last executing test programs:

5m34.375699951s ago: executing program 4 (id=1250):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = gettid()
r3 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'bond_slave_1\x00', 0x0})
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
mbind(&(0x7f0000985000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
sendmmsg$inet(r1, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000340)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000001200)}}], 0x2, 0x4)

5m33.484499333s ago: executing program 4 (id=1263):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x2285, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x800, 0x0, 0x6}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8)
socket$key(0xf, 0x3, 0x2)

5m33.469679894s ago: executing program 4 (id=1264):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = gettid()
r3 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'bond_slave_1\x00', 0x0})
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
mbind(&(0x7f0000985000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
sendmmsg$inet(r1, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000340)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000001200)}}], 0x2, 0x4)

5m32.474072576s ago: executing program 4 (id=1283):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r0}, 0x18)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x38)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8001a0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x9001)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
creat(&(0x7f00000000c0)='./file1\x00', 0x1)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0})
r2 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x4, 0x10100, 0x0, 0x2000000}, &(0x7f0000000140), &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_setup(0x7ac1, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x0, 0x20f}, &(0x7f0000000700)=<r4=>0x0, &(0x7f0000000640))
syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0)

5m32.28948375s ago: executing program 4 (id=1285):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f0000000000000000020000000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$cgroup_int(r3, &(0x7f0000000000)=0xfe8e, 0x12)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="4fa3176756113369df8b913f2c0f5bc12e941d0000", 0x15}, {&(0x7f0000000180)="55c0cc0ba6f3b908ecb5c6e93e4dc70ed9c875dd444569fab05e32a08e71d1c480fa1ada9e6f952dea418e2eb2dd8dcdd18f82c2be42e92405d2eccae94e713594f13ebfe37be3cb7ce0eb237d63f25744e42baf027055a65359c121788ba610f7df23b902755c5771d93efedd8252aca1dda5efe1493ec0a5a9e965666d1afe33b384953a9102b3f1e446aea391ccff253fccc951d4091f1d6b69faee7e7d4b669c48b70ef01c3879af3f35e0682a49", 0xb0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)="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", 0x133}], 0x1}}], 0x2, 0x400c0)
r4 = timerfd_create(0x7, 0x80800)
timerfd_settime(r4, 0x3, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r4, &(0x7f0000000000))
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0xdf9, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)

5m31.705295458s ago: executing program 4 (id=1297):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x38)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8001a0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x9001)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
creat(&(0x7f00000000c0)='./file1\x00', 0x1)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0})
r2 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x4, 0x10100, 0x0, 0x2000000}, &(0x7f0000000140), &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_setup(0x7ac1, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x0, 0x20f}, &(0x7f0000000700)=<r4=>0x0, &(0x7f0000000640))
syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0)

5m31.705068988s ago: executing program 32 (id=1297):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x38)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8001a0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x9001)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
creat(&(0x7f00000000c0)='./file1\x00', 0x1)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0})
r2 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x4, 0x10100, 0x0, 0x2000000}, &(0x7f0000000140), &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_setup(0x7ac1, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x0, 0x20f}, &(0x7f0000000700)=<r4=>0x0, &(0x7f0000000640))
syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0)

2m48.841909177s ago: executing program 3 (id=3225):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x40010080, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x4040000)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
close_range(r1, 0xffffffffffffffff, 0x0)
inotify_init1(0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2m47.877016395s ago: executing program 3 (id=3244):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet(0x2, 0x1, 0xfffffffc)
socket$packet(0x11, 0xa, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000c00)="6588a86dd839d553bd17b8690f89", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bind$inet(r0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001ec0)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r0, @ANYBLOB="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"/4096, @ANYRES16=r2], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
pipe(&(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700)
splice(r7, 0x0, r8, &(0x7f00000002c0)=0x87ffffe, 0x6, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='xdp_cpumap_enqueue\x00', r6, 0x0, 0x4}, 0x18)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10)
write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r9, 0x0)

2m47.661362892s ago: executing program 3 (id=3250):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000340)=0x7) (fail_nth: 2)

2m47.345223818s ago: executing program 3 (id=3253):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x20042)
write$sndseq(r0, &(0x7f0000000540)=[{0x9, 0x44, 0x8, 0xff, @time={0xf, 0x3}, {0x1, 0x1}, {0x4, 0x34}, @quote={{0xdd, 0x2}, 0xe}}], 0x1c)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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")
r1 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}})
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x94)
setitimer(0x1, 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffff, 0xfffffffffffffffe, 0x0, 0x0, 0xd, 0xc, "41a0a18ef515814e914ddb349f24d2d4fdf2029d4ea0d5c318c72a7f44575de5928931313688f80c00e226d5f9de71854d921504681829ab9aea7bb39083bd3e", "b52d2e8698032804ba481f878cc65fac11ec880364f7acb23df30827152197f46a9f88676e0b06b603b41a00352efa0e1e53c5153c1a7cc757f3186cc14548be", "8b65cc03d13d051bee0900000006000800f15bc5104e6a8500000055b2a07060", [0x895, 0xcbd]})
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000001840)={0x54, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x65, 0x3, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x8000)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028005000500040000000800290056da02000a000200bd6af0a963080000280012800900010076657468"], 0x78}}, 0x0)

2m47.105316007s ago: executing program 3 (id=3258):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x80)

2m43.974883371s ago: executing program 3 (id=3309):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4ab39, 0x12143}, [@IFLA_GROUP={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000380), 0x2, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$igmp6(0xa, 0x3, 0x2)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010300000000a20000000100000008000100140000c7decc9e2458721800080003009fd78039d86657c7e52da15f01bf02e0f427d3f89c5faa53b4b55efb6497152541d9e9cada40b6fcbb7319d822eee517d4ffb10ff1f023d9f05637929bcfed37522d8776b0ef19da0b3312fa6d4c677a407c866a6a07dc9e6c2f7e60b23063f9655bd1de63be141b4851db7a03b19406df6eb9fc371a72e636f8ac6c1b9e44d0eefb06ef713b011691e43c216db00b0b2d95c217f9edaecf68c5cb4a37f9675ca9b814d52852097fb83d10eeaae69228755a346f3a1ae5b4bae758f6746cbe55", @ANYRES32=0x0, @ANYBLOB="0c0099000200000004000000"], 0x30}}, 0x44)

2m43.974789941s ago: executing program 33 (id=3309):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4ab39, 0x12143}, [@IFLA_GROUP={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000380), 0x2, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$igmp6(0xa, 0x3, 0x2)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010300000000a20000000100000008000100140000c7decc9e2458721800080003009fd78039d86657c7e52da15f01bf02e0f427d3f89c5faa53b4b55efb6497152541d9e9cada40b6fcbb7319d822eee517d4ffb10ff1f023d9f05637929bcfed37522d8776b0ef19da0b3312fa6d4c677a407c866a6a07dc9e6c2f7e60b23063f9655bd1de63be141b4851db7a03b19406df6eb9fc371a72e636f8ac6c1b9e44d0eefb06ef713b011691e43c216db00b0b2d95c217f9edaecf68c5cb4a37f9675ca9b814d52852097fb83d10eeaae69228755a346f3a1ae5b4bae758f6746cbe55", @ANYRES32=0x0, @ANYBLOB="0c0099000200000004000000"], 0x30}}, 0x44)

33.217993428s ago: executing program 1 (id=5882):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f00000003c0)='./file0\x00') (fail_nth: 3)

32.917345173s ago: executing program 1 (id=5885):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0) (fail_nth: 2)

32.741972277s ago: executing program 1 (id=5887):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000"], 0x70}}, 0x91)
sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0)

32.726561528s ago: executing program 1 (id=5888):
r0 = socket$inet6(0xa, 0x80002, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x1d, 0x0, &(0x7f00000000c0)) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000100)='./file0\x00') (async)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a95004, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

32.706151179s ago: executing program 1 (id=5889):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

32.629056586s ago: executing program 1 (id=5894):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x104, 0x10820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5}, 0x2300, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0xfffffffefffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0xa}, 0x18)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
pipe(&(0x7f00000008c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x7, 0x9)

32.627533906s ago: executing program 34 (id=5894):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x104, 0x10820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5}, 0x2300, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0xfffffffefffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0xa}, 0x18)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
pipe(&(0x7f00000008c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x7, 0x9)

3.596775799s ago: executing program 6 (id=6331):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x91)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

3.545596012s ago: executing program 6 (id=6333):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x108100, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r3, &(0x7f0000000400)={&(0x7f0000000300)=@ax25={{0x3, @rose}, [@remote, @bcast, @remote, @default, @netrom, @null, @rose, @default]}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000000080)=""/56, 0x38}, {&(0x7f0000000700)=""/204, 0xcc}], 0x3, &(0x7f0000000380)=""/85, 0x55}, 0x40012020)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

3.494388997s ago: executing program 6 (id=6334):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x400007}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x516, &(0x7f0000000740)="$eJzs3c9vG1kdAPCvnV9umm6ysIcFAVuWhYKq2om7G632wnJBQqvVIi2cEGqjxI2i2HEUO6UJkUjPXJGoxAn+BA5IHJB64s4NblzKAalABWqQEPJq7HGbOHFiNXHcxp+PNPJ7MxN/v8/SvBc/2/MCGFpXI2I3IsYj4nZETKf7M+kWH7a25LynT3YW957sLGai0fj0n6PpmTuL7fPbLqfPmYv4JKlPHBG3trW9ulAulzbSeqFeWS/UtrZvrFQWlkvLpbVicX5ufvb9m+8Vz6ytb1V++/i7Kx/98A+///KjP+1+66dJzt9OjyVtO7NA+7Rel7GY2rcveeU+6kewARhJ2zM+6ER4IdmI+FxEvJ2Wn8kNLicAoL8ajeloTO+vd5fp4RwA4OWXvOefikw2n77/n4psNp9vzuHl3ojJbLlaq1+/U91cW4rmHNZMjGXvrJRLs+lc4UyMZZL6XLP8vF7sqN+MiNcj4hcTl5r1/GK1vDSof3oAYMhd7hj//zPRGv974BMCAHiVGckBYPgcHv/HBpIHAHB+vP8HgOGzb/w/6re6AMAFlOv47T8AcPGdOP//Zvzsx+eTCgBwTnz+DwBD5fsff5xsjb30/tdLd7c2V6t3byyVaqv5yuZifrG6sZ5frlaXm/fsqZz0fOVqdX3u3di8V6iXavVCbWv7VqW6uVa/1byv962SHxYAwOC9/tbDv2QiYveDS80t2ms5+EIAXHgucxheI4NOABiY0UEnAAyM+Xggc8Lxrl8RetD9by6dIh+g/659ocv8//H/G/y/cT7pAX1k/h+G1+nm/80ewKvM/D8Mr0YjYz1/ABgyPbyD9xVBuOBe+PN/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGGJTzS2TzadrgU9FNpvPR1yJiJkYy9xZKZdmI+K1iPjzxNhEUp8bdNIAwCll/55J1/+6Nv3OVOfR8cx/J5qPEfGTX336y3sL9frGXLL/X8/21x+k+4tHBpjofxsAgH1GO3e0x+n2ON5e3/fpk53F9naeCT7+Tmtx0STuXrq1U28ln4uxiJj8d+ZAYzJntDDx7v2IeLOz/dlnx2fSlU874yexr/QtfjRbOHUgfvZA/GzzWOsxeS0+fwa5wLB5mPQ/Hx51/WXjavMxvf4yBzvTXPz8cOf6Atr9316js/9rXe+fXMk1+5qj+r+rvcZ494/f63rs/kjji6MRe4f63/aK0Llm6aj47/QY/69f+srb3Y41fh1xLY6L3yoV6pX1Qm1r+8ZKZWG5tFxaKxbn5+Zn37/5XrHQnKMutGeqD/vHB9df697+iMku8XMntP/rPbb/N/+7/aOvHhP/m187Kn423jgmfjImfqPH+AuTv+u6fHcSf6lL+0cPxB8/8HfJvus9xn/0t+2lHk8FAM5BbWt7daFcLm0onLaQ69czX35JGqhwTGEkyu35qJcin1MXBtwxAX33/KIfdCYAAAAAAAAAAAAAAEA3tR+kt/zr44/hBt1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALq7PAgAA//+iDcmp")

3.296122243s ago: executing program 6 (id=6335):
pipe2(&(0x7f0000001440)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r1, 0x0, r0, 0x0, 0x3, 0x0)

1.018218398s ago: executing program 7 (id=6382):
close(0x3)

951.478443ms ago: executing program 7 (id=6385):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}}, 0x0, 0x0, 0x38, 0x0, "0f424a2bc651a9f11381328af8daf6f4bd2827984afeb6b627cea1ba22d1af57aa193c5024c9e8b22a8796a538ed893952a1aa555418ba1b4d0bc0712c028ec32a9bc2fb29b52d39e8626bc90abcc02a"}, 0xd8)

951.087843ms ago: executing program 7 (id=6386):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
poll(&(0x7f0000000280)=[{r3, 0x2000}, {r2, 0x9}, {0xffffffffffffffff, 0x2140}, {}], 0x4, 0xd)

925.750255ms ago: executing program 7 (id=6389):
creat(&(0x7f0000000100)='./file0\x00', 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

925.452515ms ago: executing program 2 (id=6390):
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)=@ax25={{0x3, @rose}, [@remote, @bcast, @remote, @default, @netrom, @null, @rose, @default]}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000000080)=""/56, 0x38}, {&(0x7f0000000700)=""/204, 0xcc}], 0x3, &(0x7f0000000380)=""/85, 0x55}, 0x40012020)

855.42548ms ago: executing program 7 (id=6393):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)
write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
close_range(r0, r1, 0x0)

855.209821ms ago: executing program 2 (id=6394):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)

670.926076ms ago: executing program 2 (id=6400):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x2}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000001380)=0x1, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x108100, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0)
mq_timedreceive(r6, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10)
rt_sigtimedwait(0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x202001, 0x40)
utimensat(r7, 0x0, 0x0, 0x0)

647.901447ms ago: executing program 0 (id=6401):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000"], 0x70}}, 0x91)
sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0)

647.631787ms ago: executing program 0 (id=6402):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)={0x0, <r3=>0x0})
sched_setscheduler(r3, 0x3, &(0x7f0000000040)=0x7d8a)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX])
stat(&(0x7f0000001c40)='./file0\x00', 0x0)

644.601248ms ago: executing program 2 (id=6403):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]})
fsmount(0xffffffffffffffff, 0x0, 0x0)

627.997219ms ago: executing program 2 (id=6404):
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

623.273629ms ago: executing program 0 (id=6405):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x91)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

613.29842ms ago: executing program 2 (id=6406):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000000)='rss_stat\x00', r0}, 0x18)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
r2 = gettid()
timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000380))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000001440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r5, 0x0, r4, 0x0, 0x3, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000ad00000000000000bf91200000000000b7020000020000008500000008000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7, 0x0, 0xf904}, 0x18)
syz_clone(0x44066000, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setpipe(r3, 0x4, 0xfffffffffffff000)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000440)}, 0x10)
bind$bt_hci(r10, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f00000000c0)=0x96a)
r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r11, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socket(0x11, 0x800000003, 0x0)
socket$netlink(0x10, 0x3, 0x0)

561.289174ms ago: executing program 0 (id=6407):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
socket(0x10, 0x3, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40), 0xfc, 0x550, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==")
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb01001800000000000000be000000be00000003000000010000000100000f0200000004000000ffffff7ff8ffffffcd140100000000000001000000003d006305100000000a0000850200000009000000040000006b00090000000100000005000000ff00000006000000050000000300000000000000050000000a00000003000000030000000200000008000000010000001d0000001000000002000000000000000400000000000000ff00000002000000020000000a0000000e0000000000001105000000070000000000005f00"], &(0x7f0000000700)=""/166, 0xdb, 0xa6, 0x1, 0xfffffffe}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000500000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000000000000000000000000000000001000000000000000000"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES32=r3, @ANYBLOB="00000000000000000000000000758701e900f92b0000000000000000000000000000020000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$setpipe(r7, 0x407, 0x100004)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xf}, {0x1, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYRES16=r1], &(0x7f0000000480)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41100, 0x2, '\x00', r11, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800003}, 0x94)
r12 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f0000000000)='cpu<=0||!')

538.881756ms ago: executing program 0 (id=6408):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r0, @ANYRES64=r1, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000600040000000800000001000000", @ANYRES64=r1, @ANYBLOB="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"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
r3 = inotify_init()
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000000061114c0000000000850000001d0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48)
inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18)
close(0x3)

511.428019ms ago: executing program 0 (id=6409):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="01000000040000000800"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = dup(r0)
socket$kcm(0x10, 0x2, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)

277.145858ms ago: executing program 5 (id=6412):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
syz_emit_ethernet(0x32, &(0x7f0000001b40)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880f, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x3}}}}}}}, 0x0)
lsetxattr$system_posix_acl(&(0x7f00000073c0)='.\x00', &(0x7f0000007400)='system.posix_acl_default\x00', &(0x7f0000007440)={{}, {0x1, 0x2}, [{0x2, 0x2, 0xffffffffffffffff}], {0x4, 0x7}}, 0x2c, 0x3)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000080)={0x0, 0x9, 0x3, 0x0, 0x0, 0x8, 0x0})
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffef2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x1d, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000001b80)={0x14, r5, 0x8, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x10004004)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f00000002c0)={0x2, [0x0, 0x0]})
r7 = socket(0x1e, 0x4, 0x0)
r8 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000680)="00d97a", 0x3}], 0x1}}], 0x1, 0x9200000000000000)
dup3(r8, r7, 0x0)

180.900506ms ago: executing program 5 (id=6413):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000"], 0x70}}, 0x91)
sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0)

157.813167ms ago: executing program 5 (id=6414):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]})
fsmount(0xffffffffffffffff, 0x0, 0x0)

146.450928ms ago: executing program 5 (id=6415):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x2}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000001380)=0x1, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x108100, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0)
mq_timedreceive(r6, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10)
rt_sigtimedwait(0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x202001, 0x40)
utimensat(r7, 0x0, 0x0, 0x0)

123.97012ms ago: executing program 5 (id=6416):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)={0x0, <r3=>0x0})
sched_setscheduler(r3, 0x3, &(0x7f0000000040)=0x7d8a)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX])
stat(&(0x7f0000001c40)='./file0\x00', 0x0)

105.730711ms ago: executing program 5 (id=6417):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3183000000000000000019000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$can_j1939(0x1d, 0x2, 0x7)
unshare(0x64000680)

47.689186ms ago: executing program 7 (id=6418):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
socket(0x10, 0x3, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40), 0xfc, 0x550, &(0x7f0000000b00)="$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")
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb01001800000000000000be000000be00000003000000010000000100000f0200000004000000ffffff7ff8ffffffcd140100000000000001000000003d006305100000000a0000850200000009000000040000006b00090000000100000005000000ff00000006000000050000000300000000000000050000000a00000003000000030000000200000008000000010000001d0000001000000002000000000000000400000000000000ff00000002000000020000000a0000000e0000000000001105000000070000000000005f00"], &(0x7f0000000700)=""/166, 0xdb, 0xa6, 0x1, 0xfffffffe}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000500000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000000000000000000000000000000001000000000000000000"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES32=r3, @ANYBLOB="00000000000000000000000000758701e900f92b0000000000000000000000000000020000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b33393b6d1a0890e0878f0e1ac6e7049b0747959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$setpipe(r7, 0x407, 0x100004)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xf}, {0x1, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYRES16=r1], &(0x7f0000000480)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41100, 0x2, '\x00', r11, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800003}, 0x94)
r12 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f0000000000)='cpu<=0||!')

397.18µs ago: executing program 6 (id=6419):
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

0s ago: executing program 6 (id=6420):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
socket$inet6(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103040, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c002000018006000340000000001400018008c301007f000001080002007f0000010c00198008000100", @ANYRES32=r4], 0x40}}, 0x0)

kernel console output (not intermixed with test programs):

zkaller #0 PREEMPT(voluntary) 
[  409.223151][T20187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  409.223161][T20187] Call Trace:
[  409.223167][T20187]  <TASK>
[  409.223173][T20187]  __dump_stack+0x1d/0x30
[  409.223192][T20187]  dump_stack_lvl+0xe8/0x140
[  409.223263][T20187]  dump_stack+0x15/0x1b
[  409.223280][T20187]  should_fail_ex+0x265/0x280
[  409.223302][T20187]  should_fail+0xb/0x20
[  409.223320][T20187]  should_fail_usercopy+0x1a/0x20
[  409.223338][T20187]  _copy_from_user+0x1c/0xb0
[  409.223389][T20187]  ___sys_sendmsg+0xc1/0x1d0
[  409.223425][T20187]  __x64_sys_sendmsg+0xd4/0x160
[  409.223498][T20187]  x64_sys_call+0x191e/0x2ff0
[  409.223517][T20187]  do_syscall_64+0xd2/0x200
[  409.223543][T20187]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  409.223567][T20187]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  409.223592][T20187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.223633][T20187] RIP: 0033:0x7fbf3fbcebe9
[  409.223658][T20187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  409.223676][T20187] RSP: 002b:00007fbf3e637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  409.223758][T20187] RAX: ffffffffffffffda RBX: 00007fbf3fdf5fa0 RCX: 00007fbf3fbcebe9
[  409.223769][T20187] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000015
[  409.223782][T20187] RBP: 00007fbf3e637090 R08: 0000000000000000 R09: 0000000000000000
[  409.223795][T20187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  409.223809][T20187] R13: 00007fbf3fdf6038 R14: 00007fbf3fdf5fa0 R15: 00007ffee2cdb588
[  409.223828][T20187]  </TASK>
[  409.242413][T20175] Set syz1 is full, maxelem 65536 reached
[  409.266731][T20189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20189 comm=syz.0.5611
[  409.427453][T20197] loop5: detected capacity change from 0 to 512
[  409.434596][T20197] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  409.443834][T20197] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  409.453451][T20197] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  409.456152][T20200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5616'.
[  409.463536][T20197] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  409.479981][T20197] System zones: 0-2, 18-18, 34-35
[  409.485628][T20197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  409.510565][ T7498] usb usb12-port1: attempt power cycle
[  409.517914][T17064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  409.521040][T20202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20202 comm=syz.0.5617
[  409.568904][T20206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5619'.
[  409.684640][T20204] lo speed is unknown, defaulting to 1000
[  409.718966][T20219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  409.728372][T20219] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  409.843244][T20223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20223 comm=syz.5.5626
[  409.896067][T20229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20229 comm=syz.5.5629
[  409.922997][T20231] loop5: detected capacity change from 0 to 512
[  409.929845][T20231] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  409.938989][T20231] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  409.947905][T20231] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  409.958432][T20231] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  409.966579][T20231] System zones: 0-2, 18-18, 34-35
[  409.973239][T20231] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  410.001698][T17064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.149770][T20235] lo speed is unknown, defaulting to 1000
[  410.257994][T20237] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5632'.
[  410.522580][T20247] lo speed is unknown, defaulting to 1000
[  410.548839][T20250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20250 comm=syz.0.5638
[  410.620818][T20257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20257 comm=syz.0.5641
[  410.651545][T20259] loop0: detected capacity change from 0 to 512
[  410.668249][T20259] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  410.677454][T20259] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  410.680710][T20261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  410.695327][T20261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  410.708290][T20259] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  410.718907][T20259] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  410.727374][T20259] System zones: 0-2, 18-18, 34-35
[  410.733157][T20259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  410.755362][T13384] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.781097][T20265] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5644'.
[  411.059274][T20285] lo speed is unknown, defaulting to 1000
[  411.172864][T20290] loop5: detected capacity change from 0 to 512
[  411.180181][ T1038] usb usb8-port1: attempt power cycle
[  411.180450][T20290] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  411.194815][T20290] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  411.206726][T20290] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  411.219135][T20290] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  411.235648][T20290] System zones: 0-2, 18-18, 34-35
[  411.241495][T20290] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  411.267186][T17064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  411.269430][T20293] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5656'.
[  411.355042][ T7498] usb usb12-port1: unable to enumerate USB device
[  411.464634][T20312] selinux_netlink_send: 3 callbacks suppressed
[  411.464652][T20312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20312 comm=syz.5.5665
[  411.512227][T20309] lo speed is unknown, defaulting to 1000
[  411.596241][T20315] lo speed is unknown, defaulting to 1000
[  411.713930][T20318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  411.723760][T20318] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.803698][T20320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5668'.
[  411.868771][T20326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20326 comm=syz.0.5671
[  411.933934][T20330] loop0: detected capacity change from 0 to 512
[  411.940994][T20330] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  411.950139][T20330] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  411.958975][T20330] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  411.968977][T20330] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  411.977080][T20330] System zones: 0-2, 18-18, 34-35
[  411.982624][T20330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  412.002606][T13384] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.049065][T20338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20338 comm=syz.0.5677
[  412.151121][T20341] lo speed is unknown, defaulting to 1000
[  412.281492][T20348] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5680'.
[  412.328836][T20354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20354 comm=syz.5.5683
[  412.444802][T20368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20368 comm=syz.6.5690
[  412.472416][T20372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  412.480956][T20372] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  412.650550][T20374] lo speed is unknown, defaulting to 1000
[  413.008100][T20376] lo speed is unknown, defaulting to 1000
[  413.019980][ T1038] usb usb8-port1: unable to enumerate USB device
[  413.064960][T20381] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5695'.
[  413.109004][T20385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20385 comm=syz.1.5697
[  413.225055][T20396] loop6: detected capacity change from 0 to 512
[  413.234445][T20398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20398 comm=syz.0.5703
[  413.248306][T20396] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  413.257454][T20396] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  413.280166][T20396] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  413.295182][T20405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  413.304423][T20405] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  413.313425][T20396] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  413.322192][T20396] System zones: 0-2, 18-18, 34-35
[  413.335961][T20396] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  413.363951][T14113] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.381947][T20409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20409 comm=syz.2.5709
[  413.408041][T20411] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5708'.
[  413.551857][T20418] lo speed is unknown, defaulting to 1000
[  413.574997][T20426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20426 comm=syz.2.5716
[  413.714163][T20434] loop6: detected capacity change from 0 to 512
[  413.721173][T20434] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  413.730282][T20434] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  413.739160][T20434] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  413.748727][T20434] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  413.756844][T20434] System zones: 0-2, 18-18, 34-35
[  413.762614][T20434] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  413.818740][T20437] lo speed is unknown, defaulting to 1000
[  413.963834][T20441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5722'.
[  413.978496][T14113] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.142245][T20451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20451 comm=syz.6.5720
[  414.222762][T20463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  414.231348][T20463] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  414.288482][T20459] lo speed is unknown, defaulting to 1000
[  414.419724][T20469] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5734'.
[  414.584690][T20487] loop6: detected capacity change from 0 to 512
[  414.592740][T20487] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  414.601890][T20487] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  414.613500][T20487] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  414.623078][T20487] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  414.631125][T20487] System zones: 0-2, 18-18, 34-35
[  414.636803][T20487] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  414.656660][T14113] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.766497][T20491] lo speed is unknown, defaulting to 1000
[  414.812274][T20496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5746'.
[  415.065070][T20516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  415.073932][T20516] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  415.106389][T20517] lo speed is unknown, defaulting to 1000
[  415.372910][T13102] usb usb8-port1: attempt power cycle
[  415.399935][T20521] loop5: detected capacity change from 0 to 512
[  415.407368][T20521] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  415.416496][T20521] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  415.426150][T20521] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  415.436974][T20521] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  415.445687][T20521] System zones: 0-2, 18-18, 34-35
[  415.452503][T20521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  415.457274][T20523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5758'.
[  415.482348][T17064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.630638][T20531] lo speed is unknown, defaulting to 1000
[  415.636405][   T29] kauditd_printk_skb: 167 callbacks suppressed
[  415.636419][   T29] audit: type=1326 audit(5571.623:61842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.2.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005775ebe9 code=0x7ffc0000
[  415.665920][   T29] audit: type=1326 audit(5571.623:61843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.2.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f005775ebe9 code=0x7ffc0000
[  415.689489][   T29] audit: type=1326 audit(5571.623:61844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.2.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005775ebe9 code=0x7ffc0000
[  415.712568][   T29] audit: type=1326 audit(5571.623:61845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.2.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f005775ebe9 code=0x7ffc0000
[  415.735609][   T29] audit: type=1326 audit(5571.623:61846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.2.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005775ebe9 code=0x7ffc0000
[  415.758689][   T29] audit: type=1326 audit(5571.623:61847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.2.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f005775ebe9 code=0x7ffc0000
[  415.781819][   T29] audit: type=1326 audit(5571.623:61848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.2.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005775ebe9 code=0x7ffc0000
[  415.805284][   T29] audit: type=1326 audit(5571.623:61849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.2.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f005775ebe9 code=0x7ffc0000
[  415.828397][   T29] audit: type=1326 audit(5571.623:61850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.2.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005775ebe9 code=0x7ffc0000
[  415.851673][   T29] audit: type=1326 audit(5571.623:61851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.2.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f005775ebe9 code=0x7ffc0000
[  415.949516][T20554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5770'.
[  415.984817][T20558] loop6: detected capacity change from 0 to 512
[  415.991705][T20558] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  416.000767][T20558] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  416.018557][T20558] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  416.033811][T20558] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  416.050551][T20565] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5776'.
[  416.061803][T20558] System zones: 0-2, 18-18, 34-35
[  416.067909][T20558] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  416.111473][T20567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  416.123088][T20567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.123344][T14113] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.275763][T20576] lo speed is unknown, defaulting to 1000
[  416.292923][T20580] lo speed is unknown, defaulting to 1000
[  416.489900][T20590] selinux_netlink_send: 8 callbacks suppressed
[  416.489916][T20590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20590 comm=syz.5.5786
[  416.531475][T20592] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5787'.
[  416.558853][T20596] loop6: detected capacity change from 0 to 512
[  416.565952][T20596] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  416.575088][T20596] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  416.593646][T20596] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  416.605791][T20599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5790'.
[  416.613265][T20596] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  416.628464][T20596] System zones: 0-2, 18-18, 34-35
[  416.634681][T20596] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  416.688144][T14113] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.707157][T20603] loop5: detected capacity change from 0 to 512
[  416.716156][T20603] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  416.725306][T20603] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  416.747153][T20603] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  416.758777][T20603] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  416.767406][T20603] System zones: 0-2, 18-18, 34-35
[  416.773289][T20603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  416.790312][T20616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20616 comm=syz.6.5798
[  416.803506][T17064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.824515][T20620] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5799'.
[  416.850077][T20623] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5801'.
[  416.879468][T20625] loop6: detected capacity change from 0 to 1024
[  416.888834][T20627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  416.897621][T20627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.907350][T20625] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  417.065782][T14113] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.274195][T20633] lo speed is unknown, defaulting to 1000
[  417.731981][T20645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20645 comm=syz.5.5810
[  417.750649][T20647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5811'.
[  417.899145][T13102] usb usb8-port1: unable to enumerate USB device
[  417.918119][T20660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  417.929334][T20660] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  417.990391][T20668] loop6: detected capacity change from 0 to 512
[  417.997677][T20668] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  417.999502][T20670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20670 comm=syz.5.5822
[  418.006829][T20668] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  418.029123][T20668] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  418.038763][T20668] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  418.048212][T20668] System zones: 0-2, 18-18, 34-35
[  418.054176][T20668] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  418.081995][T14113] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.108273][T20678] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5824'.
[  418.192926][T20684] loop5: detected capacity change from 0 to 512
[  418.200039][T20684] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  418.209223][T20684] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  418.218161][T20684] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  418.227640][T20684] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  418.235740][T20684] System zones: 0-2, 18-18, 34-35
[  418.241321][T20684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  418.260783][T17064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.480064][T20691] lo speed is unknown, defaulting to 1000
[  418.728637][T20697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20697 comm=syz.1.5833
[  418.964057][T20713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20713 comm=syz.1.5841
[  419.008217][T20715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.017141][T20715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  419.171274][T20717] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5843'.
[  419.552323][T20725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5847'.
[  419.662593][T20735] loop0: detected capacity change from 0 to 2048
[  419.712699][T20739] FAULT_INJECTION: forcing a failure.
[  419.712699][T20739] name failslab, interval 1, probability 0, space 0, times 0
[  419.718918][T20735]  loop0: p4 < >
[  419.725475][T20739] CPU: 1 UID: 0 PID: 20739 Comm: syz.2.5853 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  419.725504][T20739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  419.725517][T20739] Call Trace:
[  419.725525][T20739]  <TASK>
[  419.725534][T20739]  __dump_stack+0x1d/0x30
[  419.725568][T20739]  dump_stack_lvl+0xe8/0x140
[  419.725586][T20739]  dump_stack+0x15/0x1b
[  419.725603][T20739]  should_fail_ex+0x265/0x280
[  419.725626][T20739]  should_failslab+0x8c/0xb0
[  419.725650][T20739]  kmem_cache_alloc_noprof+0x50/0x310
[  419.725732][T20739]  ? audit_log_start+0x365/0x6c0
[  419.725762][T20739]  audit_log_start+0x365/0x6c0
[  419.725792][T20739]  audit_seccomp+0x48/0x100
[  419.725816][T20739]  ? __seccomp_filter+0x68c/0x10d0
[  419.725916][T20739]  __seccomp_filter+0x69d/0x10d0
[  419.725938][T20739]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  419.725965][T20739]  ? vfs_write+0x7e8/0x960
[  419.725992][T20739]  __secure_computing+0x82/0x150
[  419.726048][T20739]  syscall_trace_enter+0xcf/0x1e0
[  419.726072][T20739]  do_syscall_64+0xac/0x200
[  419.726098][T20739]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  419.726146][T20739]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  419.726233][T20739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.726307][T20739] RIP: 0033:0x7f005775ebe9
[  419.726350][T20739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  419.726367][T20739] RSP: 002b:00007f00561bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000021
[  419.726387][T20739] RAX: ffffffffffffffda RBX: 00007f0057985fa0 RCX: 00007f005775ebe9
[  419.726465][T20739] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffffffffff
[  419.726556][T20739] RBP: 00007f00561bf090 R08: 0000000000000000 R09: 0000000000000000
[  419.726569][T20739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  419.726581][T20739] R13: 00007f0057986038 R14: 00007f0057985fa0 R15: 00007ffe48a33318
[  419.726600][T20739]  </TASK>
[  419.767871][T20744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20744 comm=syz.2.5856
[  420.389080][T20746] lo speed is unknown, defaulting to 1000
[  420.508048][T20753] lo speed is unknown, defaulting to 1000
[  420.633561][T20755] loop0: detected capacity change from 0 to 512
[  420.641257][T20755] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  420.650369][T20755] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  420.731811][T20755] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  420.741447][T20755] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  420.750546][T20755] System zones: 0-2, 18-18, 34-35
[  420.756188][T20755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  420.798869][T13384] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.903748][ T4080] usb usb8-port1: attempt power cycle
[  421.059535][   T29] kauditd_printk_skb: 159 callbacks suppressed
[  421.059564][   T29] audit: type=1326 audit(5577.054:62009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20769 comm="syz.1.5867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58950cebe9 code=0x7ffc0000
[  421.078559][T20770] __nla_validate_parse: 1 callbacks suppressed
[  421.078644][T20770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5867'.
[  421.089090][   T29] audit: type=1326 audit(5577.064:62010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20769 comm="syz.1.5867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58950cebe9 code=0x7ffc0000
[  421.127568][   T29] audit: type=1326 audit(5577.064:62011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20769 comm="syz.1.5867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58950cebe9 code=0x7ffc0000
[  421.150953][   T29] audit: type=1326 audit(5577.064:62012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20769 comm="syz.1.5867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f58950cd550 code=0x7ffc0000
[  421.174193][   T29] audit: type=1326 audit(5577.064:62013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20769 comm="syz.1.5867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58950cebe9 code=0x7ffc0000
[  421.197360][   T29] audit: type=1326 audit(5577.064:62014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20769 comm="syz.1.5867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58950cebe9 code=0x7ffc0000
[  421.220470][   T29] audit: type=1326 audit(5577.064:62015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20769 comm="syz.1.5867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f58950cd69f code=0x7ffc0000
[  421.243400][   T29] audit: type=1326 audit(5577.064:62016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20769 comm="syz.1.5867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58950cebe9 code=0x7ffc0000
[  421.266511][   T29] audit: type=1326 audit(5577.064:62017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20769 comm="syz.1.5867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58950cebe9 code=0x7ffc0000
[  421.289546][   T29] audit: type=1326 audit(5577.064:62018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20769 comm="syz.1.5867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f58950cebe9 code=0x7ffc0000
[  421.334159][T20773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20773 comm=syz.1.5868
[  421.374248][T20777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5870'.
[  421.489525][T20782] lo speed is unknown, defaulting to 1000
[  421.595567][T20784] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  421.602185][T20784] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  421.609652][T20784] vhci_hcd vhci_hcd.0: Device attached
[  421.621361][T20784] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(10)
[  421.627972][T20784] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  421.635527][T20784] vhci_hcd vhci_hcd.0: Device attached
[  421.642683][T20784] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  421.651923][T20784] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(14)
[  421.658552][T20784] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  421.666154][T20784] vhci_hcd vhci_hcd.0: Device attached
[  421.674257][T20784] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(17)
[  421.680927][T20784] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  421.688579][T20784] vhci_hcd vhci_hcd.0: Device attached
[  421.696532][T20784] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(19)
[  421.703180][T20784] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  421.710906][T20784] vhci_hcd vhci_hcd.0: Device attached
[  421.718555][T20784] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  421.735134][T20793] vhci_hcd: connection closed
[  421.735437][   T41] vhci_hcd: stop threads
[  421.744373][   T41] vhci_hcd: release socket
[  421.748796][   T41] vhci_hcd: disconnect device
[  421.755027][T20791] vhci_hcd: connection closed
[  421.755270][   T41] vhci_hcd: stop threads
[  421.764375][   T41] vhci_hcd: release socket
[  421.768848][   T41] vhci_hcd: disconnect device
[  421.775040][T20789] vhci_hcd: connection closed
[  421.775316][T20787] vhci_hcd: connection closed
[  421.780595][   T12] vhci_hcd: stop threads
[  421.789546][   T12] vhci_hcd: release socket
[  421.793963][   T12] vhci_hcd: disconnect device
[  421.799354][T20785] vhci_hcd: connection closed
[  421.801114][   T12] vhci_hcd: stop threads
[  421.810059][   T12] vhci_hcd: release socket
[  421.814520][   T12] vhci_hcd: disconnect device
[  421.819296][ T1038] vhci_hcd: vhci_device speed not set
[  421.826104][   T12] vhci_hcd: stop threads
[  421.830479][   T12] vhci_hcd: release socket
[  421.835014][   T12] vhci_hcd: disconnect device
[  421.888151][ T1038] usb 5-1: new full-speed USB device number 17 using vhci_hcd
[  421.895694][ T1038] usb 5-1: enqueue for inactive port 0
[  421.902262][ T1038] usb 5-1: enqueue for inactive port 0
[  421.907755][ T1038] usb 5-1: enqueue for inactive port 0
[  421.979243][ T1038] vhci_hcd: vhci_device speed not set
[  422.093658][T20807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20807 comm=syz.1.5879
[  422.126532][T20811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5881'.
[  422.152546][T20813] FAULT_INJECTION: forcing a failure.
[  422.152546][T20813] name failslab, interval 1, probability 0, space 0, times 0
[  422.165423][T20813] CPU: 0 UID: 0 PID: 20813 Comm: syz.1.5882 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  422.165440][T20813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  422.165509][T20813] Call Trace:
[  422.165514][T20813]  <TASK>
[  422.165519][T20813]  __dump_stack+0x1d/0x30
[  422.165532][T20813]  dump_stack_lvl+0xe8/0x140
[  422.165546][T20813]  dump_stack+0x15/0x1b
[  422.165556][T20813]  should_fail_ex+0x265/0x280
[  422.165568][T20813]  should_failslab+0x8c/0xb0
[  422.165592][T20813]  kmem_cache_alloc_lru_noprof+0x55/0x310
[  422.165725][T20813]  ? __d_alloc+0x3d/0x340
[  422.165741][T20813]  __d_alloc+0x3d/0x340
[  422.165759][T20813]  d_alloc_parallel+0x53/0xc60
[  422.165806][T20813]  ? selinux_inode_permission+0x62d/0x740
[  422.165825][T20813]  ? make_vfsuid+0x49/0xa0
[  422.165888][T20813]  ? lockref_get_not_dead+0x120/0x1c0
[  422.165904][T20813]  ? __rcu_read_unlock+0x4f/0x70
[  422.165917][T20813]  __lookup_slow+0x8c/0x250
[  422.165957][T20813]  lookup_slow+0x3c/0x60
[  422.166003][T20813]  walk_component+0x1ec/0x220
[  422.166047][T20813]  path_lookupat+0xfe/0x2a0
[  422.166072][T20813]  filename_lookup+0x147/0x340
[  422.166111][T20813]  user_path_at+0x3e/0x130
[  422.166146][T20813]  __se_sys_quotactl+0xb6/0x670
[  422.166165][T20813]  __x64_sys_quotactl+0x55/0x70
[  422.166176][T20813]  x64_sys_call+0x15d6/0x2ff0
[  422.166188][T20813]  do_syscall_64+0xd2/0x200
[  422.166204][T20813]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  422.166260][T20813]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  422.166291][T20813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.166303][T20813] RIP: 0033:0x7f58950cebe9
[  422.166312][T20813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  422.166322][T20813] RSP: 002b:00007f5893b2f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[  422.166341][T20813] RAX: ffffffffffffffda RBX: 00007f58952f5fa0 RCX: 00007f58950cebe9
[  422.166348][T20813] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffff80000202
[  422.166355][T20813] RBP: 00007f5893b2f090 R08: 0000000000000000 R09: 0000000000000000
[  422.166363][T20813] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001
[  422.166370][T20813] R13: 00007f58952f6038 R14: 00007f58952f5fa0 R15: 00007ffe24709c28
[  422.166458][T20813]  </TASK>
[  422.429134][T20819] FAULT_INJECTION: forcing a failure.
[  422.429134][T20819] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  422.442395][T20819] CPU: 1 UID: 0 PID: 20819 Comm: syz.1.5885 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  422.442430][T20819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  422.442443][T20819] Call Trace:
[  422.442449][T20819]  <TASK>
[  422.442457][T20819]  __dump_stack+0x1d/0x30
[  422.442479][T20819]  dump_stack_lvl+0xe8/0x140
[  422.442516][T20819]  dump_stack+0x15/0x1b
[  422.442530][T20819]  should_fail_ex+0x265/0x280
[  422.442550][T20819]  should_fail+0xb/0x20
[  422.442633][T20819]  should_fail_usercopy+0x1a/0x20
[  422.442655][T20819]  strncpy_from_user+0x25/0x230
[  422.442678][T20819]  ? kmem_cache_alloc_noprof+0x186/0x310
[  422.442716][T20819]  ? getname_flags+0x80/0x3b0
[  422.442738][T20819]  getname_flags+0xae/0x3b0
[  422.442810][T20819]  user_path_at+0x28/0x130
[  422.442841][T20819]  __x64_sys_umount+0x85/0xe0
[  422.442862][T20819]  x64_sys_call+0xdd2/0x2ff0
[  422.442884][T20819]  do_syscall_64+0xd2/0x200
[  422.442985][T20819]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  422.443010][T20819]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  422.443081][T20819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.443104][T20819] RIP: 0033:0x7f58950cebe9
[  422.443120][T20819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  422.443135][T20819] RSP: 002b:00007f5893b2f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  422.443153][T20819] RAX: ffffffffffffffda RBX: 00007f58952f5fa0 RCX: 00007f58950cebe9
[  422.443186][T20819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0
[  422.443197][T20819] RBP: 00007f5893b2f090 R08: 0000000000000000 R09: 0000000000000000
[  422.443208][T20819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  422.443239][T20819] R13: 00007f58952f6038 R14: 00007f58952f5fa0 R15: 00007ffe24709c28
[  422.443255][T20819]  </TASK>
[  422.701862][T20831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20831 comm=syz.2.5891
[  422.855651][T20839] lo speed is unknown, defaulting to 1000
[  422.861963][T20835] lo speed is unknown, defaulting to 1000
[  423.001757][T20839] chnl_net:caif_netlink_parms(): no params data found
[  423.012175][   T12] bridge_slave_1: left allmulticast mode
[  423.017832][   T12] bridge_slave_1: left promiscuous mode
[  423.023563][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.033909][   T12] bridge_slave_0: left allmulticast mode
[  423.039722][   T12] bridge_slave_0: left promiscuous mode
[  423.045380][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.122078][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  423.125685][ T4080] usb usb8-port1: unable to enumerate USB device
[  423.144809][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  423.155671][   T12] bond0 (unregistering): Released all slaves
[  423.231326][T20864] FAULT_INJECTION: forcing a failure.
[  423.231326][T20864] name failslab, interval 1, probability 0, space 0, times 0
[  423.244004][T20864] CPU: 1 UID: 0 PID: 20864 Comm: syz.6.5900 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  423.244080][T20864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  423.244169][T20864] Call Trace:
[  423.244176][T20864]  <TASK>
[  423.244185][T20864]  __dump_stack+0x1d/0x30
[  423.244208][T20864]  dump_stack_lvl+0xe8/0x140
[  423.244229][T20864]  dump_stack+0x15/0x1b
[  423.244246][T20864]  should_fail_ex+0x265/0x280
[  423.244269][T20864]  should_failslab+0x8c/0xb0
[  423.244305][T20864]  kmem_cache_alloc_noprof+0x50/0x310
[  423.244352][T20864]  ? audit_log_start+0x365/0x6c0
[  423.244383][T20864]  audit_log_start+0x365/0x6c0
[  423.244450][T20864]  audit_seccomp+0x48/0x100
[  423.244473][T20864]  ? __seccomp_filter+0x68c/0x10d0
[  423.244495][T20864]  __seccomp_filter+0x69d/0x10d0
[  423.244519][T20864]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  423.244607][T20864]  ? vfs_write+0x7e8/0x960
[  423.244692][T20864]  __secure_computing+0x82/0x150
[  423.244716][T20864]  syscall_trace_enter+0xcf/0x1e0
[  423.244742][T20864]  do_syscall_64+0xac/0x200
[  423.244769][T20864]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  423.244823][T20864]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  423.244843][T20864]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.244861][T20864] RIP: 0033:0x7ff8f49aebe9
[  423.244877][T20864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  423.244895][T20864] RSP: 002b:00007ff8f3417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  423.244961][T20864] RAX: ffffffffffffffda RBX: 00007ff8f4bd5fa0 RCX: 00007ff8f49aebe9
[  423.244972][T20864] RDX: 0000000000000080 RSI: 0000200000002040 RDI: ffffffffffffff9c
[  423.244986][T20864] RBP: 00007ff8f3417090 R08: 0000000000000000 R09: 0000000000000000
[  423.245000][T20864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  423.245013][T20864] R13: 00007ff8f4bd6038 R14: 00007ff8f4bd5fa0 R15: 00007ffd0fad4458
[  423.245032][T20864]  </TASK>
[  423.459197][T20865] lo speed is unknown, defaulting to 1000
[  423.490560][T20839] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.497899][T20839] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.510038][T20839] bridge_slave_0: entered allmulticast mode
[  423.516670][T20839] bridge_slave_0: entered promiscuous mode
[  423.523742][T20839] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.530826][T20839] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.538696][T20839] bridge_slave_1: entered allmulticast mode
[  423.545480][T20839] bridge_slave_1: entered promiscuous mode
[  423.596381][   T12] hsr_slave_0: left promiscuous mode
[  423.608564][   T12] hsr_slave_1: left promiscuous mode
[  423.616157][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  423.625000][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  423.632390][T20869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20869 comm=syz.2.5902
[  423.638996][T20871] loop6: detected capacity change from 0 to 512
[  423.654191][T20871] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  423.663394][T20871] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  423.675039][T20871] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  423.697978][T20871] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  423.719047][T20871] System zones: 0-2, 18-18, 34-35
[  423.733003][   T12] team0 (unregistering): Port device team_slave_1 removed
[  423.744531][T20871] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  423.762174][   T12] team0 (unregistering): Port device team_slave_0 removed
[  423.807435][T20839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  423.825118][T20839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  423.837932][T14113] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.859194][T20839] team0: Port device team_slave_0 added
[  423.865943][T20839] team0: Port device team_slave_1 added
[  423.937402][T20839] batman_adv: batadv0: Adding interface: batadv_slave_0
[  423.944402][T20839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.970428][T20839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  423.985217][T20889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5910'.
[  423.995701][T20839] batman_adv: batadv0: Adding interface: batadv_slave_1
[  424.002822][T20839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.028865][T20839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  424.053226][T20890] lo speed is unknown, defaulting to 1000
[  424.090559][T20839] hsr_slave_0: entered promiscuous mode
[  424.096662][T20839] hsr_slave_1: entered promiscuous mode
[  424.107282][T20839] debugfs: 'hsr0' already exists in 'hsr'
[  424.113059][T20839] Cannot create hsr debugfs directory
[  424.144402][T20894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5912'.
[  424.263110][T20897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20897 comm=syz.0.5913
[  424.356230][T20839] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  424.365082][T20839] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  424.400328][T20839] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  424.410128][T20903] FAULT_INJECTION: forcing a failure.
[  424.410128][T20903] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  424.423508][T20903] CPU: 1 UID: 0 PID: 20903 Comm: syz.0.5916 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  424.423604][T20903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  424.423614][T20903] Call Trace:
[  424.423620][T20903]  <TASK>
[  424.423627][T20903]  __dump_stack+0x1d/0x30
[  424.423645][T20903]  dump_stack_lvl+0xe8/0x140
[  424.423730][T20903]  dump_stack+0x15/0x1b
[  424.423748][T20903]  should_fail_ex+0x265/0x280
[  424.423800][T20903]  should_fail+0xb/0x20
[  424.423861][T20903]  should_fail_usercopy+0x1a/0x20
[  424.423908][T20903]  _copy_from_user+0x1c/0xb0
[  424.423993][T20903]  ___sys_sendmsg+0xc1/0x1d0
[  424.424029][T20903]  __x64_sys_sendmsg+0xd4/0x160
[  424.424056][T20903]  x64_sys_call+0x191e/0x2ff0
[  424.424112][T20903]  do_syscall_64+0xd2/0x200
[  424.424139][T20903]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  424.424165][T20903]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  424.424224][T20903]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.424247][T20903] RIP: 0033:0x7fbf3fbcebe9
[  424.424297][T20903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  424.424393][T20903] RSP: 002b:00007fbf3e637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  424.424491][T20903] RAX: ffffffffffffffda RBX: 00007fbf3fdf5fa0 RCX: 00007fbf3fbcebe9
[  424.424502][T20903] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003
[  424.424514][T20903] RBP: 00007fbf3e637090 R08: 0000000000000000 R09: 0000000000000000
[  424.424524][T20903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  424.424548][T20903] R13: 00007fbf3fdf6038 R14: 00007fbf3fdf5fa0 R15: 00007ffee2cdb588
[  424.424568][T20903]  </TASK>
[  424.659397][T20839] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  424.738807][T20839] 8021q: adding VLAN 0 to HW filter on device bond0
[  424.752797][T20839] 8021q: adding VLAN 0 to HW filter on device team0
[  424.763978][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.771051][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[  424.795960][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.803056][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  424.824951][T20915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  424.833739][T20915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  424.900328][T20839] 8021q: adding VLAN 0 to HW filter on device batadv0
[  424.931727][T20926] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5921'.
[  424.994962][T20938] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5923'.
[  425.022607][T20839] veth0_vlan: entered promiscuous mode
[  425.031051][T20839] veth1_vlan: entered promiscuous mode
[  425.046772][T20839] veth0_macvtap: entered promiscuous mode
[  425.054617][T20839] veth1_macvtap: entered promiscuous mode
[  425.066128][T20839] batman_adv: batadv0: Interface activated: batadv_slave_0
[  425.077034][T20839] batman_adv: batadv0: Interface activated: batadv_slave_1
[  425.087969][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  425.097104][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  425.122411][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  425.125083][T20948] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5926'.
[  425.138928][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  425.264568][T20959] veth0_to_team: entered promiscuous mode
[  425.277037][T20957] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  425.293854][T20959] loop7: detected capacity change from 0 to 512
[  425.301046][T20959] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  425.319589][T20959] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  425.386975][T20967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5932'.
[  425.428544][T20976] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5936'.
[  425.522838][T20987] FAULT_INJECTION: forcing a failure.
[  425.522838][T20987] name failslab, interval 1, probability 0, space 0, times 0
[  425.535560][T20987] CPU: 0 UID: 0 PID: 20987 Comm: syz.2.5939 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  425.535590][T20987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  425.535682][T20987] Call Trace:
[  425.535690][T20987]  <TASK>
[  425.535719][T20987]  __dump_stack+0x1d/0x30
[  425.535742][T20987]  dump_stack_lvl+0xe8/0x140
[  425.535760][T20987]  dump_stack+0x15/0x1b
[  425.535774][T20987]  should_fail_ex+0x265/0x280
[  425.535868][T20987]  should_failslab+0x8c/0xb0
[  425.535893][T20987]  kmem_cache_alloc_noprof+0x50/0x310
[  425.535917][T20987]  ? security_file_alloc+0x32/0x100
[  425.535945][T20987]  security_file_alloc+0x32/0x100
[  425.536031][T20987]  init_file+0x5c/0x1d0
[  425.536054][T20987]  alloc_empty_file+0x8b/0x200
[  425.536077][T20987]  path_openat+0x68/0x2170
[  425.536092][T20987]  ? read_tsc+0x9/0x20
[  425.536162][T20987]  ? ktime_get+0x1eb/0x210
[  425.536185][T20987]  ? _parse_integer_limit+0x170/0x190
[  425.536306][T20987]  ? kstrtoull+0x111/0x140
[  425.536327][T20987]  ? kstrtouint+0x76/0xc0
[  425.536346][T20987]  do_filp_open+0x109/0x230
[  425.536374][T20987]  do_sys_openat2+0xa6/0x110
[  425.536431][T20987]  __x64_sys_openat+0xf2/0x120
[  425.536457][T20987]  x64_sys_call+0x2e9c/0x2ff0
[  425.536531][T20987]  do_syscall_64+0xd2/0x200
[  425.536558][T20987]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  425.536584][T20987]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.536664][T20987] RIP: 0033:0x7f005775ebe9
[  425.536679][T20987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  425.536697][T20987] RSP: 002b:00007f005619e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  425.536725][T20987] RAX: ffffffffffffffda RBX: 00007f0057986090 RCX: 00007f005775ebe9
[  425.536739][T20987] RDX: 00000000000c0141 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  425.536752][T20987] RBP: 00007f005619e090 R08: 0000000000000000 R09: 0000000000000000
[  425.536766][T20987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  425.536779][T20987] R13: 00007f0057986128 R14: 00007f0057986090 R15: 00007ffe48a33318
[  425.536841][T20987]  </TASK>
[  425.766269][T20990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.775341][T20990] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  425.798418][ T4080] usb usb8-port1: attempt power cycle
[  425.873703][T20991] lo speed is unknown, defaulting to 1000
[  426.076255][   T29] kauditd_printk_skb: 398 callbacks suppressed
[  426.076268][   T29] audit: type=1326 audit(5582.064:62415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20958 comm="syz.7.5930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa09b365ba7 code=0x7ffc0000
[  426.206989][T20839] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.238804][   T29] audit: type=1326 audit(5582.104:62416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20958 comm="syz.7.5930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa09b30add9 code=0x7ffc0000
[  426.261989][   T29] audit: type=1326 audit(5582.104:62417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20958 comm="syz.7.5930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa09b365ba7 code=0x7ffc0000
[  426.284993][   T29] audit: type=1326 audit(5582.104:62418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20958 comm="syz.7.5930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa09b30add9 code=0x7ffc0000
[  426.308130][   T29] audit: type=1326 audit(5582.104:62419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20958 comm="syz.7.5930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fa09b36ebe9 code=0x7ffc0000
[  426.331189][   T29] audit: type=1326 audit(5582.104:62420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20958 comm="syz.7.5930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa09b365ba7 code=0x7ffc0000
[  426.354338][   T29] audit: type=1326 audit(5582.104:62421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20958 comm="syz.7.5930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa09b30add9 code=0x7ffc0000
[  426.377488][   T29] audit: type=1326 audit(5582.104:62422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20958 comm="syz.7.5930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fa09b36ebe9 code=0x7ffc0000
[  426.400601][   T29] audit: type=1326 audit(5582.114:62423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20958 comm="syz.7.5930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa09b365ba7 code=0x7ffc0000
[  426.423637][   T29] audit: type=1326 audit(5582.114:62424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20958 comm="syz.7.5930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa09b30add9 code=0x7ffc0000
[  426.462874][T20998] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5945'.
[  426.534327][T21003] loop6: detected capacity change from 0 to 512
[  426.550662][T21003] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  426.551233][T21010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5950'.
[  426.559816][T21003] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  426.568170][T21008] loop7: detected capacity change from 0 to 512
[  426.585432][T21003] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  426.607669][T21008] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  426.612771][T21003] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  426.616889][T21008] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  426.645547][T21003] System zones: 0-2, 18-18, 34-35
[  426.656804][T21003] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  426.670108][T21008] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended
[  426.679854][T21008] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  426.685554][T21021] FAULT_INJECTION: forcing a failure.
[  426.685554][T21021] name failslab, interval 1, probability 0, space 0, times 0
[  426.700744][T21021] CPU: 1 UID: 0 PID: 21021 Comm: syz.2.5951 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  426.700771][T21021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  426.700832][T21021] Call Trace:
[  426.700839][T21021]  <TASK>
[  426.700847][T21021]  __dump_stack+0x1d/0x30
[  426.700869][T21021]  dump_stack_lvl+0xe8/0x140
[  426.700889][T21021]  dump_stack+0x15/0x1b
[  426.700904][T21021]  should_fail_ex+0x265/0x280
[  426.700922][T21021]  ? __genradix_ptr_alloc+0x169/0x340
[  426.701009][T21021]  should_failslab+0x8c/0xb0
[  426.701033][T21021]  __kmalloc_cache_noprof+0x4c/0x320
[  426.701086][T21021]  __genradix_ptr_alloc+0x169/0x340
[  426.701111][T21021]  proc_map_files_readdir+0x368/0x690
[  426.701191][T21021]  iterate_dir+0x114/0x330
[  426.701207][T21021]  ? mutex_lock+0xd/0x30
[  426.701225][T21021]  __se_sys_getdents+0x88/0x1b0
[  426.701240][T21021]  ? __pfx_filldir+0x10/0x10
[  426.701258][T21021]  __x64_sys_getdents+0x43/0x50
[  426.701274][T21021]  x64_sys_call+0xee7/0x2ff0
[  426.701319][T21021]  do_syscall_64+0xd2/0x200
[  426.701340][T21021]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  426.701360][T21021]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  426.701420][T21021]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.701440][T21021] RIP: 0033:0x7f005775ebe9
[  426.701454][T21021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  426.701489][T21021] RSP: 002b:00007f00561bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  426.701506][T21021] RAX: ffffffffffffffda RBX: 00007f0057985fa0 RCX: 00007f005775ebe9
[  426.701554][T21021] RDX: 000000000000006f RSI: 0000200000000100 RDI: 0000000000000006
[  426.701567][T21021] RBP: 00007f00561bf090 R08: 0000000000000000 R09: 0000000000000000
[  426.701580][T21021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  426.701593][T21021] R13: 00007f0057986038 R14: 00007f0057985fa0 R15: 00007ffe48a33318
[  426.701738][T21021]  </TASK>
[  426.709463][T21008] System zones: 
[  426.775728][T21024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21024 comm=syz.2.5952
[  426.778693][T21008] 0-2, 18-18, 34-35
[  426.794051][T21008] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  426.837055][T14113] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.947651][T20839] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  427.095363][T21045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5962'.
[  427.122734][T21047] FAULT_INJECTION: forcing a failure.
[  427.122734][T21047] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  427.135896][T21047] CPU: 0 UID: 0 PID: 21047 Comm: syz.2.5963 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  427.136002][T21047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  427.136009][T21047] Call Trace:
[  427.136014][T21047]  <TASK>
[  427.136019][T21047]  __dump_stack+0x1d/0x30
[  427.136032][T21047]  dump_stack_lvl+0xe8/0x140
[  427.136043][T21047]  dump_stack+0x15/0x1b
[  427.136122][T21047]  should_fail_ex+0x265/0x280
[  427.136134][T21047]  should_fail+0xb/0x20
[  427.136144][T21047]  should_fail_usercopy+0x1a/0x20
[  427.136156][T21047]  strncpy_from_user+0x25/0x230
[  427.136232][T21047]  path_getxattrat+0xab/0x2a0
[  427.136254][T21047]  __x64_sys_fgetxattr+0x59/0x70
[  427.136286][T21047]  x64_sys_call+0x1ab3/0x2ff0
[  427.136299][T21047]  do_syscall_64+0xd2/0x200
[  427.136314][T21047]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  427.136367][T21047]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  427.136380][T21047]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.136393][T21047] RIP: 0033:0x7f005775ebe9
[  427.136431][T21047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  427.136442][T21047] RSP: 002b:00007f00561bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1
[  427.136454][T21047] RAX: ffffffffffffffda RBX: 00007f0057985fa0 RCX: 00007f005775ebe9
[  427.136461][T21047] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000005
[  427.136504][T21047] RBP: 00007f00561bf090 R08: 0000000000000000 R09: 0000000000000000
[  427.136536][T21047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  427.136543][T21047] R13: 00007f0057986038 R14: 00007f0057985fa0 R15: 00007ffe48a33318
[  427.136585][T21047]  </TASK>
[  427.348191][T21049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21049 comm=syz.2.5964
[  427.378496][T21050] lo speed is unknown, defaulting to 1000
[  427.910234][T21075] FAULT_INJECTION: forcing a failure.
[  427.910234][T21075] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  427.923356][T21075] CPU: 0 UID: 0 PID: 21075 Comm: syz.7.5972 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  427.923402][T21075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  427.923413][T21075] Call Trace:
[  427.923419][T21075]  <TASK>
[  427.923427][T21075]  __dump_stack+0x1d/0x30
[  427.923463][T21075]  dump_stack_lvl+0xe8/0x140
[  427.923481][T21075]  dump_stack+0x15/0x1b
[  427.923509][T21075]  should_fail_ex+0x265/0x280
[  427.923530][T21075]  should_fail+0xb/0x20
[  427.923625][T21075]  should_fail_usercopy+0x1a/0x20
[  427.923646][T21075]  _copy_to_user+0x20/0xa0
[  427.923700][T21075]  simple_read_from_buffer+0xb5/0x130
[  427.923724][T21075]  proc_fail_nth_read+0x10e/0x150
[  427.923752][T21075]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  427.923776][T21075]  vfs_read+0x1a8/0x770
[  427.923820][T21075]  ? __rcu_read_unlock+0x4f/0x70
[  427.923879][T21075]  ? __fget_files+0x184/0x1c0
[  427.923901][T21075]  ksys_read+0xda/0x1a0
[  427.923920][T21075]  __x64_sys_read+0x40/0x50
[  427.924007][T21075]  x64_sys_call+0x27bc/0x2ff0
[  427.924026][T21075]  do_syscall_64+0xd2/0x200
[  427.924050][T21075]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  427.924122][T21075]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  427.924142][T21075]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.924161][T21075] RIP: 0033:0x7fa09b36d5fc
[  427.924262][T21075] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  427.924278][T21075] RSP: 002b:00007fa099dd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  427.924343][T21075] RAX: ffffffffffffffda RBX: 00007fa09b595fa0 RCX: 00007fa09b36d5fc
[  427.924356][T21075] RDX: 000000000000000f RSI: 00007fa099dd70a0 RDI: 0000000000000006
[  427.924369][T21075] RBP: 00007fa099dd7090 R08: 0000000000000000 R09: 0000000000000000
[  427.924427][T21075] R10: 00000000126d5ee9 R11: 0000000000000246 R12: 0000000000000001
[  427.924438][T21075] R13: 00007fa09b596038 R14: 00007fa09b595fa0 R15: 00007fffcb5f2e58
[  427.924455][T21075]  </TASK>
[  428.128153][ T4080] usb usb8-port1: unable to enumerate USB device
[  428.154827][T21077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5973'.
[  428.186302][T21083] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  428.215452][T21084] lo speed is unknown, defaulting to 1000
[  428.245888][T21085] loop5: detected capacity change from 0 to 2048
[  428.264805][T21088] loop0: detected capacity change from 0 to 512
[  428.269329][T21088] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  428.269348][T21088] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  428.277278][T21088] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  428.277388][T21088] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  428.277489][T21088] System zones: 0-2, 18-18, 34-35
[  428.278578][T21088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  428.301645][T13384] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.307213][T21085]  loop5: p2 p3 p7
[  428.331816][T21085] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5975'.
[  428.613481][T21115] loop0: detected capacity change from 0 to 1024
[  428.654270][T21115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  428.783353][T21121] FAULT_INJECTION: forcing a failure.
[  428.783353][T21121] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  428.796597][T21121] CPU: 0 UID: 0 PID: 21121 Comm: syz.7.5987 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  428.796668][T21121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  428.796681][T21121] Call Trace:
[  428.796755][T21121]  <TASK>
[  428.796764][T21121]  __dump_stack+0x1d/0x30
[  428.796787][T21121]  dump_stack_lvl+0xe8/0x140
[  428.796808][T21121]  dump_stack+0x15/0x1b
[  428.796883][T21121]  should_fail_ex+0x265/0x280
[  428.796965][T21121]  should_fail+0xb/0x20
[  428.796983][T21121]  should_fail_usercopy+0x1a/0x20
[  428.797005][T21121]  _copy_from_user+0x1c/0xb0
[  428.797033][T21121]  ___sys_sendmsg+0xc1/0x1d0
[  428.797137][T21121]  __x64_sys_sendmsg+0xd4/0x160
[  428.797221][T21121]  x64_sys_call+0x191e/0x2ff0
[  428.797242][T21121]  do_syscall_64+0xd2/0x200
[  428.797267][T21121]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  428.797289][T21121]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  428.797379][T21121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.797472][T21121] RIP: 0033:0x7fa09b36ebe9
[  428.797565][T21121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  428.797617][T21121] RSP: 002b:00007fa099dd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  428.797638][T21121] RAX: ffffffffffffffda RBX: 00007fa09b595fa0 RCX: 00007fa09b36ebe9
[  428.797652][T21121] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003
[  428.797666][T21121] RBP: 00007fa099dd7090 R08: 0000000000000000 R09: 0000000000000000
[  428.797680][T21121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  428.797693][T21121] R13: 00007fa09b596038 R14: 00007fa09b595fa0 R15: 00007fffcb5f2e58
[  428.797713][T21121]  </TASK>
[  428.979947][T13384] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.020952][T21123] loop0: detected capacity change from 0 to 512
[  429.032795][T21123] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  429.042040][T21123] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  429.056809][T21123] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  429.066231][T21123] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  429.070234][T21127] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5990'.
[  429.075492][T21123] System zones: 0-2, 18-18, 34-35
[  429.083556][T21127] netlink: 'syz.6.5990': attribute type 7 has an invalid length.
[  429.091305][T21123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  429.096299][T21127] netlink: 'syz.6.5990': attribute type 8 has an invalid length.
[  429.116021][T21127] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5990'.
[  429.146004][T13384] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.246920][T21143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5997'.
[  429.267528][T21143] batadv0 (unregistering): left allmulticast mode
[  429.274031][T21143] batadv0 (unregistering): left promiscuous mode
[  429.280471][T21143] bridge0: port 3(batadv0) entered disabled state
[  429.305953][T21149] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5999'.
[  429.322462][T21133] IPv6: Can't replace route, no match found
[  429.538531][T21166] loop6: detected capacity change from 0 to 128
[  429.553432][T21166] bio_check_eod: 5535 callbacks suppressed
[  429.553447][T21166] syz.6.6016: attempt to access beyond end of device
[  429.553447][T21166] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128
[  429.566643][T21168] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6007'.
[  429.574406][T21166] syz.6.6016: attempt to access beyond end of device
[  429.574406][T21166] loop6: rw=2049, sector=169, nr_sectors = 24 limit=128
[  429.582086][T21168] netlink: 'syz.5.6007': attribute type 7 has an invalid length.
[  429.596494][T21166] syz.6.6016: attempt to access beyond end of device
[  429.596494][T21166] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128
[  429.603284][T21168] netlink: 'syz.5.6007': attribute type 8 has an invalid length.
[  429.639760][T21170] lo speed is unknown, defaulting to 1000
[  429.722326][T21166] syz.6.6016: attempt to access beyond end of device
[  429.722326][T21166] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128
[  429.735882][T21166] syz.6.6016: attempt to access beyond end of device
[  429.735882][T21166] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128
[  429.749466][T21166] syz.6.6016: attempt to access beyond end of device
[  429.749466][T21166] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128
[  429.763137][T21166] syz.6.6016: attempt to access beyond end of device
[  429.763137][T21166] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128
[  429.785562][T21179] syz.6.6016: attempt to access beyond end of device
[  429.785562][T21179] loop6: rw=2049, sector=297, nr_sectors = 80 limit=128
[  429.793892][T21172] lo speed is unknown, defaulting to 1000
[  429.800575][T21166] syz.6.6016: attempt to access beyond end of device
[  429.800575][T21166] loop6: rw=2049, sector=281, nr_sectors = 9 limit=128
[  429.848569][T21179] syz.6.6016: attempt to access beyond end of device
[  429.848569][T21179] loop6: rw=2049, sector=385, nr_sectors = 8 limit=128
[  430.302485][T21199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21199 comm=syz.7.6020
[  430.482176][T21197] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  430.578792][ T3403] usb usb8-port1: attempt power cycle
[  431.284102][T21215] netlink: 'syz.0.6026': attribute type 7 has an invalid length.
[  431.291958][T21215] netlink: 'syz.0.6026': attribute type 8 has an invalid length.
[  431.519502][T21218] veth0_to_team: entered promiscuous mode
[  431.530025][T21210] lo speed is unknown, defaulting to 1000
[  431.584848][   T29] kauditd_printk_skb: 388 callbacks suppressed
[  431.584863][   T29] audit: type=1400 audit(5587.575:62813): avc:  denied  { module_request } for  pid=21217 comm="syz.6.6027" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  431.651408][T21224] loop6: detected capacity change from 0 to 512
[  431.664624][   T29] audit: type=1400 audit(5587.655:62814): avc:  denied  { sys_module } for  pid=21217 comm="syz.6.6027" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  431.687571][T21224] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  431.704542][T21231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21231 comm=syz.5.6032
[  431.795428][T21224] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  431.811498][   T29] audit: type=1400 audit(5587.805:62815): avc:  denied  { mount } for  pid=21217 comm="syz.6.6027" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  431.833773][   T29] audit: type=1400 audit(5587.805:62816): avc:  denied  { execute } for  pid=21234 comm="syz.5.6034" dev="tmpfs" ino=1769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  431.854728][   T29] audit: type=1400 audit(5587.805:62817): avc:  denied  { execute_no_trans } for  pid=21234 comm="syz.5.6034" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=1769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  431.892184][   T29] audit: type=1326 audit(5587.805:62818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21217 comm="syz.6.6027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f49aebe9 code=0x7ffc0000
[  431.915283][   T29] audit: type=1326 audit(5587.805:62819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21217 comm="syz.6.6027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f49aebe9 code=0x7ffc0000
[  431.938411][   T29] audit: type=1326 audit(5587.805:62820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21217 comm="syz.6.6027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7ff8f49aebe9 code=0x7ffc0000
[  431.962278][   T29] audit: type=1326 audit(5587.805:62821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21217 comm="syz.6.6027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f49aebe9 code=0x7ffc0000
[  431.985427][   T29] audit: type=1326 audit(5587.805:62822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21217 comm="syz.6.6027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f49aebe9 code=0x7ffc0000
[  432.020675][T21242] lo speed is unknown, defaulting to 1000
[  432.369902][T14113] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.589056][ T3403] usb usb8-port1: unable to enumerate USB device
[  432.686158][T21267] loop0: detected capacity change from 0 to 128
[  432.710993][T21265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21265 comm=syz.6.6044
[  432.804779][T21272] __nla_validate_parse: 6 callbacks suppressed
[  432.804793][T21272] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6047'.
[  433.073785][T21256] Set syz1 is full, maxelem 65536 reached
[  433.095178][T21280] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  433.109031][T17064] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  433.120094][T17064] CPU: 0 UID: 0 PID: 17064 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  433.120120][T17064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  433.120133][T17064] Call Trace:
[  433.120140][T17064]  <TASK>
[  433.120147][T17064]  __dump_stack+0x1d/0x30
[  433.120166][T17064]  dump_stack_lvl+0xe8/0x140
[  433.120183][T17064]  dump_stack+0x15/0x1b
[  433.120258][T17064]  dump_header+0x81/0x220
[  433.120313][T17064]  oom_kill_process+0x342/0x400
[  433.120353][T17064]  out_of_memory+0x979/0xb80
[  433.120384][T17064]  try_charge_memcg+0x5e6/0x9e0
[  433.120408][T17064]  charge_memcg+0x51/0xc0
[  433.120428][T17064]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  433.120488][T17064]  __read_swap_cache_async+0x1df/0x350
[  433.120571][T17064]  swap_cluster_readahead+0x376/0x3e0
[  433.120673][T17064]  swapin_readahead+0xde/0x6f0
[  433.120704][T17064]  ? __filemap_get_folio+0x4f7/0x6b0
[  433.120800][T17064]  ? ktime_get+0x1eb/0x210
[  433.120821][T17064]  ? swap_cache_get_folio+0x77/0x200
[  433.120851][T17064]  do_swap_page+0x301/0x2430
[  433.120951][T17064]  ? finish_task_switch+0xad/0x2b0
[  433.120971][T17064]  ? __pfx_default_wake_function+0x10/0x10
[  433.120997][T17064]  handle_mm_fault+0x9a5/0x2c20
[  433.121023][T17064]  do_user_addr_fault+0x636/0x1090
[  433.121079][T17064]  ? fpregs_restore_userregs+0xe2/0x1d0
[  433.121166][T17064]  ? switch_fpu_return+0xe/0x20
[  433.121188][T17064]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  433.121215][T17064]  exc_page_fault+0x62/0xa0
[  433.121238][T17064]  asm_exc_page_fault+0x26/0x30
[  433.121312][T17064] RIP: 0033:0x7ff8fe9a1465
[  433.121325][T17064] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[  433.121340][T17064] RSP: 002b:00007ffd475d5988 EFLAGS: 00010246
[  433.121354][T17064] RAX: 0000000000000000 RBX: 0000000000000275 RCX: 00007ff8fe9a1463
[  433.121365][T17064] RDX: 00007ffd475d59a0 RSI: 0000000000000000 RDI: 0000000000000000
[  433.121376][T17064] RBP: 00007ffd475d5a0c R08: 0000000004dda507 R09: 0000000000000000
[  433.121396][T17064] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  433.121409][T17064] R13: 00000000000927c0 R14: 0000000000069881 R15: 00007ffd475d5a60
[  433.121427][T17064]  </TASK>
[  433.121433][T17064] memory: usage 302780kB, limit 307200kB, failcnt 2645
[  433.353809][T17064] memory+swap: usage 27432kB, limit 9007199254740988kB, failcnt 0
[  433.361696][T17064] kmem: usage 9656kB, limit 9007199254740988kB, failcnt 0
[  433.367113][T21284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6051'.
[  433.368826][T17064] Memory cgroup stats for /syz5:
[  433.378620][T17064] cache 0
[  433.386497][T17064] rss 114688
[  433.390121][T17064] shmem 0
[  433.393123][T17064] mapped_file 0
[  433.396605][T17064] dirty 0
[  433.399528][T17064] writeback 0
[  433.402809][T17064] workingset_refault_anon 77
[  433.407479][T17064] workingset_refault_file 97
[  433.412041][T17064] swap 249856
[  433.415321][T17064] swapcached 114688
[  433.419134][T17064] pgpgin 189900
[  433.422582][T17064] pgpgout 189867
[  433.426145][T17064] pgfault 240050
[  433.429675][T17064] pgmajfault 43
[  433.433167][T17064] inactive_anon 0
[  433.436795][T17064] active_anon 114688
[  433.440660][T17064] inactive_file 0
[  433.444269][T17064] active_file 0
[  433.447748][T17064] unevictable 16384
[  433.451539][T17064] hierarchical_memory_limit 314572800
[  433.456998][T17064] hierarchical_memsw_limit 9223372036854771712
[  433.463737][T17064] total_cache 0
[  433.467207][T17064] total_rss 114688
[  433.470958][T17064] total_shmem 0
[  433.474402][T17064] total_mapped_file 0
[  433.478389][T17064] total_dirty 0
[  433.481910][T17064] total_writeback 0
[  433.485687][T17064] total_workingset_refault_anon 77
[  433.490809][T17064] total_workingset_refault_file 97
[  433.495941][T17064] total_swap 249856
[  433.499803][T17064] total_swapcached 114688
[  433.504118][T17064] total_pgpgin 189900
[  433.508173][T17064] total_pgpgout 189867
[  433.512211][T17064] total_pgfault 240050
[  433.516339][T17064] total_pgmajfault 43
[  433.520298][T17064] total_inactive_anon 0
[  433.524484][T17064] total_active_anon 114688
[  433.528925][T17064] total_inactive_file 0
[  433.533051][T17064] total_active_file 0
[  433.537021][T17064] total_unevictable 16384
[  433.541321][T17064] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.6038,pid=21250,uid=0
[  433.556023][T17064] Memory cgroup out of memory: Killed process 21250 (syz.5.6038) total-vm:95812kB, anon-rss:1072kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  433.605691][T21286] loop6: detected capacity change from 0 to 1024
[  433.645382][T21286] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  433.701536][T21305] loop5: detected capacity change from 0 to 512
[  433.710838][T21305] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  433.725242][T21307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6059'.
[  433.744460][T21305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  433.795833][T21315] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  433.816355][T14113] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.966811][T21324] lo speed is unknown, defaulting to 1000
[  434.102814][T21330] lo speed is unknown, defaulting to 1000
[  434.358822][T21342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6074'.
[  434.433625][T21344] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  434.625814][T17064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.649236][T21347] lo speed is unknown, defaulting to 1000
[  434.805207][T21351] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6077'.
[  434.902862][T21357] loop5: detected capacity change from 0 to 512
[  434.921611][T21357] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  434.930733][T21357] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  434.976198][T21357] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  435.006298][T21357] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  435.023921][T21357] System zones: 0-2, 18-18, 34-35
[  435.036220][T21357] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  435.123426][T17064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.372121][T21380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6086'.
[  435.411045][T21382] loop5: detected capacity change from 0 to 512
[  435.425227][T21382] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  435.434437][T21382] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  435.462817][T21382] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  435.482628][T21382] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  435.501082][T21382] System zones: 0-2, 18-18, 34-35
[  435.513811][T21382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  435.587597][T17064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.645139][T21387] loop5: detected capacity change from 0 to 1024
[  435.729243][T21387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  435.904798][T17064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.930411][T21393] wg2: entered promiscuous mode
[  435.935296][T21393] wg2: entered allmulticast mode
[  436.424924][T21415] lo speed is unknown, defaulting to 1000
[  436.658271][T21417] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6099'.
[  437.259568][T21448] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6112'.
[  437.386000][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6111'.
[  437.435551][   T29] kauditd_printk_skb: 697 callbacks suppressed
[  437.435566][   T29] audit: type=1400 audit(5593.396:63520): avc:  denied  { firmware_load } for  pid=21445 comm="syz.2.6111" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  437.498750][T21454] lo speed is unknown, defaulting to 1000
[  437.880987][   T29] audit: type=1326 audit(5593.877:63521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21476 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005775ebe9 code=0x7ffc0000
[  437.906455][   T29] audit: type=1326 audit(5593.907:63522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21476 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f005775ebe9 code=0x7ffc0000
[  437.929597][   T29] audit: type=1326 audit(5593.907:63523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21476 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005775ebe9 code=0x7ffc0000
[  437.952869][   T29] audit: type=1326 audit(5593.907:63524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21476 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005775ebe9 code=0x7ffc0000
[  437.975963][   T29] audit: type=1326 audit(5593.907:63525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21476 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f005775ebe9 code=0x7ffc0000
[  437.999390][   T29] audit: type=1326 audit(5593.907:63526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21476 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005775ebe9 code=0x7ffc0000
[  438.022722][   T29] audit: type=1326 audit(5593.907:63527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21476 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f005775ebe9 code=0x7ffc0000
[  438.046782][   T29] audit: type=1326 audit(5593.907:63528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21476 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005775ebe9 code=0x7ffc0000
[  438.070107][   T29] audit: type=1326 audit(5593.907:63529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21476 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005775ebe9 code=0x7ffc0000
[  438.337819][T21493] lo speed is unknown, defaulting to 1000
[  438.569208][T21494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6129'.
[  439.138994][T21500] loop6: detected capacity change from 0 to 1024
[  439.172853][T21500] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.379578][T21518] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6140'.
[  439.394290][T14113] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.556456][T21525] lo speed is unknown, defaulting to 1000
[  439.800354][T21543] lo speed is unknown, defaulting to 1000
[  439.914206][T21525] chnl_net:caif_netlink_parms(): no params data found
[  439.977434][T13482] bridge_slave_1: left allmulticast mode
[  439.983133][T13482] bridge_slave_1: left promiscuous mode
[  439.984396][T21552] loop7: detected capacity change from 0 to 512
[  439.988916][T13482] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.004757][T13482] bridge_slave_0: left allmulticast mode
[  440.010445][T13482] bridge_slave_0: left promiscuous mode
[  440.016167][T13482] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.026621][T21552] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  440.086118][T20839] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.138344][T13482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  440.152497][T13482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  440.161816][T13482] bond0 (unregistering): Released all slaves
[  440.179779][T21525] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.187027][T21525] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.199547][T21525] bridge_slave_0: entered allmulticast mode
[  440.212944][T21525] bridge_slave_0: entered promiscuous mode
[  440.220593][T21525] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.227706][T21525] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.236345][T21525] bridge_slave_1: entered allmulticast mode
[  440.243651][T21525] bridge_slave_1: entered promiscuous mode
[  440.263093][T21525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  440.273935][T21525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.294354][T21525] team0: Port device team_slave_0 added
[  440.323050][T21525] team0: Port device team_slave_1 added
[  440.420301][T21573] loop6: detected capacity change from 0 to 512
[  440.428221][T21573] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  440.437320][T21573] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  440.447628][T21573] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  440.459049][T13482] hsr_slave_0: left promiscuous mode
[  440.464826][T21573] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  440.474286][T21573] System zones: 0-2, 18-18, 34-35
[  440.479492][T13482] hsr_slave_1: left promiscuous mode
[  440.489806][T21573] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  440.534628][T14113] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.579723][T13482] team0 (unregistering): Port device team_slave_1 removed
[  440.591201][T13482] team0 (unregistering): Port device team_slave_0 removed
[  440.598820][   T51] smc: removing ib device syz!
[  440.637941][T21525] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.645107][T21525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.671151][T21525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.671292][T21578] loop5: detected capacity change from 0 to 512
[  440.697489][T21525] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.704453][T21525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.726373][T21578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  440.730685][T21525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.924828][T17064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.027836][T21525] hsr_slave_0: entered promiscuous mode
[  441.035591][T21525] hsr_slave_1: entered promiscuous mode
[  441.041578][T21525] debugfs: 'hsr0' already exists in 'hsr'
[  441.047336][T21525] Cannot create hsr debugfs directory
[  441.836984][T21525] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  441.848863][T21525] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  441.859664][T21525] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  441.870925][T21525] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  441.962445][T21525] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.341088][T21620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21620 comm=syz.5.6172
[  442.370227][T21622] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6173'.
[  442.385583][T21525] 8021q: adding VLAN 0 to HW filter on device team0
[  442.402978][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.410222][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[  442.421504][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.428608][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  442.443517][T21625] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6174'.
[  442.452134][T21525] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  442.462920][T21525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  442.516282][T21525] 8021q: adding VLAN 0 to HW filter on device batadv0
[  442.603447][T21525] veth0_vlan: entered promiscuous mode
[  442.613571][T21525] veth1_vlan: entered promiscuous mode
[  442.641086][T21525] veth0_macvtap: entered promiscuous mode
[  442.649909][T21525] veth1_macvtap: entered promiscuous mode
[  442.661458][T21525] batman_adv: batadv0: Interface activated: batadv_slave_0
[  442.686493][T21525] batman_adv: batadv0: Interface activated: batadv_slave_1
[  442.710356][ T3459] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  442.729991][ T3459] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  442.751278][ T3459] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  442.766073][   T29] kauditd_printk_skb: 345 callbacks suppressed
[  442.766088][   T29] audit: type=1400 audit(5598.757:63875): avc:  denied  { mounton } for  pid=21525 comm="syz-executor" path="/root/syzkaller.K3IgCg/syz-tmp" dev="sda1" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  442.797646][   T29] audit: type=1400 audit(5598.767:63876): avc:  denied  { mount } for  pid=21525 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  442.800050][ T3459] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.819427][   T29] audit: type=1400 audit(5598.767:63877): avc:  denied  { mount } for  pid=21525 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  442.819455][   T29] audit: type=1400 audit(5598.767:63878): avc:  denied  { mounton } for  pid=21525 comm="syz-executor" path="/root/syzkaller.K3IgCg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  442.819496][   T29] audit: type=1400 audit(5598.767:63879): avc:  denied  { mounton } for  pid=21525 comm="syz-executor" path="/root/syzkaller.K3IgCg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=85431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  442.906060][   T29] audit: type=1400 audit(5598.907:63880): avc:  denied  { mounton } for  pid=21525 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  442.932273][   T29] audit: type=1400 audit(5598.907:63881): avc:  denied  { mount } for  pid=21525 comm="syz-executor" name="/" dev="gadgetfs" ino=4679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  442.961567][   T29] audit: type=1400 audit(5598.957:63882): avc:  denied  { read } for  pid=21637 comm="syz.5.6176" path="socket:[86468]" dev="sockfs" ino=86468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  442.963366][T21643] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6141'.
[  442.986582][    T9] usb usb8-port1: attempt power cycle
[  443.029957][T21647] loop6: detected capacity change from 0 to 512
[  443.037358][T21647] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  443.046708][T21647] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  443.055921][T21647] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  443.065898][T21647] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  443.074013][T21647] System zones: 0-2, 18-18, 34-35
[  443.079928][T21647] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  443.106130][T14113] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.130246][   T29] audit: type=1326 audit(5599.127:63883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21617 comm="syz.2.6180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005775ebe9 code=0x7ffc0000
[  443.153625][   T29] audit: type=1326 audit(5599.127:63884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21617 comm="syz.2.6180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005775ebe9 code=0x7ffc0000
[  443.319720][T21667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21667 comm=syz.2.6183
[  443.389068][T21670] ªªªªª: renamed from vlan1
[  443.440414][ T3459] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.477135][ T3459] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.492644][T21654] chnl_net:caif_netlink_parms(): no params data found
[  443.536039][ T3459] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.586920][ T3459] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.619373][T21654] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.626737][T21654] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.647149][T21654] bridge_slave_0: entered allmulticast mode
[  443.656450][T21654] bridge_slave_0: entered promiscuous mode
[  443.663315][T21654] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.670489][T21654] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.677812][T21654] bridge_slave_1: entered allmulticast mode
[  443.685611][T21654] bridge_slave_1: entered promiscuous mode
[  443.703346][T21654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  443.716859][T21654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  443.741884][T21654] team0: Port device team_slave_0 added
[  443.752141][T21654] team0: Port device team_slave_1 added
[  443.759265][ T3459] bridge_slave_1: left allmulticast mode
[  443.764958][ T3459] bridge_slave_1: left promiscuous mode
[  443.770604][ T3459] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.779369][ T3459] bridge_slave_0: left allmulticast mode
[  443.782472][T21686] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6189'.
[  443.785138][ T3459] bridge_slave_0: left promiscuous mode
[  443.799724][ T3459] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.936557][   T51] smc: removing ib device syz1
[  443.941631][ T3459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  443.960150][ T3459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  443.969491][ T3459] bond0 (unregistering): Released all slaves
[  443.991202][T21654] batman_adv: batadv0: Adding interface: batadv_slave_0
[  443.998213][T21654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.024122][T21654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  444.180035][T21697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21697 comm=syz.5.6193
[  444.213514][T21699] loop5: detected capacity change from 0 to 1024
[  444.226833][ T3459] hsr_slave_0: left promiscuous mode
[  444.232818][ T3459] hsr_slave_1: left promiscuous mode
[  444.241317][T21699] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  444.256337][ T3459] veth1_macvtap: left promiscuous mode
[  444.262762][ T3459] veth0_macvtap: left promiscuous mode
[  444.273637][ T3459] veth1_vlan: left promiscuous mode
[  444.285760][ T3459] veth0_vlan: left promiscuous mode
[  444.380775][T21654] batman_adv: batadv0: Adding interface: batadv_slave_1
[  444.387840][T21654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.413795][T21654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  444.447628][T21654] hsr_slave_0: entered promiscuous mode
[  444.453670][T21654] hsr_slave_1: entered promiscuous mode
[  444.493145][T17064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.617344][T21724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21724 comm=syz.2.6203
[  444.765541][T21735] loop0: detected capacity change from 0 to 512
[  444.772502][T21735] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  444.781763][T21735] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  444.791552][T21735] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  444.801886][T21735] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  444.811177][T21735] System zones: 0-2, 18-18, 34-35
[  444.817420][T21735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  444.840999][T21525] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.873460][T21654] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  444.888458][T21654] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  444.900963][T21654] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  444.919343][T21654] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  444.962149][T21748] loop0: detected capacity change from 0 to 512
[  444.966784][T21654] 8021q: adding VLAN 0 to HW filter on device bond0
[  444.981646][T21654] 8021q: adding VLAN 0 to HW filter on device team0
[  444.990118][T21748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  445.013972][T21654] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  445.024468][T21654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  445.038806][ T4505] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.045929][ T4505] bridge0: port 1(bridge_slave_0) entered forwarding state
[  445.054654][ T4505] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.061921][ T4505] bridge0: port 2(bridge_slave_1) entered forwarding state
[  445.127566][T21654] 8021q: adding VLAN 0 to HW filter on device batadv0
[  445.174386][    T9] usb usb8-port1: unable to enumerate USB device
[  445.195815][T21768] ªªªªª: renamed from vlan1 (while UP)
[  445.233226][T21776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21776 comm=syz.7.6213
[  445.245295][T21654] veth0_vlan: entered promiscuous mode
[  445.257669][T21654] veth1_vlan: entered promiscuous mode
[  445.273720][T21654] veth0_macvtap: entered promiscuous mode
[  445.281429][T21654] veth1_macvtap: entered promiscuous mode
[  445.292114][T21654] batman_adv: batadv0: Interface activated: batadv_slave_0
[  445.308238][T21654] batman_adv: batadv0: Interface activated: batadv_slave_1
[  445.319585][ T4505] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  445.336195][ T4505] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  445.348866][ T4505] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  445.401369][ T4505] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  446.024794][T21525] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.163543][T21816] loop7: detected capacity change from 0 to 512
[  446.170288][T21816] msdos: Unknown parameter 'smackfsroot'
[  446.215336][T21824] loop0: detected capacity change from 0 to 2048
[  446.270305][T21824]  loop0: p2 p3 p7
[  446.303814][T21835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21835 comm=syz.0.6232
[  446.501889][T21851] loop7: detected capacity change from 0 to 512
[  446.509813][T21851] msdos: Unknown parameter 'smackfsroot'
[  446.530201][T21855] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  446.565203][T21861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21861 comm=syz.6.6245
[  446.583796][T21857] loop7: detected capacity change from 0 to 2048
[  446.606050][T21864] loop0: detected capacity change from 0 to 512
[  446.618523][T21864] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  446.627646][T21864] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  446.637002][T21864] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  446.647499][T21864] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  446.650367][T21857]  loop7: p2 p3 p7
[  446.662664][T21872] veth0_to_team: entered promiscuous mode
[  446.668930][T21864] System zones: 0-2, 18-18, 34-35
[  446.679388][T21864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  446.721789][T21872] loop6: detected capacity change from 0 to 512
[  446.732960][T21525] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.743487][T21872] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  446.807495][T21872] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  446.839688][T21654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.860812][T21887] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6256'.
[  446.881895][T21892] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  447.155899][T21930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6270'.
[  447.191976][T21933] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  447.753731][T21941] chnl_net:caif_netlink_parms(): no params data found
[  447.799592][   T29] kauditd_printk_skb: 1046 callbacks suppressed
[  447.799608][   T29] audit: type=1326 audit(5603.798:64931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21958 comm="syz.7.6278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09b36ebe9 code=0x7ffc0000
[  447.829393][   T29] audit: type=1326 audit(5603.808:64932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21958 comm="syz.7.6278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fa09b36ebe9 code=0x7ffc0000
[  447.852389][   T29] audit: type=1326 audit(5603.808:64933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21958 comm="syz.7.6278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09b36ebe9 code=0x7ffc0000
[  447.875749][   T29] audit: type=1326 audit(5603.808:64934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21958 comm="syz.7.6278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09b36ebe9 code=0x7ffc0000
[  447.899038][   T29] audit: type=1326 audit(5603.808:64935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21958 comm="syz.7.6278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa09b36ebe9 code=0x7ffc0000
[  447.922559][   T29] audit: type=1326 audit(5603.808:64936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21958 comm="syz.7.6278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09b36ebe9 code=0x7ffc0000
[  447.945857][   T29] audit: type=1326 audit(5603.808:64937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21958 comm="syz.7.6278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09b36ebe9 code=0x7ffc0000
[  447.968926][   T29] audit: type=1326 audit(5603.808:64938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21958 comm="syz.7.6278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa09b36ebe9 code=0x7ffc0000
[  447.991976][   T29] audit: type=1326 audit(5603.808:64939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21958 comm="syz.7.6278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09b36ebe9 code=0x7ffc0000
[  448.015067][   T29] audit: type=1326 audit(5603.808:64940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21958 comm="syz.7.6278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09b36ebe9 code=0x7ffc0000
[  448.073703][   T12] bridge_slave_1: left allmulticast mode
[  448.079447][   T12] bridge_slave_1: left promiscuous mode
[  448.085254][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.098024][   T12] bridge_slave_0: left allmulticast mode
[  448.103831][   T12] bridge_slave_0: left promiscuous mode
[  448.109693][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.122762][T21970] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6281'.
[  448.195249][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  448.204739][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  448.213842][   T12] bond0 (unregistering): Released all slaves
[  448.242028][T21941] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.249277][T21941] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.256585][T21941] bridge_slave_0: entered allmulticast mode
[  448.263118][T21941] bridge_slave_0: entered promiscuous mode
[  448.271525][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  448.279823][T21978] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6284'.
[  448.290875][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  448.333117][   T12] team0 (unregistering): Port device team_slave_1 removed
[  448.343163][   T12] team0 (unregistering): Port device team_slave_0 removed
[  448.374835][   T12] team0 (unregistering): Port device dummy0 removed
[  448.386300][T21941] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.393468][T21941] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.400785][T21941] bridge_slave_1: entered allmulticast mode
[  448.407458][T21941] bridge_slave_1: entered promiscuous mode
[  448.424250][T21941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  448.434725][T21941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  448.455398][T21941] team0: Port device team_slave_0 added
[  448.461999][T21941] team0: Port device team_slave_1 added
[  448.476883][T21941] batman_adv: batadv0: Adding interface: batadv_slave_0
[  448.483873][T21941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.510930][T21941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  448.522041][T21941] batman_adv: batadv0: Adding interface: batadv_slave_1
[  448.529038][T21941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.554999][T21941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  448.578717][T21941] hsr_slave_0: entered promiscuous mode
[  448.584789][T21941] hsr_slave_1: entered promiscuous mode
[  448.590638][T21941] debugfs: 'hsr0' already exists in 'hsr'
[  448.596376][T21941] Cannot create hsr debugfs directory
[  448.717030][T21989] loop6: detected capacity change from 0 to 512
[  448.724721][T21989] msdos: Unknown parameter 'smackfsroot'
[  448.815115][T21999] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6294'.
[  448.845304][T22001] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6295'.
[  448.907575][T21941] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  448.916375][T21941] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  448.926739][T21941] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  448.936088][T21941] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  448.953906][T21941] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.961185][T21941] bridge0: port 2(bridge_slave_1) entered forwarding state
[  448.968587][T21941] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.975716][T21941] bridge0: port 1(bridge_slave_0) entered forwarding state
[  448.983631][ T3404] usb usb8-port1: attempt power cycle
[  449.005559][T21941] 8021q: adding VLAN 0 to HW filter on device bond0
[  449.015463][ T4505] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.026365][ T4505] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.041448][T22015] loop6: detected capacity change from 0 to 512
[  449.047110][T21941] 8021q: adding VLAN 0 to HW filter on device team0
[  449.055116][T22015] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  449.064251][T22015] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  449.073948][ T4505] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.077205][T22015] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  449.081545][ T4505] bridge0: port 1(bridge_slave_0) entered forwarding state
[  449.090821][T22015] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  449.105295][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.105981][T22015] System zones: 0-2, 18-18, 34-35
[  449.113043][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state
[  449.125417][T22017] loop7: detected capacity change from 0 to 512
[  449.127936][T22015] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  449.134058][T22017] msdos: Unknown parameter 'smackfsroot'
[  449.170809][T21941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  449.171015][T21654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.249708][T21941] 8021q: adding VLAN 0 to HW filter on device batadv0
[  449.293610][T22036] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6305'.
[  449.350215][T21941] veth0_vlan: entered promiscuous mode
[  449.357992][T21941] veth1_vlan: entered promiscuous mode
[  449.369893][T21941] veth0_macvtap: entered promiscuous mode
[  449.377542][T21941] veth1_macvtap: entered promiscuous mode
[  449.387950][T21941] batman_adv: batadv0: Interface activated: batadv_slave_0
[  449.403926][T21941] batman_adv: batadv0: Interface activated: batadv_slave_1
[  449.414274][ T2716] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  449.423164][ T2716] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  449.443224][ T2716] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  449.483509][ T4505] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  449.573174][T22048] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6308'.
[  449.596117][T22048] loop6: detected capacity change from 0 to 512
[  449.604444][T22048] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  449.638938][T22048] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  449.680955][T22048] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6308: bg 0: block 248: padding at end of block bitmap is not set
[  449.734258][T22048] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.6308: Failed to acquire dquot type 1
[  449.759958][T22054] ªªªªª: renamed from vlan1 (while UP)
[  449.767958][T22048] EXT4-fs (loop6): 1 truncate cleaned up
[  449.782607][T22048] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  450.233604][T21654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  450.247815][T22056] loop7: detected capacity change from 0 to 512
[  450.260259][T22058] loop6: detected capacity change from 0 to 512
[  450.267118][T22056] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  450.276268][T22056] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  450.285485][T22058] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  450.294634][T22058] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  450.301179][T22056] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended
[  450.303540][T22058] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  450.321457][T22058] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  450.321490][T22056] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  450.330396][T22058] System zones: 0-2, 18-18, 34-35
[  450.338146][T22056] System zones: 0-2, 18-18, 34-35
[  450.344030][T22058] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  450.353664][T22056] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  450.395207][T21654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.430053][T20839] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.515589][T22076] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6318'.
[  451.410360][T22092] loop5: detected capacity change from 0 to 1024
[  451.428213][T22092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  451.707256][T22105] random: crng reseeded on system resumption
[  451.796618][T17064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.906121][T22116] loop6: detected capacity change from 0 to 512
[  451.915167][T22116] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  451.924501][T22116] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  452.023791][T22116] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  452.034668][T22116] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  452.042778][T22116] System zones: 0-2, 18-18, 34-35
[  452.049184][T22116] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  452.087295][T21654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.328470][ T3404] usb usb8-port1: unable to enumerate USB device
[  452.339036][T22119] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6336'.
[  452.395576][T22130] loop7: detected capacity change from 0 to 512
[  452.403315][T22130] msdos: Unknown parameter 'smackfsroot'
[  452.412437][T22132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6342'.
[  452.456869][T22141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6346'.
[  452.601513][T22159] loop0: detected capacity change from 0 to 1024
[  452.615410][T22159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  453.398589][T22172] loop5: detected capacity change from 0 to 512
[  453.425164][   T29] kauditd_printk_skb: 1299 callbacks suppressed
[  453.425238][   T29] audit: type=1326 audit(5609.349:66238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22167 comm="syz.5.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8fe96ebe9 code=0x7ffc0000
[  453.454995][   T29] audit: type=1326 audit(5609.349:66239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22167 comm="syz.5.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8fe96ebe9 code=0x7ffc0000
[  453.473007][T21525] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.478108][   T29] audit: type=1326 audit(5609.349:66240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22167 comm="syz.5.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff8fe96d550 code=0x7ffc0000
[  453.510035][   T29] audit: type=1326 audit(5609.349:66241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22167 comm="syz.5.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff8fe970417 code=0x7ffc0000
[  453.530447][T22172] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  453.533119][   T29] audit: type=1326 audit(5609.349:66242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22167 comm="syz.5.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8fe96ebe9 code=0x7ffc0000
[  453.542264][T22172] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  453.565270][   T29] audit: type=1326 audit(5609.349:66243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22167 comm="syz.5.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff8fe970417 code=0x7ffc0000
[  453.596629][   T29] audit: type=1326 audit(5609.349:66244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22167 comm="syz.5.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff8fe96d84a code=0x7ffc0000
[  453.619543][   T29] audit: type=1326 audit(5609.349:66245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22167 comm="syz.5.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8fe96ebe9 code=0x7ffc0000
[  453.626993][T22172] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  453.642707][   T29] audit: type=1326 audit(5609.349:66246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22167 comm="syz.5.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8fe96ebe9 code=0x7ffc0000
[  453.674853][   T29] audit: type=1326 audit(5609.349:66247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22167 comm="syz.5.6357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff8fe96ebe9 code=0x7ffc0000
[  453.713944][T22172] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  453.722062][T22172] System zones: 0-2, 18-18, 34-35
[  453.754529][T22172] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  453.842508][T17064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.869573][T22190] loop0: detected capacity change from 0 to 1024
[  453.888455][T22190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  454.075315][T21525] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.094944][T22200] loop0: detected capacity change from 0 to 512
[  454.102184][T22200] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  454.111293][T22200] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  454.122283][T22200] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  454.132272][T22200] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  454.142780][T22200] System zones: 0-2, 18-18, 34-35
[  454.148822][T22200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  454.174543][T21525] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.201521][T22213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6374'.
[  454.290276][T22222] loop0: detected capacity change from 0 to 1024
[  454.306161][T22222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  454.365035][T22233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6381'.
[  454.389441][T21525] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.441173][T22247] 9pnet_fd: Insufficient options for proto=fd
[  454.500332][T22261] loop0: detected capacity change from 0 to 1024
[  454.514327][T22261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  454.606100][T21525] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.648274][T22271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6397'.
[  454.742498][T22281] 9pnet_fd: Insufficient options for proto=fd
[  454.784811][T22291] loop0: detected capacity change from 0 to 1024
[  454.794231][T22291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  454.843191][T21525] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.072246][T22304] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6412'.
[  455.085653][T22304] loop5: detected capacity change from 0 to 512
[  455.093168][T22304] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  455.123829][T22304] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  455.138513][T22304] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6412: bg 0: block 248: padding at end of block bitmap is not set
[  455.153474][T22304] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6412: Failed to acquire dquot type 1
[  455.165453][T22304] EXT4-fs (loop5): 1 truncate cleaned up
[  455.171405][T22304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  455.200891][T17064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  455.262185][T22314] 9pnet_fd: Insufficient options for proto=fd
[  455.343179][T22318] loop7: detected capacity change from 0 to 1024
[  455.370972][T22318] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  455.392212][T22325] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6420'.
[  455.392382][T22318] ==================================================================
[  455.409456][T22318] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve
[  455.416490][T22318] 
[  455.418799][T22318] write to 0xffffffff868a0a60 of 88 bytes by task 22325 on cpu 0:
[  455.426593][T22318]  prb_reserve+0x696/0xaf0
[  455.431027][T22318]  vprintk_store+0x56d/0x860
[  455.435612][T22318]  vprintk_emit+0x178/0x650
[  455.440105][T22318]  vprintk_default+0x26/0x30
[  455.444692][T22318]  vprintk+0x1d/0x30
[  455.448579][T22318]  _printk+0x79/0xa0
[  455.452466][T22318]  __nla_validate_parse+0x1738/0x1d00
[  455.457828][T22318]  __nla_parse+0x40/0x60
[  455.462056][T22318]  ctnetlink_parse_tuple_filter+0x1af/0x770
[  455.467935][T22318]  ctnetlink_alloc_filter+0x3ac/0x550
[  455.473296][T22318]  ctnetlink_start+0xc3/0x110
[  455.477967][T22318]  __netlink_dump_start+0x331/0x520
[  455.483183][T22318]  ctnetlink_get_conntrack+0x113/0x440
[  455.488641][T22318]  nfnetlink_rcv_msg+0x4c6/0x590
[  455.493700][T22318]  netlink_rcv_skb+0x120/0x220
[  455.498452][T22318]  nfnetlink_rcv+0x16b/0x1690
[  455.503150][T22318]  netlink_unicast+0x5c0/0x690
[  455.507911][T22318]  netlink_sendmsg+0x58b/0x6b0
[  455.512667][T22318]  __sock_sendmsg+0x145/0x180
[  455.517424][T22318]  ____sys_sendmsg+0x31e/0x4e0
[  455.522180][T22318]  ___sys_sendmsg+0x17b/0x1d0
[  455.526855][T22318]  __x64_sys_sendmsg+0xd4/0x160
[  455.531701][T22318]  x64_sys_call+0x191e/0x2ff0
[  455.536378][T22318]  do_syscall_64+0xd2/0x200
[  455.540875][T22318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.546756][T22318] 
[  455.549068][T22318] read to 0xffffffff868a0a60 of 8 bytes by task 22318 on cpu 1:
[  455.556681][T22318]  _prb_read_valid+0x383/0x920
[  455.561462][T22318]  prb_read_valid+0x3c/0x60
[  455.566048][T22318]  console_unlock+0x164/0x330
[  455.570710][T22318]  con_flush_chars+0xb2/0x1b0
[  455.575373][T22318]  con_write+0x2e/0x40
[  455.579514][T22318]  n_tty_write+0x7cd/0xb50
[  455.583915][T22318]  file_tty_write+0x373/0x690
[  455.588581][T22318]  tty_write+0x25/0x30
[  455.592900][T22318]  vfs_write+0x52a/0x960
[  455.597136][T22318]  ksys_write+0xda/0x1a0
[  455.601364][T22318]  __x64_sys_write+0x40/0x50
[  455.605951][T22318]  x64_sys_call+0x27fe/0x2ff0
[  455.610615][T22318]  do_syscall_64+0xd2/0x200
[  455.615211][T22318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.621090][T22318] 
[  455.623395][T22318] value changed: 0x000000000000219a -> 0x000000000000419a
[  455.630486][T22318] 
[  455.632791][T22318] Reported by Kernel Concurrency Sanitizer on:
[  455.638919][T22318] CPU: 1 UID: 0 PID: 22318 Comm: syz.7.6418 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) 
[  455.649770][T22318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  455.659807][T22318] ==================================================================
[  455.913982][T20839] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.602858][ T7703] usb usb8-port1: attempt power cycle
[  459.431874][ T7703] usb usb8-port1: unable to enumerate USB device