][ T5240]  do_syscall_64+0xd8/0x2a0
[   62.275299][ T5240]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.275319][ T5240] RIP: 0033:0x7f34fe8ef749
[   62.275381][ T5240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.275397][ T5240] RSP: 002b:00007f34fd356e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   62.275416][ T5240] RAX: ffffffffffffffda RBX: 00000000000005d2 RCX: 00007f34fe8ef749
[   62.275429][ T5240] RDX: 00007f34fd356ef0 RSI: 0000000000000000 RDI: 00007f34fe974960
[   62.275442][ T5240] RBP: 0000200000001200 R08: 00007f34fd356bb7 R09: 00007f34fd356e40
[   62.275454][ T5240] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000400
[   62.275527][ T5240] R13: 00007f34fd356ef0 R14: 00007f34fd356eb0 R15: 0000200000000640
[   62.275545][ T5240]  </TASK>
[   62.456177][   T29] audit: type=1326 audit(1765177653.329:4817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fe8ef749 code=0x7ffc0000
[   62.479095][   T29] audit: type=1326 audit(1765177653.329:4818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f34fe8edf90 code=0x7ffc0000
[   62.501982][   T29] audit: type=1326 audit(1765177653.329:4819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f34fe8ee1ff code=0x7ffc0000
[   62.524675][   T29] audit: type=1326 audit(1765177653.329:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f34fe8ef749 code=0x7ffc0000
[   62.559677][ T5247] macvtap0: refused to change device tx_queue_len
[   62.616520][ T5242] loop2: detected capacity change from 0 to 512
[   62.623620][ T5242] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   62.634803][ T5242] EXT4-fs (loop2): 1 truncate cleaned up
[   62.643234][   T29] audit: type=1326 audit(1765177653.359:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f34fe8ee15c code=0x7ffc0000
[   62.666111][   T29] audit: type=1326 audit(1765177653.359:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f34fe8ee1ff code=0x7ffc0000
[   62.683139][ T5257] netlink: 'syz.1.600': attribute type 10 has an invalid length.
[   62.688904][   T29] audit: type=1326 audit(1765177653.359:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f34fe8ee3aa code=0x7ffc0000
[   62.697170][ T5257] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.600'.
[   62.719214][   T29] audit: type=1326 audit(1765177653.359:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fe8ef749 code=0x7ffc0000
[   62.843375][ T5269] macvtap0: refused to change device tx_queue_len
[   62.866244][ T5257] netlink: 'syz.1.600': attribute type 1 has an invalid length.
[   62.874471][ T5257] netlink: 124 bytes leftover after parsing attributes in process `syz.1.600'.
[   62.946919][ T5275] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[   63.031749][ T5275] vhci_hcd vhci_hcd.2: invalid port number 96
[   63.037905][ T5275] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7
[   63.148233][ T5287] loop2: detected capacity change from 0 to 512
[   63.175104][ T5287] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   63.187855][ T5287] EXT4-fs (loop2): 1 truncate cleaned up
[   63.238254][ T5278] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   63.387813][ T5294] loop1: detected capacity change from 0 to 8192
[   63.450933][ T5307] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2068)
[   63.459830][ T5307] FAT-fs (loop1): Filesystem has been set read-only
[   63.471732][ T5307] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 2068)
[   63.487818][ T5307] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 2068)
[   63.504874][ T5307] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   63.862295][ T5318] mmap: syz.2.623 (5318): VmData 167620608 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data.
[   64.418767][ T5328] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.470083][ T5329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.626'.
[   64.492849][ T5328] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.552069][ T5328] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.601766][ T5328] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.647227][ T5331] loop2: detected capacity change from 0 to 512
[   64.655108][ T5331] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   64.672572][  T153] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.688880][  T153] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.700471][ T5331] EXT4-fs (loop2): 1 truncate cleaned up
[   64.717379][  T153] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.742199][  T153] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.961354][ T5340] netlink: 'syz.0.631': attribute type 10 has an invalid length.
[   64.969177][ T5340] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.631'.
[   65.005919][ T5344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.633'.
[   65.104953][ T5349] netlink: 'syz.0.631': attribute type 1 has an invalid length.
[   65.115777][ T5348] loop3: detected capacity change from 0 to 512
[   65.173932][ T5348] EXT4-fs (loop3): orphan cleanup on readonly fs
[   65.198885][ T5348] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.634: EA inode hash validation failed
[   65.224113][ T5348] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   65.238927][ T5348] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.634: corrupted inode contents
[   65.261254][ T5348] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.634: mark_inode_dirty error
[   65.274503][ T5348] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.634: corrupted inode contents
[   65.287421][ T5348] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.634: mark_inode_dirty error
[   65.313113][ T5348] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.634: mark inode dirty (error -117)
[   65.326580][ T5348] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117)
[   65.336786][ T5348] EXT4-fs (loop3): 1 orphan inode deleted
[   65.393349][ T5353] bridge5: the hash_elasticity option has been deprecated and is always 16
[   65.515929][ T5359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.528625][ T5359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.549627][ T5359] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   66.208975][ T5370] macvtap0: refused to change device tx_queue_len
[   66.308346][ T5373] __nla_validate_parse: 2 callbacks suppressed
[   66.308359][ T5373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.642'.
[   66.632937][ T5380] macvtap0: refused to change device tx_queue_len
[   66.792785][ T5383] netlink: 108 bytes leftover after parsing attributes in process `syz.2.646'.
[   66.985580][ T5387] loop2: detected capacity change from 0 to 512
[   67.005987][ T5387] EXT4-fs: Ignoring removed oldalloc option
[   67.020412][ T5387] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   67.071449][ T5387] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   67.105027][ T5387] EXT4-fs (loop2): 1 truncate cleaned up
[   67.118956][ T5387] EXT4-fs mount: 8 callbacks suppressed
[   67.118970][ T5387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.231499][   T29] kauditd_printk_skb: 614 callbacks suppressed
[   67.231512][   T29] audit: type=1326 audit(1765177658.299:5439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.3.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f34fe8e65e7 code=0x7ffc0000
[   67.284976][   T29] audit: type=1326 audit(1765177658.329:5440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.3.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f34fe88b829 code=0x7ffc0000
[   67.308925][   T29] audit: type=1326 audit(1765177658.329:5441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.3.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f34fe8e65e7 code=0x7ffc0000
[   67.332910][   T29] audit: type=1326 audit(1765177658.329:5442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.3.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f34fe88b829 code=0x7ffc0000
[   67.356106][   T29] audit: type=1326 audit(1765177658.329:5443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.3.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fe8ef749 code=0x7ffc0000
[   67.380112][   T29] audit: type=1326 audit(1765177658.339:5444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.3.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f34fe8e65e7 code=0x7ffc0000
[   67.403957][   T29] audit: type=1326 audit(1765177658.339:5445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.3.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f34fe88b829 code=0x7ffc0000
[   67.427213][   T29] audit: type=1326 audit(1765177658.339:5446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.3.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fe8ef749 code=0x7ffc0000
[   67.451209][   T29] audit: type=1326 audit(1765177658.349:5447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.3.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f34fe8e65e7 code=0x7ffc0000
[   67.474465][   T29] audit: type=1326 audit(1765177658.349:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.3.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f34fe88b829 code=0x7ffc0000
[   67.708730][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.082671][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.778751][ T5294] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 2068)
[   75.788724][ T5294] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 2068)
[   75.851199][ T5399] loop3: detected capacity change from 0 to 512
[   75.871606][ T5399] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   75.918710][ T5399] EXT4-fs (loop3): 1 truncate cleaned up
[   75.924826][ T5399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.958335][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.013099][ T5417] loop3: detected capacity change from 0 to 512
[   76.025752][ T5412] FAULT_INJECTION: forcing a failure.
[   76.025752][ T5412] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   76.039752][ T5412] CPU: 0 UID: 0 PID: 5412 Comm: syz.1.651 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   76.039821][ T5412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   76.039832][ T5412] Call Trace:
[   76.039839][ T5412]  <TASK>
[   76.039847][ T5412]  __dump_stack+0x1d/0x30
[   76.039947][ T5412]  dump_stack_lvl+0xe8/0x140
[   76.039970][ T5412]  dump_stack+0x15/0x1b
[   76.039991][ T5412]  should_fail_ex+0x265/0x280
[   76.040086][ T5412]  should_fail_alloc_page+0xf2/0x100
[   76.040111][ T5412]  __alloc_frozen_pages_noprof+0x109/0x360
[   76.040179][ T5412]  alloc_pages_mpol+0xb3/0x260
[   76.040205][ T5412]  alloc_migration_target_by_mpol+0x11b/0x280
[   76.040340][ T5412]  migrate_pages_batch+0x349/0x1b60
[   76.040367][ T5412]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[   76.040461][ T5412]  ? __walk_page_range+0x324/0x340
[   76.040481][ T5412]  migrate_pages+0xf55/0x1760
[   76.040503][ T5412]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[   76.040588][ T5412]  __se_sys_mbind+0x975/0xac0
[   76.040615][ T5412]  __x64_sys_mbind+0x78/0x90
[   76.040636][ T5412]  x64_sys_call+0x2a2b/0x3000
[   76.040717][ T5412]  do_syscall_64+0xd8/0x2a0
[   76.040748][ T5412]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.040771][ T5412] RIP: 0033:0x7febd6f8f749
[   76.040861][ T5412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   76.040903][ T5412] RSP: 002b:00007febd59d6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[   76.040930][ T5412] RAX: ffffffffffffffda RBX: 00007febd71e6090 RCX: 00007febd6f8f749
[   76.040942][ T5412] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000400000
[   76.040953][ T5412] RBP: 00007febd59d6090 R08: 0000000000000000 R09: 0000000000000002
[   76.040965][ T5412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   76.040977][ T5412] R13: 00007febd71e6128 R14: 00007febd71e6090 R15: 00007ffc43c210d8
[   76.040991][ T5412]  </TASK>
[   76.247560][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'.
[   76.258010][ T5421] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.258211][ T5417] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.656: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   76.289358][ T5417] EXT4-fs error (device loop3): ext4_quota_enable:7180: comm syz.3.656: Bad quota inode: 3, type: 0
[   76.289925][ T5422] bridge6: the hash_elasticity option has been deprecated and is always 16
[   76.310414][ T5424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.658'.
[   76.320486][ T5417] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   76.336098][ T5417] EXT4-fs (loop3): mount failed
[   76.343031][ T5421] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.373462][ T5429] loop1: detected capacity change from 0 to 256
[   76.383784][ T5421] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.386046][ T5429] rdma_op ffff88811b54c180 conn xmit_rdma 0000000000000000
[   76.451795][ T5421] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.473672][ T5442] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.496036][  T153] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.507717][  T153] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.516857][ T5442] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.532489][  T365] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.541624][ T5449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.664'.
[   76.545253][ T5451] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[   76.558799][  T153] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.569035][ T5442] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.597369][ T5454] loop4: detected capacity change from 0 to 128
[   76.614215][ T5454] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   76.630363][ T5454] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.643612][ T5442] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.664924][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   76.681495][ T5451] vhci_hcd vhci_hcd.2: invalid port number 96
[   76.687606][ T5451] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7
[   76.777446][ T3528] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.789476][ T3528] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.801279][ T3528] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.828341][ T3528] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.863994][ T5470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.675'.
[   76.882198][ T5470] bridge2: the hash_elasticity option has been deprecated and is always 16
[   76.891163][ T5474] netlink: 'syz.4.677': attribute type 10 has an invalid length.
[   76.898891][ T5474] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.677'.
[   76.951444][ T5483] macvtap0: refused to change device tx_queue_len
[   76.992665][ T5489] loop1: detected capacity change from 0 to 256
[   77.001722][ T5484] netlink: 'syz.4.677': attribute type 1 has an invalid length.
[   77.009666][ T5484] netlink: 124 bytes leftover after parsing attributes in process `syz.4.677'.
[   77.011406][ T5489] rdma_op ffff88811b55e180 conn xmit_rdma 0000000000000000
[   77.028337][   T29] kauditd_printk_skb: 171 callbacks suppressed
[   77.028372][   T29] audit: type=1326 audit(1765177668.089:5620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d18b5f749 code=0x7ffc0000
[   77.058669][   T29] audit: type=1326 audit(1765177668.089:5621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f5d18b5f749 code=0x7ffc0000
[   77.082766][   T29] audit: type=1326 audit(1765177668.089:5622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d18b5f749 code=0x7ffc0000
[   77.106153][   T29] audit: type=1326 audit(1765177668.089:5623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d18b5f749 code=0x7ffc0000
[   77.336327][ T5511] loop3: detected capacity change from 0 to 128
[   77.354377][ T5511] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   77.367796][ T5511] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.429774][ T5517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.453421][   T29] audit: type=1326 audit(1765177668.519:5624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.0.685" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d18b5f749 code=0x0
[   77.486874][ T5517] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.496367][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   77.516223][ T5517] loop1: detected capacity change from 0 to 512
[   77.523005][ T5517] ext4: Unknown parameter 'dont_appraise'
[   77.553844][ T5517] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   77.584663][ T5523] loop3: detected capacity change from 0 to 512
[   77.592036][ T5523] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   77.603148][ T5523] EXT4-fs (loop3): 1 truncate cleaned up
[   77.609243][ T5523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.634008][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.804156][ T5538] netlink: 'syz.3.698': attribute type 1 has an invalid length.
[   77.825593][ T5538] bond3: entered promiscuous mode
[   77.830724][ T5538] bond3: entered allmulticast mode
[   78.156999][ T5550] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.169377][ T5554] loop2: detected capacity change from 0 to 512
[   78.179637][ T5554] journal_path: Non-blockdev passed as './bus'
[   78.185903][ T5554] EXT4-fs: error: could not find journal device path
[   78.203836][ T5561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.705'.
[   78.229616][ T5565] netlink: 'syz.2.710': attribute type 10 has an invalid length.
[   78.237413][ T5565] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.710'.
[   78.263678][ T5550] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.308495][ T5573] netlink: 'syz.2.710': attribute type 1 has an invalid length.
[   78.316724][ T5573] netlink: 124 bytes leftover after parsing attributes in process `syz.2.710'.
[   78.332469][ T5550] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.371077][ T5574] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   78.404130][ T5550] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.488389][  T153] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.501614][  T153] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.516945][  T153] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.526278][  T153] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.590018][ T5578] loop3: detected capacity change from 0 to 512
[   78.640939][ T5578] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.712: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   78.666659][ T5578] EXT4-fs error (device loop3): ext4_quota_enable:7180: comm syz.3.712: Bad quota inode: 3, type: 0
[   78.678857][ T5578] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   78.693725][ T5578] EXT4-fs (loop3): mount failed
[   78.868683][ T5585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.877600][ T5585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.899340][ T5585] ext4: Unknown parameter 'dont_appraise'
[   78.909600][ T5585] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   79.052013][ T5587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'.
[   79.069515][ T5589] netlink: 'syz.0.716': attribute type 1 has an invalid length.
[   79.084144][ T5589] bond4: entered promiscuous mode
[   79.089220][ T5589] bond4: entered allmulticast mode
[   79.099024][ T5587] team0: Port device team_slave_1 removed
[   79.109000][ T5593] macvtap0: refused to change device tx_queue_len
[   79.171645][   T29] audit: type=1326 audit(1765177670.239:5625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   79.195158][   T29] audit: type=1326 audit(1765177670.239:5626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   79.218601][   T29] audit: type=1326 audit(1765177670.239:5627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   79.241952][   T29] audit: type=1326 audit(1765177670.239:5628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   79.265266][   T29] audit: type=1326 audit(1765177670.239:5629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   79.311209][ T5604] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[   79.319560][ T5604] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[   79.328802][ T5604] EXT4-fs (loop1): 1 truncate cleaned up
[   79.335044][ T5604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.361815][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.376683][ T5610] EXT4-fs: Ignoring removed nomblk_io_submit option
[   79.403614][ T5610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.471160][ T5620] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   79.486601][ T5620] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.562889][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   79.615750][ T5635] veth0: entered promiscuous mode
[   79.621866][ T5635] veth0 (unregistering): left promiscuous mode
[   79.673339][ T5635] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000)
[   79.681221][ T5635] FAT-fs (loop2): Filesystem has been set read-only
[   79.709033][ T5638] netlink: 'syz.3.729': attribute type 1 has an invalid length.
[   79.726905][ T5638] bond4: entered promiscuous mode
[   79.728168][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.732035][ T5638] bond4: entered allmulticast mode
[   79.867806][ T5649] bridge_slave_1: left allmulticast mode
[   79.873561][ T5649] bridge_slave_1: left promiscuous mode
[   79.879240][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.886997][ T5649] bridge_slave_0: left allmulticast mode
[   79.892693][ T5649] bridge_slave_0: left promiscuous mode
[   79.898441][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.189566][ T5671] EXT4-fs: Ignoring removed oldalloc option
[   80.199387][ T5673] veth0: entered promiscuous mode
[   80.206383][ T5671] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   80.217686][ T5673] veth0 (unregistering): left promiscuous mode
[   80.232896][ T5671] EXT4-fs (loop2): 1 truncate cleaned up
[   80.244835][ T5671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.316233][ T5682] macvtap0: refused to change device tx_queue_len
[   80.324114][ T5684] netlink: 'syz.3.747': attribute type 1 has an invalid length.
[   80.355397][ T5684] bond5: entered promiscuous mode
[   80.361229][ T5684] bond5: entered allmulticast mode
[   80.714880][ T5707] EXT4-fs: Ignoring removed nomblk_io_submit option
[   80.753849][ T5707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.782354][ T5717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.794924][ T5717] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.808752][ T5717] ext4: Unknown parameter 'dont_appraise'
[   80.823275][ T5717] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   80.941744][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.002984][ T5729] set_capacity_and_notify: 8 callbacks suppressed
[   81.003001][ T5729] loop3: detected capacity change from 0 to 512
[   81.032866][ T5729] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.760: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   81.058908][ T5729] EXT4-fs error (device loop3): ext4_quota_enable:7180: comm syz.3.760: Bad quota inode: 3, type: 0
[   81.070059][ T5729] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   81.071564][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.084996][ T5729] EXT4-fs (loop3): mount failed
[   81.101330][ T5737] loop2: detected capacity change from 0 to 512
[   81.108876][ T5737] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   81.121929][ T5737] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[   81.134106][ T5737] EXT4-fs (loop2): 1 truncate cleaned up
[   81.141339][ T5737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.168276][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.343165][ T5758] loop1: detected capacity change from 0 to 512
[   81.360637][ T5758] EXT4-fs: Ignoring removed oldalloc option
[   81.368062][ T5758] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   81.381719][ T5758] EXT4-fs (loop1): 1 truncate cleaned up
[   81.387757][ T5758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.818417][ T5771] rdma_op ffff88813dce3980 conn xmit_rdma 0000000000000000
[   82.079425][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.157398][ T5781] loop3: detected capacity change from 0 to 512
[   82.173586][ T5781] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.779: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   82.192516][ T5781] EXT4-fs error (device loop3): ext4_quota_enable:7180: comm syz.3.779: Bad quota inode: 3, type: 0
[   82.204504][ T5781] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   82.219406][ T5781] EXT4-fs (loop3): mount failed
[   82.261086][ T5790] netlink: 'syz.2.780': attribute type 1 has an invalid length.
[   82.261554][ T5792] loop3: detected capacity change from 0 to 128
[   82.280999][ T5790] bond3: entered promiscuous mode
[   82.286046][ T5790] bond3: entered allmulticast mode
[   82.291602][ T5792] veth0: entered promiscuous mode
[   82.292291][ T5790] __nla_validate_parse: 8 callbacks suppressed
[   82.292308][ T5790] netlink: 124 bytes leftover after parsing attributes in process `syz.2.780'.
[   82.313667][ T5792] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000)
[   82.321571][ T5792] FAT-fs (loop3): Filesystem has been set read-only
[   82.516645][ T5797] loop2: detected capacity change from 0 to 256
[   82.552296][ T5795] syz.3.782: attempt to access beyond end of device
[   82.552296][ T5795] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128
[   82.565663][ T5795] Buffer I/O error on dev loop3, logical block 128, lost async page write
[   82.576380][ T5795] syz.3.782: attempt to access beyond end of device
[   82.576380][ T5795] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128
[   82.589736][ T5795] Buffer I/O error on dev loop3, logical block 128, lost async page write
[   82.678224][ T5791] veth0: left promiscuous mode
[   82.812225][   T29] kauditd_printk_skb: 26 callbacks suppressed
[   82.812236][   T29] audit: type=1326 audit(1765177673.879:5656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5807 comm="syz.0.786" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d18b5f749 code=0x0
[   82.941606][ T5822] loop2: detected capacity change from 0 to 512
[   82.951340][ T5822] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.792: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   82.969555][ T5822] EXT4-fs error (device loop2): ext4_quota_enable:7180: comm syz.2.792: Bad quota inode: 3, type: 0
[   82.980886][ T5822] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   82.995733][ T5822] EXT4-fs (loop2): mount failed
[   83.017540][   T29] audit: type=1326 audit(1765177674.079:5657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.3.790" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34fe8ef749 code=0x0
[   83.688897][ T5841] macvtap0: refused to change device tx_queue_len
[   83.755482][   T29] audit: type=1326 audit(1765177674.819:5658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   83.779608][   T29] audit: type=1326 audit(1765177674.819:5659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   83.803039][   T29] audit: type=1326 audit(1765177674.819:5660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   83.827034][   T29] audit: type=1326 audit(1765177674.819:5661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   83.851109][   T29] audit: type=1326 audit(1765177674.819:5662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   83.874456][   T29] audit: type=1326 audit(1765177674.819:5663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   83.898468][   T29] audit: type=1326 audit(1765177674.819:5664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   83.922260][   T29] audit: type=1326 audit(1765177674.819:5665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983dddf749 code=0x7ffc0000
[   83.949627][ T5848] loop4: detected capacity change from 0 to 128
[   83.958207][ T5848] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   83.970496][ T5848] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.994710][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   84.015405][ T5851] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.061816][ T5859] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.075249][ T5860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.803'.
[   84.085708][ T5851] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.105007][ T5863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.805'.
[   84.152133][ T5851] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.164320][ T5859] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.227889][ T5867] loop3: detected capacity change from 0 to 512
[   84.234406][ T5867] EXT4-fs: Ignoring removed oldalloc option
[   84.240726][ T5867] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   84.252159][ T5867] EXT4-fs (loop3): 1 truncate cleaned up
[   84.258195][ T5867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.271722][ T5851] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.285043][ T5859] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.323897][ T5859] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.338038][  T365] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.349775][ T1848] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.360110][ T1848] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.372396][ T1848] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.391057][ T1848] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.412267][ T1848] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.426934][ T1848] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.442945][ T3528] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.965605][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.386046][ T5905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.821'.
[   85.388205][ T5901] bridge_slave_0: left allmulticast mode
[   85.400883][ T5901] bridge_slave_0: left promiscuous mode
[   85.406564][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.441797][ T5901] bridge_slave_1: left allmulticast mode
[   85.447532][ T5901] bridge_slave_1: left promiscuous mode
[   85.453563][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.474361][ T5911] netlink: 36 bytes leftover after parsing attributes in process `syz.0.821'.
[   85.476798][ T5901] bond0: (slave bond_slave_0): Releasing backup interface
[   85.502980][ T5915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.514753][ T5901] bond0: (slave bond_slave_1): Releasing backup interface
[   85.525915][ T5917] loop4: detected capacity change from 0 to 512
[   85.526685][ T5901] team0: Port device team_slave_0 removed
[   85.533048][ T5917] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   85.537966][ T5915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.556992][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.564399][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.573474][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.577875][ T5917] EXT4-fs (loop4): 1 truncate cleaned up
[   85.580872][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.598777][ T5901] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   85.598974][ T5917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.630914][ T5915] ext4: Unknown parameter 'dont_appraise'
[   85.651189][ T5915] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   85.677625][ T5922] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   85.690305][ T5922] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.705189][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.715139][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   85.759511][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'.
[   85.772258][ T5933] bridge3: the hash_elasticity option has been deprecated and is always 16
[   85.782296][ T5931] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.832: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   85.802282][ T5931] EXT4-fs error (device loop4): ext4_quota_enable:7180: comm syz.4.832: Bad quota inode: 3, type: 0
[   85.841634][ T5931] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   85.857112][ T5931] EXT4-fs (loop4): mount failed
[   85.909846][ T5944] journal_path: Non-blockdev passed as './bus'
[   85.916062][ T5944] EXT4-fs: error: could not find journal device path
[   85.965877][ T5950] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   85.988751][ T5950] EXT4-fs (loop1): 1 truncate cleaned up
[   86.001493][ T5950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.034313][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.115290][ T5954] set_capacity_and_notify: 5 callbacks suppressed
[   86.115335][ T5954] loop1: detected capacity change from 0 to 512
[   86.143754][ T5954] EXT4-fs (loop1): orphan cleanup on readonly fs
[   86.155785][ T5954] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.841: EA inode hash validation failed
[   86.170846][ T5954] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   86.201520][ T5954] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.841: corrupted inode contents
[   86.215342][ T5959] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   86.227759][ T5954] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.841: mark_inode_dirty error
[   86.243215][ T5954] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.841: corrupted inode contents
[   86.271734][ T5954] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.841: mark_inode_dirty error
[   86.310242][ T5954] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.841: mark inode dirty (error -117)
[   86.329518][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.845'.
[   86.341920][ T5965] bridge2: the hash_elasticity option has been deprecated and is always 16
[   86.387906][ T5954] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117)
[   86.412267][ T5954] EXT4-fs (loop1): 1 orphan inode deleted
[   86.429889][ T5954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   86.526195][ T5980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.548943][ T5980] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.596192][ T5980] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   86.735271][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.858'.
[   86.747675][ T5998] bridge7: the hash_elasticity option has been deprecated and is always 16
[   86.941707][ T6016] macvtap0: refused to change device tx_queue_len
[   87.090570][ T6017] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   87.451424][ T6024] loop3: detected capacity change from 0 to 512
[   87.459403][ T6024] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   87.469552][ T6024] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[   87.480451][ T6024] EXT4-fs (loop3): 1 truncate cleaned up
[   87.488348][ T6024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.516568][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.641673][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'.
[   87.655092][ T6039] bridge3: the hash_elasticity option has been deprecated and is always 16
[   87.794717][ T6049] loop2: detected capacity change from 0 to 512
[   87.808285][ T6049] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   87.823544][   T29] kauditd_printk_skb: 445 callbacks suppressed
[   87.823559][   T29] audit: type=1326 audit(1765177678.889:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5953 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febd6f865e7 code=0x7ffc0000
[   87.824599][ T6055] loop3: detected capacity change from 0 to 128
[   87.835257][   T29] audit: type=1326 audit(1765177678.889:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5953 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febd6f2b829 code=0x7ffc0000
[   87.853647][ T6049] EXT4-fs (loop2): 1 truncate cleaned up
[   87.883801][   T29] audit: type=1326 audit(1765177678.949:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5953 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febd6f865e7 code=0x7ffc0000
[   87.914544][   T29] audit: type=1326 audit(1765177678.979:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5953 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febd6f2b829 code=0x7ffc0000
[   87.937869][   T29] audit: type=1326 audit(1765177678.979:6115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5953 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febd6f865e7 code=0x7ffc0000
[   87.961251][   T29] audit: type=1326 audit(1765177678.979:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5953 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febd6f2b829 code=0x7ffc0000
[   87.963882][ T6049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.985548][   T29] audit: type=1326 audit(1765177678.979:6117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5953 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd6f8f749 code=0x7ffc0000
[   88.028951][ T6055] veth0: entered promiscuous mode
[   88.035562][ T6055] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000)
[   88.043465][ T6055] FAT-fs (loop3): Filesystem has been set read-only
[   88.051354][   T29] audit: type=1326 audit(1765177679.059:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5953 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febd6f865e7 code=0x7ffc0000
[   88.074595][   T29] audit: type=1326 audit(1765177679.059:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5953 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febd6f2b829 code=0x7ffc0000
[   88.098133][   T29] audit: type=1326 audit(1765177679.059:6120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5953 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd6f8f749 code=0x7ffc0000
[   88.132995][ T6059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.882'.
[   88.179628][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.464994][ T6055] syz.3.880: attempt to access beyond end of device
[   88.464994][ T6055] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128
[   88.478569][ T6055] Buffer I/O error on dev loop3, logical block 128, lost async page write
[   88.497120][ T6060] syz.3.880: attempt to access beyond end of device
[   88.497120][ T6060] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128
[   88.510630][ T6060] Buffer I/O error on dev loop3, logical block 128, lost async page write
[   88.526767][ T6060] syz.3.880: attempt to access beyond end of device
[   88.526767][ T6060] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128
[   88.540143][ T6060] Buffer I/O error on dev loop3, logical block 128, lost async page write
[   88.586444][ T6054] veth0: left promiscuous mode
[   88.709121][ T6096] netlink: 'syz.0.896': attribute type 1 has an invalid length.
[   88.723632][ T6096] bond5: entered promiscuous mode
[   88.728683][ T6096] bond5: entered allmulticast mode
[   88.735026][ T6096] netlink: 124 bytes leftover after parsing attributes in process `syz.0.896'.
[   88.833881][ T6104] FAULT_INJECTION: forcing a failure.
[   88.833881][ T6104] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   88.847039][ T6104] CPU: 0 UID: 0 PID: 6104 Comm: syz.4.900 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   88.847056][ T6104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   88.847142][ T6104] Call Trace:
[   88.847147][ T6104]  <TASK>
[   88.847152][ T6104]  __dump_stack+0x1d/0x30
[   88.847220][ T6104]  dump_stack_lvl+0xe8/0x140
[   88.847233][ T6104]  dump_stack+0x15/0x1b
[   88.847244][ T6104]  should_fail_ex+0x265/0x280
[   88.847257][ T6104]  should_fail+0xb/0x20
[   88.847279][ T6104]  should_fail_usercopy+0x1a/0x20
[   88.847293][ T6104]  _copy_to_user+0x20/0xa0
[   88.847308][ T6104]  simple_read_from_buffer+0xb5/0x130
[   88.847322][ T6104]  proc_fail_nth_read+0x10e/0x150
[   88.847370][ T6104]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   88.847469][ T6104]  vfs_read+0x1a8/0x770
[   88.847479][ T6104]  ? __rcu_read_unlock+0x4f/0x70
[   88.847494][ T6104]  ? __fget_files+0x184/0x1c0
[   88.847506][ T6104]  ? mutex_lock+0x58/0x90
[   88.847521][ T6104]  ksys_read+0xda/0x1a0
[   88.847532][ T6104]  __x64_sys_read+0x40/0x50
[   88.847606][ T6104]  x64_sys_call+0x2889/0x3000
[   88.847667][ T6104]  do_syscall_64+0xd8/0x2a0
[   88.847690][ T6104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.847782][ T6104] RIP: 0033:0x7f2ee29ae15c
[   88.847792][ T6104] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   88.847842][ T6104] RSP: 002b:00007f2ee140f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   88.847854][ T6104] RAX: ffffffffffffffda RBX: 00007f2ee2c05fa0 RCX: 00007f2ee29ae15c
[   88.847861][ T6104] RDX: 000000000000000f RSI: 00007f2ee140f0a0 RDI: 0000000000000007
[   88.847914][ T6104] RBP: 00007f2ee140f090 R08: 0000000000000000 R09: 0000000000000000
[   88.847921][ T6104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   88.847928][ T6104] R13: 00007f2ee2c06038 R14: 00007f2ee2c05fa0 R15: 00007ffc55482f58
[   88.847938][ T6104]  </TASK>
[   89.074807][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.092080][ T6110] loop4: detected capacity change from 0 to 512
[   89.105678][ T6110] journal_path: Non-blockdev passed as './bus'
[   89.112015][ T6110] EXT4-fs: error: could not find journal device path
[   89.350528][ T6130] process 'syz.2.912' launched './file1' with NULL argv: empty string added
[   89.435352][ T6135] xt_time: invalid argument - start or stop time greater than 23:59:59
[   89.506151][ T6140] netlink: 'syz.3.916': attribute type 1 has an invalid length.
[   89.522829][ T6140] bond6: entered promiscuous mode
[   89.527909][ T6140] bond6: entered allmulticast mode
[   89.535935][ T6140] netlink: 124 bytes leftover after parsing attributes in process `syz.3.916'.
[   89.660629][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.920'.
[   89.673025][ T6155] bridge4: the hash_elasticity option has been deprecated and is always 16
[   89.799190][ T6164] netlink: 24 bytes leftover after parsing attributes in process `syz.3.924'.
[   89.939747][ T6170] FAULT_INJECTION: forcing a failure.
[   89.939747][ T6170] name failslab, interval 1, probability 0, space 0, times 0
[   89.952593][ T6170] CPU: 1 UID: 0 PID: 6170 Comm: syz.2.926 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   89.952610][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   89.952618][ T6170] Call Trace:
[   89.952621][ T6170]  <TASK>
[   89.952626][ T6170]  __dump_stack+0x1d/0x30
[   89.952690][ T6170]  dump_stack_lvl+0xe8/0x140
[   89.952703][ T6170]  dump_stack+0x15/0x1b
[   89.952714][ T6170]  should_fail_ex+0x265/0x280
[   89.952735][ T6170]  should_failslab+0x8c/0xb0
[   89.952748][ T6170]  __kvmalloc_node_noprof+0x149/0x6b0
[   89.952793][ T6170]  ? xt_alloc_table_info+0x40/0x80
[   89.952811][ T6170]  ? should_fail_ex+0xdb/0x280
[   89.952823][ T6170]  xt_alloc_table_info+0x40/0x80
[   89.952964][ T6170]  do_ip6t_set_ctl+0x5a5/0x840
[   89.952982][ T6170]  nf_setsockopt+0x199/0x1b0
[   89.952995][ T6170]  ipv6_setsockopt+0x11a/0x130
[   89.953013][ T6170]  udpv6_setsockopt+0x99/0xb0
[   89.953098][ T6170]  sock_common_setsockopt+0x69/0x80
[   89.953109][ T6170]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   89.953121][ T6170]  __sys_setsockopt+0x184/0x200
[   89.953136][ T6170]  __x64_sys_setsockopt+0x64/0x80
[   89.953194][ T6170]  x64_sys_call+0x21d5/0x3000
[   89.953207][ T6170]  do_syscall_64+0xd8/0x2a0
[   89.953243][ T6170]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.953311][ T6170] RIP: 0033:0x7f983dddf749
[   89.953321][ T6170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.953331][ T6170] RSP: 002b:00007f983c847038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   89.953420][ T6170] RAX: ffffffffffffffda RBX: 00007f983e035fa0 RCX: 00007f983dddf749
[   89.953427][ T6170] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[   89.953435][ T6170] RBP: 00007f983c847090 R08: 00000000000004c0 R09: 0000000000000000
[   89.953442][ T6170] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[   89.953468][ T6170] R13: 00007f983e036038 R14: 00007f983e035fa0 R15: 00007fff39768d38
[   89.953479][ T6170]  </TASK>
[   90.171024][ T6172] loop2: detected capacity change from 0 to 128
[   90.179148][ T6172] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   90.192755][ T6172] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.214318][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   90.340063][ T6186] loop4: detected capacity change from 0 to 512
[   90.346698][ T6186] EXT4-fs: dax option not supported
[   90.395111][ T6192] macvtap0: refused to change device tx_queue_len
[   90.405998][ T6194] macvtap0: refused to change device tx_queue_len
[   90.433503][ T6196] macvtap0: refused to change device tx_queue_len
[   90.556263][ T6200] loop2: detected capacity change from 0 to 512
[   90.565810][ T6200] journal_path: Non-blockdev passed as './bus'
[   90.572143][ T6200] EXT4-fs: error: could not find journal device path
[   90.600939][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.943'.
[   90.612428][ T6209] bridge0: the hash_elasticity option has been deprecated and is always 16
[   90.735001][ T6222] loop2: detected capacity change from 0 to 512
[   90.748194][ T6222] EXT4-fs: dax option not supported
[   90.765515][ T6224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.775641][ T6224] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.783803][ T6225] loop3: detected capacity change from 0 to 512
[   90.790515][ T6225] EXT4-fs: Ignoring removed oldalloc option
[   90.798489][ T6225] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   90.811492][ T6224] ext4: Unknown parameter 'dont_appraise'
[   90.819072][ T6225] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   90.830621][ T6224] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   90.834480][ T6225] EXT4-fs (loop3): 1 truncate cleaned up
[   90.848052][ T6225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.377736][ T6228] macvtap0: refused to change device tx_queue_len
[   91.503443][ T6239] set_capacity_and_notify: 1 callbacks suppressed
[   91.503457][ T6239] loop4: detected capacity change from 0 to 128
[   91.522429][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.533908][ T3317] ==================================================================
[   91.536623][ T6239] veth0: entered promiscuous mode
[   91.541994][ T3317] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru
[   91.542024][ T3317] 
[   91.542029][ T3317] read-write to 0xffff888237d27550 of 8 bytes by task 6239 on cpu 1:
[   91.542044][ T3317]  find_get_block_common+0x4f3/0x950
[   91.554093][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'.
[   91.554744][ T3317]  bdev_getblk+0x4d/0x3f0
[   91.554767][ T3317]  __breadahead+0x29/0x170
[   91.554785][ T3317]  fat_get_entry+0x3d5/0x5d0
[   91.554808][ T3317]  fat_subdirs+0x59/0x190
[   91.596731][ T3317]  fat_read_root+0x316/0x360
[   91.601398][ T3317]  fat_fill_super+0x15bb/0x1ce0
[   91.606236][ T3317]  vfat_fill_super+0x24/0x30
[   91.610814][ T3317]  get_tree_bdev_flags+0x291/0x300
[   91.615910][ T3317]  get_tree_bdev+0x1f/0x30
[   91.620313][ T3317]  vfat_get_tree+0x1c/0x30
[   91.624718][ T3317]  vfs_get_tree+0x57/0x1d0
[   91.629119][ T3317]  do_new_mount+0x24d/0x6a0
[   91.633605][ T3317]  path_mount+0x4ab/0xb80
[   91.637913][ T3317]  __se_sys_mount+0x28c/0x2e0
[   91.642573][ T3317]  __x64_sys_mount+0x67/0x80
[   91.647152][ T3317]  x64_sys_call+0x2cca/0x3000
[   91.651814][ T3317]  do_syscall_64+0xd8/0x2a0
[   91.656311][ T3317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.662190][ T3317] 
[   91.664496][ T3317] read to 0xffff888237d27550 of 8 bytes by task 3317 on cpu 0:
[   91.672018][ T3317]  has_bh_in_lru+0x35/0x1f0
[   91.676507][ T3317]  smp_call_function_many_cond+0x2a9/0xc60
[   91.682300][ T3317]  on_each_cpu_cond_mask+0x3c/0x80
[   91.687403][ T3317]  invalidate_bh_lrus+0x2a/0x30
[   91.692237][ T3317]  blkdev_flush_mapping+0x9a/0x1a0
[   91.697334][ T3317]  bdev_release+0x2bf/0x3d0
[   91.701826][ T3317]  blkdev_release+0x15/0x20
[   91.706318][ T3317]  __fput+0x29b/0x650
[   91.710286][ T3317]  ____fput+0x1c/0x30
[   91.714266][ T3317]  task_work_run+0x131/0x1a0
[   91.718847][ T3317]  exit_to_user_mode_loop+0x1fe/0x740
[   91.724204][ T3317]  do_syscall_64+0x202/0x2a0
[   91.728789][ T3317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.734664][ T3317] 
[   91.736968][ T3317] value changed: 0xffff88811a99ef70 -> 0xffff88811a99eea0
[   91.744051][ T3317] 
[   91.746357][ T3317] Reported by Kernel Concurrency Sanitizer on:
[   91.752487][ T3317] CPU: 0 UID: 0 PID: 3317 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[   91.762360][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   91.772397][ T3317] ==================================================================
[   91.784616][ T6239] veth0 (unregistering): left promiscuous mode
[   91.814993][ T6240] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000)
[   91.822881][ T6240] FAT-fs (loop4): Filesystem has been set read-only
[   91.843216][ T6242] loop3: detected capacity change from 0 to 512
[   91.850431][ T6242] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   91.863179][ T6242] EXT4-fs (loop3): 1 truncate cleaned up
[   91.869338][ T6242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.896142][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.085116][ T6240] syz.4.954: attempt to access beyond end of device
[   92.085116][ T6240] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128
[   92.098538][ T6240] Buffer I/O error on dev loop4, logical block 128, lost async page write
[   92.107748][ T6239] syz.4.954: attempt to access beyond end of device
[   92.107748][ T6239] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128
[   92.121197][ T6239] Buffer I/O error on dev loop4, logical block 128, lost async page write