last executing test programs:

5.338261654s ago: executing program 4 (id=4156):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x8fd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
socket$key(0xf, 0x3, 0x2)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0x400000, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{}, &(0x7f0000000b40), &(0x7f0000000b80)=r0}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x8, '\x00', 0x0, r4, 0x1, 0x5, 0x4}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x3, 0x74db, 0x2, 0xfd6b, 0x100, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

5.290432308s ago: executing program 4 (id=4157):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x80, 0x7ffc1ffb}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000040)={0x0, 0x1, 0x9})

5.124706901s ago: executing program 4 (id=4158):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]})
syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x40000000, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
semop(0x0, 0x0, 0x0)
r0 = semget(0x1, 0x4, 0x39c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000617173f1000000000000b7080000b2e980007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000950b649bace4ff048a8db9a26a993f2170f0c07488bc6270876840d8387cfc0b7af594db22ffb943216a93ef6446790ecbc5c80f82010dcd9868d99ecbd4716113733d29ccd94cdfe285971b30501f92743f909698"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10)
sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0)
semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2)
semop(r0, &(0x7f00000001c0)=[{0x3, 0x3, 0x800}, {0x1, 0xbbdd, 0x1000}], 0x2)
unshare(0x60200)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = semget(0x1, 0x4, 0x39c)
semctl$IPC_RMID(r7, 0x0, 0x0)

4.572457874s ago: executing program 4 (id=4170):
getpgrp(0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18)
r1 = creat(0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r3 = gettid()
timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
readv(r4, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20)
r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r6, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x7000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf)
r8 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d616373656300001400028005000600000000", @ANYRES32=r9], 0x4c}}, 0x0)
ioctl$TCFLSH(r7, 0x400455c8, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000140)=0x1b)

1.665813651s ago: executing program 1 (id=4247):
socket$kcm(0x10, 0x2, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000900000044"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)

1.640614523s ago: executing program 1 (id=4248):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
socket$inet_sctp(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0x1, r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13)
perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffff9c, 0x0, 0x0, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d0000008500000023"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r4 = getpid()
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r5)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000000000)

1.633788433s ago: executing program 3 (id=4249):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x30bd27, 0x4000005, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x8000)

1.613572885s ago: executing program 3 (id=4250):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000900)='kfree\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000440)=@v3={0x3000000, [{0x380000, 0x407}, {0x1, 0x3}]}, 0x18, 0x0)

1.597895386s ago: executing program 3 (id=4251):
r0 = socket$igmp(0x2, 0x3, 0x2)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={r1, @multicast2, @multicast1}, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000400000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x18)
r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r6, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x4}, 0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@nouid32}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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")
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0)
r10 = getuid()
setreuid(0xffffffffffffffff, r10)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@private2}, 0x0, @in6=@mcast2}}, 0x0)
lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f0000000200)=@v3={0x3000000, [{}, {0x3, 0x9}], r11}, 0x18, 0x2)
statx(r9, &(0x7f00000005c0)='./file2\x00', 0x4000, 0x1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
mount$9p_fd(0x0, &(0x7f0000000200)='./file2\x00', &(0x7f0000000380), 0x0, &(0x7f00000007c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0xffffffffffffff7f}}, {@access_uid}, {@noxattr}, {@access_uid={'access', 0x3d, r10}}], [{@euid_lt={'euid<', r11}}, {@fowner_eq={'fowner', 0x3d, r12}}, {@obj_user}, {@subj_role={'subj_role', 0x3d, 'nouid32'}}, {@pcr={'pcr', 0x3d, 0x2e}}]}})
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'veth0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040884)

1.283551141s ago: executing program 2 (id=4252):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x1, 0x7fff000a}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSKBENT(r2, 0x4b47, 0x0)

1.213502656s ago: executing program 2 (id=4254):
r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000013c0)={'gretap0\x00', &(0x7f0000001300)={'syztnl2\x00', <r3=>0x0, 0x700, 0x8000, 0x6, 0xa, {{0x24, 0x4, 0x1, 0x9, 0x90, 0x65, 0x0, 0x3, 0x0, 0x0, @local, @loopback, {[@lsrr={0x83, 0x13, 0x3a, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback]}, @cipso={0x86, 0x56, 0x3, [{0x7, 0x11, "36e306f01e8a31ebaec982dbe264f8"}, {0x7, 0x10, "42d008126a36005ba2ce11153ea0"}, {0x5, 0xe, "e1f0b042881859d5ec1d310f"}, {0x7, 0x3, '8'}, {0x5, 0xc, "55af55b3c9c8098d7546"}, {0x0, 0x7, "38e13ba596"}, {0x6, 0xb, "68c14e1c8594cb13f1"}]}, @ssrr={0x89, 0x13, 0xa6, [@remote, @multicast1, @multicast1, @multicast2]}]}}}}}) (async)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001400), 0x4) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001480)={0x81, <r5=>0x0}, 0x8) (async)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001680)=@bpf_lsm={0x1d, 0x2, &(0x7f00000014c0)=@raw=[@map_idx={0x18, 0x8, 0x5, 0x0, 0x5}], &(0x7f0000001500)='GPL\x00', 0x9, 0xa5, &(0x7f0000001540)=""/165, 0x41100, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x4, 0x2, 0x5e, 0x10000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001640)=[r0, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6bfd}, 0x94) (async)
r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001780)={{0x1, 0x1, 0x18, <r8=>r0}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xb, &(0x7f0000000240)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7fff}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x7, 0x1, 0x1, 0x5, 0x0, 0xfffffffffffffffc, 0x8}, @jmp={0x5, 0x0, 0x1, 0x8, 0xb, 0xc, 0x8}], &(0x7f00000002c0)='GPL\x00', 0x158713ca, 0x1000, &(0x7f0000000300)=""/4096, 0x41100, 0x8, '\x00', r3, @fallback=0x2d, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440)={0x4, 0x2, 0x2, 0x9}, 0x10, r5, r6, 0x0, &(0x7f00000017c0)=[0xffffffffffffffff, r7, r8], 0x0, 0x10, 0x1}, 0x94) (async)
getsockopt$inet_opts(r7, 0x0, 0x0, &(0x7f00000018c0)=""/31, &(0x7f0000001900)=0x1f)
sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004081) (async)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x110, r9, 0x5e669000) (async)
ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000001a40)={0x0, 0x7}) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000001c00)={{0x1, 0x1, 0x18, <r10=>r6}, './file0\x00'})
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x1b, &(0x7f0000001a80)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}], &(0x7f0000001b80)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x1, '\x00', r3, @fallback=0x27, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001bc0)={0x4, 0x2, 0x80}, 0x10, 0xffffffffffffffff, r7, 0x2, &(0x7f0000001c40)=[r8, r10, r7, r1], &(0x7f0000001c80)=[{0x3, 0x1, 0x4, 0x4}, {0x0, 0x1, 0x10, 0x4}], 0x10, 0xe42}, 0x94) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000001d80), r10) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000001dc0)={{0x1, 0x1, 0x18, <r12=>r2, {<r13=>0xffffffffffffffff, 0xee01}}, './file0\x00'})
quotactl_fd$Q_GETINFO(r7, 0xffffffff80000500, r13, &(0x7f0000001e00))
socket$nl_rdma(0x10, 0x3, 0x14)
r14 = signalfd(r11, &(0x7f0000001e40)={[0x6]}, 0x8)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r14, &(0x7f00000021c0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002180)={&(0x7f0000001ec0)={0x29c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x45}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff9}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x16e, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0x99, 0x95}}, @link_id={0x65, 0x12, {@from_mac, @device_b}}, @perr={0x84, 0x3b, {0x2, 0x3, [{{0x0, 0x1}, @broadcast, 0x5, @value=@device_b, 0x8}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0xd}, {{0x0, 0x1}, @device_b, 0x6, @value, 0x38}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x10, 0x7, 0xff}}, @challenge={0x10, 0x1, 0xcf}, @tim={0x5, 0xf4, {0x0, 0x8, 0x6, "130e12fddb369f69160d682971b75012059308b6c4810676ae3d284a526f32d6709c4145ec9ca384d122c50f5ca11090d16ed26646077197ae3611a6226c6287a7abb28a71763426bb613e0c5d9d16e412e737b7bf912b38cc42f422794e9bcb52c6253dc0f871ed9c01db56c08c8f07f37175c6ffd5109f80ce8de79b453b6c3f9f38639c5643fdb40280ce0855400d6a735dda40204d60c9502d141fa39eb9bad4915302e453ec4aca2f1cf49656d8f1474f9de2dd476550965d8deb78aca50e1128ff3d7b4a8556d04898d0bf3914a078768398edda6d6c0be8c791ec7458c3b10a42887e80b3b64dfed33de06e88c5"}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x11, 0x34, @random="b96097e2eb71e9be069a39299c"}, @NL80211_ATTR_IE={0x27, 0x2a, [@supported_rates, @channel_switch={0x25, 0x3, {0x0, 0x74, 0xc9}}, @ht={0x2d, 0x1a, {0x10, 0x2, 0x3, 0x0, {0x800, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x1, 0x36}}]}, @NL80211_ATTR_IE={0x98, 0x2a, [@challenge={0x10, 0x1, 0x51}, @chsw_timing={0x68, 0x4, {0x0, 0x100}}, @link_id={0x65, 0x12, {@from_mac, @device_b, @device_b}}, @ssid={0x0, 0x1a, @random="03860788e2010924202954f79d0fc788b13bb90a9829bcb2ce7d"}, @supported_rates={0x1, 0x7, [{0x1, 0x1}, {0x12, 0x1}, {0x16, 0x1}, {0x6, 0x1}, {0x24}, {0x4c, 0x1}, {0x2, 0x1}]}, @random_vendor={0xdd, 0x37, "c3c6ba72daac169b04b5e93c24d90c0322a49f80c8955d1b703bdc25079a01dadd419446453d1db491136a4cac4f77fa8c3ef00ed13d97"}, @mesh_id={0x72, 0x6}, @mesh_chsw={0x76, 0x6, {0x80, 0x1, 0x14, 0x3}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7f, 0xb7, 0xf4}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_MAC={0xa}]}, 0x29c}, 0x1, 0x0, 0x0, 0x10}, 0x40080) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002240)={&(0x7f0000002200)='kmem_cache_free\x00', r7, 0x0, 0x8000000000000000}, 0x18) (async)
ioctl$FS_IOC_FSGETXATTR(r9, 0x801c581f, &(0x7f0000002280)={0x1, 0x0, 0xe7ed, 0x6, 0x10000}) (async)
sendmsg$NFNL_MSG_ACCT_NEW(r12, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0xf9a56b25994262b8}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x7c, 0x0, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x400}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x100}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40840}, 0x40804) (async)
ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000002400)={0x1, {0x2, 0x8, 0xb8, 0x100, 0x2fd4}}) (async)
ioctl$BLKGETSIZE(r7, 0x1260, &(0x7f0000002440)) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000002480)={0x0, 0x4}, &(0x7f00000024c0)=0x8)

1.147898211s ago: executing program 2 (id=4257):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000740)='sys_enter\x00', r1, 0x0, 0x400}, 0x18)
umount2(0x0, 0x1)

996.778213ms ago: executing program 0 (id=4259):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x73, &(0x7f0000000240)={&(0x7f0000000c40)=@delchain={0x6c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x9}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

996.471443ms ago: executing program 2 (id=4260):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x18)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_buf(r2, 0x0, 0x29, 0x0, &(0x7f0000003180))
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000040)=""/3, &(0x7f0000000140)=0x3)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0)
pipe(&(0x7f0000000500))
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd')
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x30bd27, 0x4000005, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x101, 0x3, 0xc, 0x13}, {0x7, 0x2, 0x8001, 0x200, 0x2, 0x7}, 0xffffff80, 0x947, 0xe03}}, @TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x6, 0x6b16, 0x7, 0xfffffffd, 0x8, 0x8, 0x3, 0x7, 0x7, 0x25, 0x0, 0x80, 0x9, 0x30, 0x8, 0x81, 0x9, 0x2, 0x8, 0x40, 0x8, 0x80000001, 0x608cccb7, 0x10000400, 0x7a2, 0x5, 0x400, 0x3, 0xffffeffa, 0x6, 0x6, 0xaf8, 0x4, 0x3, 0x3ff, 0x9, 0x2, 0x3, 0x10001, 0x1, 0x5, 0x10001, 0x3, 0x59, 0x3, 0xd54e, 0x40, 0x6, 0xd, 0x0, 0x28, 0x9, 0xa4800000, 0x1, 0xa0, 0x1, 0x7, 0x4, 0x1, 0x7, 0x4, 0xff, 0x5, 0x7, 0x3ff, 0x3, 0xf6a5, 0x7fffffff, 0x8, 0x2, 0xcff, 0xfffffacf, 0x0, 0x4, 0x10001, 0xa, 0x1, 0x2, 0x8002, 0x5, 0x5, 0x5, 0xfffffffb, 0x5, 0x0, 0x4, 0x4edcaeea, 0x2, 0xe, 0xe, 0xfff, 0x4, 0x496c01fc, 0x4, 0x7fffffff, 0x9, 0x8, 0x12, 0x9, 0x80000001, 0x325b, 0x7, 0x0, 0x80000006, 0x2, 0x3, 0x5, 0x1, 0x18001, 0x5, 0x94, 0x2, 0x9, 0x7, 0x3, 0x5, 0x80, 0x1, 0xffffffff, 0x4, 0x0, 0x4, 0x3, 0x4, 0x5, 0xa993, 0x200, 0x6847adf1, 0x6, 0x9, 0x81, 0x7, 0x5, 0x5, 0x7fffffff, 0x8, 0xc, 0xd, 0x2, 0x1, 0x7fffffff, 0x8, 0x1, 0x8, 0x8, 0x91e, 0x4, 0xe, 0x8001, 0x20008, 0x40000, 0x0, 0x9, 0xd, 0x5, 0x8, 0x100, 0x8, 0x0, 0x1, 0x2, 0x9, 0x6, 0x3ff, 0x5, 0x1, 0xf682, 0x40, 0x637, 0x8, 0x3, 0x1fffe, 0xfffdfffe, 0x5, 0x1, 0xfffffff8, 0xa608, 0x23972b48, 0x7, 0x2, 0x0, 0xd, 0x4, 0xa, 0x5, 0x6, 0x10, 0x5, 0x5, 0x10, 0x41, 0x2, 0x76, 0x3, 0xfffffffa, 0x7, 0x2, 0x20004, 0x40, 0x9, 0x6, 0x2ef, 0xfffffffb, 0xcf30, 0x8, 0x4, 0xffffff8a, 0x0, 0x4, 0x80000000, 0x4, 0x2, 0x0, 0x2, 0x6, 0xfff, 0x4, 0x1, 0x40, 0x5, 0x9, 0x5, 0x8, 0x80000000, 0x0, 0x3, 0xeff, 0x6, 0x8001, 0x8, 0xc, 0x3, 0x1, 0x0, 0x5, 0x8, 0x6c67, 0x800, 0xffffff59, 0x9, 0x0, 0x303, 0x7, 0x1, 0x2, 0x6, 0x6, 0x7, 0x4, 0xc, 0x42, 0x3c04, 0x5f, 0x5fa, 0x1]}]}}]}, 0x45c}}, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

980.559904ms ago: executing program 3 (id=4261):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x30bd27, 0x4000005, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x8000)

922.015418ms ago: executing program 4 (id=4262):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060089"], 0x24}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x200448c0)

862.429453ms ago: executing program 0 (id=4263):
r0 = socket(0x10, 0x803, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='kfree\x00', r1, 0x0, 0x2}, 0x18)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000506fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315001f00000000140012800b0001006d6163736563000004001f8008b7c439", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x26}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000840))
getsockname$packet(r0, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000008c0)=0x14)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r8, {0xffe0}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x40)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x4, 0xff, 0x6}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000010, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf6, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1bc, 0x9, 0xac, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0xa, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0xc, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0xb53, 0x5, 0x1, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffbf7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x10008, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xeffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)={'team0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}}, 0x0)

830.737785ms ago: executing program 0 (id=4264):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x1, 0x7fff000a}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSKBENT(r2, 0x4b47, 0x0)

825.508966ms ago: executing program 3 (id=4265):
r0 = socket$igmp(0x2, 0x3, 0x2)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={r1, @multicast2, @multicast1}, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000400000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x18)
r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x4}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@nouid32}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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")
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)

790.123769ms ago: executing program 0 (id=4266):
syz_emit_ethernet(0x3b5, &(0x7f0000000440)={@link_local, @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x37f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff8, 0x6, [{0x1f, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af18"}, {0x0, 0x1, "000000000000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x22, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0xe, 0xb, "17dcea46805d4809c20547406b18901b20eff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x2, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

787.013739ms ago: executing program 0 (id=4267):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000dd04f4ff0900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat2(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x4020, 0x8d, 0x10}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000200), &(0x7f00000004c0)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000318f409bbc28cfa2fa8358d7c2ad5b191758b32bebf433bb049a79f1b501e2a697e06e2a7a2b674f88e9c2fe27402235b821f2c5a94a3fd5b6becfb72baa5d49d58ff6b6f1da02b3e66a6e3735c40bca6e9a6eb3054bb2dfe3ca4940a6e25114b937342d40d746c46c1adc394613ec"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff6c}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x9c, r5, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7f}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_OURS={0x54, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4a, 0x4, "0f86925fa6c39daf1e47a4e262863530a911a459daebf0a1e7785d3402ae5dc1cacdca4a34e4d305f6314d0b00674f76589703bdc446846fa301b442f6e071a5d0799b453945"}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040)
r6 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0xc, 0x8, 0x0, 0x1f, 0x4204, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0x3)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000800)={<r7=>0x0, @broadcast, @local}, &(0x7f0000000840)=0xc)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)={@ifindex=r7, 0xffffffffffffffff, 0x7, 0x10, r4, @void, @value=r3}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r12)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="f510"])
r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0)
close(r13)
openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0)
setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000006c0)={r11, @local, @dev={0xac, 0x14, 0x14, 0x31}}, 0xc)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0xb00, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0xe, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

710.864595ms ago: executing program 2 (id=4268):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800)
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000280)={'batadv_slave_1\x00', 0x7})
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)

664.770649ms ago: executing program 2 (id=4269):
r0 = socket(0xa, 0x1, 0x0)
epoll_create1(0x0)
prlimit64(0x0, 0xc, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000036c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003680)={&(0x7f00000035c0)=ANY=[@ANYBLOB="00f20804", @ANYRES16=0x0, @ANYBLOB="000427bd7000ffdbdf2510000000540001801400030000000000000000000000000000000001140003000a010101000000000000000000000000080009004e000000060004004e23000008000500040000000800080003000000060001000200000054000180070006006c6300000600010002000000080005000200000014000300000000000000000000000000000000000c0007000800000021000000080005000000000008000600736564000800050001000000"], 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x8800)
recvmmsg(r1, &(0x7f0000003580)=[{{&(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001600)=""/163, 0xa3}, {&(0x7f0000000000)=""/57, 0x39}, {&(0x7f0000001540)=""/125, 0x7d}], 0x4, &(0x7f0000003700)=""/4096, 0x1000}, 0x7fff}], 0x1, 0x10022, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$GIO_CMAP(r3, 0x4b70, 0x0)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x9effffff, {{0xa, 0x0, 0xfffffffd, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
close(r4)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x95}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108)
ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x400, 0x2002)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r6 = fsopen(&(0x7f0000001480)='fuseblk\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000070000000080080001000000081000002022b98312cf59", @ANYRES32=r7, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYRESHEX], 0x50)

664.420429ms ago: executing program 1 (id=4270):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
fchdir(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20)
linkat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r4}, 0x38)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0)
r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x101102, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
r10 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r10, 0x0, 0x0, 0x6, 0x0)
mq_timedreceive(r10, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0)

535.943009ms ago: executing program 4 (id=4271):
r0 = socket$igmp(0x2, 0x3, 0x2)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={r1, @multicast2, @multicast1}, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000400000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x18)
r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r6, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x4}, 0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@nouid32}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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")
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0)
r10 = getuid()
setreuid(0xffffffffffffffff, r10)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@private2}, 0x0, @in6=@mcast2}}, 0x0)
lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f0000000200)=@v3={0x3000000, [{}, {0x3, 0x9}], r11}, 0x18, 0x2)
statx(r9, &(0x7f00000005c0)='./file2\x00', 0x4000, 0x1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
mount$9p_fd(0x0, &(0x7f0000000200)='./file2\x00', &(0x7f0000000380), 0x0, &(0x7f00000007c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0xffffffffffffff7f}}, {@access_uid}, {@noxattr}, {@access_uid={'access', 0x3d, r10}}], [{@euid_lt={'euid<', r11}}, {@fowner_eq={'fowner', 0x3d, r12}}, {@obj_user}, {@subj_role={'subj_role', 0x3d, 'nouid32'}}, {@pcr={'pcr', 0x3d, 0x2e}}]}})
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'veth0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040884)

523.18472ms ago: executing program 0 (id=4272):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060089"], 0x24}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r5 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x200448c0)

412.657829ms ago: executing program 1 (id=4273):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = io_uring_setup(0xf07, &(0x7f0000000580)={0x0, 0x400826e, 0x1, 0x3, 0xf0})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f00000004c0)=""/140, 0x8c}, {0x0}], 0x3)
syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46)
io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1)

412.502119ms ago: executing program 1 (id=4274):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "f1a1173fb9462d3509e67197f90be6e423ceb0ab4912f9f6a31854ec7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff)
keyctl$setperm(0x5, r1, 0x30002000)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRESDEC=r1], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', r2, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4050)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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")

85.870424ms ago: executing program 3 (id=4275):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x30bd27, 0x4000005, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x101, 0x3, 0xc, 0x13}, {0x7, 0x2, 0x8001, 0x200, 0x2, 0x7}, 0xffffff80, 0x947, 0xe03}}]}}]}, 0x58}}, 0x8000)

0s ago: executing program 1 (id=4276):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0)
getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x80a, 0x0)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='8N|QA\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r2], 0x38}}, 0x0)

kernel console output (not intermixed with test programs):

happen!! Data will be lost
[  214.425866][T12626] 
[  214.435530][T12626] EXT4-fs (loop4): Total free blocks count 0
[  214.441589][T12626] EXT4-fs (loop4): Free/Dirty block details
[  214.447511][T12626] EXT4-fs (loop4): free_blocks=2415919104
[  214.453309][T12626] EXT4-fs (loop4): dirty_blocks=48
[  214.458553][T12626] EXT4-fs (loop4): Block reservation details
[  214.464590][T12626] EXT4-fs (loop4): i_reserved_data_blocks=3
[  214.533563][T12626] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #12: comm syz.4.3383: corrupted in-inode xattr: e_value size too large
[  214.569593][T12626] EXT4-fs error (device loop4): ext4_lookup:1785: inode #16: comm syz.4.3383: iget: bad i_size value: 8796093031208
[  214.619359][   T52] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 34 with error 28
[  214.658629][T12660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3396'.
[  214.675172][T12664] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3397'.
[  214.768589][T12673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3401'.
[  214.793224][T12673] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.843678][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3395'.
[  214.889294][T12673] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.950726][T12673] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.010469][T12673] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.169099][T12700] 9p: Bad value for 'source'
[  215.175693][T12700] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  215.246892][   T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.270255][   T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.289692][   T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.310033][   T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.527597][T12733] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.570207][T12733] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.630904][T12733] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.690669][T12733] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.780960][T12752] IPv6: Can't replace route, no match found
[  215.837109][T12758] FAULT_INJECTION: forcing a failure.
[  215.837109][T12758] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  215.850569][T12758] CPU: 1 UID: 0 PID: 12758 Comm: syz.1.3431 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  215.850602][T12758] Tainted: [W]=WARN
[  215.850609][T12758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  215.850624][T12758] Call Trace:
[  215.850637][T12758]  <TASK>
[  215.850644][T12758]  __dump_stack+0x1d/0x30
[  215.850712][T12758]  dump_stack_lvl+0xe8/0x140
[  215.850750][T12758]  dump_stack+0x15/0x1b
[  215.850767][T12758]  should_fail_ex+0x265/0x280
[  215.850840][T12758]  should_fail_alloc_page+0xf2/0x100
[  215.850863][T12758]  __alloc_frozen_pages_noprof+0x109/0x360
[  215.850893][T12758]  alloc_pages_mpol+0xb3/0x260
[  215.850978][T12758]  alloc_pages_noprof+0x90/0x130
[  215.851109][T12758]  __pud_alloc+0x47/0x4b0
[  215.851143][T12758]  handle_mm_fault+0x18b5/0x2c60
[  215.851245][T12758]  ? __rcu_read_unlock+0x4f/0x70
[  215.851268][T12758]  ? mt_find+0x21b/0x330
[  215.851294][T12758]  do_user_addr_fault+0x3fe/0x1080
[  215.851366][T12758]  exc_page_fault+0x62/0xa0
[  215.851470][T12758]  asm_exc_page_fault+0x26/0x30
[  215.851487][T12758] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  215.851564][T12758] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 3f 1a 02 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  215.851594][T12758] RSP: 0018:ffffc90002b4fa08 EFLAGS: 00050202
[  215.851608][T12758] RAX: ffff8881044dbc10 RBX: 00000000000000f0 RCX: 00000000000000f0
[  215.851619][T12758] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc90002b4fadc
[  215.851633][T12758] RBP: ffffc90002b4fe78 R08: 0000000000000440 R09: 0000000000000000
[  215.851644][T12758] R10: 0001c90002b4fadc R11: 0001c90002b4fbcb R12: 00000000000000f0
[  215.851655][T12758] R13: ffffc90002b4fadc R14: ffffc90002b4fadc R15: 0000200000000000
[  215.851676][T12758]  _copy_from_user+0x6f/0xb0
[  215.851769][T12758]  do_sys_poll+0x149/0xbd0
[  215.851865][T12758]  ? selinux_file_open+0x2dc/0x330
[  215.851934][T12758]  __se_sys_poll+0xdd/0x200
[  215.851957][T12758]  __x64_sys_poll+0x43/0x50
[  215.851978][T12758]  x64_sys_call+0x289f/0x3000
[  215.852023][T12758]  do_syscall_64+0xd8/0x2c0
[  215.852051][T12758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.852115][T12758] RIP: 0033:0x7faddf8ef749
[  215.852143][T12758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  215.852158][T12758] RSP: 002b:00007fadde34f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007
[  215.852175][T12758] RAX: ffffffffffffffda RBX: 00007faddfb45fa0 RCX: 00007faddf8ef749
[  215.852224][T12758] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000
[  215.852238][T12758] RBP: 00007fadde34f090 R08: 0000000000000000 R09: 0000000000000000
[  215.852251][T12758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  215.852262][T12758] R13: 00007faddfb46038 R14: 00007faddfb45fa0 R15: 00007ffe4ef97bd8
[  215.852278][T12758]  </TASK>
[  216.375977][T12779] loop1: detected capacity change from 0 to 512
[  216.392187][T12779] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  216.402580][T12782] IPv6: Can't replace route, no match found
[  216.408694][T12779] EXT4-fs (loop1): orphan cleanup on readonly fs
[  216.415482][T12779] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  216.430605][T12779] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  216.438200][T12779] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3439: bg 0: block 40: padding at end of block bitmap is not set
[  216.458139][T12779] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  216.469193][T12779] EXT4-fs (loop1): 1 truncate cleaned up
[  216.475669][T12779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  216.505059][T12791] netlink: 'syz.4.3444': attribute type 4 has an invalid length.
[  216.512875][T12779] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  216.540020][T11978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.740875][T12797] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  216.925193][T12828] IPv6: Can't replace route, no match found
[  217.046476][T12835] loop1: detected capacity change from 0 to 8192
[  217.139091][T12835]  loop1: p1 p2 p3 p4
[  217.148101][T12835] loop1: p3 start 331777 is beyond EOD, truncated
[  217.154639][T12835] loop1: p4 size 262144 extends beyond EOD, truncated
[  217.384616][T10284] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.399651][T10284] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.415853][T10284] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.424640][T10284] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.574060][T12874] lo speed is unknown, defaulting to 1000
[  217.620941][T10331] Bluetooth: hci0: Frame reassembly failed (-84)
[  217.694481][T12885] 9p: Bad value for 'source'
[  217.700911][T12885] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  217.727594][T12889] IPv6: Can't replace route, no match found
[  217.861363][T12904] __nla_validate_parse: 5 callbacks suppressed
[  217.861442][T12904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3483'.
[  217.991741][T12921] IPv6: Can't replace route, no match found
[  218.062887][T12933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.071449][T12933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.157601][T12945] IPv6: Can't replace route, no match found
[  218.308220][T12954] loop4: detected capacity change from 0 to 2048
[  218.320125][T12954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  218.387654][T12954] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  218.402708][T12954] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  218.415151][T12954] EXT4-fs (loop4): This should not happen!! Data will be lost
[  218.415151][T12954] 
[  218.424803][T12954] EXT4-fs (loop4): Total free blocks count 0
[  218.430809][T12954] EXT4-fs (loop4): Free/Dirty block details
[  218.436689][T12954] EXT4-fs (loop4): free_blocks=2415919104
[  218.442428][T12954] EXT4-fs (loop4): dirty_blocks=2064
[  218.447689][T12954] EXT4-fs (loop4): Block reservation details
[  218.453669][T12954] EXT4-fs (loop4): i_reserved_data_blocks=129
[  218.500283][T12954] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #12: comm syz.4.3507: corrupted in-inode xattr: e_value size too large
[  218.523584][T12954] EXT4-fs error (device loop4): ext4_lookup:1785: inode #16: comm syz.4.3507: iget: bad i_size value: 8796093031208
[  218.542640][T10284] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.554797][T10284] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.570833][T10284] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.603577][T10284] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.627371][T10284] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1412 with error 28
[  218.677281][T12967] FAULT_INJECTION: forcing a failure.
[  218.677281][T12967] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  218.690432][T12967] CPU: 0 UID: 0 PID: 12967 Comm: syz.0.3511 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  218.690462][T12967] Tainted: [W]=WARN
[  218.690478][T12967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  218.690492][T12967] Call Trace:
[  218.690499][T12967]  <TASK>
[  218.690507][T12967]  __dump_stack+0x1d/0x30
[  218.690533][T12967]  dump_stack_lvl+0xe8/0x140
[  218.690603][T12967]  dump_stack+0x15/0x1b
[  218.690623][T12967]  should_fail_ex+0x265/0x280
[  218.690647][T12967]  should_fail+0xb/0x20
[  218.690668][T12967]  should_fail_usercopy+0x1a/0x20
[  218.690746][T12967]  _copy_from_user+0x1c/0xb0
[  218.690772][T12967]  ___sys_sendmsg+0xc1/0x1d0
[  218.690814][T12967]  __x64_sys_sendmsg+0xd4/0x160
[  218.690888][T12967]  x64_sys_call+0x17ba/0x3000
[  218.690911][T12967]  do_syscall_64+0xd8/0x2c0
[  218.690964][T12967]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.690987][T12967] RIP: 0033:0x7f0504a8f749
[  218.691002][T12967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.691016][T12967] RSP: 002b:00007f05034ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  218.691089][T12967] RAX: ffffffffffffffda RBX: 00007f0504ce5fa0 RCX: 00007f0504a8f749
[  218.691103][T12967] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  218.691116][T12967] RBP: 00007f05034ef090 R08: 0000000000000000 R09: 0000000000000000
[  218.691130][T12967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  218.691143][T12967] R13: 00007f0504ce6038 R14: 00007f0504ce5fa0 R15: 00007ffdabca28f8
[  218.691161][T12967]  </TASK>
[  218.871032][T12969] bond1: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  218.882941][T12969] bond1 (unregistering): Released all slaves
[  218.922643][T12977] sit0: entered promiscuous mode
[  218.941769][T12977] netlink: 'syz.1.3512': attribute type 1 has an invalid length.
[  218.949666][T12977] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3512'.
[  218.967292][   T29] kauditd_printk_skb: 307 callbacks suppressed
[  218.967307][   T29] audit: type=1326 audit(1765727168.255:13541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.4.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24eb7ff749 code=0x7ffc0000
[  218.997072][   T29] audit: type=1326 audit(1765727168.255:13542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.4.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24eb7ff749 code=0x7ffc0000
[  219.020710][   T29] audit: type=1326 audit(1765727168.255:13543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.4.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24eb7ff749 code=0x7ffc0000
[  219.044441][   T29] audit: type=1326 audit(1765727168.255:13544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.4.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24eb7ff749 code=0x7ffc0000
[  219.052258][T12980] lo speed is unknown, defaulting to 1000
[  219.068071][   T29] audit: type=1326 audit(1765727168.255:13545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.4.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24eb7ff749 code=0x7ffc0000
[  219.097376][   T29] audit: type=1326 audit(1765727168.255:13546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.4.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24eb7ff749 code=0x7ffc0000
[  219.120975][   T29] audit: type=1326 audit(1765727168.255:13547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.4.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24eb7ff749 code=0x7ffc0000
[  219.144623][   T29] audit: type=1326 audit(1765727168.255:13548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.4.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24eb7ff749 code=0x7ffc0000
[  219.169116][   T29] audit: type=1326 audit(1765727168.255:13549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.4.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24eb7ff749 code=0x7ffc0000
[  219.192939][   T29] audit: type=1326 audit(1765727168.265:13550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.4.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24eb7ff749 code=0x7ffc0000
[  219.193911][T12982] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3517'.
[  219.263446][T12991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  219.276788][T12991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  219.459683][T13007] loop3: detected capacity change from 0 to 2048
[  219.470062][T13007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  219.538777][T13007] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  219.553866][T13007] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2032 with error 28
[  219.566363][T13007] EXT4-fs (loop3): This should not happen!! Data will be lost
[  219.566363][T13007] 
[  219.576007][T13007] EXT4-fs (loop3): Total free blocks count 0
[  219.582017][T13007] EXT4-fs (loop3): Free/Dirty block details
[  219.587950][T13007] EXT4-fs (loop3): free_blocks=2415919104
[  219.593750][T13007] EXT4-fs (loop3): dirty_blocks=2032
[  219.599022][T13007] EXT4-fs (loop3): Block reservation details
[  219.605001][T13007] EXT4-fs (loop3): i_reserved_data_blocks=127
[  219.628452][ T3980] Bluetooth: hci0: command 0x1003 tx timeout
[  219.634510][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  219.654752][T13007] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #12: comm syz.3.3526: corrupted in-inode xattr: e_value size too large
[  219.674213][T13007] EXT4-fs error (device loop3): ext4_lookup:1785: inode #16: comm syz.3.3526: iget: bad i_size value: 8796093031208
[  219.822218][T13013] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3527'.
[  219.855987][T13015] team0 (unregistering): Port device team_slave_0 removed
[  219.865313][T13015] team0 (unregistering): Port device team_slave_1 removed
[  219.866251][T10315] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2032 with error 28
[  219.902124][T13015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3528'.
[  219.916342][T13015] hsr_slave_1 (unregistering): left promiscuous mode
[  219.925134][T13017] FAULT_INJECTION: forcing a failure.
[  219.925134][T13017] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  219.938272][T13017] CPU: 0 UID: 0 PID: 13017 Comm: syz.3.3529 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  219.938415][T13017] Tainted: [W]=WARN
[  219.938421][T13017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  219.938434][T13017] Call Trace:
[  219.938441][T13017]  <TASK>
[  219.938449][T13017]  __dump_stack+0x1d/0x30
[  219.938469][T13017]  dump_stack_lvl+0xe8/0x140
[  219.938515][T13017]  dump_stack+0x15/0x1b
[  219.938526][T13017]  should_fail_ex+0x265/0x280
[  219.938540][T13017]  should_fail+0xb/0x20
[  219.938624][T13017]  should_fail_usercopy+0x1a/0x20
[  219.938640][T13017]  _copy_from_user+0x1c/0xb0
[  219.938660][T13017]  memdup_user+0x5e/0xd0
[  219.938670][T13017]  strndup_user+0x68/0xb0
[  219.938680][T13017]  __se_sys_mount+0x8e/0x2e0
[  219.938718][T13017]  ? fput+0x8f/0xc0
[  219.938732][T13017]  ? ksys_write+0x192/0x1a0
[  219.938743][T13017]  __x64_sys_mount+0x67/0x80
[  219.938754][T13017]  x64_sys_call+0x2cca/0x3000
[  219.938768][T13017]  do_syscall_64+0xd8/0x2c0
[  219.938930][T13017]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.938960][T13017] RIP: 0033:0x7efcbf54f749
[  219.938970][T13017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  219.938980][T13017] RSP: 002b:00007efcbdfb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  219.939015][T13017] RAX: ffffffffffffffda RBX: 00007efcbf7a5fa0 RCX: 00007efcbf54f749
[  219.939022][T13017] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100
[  219.939030][T13017] RBP: 00007efcbdfb7090 R08: 0000200000000300 R09: 0000000000000000
[  219.939037][T13017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  219.939044][T13017] R13: 00007efcbf7a6038 R14: 00007efcbf7a5fa0 R15: 00007fffcd7b4f98
[  219.939054][T13017]  </TASK>
[  220.166835][T13024] gre1: entered allmulticast mode
[  220.257341][T13035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.266153][T13035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  220.278464][T13037] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3538'.
[  220.304676][T13039] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  220.347432][T13041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3540'.
[  220.356853][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3540'.
[  220.377864][T13041] loop4: detected capacity change from 0 to 2048
[  220.390152][T13041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.402441][T13041] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.520389][T13046] loop3: detected capacity change from 0 to 1024
[  220.527260][T13046] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  220.539311][T13046] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3541: Invalid block bitmap block 0 in block_group 0
[  220.553089][T13046] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3541: Failed to acquire dquot type 0
[  220.565113][T13046] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.3541: Freeing blocks not in datazone - block = 0, count = 4096
[  220.578710][T13046] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.3541: Invalid inode bitmap blk 0 in block_group 0
[  220.591509][T13046] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  220.600097][   T52] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 0
[  220.609373][T13046] EXT4-fs (loop3): 1 orphan inode deleted
[  220.617868][T13046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.640792][T11668] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.648579][ T2029] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:11: bg 0: block 345: padding at end of block bitmap is not set
[  220.664502][ T2029] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117
[  220.677200][ T2029] EXT4-fs (loop4): This should not happen!! Data will be lost
[  220.677200][ T2029] 
[  220.711219][ T2029] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2031 with error 28
[  220.723968][ T2029] EXT4-fs (loop4): This should not happen!! Data will be lost
[  220.723968][ T2029] 
[  220.733719][ T2029] EXT4-fs (loop4): Total free blocks count 0
[  220.739749][ T2029] EXT4-fs (loop4): Free/Dirty block details
[  220.739762][ T2029] EXT4-fs (loop4): free_blocks=0
[  220.739774][ T2029] EXT4-fs (loop4): dirty_blocks=2048
[  220.739787][ T2029] EXT4-fs (loop4): Block reservation details
[  220.808880][T13063] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3549'.
[  220.865699][T13072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13072 comm=syz.3.3552
[  220.879736][T13072] SELinux:  Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped).
[  220.893737][T13078] xt_TPROXY: Can be used only with -p tcp or -p udp
[  220.929709][T13079] netlink: 'syz.1.3551': attribute type 7 has an invalid length.
[  220.958876][T13068] loop1: detected capacity change from 0 to 512
[  220.966946][T13068] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  220.992310][T13081] loop4: detected capacity change from 0 to 8192
[  220.999898][T13081] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  221.148560][ T3674] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  221.154742][   T44] Bluetooth: hci1: command 0x1003 tx timeout
[  221.225887][T13081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13081 comm=syz.4.3554
[  221.238811][T13081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3554'.
[  221.333624][T13106] FAULT_INJECTION: forcing a failure.
[  221.333624][T13106] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  221.346811][T13106] CPU: 1 UID: 0 PID: 13106 Comm: syz.3.3565 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  221.346844][T13106] Tainted: [W]=WARN
[  221.346850][T13106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  221.346862][T13106] Call Trace:
[  221.346868][T13106]  <TASK>
[  221.346874][T13106]  __dump_stack+0x1d/0x30
[  221.346897][T13106]  dump_stack_lvl+0xe8/0x140
[  221.346919][T13106]  dump_stack+0x15/0x1b
[  221.347041][T13106]  should_fail_ex+0x265/0x280
[  221.347062][T13106]  should_fail+0xb/0x20
[  221.347082][T13106]  should_fail_usercopy+0x1a/0x20
[  221.347153][T13106]  _copy_from_user+0x1c/0xb0
[  221.347181][T13106]  __sys_bpf+0x183/0x7c0
[  221.347211][T13106]  __x64_sys_bpf+0x41/0x50
[  221.347243][T13106]  x64_sys_call+0x28e1/0x3000
[  221.347312][T13106]  do_syscall_64+0xd8/0x2c0
[  221.347378][T13106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.347396][T13106] RIP: 0033:0x7efcbf54f749
[  221.347410][T13106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.347428][T13106] RSP: 002b:00007efcbdfb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  221.347517][T13106] RAX: ffffffffffffffda RBX: 00007efcbf7a5fa0 RCX: 00007efcbf54f749
[  221.347529][T13106] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000002
[  221.347577][T13106] RBP: 00007efcbdfb7090 R08: 0000000000000000 R09: 0000000000000000
[  221.347589][T13106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  221.347601][T13106] R13: 00007efcbf7a6038 R14: 00007efcbf7a5fa0 R15: 00007fffcd7b4f98
[  221.347620][T13106]  </TASK>
[  221.556706][T13116] loop3: detected capacity change from 0 to 2048
[  221.570111][T13116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  221.652681][T13116] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  221.689932][T13121] syzkaller0: entered promiscuous mode
[  221.690571][T13116] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2026 with error 28
[  221.695400][T13121] syzkaller0: entered allmulticast mode
[  221.698967][T13121] xt_SECMARK: invalid mode: 2
[  221.707953][T13116] EXT4-fs (loop3): This should not happen!! Data will be lost
[  221.707953][T13116] 
[  221.727825][T13116] EXT4-fs (loop3): Total free blocks count 0
[  221.733832][T13116] EXT4-fs (loop3): Free/Dirty block details
[  221.739749][T13116] EXT4-fs (loop3): free_blocks=2415919104
[  221.745548][T13116] EXT4-fs (loop3): dirty_blocks=2032
[  221.750859][T13116] EXT4-fs (loop3): Block reservation details
[  221.756918][T13116] EXT4-fs (loop3): i_reserved_data_blocks=127
[  221.780931][T13128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.782444][T13126] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #12: comm syz.3.3569: corrupted in-inode xattr: e_value size too large
[  221.789602][T13128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.847202][T13116] EXT4-fs error (device loop3): ext4_lookup:1785: inode #16: comm syz.3.3569: iget: bad i_size value: 8796093031208
[  222.109189][T10331] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2026 with error 28
[  222.290232][T13158] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  222.364179][T13161] xt_CT: You must specify a L4 protocol and not use inversions on it
[  222.492103][T13171] loop4: detected capacity change from 0 to 2048
[  222.552943][T13171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  222.641520][T13171] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  222.687065][T13171] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 564 with error 28
[  222.699563][T13171] EXT4-fs (loop4): This should not happen!! Data will be lost
[  222.699563][T13171] 
[  222.709238][T13171] EXT4-fs (loop4): Total free blocks count 0
[  222.715210][T13171] EXT4-fs (loop4): Free/Dirty block details
[  222.721148][T13171] EXT4-fs (loop4): free_blocks=2415919104
[  222.726927][T13171] EXT4-fs (loop4): dirty_blocks=576
[  222.732156][T13171] EXT4-fs (loop4): Block reservation details
[  222.738141][T13171] EXT4-fs (loop4): i_reserved_data_blocks=36
[  222.780465][T13171] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #12: comm syz.4.3591: corrupted in-inode xattr: e_value size too large
[  222.789734][T13186] lo speed is unknown, defaulting to 1000
[  222.821729][T13171] EXT4-fs error (device loop4): ext4_lookup:1785: inode #16: comm syz.4.3591: iget: bad i_size value: 8796093031208
[  222.909942][ T2029] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 564 with error 28
[  223.005444][T13192] __nla_validate_parse: 3 callbacks suppressed
[  223.005460][T13192] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3598'.
[  223.032856][T13194] team0 (unregistering): Port device team_slave_0 removed
[  223.042281][T13194] team0 (unregistering): Port device team_slave_1 removed
[  223.063880][T13197] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3600'.
[  223.081258][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3599'.
[  223.099041][T13199] hsr_slave_1 (unregistering): left promiscuous mode
[  223.148492][T13187] tipc: Started in network mode
[  223.153380][T13187] tipc: Node identity -, cluster identity 4711
[  223.164274][T13200] lo speed is unknown, defaulting to 1000
[  223.214641][T13211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.239519][T13211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  223.252929][T13213] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  223.417097][T13197] xt_TPROXY: Can be used only with -p tcp or -p udp
[  223.442091][T13197] loop4: detected capacity change from 0 to 1024
[  223.449164][T13197] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[  223.471667][T13222] loop3: detected capacity change from 0 to 2048
[  223.521785][T13222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  223.599222][   T52] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  223.615993][   T52] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1074 with error 28
[  223.617484][T13233] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3612'.
[  223.628824][   T52] EXT4-fs (loop3): This should not happen!! Data will be lost
[  223.628824][   T52] 
[  223.628840][   T52] EXT4-fs (loop3): Total free blocks count 0
[  223.628852][   T52] EXT4-fs (loop3): Free/Dirty block details
[  223.628863][   T52] EXT4-fs (loop3): free_blocks=2415919104
[  223.628889][   T52] EXT4-fs (loop3): dirty_blocks=1088
[  223.628902][   T52] EXT4-fs (loop3): Block reservation details
[  223.628914][   T52] EXT4-fs (loop3): i_reserved_data_blocks=68
[  223.699609][T13222] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #12: comm syz.3.3609: corrupted in-inode xattr: e_value size too large
[  223.720185][T13222] EXT4-fs error (device loop3): ext4_lookup:1785: inode #16: comm syz.3.3609: iget: bad i_size value: 8796093031208
[  223.787258][T13243] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.844678][T10315] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1074 with error 28
[  223.870220][T13243] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.914386][T13258] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  223.921825][T13260] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3623'.
[  223.935380][T13243] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.952207][T13263] loop1: detected capacity change from 0 to 512
[  223.959226][T13263] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  223.971180][T13263] EXT4-fs (loop1): 1 truncate cleaned up
[  223.977136][T13263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.016719][T13243] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.084449][T11978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.097556][   T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.113954][T10315] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.134538][T10315] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.143852][T10315] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.162303][T13271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.174910][T13271] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.191261][   T29] kauditd_printk_skb: 515 callbacks suppressed
[  224.191275][   T29] audit: type=1326 audit(1765727173.485:14063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13272 comm="syz.1.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faddf8ef749 code=0x7ffc0000
[  224.221736][   T29] audit: type=1326 audit(1765727173.485:14064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13272 comm="syz.1.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faddf8ef749 code=0x7ffc0000
[  224.245393][   T29] audit: type=1326 audit(1765727173.515:14065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13272 comm="syz.1.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faddf8ef749 code=0x7ffc0000
[  224.270164][   T29] audit: type=1326 audit(1765727173.515:14066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13272 comm="syz.1.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faddf8ef749 code=0x7ffc0000
[  224.293846][   T29] audit: type=1326 audit(1765727173.515:14067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13272 comm="syz.1.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7faddf8ef749 code=0x7ffc0000
[  224.317374][   T29] audit: type=1400 audit(1765727173.515:14068): avc:  denied  { setattr } for  pid=13272 comm="syz.1.3627" name="ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1
[  224.340041][   T29] audit: type=1326 audit(1765727173.515:14069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13272 comm="syz.1.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faddf8ef749 code=0x7ffc0000
[  224.363717][   T29] audit: type=1326 audit(1765727173.515:14070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13272 comm="syz.1.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faddf8ef749 code=0x7ffc0000
[  224.387271][   T29] audit: type=1326 audit(1765727173.515:14071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13272 comm="syz.1.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faddf8ef749 code=0x7ffc0000
[  224.410956][   T29] audit: type=1326 audit(1765727173.515:14072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13272 comm="syz.1.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faddf8ef749 code=0x7ffc0000
[  224.487965][T13287] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3634'.
[  224.502767][T13289] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  224.516751][T13289] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.528312][T13293] 9p: Bad value for 'source'
[  224.534516][T13293] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  224.597575][T13289] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.608958][T13299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3638'.
[  224.622547][T13299] team0: Port device team_slave_1 removed
[  224.651867][T13301] syzkaller0: entered promiscuous mode
[  224.657388][T13301] syzkaller0: entered allmulticast mode
[  224.666132][T13289] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.676797][T13302] loop2: detected capacity change from 0 to 1024
[  224.691095][T13302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.715628][T13302] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[  224.780247][T13289] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.876977][T10315] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.899031][T10315] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.926223][T10315] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.943284][T10315] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.972975][T13325] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3647'.
[  224.996704][T13329] 9p: Bad value for 'source'
[  225.005057][T13329] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  225.128807][T13334] futex_wake_op: syz.4.3651 tries to shift op by -3; fix this program
[  225.154273][T13339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.162977][T13339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.202336][T13341] lo speed is unknown, defaulting to 1000
[  225.293938][T13350] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  225.303344][T13350] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.380332][T13350] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.420232][T13350] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.479810][T13350] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.535205][T10331] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.546370][T10331] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.557230][T10331] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.568727][T10315] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.607904][T13355] loop3: detected capacity change from 0 to 1024
[  225.614672][T13355] EXT4-fs: Ignoring removed orlov option
[  225.620428][T13355] ext4: Unknown parameter 'permit_directio'
[  225.647230][T13357] FAULT_INJECTION: forcing a failure.
[  225.647230][T13357] name failslab, interval 1, probability 0, space 0, times 0
[  225.659919][T13357] CPU: 0 UID: 0 PID: 13357 Comm: syz.0.3660 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  225.659957][T13357] Tainted: [W]=WARN
[  225.659963][T13357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  225.659975][T13357] Call Trace:
[  225.659982][T13357]  <TASK>
[  225.659989][T13357]  __dump_stack+0x1d/0x30
[  225.660014][T13357]  dump_stack_lvl+0xe8/0x140
[  225.660035][T13357]  dump_stack+0x15/0x1b
[  225.660053][T13357]  should_fail_ex+0x265/0x280
[  225.660149][T13357]  should_failslab+0x8c/0xb0
[  225.660233][T13357]  kmem_cache_alloc_noprof+0x69/0x4b0
[  225.660255][T13357]  ? audit_log_start+0x342/0x720
[  225.660275][T13357]  audit_log_start+0x342/0x720
[  225.660315][T13357]  ? kstrtouint+0x76/0xc0
[  225.660344][T13357]  audit_seccomp+0x48/0x100
[  225.660366][T13357]  ? __seccomp_filter+0x832/0x1260
[  225.660381][T13357]  __seccomp_filter+0x843/0x1260
[  225.660396][T13357]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  225.660501][T13357]  ? vfs_write+0x7e8/0x960
[  225.660511][T13357]  ? __rcu_read_unlock+0x4f/0x70
[  225.660536][T13357]  ? __fget_files+0x184/0x1c0
[  225.660551][T13357]  __secure_computing+0x82/0x150
[  225.660566][T13357]  syscall_trace_enter+0xcf/0x1e0
[  225.660579][T13357]  do_syscall_64+0xb2/0x2c0
[  225.660633][T13357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.660705][T13357] RIP: 0033:0x7f0504a8f749
[  225.660778][T13357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.660788][T13357] RSP: 002b:00007f05034ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  225.660799][T13357] RAX: ffffffffffffffda RBX: 00007f0504ce5fa0 RCX: 00007f0504a8f749
[  225.660806][T13357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff
[  225.660813][T13357] RBP: 00007f05034ef090 R08: 0000000000000000 R09: 0000000000000000
[  225.660820][T13357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  225.660880][T13357] R13: 00007f0504ce6038 R14: 00007f0504ce5fa0 R15: 00007ffdabca28f8
[  225.660891][T13357]  </TASK>
[  225.674487][T13355] lo speed is unknown, defaulting to 1000
[  225.782121][T13362] loop3: detected capacity change from 0 to 512
[  225.884915][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3662'.
[  225.894130][T13362] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  225.919827][T13362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.940704][T13362] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  225.975983][T13371] 9p: Bad value for 'source'
[  225.983226][T13371] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  226.032256][T11668] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.085779][T13376] smc: net device bond0 applied user defined pnetid SYZ0
[  226.115404][T13376] smc: net device bond0 erased user defined pnetid SYZ0
[  226.128894][T13369] vhci_hcd vhci_hcd.0: default hub control req: 200a v3e51 i0001 l0
[  226.142390][T13383] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  226.152034][T13383] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.191811][T13383] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.192668][T13389] IPv6: Can't replace route, no match found
[  226.240612][T13383] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.291454][T13383] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.304611][T13402] lo speed is unknown, defaulting to 1000
[  226.356989][T10331] Bluetooth: hci0: Frame reassembly failed (-84)
[  227.059693][T13413] 9p: Bad value for 'source'
[  227.066258][T13413] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  227.181511][T13421] loop4: detected capacity change from 0 to 1024
[  227.245655][T13423] IPv6: Can't replace route, no match found
[  227.279721][T13427] wireguard0: entered promiscuous mode
[  227.285216][T13427] wireguard0: entered allmulticast mode
[  228.280031][T10315] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.297752][T10315] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.318955][T10315] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.329532][T10315] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.351692][T13452] 9p: Bad value for 'source'
[  228.359893][T13452] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  228.360831][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3695'.
[  228.405499][T11857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.428793][ T3674] Bluetooth: hci0: command 0x1003 tx timeout
[  228.434843][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  228.512507][T13463] lo speed is unknown, defaulting to 1000
[  229.426560][   T29] kauditd_printk_skb: 263 callbacks suppressed
[  229.426575][   T29] audit: type=1326 audit(1765727178.715:14334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13476 comm="syz.2.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d19ff749 code=0x7ffc0000
[  229.456493][   T29] audit: type=1326 audit(1765727178.715:14335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13476 comm="syz.2.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d19ff749 code=0x7ffc0000
[  229.480438][   T29] audit: type=1326 audit(1765727178.715:14336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13476 comm="syz.2.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08d19ff749 code=0x7ffc0000
[  229.504133][   T29] audit: type=1326 audit(1765727178.715:14337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13476 comm="syz.2.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d19ff749 code=0x7ffc0000
[  229.527770][   T29] audit: type=1326 audit(1765727178.715:14338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13476 comm="syz.2.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08d19ff749 code=0x7ffc0000
[  229.551371][   T29] audit: type=1326 audit(1765727178.715:14339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13476 comm="syz.2.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d19ff749 code=0x7ffc0000
[  229.574987][   T29] audit: type=1326 audit(1765727178.715:14340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13476 comm="syz.2.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08d19ff749 code=0x7ffc0000
[  229.598552][   T29] audit: type=1326 audit(1765727178.715:14341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13476 comm="syz.2.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d19ff749 code=0x7ffc0000
[  229.622176][   T29] audit: type=1326 audit(1765727178.715:14342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13476 comm="syz.2.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f08d19fdf90 code=0x7ffc0000
[  229.645834][   T29] audit: type=1326 audit(1765727178.755:14343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13476 comm="syz.2.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d19ff749 code=0x7ffc0000
[  229.683824][T13484] openvswitch: netlink: EtherType 0 is less than min 600
[  229.693714][T13484] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.752087][T13484] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.779496][T13489] loop2: detected capacity change from 0 to 512
[  229.786132][T13489] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  229.797513][T13489] EXT4-fs error (device loop2): __ext4_iget:5426: inode #11: block 2: comm syz.2.3707: invalid block
[  229.808693][T13489] EXT4-fs (loop2): Remounting filesystem read-only
[  229.815574][T13489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.827931][T13489] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.840342][T13484] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.871386][T13484] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.949767][T10309] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.961397][T10309] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.975721][T10309] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.992800][T10309] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.095911][T13499] 9p: Bad value for 'source'
[  230.102343][T13499] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  230.507099][T13515] loop2: detected capacity change from 0 to 2048
[  230.519737][T13515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  230.584106][T13518] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #12: comm syz.2.3717: corrupted in-inode xattr: e_value size too large
[  230.598349][ T3674] Bluetooth: hci0: command 0x1003 tx timeout
[  230.604714][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  230.612518][T13518] EXT4-fs error (device loop2): ext4_lookup:1785: inode #16: comm syz.2.3717: iget: bad i_size value: 8796093031208
[  230.913404][T13526] openvswitch: netlink: EtherType 0 is less than min 600
[  230.923206][T13526] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.000278][T13526] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.050338][T13526] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.110296][T13526] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.139137][T13535] 9p: Bad value for 'source'
[  231.145587][T13535] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  231.178339][ T2029] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  231.190265][ T2029] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  231.207607][ T2029] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  231.222048][ T2029] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  231.249673][T13537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.265577][T13537] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.313927][T13541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.322508][T13541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.357744][T11857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  231.379182][T13543] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.419915][T13543] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.479675][T13543] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.530018][T13543] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.595133][   T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  231.606191][   T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  231.617173][T10274] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  231.628221][T10274] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.099474][T13563] IPv6: Can't replace route, no match found
[  232.146116][T13566] 9p: Bad value for 'source'
[  232.152346][T13566] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  232.271931][T13573] loop3: detected capacity change from 0 to 512
[  232.289740][T13573] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  232.304980][T13573] EXT4-fs (loop3): mount failed
[  232.707890][T13589] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3745'.
[  232.852398][T13599] 9p: Bad value for 'source'
[  232.873103][T13599] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  232.934211][T13605] loop2: detected capacity change from 0 to 764
[  232.953126][T13606] lo speed is unknown, defaulting to 1000
[  232.978353][T13605] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  232.991204][T13608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3748'.
[  233.013091][T13605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3752'.
[  233.133095][T13610] Symlink component flag not implemented
[  233.138848][T13610] Symlink component flag not implemented (7)
[  233.178683][T13614] loop3: detected capacity change from 0 to 2048
[  233.201723][T13614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  233.271548][T13614] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  233.286687][T13627] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3759'.
[  233.286877][T13614] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1470 with error 28
[  233.308167][T13614] EXT4-fs (loop3): This should not happen!! Data will be lost
[  233.308167][T13614] 
[  233.317820][T13614] EXT4-fs (loop3): Total free blocks count 0
[  233.323825][T13614] EXT4-fs (loop3): Free/Dirty block details
[  233.329779][T13614] EXT4-fs (loop3): free_blocks=2415919104
[  233.335490][T13614] EXT4-fs (loop3): dirty_blocks=1472
[  233.340892][T13614] EXT4-fs (loop3): Block reservation details
[  233.346980][T13614] EXT4-fs (loop3): i_reserved_data_blocks=92
[  233.450878][T13614] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #12: comm syz.3.3753: corrupted in-inode xattr: e_value size too large
[  233.473298][T13614] EXT4-fs error (device loop3): ext4_lookup:1785: inode #16: comm syz.3.3753: iget: bad i_size value: 8796093031208
[  233.622324][   T52] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1470 with error 28
[  234.070096][T13659] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3770'.
[  234.192438][T13676] team0 (unregistering): Port device team_slave_0 removed
[  234.202402][T13676] team0 (unregistering): Port device team_slave_1 removed
[  234.250147][T13676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3777'.
[  234.275481][T13676] hsr_slave_1 (unregistering): left promiscuous mode
[  234.348506][T13687] loop3: detected capacity change from 0 to 2048
[  234.359715][T13687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  234.427357][T13687] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  234.442465][T13687] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1954 with error 28
[  234.455027][T13687] EXT4-fs (loop3): This should not happen!! Data will be lost
[  234.455027][T13687] 
[  234.464698][T13687] EXT4-fs (loop3): Total free blocks count 0
[  234.470682][T13687] EXT4-fs (loop3): Free/Dirty block details
[  234.476566][T13687] EXT4-fs (loop3): free_blocks=2415919104
[  234.482280][T13687] EXT4-fs (loop3): dirty_blocks=1968
[  234.487545][T13687] EXT4-fs (loop3): Block reservation details
[  234.490856][   T29] kauditd_printk_skb: 265 callbacks suppressed
[  234.490869][   T29] audit: type=1326 audit(1765727183.755:14608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.2.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f08d19ff749 code=0x7ffc0000
[  234.493532][T13687] EXT4-fs (loop3): i_reserved_data_blocks=123
[  234.545020][T13687] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #12: comm syz.3.3781: corrupted in-inode xattr: e_value size too large
[  234.547451][   T29] audit: type=1326 audit(1765727183.785:14609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13683 comm="syz.2.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d19ff749 code=0x7ffc0000
[  234.582665][   T29] audit: type=1326 audit(1765727183.785:14610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13683 comm="syz.2.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d19ff749 code=0x7ffc0000
[  234.606289][   T29] audit: type=1326 audit(1765727183.825:14611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.3.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbf54f749 code=0x7ffc0000
[  234.629888][   T29] audit: type=1326 audit(1765727183.825:14612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.3.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbf54f749 code=0x7ffc0000
[  234.653524][   T29] audit: type=1326 audit(1765727183.835:14613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.3.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7efcbf54f749 code=0x7ffc0000
[  234.677196][   T29] audit: type=1326 audit(1765727183.835:14614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.3.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbf54f749 code=0x7ffc0000
[  234.677754][T13687] EXT4-fs error (device loop3): ext4_lookup:1785: inode #16: comm syz.3.3781: iget: bad i_size value: 8796093031208
[  234.700765][   T29] audit: type=1326 audit(1765727183.835:14615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.3.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbf54f749 code=0x7ffc0000
[  234.700794][   T29] audit: type=1326 audit(1765727183.835:14616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.3.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7efcbf54f749 code=0x7ffc0000
[  234.760110][   T29] audit: type=1326 audit(1765727183.835:14617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.3.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbf54f749 code=0x7ffc0000
[  234.798708][T13700] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3784'.
[  234.808677][T10315] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  234.876229][T13710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13710 comm=syz.3.3787
[  234.903439][T13710] lo speed is unknown, defaulting to 1000
[  235.068614][ T3674] Bluetooth: hci0: command 0x1003 tx timeout
[  235.074817][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  235.142742][T13722] 9p: Bad value for 'source'
[  235.150682][T13722] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  235.169937][T13724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3793'.
[  235.303535][T13733] loop4: detected capacity change from 0 to 2048
[  235.323459][T13733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  235.397083][T13733] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  235.401207][T13724] xt_TPROXY: Can be used only with -p tcp or -p udp
[  235.412300][T13733] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1578 with error 28
[  235.430923][T13733] EXT4-fs (loop4): This should not happen!! Data will be lost
[  235.430923][T13733] 
[  235.440666][T13733] EXT4-fs (loop4): Total free blocks count 0
[  235.446649][T13733] EXT4-fs (loop4): Free/Dirty block details
[  235.452577][T13733] EXT4-fs (loop4): free_blocks=2415919104
[  235.458272][T13733] EXT4-fs (loop4): dirty_blocks=1584
[  235.463598][T13733] EXT4-fs (loop4): Block reservation details
[  235.469589][T13733] EXT4-fs (loop4): i_reserved_data_blocks=99
[  235.478587][T13736] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #12: comm syz.4.3797: corrupted in-inode xattr: e_value size too large
[  235.492981][T13724] loop3: detected capacity change from 0 to 1024
[  235.499965][T13724] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  235.506095][T13733] EXT4-fs error (device loop4): ext4_lookup:1785: inode #16: comm syz.4.3797: iget: bad i_size value: 8796093031208
[  235.535401][   T52] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  235.586454][T13740] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3799'.
[  235.620248][T13744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13744 comm=syz.3.3801
[  235.643079][T13744] lo speed is unknown, defaulting to 1000
[  235.815801][T13753] 9p: Bad value for 'source'
[  235.822260][T13753] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  235.845683][T13756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.854838][T13756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.035979][T13763] loop2: detected capacity change from 0 to 1024
[  236.042731][T13763] EXT4-fs: Ignoring removed orlov option
[  236.048363][T13763] ext4: Unknown parameter 'permit_directio'
[  236.092755][T13763] lo speed is unknown, defaulting to 1000
[  236.126924][T13763] loop2: detected capacity change from 0 to 512
[  236.133809][T13763] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  236.150265][T13763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.162981][T13763] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  236.215786][T11857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.249456][T13770] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3810'.
[  236.272768][T13772] 9p: Bad value for 'source'
[  236.279558][T13772] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  236.502239][T13780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13780 comm=syz.2.3815
[  236.528827][T13780] lo speed is unknown, defaulting to 1000
[  236.757523][T13802] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3821'.
[  236.784057][T13805] 9p: Bad value for 'source'
[  236.792253][T13805] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  236.804094][T13807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.812816][T13807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.296179][T13814] loop3: detected capacity change from 0 to 2048
[  237.311568][T13814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  237.438229][T13814] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  237.453214][T13814] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  237.465674][T13814] EXT4-fs (loop3): This should not happen!! Data will be lost
[  237.465674][T13814] 
[  237.475382][T13814] EXT4-fs (loop3): Total free blocks count 0
[  237.481396][T13814] EXT4-fs (loop3): Free/Dirty block details
[  237.487387][T13814] EXT4-fs (loop3): free_blocks=2415919104
[  237.493111][T13814] EXT4-fs (loop3): dirty_blocks=2880
[  237.498440][T13814] EXT4-fs (loop3): Block reservation details
[  237.504406][T13814] EXT4-fs (loop3): i_reserved_data_blocks=180
[  237.597446][T13827] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #12: comm syz.3.3826: corrupted in-inode xattr: e_value size too large
[  237.731407][T13837] xt_TPROXY: Can be used only with -p tcp or -p udp
[  237.849882][T13814] EXT4-fs error (device loop3): ext4_lookup:1785: inode #16: comm syz.3.3826: iget: bad i_size value: 8796093031208
[  237.884792][T13840] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3834'.
[  237.898289][T13841] 9p: Bad value for 'source'
[  237.911913][T13841] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  238.069133][T13849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13849 comm=syz.0.3839
[  238.118822][T13849] lo speed is unknown, defaulting to 1000
[  238.238260][   T52] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 838 with error 28
[  238.327663][T13861] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.338886][T13867] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3846'.
[  238.384992][T13877] xt_TPROXY: Can be used only with -p tcp or -p udp
[  238.392698][T13863] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.411075][T13861] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.430764][T13863] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.440808][T13880] loop2: detected capacity change from 0 to 2048
[  238.446001][T13882] loop1: detected capacity change from 0 to 512
[  238.455230][T13882] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  238.463779][T13882] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.3851: attempt to clear invalid blocks 2 len 1
[  238.470040][T13880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  238.476989][T13882] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  238.505118][T13861] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.517056][T13882] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3851: invalid indirect mapped block 1819239214 (level 0)
[  238.531328][T13882] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3851: invalid indirect mapped block 1819239214 (level 1)
[  238.545839][T13882] EXT4-fs (loop1): 1 truncate cleaned up
[  238.554088][T13882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.555361][T13880] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  238.581820][T13880] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1684 with error 28
[  238.594314][T13880] EXT4-fs (loop2): This should not happen!! Data will be lost
[  238.594314][T13880] 
[  238.603998][T13880] EXT4-fs (loop2): Total free blocks count 0
[  238.610072][T13880] EXT4-fs (loop2): Free/Dirty block details
[  238.615980][T13880] EXT4-fs (loop2): free_blocks=2415919104
[  238.621696][T13880] EXT4-fs (loop2): dirty_blocks=1696
[  238.626955][T13880] EXT4-fs (loop2): Block reservation details
[  238.633028][T13880] EXT4-fs (loop2): i_reserved_data_blocks=106
[  238.643481][T13863] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.661128][T13889] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.3851: corrupted in-inode xattr: e_value out of bounds
[  238.675944][T13861] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.693420][T13882] lo speed is unknown, defaulting to 1000
[  238.703207][T13880] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #12: comm syz.2.3850: corrupted in-inode xattr: e_value size too large
[  238.718709][T13863] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.729944][T13880] EXT4-fs error (device loop2): ext4_lookup:1785: inode #16: comm syz.2.3850: iget: bad i_size value: 8796093031208
[  238.763459][T10315] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.778660][T10315] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.790910][T10315] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.802529][T11978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.820988][T10315] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.834093][T10315] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.852993][T10315] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.872411][T10315] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.880887][T10315] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.002452][T10274] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1684 with error 28
[  239.016948][T13896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13896 comm=syz.4.3855
[  239.044613][T13896] lo speed is unknown, defaulting to 1000
[  239.267587][T13902] 9p: Bad value for 'source'
[  239.323308][T13907] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3858'.
[  239.343030][T13902] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  239.488069][T13914] xt_TPROXY: Can be used only with -p tcp or -p udp
[  239.507971][T13916] xt_TPROXY: Can be used only with -p tcp or -p udp
[  239.527165][T13917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3863'.
[  239.563451][   T29] kauditd_printk_skb: 389 callbacks suppressed
[  239.563541][   T29] audit: type=1326 audit(1765727188.855:15007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.0.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0504a8f749 code=0x7ffc0000
[  239.612579][T13917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3863'.
[  239.629491][   T29] audit: type=1326 audit(1765727188.895:15008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.0.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0504a8f749 code=0x7ffc0000
[  239.653267][   T29] audit: type=1326 audit(1765727188.895:15009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.0.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0504a8f749 code=0x7ffc0000
[  239.677069][   T29] audit: type=1326 audit(1765727188.895:15010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.0.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0504a8f749 code=0x7ffc0000
[  239.700647][   T29] audit: type=1326 audit(1765727188.895:15011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.0.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0504a8f749 code=0x7ffc0000
[  239.724225][   T29] audit: type=1326 audit(1765727188.895:15012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.0.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f0504a8f749 code=0x7ffc0000
[  239.747870][   T29] audit: type=1326 audit(1765727188.895:15013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.0.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0504a8f749 code=0x7ffc0000
[  239.771446][   T29] audit: type=1326 audit(1765727188.895:15014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.0.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f0504a8f749 code=0x7ffc0000
[  239.795010][   T29] audit: type=1326 audit(1765727188.895:15015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.0.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0504a8f749 code=0x7ffc0000
[  239.818650][   T29] audit: type=1326 audit(1765727188.895:15016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.0.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0504a8f749 code=0x7ffc0000
[  239.824011][T13928] 9p: Bad value for 'source'
[  239.919551][T13925] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  240.010879][T13934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13934 comm=syz.4.3868
[  240.052899][T13934] lo speed is unknown, defaulting to 1000
[  240.113169][T13930] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  240.284507][T13948] xt_hashlimit: size too large, truncated to 1048576
[  240.307742][T13952] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3872'.
[  240.336907][T13954] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3873'.
[  240.432157][T13966] loop3: detected capacity change from 0 to 2048
[  240.446320][T13970] 9p: Bad value for 'source'
[  240.452550][T13970] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  240.461612][T13966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  240.531285][T13966] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  240.546336][T13966] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1586 with error 28
[  240.558783][T13966] EXT4-fs (loop3): This should not happen!! Data will be lost
[  240.558783][T13966] 
[  240.568417][T13966] EXT4-fs (loop3): Total free blocks count 0
[  240.574390][T13966] EXT4-fs (loop3): Free/Dirty block details
[  240.580320][T13966] EXT4-fs (loop3): free_blocks=2415919104
[  240.586040][T13966] EXT4-fs (loop3): dirty_blocks=1600
[  240.591486][T13966] EXT4-fs (loop3): Block reservation details
[  240.597471][T13966] EXT4-fs (loop3): i_reserved_data_blocks=100
[  240.671786][T13966] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #12: comm syz.3.3877: corrupted in-inode xattr: e_value size too large
[  240.699165][T13966] EXT4-fs error (device loop3): ext4_lookup:1785: inode #16: comm syz.3.3877: iget: bad i_size value: 8796093031208
[  240.736563][T13980] FAULT_INJECTION: forcing a failure.
[  240.736563][T13980] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  240.750188][T13980] CPU: 0 UID: 0 PID: 13980 Comm: syz.2.3882 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  240.750219][T13980] Tainted: [W]=WARN
[  240.750224][T13980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  240.750235][T13980] Call Trace:
[  240.750241][T13980]  <TASK>
[  240.750248][T13980]  __dump_stack+0x1d/0x30
[  240.750280][T13980]  dump_stack_lvl+0xe8/0x140
[  240.750314][T13980]  dump_stack+0x15/0x1b
[  240.750330][T13980]  should_fail_ex+0x265/0x280
[  240.750350][T13980]  should_fail+0xb/0x20
[  240.750368][T13980]  should_fail_usercopy+0x1a/0x20
[  240.750398][T13980]  _copy_to_user+0x20/0xa0
[  240.750422][T13980]  simple_read_from_buffer+0xb5/0x130
[  240.750532][T13980]  proc_fail_nth_read+0x10e/0x150
[  240.750558][T13980]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  240.750609][T13980]  vfs_read+0x1a8/0x770
[  240.750624][T13980]  ? __rcu_read_unlock+0x4f/0x70
[  240.750642][T13980]  ? __fget_files+0x184/0x1c0
[  240.750667][T13980]  ? mutex_lock+0x58/0x90
[  240.750696][T13980]  ksys_read+0xda/0x1a0
[  240.750842][T13980]  __x64_sys_read+0x40/0x50
[  240.750858][T13980]  x64_sys_call+0x2889/0x3000
[  240.750904][T13980]  do_syscall_64+0xd8/0x2c0
[  240.750938][T13980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.750971][T13980] RIP: 0033:0x7f08d19fe15c
[  240.750988][T13980] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  240.751007][T13980] RSP: 002b:00007f08d0467030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  240.751031][T13980] RAX: ffffffffffffffda RBX: 00007f08d1c55fa0 RCX: 00007f08d19fe15c
[  240.751067][T13980] RDX: 000000000000000f RSI: 00007f08d04670a0 RDI: 0000000000000006
[  240.751078][T13980] RBP: 00007f08d0467090 R08: 0000000000000000 R09: 0000000000000000
[  240.751091][T13980] R10: 0000000000002101 R11: 0000000000000246 R12: 0000000000000001
[  240.751102][T13980] R13: 00007f08d1c56038 R14: 00007f08d1c55fa0 R15: 00007ffc3f018348
[  240.751119][T13980]  </TASK>
[  240.971882][T13983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13983 comm=syz.1.3883
[  240.999562][T10331] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1586 with error 28
[  241.009646][T13983] lo speed is unknown, defaulting to 1000
[  241.058353][T13991] xt_TPROXY: Can be used only with -p tcp or -p udp
[  241.133730][T13996] vlan2: entered allmulticast mode
[  241.176677][T14003] 9p: Bad value for 'source'
[  241.183261][T14003] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  241.198893][T14005] IPv6: Can't replace route, no match found
[  241.338947][T14011] loop3: detected capacity change from 0 to 2048
[  241.361186][T14011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  241.558809][T14011] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  241.584248][T14011] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  241.596779][T14011] EXT4-fs (loop3): This should not happen!! Data will be lost
[  241.596779][T14011] 
[  241.606428][T14011] EXT4-fs (loop3): Total free blocks count 0
[  241.612489][T14011] EXT4-fs (loop3): Free/Dirty block details
[  241.618460][T14011] EXT4-fs (loop3): free_blocks=2415919104
[  241.624168][T14011] EXT4-fs (loop3): dirty_blocks=3296
[  241.629520][T14011] EXT4-fs (loop3): Block reservation details
[  241.635619][T14011] EXT4-fs (loop3): i_reserved_data_blocks=206
[  241.635629][T14019] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  241.649247][T14032] xt_TPROXY: Can be used only with -p tcp or -p udp
[  241.668788][T14033] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #12: comm syz.3.3896: corrupted in-inode xattr: e_value size too large
[  241.743816][T14011] EXT4-fs error (device loop3): ext4_lookup:1785: inode #16: comm syz.3.3896: iget: bad i_size value: 8796093031208
[  242.039442][T10315] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  242.118338][T14050] syzkaller1: entered promiscuous mode
[  242.124053][T14050] syzkaller1: entered allmulticast mode
[  242.162623][T14056] IPv6: Can't replace route, no match found
[  242.180820][T14058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14058 comm=syz.0.3910
[  242.202856][T14058] lo speed is unknown, defaulting to 1000
[  242.281701][T14061] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  242.403868][T14072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3915'.
[  242.420424][T14072] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  242.426259][T14074] loop1: detected capacity change from 0 to 2048
[  242.429862][T14072] ip6gre0: entered promiscuous mode
[  242.443574][T14072] team0: Device ip6gre0 is of different type
[  242.443779][T14075] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3913'.
[  242.458553][T14075] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3913'.
[  242.467486][T14075] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3913'.
[  242.476553][T14075] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3913'.
[  242.486676][T14074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  242.553130][T10315] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  242.576805][T10315] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1446 with error 28
[  242.589605][T10315] EXT4-fs (loop1): This should not happen!! Data will be lost
[  242.589605][T10315] 
[  242.599796][T10315] EXT4-fs (loop1): Total free blocks count 0
[  242.605797][T10315] EXT4-fs (loop1): Free/Dirty block details
[  242.611818][T10315] EXT4-fs (loop1): free_blocks=2415919104
[  242.617637][T10315] EXT4-fs (loop1): dirty_blocks=1456
[  242.622965][T10315] EXT4-fs (loop1): Block reservation details
[  242.628987][T10315] EXT4-fs (loop1): i_reserved_data_blocks=91
[  242.643882][T10315] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28
[  242.704708][T14074] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #12: comm syz.1.3916: corrupted in-inode xattr: e_value size too large
[  242.750750][T14074] EXT4-fs error (device loop1): ext4_lookup:1785: inode #16: comm syz.1.3916: iget: bad i_size value: 8796093031208
[  242.900433][T14098] xt_TPROXY: Can be used only with -p tcp or -p udp
[  242.937436][T10309] Bluetooth: hci0: Frame reassembly failed (-84)
[  243.294776][T14117] IPv6: Can't replace route, no match found
[  243.312312][T14119] 9p: Bad value for 'source'
[  243.318704][T14119] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  243.404791][T14121] loop4: detected capacity change from 0 to 2048
[  243.420181][T14121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  243.487796][T14121] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  243.502656][T14121] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1974 with error 28
[  243.515174][T14121] EXT4-fs (loop4): This should not happen!! Data will be lost
[  243.515174][T14121] 
[  243.524829][T14121] EXT4-fs (loop4): Total free blocks count 0
[  243.530915][T14121] EXT4-fs (loop4): Free/Dirty block details
[  243.536804][T14121] EXT4-fs (loop4): free_blocks=2415919104
[  243.542526][T14121] EXT4-fs (loop4): dirty_blocks=1984
[  243.547786][T14121] EXT4-fs (loop4): Block reservation details
[  243.553802][T14121] EXT4-fs (loop4): i_reserved_data_blocks=124
[  243.609309][T14121] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #12: comm syz.4.3933: corrupted in-inode xattr: e_value size too large
[  243.637726][T14127] xt_TPROXY: Can be used only with -p tcp or -p udp
[  243.682520][T14121] EXT4-fs error (device loop4): ext4_lookup:1785: inode #16: comm syz.4.3933: iget: bad i_size value: 8796093031208
[  243.748235][T14140] IPv6: Can't replace route, no match found
[  243.867362][T14148] 9p: Bad value for 'source'
[  243.873765][T14148] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  243.975669][T10331] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1974 with error 28
[  244.184683][T14164] xt_TPROXY: Can be used only with -p tcp or -p udp
[  244.629854][T14174] IPv6: Can't replace route, no match found
[  244.868270][T14184] xt_hashlimit: size too large, truncated to 1048576
[  244.977693][T14188] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.988470][ T3674] Bluetooth: hci0: command 0x1003 tx timeout
[  245.006818][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  245.033952][T14194] hub 6-0:1.0: USB hub found
[  245.038817][T14194] hub 6-0:1.0: 8 ports detected
[  245.054828][   T29] kauditd_printk_skb: 473 callbacks suppressed
[  245.054842][   T29] audit: type=1326 audit(1765727194.345:15490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14183 comm="syz.0.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0504a8f749 code=0x7ffc0000
[  245.088722][   T29] audit: type=1326 audit(1765727194.385:15491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14183 comm="syz.0.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0504a8f749 code=0x7ffc0000
[  245.112712][   T29] audit: type=1326 audit(1765727194.405:15492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14183 comm="syz.0.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0504a8f749 code=0x7ffc0000
[  245.136635][   T29] audit: type=1326 audit(1765727194.405:15493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14183 comm="syz.0.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0504a8f749 code=0x7ffc0000
[  245.142270][T14188] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.160258][   T29] audit: type=1326 audit(1765727194.405:15494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14183 comm="syz.0.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0504a8f749 code=0x7ffc0000
[  245.160288][   T29] audit: type=1326 audit(1765727194.405:15495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14183 comm="syz.0.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0504a8f749 code=0x7ffc0000
[  245.160414][   T29] audit: type=1326 audit(1765727194.405:15496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14183 comm="syz.0.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0504a8f749 code=0x7ffc0000
[  245.160442][   T29] audit: type=1326 audit(1765727194.405:15497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14183 comm="syz.0.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0504a8f749 code=0x7ffc0000
[  245.264801][   T29] audit: type=1326 audit(1765727194.405:15498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14183 comm="syz.0.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0504a8f749 code=0x7ffc0000
[  245.288283][   T29] audit: type=1326 audit(1765727194.405:15499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14183 comm="syz.0.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0504a8f749 code=0x7ffc0000
[  245.335410][T14202] 9p: Bad value for 'source'
[  245.342282][T14202] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  245.395531][T14188] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.449887][T14188] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.478334][T14197] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  245.516346][T14209] IPv6: Can't replace route, no match found
[  245.612621][T10274] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.673194][T10274] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.684812][T10274] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.696780][T10274] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.019416][T14227] __nla_validate_parse: 3 callbacks suppressed
[  246.019433][T14227] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3979'.
[  246.037038][T14226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3969'.
[  246.067509][T14226] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  246.104359][T14226] ip6gre0: entered promiscuous mode
[  246.126088][T14226] team0: Device ip6gre0 is of different type
[  246.329862][T14239] IPv6: Can't replace route, no match found
[  246.463680][T14258] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3983'.
[  246.501359][T14259] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.550629][T14267] IPv6: Can't replace route, no match found
[  246.625256][T14259] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.704592][T14259] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.796446][T14259] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.839256][T14289] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  247.021765][T14303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14303 comm=syz.3.3999
[  247.281397][   T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  247.310124][T14303] lo speed is unknown, defaulting to 1000
[  247.315966][   T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  247.336081][   T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  247.367027][   T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.534182][T14323] loop3: detected capacity change from 0 to 512
[  247.541959][T14323] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  247.555377][T14323] EXT4-fs (loop3): 1 truncate cleaned up
[  247.561604][T14323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.646305][T14323] lo speed is unknown, defaulting to 1000
[  247.723792][T14341] xt_TPROXY: Can be used only with -p tcp or -p udp
[  247.885160][T14360] netlink: 'syz.1.4017': attribute type 1 has an invalid length.
[  247.901630][T14364] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.074082][T14360] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  248.086500][T14360] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  248.096783][T14360] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  248.170512][T11668] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.220377][T14364] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.367787][T14364] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.518140][T14364] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.542842][T14380] loop3: detected capacity change from 0 to 2048
[  248.561435][T14380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  248.631110][T14385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.639978][T14385] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.663751][T14380] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  248.678927][T14380] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 570 with error 28
[  248.691432][T14380] EXT4-fs (loop3): This should not happen!! Data will be lost
[  248.691432][T14380] 
[  248.701303][T14380] EXT4-fs (loop3): Total free blocks count 0
[  248.707452][T14380] EXT4-fs (loop3): Free/Dirty block details
[  248.713399][T14380] EXT4-fs (loop3): free_blocks=2415919104
[  248.719260][T14380] EXT4-fs (loop3): dirty_blocks=576
[  248.724451][T14380] EXT4-fs (loop3): Block reservation details
[  248.730584][T14380] EXT4-fs (loop3): i_reserved_data_blocks=36
[  248.742435][T14391] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #12: comm syz.3.4026: corrupted in-inode xattr: e_value size too large
[  248.763486][T14393] 9p: Bad value for 'source'
[  248.780890][T14393] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  248.936743][T14380] EXT4-fs error (device loop3): ext4_lookup:1785: inode #16: comm syz.3.4026: iget: bad i_size value: 8796093031208
[  248.971785][T14397] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4031'.
[  248.981391][T14397] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14397 comm=syz.4.4031
[  248.993916][T14397] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14397 comm=syz.4.4031
[  249.007041][T10331] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 570 with error 28
[  249.120055][T14403] lo speed is unknown, defaulting to 1000
[  249.189595][T14413] IPv6: Can't replace route, no match found
[  249.221423][T10331] Bluetooth: hci0: Frame reassembly failed (-84)
[  250.056181][T14429] IPv6: Can't replace route, no match found
[  250.064976][T14431] IPv6: Can't replace route, no match found
[  250.121455][   T29] kauditd_printk_skb: 292 callbacks suppressed
[  250.121470][   T29] audit: type=1326 audit(1765727199.415:15792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14436 comm="syz.2.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d19ff749 code=0x7ffc0000
[  250.158291][T14437] loop2: detected capacity change from 0 to 1024
[  250.161413][T14439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4047'.
[  250.166245][T14437] EXT4-fs: Ignoring removed orlov option
[  250.180042][   T29] audit: type=1326 audit(1765727199.445:15793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14436 comm="syz.2.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08d19ff749 code=0x7ffc0000
[  250.203806][   T29] audit: type=1326 audit(1765727199.445:15794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14436 comm="syz.2.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d19ff749 code=0x7ffc0000
[  250.227388][   T29] audit: type=1326 audit(1765727199.445:15795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14436 comm="syz.2.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08d19ff749 code=0x7ffc0000
[  250.250977][   T29] audit: type=1326 audit(1765727199.445:15796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14436 comm="syz.2.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d19ff749 code=0x7ffc0000
[  250.262177][T14437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.274554][   T29] audit: type=1326 audit(1765727199.445:15797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14436 comm="syz.2.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08d19ff749 code=0x7ffc0000
[  250.274584][   T29] audit: type=1326 audit(1765727199.445:15798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14436 comm="syz.2.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d19ff749 code=0x7ffc0000
[  250.274610][   T29] audit: type=1326 audit(1765727199.445:15799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14436 comm="syz.2.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08d19ff749 code=0x7ffc0000
[  250.357693][   T29] audit: type=1326 audit(1765727199.445:15800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14436 comm="syz.2.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d19ff749 code=0x7ffc0000
[  250.381269][   T29] audit: type=1326 audit(1765727199.445:15801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14436 comm="syz.2.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08d19ff749 code=0x7ffc0000
[  250.420412][T11857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.424829][T14441] lo speed is unknown, defaulting to 1000
[  250.449162][T14447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.458305][T14447] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.489773][T14451] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4050'.
[  250.579446][T14462] IPv6: Can't replace route, no match found
[  250.649535][T14469] vlan2: entered allmulticast mode
[  250.736039][T14474] 9p: Bad value for 'source'
[  250.742676][T14474] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  251.018881][T14483] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4063'.
[  251.055631][T14488] IPv6: Can't replace route, no match found
[  251.177105][T14480] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  251.192249][T14494] netlink: 16142 bytes leftover after parsing attributes in process `syz.2.4067'.
[  251.229072][T14498] vlan2: entered allmulticast mode
[  251.238462][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  251.311417][T14506] ip6gre0: entered promiscuous mode
[  251.382557][T14512] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4075'.
[  251.397022][T14514] IPv6: Can't replace route, no match found
[  251.483398][T10284] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.494654][T10284] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.504841][T10284] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.516376][T10284] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.750911][T14542] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4087'.
[  251.771167][T14544] IPv6: Can't replace route, no match found
[  251.850657][T14547] lo speed is unknown, defaulting to 1000
[  251.884287][   T52] Bluetooth: hci0: Frame reassembly failed (-84)
[  252.065572][T14556] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.129135][T14556] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.169897][T14556] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.249199][T14556] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.364873][T10284] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.439943][   T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.477497][T14569] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4098'.
[  252.486591][T10284] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.531569][T14575] IPv6: Can't replace route, no match found
[  252.556435][   T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.601363][T14581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4104'.
[  252.620030][T14581] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  252.646095][T14581] team0: Device ip6gre0 is of different type
[  252.677501][T14591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14591 comm=syz.1.4107
[  252.702686][T14591] lo speed is unknown, defaulting to 1000
[  252.801981][T14598] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4109'.
[  253.149462][T14607] IPv6: Can't replace route, no match found
[  253.489574][T14621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4118'.
[  253.505503][T14625] FAULT_INJECTION: forcing a failure.
[  253.505503][T14625] name failslab, interval 1, probability 0, space 0, times 0
[  253.518210][T14625] CPU: 1 UID: 0 PID: 14625 Comm: syz.4.4119 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  253.518234][T14625] Tainted: [W]=WARN
[  253.518239][T14625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  253.518249][T14625] Call Trace:
[  253.518255][T14625]  <TASK>
[  253.518260][T14625]  __dump_stack+0x1d/0x30
[  253.518330][T14625]  dump_stack_lvl+0xe8/0x140
[  253.518344][T14625]  dump_stack+0x15/0x1b
[  253.518355][T14625]  should_fail_ex+0x265/0x280
[  253.518423][T14625]  should_failslab+0x8c/0xb0
[  253.518475][T14625]  __kmalloc_noprof+0xb9/0x5a0
[  253.518496][T14625]  ? unregister_netdevice_many_notify+0x581/0x16d0
[  253.518587][T14625]  unregister_netdevice_many_notify+0x581/0x16d0
[  253.518619][T14625]  unregister_netdevice_queue+0x1b8/0x1e0
[  253.518645][T14625]  vti6_siocdevprivate+0x273/0x8e0
[  253.518748][T14625]  dev_ifsioc+0x8f8/0xaa0
[  253.518849][T14625]  dev_ioctl+0x78d/0x960
[  253.518875][T14625]  sock_ioctl+0x593/0x610
[  253.518974][T14625]  ? __pfx_sock_ioctl+0x10/0x10
[  253.519000][T14625]  __se_sys_ioctl+0xce/0x140
[  253.519028][T14625]  __x64_sys_ioctl+0x43/0x50
[  253.519122][T14625]  x64_sys_call+0x14b0/0x3000
[  253.519143][T14625]  do_syscall_64+0xd8/0x2c0
[  253.519172][T14625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.519257][T14625] RIP: 0033:0x7f24eb7ff749
[  253.519271][T14625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  253.519286][T14625] RSP: 002b:00007f24ea267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  253.519302][T14625] RAX: ffffffffffffffda RBX: 00007f24eba55fa0 RCX: 00007f24eb7ff749
[  253.519367][T14625] RDX: 0000200000000680 RSI: 00000000000089f2 RDI: 0000000000000003
[  253.519378][T14625] RBP: 00007f24ea267090 R08: 0000000000000000 R09: 0000000000000000
[  253.519389][T14625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  253.519399][T14625] R13: 00007f24eba56038 R14: 00007f24eba55fa0 R15: 00007ffcd2acf368
[  253.519416][T14625]  </TASK>
[  253.732021][T14621] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  253.775625][T14632] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4121'.
[  253.812247][T14639] IPv6: Can't replace route, no match found
[  253.857007][T14649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.865941][T14649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.911937][T14654] loop4: detected capacity change from 0 to 1024
[  253.918814][T14654] EXT4-fs: Ignoring removed orlov option
[  253.936878][T14654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.958514][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  253.987196][ T3674] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  253.994984][T12112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.007214][T14633] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  254.587095][T14694] vlan2: entered allmulticast mode
[  254.655366][T14697] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.699762][T14697] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.741700][T14691] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  254.760982][T14697] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.810614][T14697] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.836425][T14703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4148'.
[  254.849803][T14703] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  254.875771][T14706] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.957206][T14706] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.005688][T14718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14718 comm=syz.1.4153
[  255.031205][T14718] lo speed is unknown, defaulting to 1000
[  255.079708][T14706] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.158290][   T29] kauditd_printk_skb: 297 callbacks suppressed
[  255.158306][   T29] audit: type=1326 audit(1765727204.425:16099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.1.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faddf8ef749 code=0x7ffc0000
[  255.188476][   T29] audit: type=1326 audit(1765727204.425:16100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.1.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faddf8ef749 code=0x7ffc0000
[  255.212162][   T29] audit: type=1326 audit(1765727204.425:16101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.1.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faddf8ef749 code=0x7ffc0000
[  255.236172][   T29] audit: type=1326 audit(1765727204.425:16102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.1.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faddf8ef749 code=0x7ffc0000
[  255.236225][   T29] audit: type=1326 audit(1765727204.425:16103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.1.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faddf8ef749 code=0x7ffc0000
[  255.236252][   T29] audit: type=1326 audit(1765727204.425:16104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.1.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faddf8ef749 code=0x7ffc0000
[  255.236282][   T29] audit: type=1326 audit(1765727204.425:16105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.1.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faddf8ef749 code=0x7ffc0000
[  255.330774][   T29] audit: type=1326 audit(1765727204.425:16106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.1.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faddf8ef749 code=0x7ffc0000
[  255.354431][   T29] audit: type=1326 audit(1765727204.425:16107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.1.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faddf8ef749 code=0x7ffc0000
[  255.378057][   T29] audit: type=1326 audit(1765727204.425:16108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.1.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7faddf8ef749 code=0x7ffc0000
[  255.412821][T14706] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.505413][T14743] FAULT_INJECTION: forcing a failure.
[  255.505413][T14743] name failslab, interval 1, probability 0, space 0, times 0
[  255.518101][T14743] CPU: 0 UID: 0 PID: 14743 Comm: syz.3.4162 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  255.518139][T14743] Tainted: [W]=WARN
[  255.518143][T14743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  255.518151][T14743] Call Trace:
[  255.518155][T14743]  <TASK>
[  255.518160][T14743]  __dump_stack+0x1d/0x30
[  255.518290][T14743]  dump_stack_lvl+0xe8/0x140
[  255.518302][T14743]  dump_stack+0x15/0x1b
[  255.518352][T14743]  should_fail_ex+0x265/0x280
[  255.518424][T14743]  should_failslab+0x8c/0xb0
[  255.518446][T14743]  ? __pfx_io_ring_ctx_ref_free+0x10/0x10
[  255.518476][T14743]  __kmalloc_cache_noprof+0x65/0x4c0
[  255.518499][T14743]  ? percpu_ref_init+0x9c/0x250
[  255.518520][T14743]  ? __pfx_io_ring_ctx_ref_free+0x10/0x10
[  255.518596][T14743]  percpu_ref_init+0x9c/0x250
[  255.518619][T14743]  io_ring_ctx_alloc+0x1b4/0x650
[  255.518694][T14743]  io_uring_create+0x50/0x4e0
[  255.518717][T14743]  ? memchr_inv+0x30/0x2e0
[  255.518735][T14743]  __se_sys_io_uring_setup+0x1be/0x1d0
[  255.518834][T14743]  __x64_sys_io_uring_setup+0x31/0x40
[  255.518942][T14743]  x64_sys_call+0x244c/0x3000
[  255.518969][T14743]  do_syscall_64+0xd8/0x2c0
[  255.518997][T14743]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.519016][T14743] RIP: 0033:0x7efcbf54f749
[  255.519049][T14743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  255.519064][T14743] RSP: 002b:00007efcbdfb6fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  255.519115][T14743] RAX: ffffffffffffffda RBX: 00007efcbf7a5fa0 RCX: 00007efcbf54f749
[  255.519126][T14743] RDX: 0000200000000300 RSI: 0000200000000380 RDI: 000000000000010d
[  255.519143][T14743] RBP: 0000200000000380 R08: 0000000000000000 R09: 0000200000000300
[  255.519202][T14743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  255.519212][T14743] R13: 0000200000000340 R14: 000000000000010d R15: 0000200000000300
[  255.519229][T14743]  </TASK>
[  255.730279][T14744] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  255.915422][T14762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14762 comm=syz.3.4169
[  255.939401][T14762] lo speed is unknown, defaulting to 1000
[  255.997072][T14766] lo speed is unknown, defaulting to 1000
[  256.041102][T10274] Bluetooth: hci0: Frame reassembly failed (-84)
[  256.147555][T14774] loop3: detected capacity change from 0 to 2048
[  256.159925][T14774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  256.228858][T14774] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  256.243728][T14774] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1932 with error 28
[  256.256218][T14774] EXT4-fs (loop3): This should not happen!! Data will be lost
[  256.256218][T14774] 
[  256.265900][T14774] EXT4-fs (loop3): Total free blocks count 0
[  256.271961][T14774] EXT4-fs (loop3): Free/Dirty block details
[  256.277913][T14774] EXT4-fs (loop3): free_blocks=2415919104
[  256.283666][T14774] EXT4-fs (loop3): dirty_blocks=1936
[  256.288977][T14774] EXT4-fs (loop3): Block reservation details
[  256.294946][T14774] EXT4-fs (loop3): i_reserved_data_blocks=121
[  256.338000][T14781] netlink: 'syz.1.4174': attribute type 1 has an invalid length.
[  256.364232][T14781] 8021q: adding VLAN 0 to HW filter on device bond2
[  256.386518][T10284] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.387115][T14781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4174'.
[  256.408686][T14781] bond2 (unregistering): Released all slaves
[  256.431447][T10284] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.443627][T10284] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.449997][T14774] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #12: comm syz.3.4173: corrupted in-inode xattr: e_value size too large
[  256.452060][T10284] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.498990][T14774] EXT4-fs error (device loop3): ext4_lookup:1785: inode #16: comm syz.3.4173: iget: bad i_size value: 8796093031208
[  256.583651][T14794] vlan2: entered allmulticast mode
[  256.617806][T14798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14798 comm=syz.1.4182
[  256.660783][T14798] lo speed is unknown, defaulting to 1000
[  256.671705][T14800] xt_TPROXY: Can be used only with -p tcp or -p udp
[  256.720722][T10331] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1932 with error 28
[  256.773771][T14804] 9p: Bad value for 'source'
[  256.791208][T14804] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  256.850243][T14806] 9p: Bad value for 'source'
[  256.856617][T14806] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  257.156238][T14826] xt_TPROXY: Can be used only with -p tcp or -p udp
[  257.240288][T14839] 9p: Bad value for 'source'
[  257.256259][T14839] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  257.405095][ T2029] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.421321][ T2029] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  257.442348][ T2029] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  257.461384][ T2029] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  257.633855][T14857] 9p: Bad value for 'source'
[  257.653846][T14857] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  257.715361][T14869] loop2: detected capacity change from 0 to 2048
[  257.730959][T14869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  257.805751][T14869] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  257.823834][T14869] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1472 with error 28
[  257.836380][T14869] EXT4-fs (loop2): This should not happen!! Data will be lost
[  257.836380][T14869] 
[  257.846105][T14869] EXT4-fs (loop2): Total free blocks count 0
[  257.852199][T14869] EXT4-fs (loop2): Free/Dirty block details
[  257.858079][T14869] EXT4-fs (loop2): free_blocks=2415919104
[  257.863848][T14869] EXT4-fs (loop2): dirty_blocks=1472
[  257.869305][T14869] EXT4-fs (loop2): Block reservation details
[  257.875266][T14869] EXT4-fs (loop2): i_reserved_data_blocks=92
[  257.931659][T14869] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #12: comm syz.2.4215: corrupted in-inode xattr: e_value size too large
[  257.953163][T14869] EXT4-fs error (device loop2): ext4_lookup:1785: inode #16: comm syz.2.4215: iget: bad i_size value: 8796093031208
[  258.000797][T14880] 9p: Bad value for 'source'
[  258.007457][T14880] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  258.111143][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  258.117241][ T3674] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  258.154243][T10274] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1472 with error 28
[  258.298388][T14902] vlan2: entered allmulticast mode
[  258.312476][T14904] loop1: detected capacity change from 0 to 2048
[  258.330327][T14904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  258.399114][T14904] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  258.417916][T14904] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 668 with error 28
[  258.430412][T14904] EXT4-fs (loop1): This should not happen!! Data will be lost
[  258.430412][T14904] 
[  258.440071][T14904] EXT4-fs (loop1): Total free blocks count 0
[  258.446158][T14904] EXT4-fs (loop1): Free/Dirty block details
[  258.452122][T14904] EXT4-fs (loop1): free_blocks=2415919104
[  258.457841][T14904] EXT4-fs (loop1): dirty_blocks=672
[  258.463113][T14904] EXT4-fs (loop1): Block reservation details
[  258.469107][T14904] EXT4-fs (loop1): i_reserved_data_blocks=42
[  258.487186][T10274] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 18 with max blocks 2 with error 28
[  258.549993][T14904] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #12: comm syz.1.4230: corrupted in-inode xattr: e_value size too large
[  258.565627][T14904] EXT4-fs error (device loop1): ext4_lookup:1785: inode #16: comm syz.1.4230: iget: bad i_size value: 8796093031208
[  258.630204][T14930] 9p: Bad value for 'source'
[  258.639112][T14930] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  258.946051][T14957] loop3: detected capacity change from 0 to 2048
[  258.969272][T14958] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.983335][T14957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  259.042967][T14958] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.071777][T14957] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  259.086975][T14957] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1930 with error 28
[  259.099429][T14957] EXT4-fs (loop3): This should not happen!! Data will be lost
[  259.099429][T14957] 
[  259.109060][T14957] EXT4-fs (loop3): Total free blocks count 0
[  259.115108][T14957] EXT4-fs (loop3): Free/Dirty block details
[  259.121017][T14957] EXT4-fs (loop3): free_blocks=2415919104
[  259.126729][T14957] EXT4-fs (loop3): dirty_blocks=1936
[  259.132026][T14957] EXT4-fs (loop3): Block reservation details
[  259.137993][T14957] EXT4-fs (loop3): i_reserved_data_blocks=121
[  259.147965][T14963] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #12: comm syz.3.4251: corrupted in-inode xattr: e_value size too large
[  259.170163][T14963] EXT4-fs error (device loop3): ext4_lookup:1785: inode #16: comm syz.3.4251: iget: bad i_size value: 8796093031208
[  259.176752][T14958] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.260561][T14958] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.360732][T14976] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4256'.
[  259.407215][T10309] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.444039][T10309] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.510362][T14986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4259'.
[  259.520989][T10309] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.521837][T14985] 9p: Bad value for 'source'
[  259.548359][T10309] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1930 with error 28
[  259.576659][T14985] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  259.583943][T10331] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.627999][T14989] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.645371][T14992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4263'.
[  259.659862][T14992] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  259.669950][T14992] team0: Device ip6gre0 is of different type
[  259.695954][T14989] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.760101][T14997] loop3: detected capacity change from 0 to 2048
[  259.772100][T14989] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.793992][T14997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  259.808543][T15005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4267'.
[  259.842774][T15005] 9p: Bad value for 'wfdno'
[  259.848521][T14989] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.866437][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4267'.
[  259.887002][T10309] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.897609][T14997] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  259.914005][T15011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4270'.
[  259.936269][T14997] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1094 with error 28
[  259.948865][T14997] EXT4-fs (loop3): This should not happen!! Data will be lost
[  259.948865][T14997] 
[  259.958507][T14997] EXT4-fs (loop3): Total free blocks count 0
[  259.964498][T14997] EXT4-fs (loop3): Free/Dirty block details
[  259.970408][T14997] EXT4-fs (loop3): free_blocks=2415919104
[  259.976164][T14997] EXT4-fs (loop3): dirty_blocks=1104
[  259.981478][T14997] EXT4-fs (loop3): Block reservation details
[  259.987514][T14997] EXT4-fs (loop3): i_reserved_data_blocks=69
[  259.993693][T10309] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.020975][T15011] 8021q: adding VLAN 0 to HW filter on device bond2
[  260.027878][T15015] loop4: detected capacity change from 0 to 2048
[  260.053301][T10309] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.062944][T15017] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.080374][T10309] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.099809][T15023] loop1: detected capacity change from 0 to 1024
[  260.110422][T15017] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.122730][T15023] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  260.135971][T15023] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.4274: Invalid block bitmap block 0 in block_group 0
[  260.150792][T15015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  260.169588][T15017] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.179181][T15023] __quota_error: 568 callbacks suppressed
[  260.179196][T15023] Quota error (device loop1): write_blk: dquota write failed
[  260.179815][   T29] audit: type=1326 audit(1765727209.475:16677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.4.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f24eb7fdf90 code=0x7ffc0000
[  260.185055][T15023] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  260.192475][   T29] audit: type=1326 audit(1765727209.475:16678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.4.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f24eb7fe497 code=0x7ffc0000
[  260.249461][   T29] audit: type=1326 audit(1765727209.475:16679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.4.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f24eb7fdf90 code=0x7ffc0000
[  260.249493][   T29] audit: type=1326 audit(1765727209.475:16680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.4.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24eb7ff749 code=0x7ffc0000
[  260.249519][   T29] audit: type=1326 audit(1765727209.475:16681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.4.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24eb7ff749 code=0x7ffc0000
[  260.301907][T15023] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.4274: Failed to acquire dquot type 0
[  260.320203][   T29] audit: type=1326 audit(1765727209.515:16682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.4.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f24eb7ff749 code=0x7ffc0000
[  260.350259][T15023] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.4274: Freeing blocks not in datazone - block = 0, count = 4096
[  260.355007][   T29] audit: type=1326 audit(1765727209.515:16683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.4.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24eb7ff749 code=0x7ffc0000
[  260.391817][   T29] audit: type=1326 audit(1765727209.515:16684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.4.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f24eb7ff749 code=0x7ffc0000
[  260.392187][T15023] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.4274: Invalid inode bitmap blk 0 in block_group 0
[  260.428091][T10284] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:30: Failed to release dquot type 0
[  260.439386][T15023] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[  260.441952][T15015] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  260.448601][T15023] EXT4-fs (loop1): 1 orphan inode deleted
[  260.463064][T15015] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 598 with error 28
[  260.480944][T15015] EXT4-fs (loop4): This should not happen!! Data will be lost
[  260.480944][T15015] 
[  260.488660][T15023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.490635][T15015] EXT4-fs (loop4): Total free blocks count 0
[  260.509030][T15015] EXT4-fs (loop4): Free/Dirty block details
[  260.515006][T15015] EXT4-fs (loop4): free_blocks=2415919104
[  260.520797][T15015] EXT4-fs (loop4): dirty_blocks=608
[  260.526114][T15015] EXT4-fs (loop4): Block reservation details
[  260.532163][T15015] EXT4-fs (loop4): i_reserved_data_blocks=38
[  260.539614][T10284] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 6 with max blocks 1088 with error 28
[  260.552503][T15013] ==================================================================
[  260.560596][T15013] BUG: KCSAN: data-race in file_update_time_flags / inode_update_timestamps
[  260.569287][T15013] 
[  260.571611][T15013] write to 0xffff888117d6578c of 4 bytes by task 15029 on cpu 0:
[  260.579332][T15013]  inode_update_timestamps+0x147/0x270
[  260.584802][T15013]  file_update_time_flags+0x26c/0x310
[  260.590194][T15013]  file_update_time+0x17/0x20
[  260.594882][T15013]  ext4_page_mkwrite+0x18c/0xb90
[  260.599821][T15013]  handle_mm_fault+0x1601/0x2c60
[  260.604762][T15013]  do_user_addr_fault+0x78d/0x1080
[  260.609878][T15013]  exc_page_fault+0x62/0xa0
[  260.614381][T15013]  asm_exc_page_fault+0x26/0x30
[  260.619297][T15013]  rep_movs_alternative+0x4a/0x90
[  260.624320][T15013]  _copy_to_iter+0x141/0xe70
[  260.628904][T15013]  get_random_bytes_user+0x12d/0x290
[  260.634264][T15013]  __x64_sys_getrandom+0xcf/0x1a0
[  260.639289][T15013]  x64_sys_call+0x1beb/0x3000
[  260.643978][T15013]  do_syscall_64+0xd8/0x2c0
[  260.648486][T15013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.654378][T15013] 
[  260.656689][T15013] read to 0xffff888117d6578c of 4 bytes by task 15013 on cpu 1:
[  260.664300][T15013]  file_update_time_flags+0xad/0x310
[  260.669580][T15013]  file_update_time+0x17/0x20
[  260.674255][T15013]  ext4_page_mkwrite+0x18c/0xb90
[  260.679179][T15013]  handle_mm_fault+0x1601/0x2c60
[  260.684113][T15013]  do_user_addr_fault+0x3fe/0x1080
[  260.689219][T15013]  exc_page_fault+0x62/0xa0
[  260.693714][T15013]  asm_exc_page_fault+0x26/0x30
[  260.698554][T15013] 
[  260.700863][T15013] value changed: 0x1eb6dc18 -> 0x32624298
[  260.706563][T15013] 
[  260.708873][T15013] Reported by Kernel Concurrency Sanitizer on:
[  260.715012][T15013] CPU: 1 UID: 0 PID: 15013 Comm: syz.4.4271 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  260.726368][T15013] Tainted: [W]=WARN
[  260.730154][T15013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  260.740192][T15013] ==================================================================
[  260.750163][T11978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.767477][T15017] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.796253][T15032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4276'.
[  260.818127][T15015] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #12: comm syz.4.4271: corrupted in-inode xattr: e_value size too large
[  260.830717][T15034] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  260.840429][T15015] EXT4-fs error (device loop4): ext4_lookup:1785: inode #16: comm syz.4.4271: iget: bad i_size value: 8796093031208
[  260.880265][T10331] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.889325][T10309] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 598 with error 28
[  260.904079][T10331] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.916117][T10331] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.924808][T10331] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0