last executing test programs:

12.213896294s ago: executing program 4 (id=747):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x2f00, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1)
personality(0x500006)
mmap(&(0x7f000073f000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0xdb602000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000020f00000005002f000000000008000300", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x13, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @generic={0x0, 0xf, 0xf, 0x7ff, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000140)='GPL\x00', 0x7, 0xa6, &(0x7f0000000180)=""/166, 0x40f00, 0x6, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000280)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

12.121843935s ago: executing program 4 (id=749):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000480)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}, {0x6, 0x12, 0x3, 0xa6}]})
mkdir(0x0, 0x0)
mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=<r0=>0x0])
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRES8=r0, @ANYRESOCT=0x0, @ANYRES32=r0, @ANYRESOCT, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80)
r5 = epoll_create1(0x0)
r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="110000000000000084"], 0x14)
r7 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000007680)={'ip6tnl0\x00', &(0x7f0000007640)=@ethtool_sset_info={0x37, 0x5, 0xfffffffffffff079}})
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE(r8, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x120)
write$UHID_DESTROY(r8, &(0x7f0000000080), 0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2, 0xd7, 0x8c, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}})
linkat(r6, &(0x7f0000000440)='./file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1400)

11.911416439s ago: executing program 4 (id=754):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}}, 0x0)

11.89570439s ago: executing program 4 (id=755):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
pidfd_getfd(r1, r0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
kexec_load(0x3e00, 0x0, 0x0, 0x0)

11.85565011s ago: executing program 4 (id=758):
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'})

10.183165453s ago: executing program 4 (id=797):
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

10.168701414s ago: executing program 32 (id=797):
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

2.271701476s ago: executing program 1 (id=952):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBDIACR(r2, 0x4b4a, 0x0)

2.202186337s ago: executing program 1 (id=954):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000018feffff7203f0fff8ffffff61a4f0ff000000004e040000000000002d400200000000004704000001ed00007b330000000000001d440200000000007a0a00fe00ffffffdb03000051000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062bc54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687e5b3a70bfe9b4a9c5ad0ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe0296e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b0800000000000000f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d877acb906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a0000000000000080c64affa54fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c90000000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771cf6f281aa72139ee37d2eac953fc48a981e2200653e6b68a214c8a31b899e4e940ce8309faffbcbaebf9985146cb086a76e39056570501e07be91a3ec708455b964b66dfa3123fa6b324d43a2edbaff04eb25dce61b2c12f0451a6de7f92ff51f44a69dedb7361a02b47dcd6cf5ad509daf6afc19e5c1ac0121b5e7b739c25f87deabfb57679bfe4a3bf5abf271410c601ecd2022b19ee313b3166bbdde861be3a9a80e527ae9153a5d90e3f275c2273186fae42275a70b6bf1c9acbce1ada05e8aa1375e37445e8db286851840fa3306e8e68c2e4248b2556ae0473449919ff29d58105ac4b9846ced5c85c0613b912aa3befdad5285cf8e45254af9f4de4243e537ae30f358901b564f08e392a4a314beb31022971d638182290ec98ee936bc729f008b8d282b04bc9e0ca2837"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000800)='kfree\x00', r0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
syz_usbip_server_init(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

2.199377798s ago: executing program 2 (id=955):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_free\x00', r1}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0})

2.162958738s ago: executing program 5 (id=957):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000300)=r1}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1d}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x8, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x6a44, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}, {0x0, 0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

2.143334499s ago: executing program 3 (id=959):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring)
ftruncate(0xffffffffffffffff, 0xc17a)
syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[], 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]})
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f00000002c0)={0x2, 0x4622, @local}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x2}}], 0x30, 0x24000004}, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x6}, 0x18)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBTYPE(r7, 0x4b48, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfe8e, 0x12)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)=0x1)

2.105631849s ago: executing program 5 (id=961):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'erspan0\x00', &(0x7f0000000c00)={'sit0\x00', <r3=>0x0, 0x80, 0x8, 0xa, 0x8, {{0x15, 0x4, 0x3, 0x4, 0x54, 0x65, 0x0, 0x3, 0x4, 0x0, @empty, @broadcast, {[@generic={0x44, 0x12, "ce4381722b4670dd3bcc26175a61cf69"}, @noop, @rr={0x7, 0x7, 0x6, [@local]}, @rr={0x7, 0x23, 0x9c, [@loopback, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x41}, @broadcast, @empty, @remote, @multicast2, @remote]}]}}}}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r4, 0x5)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r5, 0x1)
flock(r5, 0x2)
dup3(r5, r4, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x39, 0x2b, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbb}}, @generic={0x2, 0x6, 0xe, 0x9, 0x200}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x4c, &(0x7f0000000b80)=""/76, 0x41000, 0x47, '\x00', r3, 0x0, r5, 0x8, &(0x7f0000000980)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000c80)={0x3, 0x4, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000cc0)=[r6, r0, r0, r0], &(0x7f0000000d40)=[{0x5, 0x2, 0x0, 0x9}], 0x10, 0x8}, 0x94)
open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x100)

2.047072311s ago: executing program 0 (id=962):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x8082, 0x4)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'batadv0\x00'}}, 0x1e)

2.046731691s ago: executing program 0 (id=963):
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffffffffffff}}, './file0\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa06"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)

2.045585971s ago: executing program 0 (id=964):
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x6a, 0x0, 0x0, 0x7, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xb, 0xffffffffffffffff, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='svcsock_marker\x00', r1}, 0x67)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r2, 0x5607, 0xe)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1)
mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r5, 0x0, 0x200000000000006}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
select(0x40, &(0x7f0000000100)={0x3, 0x7, 0x4, 0x1, 0xffffffff, 0x7, 0x401, 0x9}, &(0x7f0000000140)={0xe01, 0x5, 0xfe, 0xfff, 0xa00000000, 0x1, 0x3, 0x4c80}, &(0x7f0000000400)={0x3, 0xf336, 0x3, 0x7, 0x2, 0x8d9, 0xfffffffffffffffc, 0x2}, &(0x7f00000001c0))

2.029423831s ago: executing program 5 (id=965):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
setrlimit(0x9, &(0x7f0000000400)={0x0, 0x7})
io_setup(0x2004, &(0x7f0000000680))

2.007133212s ago: executing program 5 (id=966):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000480)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}, {0x6, 0x12, 0x3, 0xa6}]})
mkdir(0x0, 0x0)
mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=<r0=>0x0])
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRES8=r0, @ANYRESOCT=0x0, @ANYRES32=r0, @ANYRESOCT, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80)
linkat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x1400)

1.986306982s ago: executing program 5 (id=967):
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=<r0=>0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc, 0x2, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$rds(0x15, 0x5, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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")
removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00')
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_int(r1, 0x1, 0x2f, 0x0, &(0x7f0000000200)=0x23)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4)

1.955963882s ago: executing program 2 (id=968):
close(0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="dc000000000301"], 0xdc}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd')
r1 = socket(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r1, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write(r1, &(0x7f0000000980)="a9", 0x1)

1.653315358s ago: executing program 1 (id=969):
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYRES64, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @local}, 0xc)
socket$inet(0x2, 0x3, 0x2)
r4 = socket$igmp(0x2, 0x3, 0x2)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10)
syz_emit_ethernet(0x36, &(0x7f00000006c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xffffff}}}}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000002c0001800b0001007470726f787900001c00028008000240000000110800034000fdff1008000140000000020900010073797a30"], 0x100}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@init_itable_val={'init_itable', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
socket$nl_route(0x10, 0x3, 0x0)
lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r9}, 0x10)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
renameat2(r7, &(0x7f0000000480)='./file0\x00', r7, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4)

1.600718029s ago: executing program 1 (id=970):
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffffffffffff}}, './file0\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa06"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x101, 0x7ff, 0x8})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
writev(r2, &(0x7f0000000800)=[{&(0x7f00000005c0)="98ecda81e1a4febe6111d5ea91823f50e9bf54c1f4609313ec56923ac625f0a878b395904001cb13e88ab4d531cac3312c57533d11de1db68ed40fafa82f3f9c97d0e86a1bb70c2ff43bf5e9def2c8946f03a82b3c2dce63f6c94f6a9da1b93d495532f9e695426d93e5e673d9d7c2a00a4a0643646fc77007e0a006017c06920e0eb538eb7f6c2ba8", 0x89}, {&(0x7f0000001600)="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", 0xf78}], 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, <r4=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x3c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xb42}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040001}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x2}, 0x18)
socket$unix(0x1, 0x2, 0x0)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
connect$can_bcm(r9, 0x0, 0x0)

1.59431148s ago: executing program 3 (id=971):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})

1.388100284s ago: executing program 3 (id=972):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x10c000)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) (fail_nth: 5)

1.144074918s ago: executing program 3 (id=973):
socket$key(0xf, 0x3, 0x2) (async)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001090000000000000002000100000000008000070c0000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fb, 0x82)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000280)={'ip_vti0\x00', <r5=>0x0, 0x20, 0x10, 0xa, 0x81, {{0x23, 0x4, 0x1, 0x25, 0x8c, 0x66, 0x0, 0x9, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010101, {[@end, @rr={0x7, 0x2b, 0x6b, [@dev={0xac, 0x14, 0x14, 0x2b}, @rand_addr=0x64010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x17}, @empty, @remote, @rand_addr=0x64010102, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x81, 0x3, 0x8, [{@multicast2, 0xffff0d13}, {@rand_addr=0x64010100, 0xfffffff9}, {@rand_addr=0x64010102, 0x4}]}, @rr={0x7, 0x27, 0xcd, [@broadcast, @loopback, @multicast2, @broadcast, @private=0xa010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast2, @private=0xa010101]}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x58, r4, 0x1300, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x29}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x58, r4, 0x1300, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x29}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r6 = dup(r3)
ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x20ec, 0x0, 0x100000, 0x0})

1.113452629s ago: executing program 2 (id=974):
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffffffffffff}}, './file0\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa06"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)

964.523112ms ago: executing program 2 (id=975):
syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x0, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (fail_nth: 10)

612.647679ms ago: executing program 0 (id=976):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
setrlimit(0x9, &(0x7f0000000400)={0x0, 0x7})
io_setup(0x2004, &(0x7f0000000680))

579.851729ms ago: executing program 2 (id=977):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00", 0x2c}], 0x1, 0x0, 0x0, 0x39c}, 0x0)

551.31258ms ago: executing program 1 (id=978):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_free\x00', r1}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0})

549.98173ms ago: executing program 0 (id=979):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r2, 0x0, 0xd0, 0x0, &(0x7f0000000280))
r3 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
socket(0x2a, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)
r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_context(r6, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

513.557101ms ago: executing program 2 (id=980):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
sendfile(r1, r1, 0x0, 0x40000f63c)

194.312457ms ago: executing program 1 (id=981):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
syz_open_dev$evdev(0x0, 0x3, 0x40)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
read$usbmon(0xffffffffffffffff, &(0x7f00000004c0)=""/74, 0x4a)
r0 = inotify_init()
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000008000000000001900000000000000000000005749850c71c310c543a55cac7f348af30d4db329a621ff6c6a97dd7cc5c77a4664b184990bb663a83ce89e8ba69d8e00000000000004014d"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
r3 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0xfffc, 0x103, @empty, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @private1, 0xd}, 0x1000, {[0x9, 0xdaa, 0x7fff, 0x1, 0x3, 0x1, 0x6d2e, 0xc33]}}, 0x5c)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdir(&(0x7f0000000180)='./file0\x00', 0xffa1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

135.065568ms ago: executing program 3 (id=982):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBDIACR(r2, 0x4b4a, 0x0)

88.736089ms ago: executing program 5 (id=983):
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, 0x0)

51.07364ms ago: executing program 3 (id=984):
close(0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="dc000000000301"], 0xdc}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd')
r1 = socket(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r1, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write(r1, &(0x7f0000000980)="a9", 0x1)

0s ago: executing program 0 (id=985):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x2)

kernel console output (not intermixed with test programs):

_r:sysadm_t pid=4089 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0726cec29 code=0x7ffc0000
[   57.274587][ T4089] uprobe: syz.2.215:4089 failed to unregister, leaking uprobe
[   57.301706][ T4059] loop4: detected capacity change from 0 to 1024
[   57.324022][ T4059] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.205: Failed to acquire dquot type 0
[   57.338072][ T4059] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   57.353564][ T4059] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.205: corrupted inode contents
[   57.366291][ T4059] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.205: mark_inode_dirty error
[   57.381589][ T4059] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.205: corrupted inode contents
[   57.412621][ T4059] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.205: mark_inode_dirty error
[   57.431052][ T4059] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.205: corrupted inode contents
[   57.443899][ T4059] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[   57.454176][ T4059] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.205: corrupted inode contents
[   57.466671][ T4059] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.205: mark_inode_dirty error
[   57.481688][ T4059] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[   57.503083][ T4059] EXT4-fs (loop4): 1 truncate cleaned up
[   57.525850][ T4059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.570197][ T4059] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.205: Failed to acquire dquot type 0
[   57.638102][ T4059] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   57.712171][ T4112] pim6reg1: entered promiscuous mode
[   57.714954][ T4113] FAULT_INJECTION: forcing a failure.
[   57.714954][ T4113] name failslab, interval 1, probability 0, space 0, times 0
[   57.717947][ T4112] pim6reg1: entered allmulticast mode
[   57.730539][ T4113] CPU: 1 UID: 0 PID: 4113 Comm: syz.0.225 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   57.730574][ T4113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   57.730591][ T4113] Call Trace:
[   57.730600][ T4113]  <TASK>
[   57.730612][ T4113]  __dump_stack+0x1d/0x30
[   57.730641][ T4113]  dump_stack_lvl+0xe8/0x140
[   57.730813][ T4113]  dump_stack+0x15/0x1b
[   57.730835][ T4113]  should_fail_ex+0x265/0x280
[   57.730909][ T4113]  should_failslab+0x8c/0xb0
[   57.730944][ T4113]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[   57.730989][ T4113]  ? sidtab_sid2str_get+0xa0/0x130
[   57.731024][ T4113]  kmemdup_noprof+0x2b/0x70
[   57.731108][ T4113]  sidtab_sid2str_get+0xa0/0x130
[   57.731188][ T4113]  security_sid_to_context_core+0x1eb/0x2e0
[   57.731220][ T4113]  security_sid_to_context+0x27/0x40
[   57.731261][ T4113]  selinux_lsmprop_to_secctx+0x67/0xf0
[   57.731292][ T4113]  security_lsmprop_to_secctx+0x43/0x80
[   57.731400][ T4113]  audit_log_task_context+0x77/0x190
[   57.731448][ T4113]  audit_log_task+0xf4/0x250
[   57.731560][ T4113]  audit_seccomp+0x61/0x100
[   57.731595][ T4113]  ? __seccomp_filter+0x68c/0x10d0
[   57.731659][ T4113]  __seccomp_filter+0x69d/0x10d0
[   57.731692][ T4113]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   57.731731][ T4113]  ? vfs_write+0x7e8/0x960
[   57.731762][ T4113]  ? __rcu_read_unlock+0x4f/0x70
[   57.731793][ T4113]  ? __fget_files+0x184/0x1c0
[   57.731877][ T4113]  __secure_computing+0x82/0x150
[   57.731908][ T4113]  syscall_trace_enter+0xcf/0x1e0
[   57.731941][ T4113]  do_syscall_64+0xac/0x200
[   57.732066][ T4113]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   57.732108][ T4113]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   57.732150][ T4113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.732257][ T4113] RIP: 0033:0x7f6f9f74ec29
[   57.732278][ T4113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   57.732378][ T4113] RSP: 002b:00007f6f9e1af038 EFLAGS: 00000246 ORIG_RAX: 000000000000000e
[   57.732404][ T4113] RAX: ffffffffffffffda RBX: 00007f6f9f995fa0 RCX: 00007f6f9f74ec29
[   57.732420][ T4113] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000
[   57.732507][ T4113] RBP: 00007f6f9e1af090 R08: 0000000000000000 R09: 0000000000000000
[   57.732594][ T4113] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[   57.732611][ T4113] R13: 00007f6f9f996038 R14: 00007f6f9f995fa0 R15: 00007ffc7f2ca7e8
[   57.732690][ T4113]  </TASK>
[   57.837331][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.026561][ T4124] netlink: 'syz.4.226': attribute type 1 has an invalid length.
[   58.064719][ T4124] vlan0: entered promiscuous mode
[   58.069962][ T4124] vlan0: entered allmulticast mode
[   58.075183][ T4124] hsr_slave_1: entered allmulticast mode
[   58.139760][ T4127] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[   58.146308][ T4127] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   58.154097][ T4127] vhci_hcd vhci_hcd.0: Device attached
[   58.160527][ T4127] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   58.172619][ T4127] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7)
[   58.179206][ T4127] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   58.186909][ T4127] vhci_hcd vhci_hcd.0: Device attached
[   58.203290][ T4127] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9)
[   58.209872][ T4127] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   58.217732][ T4127] vhci_hcd vhci_hcd.0: Device attached
[   58.234004][ T4127] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11)
[   58.240674][ T4127] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   58.248755][ T4127] vhci_hcd vhci_hcd.0: Device attached
[   58.262574][ T4127] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   58.275802][ T4127] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   58.288651][ T4127] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(17)
[   58.295308][ T4127] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   58.302923][ T4127] vhci_hcd vhci_hcd.0: Device attached
[   58.316141][ T4127] random: crng reseeded on system resumption
[   58.331278][ T4148] FAULT_INJECTION: forcing a failure.
[   58.331278][ T4148] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   58.344692][ T4148] CPU: 0 UID: 0 PID: 4148 Comm: syz.2.234 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   58.344726][ T4148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   58.344741][ T4148] Call Trace:
[   58.344747][ T4148]  <TASK>
[   58.344754][ T4148]  __dump_stack+0x1d/0x30
[   58.344796][ T4148]  dump_stack_lvl+0xe8/0x140
[   58.344821][ T4148]  dump_stack+0x15/0x1b
[   58.344842][ T4148]  should_fail_ex+0x265/0x280
[   58.344911][ T4148]  should_fail+0xb/0x20
[   58.345021][ T4148]  should_fail_usercopy+0x1a/0x20
[   58.345056][ T4148]  _copy_from_user+0x1c/0xb0
[   58.345097][ T4148]  __sys_bpf+0x178/0x7b0
[   58.345183][ T4148]  __x64_sys_bpf+0x41/0x50
[   58.345295][ T4148]  x64_sys_call+0x2aea/0x2ff0
[   58.345321][ T4148]  do_syscall_64+0xd2/0x200
[   58.345401][ T4148]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   58.345469][ T4148]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   58.345508][ T4148]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.345534][ T4148] RIP: 0033:0x7fb0726cec29
[   58.345552][ T4148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.345574][ T4148] RSP: 002b:00007fb07112f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   58.345621][ T4148] RAX: ffffffffffffffda RBX: 00007fb072915fa0 RCX: 00007fb0726cec29
[   58.345633][ T4148] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005
[   58.345644][ T4148] RBP: 00007fb07112f090 R08: 0000000000000000 R09: 0000000000000000
[   58.345656][ T4148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.345667][ T4148] R13: 00007fb072916038 R14: 00007fb072915fa0 R15: 00007ffea97eeab8
[   58.345692][ T4148]  </TASK>
[   58.380511][ T4144] vhci_hcd: connection closed
[   58.405805][ T4137] vhci_hcd: connection closed
[   58.413427][   T37] vhci_hcd: stop threads
[   58.419762][ T4131] vhci_hcd: connection closed
[   58.423933][   T37] vhci_hcd: release socket
[   58.423955][   T37] vhci_hcd: disconnect device
[   58.424419][ T4133] vhci_hcd: connection closed
[   58.433637][ T4128] vhci_hcd: connection closed
[   58.436436][   T37] vhci_hcd: stop threads
[   58.478499][ T4153] netem: change failed
[   58.479822][   T37] vhci_hcd: release socket
[   58.479845][   T37] vhci_hcd: disconnect device
[   58.480179][   T37] vhci_hcd: stop threads
[   58.582255][   T37] vhci_hcd: release socket
[   58.586891][   T37] vhci_hcd: disconnect device
[   58.591999][   T37] vhci_hcd: stop threads
[   58.596500][   T37] vhci_hcd: release socket
[   58.601140][   T37] vhci_hcd: disconnect device
[   58.608682][   T37] vhci_hcd: stop threads
[   58.613245][   T37] vhci_hcd: release socket
[   58.618002][   T37] vhci_hcd: disconnect device
[   58.742375][ T4164] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.810843][ T4164] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.855292][ T4164] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.935538][ T4164] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.958754][ T4174] loop0: detected capacity change from 0 to 1024
[   58.968072][ T4174] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   58.983572][ T4174] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   59.003379][   T51] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.019148][   T51] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.027572][ T4176] loop3: detected capacity change from 0 to 1024
[   59.030368][ T4174] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[   59.044264][   T51] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.054212][ T4174] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.244: Freeing blocks not in datazone - block = 0, count = 4096
[   59.055113][  T161] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.088767][ T4174] EXT4-fs (loop0): Remounting filesystem read-only
[   59.107834][ T4176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.120119][ T4176] ext4 filesystem being mounted at /syzcgroup/unified/syz3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.126689][ T4174] EXT4-fs (loop0): 1 orphan inode deleted
[   59.141498][ T4174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.157641][   T51] EXT4-fs (loop0): Quota write (off=3072, len=1024) cancelled because transaction is not started
[   59.179739][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.462537][ T4195] netem: change failed
[   59.669076][ T4198] FAULT_INJECTION: forcing a failure.
[   59.669076][ T4198] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   59.682271][ T4198] CPU: 0 UID: 0 PID: 4198 Comm: syz.3.253 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   59.682329][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   59.682342][ T4198] Call Trace:
[   59.682349][ T4198]  <TASK>
[   59.682357][ T4198]  __dump_stack+0x1d/0x30
[   59.682467][ T4198]  dump_stack_lvl+0xe8/0x140
[   59.682486][ T4198]  dump_stack+0x15/0x1b
[   59.682502][ T4198]  should_fail_ex+0x265/0x280
[   59.682528][ T4198]  should_fail+0xb/0x20
[   59.682610][ T4198]  should_fail_usercopy+0x1a/0x20
[   59.682636][ T4198]  _copy_from_user+0x1c/0xb0
[   59.682675][ T4198]  memdup_user+0x5e/0xd0
[   59.682702][ T4198]  strndup_user+0x68/0xb0
[   59.682763][ T4198]  keyctl_restrict_keyring+0x15a/0x1b0
[   59.682794][ T4198]  __se_sys_keyctl+0x1ed/0xb80
[   59.682877][ T4198]  ? __rcu_read_unlock+0x4f/0x70
[   59.682900][ T4198]  ? __fget_files+0x184/0x1c0
[   59.682928][ T4198]  ? fput+0x8f/0xc0
[   59.682992][ T4198]  __x64_sys_keyctl+0x67/0x80
[   59.683018][ T4198]  x64_sys_call+0x2f6d/0x2ff0
[   59.683040][ T4198]  do_syscall_64+0xd2/0x200
[   59.683095][ T4198]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   59.683119][ T4198]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   59.683176][ T4198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.683198][ T4198] RIP: 0033:0x7fce4603ec29
[   59.683213][ T4198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.683230][ T4198] RSP: 002b:00007fce44aa7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[   59.683249][ T4198] RAX: ffffffffffffffda RBX: 00007fce46285fa0 RCX: 00007fce4603ec29
[   59.683262][ T4198] RDX: 00002000000000c0 RSI: 0000000014dc5ed4 RDI: 000000000000001d
[   59.683291][ T4198] RBP: 00007fce44aa7090 R08: 0000000000000000 R09: 0000000000000000
[   59.683303][ T4198] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001
[   59.683322][ T4198] R13: 00007fce46286038 R14: 00007fce46285fa0 R15: 00007ffc7b9030e8
[   59.683341][ T4198]  </TASK>
[   60.078509][ T4207] loop4: detected capacity change from 0 to 1024
[   60.171039][ T4207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   60.201996][ T4218] loop0: detected capacity change from 0 to 1024
[   60.218041][ T4207] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.246770][ T4218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.309907][ T4218] ext4 filesystem being mounted at /syzcgroup/unified/syz0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.444273][ T4225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.261'.
[   60.602886][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   60.791877][   T51] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 393: padding at end of block bitmap is not set
[   60.810821][ T1089] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117
[   60.824027][ T1089] EXT4-fs (loop1): This should not happen!! Data will be lost
[   60.824027][ T1089] 
[   60.834011][   T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28
[   60.846590][   T37] EXT4-fs (loop2): This should not happen!! Data will be lost
[   60.846590][   T37] 
[   60.856294][   T37] EXT4-fs (loop2): Total free blocks count 0
[   60.862326][   T37] EXT4-fs (loop2): Free/Dirty block details
[   60.868239][   T37] EXT4-fs (loop2): free_blocks=0
[   60.873217][   T37] EXT4-fs (loop2): dirty_blocks=16
[   60.878498][   T37] EXT4-fs (loop2): Block reservation details
[   60.884537][   T37] EXT4-fs (loop2): i_reserved_data_blocks=1
[   60.922626][   T51] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28
[   60.935155][   T51] EXT4-fs (loop0): This should not happen!! Data will be lost
[   60.935155][   T51] 
[   60.944926][   T51] EXT4-fs (loop0): Total free blocks count 0
[   60.950928][   T51] EXT4-fs (loop0): Free/Dirty block details
[   60.956981][   T51] EXT4-fs (loop0): free_blocks=0
[   60.962083][   T51] EXT4-fs (loop0): dirty_blocks=16
[   60.967262][   T51] EXT4-fs (loop0): Block reservation details
[   60.973279][   T51] EXT4-fs (loop0): i_reserved_data_blocks=1
[   61.111827][ T4249] random: crng reseeded on system resumption
[   61.152695][ T4251] netem: change failed
[   61.161680][ T4253] 9pnet_fd: Insufficient options for proto=fd
[   61.247629][ T4259] loop4: detected capacity change from 0 to 1024
[   61.290340][ T4259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.314039][ T4268] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   61.374539][ T4259] ext4 filesystem being mounted at /syzcgroup/unified/syz4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.483407][ T4245] netlink: 'syz.0.266': attribute type 13 has an invalid length.
[   61.617763][ T4245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   61.774942][ T3948] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set
[   61.809376][ T4282] netlink: 20 bytes leftover after parsing attributes in process `syz.3.277'.
[   61.939427][ T3413] usb 7-1: enqueue for inactive port 0
[   61.947222][ T3413] usb 7-1: enqueue for inactive port 0
[   62.034608][ T3413] vhci_hcd: vhci_device speed not set
[   62.097067][   T29] kauditd_printk_skb: 107 callbacks suppressed
[   62.097138][   T29] audit: type=1400 audit(1758311833.551:524): avc:  denied  { write } for  pid=4307 comm="syz.4.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   62.139846][   T29] audit: type=1400 audit(1758311833.591:525): avc:  denied  { read write } for  pid=4309 comm="syz.3.283" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   62.163828][   T29] audit: type=1400 audit(1758311833.591:526): avc:  denied  { open } for  pid=4309 comm="syz.3.283" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   62.187684][   T29] audit: type=1400 audit(1758311833.591:527): avc:  denied  { ioctl } for  pid=4309 comm="syz.3.283" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   62.280204][   T29] audit: type=1326 audit(1758311833.671:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4309 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4603ec29 code=0x7ffc0000
[   62.303657][   T29] audit: type=1326 audit(1758311833.671:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4309 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fce4603ec29 code=0x7ffc0000
[   62.327016][   T29] audit: type=1326 audit(1758311833.671:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4309 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4603ec29 code=0x7ffc0000
[   62.350335][   T29] audit: type=1326 audit(1758311833.671:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4309 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fce4603ec29 code=0x7ffc0000
[   62.373695][   T29] audit: type=1326 audit(1758311833.671:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4309 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4603ec29 code=0x7ffc0000
[   62.375974][ T4322] FAULT_INJECTION: forcing a failure.
[   62.375974][ T4322] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   62.397267][   T29] audit: type=1326 audit(1758311833.671:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4309 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fce4603ec29 code=0x7ffc0000
[   62.410314][ T4322] CPU: 0 UID: 0 PID: 4322 Comm: syz.2.284 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   62.410347][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   62.410365][ T4322] Call Trace:
[   62.410374][ T4322]  <TASK>
[   62.410385][ T4322]  __dump_stack+0x1d/0x30
[   62.410424][ T4322]  dump_stack_lvl+0xe8/0x140
[   62.410496][ T4322]  dump_stack+0x15/0x1b
[   62.410518][ T4322]  should_fail_ex+0x265/0x280
[   62.410618][ T4322]  should_fail+0xb/0x20
[   62.410646][ T4322]  should_fail_usercopy+0x1a/0x20
[   62.410805][ T4322]  _copy_from_iter+0xd2/0xe80
[   62.410845][ T4322]  ? __build_skb_around+0x1a0/0x200
[   62.410877][ T4322]  ? __alloc_skb+0x223/0x320
[   62.410911][ T4322]  netlink_sendmsg+0x471/0x6b0
[   62.410954][ T4322]  ? __pfx_netlink_sendmsg+0x10/0x10
[   62.410991][ T4322]  __sock_sendmsg+0x145/0x180
[   62.411115][ T4322]  ____sys_sendmsg+0x31e/0x4e0
[   62.411219][ T4322]  ___sys_sendmsg+0x17b/0x1d0
[   62.411274][ T4322]  __x64_sys_sendmsg+0xd4/0x160
[   62.411331][ T4322]  x64_sys_call+0x191e/0x2ff0
[   62.411360][ T4322]  do_syscall_64+0xd2/0x200
[   62.411414][ T4322]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   62.411447][ T4322]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   62.411499][ T4322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.411530][ T4322] RIP: 0033:0x7fb0726cec29
[   62.411551][ T4322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.411575][ T4322] RSP: 002b:00007fb0710ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   62.411640][ T4322] RAX: ffffffffffffffda RBX: 00007fb072916180 RCX: 00007fb0726cec29
[   62.411656][ T4322] RDX: 0000000020000010 RSI: 0000200000000080 RDI: 0000000000000008
[   62.411673][ T4322] RBP: 00007fb0710ed090 R08: 0000000000000000 R09: 0000000000000000
[   62.411690][ T4322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   62.411706][ T4322] R13: 00007fb072916218 R14: 00007fb072916180 R15: 00007ffea97eeab8
[   62.411732][ T4322]  </TASK>
[   62.636202][ T4323] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.652385][ T4261] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   62.662615][ T4325] netem: change failed
[   62.699160][ T4323] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.738365][ T4323] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.796656][ T4323] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.960147][ T4327] netlink: 'syz.1.289': attribute type 13 has an invalid length.
[   62.985590][ T4327] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.029732][  T161] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.042979][  T161] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.059403][ T4338] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.107504][ T4343] SELinux: failed to load policy
[   63.115165][   T51] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.133953][   T51] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.300851][ T4360] bridge_slave_0: left allmulticast mode
[   63.306596][ T4360] bridge_slave_0: left promiscuous mode
[   63.312593][ T4360] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.331017][ T4360] bridge_slave_1: left allmulticast mode
[   63.336806][ T4360] bridge_slave_1: left promiscuous mode
[   63.342624][ T4360] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.359441][ T4360] bond0: (slave bond_slave_0): Releasing backup interface
[   63.393541][ T4364] SELinux: failed to load policy
[   63.405501][ T4360] bond0: (slave bond_slave_1): Releasing backup interface
[   63.432650][ T4360] team0: Port device team_slave_0 removed
[   63.461671][ T4360] team0: Port device team_slave_1 removed
[   63.468671][ T4360] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.476145][ T4360] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.504708][ T4360] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.512125][ T4360] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.703977][ T4366] netlink: 'syz.0.305': attribute type 13 has an invalid length.
[   63.725895][ T4366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.765911][ T4371] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   63.773670][ T4371] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   63.878737][ T4390] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[   63.909863][ T4394] FAULT_INJECTION: forcing a failure.
[   63.909863][ T4394] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   63.923250][ T4394] CPU: 1 UID: 0 PID: 4394 Comm: syz.3.316 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   63.923283][ T4394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   63.923296][ T4394] Call Trace:
[   63.923302][ T4394]  <TASK>
[   63.923311][ T4394]  __dump_stack+0x1d/0x30
[   63.923332][ T4394]  dump_stack_lvl+0xe8/0x140
[   63.923425][ T4394]  dump_stack+0x15/0x1b
[   63.923446][ T4394]  should_fail_ex+0x265/0x280
[   63.923478][ T4394]  should_fail_alloc_page+0xf2/0x100
[   63.923593][ T4394]  __alloc_frozen_pages_noprof+0xff/0x360
[   63.923635][ T4394]  alloc_pages_mpol+0xb3/0x250
[   63.923703][ T4394]  folio_alloc_mpol_noprof+0x39/0x80
[   63.923768][ T4394]  shmem_get_folio_gfp+0x3cf/0xd60
[   63.923818][ T4394]  shmem_fallocate+0x57c/0x840
[   63.923913][ T4394]  vfs_fallocate+0x3b6/0x400
[   63.923947][ T4394]  __x64_sys_fallocate+0x7a/0xd0
[   63.923981][ T4394]  x64_sys_call+0x2514/0x2ff0
[   63.924085][ T4394]  do_syscall_64+0xd2/0x200
[   63.924127][ T4394]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   63.924159][ T4394]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   63.924216][ T4394]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.924325][ T4394] RIP: 0033:0x7fce4603ec29
[   63.924344][ T4394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   63.924366][ T4394] RSP: 002b:00007fce44aa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[   63.924389][ T4394] RAX: ffffffffffffffda RBX: 00007fce46285fa0 RCX: 00007fce4603ec29
[   63.924447][ T4394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[   63.924462][ T4394] RBP: 00007fce44aa7090 R08: 0000000000000000 R09: 0000000000000000
[   63.924476][ T4394] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000002
[   63.924497][ T4394] R13: 00007fce46286038 R14: 00007fce46285fa0 R15: 00007ffc7b9030e8
[   63.924521][ T4394]  </TASK>
[   64.185092][ T4401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'.
[   64.235732][ T4403] FAULT_INJECTION: forcing a failure.
[   64.235732][ T4403] name failslab, interval 1, probability 0, space 0, times 0
[   64.248452][ T4403] CPU: 0 UID: 0 PID: 4403 Comm: syz.1.320 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   64.248485][ T4403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   64.248554][ T4403] Call Trace:
[   64.248612][ T4403]  <TASK>
[   64.248620][ T4403]  __dump_stack+0x1d/0x30
[   64.248643][ T4403]  dump_stack_lvl+0xe8/0x140
[   64.248662][ T4403]  dump_stack+0x15/0x1b
[   64.248678][ T4403]  should_fail_ex+0x265/0x280
[   64.248785][ T4403]  ? audit_log_d_path+0x8d/0x150
[   64.248822][ T4403]  should_failslab+0x8c/0xb0
[   64.248912][ T4403]  __kmalloc_cache_noprof+0x4c/0x320
[   64.248952][ T4403]  audit_log_d_path+0x8d/0x150
[   64.249050][ T4403]  audit_log_d_path_exe+0x42/0x70
[   64.249090][ T4403]  audit_log_task+0x1e9/0x250
[   64.249128][ T4403]  audit_seccomp+0x61/0x100
[   64.249201][ T4403]  ? __seccomp_filter+0x68c/0x10d0
[   64.249229][ T4403]  __seccomp_filter+0x69d/0x10d0
[   64.249252][ T4403]  ? save_fpregs_to_fpstate+0x100/0x160
[   64.249284][ T4403]  ? _raw_spin_unlock+0x26/0x50
[   64.249389][ T4403]  __secure_computing+0x82/0x150
[   64.249410][ T4403]  syscall_trace_enter+0xcf/0x1e0
[   64.249437][ T4403]  do_syscall_64+0xac/0x200
[   64.249547][ T4403]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   64.249578][ T4403]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   64.249669][ T4403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.249692][ T4403] RIP: 0033:0x7f6e3d08ae09
[   64.249709][ T4403] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[   64.249781][ T4403] RSP: 002b:00007f6e3bb4ea80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f
[   64.249804][ T4403] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f6e3d08ae09
[   64.249818][ T4403] RDX: 00007f6e3bb4ea80 RSI: 00007f6e3bb4ebb0 RDI: 0000000000000021
[   64.249830][ T4403] RBP: 00007f6e3bb4f090 R08: 0000000000000000 R09: 00007f6e3bb4edf6
[   64.249842][ T4403] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c
[   64.249853][ T4403] R13: 00007f6e3d336038 R14: 00007f6e3d335fa0 R15: 00007ffffd1480f8
[   64.249872][ T4403]  </TASK>
[   64.260427][ T4407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'.
[   64.463480][ T4413] netem: change failed
[   64.953896][ T4422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.974233][ T4422] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.344556][ T4449] bridge0: entered promiscuous mode
[   65.351803][ T4449] bridge0: port 3(macsec1) entered blocking state
[   65.358337][ T4449] bridge0: port 3(macsec1) entered disabled state
[   65.365766][ T4449] macsec1: entered allmulticast mode
[   65.371122][ T4449] bridge0: entered allmulticast mode
[   65.377521][ T4449] macsec1: left allmulticast mode
[   65.382665][ T4449] bridge0: left allmulticast mode
[   65.388402][ T4449] bridge0: left promiscuous mode
[   65.659810][ T4461] netem: change failed
[   66.074714][ T3948] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set
[   66.137146][ T4489] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[   66.143750][ T4489] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   66.151517][ T4489] vhci_hcd vhci_hcd.0: Device attached
[   66.159205][ T4489] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   66.170460][ T4489] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7)
[   66.177016][ T4489] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   66.184542][ T4489] vhci_hcd vhci_hcd.0: Device attached
[   66.191193][ T4489] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9)
[   66.197745][ T4489] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   66.205382][ T4489] vhci_hcd vhci_hcd.0: Device attached
[   66.212118][ T4489] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11)
[   66.218841][ T4489] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   66.226554][ T4489] vhci_hcd vhci_hcd.0: Device attached
[   66.233244][ T4482] syzkaller1: entered promiscuous mode
[   66.233488][ T4489] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   66.238837][ T4482] syzkaller1: entered allmulticast mode
[   66.253977][ T4489] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   66.267911][ T4489] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(17)
[   66.274632][ T4489] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   66.282211][ T4489] vhci_hcd vhci_hcd.0: Device attached
[   66.295745][ T4489] random: crng reseeded on system resumption
[   66.324990][ T1035] vhci_hcd: vhci_device speed not set
[   66.334859][ T4496] vhci_hcd: connection closed
[   66.335133][ T4494] vhci_hcd: connection closed
[   66.335376][ T4500] vhci_hcd: connection closed
[   66.340356][ T4492] vhci_hcd: connection closed
[   66.345973][   T31] vhci_hcd: stop threads
[   66.350030][ T4490] vhci_hcd: connection closed
[   66.354245][   T31] vhci_hcd: release socket
[   66.354259][   T31] vhci_hcd: disconnect device
[   66.379503][   T31] vhci_hcd: stop threads
[   66.383977][   T31] vhci_hcd: release socket
[   66.388423][   T31] vhci_hcd: disconnect device
[   66.393255][ T1035] usb 7-1: new full-speed USB device number 3 using vhci_hcd
[   66.402717][ T4491] vhci_hcd: sendmsg failed!, ret=-32 for 48
[   66.402983][   T31] vhci_hcd: stop threads
[   66.413080][   T31] vhci_hcd: release socket
[   66.417883][   T31] vhci_hcd: disconnect device
[   66.422930][   T31] vhci_hcd: stop threads
[   66.427195][   T31] vhci_hcd: release socket
[   66.431660][   T31] vhci_hcd: disconnect device
[   66.437347][   T31] vhci_hcd: stop threads
[   66.441692][   T31] vhci_hcd: release socket
[   66.446131][   T31] vhci_hcd: disconnect device
[   66.882619][ T4519] 9pnet_fd: Insufficient options for proto=fd
[   66.991882][   T29] kauditd_printk_skb: 455 callbacks suppressed
[   66.991902][   T29] audit: type=1400 audit(1758311838.565:989): avc:  denied  { append } for  pid=4526 comm="syz.1.364" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   67.183511][ T4513] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   67.223628][ T4542] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[   67.230210][ T4542] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   67.237841][ T4542] vhci_hcd vhci_hcd.0: Device attached
[   67.248302][ T4542] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   67.280277][ T4552] netlink: 200 bytes leftover after parsing attributes in process `syz.4.375'.
[   67.290383][ T4542] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7)
[   67.296953][ T4542] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   67.304611][ T4542] vhci_hcd vhci_hcd.0: Device attached
[   67.331467][ T4542] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9)
[   67.338150][ T4542] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   67.345901][ T4542] vhci_hcd vhci_hcd.0: Device attached
[   67.387062][ T4542] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11)
[   67.393711][ T4542] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   67.401741][ T4542] vhci_hcd vhci_hcd.0: Device attached
[   67.411198][ T4542] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   67.419594][   T36] vhci_hcd: vhci_device speed not set
[   67.426888][ T4542] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   67.449371][ T4542] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(17)
[   67.456088][ T4542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   67.463761][ T4542] vhci_hcd vhci_hcd.0: Device attached
[   67.478014][   T36] usb 1-1: new full-speed USB device number 2 using vhci_hcd
[   67.490865][ T4542] random: crng reseeded on system resumption
[   67.528253][ T4566] vhci_hcd: connection closed
[   67.535431][ T4558] vhci_hcd: connection closed
[   67.540747][ T4555] vhci_hcd: connection closed
[   67.545541][   T31] vhci_hcd: stop threads
[   67.554464][   T31] vhci_hcd: release socket
[   67.558984][   T31] vhci_hcd: disconnect device
[   67.563762][ T4543] vhci_hcd: connection reset by peer
[   67.576679][ T4568] vhci_hcd: connection closed
[   67.582995][   T31] vhci_hcd: stop threads
[   67.592118][   T31] vhci_hcd: release socket
[   67.596640][   T31] vhci_hcd: disconnect device
[   67.603490][   T31] vhci_hcd: stop threads
[   67.607890][   T31] vhci_hcd: release socket
[   67.612470][   T31] vhci_hcd: disconnect device
[   67.627937][   T31] vhci_hcd: stop threads
[   67.632235][   T31] vhci_hcd: release socket
[   67.636802][   T31] vhci_hcd: disconnect device
[   67.643861][   T31] vhci_hcd: stop threads
[   67.648378][   T31] vhci_hcd: release socket
[   67.652947][   T31] vhci_hcd: disconnect device
[   67.683492][ T4578] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.752134][ T4578] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.806352][ T4578] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.880421][ T4578] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.934126][   T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.945692][   T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.963326][   T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.971846][   T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.029031][   T29] audit: type=1326 audit(1758311839.629:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4603ec29 code=0x7ffc0000
[   68.058982][   T29] audit: type=1326 audit(1758311839.660:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4603ec29 code=0x7ffc0000
[   68.082739][   T29] audit: type=1326 audit(1758311839.660:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce4603ec29 code=0x7ffc0000
[   68.106312][   T29] audit: type=1326 audit(1758311839.660:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4603ec29 code=0x7ffc0000
[   68.135113][   T29] audit: type=1326 audit(1758311839.690:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce4603ec29 code=0x7ffc0000
[   68.159098][   T29] audit: type=1326 audit(1758311839.762:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4603ec29 code=0x7ffc0000
[   68.182582][   T29] audit: type=1326 audit(1758311839.762:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4603ec29 code=0x7ffc0000
[   68.301993][ T4603] bridge_slave_0: left allmulticast mode
[   68.307811][ T4603] bridge_slave_0: left promiscuous mode
[   68.313568][ T4603] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.339728][ T4603] bridge_slave_1: left allmulticast mode
[   68.345506][ T4603] bridge_slave_1: left promiscuous mode
[   68.351339][ T4603] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.373863][ T4603] bond0: (slave bond_slave_0): Releasing backup interface
[   68.394463][ T4603] bond0: (slave bond_slave_1): Releasing backup interface
[   68.411150][ T4603] team0: Port device team_slave_0 removed
[   68.451657][ T4617] 9pnet_fd: Insufficient options for proto=fd
[   68.456118][ T4603] team0: Port device team_slave_1 removed
[   68.466496][ T4603] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.474034][ T4603] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.507676][ T4603] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.515159][ T4603] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.536756][ T4619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.399'.
[   68.547141][ T4619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.399'.
[   68.556285][   T29] audit: type=1326 audit(1758311840.150:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3d0eec29 code=0x7ffc0000
[   68.579691][   T29] audit: type=1326 audit(1758311840.150:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e3d0eec29 code=0x7ffc0000
[   69.153568][ T4640] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.164305][ T4642] 9pnet_fd: Insufficient options for proto=fd
[   69.298774][ T4645] netlink: 180 bytes leftover after parsing attributes in process `syz.0.410'.
[   69.319785][ T4645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=4645 comm=syz.0.410
[   69.446882][ T4640] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.495696][ T4640] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.573087][ T4640] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.638910][ T1089] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.661459][ T1089] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.684527][ T1089] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.710452][ T1089] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.380237][ T4703] netlink: 200 bytes leftover after parsing attributes in process `syz.1.434'.
[   70.580563][ T4719] 9pnet_fd: Insufficient options for proto=fd
[   70.606072][ T4721] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.663948][ T4721] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.722647][ T4721] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.782023][ T4721] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.835352][   T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.853691][   T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.877269][   T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.885550][   T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.959586][ T4745] 9pnet_fd: Insufficient options for proto=fd
[   70.999752][ T4749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.452'.
[   71.044271][ T4751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.455'.
[   71.166795][ T4759] Driver unsupported XDP return value 0 on prog  (id 306) dev N/A, expect packet loss!
[   71.183674][ T4761] FAULT_INJECTION: forcing a failure.
[   71.183674][ T4761] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   71.196840][ T4761] CPU: 0 UID: 0 PID: 4761 Comm: syz.1.460 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   71.196873][ T4761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   71.196889][ T4761] Call Trace:
[   71.196896][ T4761]  <TASK>
[   71.196954][ T4761]  __dump_stack+0x1d/0x30
[   71.196979][ T4761]  dump_stack_lvl+0xe8/0x140
[   71.197003][ T4761]  dump_stack+0x15/0x1b
[   71.197022][ T4761]  should_fail_ex+0x265/0x280
[   71.197099][ T4761]  should_fail+0xb/0x20
[   71.197124][ T4761]  should_fail_usercopy+0x1a/0x20
[   71.197211][ T4761]  _copy_from_user+0x1c/0xb0
[   71.197311][ T4761]  ___sys_sendmsg+0xc1/0x1d0
[   71.197354][ T4761]  __x64_sys_sendmsg+0xd4/0x160
[   71.197384][ T4761]  x64_sys_call+0x191e/0x2ff0
[   71.197407][ T4761]  do_syscall_64+0xd2/0x200
[   71.197492][ T4761]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   71.197524][ T4761]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   71.197580][ T4761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.197624][ T4761] RIP: 0033:0x7f6e3d0eec29
[   71.197640][ T4761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   71.197661][ T4761] RSP: 002b:00007f6e3bb4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   71.197746][ T4761] RAX: ffffffffffffffda RBX: 00007f6e3d335fa0 RCX: 00007f6e3d0eec29
[   71.197759][ T4761] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000004
[   71.197770][ T4761] RBP: 00007f6e3bb4f090 R08: 0000000000000000 R09: 0000000000000000
[   71.197782][ T4761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   71.197872][ T4761] R13: 00007f6e3d336038 R14: 00007f6e3d335fa0 R15: 00007ffffd1480f8
[   71.197894][ T4761]  </TASK>
[   71.357028][ T1035] usb 7-1: enqueue for inactive port 0
[   71.392708][ T1035] usb 7-1: enqueue for inactive port 0
[   71.442124][ T4768] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.474783][ T1035] vhci_hcd: vhci_device speed not set
[   71.507490][ T4774] netem: change failed
[   71.515886][ T4768] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.555773][ T4768] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.604429][ T4768] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.664963][  T161] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.680000][  T161] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.703542][  T161] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.727697][  T161] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.139414][   T29] kauditd_printk_skb: 68 callbacks suppressed
[   72.139428][   T29] audit: type=1400 audit(1758311843.820:1067): avc:  denied  { create } for  pid=4804 comm="syz.3.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[   72.314902][   T29] audit: type=1400 audit(1758311844.003:1068): avc:  denied  { create } for  pid=4804 comm="syz.3.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   72.396560][   T29] audit: type=1326 audit(1758311844.074:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3d0eec29 code=0x7ffc0000
[   72.421231][   T29] audit: type=1326 audit(1758311844.105:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e3d0eec29 code=0x7ffc0000
[   72.446508][ T4818] FAULT_INJECTION: forcing a failure.
[   72.446508][ T4818] name failslab, interval 1, probability 0, space 0, times 0
[   72.460286][ T4818] CPU: 0 UID: 0 PID: 4818 Comm: syz.1.484 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   72.460315][ T4818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   72.460330][ T4818] Call Trace:
[   72.460337][ T4818]  <TASK>
[   72.460347][ T4818]  __dump_stack+0x1d/0x30
[   72.460433][ T4818]  dump_stack_lvl+0xe8/0x140
[   72.460454][ T4818]  dump_stack+0x15/0x1b
[   72.460473][ T4818]  should_fail_ex+0x265/0x280
[   72.460501][ T4818]  should_failslab+0x8c/0xb0
[   72.460591][ T4818]  kmem_cache_alloc_node_noprof+0x57/0x320
[   72.460621][ T4818]  ? __alloc_skb+0x101/0x320
[   72.460648][ T4818]  __alloc_skb+0x101/0x320
[   72.460672][ T4818]  ? audit_log_start+0x365/0x6c0
[   72.460772][ T4818]  audit_log_start+0x380/0x6c0
[   72.460901][ T4818]  audit_seccomp+0x48/0x100
[   72.460937][ T4818]  ? __seccomp_filter+0x68c/0x10d0
[   72.460967][ T4818]  __seccomp_filter+0x69d/0x10d0
[   72.461004][ T4818]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   72.461044][ T4818]  ? vfs_write+0x7e8/0x960
[   72.461074][ T4818]  ? __rcu_read_unlock+0x4f/0x70
[   72.461103][ T4818]  ? __fget_files+0x184/0x1c0
[   72.461143][ T4818]  __secure_computing+0x82/0x150
[   72.461193][ T4818]  syscall_trace_enter+0xcf/0x1e0
[   72.461280][ T4818]  do_syscall_64+0xac/0x200
[   72.461324][ T4818]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   72.461357][ T4818]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   72.461478][ T4818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.461507][ T4818] RIP: 0033:0x7f6e3d0eec29
[   72.461526][ T4818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   72.461550][ T4818] RSP: 002b:00007f6e3bb4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000063
[   72.461646][ T4818] RAX: ffffffffffffffda RBX: 00007f6e3d335fa0 RCX: 00007f6e3d0eec29
[   72.461663][ T4818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000540
[   72.461681][ T4818] RBP: 00007f6e3bb4f090 R08: 0000000000000000 R09: 0000000000000000
[   72.461696][ T4818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   72.461721][ T4818] R13: 00007f6e3d336038 R14: 00007f6e3d335fa0 R15: 00007ffffd1480f8
[   72.461748][ T4818]  </TASK>
[   72.461763][ T4818] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[   72.470811][   T36] usb 1-1: enqueue for inactive port 0
[   72.470832][   T36] usb 1-1: enqueue for inactive port 0
[   72.470979][   T29] audit: type=1326 audit(1758311844.105:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3d0eec29 code=0x7ffc0000
[   72.481028][ T4818] audit: out of memory in audit_log_start
[   72.484321][   T29] audit: type=1326 audit(1758311844.105:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e3d0eec29 code=0x7ffc0000
[   72.484348][   T29] audit: type=1326 audit(1758311844.105:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3d0eec29 code=0x7ffc0000
[   72.484375][   T29] audit: type=1326 audit(1758311844.125:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e3d0eec29 code=0x7ffc0000
[   72.798063][   T36] vhci_hcd: vhci_device speed not set
[   72.906183][ T4832] FAULT_INJECTION: forcing a failure.
[   72.906183][ T4832] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   72.919450][ T4832] CPU: 1 UID: 0 PID: 4832 Comm: syz.2.489 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   72.919484][ T4832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   72.919500][ T4832] Call Trace:
[   72.919508][ T4832]  <TASK>
[   72.919518][ T4832]  __dump_stack+0x1d/0x30
[   72.919545][ T4832]  dump_stack_lvl+0xe8/0x140
[   72.919581][ T4832]  dump_stack+0x15/0x1b
[   72.919601][ T4832]  should_fail_ex+0x265/0x280
[   72.919625][ T4832]  should_fail+0xb/0x20
[   72.919645][ T4832]  should_fail_usercopy+0x1a/0x20
[   72.919726][ T4832]  _copy_to_iter+0xd2/0xe70
[   72.919771][ T4832]  ? __pfx_woken_wake_function+0x10/0x10
[   72.919796][ T4832]  tty_read+0x1a9/0x4a0
[   72.919821][ T4832]  ? do_iter_readv_writev+0x2a2/0x540
[   72.919889][ T4832]  do_iter_readv_writev+0x499/0x540
[   72.919970][ T4832]  vfs_readv+0x1ea/0x690
[   72.920017][ T4832]  do_readv+0xe7/0x210
[   72.920056][ T4832]  __x64_sys_readv+0x45/0x50
[   72.920156][ T4832]  x64_sys_call+0x29f8/0x2ff0
[   72.920257][ T4832]  do_syscall_64+0xd2/0x200
[   72.920290][ T4832]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   72.920314][ T4832]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   72.920351][ T4832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.920429][ T4832] RIP: 0033:0x7fb0726cec29
[   72.920444][ T4832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   72.920461][ T4832] RSP: 002b:00007fb07112f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[   72.920478][ T4832] RAX: ffffffffffffffda RBX: 00007fb072915fa0 RCX: 00007fb0726cec29
[   72.920494][ T4832] RDX: 0000000000000001 RSI: 00002000000013c0 RDI: 0000000000000003
[   72.920509][ T4832] RBP: 00007fb07112f090 R08: 0000000000000000 R09: 0000000000000000
[   72.920524][ T4832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   72.920550][ T4832] R13: 00007fb072916038 R14: 00007fb072915fa0 R15: 00007ffea97eeab8
[   72.920571][ T4832]  </TASK>
[   73.223344][ T4845] netlink: 180 bytes leftover after parsing attributes in process `syz.2.493'.
[   73.238283][ T4845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=4845 comm=syz.2.493
[   73.410996][ T4863] 9pnet_fd: Insufficient options for proto=fd
[   73.619132][ T4876] netem: change failed
[   73.643143][ T4879] netlink: 80 bytes leftover after parsing attributes in process `syz.0.507'.
[   73.780201][ T4886] netlink: 180 bytes leftover after parsing attributes in process `syz.0.509'.
[   73.872440][ T4892] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[   73.879030][ T4892] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   73.886541][ T4892] vhci_hcd vhci_hcd.0: Device attached
[   73.896819][ T4892] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   73.906881][ T4892] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7)
[   73.913482][ T4892] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   73.920963][ T4892] vhci_hcd vhci_hcd.0: Device attached
[   73.929801][ T4892] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9)
[   73.936569][ T4892] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   73.944309][ T4892] vhci_hcd vhci_hcd.0: Device attached
[   73.951940][ T4892] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11)
[   73.958574][ T4892] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   73.966248][ T4892] vhci_hcd vhci_hcd.0: Device attached
[   73.977360][ T4892] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   74.000085][ T4892] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   74.016725][ T4905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'.
[   74.028727][ T4892] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(17)
[   74.035410][ T4892] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   74.043157][ T4892] vhci_hcd vhci_hcd.0: Device attached
[   74.132489][ T4892] random: crng reseeded on system resumption
[   74.206843][ T4910] vhci_hcd: connection closed
[   74.206999][  T161] vhci_hcd: stop threads
[   74.207424][ T4895] vhci_hcd: connection closed
[   74.211764][  T161] vhci_hcd: release socket
[   74.211782][  T161] vhci_hcd: disconnect device
[   74.230204][ T4898] vhci_hcd: connection closed
[   74.231571][ T4893] vhci_hcd: connection closed
[   74.236332][ T4900] vhci_hcd: connection closed
[   74.241402][   T36] vhci_hcd: vhci_device speed not set
[   74.249687][  T161] vhci_hcd: stop threads
[   74.255885][  T161] vhci_hcd: release socket
[   74.260413][  T161] vhci_hcd: disconnect device
[   74.279114][  T161] vhci_hcd: stop threads
[   74.283504][  T161] vhci_hcd: release socket
[   74.287985][  T161] vhci_hcd: disconnect device
[   74.308766][  T161] vhci_hcd: stop threads
[   74.308855][   T36] usb 1-5: new full-speed USB device number 3 using vhci_hcd
[   74.313314][  T161] vhci_hcd: release socket
[   74.313328][  T161] vhci_hcd: disconnect device
[   74.313628][  T161] vhci_hcd: stop threads
[   74.334461][  T161] vhci_hcd: release socket
[   74.338948][  T161] vhci_hcd: disconnect device
[   74.543084][ T4932] netlink: 'syz.2.522': attribute type 21 has an invalid length.
[   74.551023][ T4932] netlink: 128 bytes leftover after parsing attributes in process `syz.2.522'.
[   74.568250][ T4932] netlink: 43 bytes leftover after parsing attributes in process `syz.2.522'.
[   75.190992][ T4972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.540'.
[   75.378013][ T4980] netem: change failed
[   75.397676][ T4981] openvswitch: netlink: Message has 6 unknown bytes.
[   75.408442][ T3413] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   75.416042][ T3413] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   75.423679][ T3413] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   75.431932][ T3413] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   75.439647][ T3413] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2
[   75.447078][ T3413] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   75.454539][ T3413] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   75.462761][ T3413] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   75.470264][ T3413] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   75.477717][ T3413] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   75.486608][ T3413] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   75.796652][ T4998] netlink: 180 bytes leftover after parsing attributes in process `syz.2.550'.
[   76.315226][ T5026] netlink: 180 bytes leftover after parsing attributes in process `syz.1.563'.
[   76.652932][ T5040] netem: change failed
[   76.880624][ T5056] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.948899][ T5062] openvswitch: netlink: Message has 6 unknown bytes.
[   76.957913][ T5056] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.962578][ T3413] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   76.985814][ T5062] FAULT_INJECTION: forcing a failure.
[   76.985814][ T5062] name failslab, interval 1, probability 0, space 0, times 0
[   76.998579][ T5062] CPU: 1 UID: 0 PID: 5062 Comm: syz.2.577 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   76.998613][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   76.998628][ T5062] Call Trace:
[   76.998636][ T5062]  <TASK>
[   76.998645][ T5062]  __dump_stack+0x1d/0x30
[   76.998703][ T5062]  dump_stack_lvl+0xe8/0x140
[   76.998748][ T5062]  dump_stack+0x15/0x1b
[   76.998770][ T5062]  should_fail_ex+0x265/0x280
[   76.998799][ T5062]  should_failslab+0x8c/0xb0
[   76.998889][ T5062]  kmem_cache_alloc_noprof+0x50/0x310
[   76.998917][ T5062]  ? audit_log_start+0x365/0x6c0
[   76.998953][ T5062]  audit_log_start+0x365/0x6c0
[   76.999066][ T5062]  audit_seccomp+0x48/0x100
[   76.999097][ T5062]  ? __seccomp_filter+0x68c/0x10d0
[   76.999126][ T5062]  __seccomp_filter+0x69d/0x10d0
[   76.999184][ T5062]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   76.999213][ T5062]  ? vfs_write+0x7e8/0x960
[   76.999299][ T5062]  __secure_computing+0x82/0x150
[   76.999363][ T5062]  syscall_trace_enter+0xcf/0x1e0
[   76.999395][ T5062]  do_syscall_64+0xac/0x200
[   76.999436][ T5062]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   76.999460][ T5062]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   76.999542][ T5062]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.999566][ T5062] RIP: 0033:0x7fb0726cec29
[   76.999584][ T5062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   76.999671][ T5062] RSP: 002b:00007fb07112f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[   76.999689][ T5062] RAX: ffffffffffffffda RBX: 00007fb072915fa0 RCX: 00007fb0726cec29
[   76.999701][ T5062] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000009
[   76.999742][ T5062] RBP: 00007fb07112f090 R08: 0000000000000000 R09: 0000000000000000
[   76.999758][ T5062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   76.999772][ T5062] R13: 00007fb072916038 R14: 00007fb072915fa0 R15: 00007ffea97eeab8
[   76.999833][ T5062]  </TASK>
[   77.198851][ T5062] netlink: 'syz.2.577': attribute type 4 has an invalid length.
[   77.209269][ T5056] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.232075][   T29] kauditd_printk_skb: 198 callbacks suppressed
[   77.232093][   T29] audit: type=1400 audit(1758311848.984:1271): avc:  denied  { read } for  pid=5065 comm="syz.4.579" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   77.261007][   T29] audit: type=1400 audit(1758311848.984:1272): avc:  denied  { open } for  pid=5065 comm="syz.4.579" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   77.318765][   T29] audit: type=1326 audit(1758311849.055:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb0726cd63c code=0x7ffc0000
[   77.341984][   T29] audit: type=1326 audit(1758311849.075:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb0726cd6df code=0x7ffc0000
[   77.365200][   T29] audit: type=1326 audit(1758311849.075:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb0726cd88a code=0x7ffc0000
[   77.388609][   T29] audit: type=1326 audit(1758311849.075:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0726cec29 code=0x7ffc0000
[   77.412457][   T29] audit: type=1326 audit(1758311849.075:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0726cec29 code=0x7ffc0000
[   77.439846][ T5056] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.547547][  T161] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.565097][  T161] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.573440][  T161] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.584632][   T29] audit: type=1326 audit(1758311849.348:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5082 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9f74ec29 code=0x7ffc0000
[   77.596167][  T161] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.608253][   T29] audit: type=1326 audit(1758311849.348:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5082 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f9f74ec29 code=0x7ffc0000
[   77.639787][   T29] audit: type=1326 audit(1758311849.348:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5082 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9f74ec29 code=0x7ffc0000
[   77.713497][ T5088] netlink: 20 bytes leftover after parsing attributes in process `syz.3.586'.
[   78.040404][ T5097] netem: change failed
[   78.805026][ T5117] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.861897][ T5117] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.921055][ T5117] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.983154][ T5117] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.017436][ T5124] openvswitch: netlink: Message has 6 unknown bytes.
[   79.027881][ T3399] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   79.078330][ T5128] __nla_validate_parse: 2 callbacks suppressed
[   79.078349][ T5128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.602'.
[   79.267035][ T5133] tmpfs: Bad value for 'mpol'
[   79.285869][   T36] usb 1-5: enqueue for inactive port 4
[   79.306976][ T5139] netlink: 200 bytes leftover after parsing attributes in process `syz.1.607'.
[   79.315205][   T36] usb 1-5: enqueue for inactive port 4
[   79.350082][ T5143] netem: change failed
[   79.394405][   T36] vhci_hcd: vhci_device speed not set
[   79.563664][ T5151] FAULT_INJECTION: forcing a failure.
[   79.563664][ T5151] name failslab, interval 1, probability 0, space 0, times 0
[   79.576367][ T5151] CPU: 1 UID: 0 PID: 5151 Comm: syz.0.612 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   79.576409][ T5151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   79.576423][ T5151] Call Trace:
[   79.576433][ T5151]  <TASK>
[   79.576442][ T5151]  __dump_stack+0x1d/0x30
[   79.576510][ T5151]  dump_stack_lvl+0xe8/0x140
[   79.576526][ T5151]  dump_stack+0x15/0x1b
[   79.576540][ T5151]  should_fail_ex+0x265/0x280
[   79.576561][ T5151]  should_failslab+0x8c/0xb0
[   79.576586][ T5151]  kmem_cache_alloc_noprof+0x50/0x310
[   79.576632][ T5151]  ? skb_clone+0x151/0x1f0
[   79.576656][ T5151]  skb_clone+0x151/0x1f0
[   79.576678][ T5151]  __neigh_event_send+0x7f3/0xa30
[   79.576788][ T5151]  neigh_resolve_output+0x11c/0x460
[   79.576814][ T5151]  ? netlbl_enabled+0x25/0x40
[   79.576832][ T5151]  ? selinux_ip_postroute+0x1b7/0xb50
[   79.576908][ T5151]  ip6_finish_output2+0xa66/0xd30
[   79.576936][ T5151]  ? __rcu_read_unlock+0x34/0x70
[   79.576955][ T5151]  ? __pfx_ip6_mtu+0x10/0x10
[   79.576980][ T5151]  ip6_finish_output+0x3a4/0x540
[   79.577001][ T5151]  ip6_output+0xfd/0x240
[   79.577069][ T5151]  ? __pfx_ip6_finish_output+0x10/0x10
[   79.577116][ T5151]  ip6_local_out+0x79/0xe0
[   79.577140][ T5151]  ip6_send_skb+0x5a/0x130
[   79.577165][ T5151]  udp_v6_send_skb+0x7a3/0xc70
[   79.577188][ T5151]  udpv6_sendmsg+0x13b8/0x1590
[   79.577284][ T5151]  ? __pfx_ip_generic_getfrag+0x10/0x10
[   79.577313][ T5151]  ? __rcu_read_unlock+0x4f/0x70
[   79.577343][ T5151]  ? __pfx_udpv6_sendmsg+0x10/0x10
[   79.577360][ T5151]  inet6_sendmsg+0xac/0xd0
[   79.577388][ T5151]  __sock_sendmsg+0x8b/0x180
[   79.577501][ T5151]  ____sys_sendmsg+0x345/0x4e0
[   79.577526][ T5151]  ___sys_sendmsg+0x17b/0x1d0
[   79.577561][ T5151]  __sys_sendmmsg+0x178/0x300
[   79.577595][ T5151]  __x64_sys_sendmmsg+0x57/0x70
[   79.577636][ T5151]  x64_sys_call+0x1c4a/0x2ff0
[   79.577655][ T5151]  do_syscall_64+0xd2/0x200
[   79.577683][ T5151]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   79.577704][ T5151]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   79.577802][ T5151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.577820][ T5151] RIP: 0033:0x7f6f9f74ec29
[   79.577834][ T5151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   79.577849][ T5151] RSP: 002b:00007f6f9e1af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   79.577944][ T5151] RAX: ffffffffffffffda RBX: 00007f6f9f995fa0 RCX: 00007f6f9f74ec29
[   79.577961][ T5151] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000005
[   79.577975][ T5151] RBP: 00007f6f9e1af090 R08: 0000000000000000 R09: 0000000000000000
[   79.577986][ T5151] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001
[   79.577998][ T5151] R13: 00007f6f9f996038 R14: 00007f6f9f995fa0 R15: 00007ffc7f2ca7e8
[   79.578017][ T5151]  </TASK>
[   79.940233][ T5161] netlink: 'syz.2.617': attribute type 29 has an invalid length.
[   79.948716][ T5161] netlink: 'syz.2.617': attribute type 29 has an invalid length.
[   79.957037][ T5161] netlink: 500 bytes leftover after parsing attributes in process `syz.2.617'.
[   79.967711][ T5161] FAULT_INJECTION: forcing a failure.
[   79.967711][ T5161] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   79.981143][ T5161] CPU: 0 UID: 0 PID: 5161 Comm: syz.2.617 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   79.981173][ T5161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   79.981188][ T5161] Call Trace:
[   79.981196][ T5161]  <TASK>
[   79.981206][ T5161]  __dump_stack+0x1d/0x30
[   79.981248][ T5161]  dump_stack_lvl+0xe8/0x140
[   79.981271][ T5161]  dump_stack+0x15/0x1b
[   79.981289][ T5161]  should_fail_ex+0x265/0x280
[   79.981315][ T5161]  should_fail+0xb/0x20
[   79.981341][ T5161]  should_fail_usercopy+0x1a/0x20
[   79.981432][ T5161]  _copy_to_user+0x20/0xa0
[   79.981537][ T5161]  simple_read_from_buffer+0xb5/0x130
[   79.981566][ T5161]  proc_fail_nth_read+0x10e/0x150
[   79.981607][ T5161]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   79.981640][ T5161]  vfs_read+0x1a5/0x770
[   79.981664][ T5161]  ? __rcu_read_unlock+0x4f/0x70
[   79.981687][ T5161]  ? __fget_files+0x184/0x1c0
[   79.981732][ T5161]  ksys_read+0xda/0x1a0
[   79.981762][ T5161]  __x64_sys_read+0x40/0x50
[   79.981790][ T5161]  x64_sys_call+0x27bc/0x2ff0
[   79.981817][ T5161]  do_syscall_64+0xd2/0x200
[   79.981878][ T5161]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   79.981902][ T5161]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   79.982011][ T5161]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.982088][ T5161] RIP: 0033:0x7fb0726cd63c
[   79.982120][ T5161] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   79.982143][ T5161] RSP: 002b:00007fb07112f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   79.982164][ T5161] RAX: ffffffffffffffda RBX: 00007fb072915fa0 RCX: 00007fb0726cd63c
[   79.982234][ T5161] RDX: 000000000000000f RSI: 00007fb07112f0a0 RDI: 0000000000000005
[   79.982250][ T5161] RBP: 00007fb07112f090 R08: 0000000000000000 R09: 0000000000000000
[   79.982261][ T5161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   79.982276][ T5161] R13: 00007fb072916038 R14: 00007fb072915fa0 R15: 00007ffea97eeab8
[   79.982303][ T5161]  </TASK>
[   80.545076][ T5198] netlink: 200 bytes leftover after parsing attributes in process `syz.4.630'.
[   80.587729][ T5205] openvswitch: netlink: Message has 6 unknown bytes.
[   80.596544][ T3546] hid_parser_main: 107 callbacks suppressed
[   80.596566][ T3546] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   80.610315][ T3546] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   80.617798][ T3546] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   80.625452][ T3546] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   80.632918][ T3546] hid-generic 0000:0000:0000.0005: unknown main item tag 0x2
[   80.640329][ T3546] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   80.647799][ T3546] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   80.655316][ T3546] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   80.662844][ T3546] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   80.670257][ T3546] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   80.678747][ T3546] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   81.195103][ T5239] netlink: 44 bytes leftover after parsing attributes in process `syz.1.648'.
[   81.224805][ T5239] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.237650][ T5239] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.458290][ T5261] veth0_to_team: entered promiscuous mode
[   81.629834][ T5277] netlink: 200 bytes leftover after parsing attributes in process `syz.0.665'.
[   81.890911][ T5284] FAULT_INJECTION: forcing a failure.
[   81.890911][ T5284] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   81.904749][ T5284] CPU: 0 UID: 0 PID: 5284 Comm: syz.4.667 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   81.904781][ T5284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   81.904795][ T5284] Call Trace:
[   81.904801][ T5284]  <TASK>
[   81.904810][ T5284]  __dump_stack+0x1d/0x30
[   81.904848][ T5284]  dump_stack_lvl+0xe8/0x140
[   81.904872][ T5284]  dump_stack+0x15/0x1b
[   81.904934][ T5284]  should_fail_ex+0x265/0x280
[   81.905039][ T5284]  should_fail+0xb/0x20
[   81.905086][ T5284]  should_fail_usercopy+0x1a/0x20
[   81.905116][ T5284]  _copy_to_iter+0xd2/0xe70
[   81.905155][ T5284]  ? chacha_block_generic+0x218/0x240
[   81.905209][ T5284]  get_random_bytes_user+0x12d/0x290
[   81.905248][ T5284]  ? import_ubuf+0xe8/0x120
[   81.905289][ T5284]  __x64_sys_getrandom+0xcf/0x1a0
[   81.905324][ T5284]  x64_sys_call+0x1fa6/0x2ff0
[   81.905415][ T5284]  do_syscall_64+0xd2/0x200
[   81.905456][ T5284]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   81.905487][ T5284]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   81.905520][ T5284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.905569][ T5284] RIP: 0033:0x7f20283dec29
[   81.905610][ T5284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.905628][ T5284] RSP: 002b:00007f2026e47038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e
[   81.905647][ T5284] RAX: ffffffffffffffda RBX: 00007f2028625fa0 RCX: 00007f20283dec29
[   81.905660][ T5284] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240
[   81.905672][ T5284] RBP: 00007f2026e47090 R08: 0000000000000000 R09: 0000000000000000
[   81.905694][ T5284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   81.905706][ T5284] R13: 00007f2028626038 R14: 00007f2028625fa0 R15: 00007ffdea1dd6b8
[   81.905725][ T5284]  </TASK>
[   82.252970][   T29] kauditd_printk_skb: 275 callbacks suppressed
[   82.252987][   T29] audit: type=1326 audit(1758311854.057:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.4.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20283dec29 code=0x7ffc0000
[   82.264381][ T5305] openvswitch: netlink: Message has 6 unknown bytes.
[   82.287555][   T29] audit: type=1326 audit(1758311854.057:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.4.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20283dec29 code=0x7ffc0000
[   82.314509][   T29] audit: type=1326 audit(1758311854.057:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.4.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f20283dec29 code=0x7ffc0000
[   82.314550][   T29] audit: type=1326 audit(1758311854.057:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.4.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20283dec29 code=0x7ffc0000
[   82.314605][   T29] audit: type=1326 audit(1758311854.057:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.4.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f20283dec29 code=0x7ffc0000
[   82.314632][   T29] audit: type=1326 audit(1758311854.057:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.4.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20283dec29 code=0x7ffc0000
[   82.314658][   T29] audit: type=1326 audit(1758311854.067:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.4.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20283dec29 code=0x7ffc0000
[   82.314691][   T29] audit: type=1326 audit(1758311854.067:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.4.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20283dec29 code=0x7ffc0000
[   82.314717][   T29] audit: type=1326 audit(1758311854.067:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.4.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20283dec29 code=0x7ffc0000
[   82.314743][   T29] audit: type=1326 audit(1758311854.067:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.4.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20283dec29 code=0x7ffc0000
[   82.339243][ T3413] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   82.559774][ T5311] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.571102][ T5313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.678'.
[   82.583891][ T5313] netlink: 60 bytes leftover after parsing attributes in process `syz.1.678'.
[   82.624711][ T5311] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.637732][ T5313] netlink: 'syz.1.678': attribute type 9 has an invalid length.
[   82.645465][ T5313] netlink: 44 bytes leftover after parsing attributes in process `syz.1.678'.
[   82.684501][ T5311] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.724330][ T5311] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.781194][   T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.781281][   T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.781327][   T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.781380][   T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.955122][   T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.968775][ T5325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.683'.
[   82.980425][   T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.000078][   T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.016752][   T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.765801][ T5376] netem: change failed
[   83.980590][ T5337] syz.2.690 (5337) used greatest stack depth: 10384 bytes left
[   84.202839][ T5400] __nla_validate_parse: 1 callbacks suppressed
[   84.202856][ T5400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.715'.
[   84.425557][ T5406] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[   84.432273][ T5406] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   84.439873][ T5406] vhci_hcd vhci_hcd.0: Device attached
[   84.450002][ T5406] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   84.460139][ T5406] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7)
[   84.466714][ T5406] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   84.474649][ T5406] vhci_hcd vhci_hcd.0: Device attached
[   84.481753][ T5406] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9)
[   84.488314][ T5406] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   84.496041][ T5406] vhci_hcd vhci_hcd.0: Device attached
[   84.518534][ T5406] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11)
[   84.525235][ T5406] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   84.532886][ T5406] vhci_hcd vhci_hcd.0: Device attached
[   84.551127][ T5406] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   84.559966][ T5406] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   84.589132][ T5406] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(17)
[   84.595806][ T5406] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   84.603552][ T5406] vhci_hcd vhci_hcd.0: Device attached
[   84.627367][   T36] vhci_hcd: vhci_device speed not set
[   84.644415][ T5424] random: crng reseeded on system resumption
[   84.667902][ T5426] openvswitch: netlink: Message has 6 unknown bytes.
[   84.681500][ T3399] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   84.691317][   T36] usb 5-1: new full-speed USB device number 2 using vhci_hcd
[   84.713323][ T5417] vhci_hcd: connection closed
[   84.713414][ T5413] vhci_hcd: connection closed
[   84.713511][ T5415] vhci_hcd: connection closed
[   84.718438][ T5408] vhci_hcd: connection reset by peer
[   84.733306][   T12] vhci_hcd: stop threads
[   84.733521][ T5422] vhci_hcd: connection closed
[   84.737841][   T12] vhci_hcd: release socket
[   84.748280][   T12] vhci_hcd: disconnect device
[   84.776751][   T12] vhci_hcd: stop threads
[   84.781065][   T12] vhci_hcd: release socket
[   84.785565][   T12] vhci_hcd: disconnect device
[   84.810232][   T12] vhci_hcd: stop threads
[   84.814547][   T12] vhci_hcd: release socket
[   84.819117][   T12] vhci_hcd: disconnect device
[   84.830568][   T12] vhci_hcd: stop threads
[   84.834884][   T12] vhci_hcd: release socket
[   84.839571][   T12] vhci_hcd: disconnect device
[   84.844864][ T5433] FAULT_INJECTION: forcing a failure.
[   84.844864][ T5433] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   84.858066][ T5433] CPU: 1 UID: 0 PID: 5433 Comm: syz.3.724 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   84.858098][ T5433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   84.858114][ T5433] Call Trace:
[   84.858123][ T5433]  <TASK>
[   84.858147][   T12] vhci_hcd: stop threads
[   84.858132][ T5433]  __dump_stack+0x1d/0x30
[   84.858203][ T5433]  dump_stack_lvl+0xe8/0x140
[   84.858232][ T5433]  dump_stack+0x15/0x1b
[   84.858255][ T5433]  should_fail_ex+0x265/0x280
[   84.858292][ T5433]  should_fail+0xb/0x20
[   84.858321][ T5433]  should_fail_usercopy+0x1a/0x20
[   84.858363][ T5433]  _copy_to_user+0x20/0xa0
[   84.858409][ T5433]  simple_read_from_buffer+0xb5/0x130
[   84.858440][ T5433]  proc_fail_nth_read+0x10e/0x150
[   84.858550][ T5433]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   84.858589][ T5433]  vfs_read+0x1a5/0x770
[   84.858617][ T5433]  ? __fput+0x555/0x650
[   84.858658][ T5433]  ? __rcu_read_unlock+0x4f/0x70
[   84.858769][ T5433]  ? __fget_files+0x184/0x1c0
[   84.858808][ T5433]  ksys_read+0xda/0x1a0
[   84.858841][ T5433]  __x64_sys_read+0x40/0x50
[   84.858886][ T5433]  x64_sys_call+0x27bc/0x2ff0
[   84.858918][ T5433]  do_syscall_64+0xd2/0x200
[   84.858961][ T5433]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   84.859056][ T5433]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   84.859139][ T5433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.859169][ T5433] RIP: 0033:0x7fce4603d63c
[   84.859191][ T5433] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   84.859228][ T5433] RSP: 002b:00007fce44aa7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   84.859253][ T5433] RAX: ffffffffffffffda RBX: 00007fce46285fa0 RCX: 00007fce4603d63c
[   84.859270][ T5433] RDX: 000000000000000f RSI: 00007fce44aa70a0 RDI: 0000000000000004
[   84.859342][ T5433] RBP: 00007fce44aa7090 R08: 0000000000000000 R09: 0000000000000000
[   84.859359][ T5433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   84.859376][ T5433] R13: 00007fce46286038 R14: 00007fce46285fa0 R15: 00007ffc7b9030e8
[   84.859403][ T5433]  </TASK>
[   84.975553][ T5444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.729'.
[   84.979805][   T12] vhci_hcd: release socket
[   85.081119][   T12] vhci_hcd: disconnect device
[   85.214467][ T5457] openvswitch: netlink: Message has 6 unknown bytes.
[   85.226837][ T3399] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   85.267594][ T5461] netem: change failed
[   86.214756][ T5492] openvswitch: netlink: Message has 6 unknown bytes.
[   86.225221][ T3399] hid_parser_main: 146 callbacks suppressed
[   86.225243][ T3399] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   86.238734][ T3399] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   86.246273][ T3399] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   86.253746][ T3399] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   86.261301][ T3399] hid-generic 0000:0000:0000.0009: unknown main item tag 0x2
[   86.268782][ T3399] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   86.276254][ T3399] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   86.283899][ T3399] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   86.291432][ T3399] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   86.298924][ T3399] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   86.310516][ T3399] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   86.496548][  T161] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28
[   86.509626][  T161] EXT4-fs (loop4): This should not happen!! Data will be lost
[   86.509626][  T161] 
[   86.519439][  T161] EXT4-fs (loop4): Total free blocks count 0
[   86.525527][  T161] EXT4-fs (loop4): Free/Dirty block details
[   86.531451][  T161] EXT4-fs (loop4): free_blocks=0
[   86.536513][  T161] EXT4-fs (loop4): dirty_blocks=16
[   86.541707][  T161] EXT4-fs (loop4): Block reservation details
[   86.547789][  T161] EXT4-fs (loop4): i_reserved_data_blocks=1
[   86.556379][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.657806][ T5529] FAULT_INJECTION: forcing a failure.
[   86.657806][ T5529] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   86.671016][ T5529] CPU: 1 UID: 0 PID: 5529 Comm: syz.2.764 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   86.671052][ T5529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   86.671068][ T5529] Call Trace:
[   86.671076][ T5529]  <TASK>
[   86.671085][ T5529]  __dump_stack+0x1d/0x30
[   86.671161][ T5529]  dump_stack_lvl+0xe8/0x140
[   86.671180][ T5529]  dump_stack+0x15/0x1b
[   86.671196][ T5529]  should_fail_ex+0x265/0x280
[   86.671282][ T5529]  should_fail+0xb/0x20
[   86.671336][ T5529]  should_fail_usercopy+0x1a/0x20
[   86.671369][ T5529]  _copy_to_user+0x20/0xa0
[   86.671452][ T5529]  simple_read_from_buffer+0xb5/0x130
[   86.671482][ T5529]  proc_fail_nth_read+0x10e/0x150
[   86.671518][ T5529]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   86.671627][ T5529]  vfs_read+0x1a5/0x770
[   86.671649][ T5529]  ? __rcu_read_unlock+0x4f/0x70
[   86.671670][ T5529]  ? __fget_files+0x184/0x1c0
[   86.671702][ T5529]  ksys_read+0xda/0x1a0
[   86.671789][ T5529]  __x64_sys_read+0x40/0x50
[   86.671819][ T5529]  x64_sys_call+0x27bc/0x2ff0
[   86.671847][ T5529]  do_syscall_64+0xd2/0x200
[   86.671906][ T5529]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   86.671937][ T5529]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   86.671966][ T5529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.672043][ T5529] RIP: 0033:0x7fb0726cd63c
[   86.672058][ T5529] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   86.672076][ T5529] RSP: 002b:00007fb07112f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   86.672094][ T5529] RAX: ffffffffffffffda RBX: 00007fb072915fa0 RCX: 00007fb0726cd63c
[   86.672126][ T5529] RDX: 000000000000000f RSI: 00007fb07112f0a0 RDI: 0000000000000004
[   86.672141][ T5529] RBP: 00007fb07112f090 R08: 0000000000000000 R09: 0000000000000000
[   86.672157][ T5529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   86.672171][ T5529] R13: 00007fb072916038 R14: 00007fb072915fa0 R15: 00007ffea97eeab8
[   86.672221][ T5529]  </TASK>
[   87.242841][ T5558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.777'.
[   87.269820][   T29] kauditd_printk_skb: 482 callbacks suppressed
[   87.269836][   T29] audit: type=1400 audit(1758311859.115:2048): avc:  denied  { ioctl } for  pid=5557 comm="syz.0.777" path="socket:[13623]" dev="sockfs" ino=13623 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   87.315058][   T29] audit: type=1400 audit(1758311859.145:2049): avc:  denied  { write } for  pid=5557 comm="syz.0.777" name="arp" dev="proc" ino=4026532610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   87.492169][ T5568] FAULT_INJECTION: forcing a failure.
[   87.492169][ T5568] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   87.505798][ T5568] CPU: 1 UID: 0 PID: 5568 Comm: syz.0.782 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   87.505851][ T5568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   87.505868][ T5568] Call Trace:
[   87.505876][ T5568]  <TASK>
[   87.505886][ T5568]  __dump_stack+0x1d/0x30
[   87.505915][ T5568]  dump_stack_lvl+0xe8/0x140
[   87.505940][ T5568]  dump_stack+0x15/0x1b
[   87.505969][ T5568]  should_fail_ex+0x265/0x280
[   87.506001][ T5568]  should_fail+0xb/0x20
[   87.506028][ T5568]  should_fail_usercopy+0x1a/0x20
[   87.506061][ T5568]  _copy_from_user+0x1c/0xb0
[   87.506191][ T5568]  __sys_bpf+0x178/0x7b0
[   87.506235][ T5568]  __x64_sys_bpf+0x41/0x50
[   87.506267][ T5568]  x64_sys_call+0x2aea/0x2ff0
[   87.506365][ T5568]  do_syscall_64+0xd2/0x200
[   87.506468][ T5568]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   87.506500][ T5568]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   87.506604][ T5568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.506629][ T5568] RIP: 0033:0x7f6f9f74ec29
[   87.506643][ T5568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   87.506668][ T5568] RSP: 002b:00007f6f9e1af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   87.506688][ T5568] RAX: ffffffffffffffda RBX: 00007f6f9f995fa0 RCX: 00007f6f9f74ec29
[   87.506705][ T5568] RDX: 0000000000000028 RSI: 0000200000000140 RDI: 0000000000000012
[   87.506721][ T5568] RBP: 00007f6f9e1af090 R08: 0000000000000000 R09: 0000000000000000
[   87.506737][ T5568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   87.506830][ T5568] R13: 00007f6f9f996038 R14: 00007f6f9f995fa0 R15: 00007ffc7f2ca7e8
[   87.506860][ T5568]  </TASK>
[   87.695658][   T29] audit: type=1400 audit(1758311859.537:2050): avc:  denied  { create } for  pid=5569 comm="syz.0.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   87.715352][   T29] audit: type=1400 audit(1758311859.547:2051): avc:  denied  { bind } for  pid=5569 comm="syz.0.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   87.744146][   T29] audit: type=1400 audit(1758311859.567:2052): avc:  denied  { setopt } for  pid=5569 comm="syz.0.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   87.765135][   T29] audit: type=1400 audit(1758311859.587:2053): avc:  denied  { mount } for  pid=5569 comm="syz.0.783" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   87.786692][   T29] audit: type=1326 audit(1758311859.587:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.0.783" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f9f74ec29 code=0x0
[   87.809853][   T29] audit: type=1400 audit(1758311859.598:2055): avc:  denied  { setopt } for  pid=5555 comm="syz.2.776" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   87.830404][   T29] audit: type=1400 audit(1758311859.678:2056): avc:  denied  { create } for  pid=5569 comm="syz.0.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   87.966459][   T29] audit: type=1326 audit(1758311859.819:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.3.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4603ec29 code=0x7ffc0000
[   88.035989][    T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0)
[   88.092468][ T5599] netlink: 180 bytes leftover after parsing attributes in process `syz.3.795'.
[   88.106927][   T31] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.165134][   T31] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.244681][   T31] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.323754][   T31] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.534193][   T31] bond0 (unregistering): Released all slaves
[   88.551572][ T5612] chnl_net:caif_netlink_parms(): no params data found
[   88.580010][ T5642] openvswitch: netlink: Message has 6 unknown bytes.
[   88.616707][ T5649] FAULT_INJECTION: forcing a failure.
[   88.616707][ T5649] name failslab, interval 1, probability 0, space 0, times 0
[   88.629463][ T5649] CPU: 1 UID: 0 PID: 5649 Comm: syz.0.811 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   88.629500][ T5649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   88.629516][ T5649] Call Trace:
[   88.629524][ T5649]  <TASK>
[   88.629533][ T5649]  __dump_stack+0x1d/0x30
[   88.629636][ T5649]  dump_stack_lvl+0xe8/0x140
[   88.629660][ T5649]  dump_stack+0x15/0x1b
[   88.629681][ T5649]  should_fail_ex+0x265/0x280
[   88.629730][ T5649]  ? sctp_add_bind_addr+0x71/0x1e0
[   88.629767][ T5649]  should_failslab+0x8c/0xb0
[   88.629798][ T5649]  __kmalloc_cache_noprof+0x4c/0x320
[   88.629854][ T5649]  sctp_add_bind_addr+0x71/0x1e0
[   88.629887][ T5649]  sctp_copy_local_addr_list+0x199/0x220
[   88.629927][ T5649]  sctp_copy_one_addr+0x7f/0x280
[   88.630025][ T5649]  sctp_bind_addr_copy+0x79/0x290
[   88.630063][ T5649]  sctp_assoc_set_bind_addr_from_ep+0xce/0xe0
[   88.630105][ T5649]  sctp_connect_new_asoc+0x1c3/0x3a0
[   88.630202][ T5649]  sctp_sendmsg+0xf10/0x18d0
[   88.630228][ T5649]  ? selinux_socket_sendmsg+0x91/0x1b0
[   88.630272][ T5649]  ? __pfx_sctp_sendmsg+0x10/0x10
[   88.630339][ T5649]  inet_sendmsg+0xc2/0xd0
[   88.630418][ T5649]  __sock_sendmsg+0x102/0x180
[   88.630457][ T5649]  __sys_sendto+0x268/0x330
[   88.630608][ T5649]  __x64_sys_sendto+0x76/0x90
[   88.630636][ T5649]  x64_sys_call+0x2d05/0x2ff0
[   88.630661][ T5649]  do_syscall_64+0xd2/0x200
[   88.630709][ T5649]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   88.630738][ T5649]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   88.630819][ T5649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.630845][ T5649] RIP: 0033:0x7f6f9f74ec29
[   88.630862][ T5649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   88.630885][ T5649] RSP: 002b:00007f6f9e1af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   88.630908][ T5649] RAX: ffffffffffffffda RBX: 00007f6f9f995fa0 RCX: 00007f6f9f74ec29
[   88.630923][ T5649] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000004
[   88.630938][ T5649] RBP: 00007f6f9e1af090 R08: 0000200000000140 R09: 000000000000001c
[   88.630952][ T5649] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001
[   88.630986][ T5649] R13: 00007f6f9f996038 R14: 00007f6f9f995fa0 R15: 00007ffc7f2ca7e8
[   88.631009][ T5649]  </TASK>
[   88.861605][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.868710][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.888125][ T5612] bridge_slave_0: entered allmulticast mode
[   88.896284][ T5612] bridge_slave_0: entered promiscuous mode
[   88.909210][   T31] hsr_slave_0: left promiscuous mode
[   88.923460][   T31] veth1_macvtap: left promiscuous mode
[   88.929079][   T31] veth0_macvtap: left promiscuous mode
[   89.034249][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.041451][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.049179][ T5612] bridge_slave_1: entered allmulticast mode
[   89.055672][ T5612] bridge_slave_1: entered promiscuous mode
[   89.063724][ T3365] infiniband syz1: ib_query_port failed (-19)
[   89.078294][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.092000][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.116284][ T5612] team0: Port device team_slave_0 added
[   89.123204][ T5612] team0: Port device team_slave_1 added
[   89.143901][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.151013][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.178058][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.190766][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.197833][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.223988][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.244685][ T5612] hsr_slave_0: entered promiscuous mode
[   89.251045][ T5612] hsr_slave_1: entered promiscuous mode
[   89.257401][ T5612] debugfs: 'hsr0' already exists in 'hsr'
[   89.263183][ T5612] Cannot create hsr debugfs directory
[   89.355931][ T5612] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   89.370198][ T5612] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   89.380079][ T5612] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   89.391293][ T5612] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   89.443667][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.457836][ T5612] 8021q: adding VLAN 0 to HW filter on device team0
[   89.467307][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.474421][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.484959][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.492247][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.563819][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.676239][ T5612] veth0_vlan: entered promiscuous mode
[   89.684027][ T5612] veth1_vlan: entered promiscuous mode
[   89.684421][   T36] usb 5-1: enqueue for inactive port 0
[   89.696414][   T36] usb 5-1: enqueue for inactive port 0
[   89.698881][ T5612] veth0_macvtap: entered promiscuous mode
[   89.712061][ T5612] veth1_macvtap: entered promiscuous mode
[   89.725034][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.736250][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.748169][   T51] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.760195][   T51] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.770549][   T51] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.774533][   T36] vhci_hcd: vhci_device speed not set
[   89.781357][   T51] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.802565][ T5705] netlink: 180 bytes leftover after parsing attributes in process `syz.0.826'.
[   89.940968][ T5721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.831'.
[   90.117544][ T5729] loop5: detected capacity change from 0 to 512
[   90.125032][ T5729] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   90.138182][ T5729] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   90.149794][ T5729] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.834: bad orphan inode 131083
[   90.160947][ T5729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.194184][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.235619][ T5738] netlink: 180 bytes leftover after parsing attributes in process `syz.3.837'.
[   90.287059][ T5743] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[   90.293638][ T5743] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   90.301150][ T5743] vhci_hcd vhci_hcd.0: Device attached
[   90.312400][ T5750] vhci_hcd: unknown pdu 2
[   90.320327][   T51] vhci_hcd: stop threads
[   90.324816][   T51] vhci_hcd: release socket
[   90.329289][   T51] vhci_hcd: disconnect device
[   90.738920][ T5770] netlink: 'syz.3.850': attribute type 10 has an invalid length.
[   90.750986][ T5770] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   90.781311][ T5772] netlink: 180 bytes leftover after parsing attributes in process `syz.3.851'.
[   90.884775][ T5790] netlink: 48 bytes leftover after parsing attributes in process `syz.2.860'.
[   91.124702][ T5804] netlink: 180 bytes leftover after parsing attributes in process `syz.2.865'.
[   91.577836][ T5809] netem: change failed
[   91.904370][ T5832] netlink: 48 bytes leftover after parsing attributes in process `syz.0.875'.
[   91.913677][ T5831] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[   91.920283][ T5831] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   91.927839][ T5831] vhci_hcd vhci_hcd.0: Device attached
[   91.970723][ T5835] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   92.026787][ T5831] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(5)
[   92.033520][ T5831] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   92.041085][ T5831] vhci_hcd vhci_hcd.0: Device attached
[   92.066115][ T5835] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(10)
[   92.072792][ T5835] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   92.080559][ T5835] vhci_hcd vhci_hcd.0: Device attached
[   92.097856][ T5831] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(9)
[   92.104511][ T5831] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   92.112275][ T5831] vhci_hcd vhci_hcd.0: Device attached
[   92.118556][ T5831] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   92.127129][ T3413] vhci_hcd: vhci_device speed not set
[   92.132958][ T5831] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   92.172224][ T5831] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(17)
[   92.179076][ T5831] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   92.186722][ T5831] vhci_hcd vhci_hcd.0: Device attached
[   92.202991][ T3413] usb 7-1: new full-speed USB device number 4 using vhci_hcd
[   92.251142][ T5831] random: crng reseeded on system resumption
[   92.289683][ T5863] FAULT_INJECTION: forcing a failure.
[   92.289683][ T5863] name failslab, interval 1, probability 0, space 0, times 0
[   92.300616][ T5856] vhci_hcd: connection closed
[   92.302522][ T5863] CPU: 0 UID: 0 PID: 5863 Comm: syz.2.885 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   92.302556][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   92.302577][ T5863] Call Trace:
[   92.302585][ T5863]  <TASK>
[   92.302652][ T5863]  __dump_stack+0x1d/0x30
[   92.302673][ T5863]  dump_stack_lvl+0xe8/0x140
[   92.302692][ T5863]  dump_stack+0x15/0x1b
[   92.302742][ T5863]  should_fail_ex+0x265/0x280
[   92.302772][ T5863]  should_failslab+0x8c/0xb0
[   92.302807][ T5863]  kmem_cache_alloc_node_noprof+0x57/0x320
[   92.302844][ T5863]  ? __alloc_skb+0x101/0x320
[   92.302873][ T5863]  __alloc_skb+0x101/0x320
[   92.302901][ T5863]  netlink_alloc_large_skb+0xba/0xf0
[   92.302968][ T5863]  netlink_sendmsg+0x3cf/0x6b0
[   92.303053][ T5863]  ? __pfx_netlink_sendmsg+0x10/0x10
[   92.303130][ T5848] vhci_hcd: connection closed
[   92.303086][ T5863]  __sock_sendmsg+0x145/0x180
[   92.303196][ T5863]  ____sys_sendmsg+0x31e/0x4e0
[   92.303239][ T5863]  ___sys_sendmsg+0x17b/0x1d0
[   92.303297][ T5863]  __x64_sys_sendmsg+0xd4/0x160
[   92.303426][ T5863]  x64_sys_call+0x191e/0x2ff0
[   92.303457][ T5863]  do_syscall_64+0xd2/0x200
[   92.303501][ T5863]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   92.303534][ T5863]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   92.303617][ T5863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.303646][ T5863] RIP: 0033:0x7fb0726cec29
[   92.303667][ T5863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.303693][ T5863] RSP: 002b:00007fb07112f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   92.303789][ T5863] RAX: ffffffffffffffda RBX: 00007fb072915fa0 RCX: 00007fb0726cec29
[   92.303807][ T5863] RDX: 000000002008c010 RSI: 0000200000000580 RDI: 0000000000000007
[   92.303824][ T5863] RBP: 00007fb07112f090 R08: 0000000000000000 R09: 0000000000000000
[   92.303877][ T5863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   92.303894][ T5863] R13: 00007fb072916038 R14: 00007fb072915fa0 R15: 00007ffea97eeab8
[   92.303919][ T5863]  </TASK>
[   92.354376][   T12] vhci_hcd: stop threads
[   92.511195][ T5842] vhci_hcd: connection closed
[   92.511700][   T12] vhci_hcd: release socket
[   92.528192][   T12] vhci_hcd: disconnect device
[   92.533224][ T5836] vhci_hcd: connection closed
[   92.533389][ T5833] vhci_hcd: connection reset by peer
[   92.554377][   T12] vhci_hcd: stop threads
[   92.558748][   T12] vhci_hcd: release socket
[   92.563211][   T12] vhci_hcd: disconnect device
[   92.568065][   T12] vhci_hcd: stop threads
[   92.572470][   T12] vhci_hcd: release socket
[   92.576969][   T12] vhci_hcd: disconnect device
[   92.594398][   T12] vhci_hcd: stop threads
[   92.598677][   T12] vhci_hcd: release socket
[   92.603163][   T12] vhci_hcd: disconnect device
[   92.617093][   T12] vhci_hcd: stop threads
[   92.621464][   T12] vhci_hcd: release socket
[   92.626006][   T12] vhci_hcd: disconnect device
[   92.650536][   T29] kauditd_printk_skb: 141 callbacks suppressed
[   92.650556][   T29] audit: type=1400 audit(1758311864.513:2199): avc:  denied  { setopt } for  pid=5875 comm="syz.2.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   92.678580][ T5876] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.731127][ T5876] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.745899][ T5883] netlink: 180 bytes leftover after parsing attributes in process `syz.0.893'.
[   92.775852][   T29] audit: type=1326 audit(1758311864.644:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.5.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7d36ec29 code=0x7ffc0000
[   92.777052][ T5887] netem: change failed
[   92.829670][ T5876] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.836992][   T29] audit: type=1326 audit(1758311864.674:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.5.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7d36ec29 code=0x7ffc0000
[   92.862873][   T29] audit: type=1326 audit(1758311864.674:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.5.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f3d7d36ec29 code=0x7ffc0000
[   92.886264][   T29] audit: type=1326 audit(1758311864.674:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.5.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7d36ec29 code=0x7ffc0000
[   92.909612][   T29] audit: type=1326 audit(1758311864.674:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.5.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7d36ec29 code=0x7ffc0000
[   92.933183][   T29] audit: type=1400 audit(1758311864.684:2205): avc:  denied  { connect } for  pid=5889 comm="syz.0.897" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   92.953817][   T29] audit: type=1400 audit(1758311864.684:2206): avc:  denied  { write } for  pid=5889 comm="syz.0.897" laddr=fe80::4c38:6eff:fe7c:933a lport=60 faddr=ff02::1 fport=8192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   92.982208][   T29] audit: type=1400 audit(1758311864.855:2207): avc:  denied  { connect } for  pid=5892 comm="syz.5.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   93.002161][   T29] audit: type=1400 audit(1758311864.855:2208): avc:  denied  { ioctl } for  pid=5892 comm="syz.5.899" path="socket:[15491]" dev="sockfs" ino=15491 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   93.049447][ T5876] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.092853][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.902'.
[   93.245852][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.267947][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.297117][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.305736][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.650808][ T5915] netlink: 48 bytes leftover after parsing attributes in process `syz.1.905'.
[   94.085216][ T5937] netem: change failed
[   94.533418][ T5954] FAULT_INJECTION: forcing a failure.
[   94.533418][ T5954] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   94.546730][ T5954] CPU: 0 UID: 0 PID: 5954 Comm: syz.0.924 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   94.546775][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   94.546788][ T5954] Call Trace:
[   94.546795][ T5954]  <TASK>
[   94.546810][ T5954]  __dump_stack+0x1d/0x30
[   94.546837][ T5954]  dump_stack_lvl+0xe8/0x140
[   94.546860][ T5954]  dump_stack+0x15/0x1b
[   94.546878][ T5954]  should_fail_ex+0x265/0x280
[   94.546962][ T5954]  should_fail+0xb/0x20
[   94.547035][ T5954]  should_fail_usercopy+0x1a/0x20
[   94.547068][ T5954]  _copy_from_user+0x1c/0xb0
[   94.547141][ T5954]  ___sys_sendmsg+0xc1/0x1d0
[   94.547184][ T5954]  __sys_sendmmsg+0x178/0x300
[   94.547225][ T5954]  __x64_sys_sendmmsg+0x57/0x70
[   94.547260][ T5954]  x64_sys_call+0x1c4a/0x2ff0
[   94.547384][ T5954]  do_syscall_64+0xd2/0x200
[   94.547446][ T5954]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   94.547521][ T5954]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   94.547556][ T5954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.547577][ T5954] RIP: 0033:0x7f6f9f74ec29
[   94.547594][ T5954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.547639][ T5954] RSP: 002b:00007f6f9e1af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   94.547664][ T5954] RAX: ffffffffffffffda RBX: 00007f6f9f995fa0 RCX: 00007f6f9f74ec29
[   94.547680][ T5954] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[   94.547696][ T5954] RBP: 00007f6f9e1af090 R08: 0000000000000000 R09: 0000000000000000
[   94.547712][ T5954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   94.547727][ T5954] R13: 00007f6f9f996038 R14: 00007f6f9f995fa0 R15: 00007ffc7f2ca7e8
[   94.547832][ T5954]  </TASK>
[   94.934836][ T5965] __nla_validate_parse: 3 callbacks suppressed
[   94.934858][ T5965] netlink: 180 bytes leftover after parsing attributes in process `syz.3.930'.
[   95.043471][ T5973] netlink: 48 bytes leftover after parsing attributes in process `syz.3.933'.
[   95.059761][ T5973] netlink: 48 bytes leftover after parsing attributes in process `syz.3.933'.
[   95.277132][ T5985] netlink: 200 bytes leftover after parsing attributes in process `syz.3.937'.
[   95.506663][ T5929] loop5: detected capacity change from 0 to 1024
[   95.557337][ T5929] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.912: Failed to acquire dquot type 0
[   95.574093][ T5929] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   95.594964][ T5929] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.912: corrupted inode contents
[   95.609960][ T5929] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #13: comm syz.5.912: mark_inode_dirty error
[   95.613453][ T6000] netlink: 180 bytes leftover after parsing attributes in process `syz.2.943'.
[   95.625867][ T5929] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.912: corrupted inode contents
[   95.644238][ T5929] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.912: mark_inode_dirty error
[   95.657818][ T5929] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.912: corrupted inode contents
[   95.684803][ T5929] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[   95.713927][ T5929] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.912: corrupted inode contents
[   95.732854][ T5929] EXT4-fs error (device loop5): ext4_truncate:4666: inode #13: comm syz.5.912: mark_inode_dirty error
[   95.746455][ T5929] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[   95.753137][ T6012] netlink: 'syz.0.949': attribute type 10 has an invalid length.
[   95.770457][ T5929] EXT4-fs (loop5): 1 truncate cleaned up
[   95.784620][ T5929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.824292][ T6012] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.831663][ T6012] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.834815][ T5929] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.912: Failed to acquire dquot type 0
[   95.842126][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.857753][ T6012] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.865254][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.872459][ T6012] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.882838][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.950'.
[   95.896277][ T6012] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   95.905350][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'.
[   95.917145][ T6015] bridge_slave_1: left allmulticast mode
[   95.922929][ T6015] bridge_slave_1: left promiscuous mode
[   95.928861][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.006257][ T6015] bridge_slave_0: left allmulticast mode
[   96.012157][ T6015] bridge_slave_0: left promiscuous mode
[   96.018011][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.031214][ T6015] bond0: (slave bridge0): Releasing backup interface
[   96.064346][ T6022] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[   96.070899][ T6022] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   96.078698][ T6022] vhci_hcd vhci_hcd.0: Device attached
[   96.089419][ T6023] vhci_hcd: connection closed
[   96.089583][   T31] vhci_hcd: stop threads
[   96.098657][   T31] vhci_hcd: release socket
[   96.103280][   T31] vhci_hcd: disconnect device
[   96.127172][ T6029] netlink: 180 bytes leftover after parsing attributes in process `syz.3.956'.
[   96.138835][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.178280][ T6035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.187070][ T6035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.357893][ T6057] netlink: 200 bytes leftover after parsing attributes in process `syz.2.968'.
[   96.637467][ T6060] random: crng reseeded on system resumption
[   96.915510][ T6055] loop5: detected capacity change from 0 to 1024
[   96.928096][ T6068] FAULT_INJECTION: forcing a failure.
[   96.928096][ T6068] name failslab, interval 1, probability 0, space 0, times 0
[   96.940871][ T6068] CPU: 0 UID: 0 PID: 6068 Comm: syz.3.972 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   96.940905][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   96.940920][ T6068] Call Trace:
[   96.940929][ T6068]  <TASK>
[   96.940938][ T6068]  __dump_stack+0x1d/0x30
[   96.940984][ T6068]  dump_stack_lvl+0xe8/0x140
[   96.941008][ T6068]  dump_stack+0x15/0x1b
[   96.941029][ T6068]  should_fail_ex+0x265/0x280
[   96.941058][ T6068]  should_failslab+0x8c/0xb0
[   96.941090][ T6068]  __kmalloc_noprof+0xa5/0x3e0
[   96.941169][ T6068]  ? usb_alloc_urb+0x42/0xc0
[   96.941264][ T6068]  usb_alloc_urb+0x42/0xc0
[   96.941295][ T6068]  alloc_async+0x41/0x90
[   96.941378][ T6068]  proc_do_submiturb+0x76d/0x1d20
[   96.941407][ T6068]  proc_submiturb+0x7b/0xa0
[   96.941460][ T6068]  usbdev_ioctl+0xcc2/0x1710
[   96.941520][ T6068]  ? __pfx_usbdev_ioctl+0x10/0x10
[   96.941613][ T6068]  __se_sys_ioctl+0xce/0x140
[   96.941642][ T6068]  __x64_sys_ioctl+0x43/0x50
[   96.941671][ T6068]  x64_sys_call+0x1816/0x2ff0
[   96.941698][ T6068]  do_syscall_64+0xd2/0x200
[   96.941739][ T6068]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   96.941782][ T6068]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   96.941814][ T6068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.941841][ T6068] RIP: 0033:0x7fce4603ec29
[   96.941856][ T6068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   96.941874][ T6068] RSP: 002b:00007fce44aa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   96.941896][ T6068] RAX: ffffffffffffffda RBX: 00007fce46285fa0 RCX: 00007fce4603ec29
[   96.941912][ T6068] RDX: 0000200000000140 RSI: 000000008038550a RDI: 0000000000000003
[   96.941928][ T6068] RBP: 00007fce44aa7090 R08: 0000000000000000 R09: 0000000000000000
[   96.941944][ T6068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   96.941960][ T6068] R13: 00007fce46286038 R14: 00007fce46285fa0 R15: 00007ffc7b9030e8
[   96.942024][ T6068]  </TASK>
[   97.185008][ T6055] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.967: Failed to acquire dquot type 0
[   97.225004][ T6071] vhci_hcd: invalid port number 236
[   97.230269][ T6071] vhci_hcd: invalid port number 236
[   97.253158][ T6055] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   97.269351][ T3413] usb 7-1: enqueue for inactive port 0
[   97.283908][ T3413] usb 7-1: enqueue for inactive port 0
[   97.306872][ T6055] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.967: corrupted inode contents
[   97.321779][ T6081] FAULT_INJECTION: forcing a failure.
[   97.321779][ T6081] name failslab, interval 1, probability 0, space 0, times 0
[   97.334446][ T6081] CPU: 0 UID: 0 PID: 6081 Comm: syz.2.975 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   97.334473][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   97.334504][ T6081] Call Trace:
[   97.334511][ T6081]  <TASK>
[   97.334519][ T6081]  __dump_stack+0x1d/0x30
[   97.334607][ T6081]  dump_stack_lvl+0xe8/0x140
[   97.334632][ T6081]  dump_stack+0x15/0x1b
[   97.334662][ T6081]  should_fail_ex+0x265/0x280
[   97.334712][ T6081]  should_failslab+0x8c/0xb0
[   97.334816][ T6081]  kmem_cache_alloc_node_noprof+0x57/0x320
[   97.334845][ T6081]  ? __alloc_skb+0x101/0x320
[   97.334874][ T6081]  __alloc_skb+0x101/0x320
[   97.334937][ T6081]  inet6_rt_notify+0x8b/0x1d0
[   97.334962][ T6081]  ? call_fib_notifiers+0x7e/0xa0
[   97.334994][ T6081]  fib6_add_rt2node+0xbe4/0x1760
[   97.335029][ T6081]  ? fib6_add_1+0x97e/0xa80
[   97.335105][ T6081]  fib6_add+0x5b9/0xe00
[   97.335132][ T6081]  ? __ipv6_addr_type+0x1ed/0x210
[   97.335162][ T6081]  ? ip6_route_info_create_nh+0x559/0x610
[   97.335259][ T6081]  ip6_route_add+0xc7/0x170
[   97.335321][ T6081]  rt6_add_dflt_router+0x10c/0x1c0
[   97.335353][ T6081]  ndisc_router_discovery+0x86e/0x1c90
[   97.335390][ T6081]  ? ndisc_router_discovery+0x380/0x1c90
[   97.335424][ T6081]  ? __list_add_valid_or_report+0x38/0xe0
[   97.335548][ T6081]  ndisc_rcv+0x2ad/0x3d0
[   97.335576][ T6081]  ? __skb_checksum_complete+0x13a/0x1c0
[   97.335609][ T6081]  icmpv6_rcv+0xe5a/0x12f0
[   97.335738][ T6081]  ? ip6_pol_route+0x9ae/0xb40
[   97.335758][ T6081]  ? ipv6_chk_mcast_addr+0x1fd/0x210
[   97.335797][ T6081]  ? __pfx_icmpv6_rcv+0x10/0x10
[   97.335830][ T6081]  ip6_protocol_deliver_rcu+0xb27/0x10d0
[   97.335949][ T6081]  ip6_input_finish+0xf0/0x1d0
[   97.335985][ T6081]  ip6_input+0x5e/0x140
[   97.336020][ T6081]  ? __pfx_ip6_input_finish+0x10/0x10
[   97.336108][ T6081]  ip6_mc_input+0x27c/0x470
[   97.336151][ T6081]  ip6_rcv_finish+0x336/0x340
[   97.336181][ T6081]  ipv6_rcv+0x72/0x150
[   97.336243][ T6081]  ? __pfx_ip6_rcv_finish+0x10/0x10
[   97.336311][ T6081]  __netif_receive_skb+0x9e/0x270
[   97.336400][ T6081]  ? tun_rx_batched+0xc7/0x430
[   97.336424][ T6081]  netif_receive_skb+0x4b/0x2e0
[   97.336459][ T6081]  ? tun_rx_batched+0xc7/0x430
[   97.336482][ T6081]  tun_rx_batched+0xfc/0x430
[   97.336522][ T6081]  tun_get_user+0x1eb6/0x2680
[   97.336594][ T6081]  ? ref_tracker_alloc+0x1f2/0x2f0
[   97.336700][ T6081]  tun_chr_write_iter+0x15e/0x210
[   97.336720][ T6081]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   97.336737][ T6081]  vfs_write+0x527/0x960
[   97.336766][ T6081]  ksys_write+0xda/0x1a0
[   97.336794][ T6081]  __x64_sys_write+0x40/0x50
[   97.336892][ T6081]  x64_sys_call+0x27fe/0x2ff0
[   97.336951][ T6081]  do_syscall_64+0xd2/0x200
[   97.336983][ T6081]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   97.337013][ T6081]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   97.337082][ T6081]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.337117][ T6081] RIP: 0033:0x7fb0726cd6df
[   97.337133][ T6081] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[   97.337150][ T6081] RSP: 002b:00007fb07112f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   97.337172][ T6081] RAX: ffffffffffffffda RBX: 00007fb072915fa0 RCX: 00007fb0726cd6df
[   97.337186][ T6081] RDX: 00000000000003b6 RSI: 0000200000000940 RDI: 00000000000000c8
[   97.337228][ T6081] RBP: 00007fb07112f090 R08: 0000000000000000 R09: 0000000000000000
[   97.337241][ T6081] R10: 00000000000003b6 R11: 0000000000000293 R12: 0000000000000002
[   97.337253][ T6081] R13: 00007fb072916038 R14: 00007fb072915fa0 R15: 00007ffea97eeab8
[   97.337349][ T6081]  </TASK>
[   97.707708][ T3413] vhci_hcd: vhci_device speed not set
[   97.723150][ T6081] syz.2.975 (6081) used greatest stack depth: 9992 bytes left
[   97.738720][ T6055] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #13: comm syz.5.967: mark_inode_dirty error
[   97.771416][   T29] kauditd_printk_skb: 207 callbacks suppressed
[   97.771432][   T29] audit: type=1400 audit(1758311869.673:2410): avc:  denied  { getopt } for  pid=6092 comm="syz.0.979" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   97.803953][ T6055] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.967: corrupted inode contents
[   97.817561][ T6093] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.840927][ T6055] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.967: mark_inode_dirty error
[   97.860155][ T6055] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.967: corrupted inode contents
[   97.881157][ T6093] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.881394][ T6055] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[   97.909808][ T6055] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.967: corrupted inode contents
[   97.928279][ T6055] EXT4-fs error (device loop5): ext4_truncate:4666: inode #13: comm syz.5.967: mark_inode_dirty error
[   98.035522][ T6093] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.045620][ T6055] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[   98.073309][ T6055] EXT4-fs (loop5): 1 truncate cleaned up
[   98.085167][ T6055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.144126][ T6055] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5
[   98.157026][ T6055] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[   98.167215][ T6055] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.967: Failed to acquire dquot type 0
[   98.179725][ T6093] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.224486][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.240951][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.255082][ T1089] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.268403][ T1089] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.288658][   T29] audit: type=1400 audit(1758311870.185:2411): avc:  denied  { watch watch_reads } for  pid=6105 comm="syz.1.981" path="/178" dev="tmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   98.312885][ T1089] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.322412][ T6112] netlink: 200 bytes leftover after parsing attributes in process `syz.3.984'.
[   98.336266][ T5612] ==================================================================
[   98.344389][ T5612] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru
[   98.351956][ T5612] 
[   98.354294][ T5612] read-write to 0xffff888237d25ea8 of 1 bytes by task 6109 on cpu 1:
[   98.362371][ T5612]  folio_add_lru+0xa5/0x1f0
[   98.366885][ T5612]  shmem_get_folio_gfp+0x7ab/0xd60
[   98.372658][ T5612]  shmem_fault+0xf6/0x250
[   98.377016][ T5612]  __do_fault+0xbc/0x200
[   98.381649][ T5612]  handle_mm_fault+0xf78/0x2c20
[   98.386526][ T5612]  __get_user_pages+0x102e/0x1fa0
[   98.391577][ T5612]  __mm_populate+0x243/0x3a0
[   98.396270][ T5612]  vm_mmap_pgoff+0x232/0x2e0
[   98.400893][ T5612]  ksys_mmap_pgoff+0xc2/0x310
[   98.405591][ T5612]  x64_sys_call+0x14a3/0x2ff0
[   98.410342][ T5612]  do_syscall_64+0xd2/0x200
[   98.414873][ T5612]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.420788][ T5612] 
[   98.423293][ T5612] read to 0xffff888237d25ea8 of 1 bytes by task 5612 on cpu 0:
[   98.430853][ T5612]  __lru_add_drain_all+0x12b/0x3f0
[   98.435993][ T5612]  lru_add_drain_all+0x10/0x20
[   98.440780][ T5612]  invalidate_bdev+0x47/0x70
[   98.445411][ T5612]  ext4_put_super+0x624/0x7d0
[   98.450111][ T5612]  generic_shutdown_super+0xe6/0x210
[   98.455425][ T5612]  kill_block_super+0x2a/0x70
[   98.460117][ T5612]  ext4_kill_sb+0x42/0x80
[   98.464480][ T5612]  deactivate_locked_super+0x75/0x1c0
[   98.469890][ T5612]  deactivate_super+0x97/0xa0
[   98.474626][ T5612]  cleanup_mnt+0x269/0x2e0
[   98.479061][ T5612]  __cleanup_mnt+0x19/0x20
[   98.483510][ T5612]  task_work_run+0x12e/0x1a0
[   98.488127][ T5612]  exit_to_user_mode_loop+0xe4/0x100
[   98.493447][ T5612]  do_syscall_64+0x1d6/0x200
[   98.498068][ T5612]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.503976][ T5612] 
[   98.506306][ T5612] value changed: 0x0f -> 0x11
[   98.511006][ T5612] 
[   98.513374][ T5612] Reported by Kernel Concurrency Sanitizer on:
[   98.519539][ T5612] CPU: 0 UID: 0 PID: 5612 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[   98.529440][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   98.539511][ T5612] ==================================================================