last executing test programs:

54.389507094s ago: executing program 4 (id=216):
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1088aa, 0x3, 0xfffffffc, 0xb95b5ec032cc8e84, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES64=r2], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6gre0\x00', <r5=>0x0, 0x29, 0x1, 0x81, 0x1, 0x1, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, 0x700, 0x20, 0xfff, 0x473}})
setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x9, r5, 0x2}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24154cf0ca3d8ce9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000340)={0x5, 0x8, 0x503, 0x9, 0x8})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000004c0)='kmem_cache_free\x00', r6, 0x0, 0x20000000}, 0x3a)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
socket$inet6_sctp(0xa, 0x5, 0x84)
close(0xffffffffffffffff)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
r8 = syz_clone(0x11, 0x0, 0x50, 0x0, 0x0, 0x0)
r9 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_aout(r9, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xb8)
waitid(0x0, r8, 0x0, 0x4, 0x0)
r10 = syz_pidfd_open(r8, 0x0)
pidfd_send_signal(r10, 0x2, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
socket$kcm(0x10, 0x2, 0x0)

53.517642405s ago: executing program 4 (id=230):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x5088f3bf, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

53.313295041s ago: executing program 4 (id=236):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x12, 0x0, "69581d697ea5eb7d897346c6a689c5c2b87a0770b314008d37d3a037371e3242a33d6831a00495b63e21a8b1ed27cd4626acc229839f95059a164925277bc131da641967e304a7c92e0476679299d17d"}, 0xd8)

53.299577762s ago: executing program 4 (id=237):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x3, &(0x7f00000001c0)=[{0x9c, 0x0, 0x0, 0x7ffc1ffb}, {0x1, 0x3, 0x6, 0x8}, {0x7, 0x0, 0xe, 0x3}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000003c0)={0x5, &(0x7f0000000400)=[{0xd6, 0x81, 0xff, 0x6}, {0x8, 0x7d, 0x5, 0x4}, {0x1000, 0x4, 0x88, 0x82}, {0x8, 0x9, 0x0, 0x6}, {0xcd, 0xf, 0x81, 0xffffffff}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="38010000100001000000000000000000fc000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc000000000000000000000000000000000000006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000069ca4465f56bac08ca5a4000000000000000480003006465666c61746500"/250], 0x138}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xf7}, 0x18)
timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x4021, 0x800000000004}, &(0x7f0000bbdffc))
ptrace$setregs(0xf, 0x0, 0x6, &(0x7f0000001cc0)="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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='fsi_master_gpio_crc_rsp_error\x00'}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001000000", @ANYRES32, @ANYBLOB="000000000000000000833c105c8d942607b15a94c720cbcc2400"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
msgrcv(0x0, &(0x7f0000000500)={0x0, ""/71}, 0x4f, 0x0, 0x2000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000b175560ee08cb374020000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10)
r3 = socket$kcm(0x21, 0x2, 0x2)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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"/329, @ANYRES64], 0x8, 0x2eb, &(0x7f0000001a80)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
pwritev2(r4, &(0x7f0000000100), 0x0, 0x5412, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="89", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0)

52.945191851s ago: executing program 4 (id=242):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000d00)=0x14)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000d40)={r0, r1, 0x25, 0x1e, @val=@netfilter={0x5, 0x0, 0x3, 0x1}}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$netlink(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="43420000e9d0b3a15333820769c25e4a099f9631f5b0f856e5de2b351be8f8132eb589c3ece0acaf5c95057fd5", @ANYRES16=r3, @ANYBLOB="010300000000fcdbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4044805}, 0x20000000)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000b00)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
r6 = gettid()
rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
tkill(r6, 0x12)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x54, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x20000000}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV")
openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)=""/97, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xffffffffffffff8f}}], 0x1, 0x42050101, &(0x7f0000003700)={0x77359400})

51.701425552s ago: executing program 4 (id=252):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x80000}, 0x18)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58)
close(r1)
execve(0x0, 0x0, 0x0)

51.701151802s ago: executing program 32 (id=252):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x80000}, 0x18)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58)
close(r1)
execve(0x0, 0x0, 0x0)

2.248630808s ago: executing program 2 (id=1219):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000d00)=0x14)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000d40)={r0, r1, 0x25, 0x1e, @val=@netfilter={0x5, 0x0, 0x3, 0x1}}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$netlink(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="43420000e9d0b3a15333820769c25e4a099f9631f5b0f856e5de2b351be8f8132eb589c3ece0acaf5c95057fd5", @ANYRES16=r3, @ANYBLOB="010300000000fcdbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4044805}, 0x20000000)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRESOCT=r0, @ANYRES64=r4], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
r6 = gettid()
rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
tkill(r6, 0x12)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)=""/97, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xffffffffffffff8f}}], 0x1, 0x42050101, &(0x7f0000003700)={0x77359400})

2.168608344s ago: executing program 1 (id=1223):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x38}, 0x94)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESDEC=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108284, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00'}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r5}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

2.126334488s ago: executing program 1 (id=1226):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

2.084065442s ago: executing program 1 (id=1227):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x38}, 0x94)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESDEC=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r5}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

2.032604915s ago: executing program 1 (id=1229):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x12000021)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0x2, 0x1, 0x5)
syz_pidfd_open(0x0, 0x0)
syz_clone(0xf5982500, 0x0, 0x20200, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]})
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000)

1.684268874s ago: executing program 3 (id=1233):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
unshare(0x2040400)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0)
write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x44f0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x82000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf26c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x200008c5)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x15c, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x12}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x26}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x14}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x2}}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x82}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x40004)

1.597867471s ago: executing program 2 (id=1236):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010024bd7000fedbdf2501000000050002000a00000014000700fe"], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080)

1.466345551s ago: executing program 3 (id=1240):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x38}, 0x94)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESDEC=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108284, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r6}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

1.278460257s ago: executing program 0 (id=1243):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000d00)=0x14)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000d40)={r0, r1, 0x25, 0x1e, @val=@netfilter={0x5, 0x0, 0x3, 0x1}}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$netlink(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="43420000e9d0b3a15333820769c25e4a099f9631f5b0f856e5de2b351be8f8132eb589c3ece0acaf5c95057fd5", @ANYRES16=r3, @ANYBLOB="010300000000fcdbdf2505000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4044805}, 0x20000000)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRESOCT=r0, @ANYRES64=r4], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
r6 = gettid()
rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
tkill(r6, 0x12)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x54, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x20000000}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)=""/97, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xffffffffffffff8f}}], 0x1, 0x42050101, &(0x7f0000003700)={0x77359400})

1.259502998s ago: executing program 2 (id=1244):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c)
stat(&(0x7f0000000cc0)='./file0\x00', 0x0)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x3)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000d00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=r3, @ANYRESOCT, @ANYRES16, @ANYBLOB="0ffe05", @ANYRES8, @ANYBLOB, @ANYBLOB="020002", @ANYRES8=r4, @ANYRESDEC, @ANYRESOCT, @ANYBLOB, @ANYBLOB='\b\x00', @ANYBLOB, @ANYRES32], 0x94, 0x1)
getresuid(&(0x7f0000000200)=<r5=>0x0, &(0x7f0000000280), &(0x7f00000002c0))
stat(&(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1220004, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@nodevmap}, {@dfltgid}, {@posixacl}, {@noxattr}, {@version_L}, {@uname={'uname', 0x3d, ')/){&){'}}, {@uname={'uname', 0x3d, '!{:'}}], [{@euid_gt={'euid>', r5}}, {@smackfsfloor={'smackfsfloor', 0x3d, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, {@fowner_gt={'fowner>', r6}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x63, 0x63, 0x36, 0x34, 0x65, 0x32, 0x31], 0x2d, [0x38, 0x66, 0x33, 0x64], 0x2d, [0x38, 0x31, 0x31, 0x61], 0x2d, [0x36, 0x64, 0x65, 0x39], 0x2d, [0x61, 0x30, 0x33, 0x32, 0x31, 0x38, 0x61, 0x37]}}}, {@dont_hash}]}})
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = openat(0xffffffffffffffff, 0x0, 0x101a00, 0x181)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a030000000000000000000200000009000200"], 0x34}}, 0x0)
ioctl$PIO_FONTRESET(r9, 0x4b6d, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x6, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x0, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0xfffffff7}, @alu={0x4, 0x1, 0x7, 0x5, 0x1, 0x18}]}, &(0x7f0000000580)='GPL\x00', 0x5, 0x100e, &(0x7f0000001ec0)=""/4110, 0x0, 0x3c, '\x00', 0x0, @sk_msg, r9, 0x8, &(0x7f00000005c0)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r8, 0x2, &(0x7f0000000840)=[0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x3, 0x4, 0xc, 0x2}, {0x3, 0x3, 0xd, 0x8}], 0x10, 0x100}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

1.168935135s ago: executing program 3 (id=1246):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x38}, 0x94)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESDEC=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108284, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

1.053666975s ago: executing program 3 (id=1247):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x327}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
r2 = socket(0x2, 0x80805, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
sendmmsg$inet(r2, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="c9", 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0)

1.039726866s ago: executing program 0 (id=1248):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

978.650081ms ago: executing program 0 (id=1249):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

934.268604ms ago: executing program 3 (id=1251):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x401}, 0x18)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)

908.114887ms ago: executing program 0 (id=1252):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, 0x0, 0x0)
connect$vsock_stream(r0, 0x0, 0x0)
fsopen(0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@nodelalloc}, {@resuid}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x18)
setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x835, 0x0)
truncate(&(0x7f0000000100)='./file0/file0\x00', 0x7)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})

862.9538ms ago: executing program 3 (id=1253):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94)
recvmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0xfdac}], 0x1}, 0x4)

836.270793ms ago: executing program 0 (id=1254):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010024bd7000fedbdf2501000000050002000a00000014000700fe"], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080)

784.507587ms ago: executing program 0 (id=1255):
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

732.513471ms ago: executing program 2 (id=1257):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x38}, 0x94)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESDEC=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108284, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

700.019003ms ago: executing program 5 (id=1258):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x38}, 0x94)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESDEC=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108284, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00'}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r5}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

663.417927ms ago: executing program 2 (id=1259):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000d00)=0x14)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000d40)={r0, r1, 0x25, 0x1e, @val=@netfilter={0x5, 0x0, 0x3, 0x1}}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$netlink(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="43420000e9d0b3a15333820769c25e4a099f9631f5b0f856e5de2b351be8f8132eb589c3ece0acaf5c95057fd5", @ANYRES16=r3, @ANYBLOB="010300000000fcdbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4044805}, 0x20000000)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRESOCT=r0, @ANYRES64=r4], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
r6 = gettid()
rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
tkill(r6, 0x12)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x24, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)=""/97, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xffffffffffffff8f}}], 0x1, 0x42050101, &(0x7f0000003700)={0x77359400})

643.835988ms ago: executing program 5 (id=1260):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

589.414152ms ago: executing program 5 (id=1261):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, 0x0, 0x0)

513.630718ms ago: executing program 5 (id=1262):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)

476.913342ms ago: executing program 5 (id=1263):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
unshare(0x2040400)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0)
write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x44f0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x82000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf26c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x200008c5)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x15c, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x12}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x26}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x14}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x2}}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x82}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x40004)

338.353313ms ago: executing program 1 (id=1264):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x401}, 0x18)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)

313.979225ms ago: executing program 1 (id=1265):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xc, 0xffff}, {0x0, 0xf}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0)

86.984923ms ago: executing program 2 (id=1266):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xf7}, 0x18)
socket$key(0xf, 0x3, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x3, 0x288}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000b40)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x8, 0x52, 0x35, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x700, 0x8010, 0x0, 0x8000}})
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}})
io_uring_enter(r5, 0x3516, 0x0, 0x4, 0x0, 0x0)

0s ago: executing program 5 (id=1267):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010024bd7000fedbdf2501000000050002000a00000014000700fe"], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080)

kernel console output (not intermixed with test programs):


[   70.205893][ T4846] RSP: 002b:00007f78dbd8f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb
[   70.205966][ T4846] RAX: ffffffffffffffda RBX: 00007f78dd555fa0 RCX: 00007f78dd32ebe9
[   70.205978][ T4846] RDX: 00002000000003c0 RSI: 00002000000002c0 RDI: 0000000000000067
[   70.206010][ T4846] RBP: 00007f78dbd8f090 R08: 0000000000000000 R09: 0000000000000000
[   70.206023][ T4846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   70.206034][ T4846] R13: 00007f78dd556038 R14: 00007f78dd555fa0 R15: 00007ffe9861a458
[   70.206051][ T4846]  </TASK>
[   70.219504][ T4840] vlan2: entered allmulticast mode
[   70.517002][ T4858] netlink: 200 bytes leftover after parsing attributes in process `syz.2.423'.
[   70.539385][ T4862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=4862 comm=syz.5.426
[   70.552278][ T4862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=4862 comm=syz.5.426
[   70.589951][ T4864] netlink: 60 bytes leftover after parsing attributes in process `syz.5.426'.
[   70.606027][ T4871] FAULT_INJECTION: forcing a failure.
[   70.606027][ T4871] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   70.619701][ T4871] CPU: 0 UID: 0 PID: 4871 Comm: syz.1.429 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   70.619735][ T4871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   70.619750][ T4871] Call Trace:
[   70.619757][ T4871]  <TASK>
[   70.619766][ T4871]  __dump_stack+0x1d/0x30
[   70.619827][ T4871]  dump_stack_lvl+0xe8/0x140
[   70.619851][ T4871]  dump_stack+0x15/0x1b
[   70.619871][ T4871]  should_fail_ex+0x265/0x280
[   70.619898][ T4871]  should_fail+0xb/0x20
[   70.619919][ T4871]  should_fail_usercopy+0x1a/0x20
[   70.619946][ T4871]  _copy_from_user+0x1c/0xb0
[   70.620066][ T4871]  ___sys_sendmsg+0xc1/0x1d0
[   70.620108][ T4871]  __sys_sendmmsg+0x178/0x300
[   70.620140][ T4871]  __x64_sys_sendmmsg+0x57/0x70
[   70.620162][ T4871]  x64_sys_call+0x1c4a/0x2ff0
[   70.620270][ T4871]  do_syscall_64+0xd2/0x200
[   70.620299][ T4871]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   70.620329][ T4871]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   70.620407][ T4871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.620470][ T4871] RIP: 0033:0x7fac1b56ebe9
[   70.620490][ T4871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   70.620512][ T4871] RSP: 002b:00007fac19fcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   70.620573][ T4871] RAX: ffffffffffffffda RBX: 00007fac1b795fa0 RCX: 00007fac1b56ebe9
[   70.620586][ T4871] RDX: 0000000000000002 RSI: 0000200000000900 RDI: 0000000000000004
[   70.620598][ T4871] RBP: 00007fac19fcf090 R08: 0000000000000000 R09: 0000000000000000
[   70.620617][ T4871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   70.620632][ T4871] R13: 00007fac1b796038 R14: 00007fac1b795fa0 R15: 00007fff17e71eb8
[   70.620657][ T4871]  </TASK>
[   70.623430][ T4862] SELinux: security_context_str_to_sid () failed with errno=-22
[   70.674473][ T4873] loop2: detected capacity change from 0 to 512
[   70.826300][ T4878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'.
[   70.857387][ T4873] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.877636][ T4884] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[   70.884482][ T4884] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   70.892238][ T4884] vhci_hcd vhci_hcd.0: Device attached
[   70.936138][ T4884] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6)
[   70.942922][ T4884] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   70.950471][ T4884] vhci_hcd vhci_hcd.0: Device attached
[   70.978358][ T4884] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8)
[   70.984989][ T4884] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   70.992689][ T4884] vhci_hcd vhci_hcd.0: Device attached
[   71.020625][ T4898] loop1: detected capacity change from 0 to 2048
[   71.026945][ T4890] IPv6: Can't replace route, no match found
[   71.049404][ T4907] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   71.108468][ T4884] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(14)
[   71.115120][ T4884] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   71.122806][ T4884] vhci_hcd vhci_hcd.0: Device attached
[   71.135143][ T3413] usb 1-1: new low-speed USB device number 3 using vhci_hcd
[   71.160525][ T4921] siw: device registration error -23
[   71.178178][ T4921] netlink: 32 bytes leftover after parsing attributes in process `syz.3.442'.
[   71.212646][ T4884] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(16)
[   71.219307][ T4884] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   71.227201][ T4884] vhci_hcd vhci_hcd.0: Device attached
[   71.255159][ T4921] vlan0: entered allmulticast mode
[   71.337887][ T4946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.450'.
[   71.365792][ T4895] vhci_hcd: connection closed
[   71.366085][ T4891] vhci_hcd: connection closed
[   71.366504][ T4886] vhci_hcd: connection reset by peer
[   71.373198][ T4929] vhci_hcd: connection closed
[   71.376201][ T4914] vhci_hcd: connection closed
[   71.382313][ T3442] vhci_hcd: stop threads
[   71.394814][ T3442] vhci_hcd: release socket
[   71.399495][ T3442] vhci_hcd: disconnect device
[   71.418849][ T3442] vhci_hcd: stop threads
[   71.423146][ T3442] vhci_hcd: release socket
[   71.427677][ T3442] vhci_hcd: disconnect device
[   71.434913][ T3442] vhci_hcd: stop threads
[   71.439244][ T3442] vhci_hcd: release socket
[   71.443696][ T3442] vhci_hcd: disconnect device
[   71.455686][   T29] kauditd_printk_skb: 341 callbacks suppressed
[   71.455704][   T29] audit: type=1326 audit(1756006638.962:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4948 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b2b3ebe9 code=0x7ffc0000
[   71.493820][ T4949] loop2: detected capacity change from 0 to 512
[   71.500358][ T3442] vhci_hcd: stop threads
[   71.504630][ T3442] vhci_hcd: release socket
[   71.509288][ T3442] vhci_hcd: disconnect device
[   71.529592][   T29] audit: type=1326 audit(1756006638.992:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4948 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f07b2b3ebe9 code=0x7ffc0000
[   71.553021][   T29] audit: type=1326 audit(1756006638.992:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4948 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b2b3ebe9 code=0x7ffc0000
[   71.576379][   T29] audit: type=1326 audit(1756006638.992:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4948 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b2b3ebe9 code=0x7ffc0000
[   71.599802][   T29] audit: type=1326 audit(1756006638.992:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4948 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f07b2b3ebe9 code=0x7ffc0000
[   71.623345][   T29] audit: type=1326 audit(1756006638.992:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4948 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f07b2b3ec23 code=0x7ffc0000
[   71.646565][   T29] audit: type=1326 audit(1756006638.992:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4948 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f07b2b3d69f code=0x7ffc0000
[   71.653685][ T3442] vhci_hcd: stop threads
[   71.669756][   T29] audit: type=1326 audit(1756006638.992:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4948 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f07b2b3ec77 code=0x7ffc0000
[   71.674020][ T3442] vhci_hcd: release socket
[   71.674041][ T3442] vhci_hcd: disconnect device
[   71.697228][   T29] audit: type=1326 audit(1756006638.992:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4948 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07b2b3d550 code=0x7ffc0000
[   71.697308][   T29] audit: type=1326 audit(1756006638.992:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4948 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07b2b3e7eb code=0x7ffc0000
[   71.711840][ T4949] EXT4-fs (loop2): orphan cleanup on readonly fs
[   71.800204][ T4949] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.451: bg 0: block 248: padding at end of block bitmap is not set
[   71.828582][ T4949] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.451: Failed to acquire dquot type 1
[   71.932798][ T4949] EXT4-fs (loop2): 1 truncate cleaned up
[   72.003352][ T4990] netlink: 28 bytes leftover after parsing attributes in process `syz.0.457'.
[   72.049159][ T4996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.459'.
[   72.058157][ T4996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.459'.
[   72.151593][ T5003] hub 8-0:1.0: USB hub found
[   72.157974][ T5003] hub 8-0:1.0: 8 ports detected
[   72.477627][ T5027] siw: device registration error -23
[   72.484453][ T5027] netlink: 32 bytes leftover after parsing attributes in process `syz.3.468'.
[   72.510440][ T5027] vlan0: entered allmulticast mode
[   72.591866][ T5031] vlan0: entered allmulticast mode
[   72.679912][ T5038] hub 8-0:1.0: USB hub found
[   72.685902][ T5038] hub 8-0:1.0: 8 ports detected
[   72.785499][ T1036] hid_parser_main: 18 callbacks suppressed
[   72.785519][ T1036] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   72.828851][ T5044] loop2: detected capacity change from 0 to 1024
[   72.844256][ T1036] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   72.874494][ T5044] EXT4-fs: Ignoring removed nomblk_io_submit option
[   72.907012][ T5044] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   72.945803][ T5044] EXT4-fs mount: 6 callbacks suppressed
[   72.945824][ T5044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.032007][ T5070] delete_channel: no stack
[   73.054349][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.172853][ T5078] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.188379][ T5078] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.671752][ T5090] hub 8-0:1.0: USB hub found
[   73.714615][ T5090] hub 8-0:1.0: 8 ports detected
[   74.038546][ T5097] FAULT_INJECTION: forcing a failure.
[   74.038546][ T5097] name failslab, interval 1, probability 0, space 0, times 0
[   74.051336][ T5097] CPU: 0 UID: 0 PID: 5097 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) 
[   74.051368][ T5097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   74.051383][ T5097] Call Trace:
[   74.051418][ T5097]  <TASK>
[   74.051425][ T5097]  __dump_stack+0x1d/0x30
[   74.051452][ T5097]  dump_stack_lvl+0xe8/0x140
[   74.051476][ T5097]  dump_stack+0x15/0x1b
[   74.051497][ T5097]  should_fail_ex+0x265/0x280
[   74.051523][ T5097]  should_failslab+0x8c/0xb0
[   74.051548][ T5097]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[   74.051674][ T5097]  ? security_context_to_sid_core+0x69/0x3b0
[   74.051704][ T5097]  kmemdup_nul+0x36/0xc0
[   74.051769][ T5097]  security_context_to_sid_core+0x69/0x3b0
[   74.051790][ T5097]  ? avc_has_perm_noaudit+0x1b1/0x200
[   74.051827][ T5097]  security_context_to_sid+0x2e/0x40
[   74.051918][ T5097]  selinux_lsm_setattr+0x2dc/0x660
[   74.052024][ T5097]  selinux_setprocattr+0x4f/0x70
[   74.052158][ T5097]  security_setprocattr+0x1a7/0x1d0
[   74.052243][ T5097]  proc_pid_attr_write+0x1eb/0x220
[   74.052275][ T5097]  ? __pfx_proc_pid_attr_write+0x10/0x10
[   74.052327][ T5097]  vfs_write+0x269/0x960
[   74.052350][ T5097]  ? __rcu_read_unlock+0x4f/0x70
[   74.052385][ T5097]  ? __fget_files+0x184/0x1c0
[   74.052414][ T5097]  ksys_write+0xda/0x1a0
[   74.052440][ T5097]  __x64_sys_write+0x40/0x50
[   74.052462][ T5097]  x64_sys_call+0x27fe/0x2ff0
[   74.052484][ T5097]  do_syscall_64+0xd2/0x200
[   74.052583][ T5097]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   74.052613][ T5097]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   74.052702][ T5097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.052730][ T5097] RIP: 0033:0x7f4b844eebe9
[   74.052747][ T5097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.052764][ T5097] RSP: 002b:00007f4b82f57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   74.052782][ T5097] RAX: ffffffffffffffda RBX: 00007f4b84715fa0 RCX: 00007f4b844eebe9
[   74.052794][ T5097] RDX: 000000000000001d RSI: 0000200000000100 RDI: 0000000000000005
[   74.052807][ T5097] RBP: 00007f4b82f57090 R08: 0000000000000000 R09: 0000000000000000
[   74.052884][ T5097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   74.052898][ T5097] R13: 00007f4b84716038 R14: 00007f4b84715fa0 R15: 00007ffd1edddc28
[   74.052923][ T5097]  </TASK>
[   74.445460][ T5112] FAULT_INJECTION: forcing a failure.
[   74.445460][ T5112] name failslab, interval 1, probability 0, space 0, times 0
[   74.458324][ T5112] CPU: 1 UID: 0 PID: 5112 Comm: syz.3.494 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   74.458353][ T5112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   74.458368][ T5112] Call Trace:
[   74.458376][ T5112]  <TASK>
[   74.458386][ T5112]  __dump_stack+0x1d/0x30
[   74.458412][ T5112]  dump_stack_lvl+0xe8/0x140
[   74.458489][ T5112]  dump_stack+0x15/0x1b
[   74.458510][ T5112]  should_fail_ex+0x265/0x280
[   74.458536][ T5112]  ? copy_semundo+0x8b/0x170
[   74.458564][ T5112]  should_failslab+0x8c/0xb0
[   74.458585][ T5112]  __kmalloc_cache_noprof+0x4c/0x320
[   74.458624][ T5112]  copy_semundo+0x8b/0x170
[   74.458646][ T5112]  copy_process+0xc1c/0x2000
[   74.458676][ T5112]  kernel_clone+0x16c/0x5c0
[   74.458698][ T5112]  ? vfs_write+0x7e8/0x960
[   74.458735][ T5112]  __x64_sys_clone+0xe6/0x120
[   74.458766][ T5112]  x64_sys_call+0x119c/0x2ff0
[   74.458784][ T5112]  do_syscall_64+0xd2/0x200
[   74.458809][ T5112]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   74.458877][ T5112]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   74.458944][ T5112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.458963][ T5112] RIP: 0033:0x7f4b844eebe9
[   74.458976][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.459026][ T5112] RSP: 002b:00007f4b82f56fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   74.459042][ T5112] RAX: ffffffffffffffda RBX: 00007f4b84715fa0 RCX: 00007f4b844eebe9
[   74.459052][ T5112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000638c1000
[   74.459137][ T5112] RBP: 00007f4b82f57090 R08: 0000000000000000 R09: 0000000000000000
[   74.459148][ T5112] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[   74.459159][ T5112] R13: 00007f4b84716038 R14: 00007f4b84715fa0 R15: 00007ffd1edddc28
[   74.459176][ T5112]  </TASK>
[   74.808308][ T5131] loop5: detected capacity change from 0 to 512
[   74.816062][ T5131] ext2: Unknown parameter 'nouser_xattr'
[   74.944248][ T5138] loop3: detected capacity change from 0 to 512
[   75.027239][ T5139] lo speed is unknown, defaulting to 1000
[   75.033141][ T5139] lo speed is unknown, defaulting to 1000
[   75.039262][ T5139] lo speed is unknown, defaulting to 1000
[   75.049086][ T5139] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   75.067888][ T5139] lo speed is unknown, defaulting to 1000
[   75.074628][ T5139] lo speed is unknown, defaulting to 1000
[   75.081327][ T5139] lo speed is unknown, defaulting to 1000
[   75.088059][ T5139] lo speed is unknown, defaulting to 1000
[   75.094605][ T5139] lo speed is unknown, defaulting to 1000
[   75.208130][ T5138] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   75.337537][ T5138] EXT4-fs (loop3): mount failed
[   75.362681][ T5150] 9pnet_fd: Insufficient options for proto=fd
[   75.487530][ T5150] loop2: detected capacity change from 0 to 128
[   75.590331][ T5150] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   75.670860][ T5157] __nla_validate_parse: 3 callbacks suppressed
[   75.670881][ T5157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'.
[   75.735266][ T5150] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.802162][ T5163] loop3: detected capacity change from 0 to 512
[   75.817830][ T5163] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   75.836854][ T5163] EXT4-fs (loop3): orphan cleanup on readonly fs
[   75.847104][ T5167] netlink: 12 bytes leftover after parsing attributes in process `syz.5.512'.
[   75.857642][ T5168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'.
[   75.869574][ T5163] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.511: Failed to acquire dquot type 1
[   75.879372][ T5168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.507'.
[   75.902065][ T5163] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.511: bg 0: block 40: padding at end of block bitmap is not set
[   75.926688][ T5163] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   75.941013][ T5163] EXT4-fs (loop3): 1 truncate cleaned up
[   75.950866][ T5163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   76.015693][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   76.119212][ T5176] netlink: 12 bytes leftover after parsing attributes in process `syz.5.516'.
[   76.128286][ T5176] netlink: 12 bytes leftover after parsing attributes in process `syz.5.516'.
[   76.137877][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.170553][ T3413] usb 1-1: enqueue for inactive port 0
[   76.178745][ T3413] usb 1-1: enqueue for inactive port 0
[   76.197549][ T5176] bridge0: port 3(vlan2) entered blocking state
[   76.203921][ T5176] bridge0: port 3(vlan2) entered disabled state
[   76.226042][ T5187] loop2: detected capacity change from 0 to 512
[   76.245975][ T3413] vhci_hcd: vhci_device speed not set
[   76.249185][ T5176] vlan2: entered allmulticast mode
[   76.256728][ T5176] bridge0: entered allmulticast mode
[   76.270639][ T5197] loop3: detected capacity change from 0 to 512
[   76.280379][ T5187] EXT4-fs (loop2): orphan cleanup on readonly fs
[   76.287176][ T5176] vlan2: left allmulticast mode
[   76.288159][ T5187] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.521: bg 0: block 248: padding at end of block bitmap is not set
[   76.292089][ T5176] bridge0: left allmulticast mode
[   76.321686][ T5187] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.521: Failed to acquire dquot type 1
[   76.336995][ T5197] EXT4-fs (loop3): orphan cleanup on readonly fs
[   76.347518][ T5197] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.520: bg 0: block 248: padding at end of block bitmap is not set
[   76.352983][ T5187] EXT4-fs (loop2): 1 truncate cleaned up
[   76.378285][ T5197] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.520: Failed to acquire dquot type 1
[   76.412467][ T5187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   76.426736][ T5197] EXT4-fs (loop3): 1 truncate cleaned up
[   76.449303][ T5197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   76.462214][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.479913][ T5208] net_ratelimit: 3 callbacks suppressed
[   76.479929][ T5208] netlink: zone id is out of range
[   76.492828][   T29] kauditd_printk_skb: 246 callbacks suppressed
[   76.492846][   T29] audit: type=1326 audit(1756006643.992:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b844eebe9 code=0x7ffc0000
[   76.524424][   T29] audit: type=1326 audit(1756006644.022:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b844eebe9 code=0x7ffc0000
[   76.546056][ T5208] netlink: zone id is out of range
[   76.547844][   T29] audit: type=1326 audit(1756006644.022:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b844eebe9 code=0x7ffc0000
[   76.576238][   T29] audit: type=1326 audit(1756006644.022:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f4b844eebe9 code=0x7ffc0000
[   76.599814][   T29] audit: type=1326 audit(1756006644.022:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b844eebe9 code=0x7ffc0000
[   76.623200][   T29] audit: type=1326 audit(1756006644.022:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b844eebe9 code=0x7ffc0000
[   76.653942][ T5215] loop1: detected capacity change from 0 to 512
[   76.655076][ T5212] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[   76.666789][ T5212] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   76.674360][ T5212] vhci_hcd vhci_hcd.0: Device attached
[   76.687967][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.702024][ T5212] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6)
[   76.708604][ T5212] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   76.716301][ T5212] vhci_hcd vhci_hcd.0: Device attached
[   76.731926][ T5215] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.531: Invalid inode bitmap blk 4 in block_group 0
[   76.754504][ T5225] FAULT_INJECTION: forcing a failure.
[   76.754504][ T5225] name failslab, interval 1, probability 0, space 0, times 0
[   76.767261][ T5225] CPU: 0 UID: 0 PID: 5225 Comm: syz.2.534 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   76.767293][ T5225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   76.767308][ T5225] Call Trace:
[   76.767378][ T5225]  <TASK>
[   76.767387][ T5225]  __dump_stack+0x1d/0x30
[   76.767413][ T5225]  dump_stack_lvl+0xe8/0x140
[   76.767438][ T5225]  dump_stack+0x15/0x1b
[   76.767458][ T5225]  should_fail_ex+0x265/0x280
[   76.767485][ T5225]  ? ip6_setup_cork+0x113/0x7a0
[   76.767544][ T5225]  should_failslab+0x8c/0xb0
[   76.767568][ T5225]  __kmalloc_cache_noprof+0x4c/0x320
[   76.767599][ T5225]  ip6_setup_cork+0x113/0x7a0
[   76.767653][ T5225]  ip6_make_skb+0xff/0x4a0
[   76.767682][ T5225]  ? __pfx_ip_generic_getfrag+0x10/0x10
[   76.767894][ T5225]  udpv6_sendmsg+0x137e/0x1590
[   76.767931][ T5225]  ? __pfx_ip_generic_getfrag+0x10/0x10
[   76.768103][ T5225]  ? __rcu_read_unlock+0x4f/0x70
[   76.768136][ T5225]  ? __pfx_udpv6_sendmsg+0x10/0x10
[   76.768212][ T5225]  inet6_sendmsg+0xac/0xd0
[   76.768266][ T5225]  __sock_sendmsg+0x8b/0x180
[   76.768306][ T5225]  ____sys_sendmsg+0x345/0x4e0
[   76.768337][ T5225]  ___sys_sendmsg+0x17b/0x1d0
[   76.768379][ T5225]  __sys_sendmmsg+0x178/0x300
[   76.768420][ T5225]  __x64_sys_sendmmsg+0x57/0x70
[   76.768447][ T5225]  x64_sys_call+0x1c4a/0x2ff0
[   76.768512][ T5225]  do_syscall_64+0xd2/0x200
[   76.768545][ T5225]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   76.768578][ T5225]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   76.768651][ T5225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.768676][ T5225] RIP: 0033:0x7f07b2b3ebe9
[   76.768758][ T5225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   76.768780][ T5225] RSP: 002b:00007f07b159f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   76.768811][ T5225] RAX: ffffffffffffffda RBX: 00007f07b2d65fa0 RCX: 00007f07b2b3ebe9
[   76.768824][ T5225] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003
[   76.768836][ T5225] RBP: 00007f07b159f090 R08: 0000000000000000 R09: 0000000000000000
[   76.768848][ T5225] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001
[   76.768863][ T5225] R13: 00007f07b2d66038 R14: 00007f07b2d65fa0 R15: 00007ffd7ec1f6c8
[   76.768886][ T5225]  </TASK>
[   76.771116][ T5215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.800116][   T29] audit: type=1326 audit(1756006644.302:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b844eebe9 code=0x7ffc0000
[   76.831996][ T5226] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(8)
[   76.834773][   T29] audit: type=1326 audit(1756006644.302:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b844eebe9 code=0x7ffc0000
[   76.839284][ T5226] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   77.069070][ T5226] vhci_hcd vhci_hcd.0: Device attached
[   77.069340][ T5212] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   77.082877][   T29] audit: type=1326 audit(1756006644.302:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b844eebe9 code=0x7ffc0000
[   77.106337][   T29] audit: type=1326 audit(1756006644.302:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b844eebe9 code=0x7ffc0000
[   77.109779][ T5226] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(15)
[   77.136514][ T5226] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   77.144543][ T5226] vhci_hcd vhci_hcd.0: Device attached
[   77.150269][   T10] usb 11-1: new low-speed USB device number 2 using vhci_hcd
[   77.166943][ T5215] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   77.193612][ T5212] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(13)
[   77.200291][ T5212] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   77.208128][ T5212] vhci_hcd vhci_hcd.0: Device attached
[   77.219239][ T5212] loop5: detected capacity change from 0 to 128
[   77.227726][ T5215] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[   77.239348][ T5241] loop3: detected capacity change from 0 to 1024
[   77.252043][ T5241] EXT4-fs: Ignoring removed nobh option
[   77.253903][ T5212] syz.5.530: attempt to access beyond end of device
[   77.253903][ T5212] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128
[   77.257810][ T5241] EXT4-fs: Ignoring removed bh option
[   77.279667][ T5215] bridge0: entered promiscuous mode
[   77.285519][ T5212] syz.5.530: attempt to access beyond end of device
[   77.285519][ T5212] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128
[   77.304212][ T5242] loop2: detected capacity change from 0 to 1024
[   77.307869][ T5212] syz.5.530: attempt to access beyond end of device
[   77.307869][ T5212] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128
[   77.311800][ T5215] bridge0: port 1(macsec1) entered blocking state
[   77.330594][ T5215] bridge0: port 1(macsec1) entered disabled state
[   77.342010][ T5242] EXT4-fs: Ignoring removed nobh option
[   77.347688][ T5242] EXT4-fs: Ignoring removed bh option
[   77.348011][ T5215] macsec1: entered allmulticast mode
[   77.358511][ T5215] bridge0: entered allmulticast mode
[   77.388242][ T5215] macsec1: left allmulticast mode
[   77.393363][ T5215] bridge0: left allmulticast mode
[   77.401496][ T5241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.415954][ T5215] bridge0: left promiscuous mode
[   77.420117][ T5242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.434258][ T5250] netlink: zone id is out of range
[   77.441666][ T5250] netlink: zone id is out of range
[   77.515473][ T5218] vhci_hcd: connection closed
[   77.515567][ T5227] vhci_hcd: connection closed
[   77.515582][ T5214] vhci_hcd: connection reset by peer
[   77.530719][ T5232] vhci_hcd: connection closed
[   77.531192][ T5237] vhci_hcd: connection closed
[   77.537139][ T3442] vhci_hcd: stop threads
[   77.546165][ T3442] vhci_hcd: release socket
[   77.550665][ T3442] vhci_hcd: disconnect device
[   77.558189][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.578363][ T3442] vhci_hcd: stop threads
[   77.582642][ T3442] vhci_hcd: release socket
[   77.587213][ T3442] vhci_hcd: disconnect device
[   77.593675][ T3442] vhci_hcd: stop threads
[   77.598039][ T3442] vhci_hcd: release socket
[   77.602526][ T3442] vhci_hcd: disconnect device
[   77.622298][ T5258] FAULT_INJECTION: forcing a failure.
[   77.622298][ T5258] name failslab, interval 1, probability 0, space 0, times 0
[   77.635240][ T5258] CPU: 0 UID: 0 PID: 5258 Comm: syz.0.540 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   77.635269][ T5258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   77.635281][ T5258] Call Trace:
[   77.635288][ T5258]  <TASK>
[   77.635297][ T5258]  __dump_stack+0x1d/0x30
[   77.635326][ T5258]  dump_stack_lvl+0xe8/0x140
[   77.635349][ T5258]  dump_stack+0x15/0x1b
[   77.635369][ T5258]  should_fail_ex+0x265/0x280
[   77.635397][ T5258]  should_failslab+0x8c/0xb0
[   77.635426][ T5258]  kmem_cache_alloc_noprof+0x50/0x310
[   77.635454][ T5258]  ? mas_alloc_nodes+0x265/0x520
[   77.635486][ T5258]  mas_alloc_nodes+0x265/0x520
[   77.635534][ T5258]  mas_preallocate+0x33e/0x520
[   77.635572][ T5258]  __split_vma+0x240/0x650
[   77.635737][ T5258]  ? mas_find+0x5d5/0x700
[   77.635767][ T5258]  vms_gather_munmap_vmas+0x2b2/0x7b0
[   77.635797][ T5258]  mmap_region+0x53f/0x1630
[   77.635828][ T5258]  ? mntput_no_expire+0x6f/0x460
[   77.635893][ T5258]  ? mntput+0x4b/0x80
[   77.635945][ T5258]  do_mmap+0x9b3/0xbe0
[   77.636006][ T5258]  vm_mmap_pgoff+0x17a/0x2e0
[   77.636039][ T5258]  ksys_mmap_pgoff+0x268/0x310
[   77.636078][ T5258]  x64_sys_call+0x14a3/0x2ff0
[   77.636099][ T5258]  do_syscall_64+0xd2/0x200
[   77.636148][ T5258]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   77.636179][ T5258]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   77.636234][ T5258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.636282][ T5258] RIP: 0033:0x7f78dd32ebe9
[   77.636302][ T5258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.636322][ T5258] RSP: 002b:00007f78dbd4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   77.636367][ T5258] RAX: ffffffffffffffda RBX: 00007f78dd556180 RCX: 00007f78dd32ebe9
[   77.636382][ T5258] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000
[   77.636398][ T5258] RBP: 00007f78dbd4d090 R08: 0000000000000007 R09: 0000000000000000
[   77.636412][ T5258] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000001
[   77.636427][ T5258] R13: 00007f78dd556218 R14: 00007f78dd556180 R15: 00007ffe9861a458
[   77.636469][ T5258]  </TASK>
[   77.638656][ T3442] vhci_hcd: stop threads
[   77.844049][ T5260] loop1: detected capacity change from 0 to 512
[   77.866024][ T3442] vhci_hcd: release socket
[   77.870466][ T3442] vhci_hcd: disconnect device
[   77.876512][ T3442] vhci_hcd: stop threads
[   77.877153][ T5260] EXT4-fs (loop1): orphan cleanup on readonly fs
[   77.880796][ T3442] vhci_hcd: release socket
[   77.891792][ T3442] vhci_hcd: disconnect device
[   77.892255][ T5260] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.542: bg 0: block 248: padding at end of block bitmap is not set
[   77.912941][ T5260] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.542: Failed to acquire dquot type 1
[   77.927196][ T5260] EXT4-fs (loop1): 1 truncate cleaned up
[   77.934167][ T5260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   77.979397][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.028548][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.084435][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.218668][ T3413] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   78.243823][ T5274] loop5: detected capacity change from 0 to 1024
[   78.255103][ T5274] EXT4-fs: Ignoring removed nomblk_io_submit option
[   78.269630][ T3413] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   78.315640][ T5274] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   78.374487][ T5274] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.473074][ T4281] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.473177][ T5293] loop1: detected capacity change from 0 to 512
[   78.517886][ T5293] EXT4-fs (loop1): orphan cleanup on readonly fs
[   78.536408][ T5293] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.552: bg 0: block 248: padding at end of block bitmap is not set
[   78.552824][ T5293] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.552: Failed to acquire dquot type 1
[   78.565785][ T5304] bridge_slave_0: left allmulticast mode
[   78.571253][ T5293] EXT4-fs (loop1): 1 truncate cleaned up
[   78.571464][ T5304] bridge_slave_0: left promiscuous mode
[   78.582888][ T5304] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.592011][ T5293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   78.593194][ T5304] bridge_slave_1: left allmulticast mode
[   78.610408][ T5304] bridge_slave_1: left promiscuous mode
[   78.616307][ T5304] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.628542][ T5304] bond0: (slave bond_slave_0): Releasing backup interface
[   78.640106][ T5304] bond0: (slave bond_slave_1): Releasing backup interface
[   78.653981][ T5304] team0: Port device team_slave_0 removed
[   78.663497][ T5304] team0: Port device team_slave_1 removed
[   78.671388][ T5304] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.678952][ T5304] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.681703][ T5314] siw: device registration error -23
[   78.696059][ T5314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.558'.
[   78.711153][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.721880][ T5304] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.729549][ T5304] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.753327][ T1036] lo speed is unknown, defaulting to 1000
[   78.781136][ T5318] netlink: 4 bytes leftover after parsing attributes in process `syz.5.560'.
[   78.802934][ T5314] vlan0: entered allmulticast mode
[   78.962135][ T5326] hub 6-0:1.0: USB hub found
[   78.967310][ T5326] hub 6-0:1.0: 8 ports detected
[   78.980464][ T5326] random: crng reseeded on system resumption
[   78.988201][ T5324] loop1: detected capacity change from 0 to 512
[   78.999931][ T5326] netlink: 36 bytes leftover after parsing attributes in process `syz.0.563'.
[   79.010840][ T5324] EXT4-fs (loop1): orphan cleanup on readonly fs
[   79.020075][ T5324] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.562: bg 0: block 248: padding at end of block bitmap is not set
[   79.038766][ T5324] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.562: Failed to acquire dquot type 1
[   79.050985][ T5324] EXT4-fs (loop1): 1 truncate cleaned up
[   79.058953][ T5324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   79.107618][ T5336] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526
[   79.129472][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.571342][ T5348] FAULT_INJECTION: forcing a failure.
[   79.571342][ T5348] name failslab, interval 1, probability 0, space 0, times 0
[   79.584120][ T5348] CPU: 1 UID: 0 PID: 5348 Comm: syz.2.571 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   79.584153][ T5348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   79.584169][ T5348] Call Trace:
[   79.584178][ T5348]  <TASK>
[   79.584188][ T5348]  __dump_stack+0x1d/0x30
[   79.584232][ T5348]  dump_stack_lvl+0xe8/0x140
[   79.584256][ T5348]  dump_stack+0x15/0x1b
[   79.584277][ T5348]  should_fail_ex+0x265/0x280
[   79.584304][ T5348]  should_failslab+0x8c/0xb0
[   79.584330][ T5348]  __kmalloc_noprof+0xa5/0x3e0
[   79.584406][ T5348]  ? io_cache_alloc_new+0x2a/0xb0
[   79.584513][ T5348]  io_cache_alloc_new+0x2a/0xb0
[   79.584548][ T5348]  __io_prep_rw+0xcf/0x6d0
[   79.584570][ T5348]  io_prep_writev_fixed+0x25/0x90
[   79.584592][ T5348]  io_submit_sqes+0x5ef/0x1060
[   79.584627][ T5348]  __se_sys_io_uring_enter+0x1c1/0x1b70
[   79.584710][ T5348]  ? sized_strscpy+0x193/0x1a0
[   79.584749][ T5348]  ? bpf_get_current_comm+0x7c/0xb0
[   79.584811][ T5348]  ? __rcu_read_unlock+0x4f/0x70
[   79.584836][ T5348]  ? bpf_trace_run2+0x124/0x1c0
[   79.584937][ T5348]  ? __bpf_trace_sys_enter+0x10/0x30
[   79.584961][ T5348]  __x64_sys_io_uring_enter+0x78/0x90
[   79.584993][ T5348]  x64_sys_call+0x2de1/0x2ff0
[   79.585020][ T5348]  do_syscall_64+0xd2/0x200
[   79.585070][ T5348]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   79.585099][ T5348]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   79.585181][ T5348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.585209][ T5348] RIP: 0033:0x7f07b2b3ebe9
[   79.585228][ T5348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   79.585292][ T5348] RSP: 002b:00007f07b159f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[   79.585313][ T5348] RAX: ffffffffffffffda RBX: 00007f07b2d65fa0 RCX: 00007f07b2b3ebe9
[   79.585327][ T5348] RDX: 0000000000002936 RSI: 0000000000002d3e RDI: 0000000000000004
[   79.585385][ T5348] RBP: 00007f07b159f090 R08: 0000000000000000 R09: 0000000000000000
[   79.585459][ T5348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   79.585474][ T5348] R13: 00007f07b2d66038 R14: 00007f07b2d65fa0 R15: 00007ffd7ec1f6c8
[   79.585498][ T5348]  </TASK>
[   80.159300][ T5352] loop5: detected capacity change from 0 to 512
[   80.215824][ T5352] EXT4-fs (loop5): orphan cleanup on readonly fs
[   80.254806][ T5352] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.572: bg 0: block 248: padding at end of block bitmap is not set
[   80.289222][ T5360] siw: device registration error -23
[   80.309659][ T5360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.573'.
[   80.321438][ T5352] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.572: Failed to acquire dquot type 1
[   80.352359][ T5360] vlan0: entered allmulticast mode
[   80.360902][ T5352] EXT4-fs (loop5): 1 truncate cleaned up
[   80.375132][ T5352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   80.578762][ T4281] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.772757][ T5374] FAULT_INJECTION: forcing a failure.
[   80.772757][ T5374] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   80.785922][ T5374] CPU: 1 UID: 0 PID: 5374 Comm: syz.0.580 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   80.786029][ T5374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   80.786044][ T5374] Call Trace:
[   80.786052][ T5374]  <TASK>
[   80.786060][ T5374]  __dump_stack+0x1d/0x30
[   80.786084][ T5374]  dump_stack_lvl+0xe8/0x140
[   80.786127][ T5374]  dump_stack+0x15/0x1b
[   80.786149][ T5374]  should_fail_ex+0x265/0x280
[   80.786172][ T5374]  should_fail+0xb/0x20
[   80.786188][ T5374]  should_fail_usercopy+0x1a/0x20
[   80.786296][ T5374]  _copy_from_iter+0xd2/0xe80
[   80.786332][ T5374]  ? alloc_pages_mpol+0x201/0x250
[   80.786456][ T5374]  copy_page_from_iter+0x178/0x2a0
[   80.786491][ T5374]  tun_get_user+0x679/0x2680
[   80.786537][ T5374]  ? ref_tracker_alloc+0x1f2/0x2f0
[   80.786562][ T5374]  tun_chr_write_iter+0x15e/0x210
[   80.786659][ T5374]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   80.786693][ T5374]  vfs_write+0x52a/0x960
[   80.786719][ T5374]  ksys_write+0xda/0x1a0
[   80.786742][ T5374]  __x64_sys_write+0x40/0x50
[   80.786836][ T5374]  x64_sys_call+0x27fe/0x2ff0
[   80.786861][ T5374]  do_syscall_64+0xd2/0x200
[   80.786897][ T5374]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   80.786926][ T5374]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   80.787010][ T5374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.787086][ T5374] RIP: 0033:0x7f78dd32d69f
[   80.787107][ T5374] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[   80.787127][ T5374] RSP: 002b:00007f78dbd8f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   80.787149][ T5374] RAX: ffffffffffffffda RBX: 00007f78dd555fa0 RCX: 00007f78dd32d69f
[   80.787163][ T5374] RDX: 000000000000007e RSI: 0000200000000380 RDI: 00000000000000c8
[   80.787178][ T5374] RBP: 00007f78dbd8f090 R08: 0000000000000000 R09: 0000000000000000
[   80.787192][ T5374] R10: 000000000000007e R11: 0000000000000293 R12: 0000000000000001
[   80.787237][ T5374] R13: 00007f78dd556038 R14: 00007f78dd555fa0 R15: 00007ffe9861a458
[   80.787288][ T5374]  </TASK>
[   81.084701][ T5384] lo speed is unknown, defaulting to 1000
[   81.242047][ T5394] loop2: detected capacity change from 0 to 512
[   81.244922][ T5384] lo speed is unknown, defaulting to 1000
[   81.258963][ T5394] EXT4-fs (loop2): orphan cleanup on readonly fs
[   81.273451][ T5394] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.586: bg 0: block 248: padding at end of block bitmap is not set
[   81.329418][ T5394] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.586: Failed to acquire dquot type 1
[   81.366552][ T5394] EXT4-fs (loop2): 1 truncate cleaned up
[   81.379479][ T5394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   81.444675][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.523118][   T29] kauditd_printk_skb: 371 callbacks suppressed
[   81.523215][   T29] audit: type=1400 audit(1756006649.022:2869): avc:  denied  { create } for  pid=5408 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   81.526391][ T5409] siw: device registration error -23
[   81.530919][   T29] audit: type=1400 audit(1756006649.022:2870): avc:  denied  { create } for  pid=5408 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   81.557679][ T5409] netlink: 20 bytes leftover after parsing attributes in process `syz.2.590'.
[   81.574658][   T29] audit: type=1400 audit(1756006649.022:2871): avc:  denied  { write } for  pid=5408 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   81.580637][   T29] audit: type=1400 audit(1756006649.052:2872): avc:  denied  { mounton } for  pid=5408 comm="syz.2.590" path="/118/file0" dev="tmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   81.592483][ T5409] vlan0: entered allmulticast mode
[   81.603917][   T29] audit: type=1400 audit(1756006649.052:2873): avc:  denied  { connect } for  pid=5408 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   81.652227][   T29] audit: type=1400 audit(1756006649.052:2874): avc:  denied  { write } for  pid=5408 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   81.678641][   T29] audit: type=1400 audit(1756006649.082:2875): avc:  denied  { ioctl } for  pid=5408 comm="syz.2.590" path="socket:[10940]" dev="sockfs" ino=10940 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   81.710043][ T5413] loop3: detected capacity change from 0 to 128
[   81.717142][ T5413] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   81.731351][ T5413] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   81.744447][   T29] audit: type=1400 audit(1756006649.252:2876): avc:  denied  { mount } for  pid=5411 comm="syz.3.592" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   81.818417][   T29] audit: type=1400 audit(1756006649.322:2877): avc:  denied  { read } for  pid=5420 comm="syz.5.595" dev="nsfs" ino=4026532824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   81.841334][   T29] audit: type=1400 audit(1756006649.322:2878): avc:  denied  { open } for  pid=5420 comm="syz.5.595" path="net:[4026532824]" dev="nsfs" ino=4026532824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   81.900620][ T5427] loop1: detected capacity change from 0 to 1024
[   81.907640][ T5427] EXT4-fs: Ignoring removed orlov option
[   81.924677][ T5427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.976186][ T5434] loop3: detected capacity change from 0 to 1024
[   82.011363][ T5431] loop5: detected capacity change from 0 to 1024
[   82.021533][ T5434] EXT4-fs: Ignoring removed orlov option
[   82.035717][ T5431] EXT4-fs: Ignoring removed nomblk_io_submit option
[   82.060616][ T5445] loop2: detected capacity change from 0 to 1024
[   82.067878][ T5445] EXT4-fs: Ignoring removed oldalloc option
[   82.074028][ T5445] EXT4-fs: Ignoring removed bh option
[   82.099721][ T5434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.112976][ T5431] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   82.133775][ T5431] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.148857][ T5445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.183795][ T4281] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.235054][   T10] usb 11-1: enqueue for inactive port 0
[   82.241042][   T10] usb 11-1: enqueue for inactive port 0
[   82.256818][ T5457] netlink: 20 bytes leftover after parsing attributes in process `syz.5.606'.
[   82.270983][ T5457] vlan0: entered allmulticast mode
[   82.276386][ T5457] bridge_slave_0: entered allmulticast mode
[   82.315056][   T10] vhci_hcd: vhci_device speed not set
[   82.361092][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.478246][ T5471] netlink: 'syz.1.612': attribute type 1 has an invalid length.
[   82.492295][ T5471] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.507423][ T5471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'.
[   82.529632][ T5471] bond1 (unregistering): Released all slaves
[   82.573020][ T5471] netlink: 'syz.1.612': attribute type 1 has an invalid length.
[   82.646528][ T5471] ipvlan0: entered promiscuous mode
[   82.738231][ T5481] loop1: detected capacity change from 0 to 1024
[   82.745676][ T5481] EXT4-fs: Ignoring removed nomblk_io_submit option
[   82.753033][ T5481] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   82.764170][ T5481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.788739][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.803301][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.883067][ T5492] hub 8-0:1.0: USB hub found
[   82.889212][ T5492] hub 8-0:1.0: 8 ports detected
[   82.993116][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.007300][ T5506] sit0: entered allmulticast mode
[   83.010767][ T5508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.624'.
[   83.023300][ T5506] sit0: entered promiscuous mode
[   83.051019][ T5508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.624'.
[   83.168134][ T5515] netlink: 332 bytes leftover after parsing attributes in process `syz.3.627'.
[   83.500753][ T5544] hub 8-0:1.0: USB hub found
[   83.506050][ T5544] hub 8-0:1.0: 8 ports detected
[   83.511130][ T5548] netlink: 120 bytes leftover after parsing attributes in process `syz.0.640'.
[   83.522372][ T5548] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[   83.529020][ T5548] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   83.536660][ T5548] vhci_hcd vhci_hcd.0: Device attached
[   83.544729][ T5548] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6)
[   83.551399][ T5548] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   83.559148][ T5548] vhci_hcd vhci_hcd.0: Device attached
[   83.570261][ T5554] netlink: 28 bytes leftover after parsing attributes in process `syz.5.641'.
[   83.577799][ T5548] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8)
[   83.579367][ T5554] netlink: 108 bytes leftover after parsing attributes in process `syz.5.641'.
[   83.585809][ T5548] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   83.585926][ T5548] vhci_hcd vhci_hcd.0: Device attached
[   83.607149][ T5554] netlink: 28 bytes leftover after parsing attributes in process `syz.5.641'.
[   83.619023][ T5548] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   83.630076][ T5548] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(14)
[   83.636842][ T5548] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   83.644617][ T5548] vhci_hcd vhci_hcd.0: Device attached
[   83.659560][ T5548] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(16)
[   83.666210][ T5548] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   83.673920][ T5548] vhci_hcd vhci_hcd.0: Device attached
[   83.746377][ T5560] vhci_hcd: connection closed
[   83.746636][ T5555] vhci_hcd: connection closed
[   83.746663][ T5562] vhci_hcd: connection closed
[   83.751569][ T5551] vhci_hcd: connection closed
[   83.762307][ T5549] vhci_hcd: connection closed
[   83.771094][  T558] vhci_hcd: stop threads
[   83.780396][  T558] vhci_hcd: release socket
[   83.784841][  T558] vhci_hcd: disconnect device
[   83.789711][    T9] usb 1-1: new low-speed USB device number 4 using vhci_hcd
[   83.797430][ T5550] vhci_hcd: sendmsg failed!, ret=-32 for 48
[   83.805605][  T558] vhci_hcd: stop threads
[   83.810074][  T558] vhci_hcd: release socket
[   83.814527][  T558] vhci_hcd: disconnect device
[   83.820649][  T558] vhci_hcd: stop threads
[   83.825215][  T558] vhci_hcd: release socket
[   83.829705][  T558] vhci_hcd: disconnect device
[   83.844481][ T5571] loop5: detected capacity change from 0 to 1024
[   83.854782][ T5571] EXT4-fs: Ignoring removed nomblk_io_submit option
[   83.863843][  T558] vhci_hcd: stop threads
[   83.868237][  T558] vhci_hcd: release socket
[   83.872771][  T558] vhci_hcd: disconnect device
[   83.882017][  T558] vhci_hcd: stop threads
[   83.886399][  T558] vhci_hcd: release socket
[   83.891296][  T558] vhci_hcd: disconnect device
[   83.899533][ T5571] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.978876][ T4281] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.028949][ T5575] hub 8-0:1.0: USB hub found
[   84.033743][ T5575] hub 8-0:1.0: 8 ports detected
[   84.113877][ T5577] syz_tun: entered allmulticast mode
[   84.206656][ T5582] netlink: 'syz.5.648': attribute type 4 has an invalid length.
[   84.233208][ T1036] lo speed is unknown, defaulting to 1000
[   84.239109][ T1036] syz2: Port: 1 Link DOWN
[   84.359167][ T5592] siw: device registration error -23
[   84.395653][ T5592] vlan0: entered allmulticast mode
[   84.588754][ T5604] hub 8-0:1.0: USB hub found
[   84.593853][ T5604] hub 8-0:1.0: 8 ports detected
[   84.620388][ T5605] lo speed is unknown, defaulting to 1000
[   84.683364][ T5605] lo speed is unknown, defaulting to 1000
[   85.023643][ T5612] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[   85.030299][ T5612] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   85.037950][ T5612] vhci_hcd vhci_hcd.0: Device attached
[   85.044827][ T5612] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6)
[   85.051427][ T5612] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   85.059137][ T5612] vhci_hcd vhci_hcd.0: Device attached
[   85.072126][ T5612] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8)
[   85.078739][ T5612] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   85.086534][ T5612] vhci_hcd vhci_hcd.0: Device attached
[   85.092816][ T5612] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   85.102518][ T5612] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(14)
[   85.109319][ T5612] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   85.117127][ T5612] vhci_hcd vhci_hcd.0: Device attached
[   85.124880][ T5612] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(16)
[   85.131664][ T5612] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   85.132920][ T5622] loop5: detected capacity change from 0 to 512
[   85.139544][ T5612] vhci_hcd vhci_hcd.0: Device attached
[   85.146061][ T5612] loop1: detected capacity change from 0 to 128
[   85.185517][ T5622] EXT4-fs (loop5): orphan cleanup on readonly fs
[   85.189179][ T5612] syz.1.661: attempt to access beyond end of device
[   85.189179][ T5612] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128
[   85.218537][ T5612] syz.1.661: attempt to access beyond end of device
[   85.218537][ T5612] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128
[   85.243843][ T5612] syz.1.661: attempt to access beyond end of device
[   85.243843][ T5612] loop1: rw=2049, sector=177, nr_sectors = 24 limit=128
[   85.265154][ T5612] syz.1.661: attempt to access beyond end of device
[   85.265154][ T5612] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128
[   85.297613][ T5622] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.663: bg 0: block 248: padding at end of block bitmap is not set
[   85.300983][ T5612] syz.1.661: attempt to access beyond end of device
[   85.300983][ T5612] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128
[   85.335234][ T3413] usb 3-1: new low-speed USB device number 2 using vhci_hcd
[   85.344128][ T5622] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.663: Failed to acquire dquot type 1
[   85.364419][ T5612] syz.1.661: attempt to access beyond end of device
[   85.364419][ T5612] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128
[   85.385885][ T5622] EXT4-fs (loop5): 1 truncate cleaned up
[   85.397249][ T5607] loop3: detected capacity change from 0 to 736
[   85.400680][ T5640] siw: device registration error -23
[   85.421092][ T5622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   85.424633][ T5612] syz.1.661: attempt to access beyond end of device
[   85.424633][ T5612] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128
[   85.457731][ T5640] vlan0: entered allmulticast mode
[   85.506912][ T4281] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.551717][ T5646] loop2: detected capacity change from 0 to 512
[   85.565642][ T5646] EXT4-fs (loop2): orphan cleanup on readonly fs
[   85.572803][ T5620] vhci_hcd: connection closed
[   85.572993][ T5630] vhci_hcd: connection closed
[   85.573945][ T5616] vhci_hcd: connection reset by peer
[   85.578453][ T5625] vhci_hcd: connection closed
[   85.582664][   T31] vhci_hcd: stop threads
[   85.590117][ T5646] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.668: bg 0: block 248: padding at end of block bitmap is not set
[   85.592712][   T31] vhci_hcd: release socket
[   85.597572][ T5646] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.668: Failed to acquire dquot type 1
[   85.611299][   T31] vhci_hcd: disconnect device
[   85.617199][ T5646] EXT4-fs (loop2): 1 truncate cleaned up
[   85.639129][ T5627] vhci_hcd: connection closed
[   85.642081][   T31] vhci_hcd: stop threads
[   85.651379][   T31] vhci_hcd: release socket
[   85.656011][   T31] vhci_hcd: disconnect device
[   85.656045][ T5607] rock: directory entry would overflow storage
[   85.661046][   T31] vhci_hcd: stop threads
[   85.668029][ T5607] rock: sig=0x3b10, size=4, remaining=3
[   85.671565][   T31] vhci_hcd: release socket
[   85.671589][   T31] vhci_hcd: disconnect device
[   85.690510][   T31] vhci_hcd: stop threads
[   85.694963][   T31] vhci_hcd: release socket
[   85.695773][ T5646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   85.699584][   T31] vhci_hcd: disconnect device
[   85.718567][   T31] vhci_hcd: stop threads
[   85.723868][   T31] vhci_hcd: release socket
[   85.728404][   T31] vhci_hcd: disconnect device
[   85.800742][ T5656] netlink: 'syz.0.671': attribute type 1 has an invalid length.
[   85.839946][ T5656] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.856884][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.871585][ T5656] bond1 (unregistering): Released all slaves
[   85.894505][ T5660] hub 8-0:1.0: USB hub found
[   85.904212][ T5660] hub 8-0:1.0: 8 ports detected
[   86.017574][ T5663] loop2: detected capacity change from 0 to 512
[   86.032907][ T5663] EXT4-fs (loop2): orphan cleanup on readonly fs
[   86.040064][ T5672] netlink: 'syz.5.678': attribute type 1 has an invalid length.
[   86.040064][ T5663] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.675: bg 0: block 248: padding at end of block bitmap is not set
[   86.063535][ T5663] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.675: Failed to acquire dquot type 1
[   86.086966][ T5663] EXT4-fs (loop2): 1 truncate cleaned up
[   86.088296][ T5672] 8021q: adding VLAN 0 to HW filter on device bond1
[   86.101666][ T5663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   86.123926][ T5678] siw: device registration error -23
[   86.148885][ T5672] bond1 (unregistering): Released all slaves
[   86.163360][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.176140][ T5678] vlan0: entered allmulticast mode
[   86.409636][ T5707] FAULT_INJECTION: forcing a failure.
[   86.409636][ T5707] name failslab, interval 1, probability 0, space 0, times 0
[   86.422436][ T5707] CPU: 1 UID: 0 PID: 5707 Comm: syz.3.692 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   86.422467][ T5707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   86.422482][ T5707] Call Trace:
[   86.422491][ T5707]  <TASK>
[   86.422501][ T5707]  __dump_stack+0x1d/0x30
[   86.422553][ T5707]  dump_stack_lvl+0xe8/0x140
[   86.422578][ T5707]  dump_stack+0x15/0x1b
[   86.422675][ T5707]  should_fail_ex+0x265/0x280
[   86.422700][ T5707]  should_failslab+0x8c/0xb0
[   86.422772][ T5707]  kmem_cache_alloc_noprof+0x50/0x310
[   86.422799][ T5707]  ? getname_flags+0x80/0x3b0
[   86.422841][ T5707]  ? vfs_write+0x7e8/0x960
[   86.422876][ T5707]  getname_flags+0x80/0x3b0
[   86.422931][ T5707]  user_path_at+0x28/0x130
[   86.422979][ T5707]  vfs_open_tree+0xef/0x540
[   86.423017][ T5707]  __x64_sys_open_tree+0x45/0xc0
[   86.423110][ T5707]  x64_sys_call+0x2a87/0x2ff0
[   86.423136][ T5707]  do_syscall_64+0xd2/0x200
[   86.423164][ T5707]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   86.423262][ T5707]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   86.423292][ T5707]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.423320][ T5707] RIP: 0033:0x7f4b844eebe9
[   86.423349][ T5707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   86.423421][ T5707] RSP: 002b:00007f4b82f57038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac
[   86.423445][ T5707] RAX: ffffffffffffffda RBX: 00007f4b84715fa0 RCX: 00007f4b844eebe9
[   86.423462][ T5707] RDX: 0000000000000100 RSI: 0000200000000180 RDI: ffffffffffffff9c
[   86.423477][ T5707] RBP: 00007f4b82f57090 R08: 0000000000000000 R09: 0000000000000000
[   86.423492][ T5707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   86.423507][ T5707] R13: 00007f4b84716038 R14: 00007f4b84715fa0 R15: 00007ffd1edddc28
[   86.423541][ T5707]  </TASK>
[   86.625595][   T29] kauditd_printk_skb: 626 callbacks suppressed
[   86.625610][   T29] audit: type=1400 audit(1756006654.122:3499): avc:  denied  { name_bind } for  pid=5709 comm="syz.0.693" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   86.653743][   T29] audit: type=1400 audit(1756006654.122:3500): avc:  denied  { node_bind } for  pid=5709 comm="syz.0.693" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   86.683688][   T29] audit: type=1400 audit(1756006654.132:3501): avc:  denied  { create } for  pid=5709 comm="syz.0.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   86.703548][   T29] audit: type=1400 audit(1756006654.162:3502): avc:  denied  { connect } for  pid=5709 comm="syz.0.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   86.723277][   T29] audit: type=1400 audit(1756006654.162:3503): avc:  denied  { write } for  pid=5709 comm="syz.0.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   86.742786][   T29] audit: type=1400 audit(1756006654.162:3504): avc:  denied  { read } for  pid=5709 comm="syz.0.693" path="socket:[12423]" dev="sockfs" ino=12423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   86.784319][ T5717] __nla_validate_parse: 8 callbacks suppressed
[   86.784340][ T5717] netlink: 120 bytes leftover after parsing attributes in process `syz.0.696'.
[   86.838731][ T5717] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[   86.845302][ T5717] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   86.852953][ T5717] vhci_hcd vhci_hcd.0: Device attached
[   86.882528][ T5728] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7)
[   86.889126][ T5728] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   86.896754][ T5728] vhci_hcd vhci_hcd.0: Device attached
[   86.913636][ T5717] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(6)
[   86.920471][ T5717] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   86.928230][ T5717] vhci_hcd vhci_hcd.0: Device attached
[   86.935431][ T5717] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   86.945334][ T5717] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(14)
[   86.952127][ T5717] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   86.959856][ T5717] vhci_hcd vhci_hcd.0: Device attached
[   86.966732][ T5717] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(16)
[   86.973477][ T5717] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   86.981243][ T5717] vhci_hcd vhci_hcd.0: Device attached
[   87.045439][ T5738] vhci_hcd: connection closed
[   87.045563][ T5731] vhci_hcd: connection closed
[   87.045666][ T5736] vhci_hcd: connection closed
[   87.050353][ T5729] vhci_hcd: connection closed
[   87.050527][ T5720] vhci_hcd: connection closed
[   87.064036][   T29] audit: type=1400 audit(1756006654.562:3505): avc:  denied  { setopt } for  pid=5742 comm="syz.2.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   87.095259][ T3442] vhci_hcd: stop threads
[   87.099704][ T3442] vhci_hcd: release socket
[   87.104152][ T3442] vhci_hcd: disconnect device
[   87.124885][ T3442] vhci_hcd: stop threads
[   87.129340][ T3442] vhci_hcd: release socket
[   87.133788][ T3442] vhci_hcd: disconnect device
[   87.140368][ T3442] vhci_hcd: stop threads
[   87.144684][ T3442] vhci_hcd: release socket
[   87.149266][ T3442] vhci_hcd: disconnect device
[   87.164299][ T3442] vhci_hcd: stop threads
[   87.168669][ T3442] vhci_hcd: release socket
[   87.173285][ T3442] vhci_hcd: disconnect device
[   87.179201][ T3442] vhci_hcd: stop threads
[   87.183642][ T3442] vhci_hcd: release socket
[   87.188235][ T3442] vhci_hcd: disconnect device
[   87.285941][ T5759] syz_tun: entered allmulticast mode
[   87.417613][ T5779] loop2: detected capacity change from 0 to 128
[   87.444689][ T5779] FAT-fs (loop2): Directory bread(block 32) failed
[   87.451477][ T5779] FAT-fs (loop2): Directory bread(block 33) failed
[   87.467200][ T5779] FAT-fs (loop2): Directory bread(block 34) failed
[   87.474113][ T5779] FAT-fs (loop2): Directory bread(block 35) failed
[   87.480924][ T5779] FAT-fs (loop2): Directory bread(block 36) failed
[   87.487688][ T5779] FAT-fs (loop2): Directory bread(block 37) failed
[   87.494412][ T5779] FAT-fs (loop2): Directory bread(block 38) failed
[   87.505118][ T5779] FAT-fs (loop2): Directory bread(block 39) failed
[   87.511898][ T5779] FAT-fs (loop2): Directory bread(block 40) failed
[   87.525042][ T5779] FAT-fs (loop2): Directory bread(block 41) failed
[   87.551210][ T5779] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[   87.560456][ T5779] FAT-fs (loop2): Filesystem has been set read-only
[   87.601722][   T29] audit: type=1326 audit(1756006655.092:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1b56ebe9 code=0x7ffc0000
[   87.625900][   T29] audit: type=1326 audit(1756006655.092:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fac1b56ebe9 code=0x7ffc0000
[   87.649370][   T29] audit: type=1326 audit(1756006655.092:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1b56ebe9 code=0x7ffc0000
[   87.685575][ T5789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.718'.
[   87.726651][ T5787] loop5: detected capacity change from 0 to 128
[   87.738530][ T5787] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   87.745787][ T5779] syz.2.712: attempt to access beyond end of device
[   87.745787][ T5779] loop2: rw=2049, sector=4184, nr_sectors = 16 limit=128
[   87.750839][ T5787] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   87.792000][ T5779] syz.2.712: attempt to access beyond end of device
[   87.792000][ T5779] loop2: rw=2049, sector=4208, nr_sectors = 4 limit=128
[   87.805702][ T5779] Buffer I/O error on dev loop2, logical block 1052, lost async page write
[   87.817425][ T5779] syz.2.712: attempt to access beyond end of device
[   87.817425][ T5779] loop2: rw=2049, sector=4216, nr_sectors = 4 limit=128
[   87.831126][ T5779] Buffer I/O error on dev loop2, logical block 1054, lost async page write
[   87.861947][ T5779] Buffer I/O error on dev loop2, logical block 1057, lost async page write
[   87.871236][ T5779] Buffer I/O error on dev loop2, logical block 1059, lost async page write
[   87.943716][ T5809] loop5: detected capacity change from 0 to 1024
[   87.954494][ T5809] EXT4-fs: Ignoring removed nomblk_io_submit option
[   87.963176][ T5809] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   87.990813][ T5809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.021963][ T4281] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.054839][ T5814] syz_tun: entered allmulticast mode
[   88.168915][ T5813] syz_tun: left allmulticast mode
[   88.192373][ T5828] netlink: 20 bytes leftover after parsing attributes in process `syz.5.729'.
[   88.205797][ T5828] vlan0: entered allmulticast mode
[   88.259721][ T5835] netlink: 9004 bytes leftover after parsing attributes in process `syz.2.732'.
[   88.307771][ T5838] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[   88.373541][ T5842] loop5: detected capacity change from 0 to 512
[   88.410128][ T5842] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   88.429949][ T5842] EXT4-fs (loop5): mount failed
[   88.483886][ T5845] lo speed is unknown, defaulting to 1000
[   88.579981][ T5845] lo speed is unknown, defaulting to 1000
[   88.808773][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'.
[   88.875372][    T9] usb 1-1: enqueue for inactive port 0
[   88.882356][    T9] usb 1-1: enqueue for inactive port 0
[   88.887688][ T5860] loop2: detected capacity change from 0 to 512
[   88.952887][ T5860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.965228][    T9] vhci_hcd: vhci_device speed not set
[   88.975460][ T5864] loop5: detected capacity change from 0 to 512
[   89.040981][ T5864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.109257][ T5864] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.221899][ T5860] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.249749][ T5874] loop1: detected capacity change from 0 to 512
[   89.331456][ T5874] EXT4-fs (loop1): orphan cleanup on readonly fs
[   89.364366][ T5874] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.744: bg 0: block 248: padding at end of block bitmap is not set
[   89.408333][ T5874] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.744: Failed to acquire dquot type 1
[   89.441909][ T5874] EXT4-fs (loop1): 1 truncate cleaned up
[   89.453877][ T5880] siw: device registration error -23
[   89.460403][ T5881] FAULT_INJECTION: forcing a failure.
[   89.460403][ T5881] name failslab, interval 1, probability 0, space 0, times 0
[   89.473328][ T5881] CPU: 0 UID: 0 PID: 5881 Comm: syz.5.742 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   89.473408][ T5881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   89.473460][ T5881] Call Trace:
[   89.473468][ T5881]  <TASK>
[   89.473477][ T5881]  __dump_stack+0x1d/0x30
[   89.473507][ T5881]  dump_stack_lvl+0xe8/0x140
[   89.473541][ T5881]  dump_stack+0x15/0x1b
[   89.473561][ T5881]  should_fail_ex+0x265/0x280
[   89.473596][ T5881]  should_failslab+0x8c/0xb0
[   89.473629][ T5881]  kmem_cache_alloc_noprof+0x50/0x310
[   89.473681][ T5881]  ? getname_flags+0x80/0x3b0
[   89.473725][ T5881]  getname_flags+0x80/0x3b0
[   89.473760][ T5881]  do_sys_openat2+0x60/0x110
[   89.473880][ T5881]  __x64_sys_openat+0xf2/0x120
[   89.473991][ T5881]  x64_sys_call+0x2e9c/0x2ff0
[   89.474064][ T5881]  do_syscall_64+0xd2/0x200
[   89.474173][ T5881]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   89.474205][ T5881]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   89.474308][ T5881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.474336][ T5881] RIP: 0033:0x7f486ba7ebe9
[   89.474356][ T5881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.474379][ T5881] RSP: 002b:00007f486a49d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   89.474404][ T5881] RAX: ffffffffffffffda RBX: 00007f486bca6180 RCX: 00007f486ba7ebe9
[   89.474421][ T5881] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[   89.474437][ T5881] RBP: 00007f486a49d090 R08: 0000000000000000 R09: 0000000000000000
[   89.474515][ T5881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   89.474528][ T5881] R13: 00007f486bca6218 R14: 00007f486bca6180 R15: 00007ffce2c6d918
[   89.474552][ T5881]  </TASK>
[   89.662891][ T5874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   89.689877][ T5880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.745'.
[   89.703229][ T5880] vlan0: entered allmulticast mode
[   89.705819][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.751220][ T5887] netlink: 32 bytes leftover after parsing attributes in process `syz.1.747'.
[   89.795499][ T4281] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.809960][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'.
[   89.819757][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'.
[   89.929802][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.971789][ T5899] loop5: detected capacity change from 0 to 1024
[   89.978992][ T5899] EXT4-fs: Ignoring removed nomblk_io_submit option
[   90.000450][ T5899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.088580][ T5905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.753'.
[   90.131260][ T4281] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.223220][ T5918] netlink: 'syz.2.758': attribute type 1 has an invalid length.
[   90.283412][ T5918] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.340807][ T5924] vlan0: entered allmulticast mode
[   90.357906][ T5931] Falling back ldisc for ttyS3.
[   90.395128][ T3413] usb 3-1: enqueue for inactive port 0
[   90.408726][ T3413] usb 3-1: enqueue for inactive port 0
[   90.432136][ T5937] loop1: detected capacity change from 0 to 128
[   90.446417][ T5937] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   90.463048][ T5937] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   90.496292][ T3413] vhci_hcd: vhci_device speed not set
[   90.530409][ T5945] loop1: detected capacity change from 0 to 128
[   90.555437][ T5945] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   90.571611][ T5945] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   90.612022][ T5939] loop2: detected capacity change from 0 to 512
[   90.666647][ T5939] EXT4-fs (loop2): orphan cleanup on readonly fs
[   90.686970][ T5939] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.767: bg 0: block 248: padding at end of block bitmap is not set
[   90.723654][ T5939] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.767: Failed to acquire dquot type 1
[   90.746152][ T5939] EXT4-fs (loop2): 1 truncate cleaned up
[   90.806189][ T5939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   90.838916][ T5963] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.850865][ T5961] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   90.879493][ T5961] SELinux: failed to load policy
[   90.895226][ T5961] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   90.977391][ T5963] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.012087][ T5975] siw: device registration error -23
[   91.031025][ T5973] vlan0: entered allmulticast mode
[   91.131414][ T5963] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.132867][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.210204][ T5963] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.234243][ T5987] loop5: detected capacity change from 0 to 512
[   91.261840][ T5989] loop2: detected capacity change from 0 to 128
[   91.292915][ T5989] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   91.323765][ T3442] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.327454][ T5989] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   91.350118][ T3442] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.390980][ T5987] EXT4-fs (loop5): orphan cleanup on readonly fs
[   91.416951][ T3442] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.440454][ T5987] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.786: bg 0: block 248: padding at end of block bitmap is not set
[   91.461250][ T3442] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.479958][ T5987] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.786: Failed to acquire dquot type 1
[   91.493260][ T6004] netlink: 'syz.2.790': attribute type 1 has an invalid length.
[   91.502364][ T5987] EXT4-fs (loop5): 1 truncate cleaned up
[   91.509608][ T5987] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   91.552860][ T6011] loop2: detected capacity change from 0 to 128
[   91.561412][ T4281] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.567506][ T6011] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   91.577534][ T6000] loop3: detected capacity change from 0 to 1024
[   91.589612][ T3391] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   91.595724][ T6011] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   91.604237][ T3391] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   91.624592][ T6000] EXT4-fs: Ignoring removed nomblk_io_submit option
[   91.666264][ T6017] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   91.692044][ T6000] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   91.706533][ T6017] SELinux: failed to load policy
[   91.732206][ T6017] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   91.754586][ T6023] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[   91.779971][ T6000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.807490][   T29] kauditd_printk_skb: 232 callbacks suppressed
[   91.807508][   T29] audit: type=1326 audit(1756006659.312:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.2.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b2b3ebe9 code=0x7ffc0000
[   91.845032][   T29] audit: type=1326 audit(1756006659.312:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.2.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b2b3ebe9 code=0x7ffc0000
[   91.868433][   T29] audit: type=1326 audit(1756006659.312:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.2.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f07b2b3ebe9 code=0x7ffc0000
[   91.879437][ T6024] loop2: detected capacity change from 0 to 512
[   91.892047][   T29] audit: type=1326 audit(1756006659.312:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.2.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b2b3ebe9 code=0x7ffc0000
[   91.921454][   T29] audit: type=1326 audit(1756006659.312:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.2.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f07b2b3ebe9 code=0x7ffc0000
[   91.945007][   T29] audit: type=1326 audit(1756006659.312:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.2.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b2b3ebe9 code=0x7ffc0000
[   91.968439][   T29] audit: type=1326 audit(1756006659.312:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.2.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f07b2b3ebe9 code=0x7ffc0000
[   92.006832][   T29] audit: type=1326 audit(1756006659.362:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.2.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b2b3ebe9 code=0x7ffc0000
[   92.030356][   T29] audit: type=1326 audit(1756006659.362:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.2.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b2b3ebe9 code=0x7ffc0000
[   92.053897][   T29] audit: type=1326 audit(1756006659.362:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.2.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f07b2b3ebe9 code=0x7ffc0000
[   92.090198][ T6024] EXT4-fs (loop2): orphan cleanup on readonly fs
[   92.097553][ T6033] __nla_validate_parse: 15 callbacks suppressed
[   92.097573][ T6033] netlink: 20 bytes leftover after parsing attributes in process `syz.5.797'.
[   92.098854][ T6024] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.795: bg 0: block 248: padding at end of block bitmap is not set
[   92.108602][ T6033] vlan0: entered allmulticast mode
[   92.134043][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.143145][ T6024] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.795: Failed to acquire dquot type 1
[   92.158478][ T6024] EXT4-fs (loop2): 1 truncate cleaned up
[   92.176964][ T6024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   92.247760][ T6042] netlink: 48 bytes leftover after parsing attributes in process `syz.3.800'.
[   92.258406][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.318807][ T6046] netlink: 'syz.2.802': attribute type 1 has an invalid length.
[   92.328905][ T6042] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[   92.335366][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.802'.
[   92.335509][ T6042] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   92.352003][ T6042] vhci_hcd vhci_hcd.0: Device attached
[   92.377107][ T6042] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6)
[   92.383683][ T6042] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   92.391259][ T6042] vhci_hcd vhci_hcd.0: Device attached
[   92.443197][ T6042] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8)
[   92.449902][ T6042] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   92.457535][ T6042] vhci_hcd vhci_hcd.0: Device attached
[   92.457655][ T6057] loop1: detected capacity change from 0 to 1024
[   92.472548][ T6057] EXT4-fs: Ignoring removed nomblk_io_submit option
[   92.605103][   T10] usb 7-1: new low-speed USB device number 2 using vhci_hcd
[   92.660431][ T6073] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   92.693010][ T6073] SELinux: failed to load policy
[   92.711481][ T6073] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   92.719837][ T6042] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   92.749670][ T6073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.810'.
[   92.773819][ T6042] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(14)
[   92.780557][ T6042] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   92.788493][ T6042] vhci_hcd vhci_hcd.0: Device attached
[   92.877623][ T6078] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(16)
[   92.884405][ T6078] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   92.892084][ T6078] vhci_hcd vhci_hcd.0: Device attached
[   92.942541][ T6042] loop3: detected capacity change from 0 to 128
[   92.996163][ T6097] siw: device registration error -23
[   93.027209][ T6097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.815'.
[   93.044031][ T6042] bio_check_eod: 3 callbacks suppressed
[   93.044120][ T6042] syz.3.800: attempt to access beyond end of device
[   93.044120][ T6042] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128
[   93.085553][ T6097] vlan0: entered allmulticast mode
[   93.102551][ T6042] syz.3.800: attempt to access beyond end of device
[   93.102551][ T6042] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128
[   93.155908][ T6042] syz.3.800: attempt to access beyond end of device
[   93.155908][ T6042] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128
[   93.182638][ T6104] netlink: 48 bytes leftover after parsing attributes in process `syz.1.818'.
[   93.207985][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'.
[   93.216412][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.821'.
[   93.216931][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.818'.
[   93.246770][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.821'.
[   93.269293][ T6110] loop2: detected capacity change from 0 to 128
[   93.276492][ T6110] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   93.298237][ T6110] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   93.329097][ T6113] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   93.339401][ T6113] SELinux: failed to load policy
[   93.439875][ T6113] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   93.444707][ T6058] vhci_hcd: connection closed
[   93.446643][ T6082] vhci_hcd: connection closed
[   93.447350][   T31] vhci_hcd: stop threads
[   93.451631][ T6089] vhci_hcd: connection closed
[   93.456322][   T31] vhci_hcd: release socket
[   93.456341][   T31] vhci_hcd: disconnect device
[   93.456631][ T6049] vhci_hcd: connection reset by peer
[   93.460887][ T6054] vhci_hcd: connection closed
[   93.486155][   T31] vhci_hcd: stop threads
[   93.495495][   T31] vhci_hcd: release socket
[   93.499934][   T31] vhci_hcd: disconnect device
[   93.546345][   T31] vhci_hcd: stop threads
[   93.550650][   T31] vhci_hcd: release socket
[   93.555138][   T31] vhci_hcd: disconnect device
[   93.577436][   T31] vhci_hcd: stop threads
[   93.581833][   T31] vhci_hcd: release socket
[   93.586411][   T31] vhci_hcd: disconnect device
[   93.605940][   T31] vhci_hcd: stop threads
[   93.610267][   T31] vhci_hcd: release socket
[   93.614727][   T31] vhci_hcd: disconnect device
[   94.513481][ T6166] loop5: detected capacity change from 0 to 1024
[   94.578821][ T6166] EXT4-fs: Ignoring removed nomblk_io_submit option
[   94.638594][ T6166] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   94.681495][ T6179] syz!: rxe_newlink: already configured on team_slave_0
[   94.746145][ T6189] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[   94.908793][ T6202] loop3: detected capacity change from 0 to 128
[   94.929103][ T6202] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   94.972006][ T6202] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   94.991582][ T6206] vlan0: entered allmulticast mode
[   95.261871][ T6224] SELinux: ebitmap: truncated map
[   95.347772][ T6224] SELinux: failed to load policy
[   95.388482][ T6228] loop3: detected capacity change from 0 to 512
[   95.409115][ T6224] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   95.605613][ T6228] EXT4-fs (loop3): orphan cleanup on readonly fs
[   95.612767][ T6228] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.858: bg 0: block 248: padding at end of block bitmap is not set
[   95.708064][ T6244] siw: device registration error -23
[   95.718363][ T6244] vlan0: entered allmulticast mode
[   95.855124][ T6228] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.858: Failed to acquire dquot type 1
[   95.889551][ T6247] syz_tun: entered allmulticast mode
[   95.917330][ T6228] EXT4-fs (loop3): 1 truncate cleaned up
[   95.948681][ T6252] loop2: detected capacity change from 0 to 1024
[   95.957392][ T6252] EXT4-fs: Ignoring removed nomblk_io_submit option
[   95.964320][ T6252] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   96.146160][ T6256] loop5: detected capacity change from 0 to 1024
[   96.199821][ T6256] EXT4-fs: Ignoring removed nomblk_io_submit option
[   96.242716][ T6246] syz_tun: left allmulticast mode
[   97.025636][ T6314] loop5: detected capacity change from 0 to 1024
[   97.033073][ T6314] EXT4-fs: Ignoring removed nomblk_io_submit option
[   97.061576][   T29] kauditd_printk_skb: 469 callbacks suppressed
[   97.061641][   T29] audit: type=1326 audit(1756006664.562:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6325 comm="syz.2.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b2b3ebe9 code=0x7ffc0000
[   97.128133][   T29] audit: type=1326 audit(1756006664.562:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6325 comm="syz.2.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b2b3ebe9 code=0x7ffc0000
[   97.151603][   T29] audit: type=1326 audit(1756006664.562:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6325 comm="syz.2.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f07b2b3ebe9 code=0x7ffc0000
[   97.175079][   T29] audit: type=1326 audit(1756006664.562:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6325 comm="syz.2.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b2b3ebe9 code=0x7ffc0000
[   97.198980][   T29] audit: type=1326 audit(1756006664.562:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6325 comm="syz.2.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f07b2b3ebe9 code=0x7ffc0000
[   97.222318][   T29] audit: type=1326 audit(1756006664.562:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6325 comm="syz.2.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b2b3ebe9 code=0x7ffc0000
[   97.245802][   T29] audit: type=1326 audit(1756006664.562:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6325 comm="syz.2.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f07b2b3ebe9 code=0x7ffc0000
[   97.280628][ T6323] loop3: detected capacity change from 0 to 1024
[   97.290689][ T6323] EXT4-fs: Ignoring removed nomblk_io_submit option
[   97.307617][ T6323] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   97.379621][ T6358] __nla_validate_parse: 21 callbacks suppressed
[   97.379641][ T6358] netlink: 32 bytes leftover after parsing attributes in process `syz.5.902'.
[   97.425261][   T29] audit: type=1326 audit(1756006664.902:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.1.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1b56ebe9 code=0x7ffc0000
[   97.448679][   T29] audit: type=1326 audit(1756006664.902:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.1.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1b56ebe9 code=0x7ffc0000
[   97.472049][   T29] audit: type=1326 audit(1756006664.902:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.1.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac1b56ebe9 code=0x7ffc0000
[   97.676578][   T10] usb 7-1: enqueue for inactive port 0
[   97.705038][   T10] usb 7-1: enqueue for inactive port 0
[   97.768315][ T6387] loop5: detected capacity change from 0 to 1024
[   97.785089][   T10] vhci_hcd: vhci_device speed not set
[   97.792290][ T6387] EXT4-fs: Ignoring removed nomblk_io_submit option
[   97.842190][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'.
[   98.031902][ T6406] netlink: 'syz.0.919': attribute type 1 has an invalid length.
[   98.047974][ T6399] loop1: detected capacity change from 0 to 1024
[   98.074713][ T6399] EXT4-fs: Ignoring removed nomblk_io_submit option
[   98.087235][ T6399] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   98.099667][ T6406] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.185267][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.919'.
[   98.211369][ T6416] netlink: 48 bytes leftover after parsing attributes in process `syz.5.923'.
[   98.212164][ T6406] bond1 (unregistering): Released all slaves
[   98.224401][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.923'.
[   98.235361][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.5.923'.
[   98.364243][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'.
[   98.443910][ T6438] netlink: 48 bytes leftover after parsing attributes in process `syz.0.932'.
[   98.477321][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.932'.
[   98.486622][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.932'.
[   98.532901][ T6439] loop5: detected capacity change from 0 to 1024
[   98.567211][ T6439] EXT4-fs: Ignoring removed nomblk_io_submit option
[   98.587643][ T6439] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   98.683344][    T9] lo speed is unknown, defaulting to 1000
[   98.689432][    T9] syz0: Port: 1 Link DOWN
[   98.804903][ T6465] netlink: 'syz.5.939': attribute type 1 has an invalid length.
[   98.873114][ T6465] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.929763][ T6465] bond1 (unregistering): Released all slaves
[   98.968228][ T6472] loop2: detected capacity change from 0 to 1024
[   98.991192][ T6472] EXT4-fs: Ignoring removed nomblk_io_submit option
[   99.264183][ T6508] netlink: 'syz.3.955': attribute type 1 has an invalid length.
[   99.278067][ T6506] loop1: detected capacity change from 0 to 1024
[   99.285858][ T6506] EXT4-fs: Ignoring removed nomblk_io_submit option
[   99.304495][ T6508] 8021q: adding VLAN 0 to HW filter on device bond1
[   99.315630][ T6508] bond1 (unregistering): Released all slaves
[   99.436493][ T6516] loop2: detected capacity change from 0 to 512
[   99.446674][ T6516] EXT4-fs (loop2): orphan cleanup on readonly fs
[   99.453750][ T6516] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.958: bg 0: block 248: padding at end of block bitmap is not set
[   99.468816][ T6516] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.958: Failed to acquire dquot type 1
[   99.481319][ T6516] EXT4-fs (loop2): 1 truncate cleaned up
[   99.629838][ T6544] loop2: detected capacity change from 0 to 1024
[   99.645897][ T6544] EXT4-fs: Ignoring removed nomblk_io_submit option
[   99.656800][ T6548] siw: device registration error -23
[   99.690502][ T6548] vlan0: entered allmulticast mode
[   99.892754][ T6571] loop2: detected capacity change from 0 to 512
[   99.928709][ T6571] EXT4-fs (loop2): orphan cleanup on readonly fs
[   99.942573][ T6589] loop5: detected capacity change from 0 to 1024
[   99.949687][ T6589] EXT4-fs: Ignoring removed nomblk_io_submit option
[   99.964817][ T6571] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.973: bg 0: block 248: padding at end of block bitmap is not set
[  100.004043][ T6571] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.973: Failed to acquire dquot type 1
[  100.014874][ T6595] siw: device registration error -23
[  100.022613][ T6571] EXT4-fs (loop2): 1 truncate cleaned up
[  100.033352][ T6595] vlan0: entered allmulticast mode
[  100.236376][ T6616] loop2: detected capacity change from 0 to 1024
[  100.244042][ T6628] loop5: detected capacity change from 0 to 1024
[  100.254181][ T6628] EXT4-fs: Ignoring removed nomblk_io_submit option
[  100.279401][ T6616] EXT4-fs: Ignoring removed nomblk_io_submit option
[  100.298874][ T6616] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  100.428474][ T6647] siw: device registration error -23
[  100.456579][ T6647] vlan0: entered allmulticast mode
[  100.621067][ T6666] loop5: detected capacity change from 0 to 1024
[  100.647372][ T6661] loop1: detected capacity change from 0 to 1024
[  100.659972][ T6666] EXT4-fs: Ignoring removed nomblk_io_submit option
[  100.665940][ T6661] EXT4-fs: Ignoring removed nomblk_io_submit option
[  100.677201][ T6661] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  100.872778][ T6687] netlink: 'syz.1.1017': attribute type 1 has an invalid length.
[  100.939749][ T6687] 8021q: adding VLAN 0 to HW filter on device bond1
[  100.954711][ T6695] siw: device registration error -23
[  101.089235][ T6691] bond1 (unregistering): Released all slaves
[  101.123670][ T6695] vlan0: entered allmulticast mode
[  101.166933][ T6699] loop3: detected capacity change from 0 to 128
[  101.191756][ T6699] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  101.208592][ T6699] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  101.272054][ T6701] loop1: detected capacity change from 0 to 1024
[  101.280021][ T3360] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  101.293034][ T6701] EXT4-fs: Ignoring removed nomblk_io_submit option
[  101.302898][ T3360] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  101.331618][ T6701] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  101.386892][ T6711] fido_id[6711]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  101.407780][ T6710] loop2: detected capacity change from 0 to 1024
[  101.416598][ T6710] EXT4-fs: Ignoring removed nomblk_io_submit option
[  101.971310][   T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  101.988290][   T36] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  102.002126][ T6751] loop2: detected capacity change from 0 to 1024
[  102.048236][ T6751] EXT4-fs: Ignoring removed nomblk_io_submit option
[  102.077993][ T6751] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  102.212757][ T6768] loop1: detected capacity change from 0 to 128
[  102.228533][ T6766] loop2: detected capacity change from 0 to 1024
[  102.245795][ T6768] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  102.252970][ T6766] EXT4-fs: Ignoring removed nomblk_io_submit option
[  102.285652][ T6768] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  102.390603][ T6776] __nla_validate_parse: 37 callbacks suppressed
[  102.390654][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1042'.
[  102.407374][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1042'.
[  102.473461][ T6782] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1044'.
[  102.495731][   T29] kauditd_printk_skb: 454 callbacks suppressed
[  102.495748][   T29] audit: type=1326 audit(1756006670.002:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1b56ebe9 code=0x7ffc0000
[  102.564529][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1045'.
[  102.603914][ T6793] netlink: 'syz.0.1050': attribute type 1 has an invalid length.
[  102.612577][   T29] audit: type=1326 audit(1756006670.002:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1b56ebe9 code=0x7ffc0000
[  102.636267][   T29] audit: type=1326 audit(1756006670.002:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac1b56ebe9 code=0x7ffc0000
[  102.659916][   T29] audit: type=1326 audit(1756006670.002:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1b56ebe9 code=0x7ffc0000
[  102.683491][   T29] audit: type=1326 audit(1756006670.002:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1b56ebe9 code=0x7ffc0000
[  102.707024][   T29] audit: type=1326 audit(1756006670.002:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac1b56ebe9 code=0x7ffc0000
[  102.730582][   T29] audit: type=1326 audit(1756006670.002:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1b56ebe9 code=0x7ffc0000
[  102.754003][   T29] audit: type=1326 audit(1756006670.002:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1b56ebe9 code=0x7ffc0000
[  102.756357][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1050'.
[  102.777763][   T29] audit: type=1326 audit(1756006670.002:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fac1b56ebe9 code=0x7ffc0000
[  102.809936][   T29] audit: type=1326 audit(1756006670.002:4678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1b56ebe9 code=0x7ffc0000
[  102.876327][ T6793] 8021q: adding VLAN 0 to HW filter on device bond1
[  102.877097][ T6801] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1051'.
[  102.900745][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1053'.
[  102.910314][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1053'.
[  102.911065][ T6796] bond1 (unregistering): Released all slaves
[  102.971728][ T6801] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  102.978334][ T6801] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  102.985995][ T6801] vhci_hcd vhci_hcd.0: Device attached
[  103.004857][ T6801] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6)
[  103.011602][ T6801] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  103.019502][ T6801] vhci_hcd vhci_hcd.0: Device attached
[  103.060488][ T6801] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8)
[  103.067071][ T6801] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  103.074863][ T6801] vhci_hcd vhci_hcd.0: Device attached
[  103.114258][ T6801] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  103.130347][ T6801] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(14)
[  103.137016][ T6801] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  103.144714][ T6801] vhci_hcd vhci_hcd.0: Device attached
[  103.158994][ T6830] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1062'.
[  103.171398][ T6801] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(16)
[  103.178061][ T6801] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  103.185853][ T6801] vhci_hcd vhci_hcd.0: Device attached
[  103.200756][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1062'.
[  103.211701][ T6841] loop3: detected capacity change from 0 to 128
[  103.231888][   T10] usb 7-1: new low-speed USB device number 3 using vhci_hcd
[  103.241034][ T6839] loop2: detected capacity change from 0 to 1024
[  103.259313][ T6839] EXT4-fs: Ignoring removed nomblk_io_submit option
[  103.263301][ T6801] syz.3.1051: attempt to access beyond end of device
[  103.263301][ T6801] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128
[  103.288506][ T6801] syz.3.1051: attempt to access beyond end of device
[  103.288506][ T6801] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128
[  103.289758][ T6839] EXT4-fs mount: 48 callbacks suppressed
[  103.289855][ T6839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.350007][ T6801] syz.3.1051: attempt to access beyond end of device
[  103.350007][ T6801] loop3: rw=2049, sector=177, nr_sectors = 24 limit=128
[  103.365657][ T6801] syz.3.1051: attempt to access beyond end of device
[  103.365657][ T6801] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128
[  103.394110][ T6801] syz.3.1051: attempt to access beyond end of device
[  103.394110][ T6801] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128
[  103.408288][ T6801] syz.3.1051: attempt to access beyond end of device
[  103.408288][ T6801] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128
[  103.422465][ T6801] syz.3.1051: attempt to access beyond end of device
[  103.422465][ T6801] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128
[  103.436224][ T6801] syz.3.1051: attempt to access beyond end of device
[  103.436224][ T6801] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128
[  103.451900][ T6801] syz.3.1051: attempt to access beyond end of device
[  103.451900][ T6801] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128
[  103.508337][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.535524][ T6831] vhci_hcd: connection closed
[  103.535700][ T6828] vhci_hcd: connection closed
[  103.535707][ T6807] vhci_hcd: connection reset by peer
[  103.536260][ T6812] vhci_hcd: connection closed
[  103.540556][ T6820] vhci_hcd: connection closed
[  103.547957][ T3442] vhci_hcd: stop threads
[  103.564369][ T3442] vhci_hcd: release socket
[  103.568890][ T3442] vhci_hcd: disconnect device
[  103.611080][ T3442] vhci_hcd: stop threads
[  103.615722][ T3442] vhci_hcd: release socket
[  103.620214][ T3442] vhci_hcd: disconnect device
[  103.646845][ T3442] vhci_hcd: stop threads
[  103.651184][ T3442] vhci_hcd: release socket
[  103.655806][ T3442] vhci_hcd: disconnect device
[  103.673230][ T3442] vhci_hcd: stop threads
[  103.677627][ T3442] vhci_hcd: release socket
[  103.682171][ T3442] vhci_hcd: disconnect device
[  103.705146][ T3442] vhci_hcd: stop threads
[  103.709479][ T3442] vhci_hcd: release socket
[  103.713952][ T3442] vhci_hcd: disconnect device
[  103.850762][ T6904] loop2: detected capacity change from 0 to 1024
[  103.859587][ T6904] EXT4-fs: Ignoring removed nomblk_io_submit option
[  103.894828][ T6910] SELinux: ebitmap: truncated map
[  103.900901][ T6910] SELinux: failed to load policy
[  103.945841][ T6904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.965318][ T6910] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  103.997631][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.113743][ T6938] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  104.120335][ T6938] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  104.128058][ T6938] vhci_hcd vhci_hcd.0: Device attached
[  104.153457][ T6938] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6)
[  104.160123][ T6938] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  104.168110][ T6938] vhci_hcd vhci_hcd.0: Device attached
[  104.178633][ T6938] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(8)
[  104.185341][ T6938] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  104.193172][ T6938] vhci_hcd vhci_hcd.0: Device attached
[  104.205626][ T6940] loop3: detected capacity change from 0 to 512
[  104.228999][ T6940] EXT4-fs (loop3): orphan cleanup on readonly fs
[  104.254511][ T6956] syz_tun: entered allmulticast mode
[  104.260072][ T6940] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1098: bg 0: block 248: padding at end of block bitmap is not set
[  104.281609][ T6940] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1098: Failed to acquire dquot type 1
[  104.293845][ T6959] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  104.319566][ T6938] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(14)
[  104.326402][ T6938] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  104.334130][ T6938] vhci_hcd vhci_hcd.0: Device attached
[  104.347903][ T6940] EXT4-fs (loop3): 1 truncate cleaned up
[  104.366372][    T9] usb 5-1: new low-speed USB device number 2 using vhci_hcd
[  104.383382][ T6940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  104.412827][ T6959] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(16)
[  104.417944][ T6964] loop5: detected capacity change from 0 to 1024
[  104.419515][ T6959] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  104.433683][ T6959] vhci_hcd vhci_hcd.0: Device attached
[  104.449932][ T6964] EXT4-fs: Ignoring removed nomblk_io_submit option
[  104.458910][ T6938] loop2: detected capacity change from 0 to 128
[  104.468426][ T6968] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  104.474153][ T6938] syz.2.1097: attempt to access beyond end of device
[  104.474153][ T6938] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128
[  104.478098][ T6968] SELinux: failed to load policy
[  104.515326][ T6968] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  104.523051][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.555688][ T6960] vhci_hcd: connection closed
[  104.555798][ T6965] vhci_hcd: connection closed
[  104.555924][ T6948] vhci_hcd: connection closed
[  104.560726][ T6945] vhci_hcd: connection closed
[  104.565632][ T6941] vhci_hcd: connection reset by peer
[  104.581049][   T51] vhci_hcd: stop threads
[  104.585353][   T51] vhci_hcd: release socket
[  104.589933][   T51] vhci_hcd: disconnect device
[  104.597264][ T6964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.610152][   T51] vhci_hcd: stop threads
[  104.614538][   T51] vhci_hcd: release socket
[  104.619144][   T51] vhci_hcd: disconnect device
[  104.686697][   T51] vhci_hcd: stop threads
[  104.691059][   T51] vhci_hcd: release socket
[  104.695632][   T51] vhci_hcd: disconnect device
[  104.727596][   T51] vhci_hcd: stop threads
[  104.732169][   T51] vhci_hcd: release socket
[  104.736815][   T51] vhci_hcd: disconnect device
[  104.757628][   T51] vhci_hcd: stop threads
[  104.761936][   T51] vhci_hcd: release socket
[  104.766512][   T51] vhci_hcd: disconnect device
[  104.841463][ T4281] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.918064][ T6994] loop1: detected capacity change from 0 to 512
[  104.928564][ T6994] EXT4-fs (loop1): orphan cleanup on readonly fs
[  104.936901][ T6994] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1111: bg 0: block 248: padding at end of block bitmap is not set
[  105.197817][ T6994] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1111: Failed to acquire dquot type 1
[  105.210226][ T6994] EXT4-fs (loop1): 1 truncate cleaned up
[  105.331511][ T7009] syz_tun: entered allmulticast mode
[  105.414797][ T6994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  105.501963][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.617820][ T7016] loop5: detected capacity change from 0 to 512
[  105.626342][ T1036] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  105.639576][ T7020] loop1: detected capacity change from 0 to 1024
[  105.648874][ T1036] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  105.649036][ T7027] siw: device registration error -23
[  105.671384][ T7020] EXT4-fs: Ignoring removed nomblk_io_submit option
[  105.673614][ T7027] vlan0: entered allmulticast mode
[  105.716985][ T7016] EXT4-fs (loop5): orphan cleanup on readonly fs
[  105.741448][ T7020] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  105.770540][ T7016] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1117: bg 0: block 248: padding at end of block bitmap is not set
[  105.819532][ T7020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.825147][ T7016] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1117: Failed to acquire dquot type 1
[  105.860884][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.871879][ T7016] EXT4-fs (loop5): 1 truncate cleaned up
[  105.878904][ T7016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  105.932353][ T4281] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.056132][ T7056] vlan0: entered allmulticast mode
[  106.062502][ T7060] netlink: 'syz.0.1134': attribute type 1 has an invalid length.
[  106.086934][ T7052] loop2: detected capacity change from 0 to 512
[  106.094247][ T7060] 8021q: adding VLAN 0 to HW filter on device bond1
[  106.104126][ T7052] EXT4-fs (loop2): orphan cleanup on readonly fs
[  106.112653][ T7052] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1128: bg 0: block 248: padding at end of block bitmap is not set
[  106.138146][ T7060] bond1 (unregistering): Released all slaves
[  106.157368][ T7052] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1128: Failed to acquire dquot type 1
[  106.175816][ T7052] EXT4-fs (loop2): 1 truncate cleaned up
[  106.182402][ T7052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  106.230621][ T7069] loop1: detected capacity change from 0 to 512
[  106.239120][ T7069] EXT4-fs (loop1): orphan cleanup on readonly fs
[  106.252002][ T7069] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1137: bg 0: block 248: padding at end of block bitmap is not set
[  106.272244][ T7069] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1137: Failed to acquire dquot type 1
[  106.284600][ T7069] EXT4-fs (loop1): 1 truncate cleaned up
[  106.294077][ T7069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  106.338850][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.489962][ T7105] SELinux: ebitmap: truncated map
[  106.490204][ T7107] loop1: detected capacity change from 0 to 1024
[  106.497379][ T7105] SELinux: failed to load policy
[  106.502993][ T7107] EXT4-fs: Ignoring removed nomblk_io_submit option
[  106.527573][ T7107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.548797][ T7105] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  106.590911][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.808273][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.831706][ T7134] siw: device registration error -23
[  106.843014][ T7134] vlan0: entered allmulticast mode
[  106.979585][ T7142] loop1: detected capacity change from 0 to 512
[  106.993946][ T7142] EXT4-fs (loop1): orphan cleanup on readonly fs
[  107.004057][ T7142] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1169: bg 0: block 248: padding at end of block bitmap is not set
[  107.054262][ T7142] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1169: Failed to acquire dquot type 1
[  107.073331][ T7142] EXT4-fs (loop1): 1 truncate cleaned up
[  107.080293][ T7142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  107.215635][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.238244][ T7170] vlan0: entered allmulticast mode
[  107.450752][ T7193] loop5: detected capacity change from 0 to 512
[  107.467394][ T7193] EXT4-fs (loop5): orphan cleanup on readonly fs
[  107.501566][ T7193] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1192: bg 0: block 248: padding at end of block bitmap is not set
[  107.517413][   T29] kauditd_printk_skb: 743 callbacks suppressed
[  107.517479][   T29] audit: type=1326 audit(1756006675.022:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dd32ebe9 code=0x7ffc0000
[  107.549771][ T7193] Quota error (device loop5): write_blk: dquota write failed
[  107.557639][ T7193] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  107.567730][ T7193] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1192: Failed to acquire dquot type 1
[  107.580144][ T7193] EXT4-fs (loop5): 1 truncate cleaned up
[  107.587119][ T7193] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  107.599972][   T29] audit: type=1326 audit(1756006675.052:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78dd32ebe9 code=0x7ffc0000
[  107.624010][   T29] audit: type=1326 audit(1756006675.052:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dd32ebe9 code=0x7ffc0000
[  107.648223][   T29] audit: type=1326 audit(1756006675.052:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dd32ebe9 code=0x7ffc0000
[  107.672709][   T29] audit: type=1326 audit(1756006675.052:5414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78dd32ebe9 code=0x7ffc0000
[  107.696260][   T29] audit: type=1326 audit(1756006675.052:5415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dd32ebe9 code=0x7ffc0000
[  107.720316][   T29] audit: type=1326 audit(1756006675.052:5416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dd32ebe9 code=0x7ffc0000
[  107.745006][   T29] audit: type=1326 audit(1756006675.052:5417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f78dd32ebe9 code=0x7ffc0000
[  107.815410][ T4281] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.875441][ T7212] __nla_validate_parse: 27 callbacks suppressed
[  107.875465][ T7212] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1199'.
[  107.969404][ T7217] SELinux: ebitmap: truncated map
[  107.975169][ T7217] SELinux: failed to load policy
[  108.004186][ T7217] syz!: rxe_newlink: already configured on team_slave_0
[  108.016379][ T7217] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1202'.
[  108.082463][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'.
[  108.204674][ T7244] loop3: detected capacity change from 0 to 1024
[  108.224314][ T7234] loop2: detected capacity change from 0 to 512
[  108.225876][ T7244] EXT4-fs: Ignoring removed bh option
[  108.274796][ T7234] EXT4-fs (loop2): orphan cleanup on readonly fs
[  108.288185][ T7244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.315163][   T10] usb 7-1: enqueue for inactive port 0
[  108.320831][   T10] usb 7-1: enqueue for inactive port 0
[  108.326881][ T7234] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1208: bg 0: block 248: padding at end of block bitmap is not set
[  108.346426][ T7234] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1208: Failed to acquire dquot type 1
[  108.379395][ T7234] EXT4-fs (loop2): 1 truncate cleaned up
[  108.388766][ T7234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  108.405978][   T10] vhci_hcd: vhci_device speed not set
[  108.447617][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.466100][ T7257] siw: device registration error -23
[  108.477924][ T7257] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1216'.
[  108.494498][ T7257] vlan0: entered allmulticast mode
[  108.528641][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.573769][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1221'.
[  108.697452][ T7279] loop2: detected capacity change from 0 to 512
[  108.714079][ T7279] EXT4-fs (loop2): orphan cleanup on readonly fs
[  108.793095][ T7279] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1219: bg 0: block 248: padding at end of block bitmap is not set
[  108.822305][ T7288] loop3: detected capacity change from 0 to 512
[  108.867544][ T7288] EXT4-fs (loop3): orphan cleanup on readonly fs
[  108.886039][ T7288] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1230: bg 0: block 248: padding at end of block bitmap is not set
[  108.935902][ T7279] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1219: Failed to acquire dquot type 1
[  108.968796][ T7288] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1230: Failed to acquire dquot type 1
[  109.012049][ T7288] EXT4-fs (loop3): 1 truncate cleaned up
[  109.017092][ T7294] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1232'.
[  109.026741][ T7279] EXT4-fs (loop2): 1 truncate cleaned up
[  109.031606][ T7294] vlan0: entered allmulticast mode
[  109.036246][ T7288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  109.056220][ T7279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  109.092904][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.169544][ T7297] SELinux: ebitmap: truncated map
[  109.180555][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.185470][ T7297] SELinux: failed to load policy
[  109.191302][ T7301] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1235'.
[  109.229652][ T7297] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  109.257473][ T7297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1233'.
[  109.457851][ T7320] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1242'.
[  109.525154][    T9] usb 5-1: enqueue for inactive port 0
[  109.530680][    T9] usb 5-1: enqueue for inactive port 0
[  109.605400][    T9] vhci_hcd: vhci_device speed not set
[  109.746871][ T7329] siw: device registration error -23
[  109.766202][ T7329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1244'.
[  109.802246][ T7329] vlan0: entered allmulticast mode
[  110.239437][ T7360] loop2: detected capacity change from 0 to 512
[  110.280106][ T7360] EXT4-fs (loop2): orphan cleanup on readonly fs
[  110.485524][ T7360] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1259: bg 0: block 248: padding at end of block bitmap is not set
[  110.520572][ T7360] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1259: Failed to acquire dquot type 1
[  110.547035][ T7360] EXT4-fs (loop2): 1 truncate cleaned up
[  110.578966][ T7374] netlink: 'syz.1.1265': attribute type 1 has an invalid length.
[  110.591186][ T7360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  110.624722][ T7374] 8021q: adding VLAN 0 to HW filter on device bond1
[  110.642392][ T7372] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  110.690266][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.714747][ T7379] bond1 (unregistering): Released all slaves
[  110.777498][ T4281] ==================================================================
[  110.785653][ T4281] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes
[  110.793245][ T4281] 
[  110.795598][ T4281] read-write to 0xffff88811e9eb840 of 8 bytes by task 7378 on cpu 0:
[  110.803689][ T4281]  inode_add_bytes+0x47/0xe0
[  110.808329][ T4281]  __dquot_alloc_space+0x180/0x8a0
[  110.813481][ T4281]  shmem_inode_acct_blocks+0x129/0x240
[  110.819167][ T4281]  shmem_get_folio_gfp+0x5a7/0xd60
[  110.824417][ T4281]  shmem_write_begin+0xa8/0x190
[  110.829312][ T4281]  generic_perform_write+0x181/0x490
[  110.834658][ T4281]  shmem_file_write_iter+0xc5/0xf0
[  110.839809][ T4281]  __kernel_write_iter+0x2d6/0x540
[  110.844965][ T4281]  dump_user_range+0x61e/0x8f0
[  110.849768][ T4281]  elf_core_dump+0x1e00/0x1f90
[  110.854570][ T4281]  coredump_write+0xb0d/0xe30
[  110.859288][ T4281]  vfs_coredump+0x142f/0x20c0
[  110.863992][ T4281]  get_signal+0xd85/0xf70
[  110.868468][ T4281]  arch_do_signal_or_restart+0x96/0x480
[  110.874237][ T4281]  irqentry_exit_to_user_mode+0x5e/0xa0
[  110.880013][ T4281]  irqentry_exit+0x12/0x50
[  110.884522][ T4281]  asm_exc_page_fault+0x26/0x30
[  110.889406][ T4281] 
[  110.891744][ T4281] read to 0xffff88811e9eb840 of 8 bytes by task 4281 on cpu 1:
[  110.899403][ T4281]  generic_fillattr+0x27d/0x340
[  110.904289][ T4281]  shmem_getattr+0x181/0x200
[  110.908984][ T4281]  vfs_getattr_nosec+0x143/0x1e0
[  110.914131][ T4281]  vfs_statx+0x113/0x390
[  110.918404][ T4281]  vfs_fstatat+0x115/0x170
[  110.922846][ T4281]  __se_sys_newfstatat+0x55/0x260
[  110.927896][ T4281]  __x64_sys_newfstatat+0x55/0x70
[  110.932941][ T4281]  x64_sys_call+0x135a/0x2ff0
[  110.937641][ T4281]  do_syscall_64+0xd2/0x200
[  110.942160][ T4281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.948064][ T4281] 
[  110.950396][ T4281] value changed: 0x0000000000007848 -> 0x0000000000007850
[  110.957509][ T4281] 
[  110.959847][ T4281] Reported by Kernel Concurrency Sanitizer on:
[  110.966186][ T4281] CPU: 1 UID: 0 PID: 4281 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[  110.977213][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  110.987467][ T4281] ==================================================================