last executing test programs:

11.610962562s ago: executing program 3 (id=608):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x321, 0xffff, 0x4c, 0x101, 0x0}) (async)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000100)=@usbdevfs_disconnect={0xfffffffd}) (async)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) (async)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002580000000e0a01020000000000000000010000000900020073797a32000000001800038014000080100001800400028006000180000000000900010073797a30"], 0xc8}}, 0x0) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r1, @ANYRES8=r2], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r7}, 0x18) (async)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async)
setsockopt$inet_mreqn(r2, 0x0, 0x28, 0x0, 0x0)
getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10)

11.544602933s ago: executing program 3 (id=610):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x41)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000002cc0)=ANY=[@ANYBLOB="02"], 0x4, 0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18)
connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010102}, 0x2, 0x2}}, 0x26)
close_range(r3, 0xffffffffffffffff, 0x0)
mq_unlink(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x18)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

11.518808994s ago: executing program 3 (id=611):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="6c00000063c8956a5fc3d2d6d2aaa836d411cd1cf51345ee67dbb36f74b702fdac560667ece556e47be219fec4adcc33989a326bdad6bda44af0c85c55475ff791b4528c0e6f3c0e29683aabce2773ee3d12f6d6c2aaae51dcac99ab439ebaedfebffe44ed84fda5bd9d0524a81d5aed2a0c568614e5e253a2f0a13f151b748db58bc1dc2c3bc5eb771b9a0a71b93cf9c698cd3f811620ceede673ef0423971e6b9b24131f185a1261420d99d97a5ec960508cd746dba62cb69833149af177aec7ab", @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e2400000007ff02000000000000000000000000000106000000200002000a00000000000000ff01000000000000000000000000000100000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid={'resuid', 0x3d, r3}}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm")
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000008b7e1f40000", @ANYRES32=0x0, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x12, 0x101, @l2={'eth', 0x3a, 'caif0\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x390621c1fd314ecc)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
setpriority(0x1, 0x0, 0x906)

11.431426276s ago: executing program 3 (id=612):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe3e)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10)
io_pgetevents(0x0, 0x21a9, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000180)={r0, r1, 0x6})
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x2, &(0x7f0000000040)={0x15, 0xa, 0x1e0000})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff47}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='timer_start\x00', r6}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))
mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x6000)=nil, 0x6000, 0x4, 0x88012, r0, 0x0)

11.410294326s ago: executing program 3 (id=613):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x7e8}}, './file0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0xb8cdce13c1056660)
socket$kcm(0x29, 0x2, 0x0)

11.165462071s ago: executing program 3 (id=618):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[], &(0x7f0000000640)=""/217, 0x9c, 0xd9, 0x0, 0x9}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000000000010000702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))

11.143750712s ago: executing program 32 (id=618):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[], &(0x7f0000000640)=""/217, 0x9c, 0xd9, 0x0, 0x9}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000000000010000702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))

3.615449369s ago: executing program 4 (id=739):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095", @ANYBLOB="bf3d3bee8937252315896ff5a9e7d4ac6eccd772173e3c1eb91df359d93af969f82fa4b231cc6d90d3c107eaa6c3bbd624aca3b72afb5021248b5455468dea8a29577477e667bd8343c8314abf733c4f5788dcbfa29f6d9f1eb4c287fc13dd3c4f4bd534bf126a6eb4e3d76dea13d68731cf66907310e69fef68d64188a5b15974c12854d278d288cf19fb7fe7332fea4296af21532a9a9eade420b3b412321ec2431e9d06b0b45cbb38c0391c3264db2e933a84a366e07bf449f72b33c8eb4a39110123bd0d0085ae4414bf74286b1cc11314a8e234d8ec", @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800001e00000000000000", @ANYRES32=r4, @ANYRESOCT=0x0, @ANYRESHEX=r4, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x2f)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x18)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)={'#! ', './file0'}, 0xb)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r6, 0x0)
accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x6e, 0x800)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, <r8=>0x0}, &(0x7f00000000c0)=0xc)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r8}]}]}, 0x28}}, 0x0)
getgroups(0x9, &(0x7f00000019c0)=[0xee00, 0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01, 0xee01])
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r11 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd705c0980562514000000080001000100000008001c0029dc80e284a806448abe8c8755900cf93addca319b65a96e073cd578cf962229bd9455fa1e45a49acfd7d34b8cd079e973dbe0fe4a9937780c92ff0f7a706a948be3ec7fa40712cb592ef5cee22274d7e9f68fa23bb73cbea4ec6149", @ANYRES32=r11, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000d40)={{{@in6=@empty, @in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000680)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001b40), &(0x7f0000001b80)=0xc)
getpid()

2.626556309s ago: executing program 4 (id=751):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = socket$unix(0x1, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x402)
r2 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000f5ffffff000000000010008a3f3ea86d087b93213e92dca97ea2e382ec08cf0fadadd8efa28936f7f6643dc0f8dcab2b6ce39ad48dc7fc00f04f7d31acd5a6f91167b06800a89860cc6b5f7ed24f7c5e4c84419eb7cea542cdc971d58c63083e8b42a354aa817f92f4ac249f35766b45cbaf95d03cb910f4cfab1ae947e216db2ae948237e8ceeb27e"], 0xfffffffffffffe68)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r3}, 0x18)
r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000080)=@keyring={'key_or_keyring:', r4})
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x20}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)

2.445842262s ago: executing program 4 (id=752):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x41, &(0x7f00000003c0)={[{@nogrpid}, {@lazytime}, {@bh}, {@errors_continue}, {@noblock_validity}, {}, {@mblk_io_submit}, {@nodioread_nolock}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000010c0)="$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")
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, &(0x7f0000000300)='trans=rdma,')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000240)=0x6)
mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0xc22, 0x0)

1.956719612s ago: executing program 1 (id=759):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000b80)='afs_cb_miss\x00', r0}, 0x18)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYRES8=r1], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, 0x34503, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001e00)=ANY=[@ANYBLOB="976a2d49ef2648fb0b17cc33136ab9e6ab07c66f662f0c3193ab7ed081b739d429683b1de6c2a1a36e0eba803697f2a0600ac514bc15df4d9d6e2bcbbf36b6983bbf684905f8b0012c661e3ce642f839643946b6f9a02dd9dd1df0e5358664335498bc53785cddc88e28e52e77b8177cf9421b2ef0cfe87ecf34b123b5c9010dbff66c5ad96792d3039bbfd05415162da00492bd7ac3ab49f30ba7aa253d00adf251d43baeb27500d5415ce33cbf9408558b32811614016dc38e", @ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}, 0x1c)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000100)=0x1f, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r3)
setgid(0x0)
sendmsg$nl_route_sched_retired(r4, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffe0}, {0x3, 0xffed}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x80)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000428000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/164, 0xa4, 0x0, 0xffffffffffffffff}, &(0x7f0000000140)=0x40)

1.841991844s ago: executing program 0 (id=761):
r0 = socket$kcm(0x10, 0x2, 0x0)
clock_adjtime(0x1, &(0x7f0000000040)={0x37db, 0x538d28a0, 0x0, 0x946, 0x0, 0xb34c, 0x8, 0xffff, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x8000000, 0x34, 0xffff, 0xf7f0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
select(0x40, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3, 0x0, 0x1}, 0x0, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x75b5000)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000)
close_range(r0, r4, 0x2)
munmap(&(0x7f0000694000/0x3000)=nil, 0x3000)
mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000080)='bcache_alloc\x00', r3, 0x0, 0x8000}, 0xfd68)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21481e, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodiscard}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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")

1.789253735s ago: executing program 2 (id=762):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = socket$unix(0x1, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x402)
r2 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000f5ffffff000000000010008a3f3ea86d087b93213e92dca97ea2e382ec08cf0fadadd8efa28936f7f6643dc0f8dcab2b6ce39ad48dc7fc00f04f7d31acd5a6f91167b06800a89860cc6b5f7ed24f7c5e4c84419eb7cea542cdc971d58c63083e8b42a354aa817f92f4ac249f35766b45cbaf95d03cb910f4cfab1ae947e216db2ae948237e8ceeb27e"], 0xfffffffffffffe68)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r3}, 0x18)
r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000080)=@keyring={'key_or_keyring:', r4})
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x20}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)

1.761368446s ago: executing program 4 (id=763):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
r0 = socket$caif_seqpacket(0x25, 0x5, 0x3)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0) (async)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0)
r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_access(r1, 0x0, 0x0) (async)
write$selinux_access(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES64=r2, @ANYRESOCT=r3], 0x0, 0x8000}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES64=r2, @ANYRESOCT=r3], 0x0, 0x8000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) (async)
r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[@ANYRES64=r4], 0x6)
sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400"], 0x48)
socket$inet6(0xa, 0x5, 0x2) (async)
socket$inet6(0xa, 0x5, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='fsi_master_gpio_in\x00', r7, 0x0, 0x2}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') (async)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x13)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000b00)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000b00)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2}, 0x94)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'})

1.689038217s ago: executing program 1 (id=764):
mq_open(&(0x7f0000000000)='user_xattr', 0x40, 0x20, &(0x7f0000000040)={0x3, 0x3, 0x9, 0x4})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

1.663159637s ago: executing program 2 (id=765):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000662acacf000000000000000000001000000000"], 0x50)
iopl(0x58)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018fc8693", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x8, 0x0)
r2 = creat(&(0x7f0000010280)='./file0\x00', 0x182)
mount(&(0x7f00000001c0), &(0x7f0000000440)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,')
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='inet_sock_set_state\x00', r3, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
arch_prctl$ARCH_SET_GS(0x1001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x53c, &(0x7f0000000f40)="$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")
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xffffffffffffffff, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2'}, 0x31)
timer_create(0x2, &(0x7f0000000000)={0x0, 0x28, 0x0, @thr={&(0x7f0000000240)="4d32710047c7aaabb83c230ffbb3920922a1d1ba9bb0a2783d05d13a4de4be457da5c5c50abb88597b316facb8594cff2769ee6dcc4e1a5a2144d92293029548622248e713f8469d3a5d3e1d10d014d50ed3989f35214095093386add4614a22f30d09c3bad30ce62eb433f0a30ccc54", &(0x7f0000000580)="8838610961338cbc770e28ec65e57da7d546ee21858e1e89959370090b63a0e7aad020e66b999180a125d10344d1d687e4d4005d24539555075394a3a36e4e1a533b2279923c316a35332c14fbd63f071c6a32a5891d071564fd7b2b3c389eac71c1b41589e7f28ddc7346824d308400c4fea97ac13a82ff92e8c3b0f0cf59c0346b3c54b1c07df13e57536af851ed1aeb9dd6206e907c49104f92a0d41ebc9acb304c1bca3d1b80ead58114b357dd3fe8353715633d5f82d6751ba5631f88c4b274707f30be79ee67524f3edd2299efe4c04effde99779b38bdd72895165069eb32d59de797e9829f"}}, &(0x7f00000002c0)=<r4=>0x0)
setresuid(0xee01, 0x0, 0x0)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r5, 0x0, 0x8, 0x0)
prlimit64(r5, 0xe, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00042dbd7000fcdbdf2503000000050002007f000000050005007f000000"], 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
clock_gettime(0x7, &(0x7f0000000380)={<r7=>0x0, <r8=>0x0})
timer_settime(r4, 0x1, &(0x7f00000003c0)={{0x0, 0x3938700}, {r7, r8+60000000}}, &(0x7f0000000400))
r9 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r9, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c)

1.50605317s ago: executing program 1 (id=766):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c000100000100000000000024000100040000000000000008000500", @ANYRES32=r4, @ANYBLOB="080003"], 0x80}}, 0x8000)

1.403338103s ago: executing program 1 (id=767):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setreuid(0x0, 0xee01)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xe0, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9d4e73ac1e948a34626cd82041119a79324e544a0a466dae6f6e948affaba43e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a63c43bf84c73368"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="25a14fcb24b5ed641c6dcd626283a8a744d6d97f8e9fc89fd01b732868eafb15"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4248a881b86f74c123f0fc3213fb471b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "967125c4555e7dc2"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="95731dc523c8797ffff6e957fb28c1b803ef3b95a5709e8d85576eb44e6f93c5"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7f1aecbaf27c592372752b7cc08059577b7776dcb9e15a44"}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x40004)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)={0xc0, r5, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x58}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7c, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x8}, 0x7, 0x0, @device_b, 0x100, 0xc3b7, 0x800}}, @supported_rates={0x1, 0x1, [{0x5, 0x1}]}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x91, 0x40}}, @random_vendor={0xdd, 0x1d, "be32151a9c54b752cb51febfb3545fd86956b4d38b24689bc46702a0b0"}, @ibss={0x6, 0x2, 0x80}, @ssid={0x0, 0xe, @random="77597745c2f5b937cc00e4867ae6"}, @mic={0x8c, 0x10, {0x899, "2cf44a399c92", @short="46b5eeedd40d72db"}}, @cf={0x4, 0x6, {0x5, 0x7, 0x98, 0xfff8}}, @mesh_chsw={0x76, 0x6, {0x2, 0xf9, 0x16, 0x2}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x12, 0x34, @random="5a960358a64f0b0fdd0a314f970f"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040}, 0x40850)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000500)={'geneve1\x00', {0x2, 0x4e22, @remote}})
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000200)={<r10=>0x0, 0xffff2022}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000680)={r10, @in={{0x2, 0x4e20, @multicast1}}, 0x400, 0x101, 0x67, 0x8285, 0x10, 0x3}, 0x9c)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4e23, 0x80000, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1c0}, 0x0)
dup(r2)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r11, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x20040811)

1.402731393s ago: executing program 1 (id=768):
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1)
sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01022dbd7000ffdbdf252100000009001f00706879310000000005002000000000400c0005"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1.374432083s ago: executing program 1 (id=769):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000700))
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x74, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x7}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x14}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x96}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x11, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_usb_connect(0x2, 0x64, 0x0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="3b08010700000000000000000000000000000000bdf400010000000000000000000003000000000000000000000000000012ffffac1414aafc000000000000000040000000000001b8a45764dba2e138a58d670a6efef2f167533035c4cd183e21e65d6e6153b97bea9ec4daf8b4d8b259ac57a11caff0b95734be45f0ab0045a986ad8e7a41aeed6062c3b02e3c8e4c76d44ccaf8c95236860a40728862f15625c372592219192fc8fa515b76913595e7a74b892734806ef4452197312223047dcd9f69079c2d544b9a3a8ddea7e700"/223], 0x48)
sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x5, 0x9, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x2}}]}, 0x48}}, 0x4040014)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040800)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}})
r8 = socket$tipc(0x1e, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
close(r8)

1.319742834s ago: executing program 4 (id=770):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108)
fallocate(r1, 0x0, 0xbf5, 0x2000402)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffe000001})
write$nbd(r2, &(0x7f00000001c0)={0x67446698, 0x1, 0x3, 0x3, 0x1, "4a38e7110aba2ea0b9e33b18fde7c691d4b301a8e9b7a3fb7380ea27018b77711d7a5d23fec58e56f0bfe387ed8b7bfbca6de6797f263ad77210d43411d980cc2543927006eb538368b1ae913a7c71cd59f178cf0631736ea02bd77929b3398c0b0acd190e0023fd0e00124d7a7b0764e8874cad"}, 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010d8f8502e00030400000000000000f1ffffffff988bb33f", @ANYRES32=0x0, @ANYBLOB="46060900000000002000128008000100677470001400028005000500010000000800030007000000"], 0x40}, 0x1, 0x0, 0x0, 0x600}, 0x0)

1.274478625s ago: executing program 2 (id=771):
r0 = socket(0xa, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
chmod(&(0x7f0000000040)='./file1\x00', 0x9a)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
clock_gettime(0x1, &(0x7f0000000000)={<r3=>0x0, <r4=>0x0})
clock_settime(0x0, &(0x7f0000000040)={r3, r4+10000000})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0xbf, 0x7}, &(0x7f0000000080)=0x90)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x10, 0x803, 0x0)
dup2(r6, r5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='ext4_ext_rm_idx\x00'}, 0x18)
r7 = io_uring_setup(0x5260, &(0x7f0000000280)={0x0, 0x7602, 0x8000, 0x2, 0x2ef})
flistxattr(r7, &(0x7f00000004c0)=""/161, 0xa1)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r8 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff)
keyctl$chown(0x4, r8, 0xee01, 0xee00)
keyctl$chown(0x4, r8, 0x0, 0x0)
add_key$keyring(&(0x7f0000000200), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r8)
r9 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x20000, 0x104)
write$UHID_CREATE2(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000b315cc000000000000000000000000000000000000000000000000000000000000000000d800dc06020000000100000000007200060000006e22472d1b93f536347ca8c8785c5e371df045f46854a4ebe036dc4b83ad8ae351673a5729f2786504179633e627078571210e66fc366b5435017b746a6bf49fb321e26593658392678df1a64ef1235624619818b7f2fe0a5278f2ccdcd228711a402f46dea40f4df42544034dd53f6ca5ba1a9f62d4d3167f9e5ce05451a8bbfad7cc2dc978f82f3d59f6c1cfdcc4c36e31bec1e5b0d031ad300535ed148cc24c0dbef033c98606b8c6f1ec87e6f96db7f52f11b5b199236f317983b30fc4c83ce2847ae6ed71d8c346831d88ce844be02c19a28e"], 0x1f0)

995.344841ms ago: executing program 0 (id=775):
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x2)
connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
accept(r2, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x8000000000000001, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setregset(0x4205, r3, 0x2, &(0x7f0000001040)={&(0x7f0000000040)="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", 0x200})
io_setup(0x3ff, &(0x7f0000000500)=<r4=>0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r6})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff)
syz_io_uring_setup(0x5114, &(0x7f0000000540)={0x0, 0x15db, 0x40, 0x0, 0xee, 0x0, r1}, &(0x7f0000000280)=<r7=>0x0, &(0x7f00000004c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x100, &(0x7f00000005c0)=0x7, 0x0, 0x4)
io_getevents(r4, 0x3, 0x3, &(0x7f0000001dc0)=[{}, {}, {}], 0x0)
io_destroy(r4)
r8 = syz_io_uring_setup(0x22ad, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300), &(0x7f0000000080))
io_cancel(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xa, r8, &(0x7f0000000000)="a609f2959ba91fa9f7c0bfa4a1501335862e6cc571139641ee4bce848ac21b31ddc577582209afcb769312d7cccf11deddf043163efb41aa2d13a10e7c89feb5", 0x40, 0x10001, 0x0, 0x3}, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, 0x0, 0x0)

863.010413ms ago: executing program 5 (id=776):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = socket$unix(0x1, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x402)
r2 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000f5ffffff000000000010008a3f3ea86d087b93213e92dca97ea2e382ec08cf0fadadd8efa28936f7f6643dc0f8dcab2b6ce39ad48dc7fc00f04f7d31acd5a6f91167b06800a89860cc6b5f7ed24f7c5e4c84419eb7cea542cdc971d58c63083e8b42a354aa817f92f4ac249f35766b45cbaf95d03cb910f4cfab1ae947e216db2ae948237e8ceeb27e"], 0xfffffffffffffe68)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r3}, 0x18)
r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000040)='asymmetric\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x20}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)

855.015603ms ago: executing program 2 (id=777):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004780)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000001}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
close(0xffffffffffffffff)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000100)=ANY=[], 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4)

853.800733ms ago: executing program 0 (id=778):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480))
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2c, r5, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x2c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='free_extent_state\x00', r3, 0x0, 0x4}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0300000000004a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r9}, 0x10)

823.671894ms ago: executing program 5 (id=779):
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1)
sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01022dbd7000ffdbdf252100000009001f00706879310000000005002000000000400c0005"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

771.396515ms ago: executing program 0 (id=780):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0)
close(r2)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18)
prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$NFNL_MSG_ACCT_DEL(r9, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xfd4d792d1c70409d}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x9c, 0x3, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x401}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffe01}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8b}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x400c0c0)
setns(r8, 0x24020000)
r10 = syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r10, 0x4)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="24010000", @ANYRES16=r12, @ANYBLOB="a183000000000000000005"], 0x124}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x8, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r5}, 0x18)
quotactl$Q_QUOTAOFF(0xffffffff80000300, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000640)={0x2, &(0x7f00000005c0)=[{0x1, 0xd5, 0x9, 0x10}, {0x1, 0x4, 0xce, 0x4}]})

734.492216ms ago: executing program 5 (id=781):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x4000000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
syz_clone(0x60002080, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6)

723.276236ms ago: executing program 0 (id=782):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xa, &(0x7f0000000240)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}], &(0x7f00000001c0)='GPL\x00', 0x1ac4, 0xe5, &(0x7f00000003c0)=""/229, 0x41100, 0x6, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xa, 0x7, 0x7fffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000500)=[{0x1, 0x4, 0x3, 0x6}, {0x0, 0x5, 0x4, 0x9}, {0x2, 0x4, 0x7, 0xa}], 0x10, 0x9}, 0x94) (async)
r3 = socket$inet(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x100, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) (async, rerun: 64)
close(r5) (rerun: 64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f0000000000), &(0x7f0000000600)=r2}, 0x20)
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000680)={@empty, @multicast1}, 0x8)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) (async)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001090000000000000002000100000000008000070c0000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0)

451.534581ms ago: executing program 5 (id=783):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) (async)
unshare(0x2c020400) (async)
unshare(0x2c020400)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth1_vlan\x00'}}, 0x1e) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) (async)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000040000018120000", @ANYRES32=r2, @ANYRES64], &(0x7f0000000280)='GPL\x00', 0x9, 0x48, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) (async)
connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e) (async)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) (async)
chdir(&(0x7f0000000000)='./file0\x00')
unshare(0x2a020400) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r5}, 0x10)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r6}, 0x18)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
setns(r8, 0x8020000) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0, 0x0, 0x73b}, 0x18)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
readv(r9, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) (async)
ioctl$TCSETS(r9, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1d, 0x4, 0x8, 0x13, "001bf100eeff0000a2c2000100000000002000"})
r10 = syz_open_pts(r3, 0x101)
dup3(r10, r9, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

450.833351ms ago: executing program 4 (id=784):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0x1}, 0x18)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa4000021)
close(r2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket(0x400000000010, 0x3, 0x0)
gettid()
timer_settime(0x0, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
socket$packet(0x11, 0xa, 0x300)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
setgid(0x0)

425.422752ms ago: executing program 5 (id=785):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioprio_set$uid(0x3, 0x0, 0x0)
pipe2(&(0x7f0000000400), 0x80800)
r2 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000600)=0x9, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000280)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x4, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0xff, @local, @empty, [], "29c640353063be4e"}}}}}}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
open_tree(r3, &(0x7f0000000000)='./file1\x00', 0x100)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="4f7d963ebf7a2a60fc7528", 0xb}], 0x1, 0x0, 0x0, 0x11000000}, 0x20000040)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000540))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00'}, 0x10)
unshare(0x2040400)
r5 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r5, 0x0, 0x0)

368.081223ms ago: executing program 5 (id=786):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100))
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x1c, &(0x7f0000001080)=[@in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x27}, 0x3}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e24, 0x5, @empty, 0x4}}}, &(0x7f0000000040)=0x84)
ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000180)={0x8, 0x1})
r7 = getpid()
syz_pidfd_open(r7, 0x0)
ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000240)=r7)
sendmmsg$inet_sctp(r4, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRESDEC=r5], 0x30}], 0x1, 0x20000815)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={r6, 0x7}, &(0x7f0000000080)=0x8)
sendfile(r1, r2, 0x0, 0x20000023892)
syz_io_uring_setup(0x4172, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

107.397028ms ago: executing program 2 (id=787):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000b80)='afs_cb_miss\x00', r0}, 0x18)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYRES8=r1], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, 0x34503, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001e00)=ANY=[@ANYBLOB="976a2d49ef2648fb0b17cc33136ab9e6ab07c66f662f0c3193ab7ed081b739d429683b1de6c2a1a36e0eba803697f2a0600ac514bc15df4d9d6e2bcbbf36b6983bbf684905f8b0012c661e3ce642f839643946b6f9a02dd9dd1df0e5358664335498bc53785cddc88e28e52e77b8177cf9421b2ef0cfe87ecf34b123b5c9010dbff66c5ad96792d3039bbfd05415162da00492bd7ac3ab49f30ba7aa253d00adf251d43baeb27500d5415ce33cbf9408558b32811614016dc38e", @ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}, 0x1c)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000100)=0x1f, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r3)
setgid(0x0)
sendmsg$nl_route_sched_retired(r4, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffe0}, {0x3, 0xffed}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x80)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000428000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/164, 0xa4, 0x0, 0xffffffffffffffff}, &(0x7f0000000140)=0x40)

84.415949ms ago: executing program 0 (id=788):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
timer_settime(r1, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000140))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = semget(0x1, 0x4, 0x39c)
semop(r3, &(0x7f00000000c0)=[{0x3, 0x8001, 0x1000}], 0x1)

0s ago: executing program 2 (id=789):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='sys_enter\x00', r1}, 0x18)
getrandom(0x0, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r2, @ANYRES8=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10)
r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0x2}, 0x8, 0x6c00, 0x8, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

997f7000 RDI: 0000000000000004
[   46.167196][ T4375] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000514
[   46.167206][ T4375] R10: 00000000000003d6 R11: 0000000000000293 R12: 0000000000000004
[   46.167217][ T4375] R13: 00007f2ba1c16ef0 R14: 00007f2ba1c16eb0 R15: 00007f2b997f7000
[   46.167234][ T4375]  </TASK>
[   46.176777][ T4376] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   46.176777][ T4376]    program syz.1.322 not setting count and/or reply_len properly
[   46.189585][ T4375] loop4: detected capacity change from 0 to 512
[   46.213961][ T4376] loop1: detected capacity change from 0 to 2048
[   46.217691][ T4375] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[   46.413168][ T4375] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349)
[   46.425067][ T4375] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.323: Invalid inode table block 1 in block_group 0
[   46.438734][ T4375] EXT4-fs (loop4): Remounting filesystem read-only
[   46.445388][ T4375] EXT4-fs (loop4): get root inode failed
[   46.451300][ T4375] EXT4-fs (loop4): mount failed
[   46.468521][ T4378] TCP: tcp_parse_options: Illegal window scaling value 104 > 14 received
[   46.480031][ T3488]  loop1: p1 < > p4
[   46.496261][ T3488] loop1: p4 size 8388608 extends beyond EOD, truncated
[   46.522360][ T4380] netlink: 20 bytes leftover after parsing attributes in process `syz.2.324'.
[   46.561059][ T4376]  loop1: p1 < > p4
[   46.568329][ T4376] loop1: p4 size 8388608 extends beyond EOD, truncated
[   46.627249][ T2995]  loop1: p1 < > p4
[   46.633944][ T4388] loop0: detected capacity change from 0 to 512
[   46.640620][ T2995] loop1: p4 size 8388608 extends beyond EOD, truncated
[   46.648540][ T4388] EXT4-fs: Ignoring removed bh option
[   46.654286][ T4388] EXT4-fs: Ignoring removed mblk_io_submit option
[   46.688477][ T4388] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   46.702131][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   46.733228][ T4388] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   46.734173][ T3488] udevd[3488]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   46.741283][ T4388] EXT4-fs (loop0): orphan cleanup on readonly fs
[   46.761746][ T4388] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.336: Failed to acquire dquot type 1
[   46.790885][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   46.805237][ T3488] udevd[3488]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   46.815385][ T4400] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[   46.821989][ T4400] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   46.829718][ T4400] vhci_hcd vhci_hcd.0: Device attached
[   46.840041][ T4382] loop4: detected capacity change from 0 to 1024
[   46.854296][ T4388] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.336: Invalid block bitmap block 0 in block_group 0
[   46.880701][ T4405] loop1: detected capacity change from 0 to 2048
[   46.889428][ T4382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.902909][ T4388] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.336: Invalid block bitmap block 0 in block_group 0
[   46.923274][ T4401] vhci_hcd: connection closed
[   46.923563][  T145] vhci_hcd: stop threads
[   46.932531][  T145] vhci_hcd: release socket
[   46.937001][  T145] vhci_hcd: disconnect device
[   46.952152][ T4388] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.336: Invalid block bitmap block 0 in block_group 0
[   46.969129][ T4405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.994127][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.011509][ T4405] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.330: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   47.030889][ T4405] EXT4-fs (loop1): Remounting filesystem read-only
[   47.048980][ T4388] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.336: Failed to acquire dquot type 1
[   47.061770][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.084659][ T4388] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.336: Failed to acquire dquot type 1
[   47.100870][ T4388] EXT4-fs (loop0): 1 orphan inode deleted
[   47.113213][ T4388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   47.127860][ T4412] loop4: detected capacity change from 0 to 2048
[   47.155154][ T4388] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   47.177023][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.187408][ T4412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.206022][ T4412] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.331: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   47.223304][ T4412] EXT4-fs (loop4): Remounting filesystem read-only
[   47.237422][ T4418] netlink: 'syz.0.333': attribute type 29 has an invalid length.
[   47.264819][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   47.279864][ T4418] netlink: 'syz.0.333': attribute type 29 has an invalid length.
[   47.311339][ T4421] FAULT_INJECTION: forcing a failure.
[   47.311339][ T4421] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   47.324601][ T4421] CPU: 0 UID: 0 PID: 4421 Comm: syz.1.335 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   47.324624][ T4421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   47.324633][ T4421] Call Trace:
[   47.324639][ T4421]  <TASK>
[   47.324647][ T4421]  __dump_stack+0x1d/0x30
[   47.324709][ T4421]  dump_stack_lvl+0xe8/0x140
[   47.324735][ T4421]  dump_stack+0x15/0x1b
[   47.324748][ T4421]  should_fail_ex+0x265/0x280
[   47.324772][ T4421]  should_fail+0xb/0x20
[   47.324794][ T4421]  should_fail_usercopy+0x1a/0x20
[   47.324814][ T4421]  _copy_to_user+0x20/0xa0
[   47.324841][ T4421]  simple_read_from_buffer+0xb5/0x130
[   47.324862][ T4421]  proc_fail_nth_read+0x10e/0x150
[   47.324923][ T4421]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   47.325027][ T4421]  vfs_read+0x1a5/0x770
[   47.325047][ T4421]  ? __rcu_read_unlock+0x4f/0x70
[   47.325127][ T4421]  ? __fget_files+0x184/0x1c0
[   47.325150][ T4421]  ksys_read+0xda/0x1a0
[   47.325174][ T4421]  __x64_sys_read+0x40/0x50
[   47.325197][ T4421]  x64_sys_call+0x27bc/0x2ff0
[   47.325217][ T4421]  do_syscall_64+0xd2/0x200
[   47.325331][ T4421]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   47.325355][ T4421]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   47.325388][ T4421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.325406][ T4421] RIP: 0033:0x7face89fd8dc
[   47.325419][ T4421] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   47.325490][ T4421] RSP: 002b:00007face745f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   47.325509][ T4421] RAX: ffffffffffffffda RBX: 00007face8c55fa0 RCX: 00007face89fd8dc
[   47.325520][ T4421] RDX: 000000000000000f RSI: 00007face745f0a0 RDI: 0000000000000006
[   47.325530][ T4421] RBP: 00007face745f090 R08: 0000000000000000 R09: 0000000000000000
[   47.325541][ T4421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.325675][ T4421] R13: 00007face8c56038 R14: 00007face8c55fa0 R15: 00007fffded8e5a8
[   47.325690][ T4421]  </TASK>
[   47.532373][ T4418] netlink: 596 bytes leftover after parsing attributes in process `syz.0.333'.
[   47.553035][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.574409][ T4425] loop1: detected capacity change from 0 to 512
[   47.581471][ T4425] EXT4-fs: Ignoring removed mblk_io_submit option
[   47.648049][ T4435] netlink: 'GPL': attribute type 1 has an invalid length.
[   47.675764][ T4425] EXT4-fs (loop1): failed to initialize system zone (-117)
[   47.684032][ T4425] EXT4-fs (loop1): mount failed
[   47.695064][ T4443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.337'.
[   47.729806][ T4446] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[   47.736357][ T4446] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   47.743892][ T4446] vhci_hcd vhci_hcd.0: Device attached
[   47.749726][ T4449] loop2: detected capacity change from 0 to 2048
[   47.769871][ T4447] vhci_hcd: connection closed
[   47.772748][ T2645] vhci_hcd: stop threads
[   47.782122][ T2645] vhci_hcd: release socket
[   47.786626][ T2645] vhci_hcd: disconnect device
[   47.806772][ T4443] loop4: detected capacity change from 0 to 1024
[   47.815745][ T4443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   47.828461][ T3272] printk: udevd: 2 output lines suppressed due to ratelimiting
[   47.828560][ T4443] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.847951][ T4449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.892787][ T4443] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.337: lblock 3 mapped to illegal pblock 3 (length 1)
[   47.913315][ T4443] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[   47.918428][ T4425] loop1: detected capacity change from 0 to 8192
[   47.925680][ T4443] EXT4-fs (loop4): This should not happen!! Data will be lost
[   47.925680][ T4443] 
[   47.976031][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   47.986287][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.998658][ T4425] FAT-fs (loop1): invalid media value (0x06)
[   48.005177][ T4425] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   48.014843][ T4425] FAT-fs (loop1): Can't find a valid FAT filesystem
[   48.043410][ T4461] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   48.050719][ T4461] IPv6: NLM_F_CREATE should be set when creating new route
[   48.076887][ T4462] loop2: detected capacity change from 0 to 2048
[   48.100951][ T4462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.119128][ T4462] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.347: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   48.142689][ T4462] EXT4-fs (loop2): Remounting filesystem read-only
[   48.163552][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.175412][ T4470] netlink: 'syz.3.350': attribute type 5 has an invalid length.
[   48.183214][ T4470] netlink: 168 bytes leftover after parsing attributes in process `syz.3.350'.
[   48.199020][ T4470] loop3: detected capacity change from 0 to 512
[   48.207769][ T4470] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   48.209217][ T4473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'.
[   48.229575][ T4470] EXT4-fs (loop3): orphan cleanup on readonly fs
[   48.236725][ T4473] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=234 sclass=netlink_audit_socket pid=4473 comm=syz.4.346
[   48.249757][ T4470] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.350: Failed to acquire dquot type 1
[   48.262854][ T4470] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.350: bg 0: block 40: padding at end of block bitmap is not set
[   48.281023][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'.
[   48.289971][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'.
[   48.299449][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'.
[   48.310037][ T4481] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[   48.316769][ T4481] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   48.324389][ T4481] vhci_hcd vhci_hcd.0: Device attached
[   48.339840][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'.
[   48.348731][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'.
[   48.349124][ T4470] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   48.367355][ T4470] EXT4-fs (loop3): 1 truncate cleaned up
[   48.373614][ T4470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   48.387353][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'.
[   48.399802][ T4482] vhci_hcd: connection closed
[   48.399956][   T12] vhci_hcd: stop threads
[   48.409049][   T12] vhci_hcd: release socket
[   48.413502][   T12] vhci_hcd: disconnect device
[   48.441313][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.461862][ T4501] loop0: detected capacity change from 0 to 512
[   48.465352][ T4499] loop2: detected capacity change from 0 to 2048
[   48.475452][ T4501] EXT4-fs: Ignoring removed bh option
[   48.480991][ T4501] EXT4-fs: Ignoring removed mblk_io_submit option
[   48.488190][ T4501] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   48.498595][ T4501] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   48.504071][ T4499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.506671][ T4501] EXT4-fs (loop0): orphan cleanup on readonly fs
[   48.525544][ T4501] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.359: Failed to acquire dquot type 1
[   48.537404][ T4501] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.359: Invalid block bitmap block 0 in block_group 0
[   48.553270][ T4501] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.359: Invalid block bitmap block 0 in block_group 0
[   48.568244][ T4501] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.359: Invalid block bitmap block 0 in block_group 0
[   48.582134][ T4501] __quota_error: 1197 callbacks suppressed
[   48.582149][ T4501] Quota error (device loop0): write_blk: dquota write failed
[   48.595621][ T4501] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[   48.605500][ T4501] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.359: Failed to acquire dquot type 1
[   48.627337][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.637664][ T4501] Quota error (device loop0): write_blk: dquota write failed
[   48.640592][   T29] audit: type=1326 audit(1758638208.352:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4511 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d51cbeec9 code=0x7ffc0000
[   48.645179][ T4501] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[   48.672061][ T4512] FAULT_INJECTION: forcing a failure.
[   48.672061][ T4512] name failslab, interval 1, probability 0, space 0, times 0
[   48.678424][ T4501] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.359: Failed to acquire dquot type 1
[   48.691053][ T4512] CPU: 1 UID: 0 PID: 4512 Comm: syz.3.363 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   48.691158][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   48.691170][ T4512] Call Trace:
[   48.691177][ T4512]  <TASK>
[   48.691191][ T4512]  __dump_stack+0x1d/0x30
[   48.691212][ T4512]  dump_stack_lvl+0xe8/0x140
[   48.691231][ T4512]  dump_stack+0x15/0x1b
[   48.691247][ T4512]  should_fail_ex+0x265/0x280
[   48.691324][ T4512]  should_failslab+0x8c/0xb0
[   48.691348][ T4512]  kmem_cache_alloc_noprof+0x50/0x310
[   48.691374][ T4512]  ? alloc_empty_file+0x76/0x200
[   48.691431][ T4512]  alloc_empty_file+0x76/0x200
[   48.691492][ T4512]  alloc_file_pseudo+0xc6/0x160
[   48.691521][ T4512]  sock_alloc_file+0x9c/0x1e0
[   48.691552][ T4512]  __sys_socketpair+0x23d/0x430
[   48.691628][ T4512]  __x64_sys_socketpair+0x52/0x60
[   48.691647][ T4512]  x64_sys_call+0x2bf2/0x2ff0
[   48.691709][ T4512]  do_syscall_64+0xd2/0x200
[   48.691738][ T4512]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   48.691762][ T4512]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   48.691841][ T4512]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.691861][ T4512] RIP: 0033:0x7f7d51cbeec9
[   48.691877][ T4512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   48.691893][ T4512] RSP: 002b:00007f7d50727038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[   48.692001][ T4512] RAX: ffffffffffffffda RBX: 00007f7d51f15fa0 RCX: 00007f7d51cbeec9
[   48.692013][ T4512] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[   48.692025][ T4512] RBP: 00007f7d50727090 R08: 0000000000000000 R09: 0000000000000000
[   48.692037][ T4512] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000002
[   48.692049][ T4512] R13: 00007f7d51f16038 R14: 00007f7d51f15fa0 R15: 00007ffd4b194a48
[   48.692066][ T4512]  </TASK>
[   48.692504][   T29] audit: type=1326 audit(1758638208.382:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4511 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d51cbeec9 code=0x7ffc0000
[   48.712293][ T4501] EXT4-fs (loop0): 1 orphan inode deleted
[   48.721989][   T29] audit: type=1326 audit(1758638208.382:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4511 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d51cbeec9 code=0x7ffc0000
[   48.726356][ T4501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   48.728343][   T29] audit: type=1326 audit(1758638208.382:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4511 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d51cbeec9 code=0x7ffc0000
[   48.762304][ T4514] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[   48.765761][   T29] audit: type=1326 audit(1758638208.382:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4511 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d51cbeec9 code=0x7ffc0000
[   48.770576][ T4514] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   48.775375][   T29] audit: type=1326 audit(1758638208.382:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4511 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d51cbeec9 code=0x7ffc0000
[   48.780418][ T4514] vhci_hcd vhci_hcd.0: Device attached
[   48.803315][ T4501] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   48.812951][ T4518] loop2: detected capacity change from 0 to 512
[   48.916592][ T4521] loop4: detected capacity change from 0 to 178
[   48.918986][ T4518] EXT4-fs: Ignoring removed bh option
[   48.996881][ T4521] isofs_fill_super: bread failed, dev=loop4, iso_blknum=45, block=180
[   49.024999][ T4518] EXT4-fs: Ignoring removed mblk_io_submit option
[   49.058937][ T4515] vhci_hcd: connection closed
[   49.082310][   T10] usb 7-1: new low-speed USB device number 3 using vhci_hcd
[   49.086751][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.107868][ T4518] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   49.118255][ T4516] vhci_hcd: sendmsg failed!, ret=-32 for 48
[   49.127431][ T4518] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   49.136306][ T2645] vhci_hcd: stop threads
[   49.140572][ T2645] vhci_hcd: release socket
[   49.145209][ T2645] vhci_hcd: disconnect device
[   49.150520][ T4518] EXT4-fs (loop2): orphan cleanup on readonly fs
[   49.158688][ T4518] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.361: Failed to acquire dquot type 1
[   49.170681][ T4518] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.361: Invalid block bitmap block 0 in block_group 0
[   49.184531][ T4518] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.361: Invalid block bitmap block 0 in block_group 0
[   49.185399][ T4532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.198523][ T4518] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.361: Invalid block bitmap block 0 in block_group 0
[   49.206919][ T4532] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.220748][ T4518] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.361: Failed to acquire dquot type 1
[   49.240183][ T4518] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.361: Failed to acquire dquot type 1
[   49.251848][ T4518] EXT4-fs (loop2): 1 orphan inode deleted
[   49.262747][ T4518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   49.289018][ T4535] loop1: detected capacity change from 0 to 256
[   49.321641][ T4532] SELinux: ebitmap: truncated map
[   49.327341][ T4532] SELinux: failed to load policy
[   49.334861][ T4518] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   49.362849][ T4542] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2
[   49.445278][ T4552] netlink: 'syz.1.375': attribute type 29 has an invalid length.
[   49.461242][ T4552] netlink: 'syz.1.375': attribute type 29 has an invalid length.
[   49.476457][ T4554] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[   49.482999][ T4554] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   49.490585][ T4554] vhci_hcd vhci_hcd.0: Device attached
[   49.503509][ T4555] vhci_hcd: connection closed
[   49.503965][   T51] vhci_hcd: stop threads
[   49.512942][   T51] vhci_hcd: release socket
[   49.517497][   T51] vhci_hcd: disconnect device
[   49.543259][ T4560] loop1: detected capacity change from 0 to 512
[   49.549909][ T4560] EXT4-fs: Ignoring removed bh option
[   49.555487][ T4560] EXT4-fs: Ignoring removed mblk_io_submit option
[   49.566426][ T4560] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   49.577680][ T4560] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   49.585786][ T4560] EXT4-fs (loop1): orphan cleanup on readonly fs
[   49.593178][ T4560] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.377: Failed to acquire dquot type 1
[   49.605113][ T4560] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.377: Invalid block bitmap block 0 in block_group 0
[   49.618856][ T4560] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.377: Invalid block bitmap block 0 in block_group 0
[   49.632507][ T4560] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.377: Invalid block bitmap block 0 in block_group 0
[   49.646188][ T4560] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.377: Failed to acquire dquot type 1
[   49.657806][ T4560] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.377: Failed to acquire dquot type 1
[   49.669402][ T4560] EXT4-fs (loop1): 1 orphan inode deleted
[   49.678173][ T4560] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   49.769092][ T4570] loop1: detected capacity change from 0 to 2048
[   49.801963][ T4570] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.381: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   49.819167][ T4570] EXT4-fs (loop1): Remounting filesystem read-only
[   49.847627][ T4574] lo speed is unknown, defaulting to 1000
[   49.853595][ T4574] lo speed is unknown, defaulting to 1000
[   49.859549][ T4574] lo speed is unknown, defaulting to 1000
[   49.865702][ T4574] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   49.873268][ T4574] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   49.883038][ T4574] lo speed is unknown, defaulting to 1000
[   49.889172][ T4574] lo speed is unknown, defaulting to 1000
[   49.895556][ T4574] lo speed is unknown, defaulting to 1000
[   49.901634][ T4574] lo speed is unknown, defaulting to 1000
[   49.907752][ T4574] lo speed is unknown, defaulting to 1000
[   50.196937][ T4586] loop0: detected capacity change from 0 to 128
[   50.268607][ T4590] IPv4: Oversized IP packet from 127.202.26.0
[   50.401293][ T4562] Process accounting resumed
[   50.637761][ T4592] Set syz1 is full, maxelem 65536 reached
[   50.671909][ T4604] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4604 comm=syz.2.395
[   50.740031][ T4608] loop2: detected capacity change from 0 to 2048
[   50.762911][ T4596] loop3: detected capacity change from 0 to 1024
[   50.769818][ T4596] EXT4-fs: Ignoring removed nobh option
[   50.853006][ T4618] loop1: detected capacity change from 0 to 2048
[   50.854917][ T4617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4617 comm=syz.2.398
[   50.904514][ T4626] FAULT_INJECTION: forcing a failure.
[   50.904514][ T4626] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   50.917676][ T4626] CPU: 0 UID: 0 PID: 4626 Comm: syz.3.401 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   50.917717][ T4626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   50.917728][ T4626] Call Trace:
[   50.917734][ T4626]  <TASK>
[   50.917741][ T4626]  __dump_stack+0x1d/0x30
[   50.917759][ T4626]  dump_stack_lvl+0xe8/0x140
[   50.917775][ T4626]  dump_stack+0x15/0x1b
[   50.917789][ T4626]  should_fail_ex+0x265/0x280
[   50.917810][ T4626]  should_fail+0xb/0x20
[   50.917873][ T4626]  should_fail_usercopy+0x1a/0x20
[   50.917955][ T4626]  _copy_from_user+0x1c/0xb0
[   50.918010][ T4626]  kstrtouint_from_user+0x69/0xf0
[   50.918032][ T4626]  ? 0xffffffff81000000
[   50.918043][ T4626]  ? selinux_file_permission+0x1e4/0x320
[   50.918065][ T4626]  proc_fail_nth_write+0x50/0x160
[   50.918092][ T4626]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   50.918125][ T4626]  vfs_write+0x266/0x960
[   50.918163][ T4626]  ? __rcu_read_unlock+0x4f/0x70
[   50.918185][ T4626]  ? __fget_files+0x184/0x1c0
[   50.918208][ T4626]  ksys_write+0xda/0x1a0
[   50.918226][ T4626]  __x64_sys_write+0x40/0x50
[   50.918262][ T4626]  x64_sys_call+0x27fe/0x2ff0
[   50.918281][ T4626]  do_syscall_64+0xd2/0x200
[   50.918312][ T4626]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   50.918383][ T4626]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   50.918440][ T4626]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.918461][ T4626] RIP: 0033:0x7f7d51cbd97f
[   50.918505][ T4626] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[   50.918521][ T4626] RSP: 002b:00007f7d50727030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   50.918541][ T4626] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7d51cbd97f
[   50.918554][ T4626] RDX: 0000000000000001 RSI: 00007f7d507270a0 RDI: 0000000000000004
[   50.918577][ T4626] RBP: 00007f7d50727090 R08: 0000000000000000 R09: 0000000000000000
[   50.918588][ T4626] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[   50.918598][ T4626] R13: 00007f7d51f16038 R14: 00007f7d51f15fa0 R15: 00007ffd4b194a48
[   50.918613][ T4626]  </TASK>
[   51.152952][ T4630] tipc: Started in network mode
[   51.157961][ T4630] tipc: Node identity 4, cluster identity 4711
[   51.164161][ T4630] tipc: Node number set to 4
[   51.170491][ T4630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.179216][ T4630] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.540981][ T4646] 8021q: VLANs not supported on wg2
[   51.565593][ T4649] loop2: detected capacity change from 0 to 512
[   51.585428][ T4649] EXT4-fs (loop2): 1 orphan inode deleted
[   51.591603][ T4649] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.603163][ T2645] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 1
[   51.955423][ T3377] Process accounting resumed
[   52.070992][ T4683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   52.078493][ T4683] IPv6: NLM_F_CREATE should be set when creating new route
[   52.102439][ T4681] loop1: detected capacity change from 0 to 2048
[   52.136248][ T4687] loop0: detected capacity change from 0 to 512
[   52.144894][ T4689] loop3: detected capacity change from 0 to 512
[   52.151530][ T4689] EXT4-fs: Ignoring removed bh option
[   52.158511][ T4687] EXT4-fs (loop0): orphan cleanup on readonly fs
[   52.166743][ T4687] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm +}[@: bad orphan inode 13
[   52.190215][ T4689] EXT4-fs: Ignoring removed mblk_io_submit option
[   52.197240][ T4687] ext4_test_bit(bit=12, block=18) = 1
[   52.202768][ T4687] is_bad_inode(inode)=0
[   52.206911][ T4687] NEXT_ORPHAN(inode)=2130706432
[   52.211774][ T4687] max_ino=32
[   52.212732][ T4689] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   52.215049][ T4687] i_nlink=1
[   52.250506][ T4689] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   52.268986][ T4689] EXT4-fs (loop3): orphan cleanup on readonly fs
[   52.278278][ T4689] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.425: Failed to acquire dquot type 1
[   52.290094][ T4689] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.425: Invalid block bitmap block 0 in block_group 0
[   52.306736][ T4689] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.425: Invalid block bitmap block 0 in block_group 0
[   52.320764][ T4689] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.425: Invalid block bitmap block 0 in block_group 0
[   52.334878][ T4689] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.425: Failed to acquire dquot type 1
[   52.346536][ T4689] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.425: Failed to acquire dquot type 1
[   52.358354][ T4689] EXT4-fs (loop3): 1 orphan inode deleted
[   52.371764][ T4704] pim6reg: entered allmulticast mode
[   52.378585][ T4704] pim6reg: left allmulticast mode
[   52.406593][ T4689] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   52.498735][ T4719] FAULT_INJECTION: forcing a failure.
[   52.498735][ T4719] name failslab, interval 1, probability 0, space 0, times 0
[   52.511403][ T4719] CPU: 0 UID: 0 PID: 4719 Comm: syz.3.433 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   52.511430][ T4719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   52.511472][ T4719] Call Trace:
[   52.511479][ T4719]  <TASK>
[   52.511487][ T4719]  __dump_stack+0x1d/0x30
[   52.511509][ T4719]  dump_stack_lvl+0xe8/0x140
[   52.511530][ T4719]  dump_stack+0x15/0x1b
[   52.511548][ T4719]  should_fail_ex+0x265/0x280
[   52.511573][ T4719]  should_failslab+0x8c/0xb0
[   52.511626][ T4719]  kmem_cache_alloc_noprof+0x50/0x310
[   52.511648][ T4719]  ? skb_clone+0x151/0x1f0
[   52.511723][ T4719]  skb_clone+0x151/0x1f0
[   52.511786][ T4719]  __netlink_deliver_tap+0x2c9/0x500
[   52.511826][ T4719]  netlink_unicast+0x66b/0x690
[   52.511852][ T4719]  netlink_sendmsg+0x58b/0x6b0
[   52.511881][ T4719]  ? __pfx_netlink_sendmsg+0x10/0x10
[   52.511914][ T4719]  __sock_sendmsg+0x145/0x180
[   52.512011][ T4719]  ____sys_sendmsg+0x31e/0x4e0
[   52.512040][ T4719]  ___sys_sendmsg+0x17b/0x1d0
[   52.512076][ T4719]  __x64_sys_sendmsg+0xd4/0x160
[   52.512177][ T4719]  x64_sys_call+0x191e/0x2ff0
[   52.512198][ T4719]  do_syscall_64+0xd2/0x200
[   52.512313][ T4719]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   52.512337][ T4719]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   52.512363][ T4719]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.512457][ T4719] RIP: 0033:0x7f7d51cbeec9
[   52.512473][ T4719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   52.512488][ T4719] RSP: 002b:00007f7d50727038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   52.512508][ T4719] RAX: ffffffffffffffda RBX: 00007f7d51f15fa0 RCX: 00007f7d51cbeec9
[   52.512522][ T4719] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000007
[   52.512534][ T4719] RBP: 00007f7d50727090 R08: 0000000000000000 R09: 0000000000000000
[   52.512547][ T4719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   52.512575][ T4719] R13: 00007f7d51f16038 R14: 00007f7d51f15fa0 R15: 00007ffd4b194a48
[   52.512591][ T4719]  </TASK>
[   52.759151][ T4727] 8021q: VLANs not supported on wg2
[   52.790940][ T4730] openvswitch: netlink: Message has 6 unknown bytes.
[   52.805516][ T4730] loop0: detected capacity change from 0 to 512
[   52.812107][ T4732] loop3: detected capacity change from 0 to 2048
[   52.825064][ T4730] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   52.840446][ T4730] EXT4-fs (loop0): mount failed
[   52.893793][ T4712] loop2: detected capacity change from 0 to 1024
[   52.900844][ T4712] EXT4-fs: Ignoring removed nobh option
[   53.115821][ T4757] 8021q: VLANs not supported on wg2
[   53.140589][ T4759] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   53.181468][ T4761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.190041][ T4761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.199260][ T4761] FAULT_INJECTION: forcing a failure.
[   53.199260][ T4761] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   53.212399][ T4761] CPU: 1 UID: 0 PID: 4761 Comm: syz.2.449 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   53.212422][ T4761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   53.212433][ T4761] Call Trace:
[   53.212439][ T4761]  <TASK>
[   53.212446][ T4761]  __dump_stack+0x1d/0x30
[   53.212465][ T4761]  dump_stack_lvl+0xe8/0x140
[   53.212513][ T4761]  dump_stack+0x15/0x1b
[   53.212528][ T4761]  should_fail_ex+0x265/0x280
[   53.212627][ T4761]  should_fail+0xb/0x20
[   53.212646][ T4761]  should_fail_usercopy+0x1a/0x20
[   53.212696][ T4761]  _copy_to_user+0x20/0xa0
[   53.212726][ T4761]  simple_read_from_buffer+0xb5/0x130
[   53.212750][ T4761]  proc_fail_nth_read+0x10e/0x150
[   53.212783][ T4761]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   53.212807][ T4761]  vfs_read+0x1a5/0x770
[   53.212826][ T4761]  ? __rcu_read_unlock+0x4f/0x70
[   53.212845][ T4761]  ? __fget_files+0x184/0x1c0
[   53.212874][ T4761]  ksys_read+0xda/0x1a0
[   53.212892][ T4761]  __x64_sys_read+0x40/0x50
[   53.212915][ T4761]  x64_sys_call+0x27bc/0x2ff0
[   53.212934][ T4761]  do_syscall_64+0xd2/0x200
[   53.212962][ T4761]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   53.212982][ T4761]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   53.213042][ T4761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.213061][ T4761] RIP: 0033:0x7fa55921d8dc
[   53.213075][ T4761] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   53.213089][ T4761] RSP: 002b:00007fa557c7f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   53.213120][ T4761] RAX: ffffffffffffffda RBX: 00007fa559475fa0 RCX: 00007fa55921d8dc
[   53.213132][ T4761] RDX: 000000000000000f RSI: 00007fa557c7f0a0 RDI: 0000000000000009
[   53.213188][ T4761] RBP: 00007fa557c7f090 R08: 0000000000000000 R09: 0000000000000000
[   53.213199][ T4761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   53.213210][ T4761] R13: 00007fa559476038 R14: 00007fa559475fa0 R15: 00007ffeeddfc878
[   53.213238][ T4761]  </TASK>
[   53.436990][ T4764] loop2: detected capacity change from 0 to 2048
[   53.462153][ T4769] netlink: 'syz.4.452': attribute type 1 has an invalid length.
[   53.525106][ T4775] FAULT_INJECTION: forcing a failure.
[   53.525106][ T4775] name failslab, interval 1, probability 0, space 0, times 0
[   53.537997][ T4775] CPU: 0 UID: 0 PID: 4775 Comm: syz.2.454 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   53.538050][ T4775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   53.538057][ T4775] Call Trace:
[   53.538062][ T4775]  <TASK>
[   53.538086][ T4775]  __dump_stack+0x1d/0x30
[   53.538131][ T4775]  dump_stack_lvl+0xe8/0x140
[   53.538142][ T4775]  dump_stack+0x15/0x1b
[   53.538151][ T4775]  should_fail_ex+0x265/0x280
[   53.538165][ T4775]  should_failslab+0x8c/0xb0
[   53.538230][ T4775]  kmem_cache_alloc_noprof+0x50/0x310
[   53.538253][ T4775]  ? skb_clone+0x151/0x1f0
[   53.538275][ T4775]  skb_clone+0x151/0x1f0
[   53.538296][ T4775]  __netlink_deliver_tap+0x2c9/0x500
[   53.538332][ T4775]  netlink_unicast+0x66b/0x690
[   53.538345][ T4775]  netlink_sendmsg+0x58b/0x6b0
[   53.538360][ T4775]  ? __pfx_netlink_sendmsg+0x10/0x10
[   53.538374][ T4775]  __sock_sendmsg+0x145/0x180
[   53.538435][ T4775]  ____sys_sendmsg+0x31e/0x4e0
[   53.538451][ T4775]  ___sys_sendmsg+0x17b/0x1d0
[   53.538546][ T4775]  __x64_sys_sendmsg+0xd4/0x160
[   53.538562][ T4775]  x64_sys_call+0x191e/0x2ff0
[   53.538574][ T4775]  do_syscall_64+0xd2/0x200
[   53.538645][ T4775]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   53.538659][ T4775]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   53.538675][ T4775]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.538739][ T4775] RIP: 0033:0x7fa55921eec9
[   53.538749][ T4775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   53.538759][ T4775] RSP: 002b:00007fa557c7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   53.538820][ T4775] RAX: ffffffffffffffda RBX: 00007fa559475fa0 RCX: 00007fa55921eec9
[   53.538827][ T4775] RDX: 0000000000008814 RSI: 00002000000003c0 RDI: 0000000000000006
[   53.538834][ T4775] RBP: 00007fa557c7f090 R08: 0000000000000000 R09: 0000000000000000
[   53.538841][ T4775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   53.538880][ T4775] R13: 00007fa559476038 R14: 00007fa559475fa0 R15: 00007ffeeddfc878
[   53.538891][ T4775]  </TASK>
[   53.538913][ T4775] __nla_validate_parse: 15 callbacks suppressed
[   53.538923][ T4775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'.
[   53.769673][   T29] kauditd_printk_skb: 467 callbacks suppressed
[   53.769686][   T29] audit: type=1400 audit(1758638213.472:2834): avc:  denied  { create } for  pid=4776 comm="syz.4.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   53.787225][ T4779] loop2: detected capacity change from 0 to 2048
[   53.823994][   T29] audit: type=1400 audit(1758638213.532:2835): avc:  denied  { lock } for  pid=4781 comm="syz.4.458" path="socket:[9183]" dev="sockfs" ino=9183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   53.853495][ T4787] 8021q: VLANs not supported on wg2
[   53.859046][   T29] audit: type=1400 audit(1758638213.532:2836): avc:  denied  { ioctl } for  pid=4781 comm="syz.4.458" path="socket:[9184]" dev="sockfs" ino=9184 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   53.935520][   T29] audit: type=1326 audit(1758638213.602:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4778 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55921eec9 code=0x7ffc0000
[   53.958979][   T29] audit: type=1326 audit(1758638213.602:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4778 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55921eec9 code=0x7ffc0000
[   53.982374][   T29] audit: type=1326 audit(1758638213.602:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4778 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa55921eec9 code=0x7ffc0000
[   54.006130][   T29] audit: type=1326 audit(1758638213.602:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4778 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55921eec9 code=0x7ffc0000
[   54.029515][   T29] audit: type=1326 audit(1758638213.602:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4778 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa55921eec9 code=0x7ffc0000
[   54.052951][   T29] audit: type=1326 audit(1758638213.602:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4778 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55921eec9 code=0x7ffc0000
[   54.076360][   T29] audit: type=1326 audit(1758638213.602:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4778 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fa55921eec9 code=0x7ffc0000
[   54.131209][ T4797] loop4: detected capacity change from 0 to 2048
[   54.140090][ T4799] netlink: 148 bytes leftover after parsing attributes in process `syz.1.465'.
[   54.158524][ T4799] netlink: 40 bytes leftover after parsing attributes in process `syz.1.465'.
[   54.168701][   T10] usb 7-1: enqueue for inactive port 0
[   54.184493][   T10] usb 7-1: enqueue for inactive port 0
[   54.219576][ T4801] loop2: detected capacity change from 0 to 4096
[   54.227177][ T4805] loop1: detected capacity change from 0 to 1024
[   54.236158][ T4807] netlink: 132 bytes leftover after parsing attributes in process `syz.4.466'.
[   54.242641][ T4801] EXT4-fs: Ignoring removed nomblk_io_submit option
[   54.254434][ T4805] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.282282][   T10] vhci_hcd: vhci_device speed not set
[   54.388491][ T4823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'.
[   54.413094][ T4827] loop4: detected capacity change from 0 to 512
[   54.419865][ T4827] EXT4-fs: Ignoring removed bh option
[   54.442805][ T4827] EXT4-fs: Ignoring removed mblk_io_submit option
[   54.453358][ T4827] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   54.489760][ T4827] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   54.498201][ T4827] EXT4-fs (loop4): orphan cleanup on readonly fs
[   54.514941][ T4827] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.472: Failed to acquire dquot type 1
[   54.548547][ T4827] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.472: Invalid block bitmap block 0 in block_group 0
[   54.582200][ T4827] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.472: Invalid block bitmap block 0 in block_group 0
[   54.600425][ T4827] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.472: Invalid block bitmap block 0 in block_group 0
[   54.646954][ T4837] loop1: detected capacity change from 0 to 2048
[   54.655275][ T4827] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.472: Failed to acquire dquot type 1
[   54.668554][ T4827] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.472: Failed to acquire dquot type 1
[   54.682754][ T4827] EXT4-fs (loop4): 1 orphan inode deleted
[   54.704450][ T4843] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[   54.710982][ T4843] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   54.718503][ T4843] vhci_hcd vhci_hcd.0: Device attached
[   54.744526][ T4844] vhci_hcd: connection closed
[   54.744829][  T145] vhci_hcd: stop threads
[   54.753861][  T145] vhci_hcd: release socket
[   54.758318][  T145] vhci_hcd: disconnect device
[   54.780825][ T4847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.480'.
[   54.798656][ T4847] tipc: Started in network mode
[   54.803685][ T4847] tipc: Node identity ac14140f, cluster identity 4711
[   54.811121][ T4847] tipc: New replicast peer: 255.255.255.83
[   54.817085][ T4847] tipc: Enabled bearer <udp:£>, priority 10
[   54.824379][ T4847] program syz.3.480 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   54.854351][ T4783] kexec: Could not allocate control_code_buffer
[   54.865072][ T4827] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   54.909606][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.481'.
[   54.920394][ T4858] netlink: 148 bytes leftover after parsing attributes in process `syz.3.481'.
[   54.929567][ T4858] netlink: 40 bytes leftover after parsing attributes in process `syz.3.481'.
[   54.967844][ T4862] loop1: detected capacity change from 0 to 2048
[   55.075592][ T4876] loop4: detected capacity change from 0 to 2048
[   55.100992][ T4888] loop3: detected capacity change from 0 to 512
[   55.111698][ T4888] ext2: Unknown parameter 'smackfsroot'
[   55.131041][ T4891] loop0: detected capacity change from 0 to 512
[   55.143313][ T4891] EXT4-fs: Ignoring removed bh option
[   55.148749][ T4891] EXT4-fs: Ignoring removed mblk_io_submit option
[   55.188088][ T4888] bridge_slave_0: left allmulticast mode
[   55.193830][ T4888] bridge_slave_0: left promiscuous mode
[   55.199689][ T4888] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.209317][ T4891] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   55.242197][ T4888] bridge_slave_1: left allmulticast mode
[   55.248005][ T4888] bridge_slave_1: left promiscuous mode
[   55.253776][ T4888] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.274132][ T4891] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   55.282179][ T4891] EXT4-fs (loop0): orphan cleanup on readonly fs
[   55.290626][ T4891] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.493: Failed to acquire dquot type 1
[   55.302902][ T4891] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.493: Invalid block bitmap block 0 in block_group 0
[   55.317076][ T4891] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.493: Invalid block bitmap block 0 in block_group 0
[   55.331188][ T4891] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.493: Invalid block bitmap block 0 in block_group 0
[   55.347239][ T4891] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.493: Failed to acquire dquot type 1
[   55.358891][ T4891] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.493: Failed to acquire dquot type 1
[   55.372378][ T4891] EXT4-fs (loop0): 1 orphan inode deleted
[   55.403629][ T4891] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   55.439566][ T4888] bond0: (slave bond_slave_0): Releasing backup interface
[   55.478096][ T4888] bond0: (slave bond_slave_1): Releasing backup interface
[   55.527326][ T4910] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   55.534632][ T4910] IPv6: NLM_F_CREATE should be set when creating new route
[   55.563811][ T4888] team0: Port device team_slave_0 removed
[   55.587657][ T4888] team0: Port device team_slave_1 removed
[   55.603776][ T4888] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.604632][ T4913] loop0: detected capacity change from 0 to 2048
[   55.611376][ T4888] batman_adv: batadv0: Removing interface: batadv_slave_0
[   55.643742][ T4888] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.651205][ T4888] batman_adv: batadv0: Removing interface: batadv_slave_1
[   55.819391][ T4917] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   55.826689][ T2958] tipc: Node number set to 2886997007
[   55.841657][ T4905] syzkaller0: entered promiscuous mode
[   55.847432][ T4905] syzkaller0: entered allmulticast mode
[   55.873301][ T4903] lo speed is unknown, defaulting to 1000
[   55.917831][ T4907] lo speed is unknown, defaulting to 1000
[   56.045624][ T4926] loop0: detected capacity change from 0 to 2048
[   56.080481][ T4927] netlink: 132 bytes leftover after parsing attributes in process `syz.4.504'.
[   56.170281][ T4936] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[   56.176885][ T4936] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   56.184425][ T4936] vhci_hcd vhci_hcd.0: Device attached
[   56.212777][ T4933] 8021q: VLANs not supported on wg2
[   56.298077][ T4941] loop0: detected capacity change from 0 to 1024
[   56.305092][ T4937] vhci_hcd: connection closed
[   56.312605][  T145] vhci_hcd: stop threads
[   56.321603][  T145] vhci_hcd: release socket
[   56.326196][  T145] vhci_hcd: disconnect device
[   56.334746][ T4935] lo speed is unknown, defaulting to 1000
[   56.348817][ T4941] EXT4-fs: inline encryption not supported
[   56.362480][ T3377] vhci_hcd: vhci_device speed not set
[   56.492526][ T4941] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[   56.582295][ T4941] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[   56.588824][ T4941] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   56.596444][ T4941] vhci_hcd vhci_hcd.0: Device attached
[   56.722815][ T4941] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8)
[   56.729434][ T4941] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   56.737044][ T4941] vhci_hcd vhci_hcd.0: Device attached
[   56.772632][ T4948] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11)
[   56.773005][ T4952] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   56.779522][ T4948] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   56.779577][ T4948] vhci_hcd vhci_hcd.0: Device attached
[   56.835151][ T4952] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(17)
[   56.841956][ T4952] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   56.850150][ T4952] vhci_hcd vhci_hcd.0: Device attached
[   56.852266][   T10] usb 1-1: new low-speed USB device number 2 using vhci_hcd
[   56.901055][ T4956] loop4: detected capacity change from 0 to 512
[   56.922282][ T4941] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(10)
[   56.929003][ T4941] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   56.936600][ T4941] vhci_hcd vhci_hcd.0: Device attached
[   56.957401][ T4956] EXT4-fs: Ignoring removed bh option
[   56.987368][ T4956] EXT4-fs: Ignoring removed mblk_io_submit option
[   57.010693][ T4956] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   57.041496][ T4956] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   57.075931][ T4956] EXT4-fs (loop4): orphan cleanup on readonly fs
[   57.081965][ T4950] vhci_hcd: connection closed
[   57.082368][ T4953] vhci_hcd: connection closed
[   57.094558][ T4945] vhci_hcd: connection reset by peer
[   57.096048][ T4957] vhci_hcd: connection closed
[   57.112266][ T4947] vhci_hcd: connection closed
[   57.119477][   T31] vhci_hcd: stop threads
[   57.124694][ T4965] FAULT_INJECTION: forcing a failure.
[   57.124694][ T4965] name failslab, interval 1, probability 0, space 0, times 0
[   57.128857][   T31] vhci_hcd: release socket
[   57.141383][ T4965] CPU: 1 UID: 0 PID: 4965 Comm: syz.1.512 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   57.141441][ T4965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   57.141454][ T4965] Call Trace:
[   57.141460][ T4965]  <TASK>
[   57.141469][ T4965]  __dump_stack+0x1d/0x30
[   57.141491][ T4965]  dump_stack_lvl+0xe8/0x140
[   57.141518][ T4965]  dump_stack+0x15/0x1b
[   57.141535][ T4965]  should_fail_ex+0x265/0x280
[   57.141558][ T4965]  should_failslab+0x8c/0xb0
[   57.141655][ T4965]  kmem_cache_alloc_noprof+0x50/0x310
[   57.141761][ T4965]  ? __rds_conn_create+0x3e7/0x1040
[   57.141784][ T4965]  ? should_failslab+0x8c/0xb0
[   57.141809][ T4965]  __rds_conn_create+0x3e7/0x1040
[   57.141836][ T4965]  rds_conn_create_outgoing+0x43/0x60
[   57.142050][ T4965]  rds_sendmsg+0xbd2/0x14a0
[   57.142085][ T4965]  ? __pfx_rds_sendmsg+0x10/0x10
[   57.142112][ T4965]  __sock_sendmsg+0x145/0x180
[   57.142142][ T4965]  ____sys_sendmsg+0x31e/0x4e0
[   57.142197][ T4965]  ___sys_sendmsg+0x17b/0x1d0
[   57.142236][ T4965]  __x64_sys_sendmsg+0xd4/0x160
[   57.142352][ T4965]  x64_sys_call+0x191e/0x2ff0
[   57.142373][ T4965]  do_syscall_64+0xd2/0x200
[   57.142431][ T4965]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   57.142563][ T4965]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   57.142591][ T4965]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.142680][ T4965] RIP: 0033:0x7face89feec9
[   57.142695][ T4965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   57.142721][ T4965] RSP: 002b:00007face745f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   57.142740][ T4965] RAX: ffffffffffffffda RBX: 00007face8c55fa0 RCX: 00007face89feec9
[   57.142752][ T4965] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000006
[   57.142765][ T4965] RBP: 00007face745f090 R08: 0000000000000000 R09: 0000000000000000
[   57.142842][ T4965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   57.142853][ T4965] R13: 00007face8c56038 R14: 00007face8c55fa0 R15: 00007fffded8e5a8
[   57.142878][ T4965]  </TASK>
[   57.159606][ T4967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   57.166033][   T31] vhci_hcd: disconnect device
[   57.169193][ T4967] IPv6: NLM_F_CREATE should be set when creating new route
[   57.218602][ T4956] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.509: Failed to acquire dquot type 1
[   57.226089][   T31] vhci_hcd: stop threads
[   57.241074][ T4956] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.509: Invalid block bitmap block 0 in block_group 0
[   57.244799][   T31] vhci_hcd: release socket
[   57.244813][   T31] vhci_hcd: disconnect device
[   57.260301][ T4956] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.509: Invalid block bitmap block 0 in block_group 0
[   57.265497][   T31] vhci_hcd: stop threads
[   57.281030][ T4956] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.509: Invalid block bitmap block 0 in block_group 0
[   57.301344][   T31] vhci_hcd: release socket
[   57.334441][ T4956] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.509: Failed to acquire dquot type 1
[   57.334682][ T4956] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.509: Failed to acquire dquot type 1
[   57.342651][   T31] vhci_hcd: disconnect device
[   57.351175][   T31] vhci_hcd: stop threads
[   57.458329][ T4956] EXT4-fs (loop4): 1 orphan inode deleted
[   57.469499][   T31] vhci_hcd: release socket
[   57.488875][   T31] vhci_hcd: disconnect device
[   57.492482][ T4976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   57.494206][   T31] vhci_hcd: stop threads
[   57.500948][ T4976] IPv6: NLM_F_CREATE should be set when creating new route
[   57.512658][   T31] vhci_hcd: release socket
[   57.517072][   T31] vhci_hcd: disconnect device
[   57.544302][ T4956] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   57.565545][ T4982] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component
[   57.598983][ T4988] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[   57.605547][ T4988] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   57.613316][ T4988] vhci_hcd vhci_hcd.0: Device attached
[   57.625435][ T4989] vhci_hcd: connection closed
[   57.625953][   T31] vhci_hcd: stop threads
[   57.635133][   T31] vhci_hcd: release socket
[   57.639637][   T31] vhci_hcd: disconnect device
[   57.645055][ T4991] loop1: detected capacity change from 0 to 1024
[   57.654133][ T4991] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.668811][ T4991] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.521: lblock 3 mapped to illegal pblock 3 (length 3)
[   57.683355][ T4991] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   57.695789][ T4991] EXT4-fs (loop1): This should not happen!! Data will be lost
[   57.695789][ T4991] 
[   57.706993][ T4991] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.521: lblock 3 mapped to illegal pblock 3 (length 1)
[   57.721673][ T4991] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.521: lblock 3 mapped to illegal pblock 3 (length 1)
[   57.722895][ T3304] block device autoloading is deprecated and will be removed.
[   57.736591][ T4991] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.521: lblock 3 mapped to illegal pblock 3 (length 1)
[   57.764314][ T4983] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.521: lblock 3 mapped to illegal pblock 3 (length 1)
[   57.778673][ T4983] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.521: lblock 3 mapped to illegal pblock 3 (length 1)
[   57.793509][ T4983] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.521: lblock 3 mapped to illegal pblock 3 (length 1)
[   57.811620][ T4998] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   57.872554][ T4983] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.521: lblock 3 mapped to illegal pblock 3 (length 1)
[   57.887971][ T4991] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.521: lblock 3 mapped to illegal pblock 3 (length 1)
[   57.903368][ T4991] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.521: lblock 3 mapped to illegal pblock 3 (length 1)
[   57.959384][ T5005] loop0: detected capacity change from 0 to 2048
[   58.186003][ T5011] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   58.193268][ T5011] IPv6: NLM_F_CREATE should be set when creating new route
[   58.193870][ T5013] loop0: detected capacity change from 0 to 512
[   58.212565][ T5013] EXT4-fs: Ignoring removed oldalloc option
[   58.227651][ T5013] EXT4-fs (loop0): 1 truncate cleaned up
[   58.521720][ T4985] Process accounting resumed
[   58.680148][ T5040] loop3: detected capacity change from 0 to 512
[   58.702088][ T5042] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[   58.708667][ T5042] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   58.716301][ T5042] vhci_hcd vhci_hcd.0: Device attached
[   58.748564][ T5041] loop2: detected capacity change from 0 to 2048
[   58.761501][ T5040] EXT4-fs: Ignoring removed bh option
[   58.774321][   T57] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[   58.786667][   T57] EXT4-fs (loop1): This should not happen!! Data will be lost
[   58.786667][   T57] 
[   58.798743][ T5040] EXT4-fs: Ignoring removed mblk_io_submit option
[   58.806755][ T5040] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   58.817672][ T5040] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   58.829250][ T5040] EXT4-fs (loop3): orphan cleanup on readonly fs
[   58.836865][ T5043] vhci_hcd: connection closed
[   58.837107][   T31] vhci_hcd: stop threads
[   58.838184][ T5040] __quota_error: 139 callbacks suppressed
[   58.838205][ T5040] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4
[   58.841790][   T31] vhci_hcd: release socket
[   58.841800][   T31] vhci_hcd: disconnect device
[   58.844116][ T3410] Process accounting resumed
[   58.846068][ T5040] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota
[   58.846167][ T5040] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.539: Failed to acquire dquot type 1
[   58.846397][ T5040] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.539: Invalid block bitmap block 0 in block_group 0
[   58.910743][ T5040] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.539: Invalid block bitmap block 0 in block_group 0
[   58.925082][ T5040] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.539: Invalid block bitmap block 0 in block_group 0
[   58.939086][ T5040] Quota error (device loop3): write_blk: dquota write failed
[   58.946924][ T5040] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[   58.956868][ T5040] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.539: Failed to acquire dquot type 1
[   58.958234][ T5040] Quota error (device loop3): write_blk: dquota write failed
[   58.976608][ T5040] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[   58.976709][ T5040] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.539: Failed to acquire dquot type 1
[   58.977688][ T5040] EXT4-fs (loop3): 1 orphan inode deleted
[   59.013305][ T5040] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   59.063123][ T5059] __nla_validate_parse: 1 callbacks suppressed
[   59.063136][ T5059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'.
[   59.092101][ T5061] loop3: detected capacity change from 0 to 764
[   59.104253][ T5061] iso9660: Unknown parameter '@'
[   59.136805][ T5068] capability: warning: `syz.3.546' uses deprecated v2 capabilities in a way that may be insecure
[   59.217776][ T5071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.547'.
[   59.247549][ T5073] pim6reg: entered allmulticast mode
[   59.253991][ T5073] pim6reg: left allmulticast mode
[   59.374445][   T29] audit: type=1400 audit(1758638219.082:2965): avc:  denied  { mounton } for  pid=5075 comm="syz.2.549" path="/125/file0" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   59.585930][   T29] audit: type=1400 audit(1758638219.292:2966): avc:  denied  { write } for  pid=5090 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   59.707175][ T5096] loop4: detected capacity change from 0 to 128
[   59.738961][ T5096] netlink: 48 bytes leftover after parsing attributes in process `syz.4.556'.
[   59.837045][   T29] audit: type=1326 audit(1758638219.542:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5099 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba31aeec9 code=0x7ffc0000
[   59.860785][   T29] audit: type=1326 audit(1758638219.542:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5099 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba31aeec9 code=0x7ffc0000
[   59.894776][ T5100] $Hÿ: renamed from bond0 (while UP)
[   59.902037][ T5100] $Hÿ: entered promiscuous mode
[   59.907344][ T5100] bond_slave_0: entered promiscuous mode
[   59.913239][ T5100] bond_slave_1: entered promiscuous mode
[   60.077798][ T5105] netlink: 'syz.3.560': attribute type 1 has an invalid length.
[   60.160766][ T5107] 8021q: VLANs not supported on wg2
[   60.172603][ T5078] Process accounting resumed
[   60.238371][ T5110] loop1: detected capacity change from 0 to 2048
[   60.311575][ T5116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'.
[   60.332174][ T5112] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[   60.338830][ T5112] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   60.346563][ T5112] vhci_hcd vhci_hcd.0: Device attached
[   60.397513][ T5117] vhci_hcd: connection closed
[   60.399152][   T57] vhci_hcd: stop threads
[   60.408209][   T57] vhci_hcd: release socket
[   60.412679][   T57] vhci_hcd: disconnect device
[   60.514918][ T5130] loop1: detected capacity change from 0 to 128
[   60.542811][ T5130] syz.1.568: attempt to access beyond end of device
[   60.542811][ T5130] loop1: rw=0, sector=121, nr_sectors = 98 limit=128
[   60.558410][ T5135] sctp: [Deprecated]: syz.3.569 (pid 5135) Use of int in max_burst socket option deprecated.
[   60.558410][ T5135] Use struct sctp_assoc_value instead
[   60.575487][ T5135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'.
[   60.709196][ T5151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.570'.
[   61.022623][ T5175] loop0: detected capacity change from 0 to 512
[   61.030879][ T5156] loop4: detected capacity change from 0 to 512
[   61.036901][ T5175] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   61.050710][ T5175] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.583: invalid indirect mapped block 4294967295 (level 0)
[   61.075481][ T5156] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.076300][ T5175] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.583: invalid indirect mapped block 4294967295 (level 1)
[   61.113461][ T5156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.576'.
[   61.113828][ T5184] FAULT_INJECTION: forcing a failure.
[   61.113828][ T5184] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   61.136056][ T5184] CPU: 0 UID: 0 PID: 5184 Comm: syz.2.586 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   61.136082][ T5184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   61.136149][ T5184] Call Trace:
[   61.136155][ T5184]  <TASK>
[   61.136161][ T5184]  __dump_stack+0x1d/0x30
[   61.136183][ T5184]  dump_stack_lvl+0xe8/0x140
[   61.136203][ T5184]  dump_stack+0x15/0x1b
[   61.136220][ T5184]  should_fail_ex+0x265/0x280
[   61.136304][ T5184]  should_fail+0xb/0x20
[   61.136376][ T5184]  should_fail_usercopy+0x1a/0x20
[   61.136410][ T5184]  _copy_to_iter+0x251/0xe70
[   61.136440][ T5184]  ? should_fail_ex+0xdb/0x280
[   61.136465][ T5184]  copy_page_to_iter+0x18f/0x2d0
[   61.136494][ T5184]  process_vm_rw+0x672/0x960
[   61.136667][ T5184]  __x64_sys_process_vm_readv+0x78/0x90
[   61.136693][ T5184]  x64_sys_call+0x1874/0x2ff0
[   61.136749][ T5184]  do_syscall_64+0xd2/0x200
[   61.136777][ T5184]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   61.136802][ T5184]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   61.136869][ T5184]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.136887][ T5184] RIP: 0033:0x7fa55921eec9
[   61.136904][ T5184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   61.136950][ T5184] RSP: 002b:00007fa557c7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136
[   61.136969][ T5184] RAX: ffffffffffffffda RBX: 00007fa559475fa0 RCX: 00007fa55921eec9
[   61.136983][ T5184] RDX: 0000000000000048 RSI: 0000200000008400 RDI: 0000000000000143
[   61.136996][ T5184] RBP: 00007fa557c7f090 R08: 0000000000000286 R09: 0000000000000000
[   61.137008][ T5184] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001
[   61.137019][ T5184] R13: 00007fa559476038 R14: 00007fa559475fa0 R15: 00007ffeeddfc878
[   61.137102][ T5184]  </TASK>
[   61.137578][ T5156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'.
[   61.138327][ T5175] EXT4-fs (loop0): 1 orphan inode deleted
[   61.334137][ T5175] EXT4-fs (loop0): 1 truncate cleaned up
[   61.449836][ T5199] FAULT_INJECTION: forcing a failure.
[   61.449836][ T5199] name failslab, interval 1, probability 0, space 0, times 0
[   61.462732][ T5199] CPU: 1 UID: 0 PID: 5199 Comm: syz.3.589 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   61.462790][ T5199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   61.462802][ T5199] Call Trace:
[   61.462809][ T5199]  <TASK>
[   61.462818][ T5199]  __dump_stack+0x1d/0x30
[   61.462837][ T5199]  dump_stack_lvl+0xe8/0x140
[   61.462853][ T5199]  dump_stack+0x15/0x1b
[   61.462867][ T5199]  should_fail_ex+0x265/0x280
[   61.462962][ T5199]  should_failslab+0x8c/0xb0
[   61.462987][ T5199]  kmem_cache_alloc_node_noprof+0x57/0x320
[   61.463099][ T5199]  ? __alloc_skb+0x101/0x320
[   61.463121][ T5199]  __alloc_skb+0x101/0x320
[   61.463141][ T5199]  netlink_alloc_large_skb+0xba/0xf0
[   61.463164][ T5199]  netlink_sendmsg+0x3cf/0x6b0
[   61.463241][ T5199]  ? __pfx_netlink_sendmsg+0x10/0x10
[   61.463284][ T5199]  __sock_sendmsg+0x145/0x180
[   61.463314][ T5199]  ____sys_sendmsg+0x31e/0x4e0
[   61.463343][ T5199]  ___sys_sendmsg+0x17b/0x1d0
[   61.463452][ T5199]  __x64_sys_sendmsg+0xd4/0x160
[   61.463483][ T5199]  x64_sys_call+0x191e/0x2ff0
[   61.463583][ T5199]  do_syscall_64+0xd2/0x200
[   61.463613][ T5199]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   61.463637][ T5199]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   61.463666][ T5199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.463729][ T5199] RIP: 0033:0x7f7d51cbeec9
[   61.463742][ T5199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   61.463772][ T5199] RSP: 002b:00007f7d50727038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   61.463789][ T5199] RAX: ffffffffffffffda RBX: 00007f7d51f15fa0 RCX: 00007f7d51cbeec9
[   61.463801][ T5199] RDX: 0000000000000004 RSI: 0000200000000a00 RDI: 0000000000000003
[   61.463813][ T5199] RBP: 00007f7d50727090 R08: 0000000000000000 R09: 0000000000000000
[   61.463824][ T5199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   61.463835][ T5199] R13: 00007f7d51f16038 R14: 00007f7d51f15fa0 R15: 00007ffd4b194a48
[   61.463875][ T5199]  </TASK>
[   61.688916][ T5145] Process accounting resumed
[   61.742539][ T5211] ieee802154 phy0 wpan0: encryption failed: -22
[   61.754122][ T5210] loop4: detected capacity change from 0 to 1024
[   61.772753][ T5210] EXT4-fs: Ignoring removed bh option
[   61.843002][ T5220] loop3: detected capacity change from 0 to 2048
[   61.908058][ T5225] loop4: detected capacity change from 0 to 2048
[   61.922500][   T10] usb 1-1: enqueue for inactive port 0
[   61.928266][   T10] usb 1-1: enqueue for inactive port 0
[   61.957885][ T5232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.600'.
[   61.969967][ T5233] Illegal XDP return value 39618298 on prog  (id 449) dev N/A, expect packet loss!
[   62.002294][   T10] vhci_hcd: vhci_device speed not set
[   62.017955][ T5221] loop1: detected capacity change from 0 to 2048
[   62.264456][ T5241] Process accounting resumed
[   62.610732][ T5248] loop1: detected capacity change from 0 to 4096
[   62.617711][ T5248] EXT4-fs: Ignoring removed nomblk_io_submit option
[   62.683804][ T5252] netlink: 'syz.2.606': attribute type 25 has an invalid length.
[   62.691579][ T5252] netlink: 'syz.2.606': attribute type 28 has an invalid length.
[   62.764812][ T5260] loop0: detected capacity change from 0 to 512
[   62.772074][ T5260] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   62.784575][ T5260] EXT4-fs (loop0): 1 truncate cleaned up
[   62.794419][ T5258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.608'.
[   62.814326][ T5265] loop2: detected capacity change from 0 to 512
[   62.831622][ T5265] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[   62.857570][ T5270] loop3: detected capacity change from 0 to 2048
[   62.906813][ T5274] loop3: detected capacity change from 0 to 1024
[   62.913613][ T5274] EXT4-fs: Ignoring removed orlov option
[   62.952834][ T3308] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   62.970436][ T3308] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   63.040687][ T5281] loop0: detected capacity change from 0 to 512
[   63.047491][ T5281] EXT4-fs: Ignoring removed bh option
[   63.053339][ T5281] EXT4-fs: Ignoring removed mblk_io_submit option
[   63.060535][ T5281] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   63.070866][ T5281] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   63.078979][ T5281] EXT4-fs (loop0): orphan cleanup on readonly fs
[   63.086501][ T5281] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.615: Failed to acquire dquot type 1
[   63.098564][ T5281] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.615: Invalid block bitmap block 0 in block_group 0
[   63.112342][ T5281] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.615: Invalid block bitmap block 0 in block_group 0
[   63.126291][ T5281] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.615: Invalid block bitmap block 0 in block_group 0
[   63.139986][ T5281] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.615: Failed to acquire dquot type 1
[   63.151966][ T5281] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.615: Failed to acquire dquot type 1
[   63.163486][ T5281] EXT4-fs (loop0): 1 orphan inode deleted
[   63.175064][ T5281] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   63.203700][   T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.255652][   T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.286191][   T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.326538][   T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.359054][ T5288] SELinux: failed to load policy
[   63.392091][ T5289] lo speed is unknown, defaulting to 1000
[   63.534520][   T31] bond0 (unregistering): Released all slaves
[   63.596876][   T31] tipc: Disabling bearer <udp:£>
[   63.601891][   T31] tipc: Left network mode
[   63.622258][   T31] hsr_slave_0: left promiscuous mode
[   63.623819][ T5310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.636296][   T31] hsr_slave_1: left promiscuous mode
[   63.636358][ T5310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.653508][   T31] veth1_macvtap: left promiscuous mode
[   63.658974][   T31] veth0_macvtap: left promiscuous mode
[   63.664580][   T31] veth1_vlan: left promiscuous mode
[   63.669926][   T31] veth0_vlan: left promiscuous mode
[   63.778992][ T5326] 8021q: VLANs not supported on wg2
[   63.784487][ T5289] chnl_net:caif_netlink_parms(): no params data found
[   63.834413][ T5331] netlink: 'syz.1.628': attribute type 10 has an invalid length.
[   63.845516][ T5324] FAULT_INJECTION: forcing a failure.
[   63.845516][ T5324] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   63.858877][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.2.626 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   63.858907][ T5324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   63.859077][ T5324] Call Trace:
[   63.859083][ T5324]  <TASK>
[   63.859090][ T5324]  __dump_stack+0x1d/0x30
[   63.859188][ T5324]  dump_stack_lvl+0xe8/0x140
[   63.859205][ T5324]  dump_stack+0x15/0x1b
[   63.859219][ T5324]  should_fail_ex+0x265/0x280
[   63.859243][ T5324]  should_fail_alloc_page+0xf2/0x100
[   63.859269][ T5324]  __alloc_frozen_pages_noprof+0xff/0x360
[   63.859315][ T5324]  alloc_pages_mpol+0xb3/0x250
[   63.859346][ T5324]  folio_alloc_mpol_noprof+0x39/0x80
[   63.859416][ T5324]  shmem_get_folio_gfp+0x3cf/0xd60
[   63.859437][ T5324]  shmem_fault+0xf6/0x250
[   63.859449][ T5324]  __do_fault+0xbc/0x200
[   63.859500][ T5324]  handle_mm_fault+0xd69/0x2c20
[   63.859513][ T5324]  ? __rcu_read_lock+0x37/0x50
[   63.859557][ T5324]  ? __pte_offset_map_lock+0x1d4/0x230
[   63.859577][ T5324]  __get_user_pages+0x102e/0x1fa0
[   63.859658][ T5324]  __gup_longterm_locked+0xbdb/0xe60
[   63.859672][ T5324]  ? ___slab_alloc+0x273/0x910
[   63.859690][ T5324]  ? process_vm_rw+0x27c/0x960
[   63.859748][ T5324]  ? should_fail_ex+0xdb/0x280
[   63.859770][ T5324]  pin_user_pages_remote+0x7e/0xb0
[   63.859785][ T5324]  process_vm_rw+0x484/0x960
[   63.859885][ T5324]  __x64_sys_process_vm_writev+0x78/0x90
[   63.859901][ T5324]  x64_sys_call+0x2a7c/0x2ff0
[   63.859913][ T5324]  do_syscall_64+0xd2/0x200
[   63.859930][ T5324]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   63.860000][ T5324]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   63.860017][ T5324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.860029][ T5324] RIP: 0033:0x7fa55921eec9
[   63.860039][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   63.860118][ T5324] RSP: 002b:00007fa557c7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[   63.860132][ T5324] RAX: ffffffffffffffda RBX: 00007fa559475fa0 RCX: 00007fa55921eec9
[   63.860140][ T5324] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 000000000000015b
[   63.860183][ T5324] RBP: 00007fa557c7f090 R08: 000000000000023a R09: 0000000000000000
[   63.860190][ T5324] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001
[   63.860197][ T5324] R13: 00007fa559476038 R14: 00007fa559475fa0 R15: 00007ffeeddfc878
[   63.860209][ T5324]  </TASK>
[   64.121902][ T5331] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.129396][   T29] kauditd_printk_skb: 433 callbacks suppressed
[   64.129410][   T29] audit: type=1400 audit(1758638223.832:3396): avc:  denied  { read } for  pid=5333 comm="syz.4.629" path="socket:[11354]" dev="sockfs" ino=11354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   64.138166][ T5331] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   64.169712][ T5289] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.176949][ T5289] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.185688][ T5289] bridge_slave_0: entered allmulticast mode
[   64.192139][ T5289] bridge_slave_0: entered promiscuous mode
[   64.199031][ T5289] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.206314][ T5289] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.214684][ T5289] bridge_slave_1: entered allmulticast mode
[   64.225145][ T5337] loop2: detected capacity change from 0 to 512
[   64.231828][ T5337] EXT4-fs: Ignoring removed bh option
[   64.232170][ T5289] bridge_slave_1: entered promiscuous mode
[   64.243406][ T5337] EXT4-fs: Ignoring removed mblk_io_submit option
[   64.250672][ T5337] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   64.261694][ T5337] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   64.270329][ T5337] EXT4-fs (loop2): orphan cleanup on readonly fs
[   64.277265][ T5337] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4
[   64.287100][ T5337] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota
[   64.295957][ T5342] __nla_validate_parse: 1 callbacks suppressed
[   64.295974][ T5342] netlink: 240 bytes leftover after parsing attributes in process `syz.4.629'.
[   64.297120][ T5337] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.630: Failed to acquire dquot type 1
[   64.323890][ T5337] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.630: Invalid block bitmap block 0 in block_group 0
[   64.325757][ T5289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.347049][ T5337] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.630: Invalid block bitmap block 0 in block_group 0
[   64.358138][   T29] audit: type=1400 audit(1758638224.062:3397): avc:  denied  { setopt } for  pid=5333 comm="syz.4.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   64.362013][ T5289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.380825][ T5334] openvswitch: netlink: Message has 6 unknown bytes.
[   64.396245][ T5337] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.630: Invalid block bitmap block 0 in block_group 0
[   64.411339][ T5337] Quota error (device loop2): write_blk: dquota write failed
[   64.418779][ T5337] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[   64.422454][   T29] audit: type=1400 audit(1758638224.132:3398): avc:  denied  { create } for  pid=5333 comm="syz.4.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   64.428613][ T5337] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.630: Failed to acquire dquot type 1
[   64.450712][   T29] audit: type=1400 audit(1758638224.162:3399): avc:  denied  { connect } for  pid=5333 comm="syz.4.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   64.459467][ T5337] Quota error (device loop2): write_blk: dquota write failed
[   64.482643][ T5340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.631'.
[   64.486130][ T5337] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[   64.504862][ T5337] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.630: Failed to acquire dquot type 1
[   64.516598][ T5337] EXT4-fs (loop2): 1 orphan inode deleted
[   64.517626][ T5289] team0: Port device team_slave_0 added
[   64.529418][ T5289] team0: Port device team_slave_1 added
[   64.535157][ T5337] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   64.549999][ T5289] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.557233][ T5289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.583470][ T5289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.583964][ T5344] loop1: detected capacity change from 0 to 512
[   64.594900][ T5289] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.601074][ T5344] EXT4-fs: Ignoring removed i_version option
[   64.607320][ T5289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.639260][ T5289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.667451][ T5289] hsr_slave_0: entered promiscuous mode
[   64.673669][ T5289] hsr_slave_1: entered promiscuous mode
[   64.679563][ T5289] debugfs: 'hsr0' already exists in 'hsr'
[   64.683352][ T5344] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.631: corrupted in-inode xattr: invalid ea_ino
[   64.685420][ T5289] Cannot create hsr debugfs directory
[   64.701703][ T5344] EXT4-fs (loop1): Remounting filesystem read-only
[   64.802422][ T5360] loop0: detected capacity change from 0 to 2048
[   64.812749][ T5289] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   64.821666][ T5289] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   64.830719][ T5289] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   64.846865][ T5289] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   64.916244][ T5289] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.928777][ T5289] 8021q: adding VLAN 0 to HW filter on device team0
[   64.980689][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.987902][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.999485][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.006934][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.042630][ T5380] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.049928][ T5380] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.156017][ T5381] 8021q: VLANs not supported on wg2
[   65.161282][  T145] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.172355][  T145] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.192722][  T145] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.201663][  T145] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.274764][ T5289] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.288837][ T5391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.644'.
[   65.304182][ T5391] serio: Serial port ptm0
[   65.343243][ T5397] FAULT_INJECTION: forcing a failure.
[   65.343243][ T5397] name failslab, interval 1, probability 0, space 0, times 0
[   65.356015][ T5397] CPU: 1 UID: 0 PID: 5397 Comm: syz.0.645 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   65.356045][ T5397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   65.356078][ T5397] Call Trace:
[   65.356086][ T5397]  <TASK>
[   65.356094][ T5397]  __dump_stack+0x1d/0x30
[   65.356116][ T5397]  dump_stack_lvl+0xe8/0x140
[   65.356137][ T5397]  dump_stack+0x15/0x1b
[   65.356154][ T5397]  should_fail_ex+0x265/0x280
[   65.356198][ T5397]  ? nf_tables_newchain+0xbdf/0x17d0
[   65.356222][ T5397]  should_failslab+0x8c/0xb0
[   65.356246][ T5397]  __kmalloc_cache_noprof+0x4c/0x320
[   65.356276][ T5397]  nf_tables_newchain+0xbdf/0x17d0
[   65.356333][ T5397]  ? __account_obj_stock+0x211/0x350
[   65.356361][ T5397]  ? should_fail_ex+0xdb/0x280
[   65.356396][ T5397]  ? __nla_parse+0x40/0x60
[   65.356454][ T5397]  nfnetlink_rcv+0xb99/0x1690
[   65.356500][ T5397]  netlink_unicast+0x5c0/0x690
[   65.356526][ T5397]  netlink_sendmsg+0x58b/0x6b0
[   65.356553][ T5397]  ? __pfx_netlink_sendmsg+0x10/0x10
[   65.356639][ T5397]  __sock_sendmsg+0x145/0x180
[   65.356671][ T5397]  ____sys_sendmsg+0x31e/0x4e0
[   65.356698][ T5397]  ___sys_sendmsg+0x17b/0x1d0
[   65.356745][ T5397]  __x64_sys_sendmsg+0xd4/0x160
[   65.356847][ T5397]  x64_sys_call+0x191e/0x2ff0
[   65.356869][ T5397]  do_syscall_64+0xd2/0x200
[   65.356906][ T5397]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   65.356977][ T5397]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   65.357006][ T5397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.357027][ T5397] RIP: 0033:0x7f61a2e9eec9
[   65.357109][ T5397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   65.357125][ T5397] RSP: 002b:00007f61a18ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   65.357143][ T5397] RAX: ffffffffffffffda RBX: 00007f61a30f5fa0 RCX: 00007f61a2e9eec9
[   65.357157][ T5397] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[   65.357169][ T5397] RBP: 00007f61a18ff090 R08: 0000000000000000 R09: 0000000000000000
[   65.357180][ T5397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   65.357192][ T5397] R13: 00007f61a30f6038 R14: 00007f61a30f5fa0 R15: 00007ffd0aa68898
[   65.357274][ T5397]  </TASK>
[   65.420584][ T5289] veth0_vlan: entered promiscuous mode
[   65.594836][ T5289] veth1_vlan: entered promiscuous mode
[   65.611833][ T5289] veth0_macvtap: entered promiscuous mode
[   65.620015][ T5289] veth1_macvtap: entered promiscuous mode
[   65.630965][ T5289] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.651872][ T5289] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.668429][   T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.670505][ T5411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.647'.
[   65.687804][   T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.699984][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.712739][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.760968][ T5414] loop5: detected capacity change from 0 to 8192
[   65.801485][ T5418] loop2: detected capacity change from 0 to 512
[   65.808211][ T5418] EXT4-fs: Ignoring removed bh option
[   65.813894][ T5418] EXT4-fs: Ignoring removed mblk_io_submit option
[   65.820991][ T5418] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   65.831574][ T5418] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   65.839829][ T5418] EXT4-fs (loop2): orphan cleanup on readonly fs
[   65.847053][ T5418] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.649: Failed to acquire dquot type 1
[   65.859659][ T5418] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.649: Invalid block bitmap block 0 in block_group 0
[   65.874659][ T5418] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.649: Invalid block bitmap block 0 in block_group 0
[   65.889157][ T5418] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.649: Invalid block bitmap block 0 in block_group 0
[   65.903275][ T5418] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.649: Failed to acquire dquot type 1
[   65.915625][ T5418] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.649: Failed to acquire dquot type 1
[   65.928140][ T5418] EXT4-fs (loop2): 1 orphan inode deleted
[   65.931816][ T5424] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5424 comm=syz.5.651
[   65.935328][ T5418] EXT4-fs mount: 89 callbacks suppressed
[   65.935350][ T5418] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   65.983889][ T5418] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   66.000759][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.084508][ T5387] Process accounting resumed
[   66.102539][ T5431] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[   66.109314][ T5431] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   66.117274][ T5431] vhci_hcd vhci_hcd.0: Device attached
[   66.125541][ T5434] loop1: detected capacity change from 0 to 1024
[   66.134564][ T5434] EXT4-fs: inline encryption not supported
[   66.142675][ T5434] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal
[   66.170080][ T5432] vhci_hcd: connection closed
[   66.170278][   T51] vhci_hcd: stop threads
[   66.179317][   T51] vhci_hcd: release socket
[   66.183810][   T51] vhci_hcd: disconnect device
[   66.297425][ T5443] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in;
[   66.297425][ T5443]    program syz.0.659 not setting count and/or reply_len properly
[   66.338766][ T5448] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=5448 comm=syz.0.660
[   66.448496][ T5454] loop4: detected capacity change from 0 to 512
[   66.455584][ T5454] EXT4-fs: Ignoring removed bh option
[   66.466042][ T5454] EXT4-fs: Ignoring removed mblk_io_submit option
[   66.480511][ T5454] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   66.501559][ T5454] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   66.514727][ T5454] EXT4-fs (loop4): orphan cleanup on readonly fs
[   66.523665][ T5454] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.663: Failed to acquire dquot type 1
[   66.537427][ T5454] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.663: Invalid block bitmap block 0 in block_group 0
[   66.551622][ T5454] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.663: Invalid block bitmap block 0 in block_group 0
[   66.567312][ T5454] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.663: Invalid block bitmap block 0 in block_group 0
[   66.581884][ T5454] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.663: Failed to acquire dquot type 1
[   66.594183][ T5454] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.663: Failed to acquire dquot type 1
[   66.605957][ T5454] EXT4-fs (loop4): 1 orphan inode deleted
[   66.612195][ T5454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   66.628675][ T5454] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   66.648468][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.675173][ T5434] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[   66.681695][ T5434] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   66.689316][ T5434] vhci_hcd vhci_hcd.0: Device attached
[   66.704250][ T5434] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8)
[   66.710888][ T5434] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   66.718584][ T5434] vhci_hcd vhci_hcd.0: Device attached
[   66.720209][ T5461] 8021q: VLANs not supported on wg2
[   66.736260][ T5434] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10)
[   66.741752][ T5469] loop4: detected capacity change from 0 to 512
[   66.742873][ T5434] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   66.742966][ T5434] vhci_hcd vhci_hcd.0: Device attached
[   66.763348][ T5469] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   66.765774][ T5434] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   66.782016][ T5469] EXT4-fs (loop4): 1 truncate cleaned up
[   66.785293][ T5434] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(15)
[   66.789635][ T5469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.794274][ T5434] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   66.794375][ T5434] vhci_hcd vhci_hcd.0: Device attached
[   66.825716][ T5434] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(17)
[   66.832556][ T5434] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   66.840143][ T5434] vhci_hcd vhci_hcd.0: Device attached
[   66.859658][ T5477] vhci_hcd: connection closed
[   66.859974][   T12] vhci_hcd: stop threads
[   66.860061][ T5473] vhci_hcd: connection closed
[   66.864787][   T12] vhci_hcd: release socket
[   66.864804][   T12] vhci_hcd: disconnect device
[   66.865578][ T5466] vhci_hcd: connection closed
[   66.875128][ T5462] vhci_hcd: connection closed
[   66.878496][ T5458] vhci_hcd: connection closed
[   66.886110][   T31] vhci_hcd: stop threads
[   66.901503][   T31] vhci_hcd: release socket
[   66.906026][   T31] vhci_hcd: disconnect device
[   66.911946][   T31] vhci_hcd: stop threads
[   66.916251][   T31] vhci_hcd: release socket
[   66.920736][   T31] vhci_hcd: disconnect device
[   66.920807][ T5483] loop2: detected capacity change from 0 to 512
[   66.926273][   T31] vhci_hcd: stop threads
[   66.933568][ T5483] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   66.936698][   T31] vhci_hcd: release socket
[   66.936712][   T31] vhci_hcd: disconnect device
[   66.953569][ T5483] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[   66.955194][   T31] vhci_hcd: stop threads
[   66.965931][ T5483] System zones: 
[   66.967058][   T31] vhci_hcd: release socket
[   66.967058][ T5483] 0-2, 18-18
[   66.970617][   T31] vhci_hcd: disconnect device
[   66.975059][ T5483] , 34-34
[   66.986842][ T5483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.999639][ T5483] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.029112][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.030491][ T5487] netlink: 100 bytes leftover after parsing attributes in process `syz.0.670'.
[   67.051461][ T5487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.670'.
[   67.060734][ T5487] netem: change failed
[   67.063309][ T5489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'.
[   67.081604][ T5489] bridge0: entered promiscuous mode
[   67.088756][ T5489] bridge0: port 3(macvlan2) entered blocking state
[   67.095405][ T5489] bridge0: port 3(macvlan2) entered disabled state
[   67.102024][ T5489] macvlan2: entered allmulticast mode
[   67.107546][ T5489] bridge0: entered allmulticast mode
[   67.113329][ T5489] macvlan2: left allmulticast mode
[   67.118447][ T5489] bridge0: left allmulticast mode
[   67.124176][ T5489] bridge0: left promiscuous mode
[   67.174422][ T5498] loop0: detected capacity change from 0 to 128
[   67.187827][ T5498] syz.0.673: attempt to access beyond end of device
[   67.187827][ T5498] loop0: rw=0, sector=121, nr_sectors = 98 limit=128
[   67.251335][ T5505] loop2: detected capacity change from 0 to 2048
[   67.264303][ T5505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.289493][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.368477][ T5521] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[   67.375078][ T5521] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   67.382718][ T5521] vhci_hcd vhci_hcd.0: Device attached
[   67.393350][ T5522] vhci_hcd: connection closed
[   67.393577][   T31] vhci_hcd: stop threads
[   67.402663][   T31] vhci_hcd: release socket
[   67.407068][   T31] vhci_hcd: disconnect device
[   67.426772][ T5525] loop1: detected capacity change from 0 to 128
[   67.438904][ T5525] syz.1.683: attempt to access beyond end of device
[   67.438904][ T5525] loop1: rw=0, sector=121, nr_sectors = 98 limit=128
[   67.567387][ T5530] syz.0.684 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   67.590845][ T5465] Process accounting resumed
[   67.599686][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.909300][ T5546] netlink: 'syz.2.691': attribute type 1 has an invalid length.
[   68.424598][ T5556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5556 comm=syz.0.694
[   68.508451][ T5563] FAULT_INJECTION: forcing a failure.
[   68.508451][ T5563] name failslab, interval 1, probability 0, space 0, times 0
[   68.521378][ T5563] CPU: 0 UID: 0 PID: 5563 Comm: syz.1.697 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   68.521440][ T5563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   68.521508][ T5563] Call Trace:
[   68.521514][ T5563]  <TASK>
[   68.521521][ T5563]  __dump_stack+0x1d/0x30
[   68.521539][ T5563]  dump_stack_lvl+0xe8/0x140
[   68.521555][ T5563]  dump_stack+0x15/0x1b
[   68.521569][ T5563]  should_fail_ex+0x265/0x280
[   68.521590][ T5563]  should_failslab+0x8c/0xb0
[   68.521626][ T5563]  kmem_cache_alloc_node_noprof+0x57/0x320
[   68.521666][ T5563]  ? __alloc_skb+0x101/0x320
[   68.521685][ T5563]  __alloc_skb+0x101/0x320
[   68.521719][ T5563]  ? audit_log_start+0x365/0x6c0
[   68.521751][ T5563]  audit_log_start+0x380/0x6c0
[   68.521815][ T5563]  ? __rcu_read_unlock+0x4f/0x70
[   68.521897][ T5563]  audit_log_common_recv_msg+0xbe/0x190
[   68.521916][ T5563]  audit_receive+0x149d/0x2180
[   68.521947][ T5563]  ? __netlink_deliver_tap+0x4f5/0x500
[   68.521974][ T5563]  ? __netlink_lookup+0x266/0x2a0
[   68.522070][ T5563]  netlink_unicast+0x5c0/0x690
[   68.522095][ T5563]  netlink_sendmsg+0x58b/0x6b0
[   68.522119][ T5563]  ? __pfx_netlink_sendmsg+0x10/0x10
[   68.522142][ T5563]  __sock_sendmsg+0x145/0x180
[   68.522220][ T5563]  ____sys_sendmsg+0x31e/0x4e0
[   68.522245][ T5563]  ___sys_sendmsg+0x17b/0x1d0
[   68.522318][ T5563]  __x64_sys_sendmsg+0xd4/0x160
[   68.522349][ T5563]  x64_sys_call+0x191e/0x2ff0
[   68.522371][ T5563]  do_syscall_64+0xd2/0x200
[   68.522426][ T5563]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   68.522483][ T5563]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   68.522508][ T5563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.522583][ T5563] RIP: 0033:0x7face89feec9
[   68.522600][ T5563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.522614][ T5563] RSP: 002b:00007face745f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   68.522636][ T5563] RAX: ffffffffffffffda RBX: 00007face8c55fa0 RCX: 00007face89feec9
[   68.522647][ T5563] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000003
[   68.522660][ T5563] RBP: 00007face745f090 R08: 0000000000000000 R09: 0000000000000000
[   68.522673][ T5563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   68.522763][ T5563] R13: 00007face8c56038 R14: 00007face8c55fa0 R15: 00007fffded8e5a8
[   68.522782][ T5563]  </TASK>
[   68.854575][ T5573] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[   68.861289][ T5573] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   68.868869][ T5573] vhci_hcd vhci_hcd.0: Device attached
[   68.880056][ T5575] vhci_hcd: connection closed
[   68.880110][   T12] vhci_hcd: stop threads
[   68.889142][   T12] vhci_hcd: release socket
[   68.893631][   T12] vhci_hcd: disconnect device
[   68.903448][ T5577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'.
[   68.931015][ T5580] bond0: (slave batadv0): Releasing backup interface
[   68.943645][ T5580] bridge_slave_0: left allmulticast mode
[   68.949333][ T5580] bridge_slave_0: left promiscuous mode
[   68.955187][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.966553][ T5580] bridge_slave_1: left allmulticast mode
[   68.972274][ T5580] bridge_slave_1: left promiscuous mode
[   68.978124][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.990788][ T5580] bond0: (slave bond_slave_0): Releasing backup interface
[   69.000939][ T5580] bond0: (slave bond_slave_1): Releasing backup interface
[   69.017839][ T5580] team0: Port device team_slave_0 removed
[   69.032942][ T5580] team0: Port device team_slave_1 removed
[   69.039435][ T5580] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.047196][ T5580] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.055713][ T5580] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.063290][ T5580] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.081156][ T5590] random: crng reseeded on system resumption
[   69.082065][ T3397] lo speed is unknown, defaulting to 1000
[   69.094805][ T5591] loop1: detected capacity change from 0 to 164
[   69.097896][ T5588] 8021q: VLANs not supported on ip6_vti0
[   69.134910][ T5593] bridge0: entered promiscuous mode
[   69.140339][ T5593] macvtap1: entered allmulticast mode
[   69.146039][ T5593] bridge0: entered allmulticast mode
[   69.153123][ T5593] bridge0: port 3(macvtap1) entered blocking state
[   69.159660][ T5593] bridge0: port 3(macvtap1) entered disabled state
[   69.167946][ T5593] bridge0: left allmulticast mode
[   69.173144][ T5593] bridge0: left promiscuous mode
[   69.184206][   T29] kauditd_printk_skb: 356 callbacks suppressed
[   69.184219][   T29] audit: type=1326 audit(1758638228.892:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face89feec9 code=0x7ffc0000
[   69.184318][ T5597] netlink: 200 bytes leftover after parsing attributes in process `syz.2.710'.
[   69.191591][   T29] audit: type=1326 audit(1758638228.892:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7face89feec9 code=0x7ffc0000
[   69.246089][   T29] audit: type=1326 audit(1758638228.892:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face89feec9 code=0x7ffc0000
[   69.269657][   T29] audit: type=1326 audit(1758638228.892:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7face89feec9 code=0x7ffc0000
[   69.293233][   T29] audit: type=1326 audit(1758638228.892:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face89feec9 code=0x7ffc0000
[   69.316893][   T29] audit: type=1326 audit(1758638228.892:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7face89feec9 code=0x7ffc0000
[   69.341917][   T29] audit: type=1326 audit(1758638229.052:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face89feec9 code=0x7ffc0000
[   69.365349][   T29] audit: type=1326 audit(1758638229.052:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5594 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face89feec9 code=0x7ffc0000
[   69.407268][ T5605] sg_write: data in/out 124/84 bytes for SCSI command 0x67-- guessing data in;
[   69.407268][ T5605]    program syz.0.711 not setting count and/or reply_len properly
[   69.418016][ T5595] mmap: syz.1.709 (5595) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   69.486059][ T5612] futex_wake_op: syz.5.713 tries to shift op by 32; fix this program
[   69.499175][   T29] audit: type=1400 audit(1758638229.052:3750): avc:  denied  { create } for  pid=5601 comm="syz.0.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   69.518665][   T29] audit: type=1400 audit(1758638229.052:3751): avc:  denied  { setopt } for  pid=5601 comm="syz.0.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   69.554065][ T5612] loop5: detected capacity change from 0 to 128
[   69.636312][ T5616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.647036][ T5616] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.682933][ T5626] loop2: detected capacity change from 0 to 1024
[   69.692103][ T5629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5629 comm=syz.5.720
[   69.692194][ T5626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.722060][ T5629] netlink: 96 bytes leftover after parsing attributes in process `+}[@'.
[   69.723463][ T5629] netlink: 12 bytes leftover after parsing attributes in process `+}[@'.
[   69.804847][ T5639] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[   69.811477][ T5639] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   69.819087][ T5639] vhci_hcd vhci_hcd.0: Device attached
[   69.841782][ T5641] vhci_hcd: connection closed
[   69.841982][   T31] vhci_hcd: stop threads
[   69.851217][   T31] vhci_hcd: release socket
[   69.855682][   T31] vhci_hcd: disconnect device
[   69.895481][ T2958] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4
[   69.903210][ T2958] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2
[   69.911096][ T2958] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3
[   69.931668][ T2958] hid-generic 0000:3000000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[   70.026272][ T5654] loop5: detected capacity change from 0 to 1024
[   70.033384][ T5654] EXT4-fs (loop5): unsupported descriptor size 35
[   70.052908][ T5654] lo speed is unknown, defaulting to 1000
[   70.368568][ T5677] loop4: detected capacity change from 0 to 512
[   70.376006][ T5677] EXT4-fs: Ignoring removed bh option
[   70.381631][ T5677] EXT4-fs: Ignoring removed mblk_io_submit option
[   70.388893][ T5677] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   70.399701][ T5677] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   70.408090][ T5677] EXT4-fs (loop4): orphan cleanup on readonly fs
[   70.414990][ T5677] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.736: Failed to acquire dquot type 1
[   70.427089][ T5677] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.736: Invalid block bitmap block 0 in block_group 0
[   70.440781][ T5677] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.736: Invalid block bitmap block 0 in block_group 0
[   70.454902][ T5677] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.736: Invalid block bitmap block 0 in block_group 0
[   70.468849][ T5677] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.736: Failed to acquire dquot type 1
[   70.480565][ T5677] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.736: Failed to acquire dquot type 1
[   70.493390][ T5677] EXT4-fs (loop4): 1 orphan inode deleted
[   70.499692][ T5677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   70.544927][ T5677] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   70.564888][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.574998][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.641313][ T5686] loop4: detected capacity change from 0 to 256
[   71.198271][ T5751] loop1: detected capacity change from 0 to 128
[   71.208939][ T5751] FAULT_INJECTION: forcing a failure.
[   71.208939][ T5751] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   71.222110][ T5751] CPU: 0 UID: 0 PID: 5751 Comm: syz.1.742 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   71.222132][ T5751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   71.222175][ T5751] Call Trace:
[   71.222182][ T5751]  <TASK>
[   71.222190][ T5751]  __dump_stack+0x1d/0x30
[   71.222213][ T5751]  dump_stack_lvl+0xe8/0x140
[   71.222232][ T5751]  dump_stack+0x15/0x1b
[   71.222246][ T5751]  should_fail_ex+0x265/0x280
[   71.222266][ T5751]  should_fail+0xb/0x20
[   71.222307][ T5751]  should_fail_usercopy+0x1a/0x20
[   71.222327][ T5751]  _copy_to_user+0x20/0xa0
[   71.222353][ T5751]  simple_read_from_buffer+0xb5/0x130
[   71.222376][ T5751]  proc_fail_nth_read+0x10e/0x150
[   71.222443][ T5751]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   71.222525][ T5751]  vfs_read+0x1a5/0x770
[   71.222543][ T5751]  ? __rcu_read_unlock+0x4f/0x70
[   71.222560][ T5751]  ? __fget_files+0x184/0x1c0
[   71.222581][ T5751]  ksys_read+0xda/0x1a0
[   71.222672][ T5751]  __x64_sys_read+0x40/0x50
[   71.222689][ T5751]  x64_sys_call+0x27bc/0x2ff0
[   71.222706][ T5751]  do_syscall_64+0xd2/0x200
[   71.222731][ T5751]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   71.222814][ T5751]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   71.222859][ T5751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.222881][ T5751] RIP: 0033:0x7face89fd8dc
[   71.222896][ T5751] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   71.222914][ T5751] RSP: 002b:00007face745f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   71.222932][ T5751] RAX: ffffffffffffffda RBX: 00007face8c55fa0 RCX: 00007face89fd8dc
[   71.222942][ T5751] RDX: 000000000000000f RSI: 00007face745f0a0 RDI: 0000000000000007
[   71.222953][ T5751] RBP: 00007face745f090 R08: 0000000000000000 R09: 0000000000000000
[   71.222974][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   71.222983][ T5751] R13: 00007face8c56038 R14: 00007face8c55fa0 R15: 00007fffded8e5a8
[   71.222997][ T5751]  </TASK>
[   71.423910][ T5749] loop0: detected capacity change from 0 to 128
[   71.581291][ T5766] loop0: detected capacity change from 0 to 512
[   71.605849][ T5763] loop2: detected capacity change from 0 to 2048
[   71.612865][ T5766] EXT4-fs: Ignoring removed bh option
[   71.618430][ T5766] EXT4-fs: Ignoring removed mblk_io_submit option
[   71.625515][ T5763] EXT4-fs: Ignoring removed oldalloc option
[   71.631538][ T5763] ext4: Unknown parameter 'noacl'
[   71.647154][ T5766] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   71.664978][ T5766] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   71.678981][ T5770] loop1: detected capacity change from 0 to 512
[   71.705507][ T5766] EXT4-fs (loop0): orphan cleanup on readonly fs
[   71.716512][ T5766] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.748: Failed to acquire dquot type 1
[   71.733094][ T5772] siw: device registration error -23
[   71.742692][ T5770] EXT4-fs: Ignoring removed bh option
[   71.753518][ T5766] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.748: Invalid block bitmap block 0 in block_group 0
[   71.768645][ T5770] EXT4-fs: Ignoring removed mblk_io_submit option
[   71.784415][ T5770] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   71.796008][ T5766] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.748: Invalid block bitmap block 0 in block_group 0
[   71.796167][ T5770] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   71.817730][ T5770] EXT4-fs (loop1): orphan cleanup on readonly fs
[   71.818550][ T5770] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.749: Failed to acquire dquot type 1
[   71.818832][ T5766] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.748: Invalid block bitmap block 0 in block_group 0
[   71.818977][ T5770] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.749: Invalid block bitmap block 0 in block_group 0
[   71.819221][ T5766] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.748: Failed to acquire dquot type 1
[   71.819309][ T5770] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.749: Invalid block bitmap block 0 in block_group 0
[   71.819664][ T5766] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.748: Failed to acquire dquot type 1
[   71.819843][ T5770] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.749: Invalid block bitmap block 0 in block_group 0
[   71.820008][ T5766] EXT4-fs (loop0): 1 orphan inode deleted
[   71.820061][ T5770] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.749: Failed to acquire dquot type 1
[   71.826425][ T5770] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.749: Failed to acquire dquot type 1
[   71.828082][ T5766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   71.864753][ T5770] EXT4-fs (loop1): 1 orphan inode deleted
[   71.932144][ T5778] loop4: detected capacity change from 0 to 512
[   71.943832][ T5770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   71.955235][ T5778] EXT4-fs: Ignoring removed bh option
[   71.985289][ T5778] EXT4-fs: Ignoring removed mblk_io_submit option
[   71.985352][ T5770] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   71.992091][ T5766] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   72.008838][ T5778] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   72.027846][ T5778] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   72.036361][ T5778] EXT4-fs (loop4): orphan cleanup on readonly fs
[   72.043771][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.054328][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.057057][ T5778] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.752: Failed to acquire dquot type 1
[   72.075917][ T5778] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.752: Invalid block bitmap block 0 in block_group 0
[   72.092924][ T5778] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.752: Invalid block bitmap block 0 in block_group 0
[   72.111531][ T5781] FAULT_INJECTION: forcing a failure.
[   72.111531][ T5781] name failslab, interval 1, probability 0, space 0, times 0
[   72.124188][ T5781] CPU: 0 UID: 0 PID: 5781 Comm: syz.2.754 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   72.124213][ T5781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   72.124223][ T5781] Call Trace:
[   72.124235][ T5781]  <TASK>
[   72.124242][ T5781]  __dump_stack+0x1d/0x30
[   72.124300][ T5781]  dump_stack_lvl+0xe8/0x140
[   72.124319][ T5781]  dump_stack+0x15/0x1b
[   72.124333][ T5781]  should_fail_ex+0x265/0x280
[   72.124415][ T5781]  ? register_vlan_dev+0x20c/0x480
[   72.124434][ T5781]  should_failslab+0x8c/0xb0
[   72.124456][ T5781]  __kmalloc_cache_noprof+0x4c/0x320
[   72.124487][ T5781]  register_vlan_dev+0x20c/0x480
[   72.124589][ T5781]  vlan_newlink+0x32a/0x370
[   72.124612][ T5781]  ? __pfx_vlan_newlink+0x10/0x10
[   72.124673][ T5781]  rtnl_newlink_create+0x1b9/0x620
[   72.124693][ T5781]  ? security_capable+0x83/0x90
[   72.124714][ T5781]  ? netlink_ns_capable+0x86/0xa0
[   72.124792][ T5781]  rtnl_newlink+0xf29/0x12d0
[   72.124825][ T5781]  ? __sock_queue_rcv_skb+0x49a/0x5b0
[   72.124842][ T5781]  ? __copy_skb_header+0x268/0x2f0
[   72.124862][ T5781]  ? __memcg_slab_free_hook+0x135/0x230
[   72.124925][ T5781]  ? __rcu_read_unlock+0x4f/0x70
[   72.124943][ T5781]  ? avc_has_perm_noaudit+0x1b1/0x200
[   72.124964][ T5781]  ? cred_has_capability+0x210/0x280
[   72.124990][ T5781]  ? selinux_capable+0x31/0x40
[   72.125068][ T5781]  ? security_capable+0x83/0x90
[   72.125092][ T5781]  ? ns_capable+0x7d/0xb0
[   72.125111][ T5781]  ? __pfx_rtnl_newlink+0x10/0x10
[   72.125136][ T5781]  rtnetlink_rcv_msg+0x5fb/0x6d0
[   72.125232][ T5781]  netlink_rcv_skb+0x120/0x220
[   72.125257][ T5781]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   72.125365][ T5781]  rtnetlink_rcv+0x1c/0x30
[   72.125394][ T5781]  netlink_unicast+0x5c0/0x690
[   72.125416][ T5781]  netlink_sendmsg+0x58b/0x6b0
[   72.125439][ T5781]  ? __pfx_netlink_sendmsg+0x10/0x10
[   72.125462][ T5781]  __sock_sendmsg+0x145/0x180
[   72.125568][ T5781]  ____sys_sendmsg+0x31e/0x4e0
[   72.125631][ T5781]  ___sys_sendmsg+0x17b/0x1d0
[   72.125697][ T5781]  __x64_sys_sendmsg+0xd4/0x160
[   72.125790][ T5781]  x64_sys_call+0x191e/0x2ff0
[   72.125865][ T5781]  do_syscall_64+0xd2/0x200
[   72.125896][ T5781]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   72.125920][ T5781]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   72.126010][ T5781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.126033][ T5781] RIP: 0033:0x7fa55921eec9
[   72.126048][ T5781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   72.126066][ T5781] RSP: 002b:00007fa557c7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   72.126083][ T5781] RAX: ffffffffffffffda RBX: 00007fa559475fa0 RCX: 00007fa55921eec9
[   72.126093][ T5781] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000012
[   72.126147][ T5781] RBP: 00007fa557c7f090 R08: 0000000000000000 R09: 0000000000000000
[   72.126160][ T5781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   72.126239][ T5781] R13: 00007fa559476038 R14: 00007fa559475fa0 R15: 00007ffeeddfc878
[   72.126256][ T5781]  </TASK>
[   72.128567][ T5778] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.752: Invalid block bitmap block 0 in block_group 0
[   72.129979][ T5786] netlink: 'syz.0.755': attribute type 3 has an invalid length.
[   72.148833][ T5778] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.752: Failed to acquire dquot type 1
[   72.151753][ T5786] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.755'.
[   72.156689][ T5778] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.752: Failed to acquire dquot type 1
[   72.179817][ T5787] netlink: 'syz.0.755': attribute type 3 has an invalid length.
[   72.183806][ T5785] netlink: 132 bytes leftover after parsing attributes in process `syz.1.753'.
[   72.187797][ T5787] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.755'.
[   72.211077][ T5778] EXT4-fs (loop4): 1 orphan inode deleted
[   72.526534][ T5778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   72.579619][ T5778] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   72.598635][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.638801][ T5808] loop1: detected capacity change from 0 to 512
[   72.649662][ T5808] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   72.664666][ T5808] EXT4-fs (loop1): 1 truncate cleaned up
[   72.683141][ T5808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.741044][ T5814] loop2: detected capacity change from 0 to 512
[   72.769089][ T5814] EXT4-fs (loop2): orphan cleanup on readonly fs
[   72.796271][ T5814] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.765: bad orphan inode 13
[   72.829677][ T5814] ext4_test_bit(bit=12, block=18) = 1
[   72.835132][ T5814] is_bad_inode(inode)=0
[   72.839387][ T5814] NEXT_ORPHAN(inode)=2130706432
[   72.844455][ T5814] max_ino=32
[   72.847657][ T5814] i_nlink=1
[   72.852604][ T5814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   72.866623][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.891378][ T5817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.766'.
[   73.072871][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.091065][ T5833] netdevsim netdevsim1: Direct firmware load for @ failed with error -2
[   73.115982][ T5837] loop5: detected capacity change from 0 to 512
[   73.153687][ T5837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.185206][ T5837] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   73.186888][ T5854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55312 sclass=netlink_route_socket pid=5854 comm=syz.4.770
[   73.213947][ T5837] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.772: corrupted inode contents
[   73.226892][ T5837] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.772: mark_inode_dirty error
[   73.247392][ T5837] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.772: corrupted inode contents
[   73.278936][ T5289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.304097][ T5863] tipc: Started in network mode
[   73.309127][ T5863] tipc: Node identity ac14140f, cluster identity 4711
[   73.320884][ T5863] tipc: New replicast peer: 255.255.255.83
[   73.326908][ T5863] tipc: Enabled bearer <udp:£ >, priority 10
[   73.518118][ T5890] syz_tun: entered allmulticast mode
[   73.526569][ T5888] syz_tun: left allmulticast mode
[   73.556854][ T5894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.582593][ T5894] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.614645][ T5896] netlink: 272 bytes leftover after parsing attributes in process `syz.0.780'.
[   73.643215][ T5906] FAULT_INJECTION: forcing a failure.
[   73.643215][ T5906] name failslab, interval 1, probability 0, space 0, times 0
[   73.655990][ T5906] CPU: 0 UID: 0 PID: 5906 Comm: syz.5.781 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   73.656077][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   73.656088][ T5906] Call Trace:
[   73.656094][ T5906]  <TASK>
[   73.656102][ T5906]  __dump_stack+0x1d/0x30
[   73.656123][ T5906]  dump_stack_lvl+0xe8/0x140
[   73.656142][ T5906]  dump_stack+0x15/0x1b
[   73.656158][ T5906]  should_fail_ex+0x265/0x280
[   73.656250][ T5906]  should_failslab+0x8c/0xb0
[   73.656275][ T5906]  __kvmalloc_node_noprof+0x123/0x4e0
[   73.656305][ T5906]  ? alloc_fdtable+0xbd/0x1d0
[   73.656323][ T5906]  ? __kmalloc_cache_noprof+0x22e/0x320
[   73.656374][ T5906]  alloc_fdtable+0xbd/0x1d0
[   73.656392][ T5906]  dup_fd+0x4c7/0x540
[   73.656412][ T5906]  copy_files+0x98/0xf0
[   73.656481][ T5906]  copy_process+0xc5b/0x2000
[   73.656507][ T5906]  kernel_clone+0x16c/0x5c0
[   73.656528][ T5906]  ? vfs_write+0x7e8/0x960
[   73.656549][ T5906]  __x64_sys_clone+0xe6/0x120
[   73.656605][ T5906]  x64_sys_call+0x119c/0x2ff0
[   73.656670][ T5906]  do_syscall_64+0xd2/0x200
[   73.656700][ T5906]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   73.656725][ T5906]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   73.656754][ T5906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.656793][ T5906] RIP: 0033:0x7f46ba11eec9
[   73.656809][ T5906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   73.656823][ T5906] RSP: 002b:00007f46b8b7efe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[   73.656839][ T5906] RAX: ffffffffffffffda RBX: 00007f46ba375fa0 RCX: 00007f46ba11eec9
[   73.656850][ T5906] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060002080
[   73.656861][ T5906] RBP: 00007f46b8b7f090 R08: 0000000000000000 R09: 0000000000000000
[   73.656873][ T5906] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[   73.656956][ T5906] R13: 00007f46ba376038 R14: 00007f46ba375fa0 R15: 00007ffe8e9fe378
[   73.656987][ T5906]  </TASK>
[   74.380727][ T6016] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[   74.391598][ T5973] ==================================================================
[   74.399687][ T5973] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu
[   74.403942][   T29] kauditd_printk_skb: 379 callbacks suppressed
[   74.403956][   T29] audit: type=1400 audit(74.357:4107): avc:  denied  { append } for  pid=6015 comm="syz.2.789" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   74.406718][ T5973] 
[   74.406726][ T5973] write to 0xffff888237c1b260 of 8 bytes by interrupt on cpu 0:
[   74.445065][ T5973]  hrtimer_interrupt+0x193/0x460
[   74.450434][ T5973]  __sysvec_apic_timer_interrupt+0x5c/0x1d0
[   74.456440][ T5973]  sysvec_apic_timer_interrupt+0x6f/0x80
[   74.462172][ T5973]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   74.468238][ T5973]  native_apic_msr_write+0x3d/0x60
[   74.473359][ T5973]  x2apic_send_IPI_self+0x10/0x20
[   74.478379][ T5973]  arch_irq_work_raise+0x46/0x50
[   74.483314][ T5973]  __irq_work_queue_local+0x10f/0x2c0
[   74.488681][ T5973]  irq_work_queue+0x70/0x100
[   74.493266][ T5973]  bpf_send_signal_common+0x280/0x300
[   74.498630][ T5973]  bpf_send_signal+0x1d/0x30
[   74.503211][ T5973]  bpf_prog_9fbc3d1d47c9b36c+0x23/0x2e
[   74.508671][ T5973]  bpf_trace_run2+0x104/0x1c0
[   74.513358][ T5973]  __traceiter_kfree+0x2e/0x50
[   74.518133][ T5973]  kfree+0x27b/0x320
[   74.522128][ T5973]  hash_ipport4_resize+0xa9b/0xb50
[   74.527516][ T5973]  call_ad+0x2bb/0x630
[   74.531588][ T5973]  ip_set_ad+0x5c0/0x690
[   74.535821][ T5973]  ip_set_uadd+0x41/0x50
[   74.540056][ T5973]  nfnetlink_rcv_msg+0x4c6/0x590
[   74.544982][ T5973]  netlink_rcv_skb+0x120/0x220
[   74.549735][ T5973]  nfnetlink_rcv+0x16b/0x1690
[   74.554411][ T5973]  netlink_unicast+0x5c0/0x690
[   74.559163][ T5973]  netlink_sendmsg+0x58b/0x6b0
[   74.563923][ T5973]  __sock_sendmsg+0x145/0x180
[   74.568614][ T5973]  ____sys_sendmsg+0x31e/0x4e0
[   74.573387][ T5973]  ___sys_sendmsg+0x17b/0x1d0
[   74.578111][ T5973]  __x64_sys_sendmsg+0xd4/0x160
[   74.583073][ T5973]  x64_sys_call+0x191e/0x2ff0
[   74.587789][ T5973]  do_syscall_64+0xd2/0x200
[   74.592479][ T5973]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.598375][ T5973] 
[   74.600684][ T5973] read to 0xffff888237c1b260 of 8 bytes by task 5973 on cpu 1:
[   74.608226][ T5973]  print_cpu+0x30b/0x680
[   74.612479][ T5973]  timer_list_show+0x107/0x170
[   74.617318][ T5973]  seq_read_iter+0x62a/0x940
[   74.621995][ T5973]  proc_reg_read_iter+0x110/0x180
[   74.627027][ T5973]  copy_splice_read+0x43f/0x660
[   74.631889][ T5973]  splice_direct_to_actor+0x26c/0x680
[   74.637263][ T5973]  do_splice_direct+0xda/0x150
[   74.642014][ T5973]  do_sendfile+0x380/0x650
[   74.646430][ T5973]  __x64_sys_sendfile64+0x105/0x150
[   74.652132][ T5973]  x64_sys_call+0x2bb0/0x2ff0
[   74.656799][ T5973]  do_syscall_64+0xd2/0x200
[   74.661933][ T5973]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.667818][ T5973] 
[   74.670140][ T5973] value changed: 0x0000001150c1865a -> 0x0000001150c240bc
[   74.677317][ T5973] 
[   74.679622][ T5973] Reported by Kernel Concurrency Sanitizer on:
[   74.685843][ T5973] CPU: 1 UID: 0 PID: 5973 Comm: syz.5.786 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   74.695460][ T5973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   74.705510][ T5973] ==================================================================
[   74.726548][ T2958] tipc: Node number set to 2886997007