last executing test programs:

2.781393999s ago: executing program 3 (id=1626):
unshare(0x2a020400)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)

2.765029279s ago: executing program 3 (id=1627):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
fspick(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)

2.74692862s ago: executing program 3 (id=1628):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_int(r4, 0x1, 0x5, 0x0, &(0x7f0000000440))
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x2000001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_DELAY_DIST={0x1c, 0x2, "427583bc250a59d1f9d1e098ca485649e35266a52690631d"}, @TCA_NETEM_RATE={0x14, 0x6, {0x6, 0x0, 0x7dde}}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000000000000000000000001812"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r9}, 0x10)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendto$packet(r7, &(0x7f00000002c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r12}, 0x18)
timer_create(0x3, 0x0, 0x0)

1.719216725s ago: executing program 2 (id=1648):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100030a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x0, 0x711, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)
write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

1.708693466s ago: executing program 3 (id=1649):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2a080, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
unshare(0x2040400)
inotify_rm_watch(0xffffffffffffffff, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r2 = getpid()
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
close(r5)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffd, {0x0, 0x0, 0x4, 0x0, 0x1bc60, 0x2a704}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xe}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x2ee4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000080b70300000000edff8400000083000000bf090000000000005509010000000000950000b7020000000000008500000084000000b72f0d6344cd632a2600000000000000000000000000edb8e44b8234e574cddec83c6d035f9b3793e6aaf13ad10dd7f68d3fda13c85d1269ad2631c55747aab7a6e80e6e87302df15401826b9aeff826aa071853d161e712200ad2b84a533d5c49d96fba86b886f01a613b54fd50dfafe3c1a94ea215d7a815428e8f028480761fe594c65730243ecf85dd9b2381a58a9f5ce408a9e450896a828e3f5c6fbdac0629f6a2977d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000240)={0x0, 0x4000000}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='kfree\x00', r9, 0x0, 0xfffffffffffffffc}, 0xc)
ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000100))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg1\x00', 0x1})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)

1.672669847s ago: executing program 0 (id=1651):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

1.582218691s ago: executing program 2 (id=1653):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x24048844}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.571045001s ago: executing program 0 (id=1654):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000638000000000403897", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})

1.546757702s ago: executing program 0 (id=1655):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x700, 0x10, 0xfffff26d, 0x7fffffff, {{0x26, 0x4, 0x0, 0x9, 0x98, 0x64, 0x0, 0x8, 0x4, 0x0, @private=0xa010100, @broadcast, {[@rr={0x7, 0xf, 0x69, [@local, @multicast1, @private=0xa010100]}, @timestamp_addr={0x44, 0x4c, 0xd2, 0x1, 0x1, [{@multicast1, 0xc}, {@loopback, 0x16d}, {@private=0xa010100, 0x6}, {@empty, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@private=0xa010102}, {@multicast1, 0x1}, {@local, 0x10}, {@remote, 0x2}]}, @rr={0x7, 0x7, 0x9c, [@empty]}, @timestamp={0x44, 0x20, 0x59, 0x0, 0x8, [0x1ff, 0x0, 0xfffff800, 0x7fff, 0xff, 0x8000, 0x40]}]}}}}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x80005, 0x0, 0x0, 0x4, 0x4, 0x0, 0x100000, 0x0, 0x43, 0x0, 0x974, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0xfffffffe, 0x10000, 0x5d2, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x3, 0x3, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0x7, 0x2, 0x9, 0x0, 0x3, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0xd, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x7e98263b, 0x9, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d3, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x2, 0x10000, 0x800, 0x5, 0x800, 0x0, 0x8, 0xe, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xc38, 0x3, 0x1, 0x6, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x20000041, 0xffbfffff, 0x400, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x80, 0x0, 0x0, 0x8000, 0x1ff, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1.534808313s ago: executing program 2 (id=1656):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200400, &(0x7f0000000280)={[{@noblock_validity}, {@inlinecrypt}, {@oldalloc}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fffffffffffffff}}, {@commit={'commit', 0x3d, 0x9}}, {@grpid}, {@noauto_da_alloc}, {@jqfmt_vfsv1}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f00001e6000/0x2000)=nil, 0x2000, 0x27ffff7, 0x4012011, r0, 0x0)
r1 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9)
sendmsg$nl_xfrm(r1, &(0x7f0000005600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080c4}, 0x20000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x7f}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0x8)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x7}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

1.460137756s ago: executing program 0 (id=1658):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x4, 0xfffffffd, 0x0, 'queue1\x00', 0xfffffffa})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000580)={0x1f000000, 0x0, 0x0, 'queue0\x00'})

1.351775081s ago: executing program 0 (id=1660):
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0)
write$P9_RWALK(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="30ff95fe11"], 0x30)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]})
brk(0x1)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x8)
ioperm(0x0, 0x2, 0x7e)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r3, 0x0, 0x33, 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0200000000000000000033040000080001007063690011000200303030303a30303a31302e300000000008008e0003000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000014}, 0x0)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfff9, {0x1, 0x201}, {0x50, 0x2}, @cond=[{0x1ff, 0x5, 0x6f5, 0x800, 0xc7, 0xffff}, {0xffff, 0x5, 0x1, 0x46, 0xcb, 0xfd}]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYBLOB="00022cbd7000fedbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
quotactl_fd$Q_QUOTAOFF(r4, 0xffffffff80000300, 0xee00, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x3)
acct(&(0x7f0000000140)='./file0\x00')

1.085330872s ago: executing program 4 (id=1664):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20c0, 0x0)
accept4$vsock_stream(r0, &(0x7f0000000100), 0x10, 0x80800)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="2d6e73202d687567652091c8f4639964020e543aee8d42b7f08d8ef0b2c49dd63e7216d1596eb00b1e6ae5fffc1278de5b20058b590c14c25ae6bde29c86a76e0f7005465fc8af31d8877f803694d76466edef25107586f1cc20870bec1836f690783600700821a2c9037ae5dcf9ce9db09a78fe33bd6363fd81d6ccb48183fbf86d6b22cc1744d8c30367934e1bfa7bf6b4d137db58c29a5b063f5cf4fadb0fa602ccc7e38ba49de5e3f2f38e301e8c5c6133aa0a8c8fed497fea57655d58c24a"], 0x12)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0xfffffffe, r5}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r5, 0x0, &(0x7f00000001c0)=""/237}, 0x20)
write$cgroup_type(r2, 0x0, 0x0)
r7 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r8, &(0x7f0000000140), 0x2, 0x0)
r9 = syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r5, &(0x7f0000000c80)="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", &(0x7f0000000400)=""/31}, 0x20)
r11 = openat$cgroup_procs(r10, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r12 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_pid(r11, &(0x7f00000001c0)=r9, 0x12)
syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40), &(0x7f0000000a80))
perf_event_open(&(0x7f0000000b80)={0x5, 0x80, 0x9, 0x7, 0x5, 0xf, 0x0, 0x6, 0x10805, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x2, 0x3}, 0x14000, 0x1, 0x7, 0x2, 0xb8, 0xc7c, 0x5, 0x0, 0x757a, 0x0, 0x80}, r9, 0xffffffffffffffff, r12, 0x8)

970.817717ms ago: executing program 4 (id=1670):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f0000000c80)="6ab9453c7f160e59e9548227ed7c1d8dcf0f9febe5cedead73b937af99623ec10ecfdc25c22ca45db09d935db7fda38de8b32b7b7b9ea0202164cc7678684abdf53d1c14b487d9d540b1db9d9d0e73d668b9bce63b3c8ad68935576865ecab12de7c2d5a7fe091dbae860730426771c97832ece7e39bd403c9a2de96", 0x0}, 0x20)

913.36925ms ago: executing program 4 (id=1671):
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0)
write$P9_RWALK(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="30ff95fe11"], 0x30)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]})
brk(0x1)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x8)
ioperm(0x0, 0x2, 0x7e)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r3, 0x0, 0x33, 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0200000000000000000033040000080001007063690011000200303030303a30303a31302e300000000008008e0003000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000014}, 0x0)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfff9, {0x1, 0x201}, {0x50, 0x2}, @cond=[{0x1ff, 0x5, 0x6f5, 0x800, 0xc7, 0xffff}, {0xffff, 0x5, 0x1, 0x46, 0xcb, 0xfd}]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYBLOB="00022cbd7000fedbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
quotactl_fd$Q_QUOTAOFF(r4, 0xffffffff80000300, 0xee00, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x3)
acct(&(0x7f0000000140)='./file0\x00')

620.222592ms ago: executing program 3 (id=1673):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x84)

618.366702ms ago: executing program 3 (id=1676):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2a080, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
unshare(0x2040400)
inotify_rm_watch(0xffffffffffffffff, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r2 = getpid()
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
close(r5)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffd, {0x0, 0x0, 0x4, 0x0, 0x1bc60, 0x2a704}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xe}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x2ee4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000080b70300000000edff8400000083000000bf090000000000005509010000000000950000b7020000000000008500000084000000b72f0d6344cd632a2600000000000000000000000000edb8e44b8234e574cddec83c6d035f9b3793e6aaf13ad10dd7f68d3fda13c85d1269ad2631c55747aab7a6e80e6e87302df15401826b9aeff826aa071853d161e712200ad2b84a533d5c49d96fba86b886f01a613b54fd50dfafe3c1a94ea215d7a815428e8f028480761fe594c65730243ecf85dd9b2381a58a9f5ce408a9e450896a828e3f5c6fbdac0629f6a2977d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000240)={0x0, 0x4000000}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='kfree\x00', r9, 0x0, 0xfffffffffffffffc}, 0xc)
ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000100))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg1\x00', 0x1})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)

616.415803ms ago: executing program 2 (id=1680):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fspick(r2, &(0x7f0000000000)='.\x00', 0x0)

614.879643ms ago: executing program 2 (id=1682):
io_setup(0x2007, &(0x7f0000000980)=<r0=>0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001000000070000000c"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx  \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_destroy(r0)

541.574106ms ago: executing program 2 (id=1684):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2a080, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
unshare(0x2040400)
inotify_rm_watch(0xffffffffffffffff, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r2 = getpid()
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
close(r5)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffd, {0x0, 0x0, 0x4, 0x0, 0x1bc60, 0x2a704}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xe}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x2ee4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000080b70300000000edff8400000083000000bf090000000000005509010000000000950000b7020000000000008500000084000000b72f0d6344cd632a2600000000000000000000000000edb8e44b8234e574cddec83c6d035f9b3793e6aaf13ad10dd7f68d3fda13c85d1269ad2631c55747aab7a6e80e6e87302df15401826b9aeff826aa071853d161e712200ad2b84a533d5c49d96fba86b886f01a613b54fd50dfafe3c1a94ea215d7a815428e8f028480761fe594c65730243ecf85dd9b2381a58a9f5ce408a9e450896a828e3f5c6fbdac0629f6a2977d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000240)={0x0, 0x4000000}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='kfree\x00', r9, 0x0, 0xfffffffffffffffc}, 0xc)
ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000100))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg1\x00', 0x1})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)

361.656384ms ago: executing program 1 (id=1687):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffec}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000840)={'veth1_to_bond\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4baced2a496b3c54, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x5, 0x3, 0x1, 0x9}, 0x9, 0x1, 0x1, 0x6, 0x41, 0x11, 0x12, 0x6, 0x4, 0xfffffff8, {0xe61a, 0x8000, 0x10006, 0x1, 0x6, 0xbf5}}}}]}, 0x78}}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d0000008500000023000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='ext4_mballoc_alloc\x00', r4}, 0x18)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0)
msgget$private(0x0, 0xc1c)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
shutdown(r7, 0x1)

205.873061ms ago: executing program 1 (id=1688):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fspick(r2, &(0x7f0000000000)='.\x00', 0x0)

188.305172ms ago: executing program 1 (id=1689):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x1589, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext, 0x0, 0x5b, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4d31, 0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x11220, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8264, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x367b, 0x8000}, 0x10320, 0x0, 0x8, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000003c0)=ANY=[])

132.448964ms ago: executing program 1 (id=1690):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
preadv(r0, &(0x7f0000002600)=[{&(0x7f00000026c0)=""/4097, 0x1001}], 0x1, 0x40000005, 0x3)

131.920034ms ago: executing program 1 (id=1691):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

103.489755ms ago: executing program 0 (id=1692):
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c002000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006203300000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x40000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="39e8dcfa461ac09e8a722e34d7e484893ffa560200133b1b00003f210000001770faf047145bc79e0b9971bcbedac0eeaf3300000000000000000000cab0312cf6b68ced50ac2b5546216e3ce964359fa4ea01a34f038f38509172feed11b0fd62fd47a9d236813b4ebda3ebdd33aec5ea71251a0651345627e476fa4b9c478f296d2457c7d362ae", 0x88}], 0x1)
r5 = syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41)
setreuid(0x0, 0xee00)
ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r5])
signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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")
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xcb, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x400}, 0x0)
r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r6, 0x2007ffc)
sendfile(r6, r6, 0x0, 0x800000009)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x18)
sync()

102.704735ms ago: executing program 4 (id=1693):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24048844}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

81.837026ms ago: executing program 4 (id=1694):
io_setup(0x2007, &(0x7f0000000980)=<r0=>0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001000000070000000c"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx  \x00'}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18)
io_destroy(r0)

69.200597ms ago: executing program 1 (id=1695):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2007, &(0x7f0000000980)=<r1=>0x0)
r2 = eventfd2(0x9, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001000000070000000c"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}])
io_destroy(r1)

0s ago: executing program 4 (id=1696):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@struct={0x3, 0x0, 0x0, 0x4, 0x1, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x1}]}]}, {0x0, [0x5f, 0x30, 0x2e]}}, 0x0, 0x3d, 0x0, 0x1, 0x8}, 0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, 0x0, 0x6a98047402e98331, 0x70bd2a, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x200440c2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_aout(r3, &(0x7f00000003c0)={{0x107, 0x0, 0xf6, 0xce, 0xe5, 0x3, 0x173, 0x4c7}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1500)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000034000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000008300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r5 = dup2(r4, r4)
ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0)

kernel console output (not intermixed with test programs):

6937 Comm: syz.3.983 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  117.087713][ T6937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  117.087725][ T6937] Call Trace:
[  117.087730][ T6937]  <TASK>
[  117.087737][ T6937]  __dump_stack+0x1d/0x30
[  117.087759][ T6937]  dump_stack_lvl+0xe8/0x140
[  117.087823][ T6937]  dump_stack+0x15/0x1b
[  117.087841][ T6937]  should_fail_ex+0x265/0x280
[  117.087862][ T6937]  should_failslab+0x8c/0xb0
[  117.087881][ T6937]  kmem_cache_alloc_noprof+0x69/0x4b0
[  117.087950][ T6937]  ? audit_log_start+0x342/0x720
[  117.087971][ T6937]  audit_log_start+0x342/0x720
[  117.087990][ T6937]  ? kstrtouint+0x76/0xc0
[  117.088007][ T6937]  audit_seccomp+0x48/0x100
[  117.088060][ T6937]  ? __seccomp_filter+0x832/0x1260
[  117.088114][ T6937]  __seccomp_filter+0x843/0x1260
[  117.088141][ T6937]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  117.088202][ T6937]  ? vfs_write+0x7e8/0x960
[  117.088218][ T6937]  ? __rcu_read_unlock+0x4f/0x70
[  117.088237][ T6937]  ? __fget_files+0x184/0x1c0
[  117.088285][ T6937]  __secure_computing+0x82/0x150
[  117.088454][ T6937]  syscall_trace_enter+0xcf/0x1e0
[  117.088478][ T6937]  do_syscall_64+0xb2/0x2a0
[  117.088582][ T6937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.088666][ T6937] RIP: 0033:0x7fb470a1f749
[  117.088680][ T6937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.088697][ T6937] RSP: 002b:00007fb46f487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000025
[  117.088714][ T6937] RAX: ffffffffffffffda RBX: 00007fb470c75fa0 RCX: 00007fb470a1f749
[  117.088725][ T6937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000038
[  117.088736][ T6937] RBP: 00007fb46f487090 R08: 0000000000000000 R09: 0000000000000000
[  117.088805][ T6937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  117.088816][ T6937] R13: 00007fb470c76038 R14: 00007fb470c75fa0 R15: 00007ffe1f4ddb98
[  117.088834][ T6937]  </TASK>
[  117.356317][ T6941] loop1: detected capacity change from 0 to 512
[  117.365061][ T6941] EXT4-fs (loop1): orphan cleanup on readonly fs
[  117.371887][ T6941] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.985: ea_inode file size=4 entry size=6
[  117.384775][ T6941] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  117.398003][ T6941] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.985: corrupted inode contents
[  117.410317][ T6941] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.985: mark_inode_dirty error
[  117.422795][ T6941] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.985: corrupted inode contents
[  117.435344][ T6941] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.985: mark_inode_dirty error
[  117.447581][ T6941] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.985: mark inode dirty (error -117)
[  117.460657][ T6941] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117)
[  117.469843][ T6941] EXT4-fs (loop1): 1 orphan inode deleted
[  117.476393][ T6941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  117.544369][ T6949] netlink: 52 bytes leftover after parsing attributes in process `syz.1.985'.
[  117.630172][  T862] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.641914][  T862] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.653343][   T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.665487][  T862] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.747635][ T6965] loop2: detected capacity change from 0 to 1024
[  117.755389][ T6965] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  117.766339][ T6965] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  117.776852][ T6965] EXT4-fs (loop2): invalid journal inode
[  117.782691][ T6965] EXT4-fs (loop2): can't get journal size
[  117.790363][ T6965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  117.813082][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.882220][ T6975] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  117.929906][ T6981] netlink: 96 bytes leftover after parsing attributes in process `syz.3.992'.
[  117.945247][ T6979] vcan0 speed is unknown, defaulting to 1000
[  117.966966][ T6990] xt_recent: Unsupported userspace flags (000000b1)
[  117.990075][ T6979] wg1 speed is unknown, defaulting to 1000
[  118.095626][ T7014] Buffer I/O error on dev loop5, logical block 0, async page read
[  118.103663][ T7014] Buffer I/O error on dev loop5, logical block 0, async page read
[  118.111740][ T7014]  loop5: unable to read partition table
[  118.132482][ T7014] loop_reread_partitions: partition scan of loop5 (�被x������ڬ��dG�����ݡ�����
[  118.132482][ T7014] 
) failed (rc=-5)
[  118.147979][ T7017] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  118.156932][ T7017] netlink: 36 bytes leftover after parsing attributes in process `syz.4.996'.
[  118.175100][ T7019] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.198311][ T7014] vcan0 speed is unknown, defaulting to 1000
[  118.208705][ T7028] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  118.219853][ T7028] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  118.237137][ T7019] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.237283][ T7021] xt_recent: Unsupported userspace flags (000000b1)
[  118.248047][ T7028] EXT4-fs (loop4): invalid journal inode
[  118.262409][ T7028] EXT4-fs (loop4): can't get journal size
[  118.270086][ T7014] wg1 speed is unknown, defaulting to 1000
[  118.271721][ T7028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  118.296794][ T7019] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.309201][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.341292][ T7063] netlink: 96 bytes leftover after parsing attributes in process `syz.4.999'.
[  118.368034][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.387784][ T7066] bond1 (unregistering): Released all slaves
[  118.401397][ T7019] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.434505][ T7142] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  118.544871][ T7151]  loop4: p1 < > p3 p4
[  118.549925][ T7151] loop4: p3 start 458752 is beyond EOD, truncated
[  118.556548][ T7151] loop4: p4 start 268435456 is beyond EOD, truncated
[  118.570143][ T7156] vcan0 speed is unknown, defaulting to 1000
[  118.609581][ T7166] xt_recent: Unsupported userspace flags (000000b1)
[  118.614403][ T7156] wg1 speed is unknown, defaulting to 1000
[  118.755432][ T7195] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.788893][ T7201] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1012'.
[  118.820676][ T7204] Buffer I/O error on dev loop5, logical block 0, async page read
[  118.828892][ T7204] Buffer I/O error on dev loop5, logical block 0, async page read
[  118.836836][ T7204]  loop5: unable to read partition table
[  118.842792][ T7204] loop_reread_partitions: partition scan of loop5 (�被x������ڬ��dG�����ݡ�����
[  118.842792][ T7204] 
) failed (rc=-5)
[  118.878194][ T7204] vcan0 speed is unknown, defaulting to 1000
[  118.918901][ T7211] xt_recent: Unsupported userspace flags (000000b1)
[  118.928376][ T7195] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.985161][ T7210] bond1 (unregistering): Released all slaves
[  119.016971][ T7204] wg1 speed is unknown, defaulting to 1000
[  119.155464][ T7195] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.167712][ T7191] Set syz1 is full, maxelem 65536 reached
[  119.206763][ T7307] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  119.237293][ T7195] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.275350][   T29] kauditd_printk_skb: 232 callbacks suppressed
[  119.275372][   T29] audit: type=1326 audit(1765034045.134:6079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.1.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  119.305241][   T29] audit: type=1326 audit(1765034045.134:6080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.1.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  119.328804][   T29] audit: type=1326 audit(1765034045.134:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.1.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  119.352739][   T29] audit: type=1326 audit(1765034045.134:6082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.1.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  119.376260][   T29] audit: type=1326 audit(1765034045.134:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.1.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  119.400006][   T29] audit: type=1326 audit(1765034045.134:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.1.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  119.423647][   T29] audit: type=1326 audit(1765034045.134:6085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.1.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  119.447144][   T29] audit: type=1326 audit(1765034045.134:6086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.1.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  119.470661][   T29] audit: type=1326 audit(1765034045.134:6087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.1.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  119.494129][   T29] audit: type=1326 audit(1765034045.134:6088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.1.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  119.526026][ T7068] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.549404][ T7068] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.584210][ T7068] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.600801][ T7068] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.617469][ T7332] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1023'.
[  119.671851][ T7340] EXT4-fs: Ignoring removed nomblk_io_submit option
[  119.683169][ T7340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.697856][ T7344] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  119.910616][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.960746][ T7348] bond1 (unregistering): Released all slaves
[  120.044369][ T7452] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1035'.
[  120.665375][ T7464] 9pnet_fd: Insufficient options for proto=fd
[  120.953029][ T7479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.960945][ T7477] set_capacity_and_notify: 5 callbacks suppressed
[  120.960969][ T7477] loop1: detected capacity change from 0 to 4096
[  120.962549][ T7479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.969005][ T7477] EXT4-fs: Ignoring removed nomblk_io_submit option
[  120.992334][ T7477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.047285][ T7485] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1047'.
[  121.229838][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.400181][   T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.412460][   T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.425097][   T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.437095][   T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.676598][ T7551] FAULT_INJECTION: forcing a failure.
[  121.676598][ T7551] name failslab, interval 1, probability 0, space 0, times 0
[  121.689273][ T7551] CPU: 0 UID: 0 PID: 7551 Comm: syz.4.1070 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  121.689376][ T7551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  121.689389][ T7551] Call Trace:
[  121.689395][ T7551]  <TASK>
[  121.689403][ T7551]  __dump_stack+0x1d/0x30
[  121.689424][ T7551]  dump_stack_lvl+0xe8/0x140
[  121.689451][ T7551]  dump_stack+0x15/0x1b
[  121.689468][ T7551]  should_fail_ex+0x265/0x280
[  121.689525][ T7551]  should_failslab+0x8c/0xb0
[  121.689544][ T7551]  __kvmalloc_node_noprof+0x149/0x6b0
[  121.689567][ T7551]  ? traverse+0xa2/0x3a0
[  121.689595][ T7551]  traverse+0xa2/0x3a0
[  121.689700][ T7551]  ? _parse_integer_limit+0x170/0x190
[  121.689734][ T7551]  seq_read_iter+0x85f/0x950
[  121.689760][ T7551]  ? kstrtoull+0x111/0x140
[  121.689844][ T7551]  seq_read+0x270/0x2b0
[  121.689876][ T7551]  ? __pfx_seq_read+0x10/0x10
[  121.689901][ T7551]  proc_reg_read+0x128/0x1c0
[  121.690007][ T7551]  ? __pfx_proc_reg_read+0x10/0x10
[  121.690036][ T7551]  vfs_read+0x1a8/0x770
[  121.690106][ T7551]  ? __fget_files+0x184/0x1c0
[  121.690126][ T7551]  ? __rcu_read_unlock+0x4f/0x70
[  121.690201][ T7551]  ? __fget_files+0x184/0x1c0
[  121.690219][ T7551]  ? mutex_unlock+0x4f/0x90
[  121.690245][ T7551]  __x64_sys_pread64+0xfd/0x150
[  121.690286][ T7551]  x64_sys_call+0x281b/0x3000
[  121.690308][ T7551]  do_syscall_64+0xd8/0x2a0
[  121.690375][ T7551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.690433][ T7551] RIP: 0033:0x7f34a928f749
[  121.690447][ T7551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.690464][ T7551] RSP: 002b:00007f34a7cef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  121.690481][ T7551] RAX: ffffffffffffffda RBX: 00007f34a94e5fa0 RCX: 00007f34a928f749
[  121.690493][ T7551] RDX: 000000000000101a RSI: 0000200000001480 RDI: 0000000000000004
[  121.690584][ T7551] RBP: 00007f34a7cef090 R08: 0000000000000000 R09: 0000000000000000
[  121.690595][ T7551] R10: 0000000000000099 R11: 0000000000000246 R12: 0000000000000001
[  121.690606][ T7551] R13: 00007f34a94e6038 R14: 00007f34a94e5fa0 R15: 00007ffd7a6e2ab8
[  121.690624][ T7551]  </TASK>
[  121.924575][ T7554] __nla_validate_parse: 1 callbacks suppressed
[  121.924591][ T7554] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1071'.
[  121.942632][ T7556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.951553][ T7556] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.023474][ T7568] loop3: detected capacity change from 0 to 2048
[  122.075516][ T7568]  loop3: p1 < > p3 p4
[  122.080899][ T7568] loop3: p3 start 458752 is beyond EOD, truncated
[  122.087486][ T7568] loop3: p4 start 268435456 is beyond EOD, truncated
[  122.181822][ T7594] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1084'.
[  122.220089][ T7599] loop0: detected capacity change from 0 to 128
[  122.264991][ T7605] FAULT_INJECTION: forcing a failure.
[  122.264991][ T7605] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  122.278125][ T7605] CPU: 0 UID: 0 PID: 7605 Comm: syz.4.1087 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  122.278161][ T7605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  122.278187][ T7605] Call Trace:
[  122.278201][ T7605]  <TASK>
[  122.278211][ T7605]  __dump_stack+0x1d/0x30
[  122.278296][ T7605]  dump_stack_lvl+0xe8/0x140
[  122.278319][ T7605]  dump_stack+0x15/0x1b
[  122.278339][ T7605]  should_fail_ex+0x265/0x280
[  122.278362][ T7605]  should_fail+0xb/0x20
[  122.278421][ T7605]  should_fail_usercopy+0x1a/0x20
[  122.278490][ T7605]  _copy_from_user+0x1c/0xb0
[  122.278518][ T7605]  __sys_connect+0xd0/0x2b0
[  122.278555][ T7605]  __x64_sys_connect+0x3f/0x50
[  122.278598][ T7605]  x64_sys_call+0x2e09/0x3000
[  122.278631][ T7605]  do_syscall_64+0xd8/0x2a0
[  122.278667][ T7605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.278757][ T7605] RIP: 0033:0x7f34a928f749
[  122.278778][ T7605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.278804][ T7605] RSP: 002b:00007f34a7cef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  122.278823][ T7605] RAX: ffffffffffffffda RBX: 00007f34a94e5fa0 RCX: 00007f34a928f749
[  122.278878][ T7605] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000004
[  122.278895][ T7605] RBP: 00007f34a7cef090 R08: 0000000000000000 R09: 0000000000000000
[  122.278957][ T7605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  122.279040][ T7605] R13: 00007f34a94e6038 R14: 00007f34a94e5fa0 R15: 00007ffd7a6e2ab8
[  122.279066][ T7605]  </TASK>
[  122.482353][ T7611] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  122.573300][ T7621] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.588006][ T7625] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1095'.
[  122.629497][ T7621] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.764896][ T7632] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1097'.
[  122.916293][ T7642] bond1 (unregistering): Released all slaves
[  122.940142][ T7621] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.963454][ T7724] xt_recent: Unsupported userspace flags (000000b1)
[  122.978591][ T7686] vcan0 speed is unknown, defaulting to 1000
[  123.019073][ T7686] wg1 speed is unknown, defaulting to 1000
[  123.039601][ T7621] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.180380][ T7758] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1106'.
[  123.223686][ T7764] loop4: detected capacity change from 0 to 128
[  123.236597][ T7766] loop1: detected capacity change from 0 to 128
[  123.252635][ T7766] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  123.268997][ T7766] ext4 filesystem being mounted at /222 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.293333][ T3319] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  123.319253][ T7781] loop1: detected capacity change from 0 to 1024
[  123.338612][ T7781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  123.354505][ T7781] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.367982][ T7781] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.1111: lblock 3 mapped to illegal pblock 3 (length 3)
[  123.382541][ T7781] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  123.394942][ T7781] EXT4-fs (loop1): This should not happen!! Data will be lost
[  123.394942][ T7781] 
[  123.428171][ T7788] bond1 (unregistering): Released all slaves
[  123.428171][ T7068] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:13: lblock 8 mapped to illegal pblock 8 (length 8)
[  123.452409][ T7068] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  123.464769][ T7068] EXT4-fs (loop1): This should not happen!! Data will be lost
[  123.464769][ T7068] 
[  123.476516][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  123.503475][ T7866] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1112'.
[  123.550034][ T7873] loop4: detected capacity change from 0 to 1024
[  123.558851][ T7873] EXT4-fs: Ignoring removed nomblk_io_submit option
[  123.588137][ T7873] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  123.601277][ T7873] System zones: 0-1, 3-36
[  123.607530][ T7873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.713676][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.715763][ T7894] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1120'.
[  123.768975][ T7900] loop0: detected capacity change from 0 to 4096
[  123.775895][ T7900] EXT4-fs: Ignoring removed nomblk_io_submit option
[  123.785370][ T7900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.824091][ T7906] bridge0: port 3(bond0) entered blocking state
[  123.830436][ T7906] bridge0: port 3(bond0) entered disabled state
[  123.837851][ T7906] bond0: entered allmulticast mode
[  123.843003][ T7906] bond_slave_0: entered allmulticast mode
[  123.848841][ T7906] bond_slave_1: entered allmulticast mode
[  123.871181][ T7906] bond0: entered promiscuous mode
[  123.876352][ T7906] bond_slave_0: entered promiscuous mode
[  123.882401][ T7906] bond_slave_1: entered promiscuous mode
[  124.000285][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.049345][ T7931] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1132'.
[  124.116248][ T7943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.125040][ T7943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.290880][   T29] kauditd_printk_skb: 690 callbacks suppressed
[  124.290974][   T29] audit: type=1400 audit(1765034050.144:6779): avc:  denied  { write } for  pid=7952 comm="syz.0.1137" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  124.489282][ T7979] loop0: detected capacity change from 0 to 4096
[  124.496195][ T7979] EXT4-fs: Ignoring removed nomblk_io_submit option
[  124.505349][ T7979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.679207][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.864579][ T7998] loop3: detected capacity change from 0 to 4096
[  124.871880][ T7998] EXT4-fs: Ignoring removed nomblk_io_submit option
[  124.890396][ T7998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.940630][ T8009] EXT4-fs (loop4): bad geometry: first data block 0 is beyond end of filesystem (0)
[  124.944546][ T8000]  loop1: p1 < > p3 p4
[  124.965747][ T8000] loop1: p3 start 458752 is beyond EOD, truncated
[  124.972321][ T8000] loop1: p4 start 268435456 is beyond EOD, truncated
[  125.017623][ T8019] bridge0: port 3(bond0) entered blocking state
[  125.023992][ T8019] bridge0: port 3(bond0) entered disabled state
[  125.042734][ T8019] bond0: entered allmulticast mode
[  125.048060][ T8019] bond_slave_0: entered allmulticast mode
[  125.053927][ T8019] bond_slave_1: entered allmulticast mode
[  125.075668][ T8019] bond0: entered promiscuous mode
[  125.080758][ T8019] bond_slave_0: entered promiscuous mode
[  125.086690][ T8019] bond_slave_1: entered promiscuous mode
[  125.093251][ T8019] bridge0: port 3(bond0) entered blocking state
[  125.099624][ T8019] bridge0: port 3(bond0) entered forwarding state
[  125.117088][ T8032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.125730][ T8032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.160767][ T8037] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1155'.
[  125.219625][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.256909][ T8045] EXT4-fs (loop3): too many log groups per flexible block group
[  125.264943][ T8045] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  125.271771][ T8045] EXT4-fs (loop3): mount failed
[  125.316800][   T29] audit: type=1326 audit(1765034051.174:6780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  125.340475][   T29] audit: type=1326 audit(1765034051.174:6781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  125.364003][   T29] audit: type=1326 audit(1765034051.174:6782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  125.387448][   T29] audit: type=1326 audit(1765034051.174:6783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  125.410894][   T29] audit: type=1326 audit(1765034051.174:6784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  125.434303][   T29] audit: type=1326 audit(1765034051.174:6785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  125.457937][   T29] audit: type=1326 audit(1765034051.174:6786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  125.481437][   T29] audit: type=1326 audit(1765034051.174:6787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  125.505010][   T29] audit: type=1326 audit(1765034051.174:6788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  125.714689][ T8075] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1166'.
[  125.754678][ T8078] EXT4-fs: Ignoring removed nomblk_io_submit option
[  125.763767][ T8078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.950237][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.034486][ T8100] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  126.120506][ T1661] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.151096][ T1661] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.168329][ T1661] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.177225][ T1661] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.224732][ T8118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.227759][ T8132] set_capacity_and_notify: 4 callbacks suppressed
[  126.227781][ T8132] loop0: detected capacity change from 0 to 4096
[  126.240194][ T8118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.255325][ T8132] EXT4-fs: Ignoring removed nomblk_io_submit option
[  126.273645][ T8132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.291667][ T8144] FAULT_INJECTION: forcing a failure.
[  126.291667][ T8144] name failslab, interval 1, probability 0, space 0, times 0
[  126.304446][ T8144] CPU: 0 UID: 0 PID: 8144 Comm: syz.2.1184 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  126.304484][ T8144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  126.304500][ T8144] Call Trace:
[  126.304513][ T8144]  <TASK>
[  126.304522][ T8144]  __dump_stack+0x1d/0x30
[  126.304554][ T8144]  dump_stack_lvl+0xe8/0x140
[  126.304621][ T8144]  dump_stack+0x15/0x1b
[  126.304646][ T8144]  should_fail_ex+0x265/0x280
[  126.304678][ T8144]  should_failslab+0x8c/0xb0
[  126.304708][ T8144]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[  126.304740][ T8144]  ? __alloc_skb+0x324/0x4d0
[  126.304770][ T8144]  __alloc_skb+0x324/0x4d0
[  126.304799][ T8144]  ? __alloc_skb+0x24d/0x4d0
[  126.304833][ T8144]  netlink_alloc_large_skb+0xbf/0xf0
[  126.304870][ T8144]  netlink_sendmsg+0x3cf/0x6b0
[  126.304980][ T8144]  ? __pfx_netlink_sendmsg+0x10/0x10
[  126.305014][ T8144]  __sock_sendmsg+0x145/0x180
[  126.305086][ T8144]  ____sys_sendmsg+0x31e/0x4a0
[  126.305129][ T8144]  ___sys_sendmsg+0x17b/0x1d0
[  126.305240][ T8144]  __x64_sys_sendmsg+0xd4/0x160
[  126.305283][ T8144]  x64_sys_call+0x17ba/0x3000
[  126.305308][ T8144]  do_syscall_64+0xd8/0x2a0
[  126.305394][ T8144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.305424][ T8144] RIP: 0033:0x7fc69436f749
[  126.305445][ T8144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  126.305469][ T8144] RSP: 002b:00007fc692dd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  126.305493][ T8144] RAX: ffffffffffffffda RBX: 00007fc6945c5fa0 RCX: 00007fc69436f749
[  126.305516][ T8144] RDX: 0000000000040040 RSI: 00002000000003c0 RDI: 0000000000000006
[  126.305529][ T8144] RBP: 00007fc692dd7090 R08: 0000000000000000 R09: 0000000000000000
[  126.305570][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  126.305608][ T8144] R13: 00007fc6945c6038 R14: 00007fc6945c5fa0 R15: 00007ffeaa8c24c8
[  126.305636][ T8144]  </TASK>
[  126.556681][ T8153] loop3: detected capacity change from 0 to 4096
[  126.563589][ T8153] EXT4-fs: Ignoring removed nomblk_io_submit option
[  126.592108][ T8153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.782168][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.907523][ T8180] loop1: detected capacity change from 0 to 128
[  127.277884][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.511301][ T8185] loop0: detected capacity change from 0 to 32768
[  127.554457][ T8185]  loop0: p1 p2 p3 < > p4 < p5 p6 >
[  127.560018][ T8185] loop0: p1 start 460800 is beyond EOD, truncated
[  127.567036][ T8185] loop0: p2 size 83886080 extends beyond EOD, truncated
[  127.576212][ T8185] loop0: p5 start 460800 is beyond EOD, truncated
[  127.582784][ T8185] loop0: p6 size 83886080 extends beyond EOD, truncated
[  127.624124][ T8208] vcan0 speed is unknown, defaulting to 1000
[  127.666983][ T8208] wg1 speed is unknown, defaulting to 1000
[  127.690863][ T8214] xt_recent: Unsupported userspace flags (000000b1)
[  127.724193][ T8241] FAULT_INJECTION: forcing a failure.
[  127.724193][ T8241] name failslab, interval 1, probability 0, space 0, times 0
[  127.737020][ T8241] CPU: 1 UID: 0 PID: 8241 Comm: syz.2.1201 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  127.737122][ T8241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  127.737139][ T8241] Call Trace:
[  127.737148][ T8241]  <TASK>
[  127.737158][ T8241]  __dump_stack+0x1d/0x30
[  127.737186][ T8241]  dump_stack_lvl+0xe8/0x140
[  127.737249][ T8241]  dump_stack+0x15/0x1b
[  127.737275][ T8241]  should_fail_ex+0x265/0x280
[  127.737304][ T8241]  should_failslab+0x8c/0xb0
[  127.737410][ T8241]  __kmalloc_cache_noprof+0x65/0x4c0
[  127.737441][ T8241]  ? find_get_pmu_context+0x58/0x450
[  127.737485][ T8241]  find_get_pmu_context+0x58/0x450
[  127.737530][ T8241]  __se_sys_perf_event_open+0x976/0x1210
[  127.737596][ T8241]  __x64_sys_perf_event_open+0x67/0x80
[  127.737639][ T8241]  x64_sys_call+0x78c/0x3000
[  127.737686][ T8241]  do_syscall_64+0xd8/0x2a0
[  127.737760][ T8241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.737789][ T8241] RIP: 0033:0x7fc69436f749
[  127.737842][ T8241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.737907][ T8241] RSP: 002b:00007fc692dd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  127.737931][ T8241] RAX: ffffffffffffffda RBX: 00007fc6945c5fa0 RCX: 00007fc69436f749
[  127.737948][ T8241] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140
[  127.737965][ T8241] RBP: 00007fc692dd7090 R08: 0000000000000002 R09: 0000000000000000
[  127.737979][ T8241] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001
[  127.737991][ T8241] R13: 00007fc6945c6038 R14: 00007fc6945c5fa0 R15: 00007ffeaa8c24c8
[  127.738028][ T8241]  </TASK>
[  127.988113][ T8248] loop2: detected capacity change from 0 to 764
[  128.015880][ T8253] loop1: detected capacity change from 0 to 764
[  128.025757][ T8253] __nla_validate_parse: 4 callbacks suppressed
[  128.025773][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1204'.
[  128.040995][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1204'.
[  128.065509][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1204'.
[  128.074499][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1204'.
[  128.111564][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1204'.
[  128.120649][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1204'.
[  128.140867][ T8260] loop0: detected capacity change from 0 to 4096
[  128.156669][ T8260] EXT4-fs: Ignoring removed nomblk_io_submit option
[  128.173194][ T8260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.190563][ T8274] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  128.264612][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1211'.
[  128.273685][ T8285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1211'.
[  128.282897][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1211'.
[  128.283808][ T8285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1211'.
[  128.300991][ T8285] netlink: 'syz.2.1211': attribute type 6 has an invalid length.
[  128.389853][ T8293] loop3: detected capacity change from 0 to 2048
[  128.433239][ T8303] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  128.444882][ T8293]  loop3: p1 < > p3 p4
[  128.450268][ T8293] loop3: p3 start 458752 is beyond EOD, truncated
[  128.456819][ T8293] loop3: p4 start 268435456 is beyond EOD, truncated
[  128.524931][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.555762][ T8316] 9pnet: Could not find request transport: rd
[  128.556648][ T8312] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  128.623763][ T8324] vcan0 speed is unknown, defaulting to 1000
[  128.669532][ T8324] wg1 speed is unknown, defaulting to 1000
[  128.677956][ T8325] vcan0 speed is unknown, defaulting to 1000
[  128.697184][ T8349] loop1: detected capacity change from 0 to 128
[  128.758486][ T8325] wg1 speed is unknown, defaulting to 1000
[  128.851428][ T8369] bond1 (unregistering): Released all slaves
[  128.870535][ T8429] FAULT_INJECTION: forcing a failure.
[  128.870535][ T8429] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  128.883767][ T8429] CPU: 1 UID: 0 PID: 8429 Comm: syz.0.1228 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  128.883796][ T8429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  128.883818][ T8429] Call Trace:
[  128.883826][ T8429]  <TASK>
[  128.883837][ T8429]  __dump_stack+0x1d/0x30
[  128.883865][ T8429]  dump_stack_lvl+0xe8/0x140
[  128.884030][ T8429]  dump_stack+0x15/0x1b
[  128.884060][ T8429]  should_fail_ex+0x265/0x280
[  128.884146][ T8429]  should_fail+0xb/0x20
[  128.884167][ T8429]  should_fail_usercopy+0x1a/0x20
[  128.884197][ T8429]  _copy_from_user+0x1c/0xb0
[  128.884230][ T8429]  ___sys_sendmsg+0xc1/0x1d0
[  128.884324][ T8429]  __x64_sys_sendmsg+0xd4/0x160
[  128.884364][ T8429]  x64_sys_call+0x17ba/0x3000
[  128.884392][ T8429]  do_syscall_64+0xd8/0x2a0
[  128.884505][ T8429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.884531][ T8429] RIP: 0033:0x7f705463f749
[  128.884550][ T8429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.884632][ T8429] RSP: 002b:00007f70530a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  128.884666][ T8429] RAX: ffffffffffffffda RBX: 00007f7054895fa0 RCX: 00007f705463f749
[  128.884747][ T8429] RDX: 00000000000000b0 RSI: 0000200000000400 RDI: 0000000000000009
[  128.884763][ T8429] RBP: 00007f70530a7090 R08: 0000000000000000 R09: 0000000000000000
[  128.884775][ T8429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.884791][ T8429] R13: 00007f7054896038 R14: 00007f7054895fa0 R15: 00007fffbddd2f98
[  128.884812][ T8429]  </TASK>
[  129.141603][ T8475] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  129.153881][ T8473] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.234461][ T8486] bridge0: port 4(vlan2) entered blocking state
[  129.240810][ T8486] bridge0: port 4(vlan2) entered disabled state
[  129.249080][ T8486] vlan2: entered allmulticast mode
[  129.254285][ T8486] bridge0: entered allmulticast mode
[  129.263003][ T8486] vlan2: left allmulticast mode
[  129.268230][ T8486] bridge0: left allmulticast mode
[  129.280737][ T8473] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.305612][ T8491] loop2: detected capacity change from 0 to 4096
[  129.312952][ T8491] EXT4-fs: Ignoring removed nomblk_io_submit option
[  129.319874][   T29] kauditd_printk_skb: 249 callbacks suppressed
[  129.319888][   T29] audit: type=1326 audit(1765034055.174:7036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a928f749 code=0x7ffc0000
[  129.349470][   T29] audit: type=1326 audit(1765034055.174:7037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34a928f749 code=0x7ffc0000
[  129.350614][ T8501] FAULT_INJECTION: forcing a failure.
[  129.350614][ T8501] name failslab, interval 1, probability 0, space 0, times 0
[  129.372944][   T29] audit: type=1326 audit(1765034055.174:7038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a928f749 code=0x7ffc0000
[  129.385501][ T8501] CPU: 0 UID: 0 PID: 8501 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) 
[  129.385612][ T8501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  129.385625][ T8501] Call Trace:
[  129.385631][ T8501]  <TASK>
[  129.385639][ T8501]  __dump_stack+0x1d/0x30
[  129.385693][ T8501]  dump_stack_lvl+0xe8/0x140
[  129.385729][ T8501]  dump_stack+0x15/0x1b
[  129.385839][ T8501]  should_fail_ex+0x265/0x280
[  129.385872][ T8501]  should_failslab+0x8c/0xb0
[  129.385925][ T8501]  kmem_cache_alloc_noprof+0x69/0x4b0
[  129.385956][ T8501]  ? audit_log_start+0x342/0x720
[  129.385990][ T8501]  audit_log_start+0x342/0x720
[  129.386047][ T8501]  ? kstrtouint+0x76/0xc0
[  129.386075][ T8501]  audit_seccomp+0x48/0x100
[  129.386121][ T8501]  ? __seccomp_filter+0x832/0x1260
[  129.386212][ T8501]  __seccomp_filter+0x843/0x1260
[  129.386255][ T8501]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  129.386335][ T8501]  ? vfs_write+0x7e8/0x960
[  129.386359][ T8501]  ? __rcu_read_unlock+0x4f/0x70
[  129.386391][ T8501]  ? __fget_files+0x184/0x1c0
[  129.386538][ T8501]  __secure_computing+0x82/0x150
[  129.386580][ T8501]  syscall_trace_enter+0xcf/0x1e0
[  129.386658][ T8501]  do_syscall_64+0xb2/0x2a0
[  129.386788][ T8501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.386820][ T8501] RIP: 0033:0x7f34a928f749
[  129.386842][ T8501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.386870][ T8501] RSP: 002b:00007f34a7cef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  129.386909][ T8501] RAX: ffffffffffffffda RBX: 00007f34a94e5fa0 RCX: 00007f34a928f749
[  129.386988][ T8501] RDX: 0000000000001006 RSI: 00002000000027c0 RDI: 0000000000000005
[  129.387006][ T8501] RBP: 00007f34a7cef090 R08: 0000000000000000 R09: 0000000000000000
[  129.387024][ T8501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  129.387043][ T8501] R13: 00007f34a94e6038 R14: 00007f34a94e5fa0 R15: 00007ffd7a6e2ab8
[  129.387071][ T8501]  </TASK>
[  129.387084][ T8501] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64
[  129.408619][   T29] audit: type=1326 audit(1765034055.174:7039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34a928f749 code=0x7ffc0000
[  129.408694][   T29] audit: type=1326 audit(1765034055.174:7040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a928f749 code=0x7ffc0000
[  129.417990][ T8501] audit: out of memory in audit_log_start
[  129.429686][ T8502] syz.4.1238: attempt to access beyond end of device
[  129.429686][ T8502] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  129.431618][   T29] audit: type=1326 audit(1765034055.174:7041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34a928f749 code=0x7ffc0000
[  129.435268][ T8502] syz.4.1238: attempt to access beyond end of device
[  129.435268][ T8502] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  129.439092][   T29] audit: type=1326 audit(1765034055.174:7042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a928f749 code=0x7ffc0000
[  129.447460][ T8491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.448087][   T29] audit: type=1326 audit(1765034055.174:7043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f34a928f749 code=0x7ffc0000
[  129.818582][ T8473] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.834915][ T8508] Alternate GPT is invalid, using primary GPT.
[  129.841339][ T8508]  loop3: p2 p3 p7
[  129.848329][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.904445][ T8528] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  129.917604][ T8473] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.000198][ T7696] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.016277][ T1661] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.027842][ T1661] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.039224][ T8545] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  130.068670][ T1661] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.143240][ T8568] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.198876][ T7696] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  130.206167][ T8568] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.283590][ T8590] EXT4-fs: Ignoring removed nomblk_io_submit option
[  130.298380][ T8568] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.364463][ T8598] bond1 (unregistering): Released all slaves
[  130.380231][ T8568] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.552505][ T8675] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  130.663031][ T8691] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  130.675600][ T8688] 9pnet: Could not find request transport: rd
[  130.851156][ T8699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.859985][ T8699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.931250][ T8717] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.976201][ T8717] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.990629][ T8724] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  131.016320][ T8717] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.045217][ T8733] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  131.066157][ T8717] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.079765][ T8736] vcan0 speed is unknown, defaulting to 1000
[  131.118473][ T8744] bond1 (unregistering): Released all slaves
[  131.124393][ T8778] xt_recent: Unsupported userspace flags (000000b1)
[  131.135585][ T8736] wg1 speed is unknown, defaulting to 1000
[  131.160958][ T7696] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.175327][ T7696] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.189396][ T7696] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.206102][ T1661] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.315765][ T8844] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  131.386795][ T8851] FAULT_INJECTION: forcing a failure.
[  131.386795][ T8851] name failslab, interval 1, probability 0, space 0, times 0
[  131.399489][ T8851] CPU: 1 UID: 0 PID: 8851 Comm: syz.1.1286 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  131.399591][ T8851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  131.399604][ T8851] Call Trace:
[  131.399611][ T8851]  <TASK>
[  131.399618][ T8851]  __dump_stack+0x1d/0x30
[  131.399671][ T8851]  dump_stack_lvl+0xe8/0x140
[  131.399696][ T8851]  dump_stack+0x15/0x1b
[  131.399716][ T8851]  should_fail_ex+0x265/0x280
[  131.399743][ T8851]  should_failslab+0x8c/0xb0
[  131.399776][ T8851]  __kmalloc_noprof+0xb9/0x5a0
[  131.399805][ T8851]  ? genl_family_rcv_msg_attrs_parse+0x75/0x190
[  131.399835][ T8851]  genl_family_rcv_msg_attrs_parse+0x75/0x190
[  131.399917][ T8851]  genl_family_rcv_msg_doit+0x48/0x1b0
[  131.399946][ T8851]  ? selinux_capable+0x31/0x40
[  131.400021][ T8851]  ? security_capable+0x83/0x90
[  131.400052][ T8851]  ? ns_capable+0x7d/0xb0
[  131.400087][ T8851]  genl_rcv_msg+0x422/0x460
[  131.400109][ T8851]  ? __pfx_batadv_pre_doit+0x10/0x10
[  131.400203][ T8851]  ? __pfx_batadv_netlink_tp_meter_start+0x10/0x10
[  131.400227][ T8851]  ? __pfx_batadv_post_doit+0x10/0x10
[  131.400255][ T8851]  netlink_rcv_skb+0x123/0x220
[  131.400351][ T8851]  ? __pfx_genl_rcv_msg+0x10/0x10
[  131.400377][ T8851]  genl_rcv+0x28/0x40
[  131.400399][ T8851]  netlink_unicast+0x5c0/0x690
[  131.400437][ T8851]  netlink_sendmsg+0x58b/0x6b0
[  131.400523][ T8851]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.400561][ T8851]  __sock_sendmsg+0x145/0x180
[  131.400609][ T8851]  ____sys_sendmsg+0x31e/0x4a0
[  131.400698][ T8851]  ___sys_sendmsg+0x17b/0x1d0
[  131.400795][ T8851]  __x64_sys_sendmsg+0xd4/0x160
[  131.400859][ T8851]  x64_sys_call+0x17ba/0x3000
[  131.400885][ T8851]  do_syscall_64+0xd8/0x2a0
[  131.400966][ T8851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.401035][ T8851] RIP: 0033:0x7f14ed3ef749
[  131.401050][ T8851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.401075][ T8851] RSP: 002b:00007f14ebe57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  131.401100][ T8851] RAX: ffffffffffffffda RBX: 00007f14ed645fa0 RCX: 00007f14ed3ef749
[  131.401142][ T8851] RDX: 0000000020040084 RSI: 0000200000000300 RDI: 0000000000000005
[  131.401155][ T8851] RBP: 00007f14ebe57090 R08: 0000000000000000 R09: 0000000000000000
[  131.401167][ T8851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.401184][ T8851] R13: 00007f14ed646038 R14: 00007f14ed645fa0 R15: 00007ffcd6fd57b8
[  131.401208][ T8851]  </TASK>
[  131.723749][ T8861] FAULT_INJECTION: forcing a failure.
[  131.723749][ T8861] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  131.736976][ T8861] CPU: 0 UID: 0 PID: 8861 Comm: syz.3.1291 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  131.737017][ T8861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  131.737029][ T8861] Call Trace:
[  131.737035][ T8861]  <TASK>
[  131.737042][ T8861]  __dump_stack+0x1d/0x30
[  131.737063][ T8861]  dump_stack_lvl+0xe8/0x140
[  131.737143][ T8861]  dump_stack+0x15/0x1b
[  131.737161][ T8861]  should_fail_ex+0x265/0x280
[  131.737255][ T8861]  should_fail+0xb/0x20
[  131.737272][ T8861]  should_fail_usercopy+0x1a/0x20
[  131.737317][ T8861]  strncpy_from_user+0x27/0x260
[  131.737437][ T8861]  getname_flags+0xae/0x3b0
[  131.737459][ T8861]  user_path_at+0x28/0x130
[  131.737544][ T8861]  do_faccessat+0x380/0x800
[  131.737608][ T8861]  __x64_sys_faccessat+0x41/0x50
[  131.737691][ T8861]  x64_sys_call+0x88a/0x3000
[  131.737713][ T8861]  do_syscall_64+0xd8/0x2a0
[  131.737745][ T8861]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.737765][ T8861] RIP: 0033:0x7fb470a1f749
[  131.737797][ T8861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.737814][ T8861] RSP: 002b:00007fb46f487038 EFLAGS: 00000246 ORIG_RAX: 000000000000010d
[  131.737832][ T8861] RAX: ffffffffffffffda RBX: 00007fb470c75fa0 RCX: 00007fb470a1f749
[  131.737843][ T8861] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: ffffffffffffff9c
[  131.737855][ T8861] RBP: 00007fb46f487090 R08: 0000000000000000 R09: 0000000000000000
[  131.737866][ T8861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.737936][ T8861] R13: 00007fb470c76038 R14: 00007fb470c75fa0 R15: 00007ffe1f4ddb98
[  131.738013][ T8861]  </TASK>
[  131.926039][ T8865] set_capacity_and_notify: 4 callbacks suppressed
[  131.926053][ T8865] loop5: detected capacity change from 0 to 7
[  131.939001][ T8865] Buffer I/O error on dev loop5, logical block 0, async page read
[  131.946991][ T8865] Buffer I/O error on dev loop5, logical block 0, async page read
[  131.954854][ T8865]  loop5: unable to read partition table
[  131.961023][ T8865] loop_reread_partitions: partition scan of loop5 (�被x������ڬ��dG�����ݡ�����
[  131.961023][ T8865] 
) failed (rc=-5)
[  131.987338][ T8865] vcan0 speed is unknown, defaulting to 1000
[  132.021391][ T8865] wg1 speed is unknown, defaulting to 1000
[  132.029864][ T8872] xt_recent: Unsupported userspace flags (000000b1)
[  132.063360][ T8894] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  132.116184][ T8896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.125310][ T8896] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.139701][ T8905] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  132.178207][ T8911] loop2: detected capacity change from 0 to 2048
[  132.243584][ T8922] loop3: detected capacity change from 0 to 4096
[  132.251041][ T8911]  loop2: p1 < > p3 p4
[  132.251215][ T8922] EXT4-fs: Ignoring removed nomblk_io_submit option
[  132.256610][ T8911] loop2: p3 start 458752 is beyond EOD, truncated
[  132.268381][ T8911] loop2: p4 start 268435456 is beyond EOD, truncated
[  132.297006][ T8929] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.336297][ T8929] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.355143][ T8936] vcan0 speed is unknown, defaulting to 1000
[  132.382618][ T8944] xt_recent: Unsupported userspace flags (000000b1)
[  132.391919][ T8929] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.423195][ T8936] wg1 speed is unknown, defaulting to 1000
[  132.478455][ T3318] EXT4-fs unmount: 3 callbacks suppressed
[  132.478470][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.495610][ T8929] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.548864][ T8976] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  132.592832][ T8980] loop3: detected capacity change from 0 to 512
[  132.607560][   T52] Bluetooth: hci0: Frame reassembly failed (-84)
[  132.661957][ T8986] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.706032][ T8986] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.773838][ T8986] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.835804][ T8999] bond1 (unregistering): Released all slaves
[  132.856033][ T8986] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.933208][  T381] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.945144][ T1661] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.957358][ T1661] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.969387][ T1661] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.552311][ T2024] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.564934][ T2024] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.577891][ T2024] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.592723][ T2024] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.646003][ T9094] loop0: detected capacity change from 0 to 4096
[  133.652827][ T9094] EXT4-fs: Ignoring removed nomblk_io_submit option
[  133.663296][ T9097] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  133.664778][ T9094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.893941][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.249945][ T9122] FAULT_INJECTION: forcing a failure.
[  134.249945][ T9122] name failslab, interval 1, probability 0, space 0, times 0
[  134.262739][ T9122] CPU: 0 UID: 0 PID: 9122 Comm: syz.0.1322 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  134.262780][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  134.262792][ T9122] Call Trace:
[  134.262799][ T9122]  <TASK>
[  134.262806][ T9122]  __dump_stack+0x1d/0x30
[  134.262828][ T9122]  dump_stack_lvl+0xe8/0x140
[  134.262848][ T9122]  dump_stack+0x15/0x1b
[  134.262944][ T9122]  should_fail_ex+0x265/0x280
[  134.262977][ T9122]  should_failslab+0x8c/0xb0
[  134.262996][ T9122]  kmem_cache_alloc_noprof+0x69/0x4b0
[  134.263016][ T9122]  ? skb_clone+0x151/0x1f0
[  134.263042][ T9122]  skb_clone+0x151/0x1f0
[  134.263094][ T9122]  __netlink_deliver_tap+0x2c9/0x500
[  134.263137][ T9122]  netlink_unicast+0x66b/0x690
[  134.263175][ T9122]  netlink_sendmsg+0x58b/0x6b0
[  134.263289][ T9122]  ? __pfx_netlink_sendmsg+0x10/0x10
[  134.263318][ T9122]  __sock_sendmsg+0x145/0x180
[  134.263349][ T9122]  ____sys_sendmsg+0x31e/0x4a0
[  134.263448][ T9122]  ___sys_sendmsg+0x17b/0x1d0
[  134.263506][ T9122]  __x64_sys_sendmsg+0xd4/0x160
[  134.263537][ T9122]  x64_sys_call+0x17ba/0x3000
[  134.263560][ T9122]  do_syscall_64+0xd8/0x2a0
[  134.263658][ T9122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.263726][ T9122] RIP: 0033:0x7f705463f749
[  134.263744][ T9122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.263770][ T9122] RSP: 002b:00007f70530a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  134.263840][ T9122] RAX: ffffffffffffffda RBX: 00007f7054895fa0 RCX: 00007f705463f749
[  134.263852][ T9122] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  134.263863][ T9122] RBP: 00007f70530a7090 R08: 0000000000000000 R09: 0000000000000000
[  134.263874][ T9122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.263886][ T9122] R13: 00007f7054896038 R14: 00007f7054895fa0 R15: 00007fffbddd2f98
[  134.263903][ T9122]  </TASK>
[  134.263933][ T9122] netlink: 'syz.0.1322': attribute type 13 has an invalid length.
[  134.472845][ T9122] gretap0: refused to change device tx_queue_len
[  134.479817][ T9122] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  134.521134][ T9125] 9pnet: Could not find request transport: fd-rfdn�@0xffffffffffffffff
[  134.547668][ T9128] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.596219][ T9128] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.612575][   T29] kauditd_printk_skb: 202 callbacks suppressed
[  134.612590][   T29] audit: type=1326 audit(1765034060.464:7246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.0.1324" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f705463f749 code=0x0
[  134.642328][ T3517] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  134.661810][   T29] audit: type=1400 audit(1765034060.514:7247): avc:  denied  { unmount } for  pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  134.713765][ T9128] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.747758][ T9149] bond1 (unregistering): Released all slaves
[  134.776172][ T9128] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.855868][ T9222] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  134.900026][ T9224] FAULT_INJECTION: forcing a failure.
[  134.900026][ T9224] name fail_futex, interval 1, probability 0, space 0, times 1
[  134.912901][ T9224] CPU: 0 UID: 0 PID: 9224 Comm: syz.3.1330 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  134.912928][ T9224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  134.912946][ T9224] Call Trace:
[  134.912953][ T9224]  <TASK>
[  134.912960][ T9224]  __dump_stack+0x1d/0x30
[  134.913051][ T9224]  dump_stack_lvl+0xe8/0x140
[  134.913122][ T9224]  dump_stack+0x15/0x1b
[  134.913139][ T9224]  should_fail_ex+0x265/0x280
[  134.913160][ T9224]  should_fail+0xb/0x20
[  134.913177][ T9224]  get_futex_key+0x596/0xc00
[  134.913275][ T9224]  ? should_fail_ex+0xdb/0x280
[  134.913295][ T9224]  futex_wait_setup+0x4a/0x3e0
[  134.913318][ T9224]  futex_wait_requeue_pi+0x1ac/0x6a0
[  134.913368][ T9224]  ? __pfx_futex_wake_mark+0x10/0x10
[  134.913395][ T9224]  ? proc_fail_nth_write+0x13b/0x160
[  134.913422][ T9224]  do_futex+0x136/0x380
[  134.913553][ T9224]  __se_sys_futex+0x2ed/0x360
[  134.913579][ T9224]  ? mutex_unlock+0x4f/0x90
[  134.913605][ T9224]  __x64_sys_futex+0x78/0x90
[  134.913703][ T9224]  x64_sys_call+0x2bc2/0x3000
[  134.913725][ T9224]  do_syscall_64+0xd8/0x2a0
[  134.913756][ T9224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.913832][ T9224] RIP: 0033:0x7fb470a1f749
[  134.913850][ T9224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.913874][ T9224] RSP: 002b:00007fb46f487038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  134.913897][ T9224] RAX: ffffffffffffffda RBX: 00007fb470c75fa0 RCX: 00007fb470a1f749
[  134.913935][ T9224] RDX: 0000000000000004 RSI: 000080000000000b RDI: 000020000000cffc
[  134.913966][ T9224] RBP: 00007fb46f487090 R08: 0000200000048000 R09: 0000000000000000
[  134.913983][ T9224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.914000][ T9224] R13: 00007fb470c76038 R14: 00007fb470c75fa0 R15: 00007ffe1f4ddb98
[  134.914017][ T9224]  </TASK>
[  135.117939][ T9226] FAULT_INJECTION: forcing a failure.
[  135.117939][ T9226] name failslab, interval 1, probability 0, space 0, times 0
[  135.130798][ T9226] CPU: 0 UID: 0 PID: 9226 Comm: syz.3.1331 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  135.130832][ T9226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  135.130942][ T9226] Call Trace:
[  135.130948][ T9226]  <TASK>
[  135.130955][ T9226]  __dump_stack+0x1d/0x30
[  135.130976][ T9226]  dump_stack_lvl+0xe8/0x140
[  135.131010][ T9226]  dump_stack+0x15/0x1b
[  135.131027][ T9226]  should_fail_ex+0x265/0x280
[  135.131046][ T9226]  should_failslab+0x8c/0xb0
[  135.131126][ T9226]  __kmalloc_noprof+0xb9/0x5a0
[  135.131145][ T9226]  ? bpf_test_init+0x86/0x140
[  135.131179][ T9226]  ? _parse_integer_limit+0x170/0x190
[  135.131211][ T9226]  bpf_test_init+0x86/0x140
[  135.131254][ T9226]  bpf_prog_test_run_xdp+0x305/0x970
[  135.131351][ T9226]  ? kstrtouint+0x51/0xc0
[  135.131436][ T9226]  ? __rcu_read_unlock+0x4f/0x70
[  135.131458][ T9226]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  135.131484][ T9226]  bpf_prog_test_run+0x22a/0x390
[  135.131509][ T9226]  __sys_bpf+0x4c0/0x7c0
[  135.131613][ T9226]  __x64_sys_bpf+0x41/0x50
[  135.131640][ T9226]  x64_sys_call+0x28e1/0x3000
[  135.131729][ T9226]  do_syscall_64+0xd8/0x2a0
[  135.131771][ T9226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.131795][ T9226] RIP: 0033:0x7fb470a1f749
[  135.131813][ T9226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.131897][ T9226] RSP: 002b:00007fb46f487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  135.131915][ T9226] RAX: ffffffffffffffda RBX: 00007fb470c75fa0 RCX: 00007fb470a1f749
[  135.131927][ T9226] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  135.131938][ T9226] RBP: 00007fb46f487090 R08: 0000000000000000 R09: 0000000000000000
[  135.131949][ T9226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.131961][ T9226] R13: 00007fb470c76038 R14: 00007fb470c75fa0 R15: 00007ffe1f4ddb98
[  135.131979][ T9226]  </TASK>
[  135.356169][ T9228] loop3: detected capacity change from 0 to 4096
[  135.363296][ T9228] EXT4-fs: Ignoring removed nomblk_io_submit option
[  135.372533][ T9228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.593243][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.606815][   T29] audit: type=1400 audit(1765034061.464:7248): avc:  denied  { setopt } for  pid=9235 comm="syz.2.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  135.642117][ T9240] loop5: detected capacity change from 0 to 7
[  135.653253][ T9240] Buffer I/O error on dev loop5, logical block 0, async page read
[  135.661464][ T9240] Buffer I/O error on dev loop5, logical block 0, async page read
[  135.669440][ T9240]  loop5: unable to read partition table
[  135.678774][ T9240] loop_reread_partitions: partition scan of loop5 (�被x������ڬ��dG�����ݡ�����
[  135.678774][ T9240] 
) failed (rc=-5)
[  135.706440][ T9240] vcan0 speed is unknown, defaulting to 1000
[  135.741774][ T9240] wg1 speed is unknown, defaulting to 1000
[  135.755101][ T9249] xt_recent: Unsupported userspace flags (000000b1)
[  135.854277][ T1661] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.866823][ T7068] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.878560][ T7068] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.891283][ T7068] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.100530][   T29] audit: type=1326 audit(1765034061.954:7249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9309 comm="syz.3.1344" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb470a1f749 code=0x0
[  136.167721][ T9325] ipt_ECN: cannot use operation on non-tcp rule
[  136.179317][ T9325] xt_CT: You must specify a L4 protocol and not use inversions on it
[  136.218205][ T9330] bond1 (unregistering): Released all slaves
[  136.220317][ T9329] loop1: detected capacity change from 0 to 2048
[  136.255012][ T9329]  loop1: p1 < > p3 p4
[  136.260269][ T9329] loop1: p3 start 458752 is beyond EOD, truncated
[  136.266819][ T9329] loop1: p4 start 268435456 is beyond EOD, truncated
[  136.336170][ T9416] loop1: detected capacity change from 0 to 4096
[  136.343011][ T9416] EXT4-fs: Ignoring removed nomblk_io_submit option
[  136.352797][ T9416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.565268][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.698609][ T9434] __nla_validate_parse: 14 callbacks suppressed
[  136.698629][ T9434] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1355'.
[  136.756730][ T9436] loop1: detected capacity change from 0 to 8192
[  136.769363][   T29] audit: type=1400 audit(1765034062.624:7250): avc:  denied  { connect } for  pid=9435 comm="syz.1.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  136.867681][ T9445] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  136.880909][ T9445] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  136.892977][ T9445] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.1358: corrupted xattr entries
[  136.904967][ T9445] EXT4-fs (loop1): Remounting filesystem read-only
[  136.911755][ T9445] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  136.925020][ T9445] EXT4-fs (loop1): 1 truncate cleaned up
[  136.931426][ T9445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.958428][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.994302][ T9462] set_capacity_and_notify: 1 callbacks suppressed
[  136.994330][ T9462] loop5: detected capacity change from 0 to 7
[  137.007220][ T9462] Buffer I/O error on dev loop5, logical block 0, async page read
[  137.015990][ T9462] Buffer I/O error on dev loop5, logical block 0, async page read
[  137.023847][ T9462]  loop5: unable to read partition table
[  137.029602][ T9462] loop_reread_partitions: partition scan of loop5 (�被x������ڬ��dG�����ݡ�����
[  137.029602][ T9462] 
) failed (rc=-5)
[  137.059172][ T9462] vcan0 speed is unknown, defaulting to 1000
[  137.070431][ T9470] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1365'.
[  137.110544][ T9473] xt_recent: Unsupported userspace flags (000000b1)
[  137.132362][ T9462] wg1 speed is unknown, defaulting to 1000
[  137.276603][ T9506] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.326589][   T29] audit: type=1326 audit(1765034063.184:7251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9504 comm="syz.4.1370" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34a928f749 code=0x0
[  137.350955][ T9506] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.396094][ T9506] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.441692][ T9527] bond1 (unregistering): Released all slaves
[  137.458408][ T9506] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.591773][ T9603] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1377'.
[  137.618096][ T9607] netlink: 'syz.2.1379': attribute type 13 has an invalid length.
[  137.631112][ T9607] gretap0: refused to change device tx_queue_len
[  137.638411][ T9607] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  137.661933][ T9607] netlink: 'syz.2.1379': attribute type 10 has an invalid length.
[  137.669899][ T9607] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1379'.
[  137.680101][ T9607] batman_adv: batadv0: Adding interface: veth1_vlan
[  137.686833][ T9607] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  137.712782][ T9607] batman_adv: batadv0: Interface activated: veth1_vlan
[  137.727185][   T29] audit: type=1400 audit(1765034063.584:7252): avc:  denied  { read write } for  pid=9606 comm="syz.2.1379" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  137.730889][  T381] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.751054][   T29] audit: type=1400 audit(1765034063.584:7253): avc:  denied  { open } for  pid=9606 comm="syz.2.1379" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  137.792025][  T381] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.828310][  T381] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.841575][  T381] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.869763][ T9625] loop1: detected capacity change from 0 to 2048
[  137.876450][   T29] audit: type=1400 audit(1765034063.584:7254): avc:  denied  { name_bind } for  pid=9606 comm="syz.2.1379" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  137.898069][ T9623] program syz.2.1381 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  137.920161][ T9625]  loop1: p1 < > p3 p4
[  137.925428][ T9625] loop1: p3 start 458752 is beyond EOD, truncated
[  137.931921][ T9625] loop1: p4 start 268435456 is beyond EOD, truncated
[  137.957686][ T9632] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1384'.
[  137.969267][ T9633] loop5: detected capacity change from 0 to 7
[  137.975873][ T9633] Buffer I/O error on dev loop5, logical block 0, async page read
[  137.986519][ T9633] Buffer I/O error on dev loop5, logical block 0, async page read
[  137.994562][ T9633]  loop5: unable to read partition table
[  138.001684][ T9633] loop_reread_partitions: partition scan of loop5 (�被x������ڬ��dG�����ݡ�����
[  138.001684][ T9633] 
) failed (rc=-5)
[  138.025309][ T9640] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1387'.
[  138.039531][ T9633] vcan0 speed is unknown, defaulting to 1000
[  138.071366][ T9651] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1390'.
[  138.082310][ T9652] xt_recent: Unsupported userspace flags (000000b1)
[  138.125992][ T9633] wg1 speed is unknown, defaulting to 1000
[  138.144315][ T9660] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.168126][ T9657] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  138.198561][ T9660] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.214646][   T29] audit: type=1326 audit(1765034064.074:7255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9658 comm="syz.0.1393" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f705463f749 code=0x0
[  138.287414][ T9660] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.308309][ T9696] loop2: detected capacity change from 0 to 2048
[  138.347102][ T9707] bond1 (unregistering): Released all slaves
[  138.365574][ T9696]  loop2: p1 < > p3 p4
[  138.370287][ T9696] loop2: p3 start 458752 is beyond EOD, truncated
[  138.376796][ T9696] loop2: p4 start 268435456 is beyond EOD, truncated
[  138.406412][ T9660] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.413166][ T9782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51862 sclass=netlink_route_socket pid=9782 comm=syz.2.1398
[  138.431914][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'.
[  138.469985][ T9788] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1400'.
[  138.479440][ T9786] loop3: detected capacity change from 0 to 4096
[  138.486563][ T9786] EXT4-fs: Ignoring removed nomblk_io_submit option
[  138.498836][ T9786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.628376][ T9797] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1402'.
[  138.681164][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.730060][ T9808] FAULT_INJECTION: forcing a failure.
[  138.730060][ T9808] name failslab, interval 1, probability 0, space 0, times 0
[  138.742786][ T9808] CPU: 1 UID: 0 PID: 9808 Comm: syz.3.1406 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  138.742847][ T9808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  138.742860][ T9808] Call Trace:
[  138.742866][ T9808]  <TASK>
[  138.742873][ T9808]  __dump_stack+0x1d/0x30
[  138.742901][ T9808]  dump_stack_lvl+0xe8/0x140
[  138.742943][ T9808]  dump_stack+0x15/0x1b
[  138.742969][ T9808]  should_fail_ex+0x265/0x280
[  138.742993][ T9808]  should_failslab+0x8c/0xb0
[  138.743016][ T9808]  kmem_cache_alloc_noprof+0x69/0x4b0
[  138.743050][ T9808]  ? audit_log_start+0x342/0x720
[  138.743079][ T9808]  audit_log_start+0x342/0x720
[  138.743105][ T9808]  ? kstrtouint+0x76/0xc0
[  138.743126][ T9808]  audit_seccomp+0x48/0x100
[  138.743235][ T9808]  ? __seccomp_filter+0x832/0x1260
[  138.743265][ T9808]  __seccomp_filter+0x843/0x1260
[  138.743294][ T9808]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  138.743355][ T9808]  ? vfs_write+0x7e8/0x960
[  138.743381][ T9808]  ? __cond_resched+0x4e/0x90
[  138.743416][ T9808]  __secure_computing+0x82/0x150
[  138.743477][ T9808]  syscall_trace_enter+0xcf/0x1e0
[  138.743512][ T9808]  do_syscall_64+0xb2/0x2a0
[  138.743623][ T9808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.743650][ T9808] RIP: 0033:0x7fb470a1f749
[  138.743666][ T9808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.743737][ T9808] RSP: 002b:00007fb46f487038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ad
[  138.743763][ T9808] RAX: ffffffffffffffda RBX: 00007fb470c75fa0 RCX: 00007fb470a1f749
[  138.743780][ T9808] RDX: 000000000000007e RSI: 0000000000000002 RDI: 0000000000000000
[  138.743796][ T9808] RBP: 00007fb46f487090 R08: 0000000000000000 R09: 0000000000000000
[  138.743812][ T9808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.743828][ T9808] R13: 00007fb470c76038 R14: 00007fb470c75fa0 R15: 00007ffe1f4ddb98
[  138.743851][ T9808]  </TASK>
[  138.753663][ T9809] 8021q: adding VLAN 0 to HW filter on device bond1
[  138.794631][ T9845] --map-set only usable from mangle table
[  138.860670][ T9809] bond_slave_0: entered promiscuous mode
[  138.956360][ T9809] bond_slave_1: entered promiscuous mode
[  138.962418][ T9809] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  138.972777][ T9809] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  138.988528][ T9845] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  139.223024][ T9858] netlink: 'syz.2.1411': attribute type 2 has an invalid length.
[  139.256178][ T9861] loop1: detected capacity change from 0 to 128
[  139.372960][   T24] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2
[  139.402005][ T9875] loop1: detected capacity change from 0 to 4096
[  139.409728][ T9875] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  139.421954][ T9875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.438357][ T9875] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.541729][ T7696] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.554614][   T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.566455][ T7696] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.578183][ T7696] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.640805][   T29] kauditd_printk_skb: 26 callbacks suppressed
[  139.640826][   T29] audit: type=1400 audit(1765034065.494:7280): avc:  denied  { ioctl } for  pid=9893 comm="syz.3.1419" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  139.734881][ T9903] bridge0: port 3(bond0) entered blocking state
[  139.741299][ T9903] bridge0: port 3(bond0) entered disabled state
[  139.748073][ T9903] bond0: entered allmulticast mode
[  139.753228][ T9903] bond_slave_0: entered allmulticast mode
[  139.759044][ T9903] bond_slave_1: entered allmulticast mode
[  139.766070][ T9903] bond0: entered promiscuous mode
[  139.771153][ T9903] bond_slave_0: entered promiscuous mode
[  139.776987][ T9903] bond_slave_1: entered promiscuous mode
[  139.783043][ T9903] bridge0: port 3(bond0) entered blocking state
[  139.789386][ T9903] bridge0: port 3(bond0) entered forwarding state
[  139.811834][   T29] audit: type=1326 audit(1765034065.664:7281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9904 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a928f749 code=0x7ffc0000
[  139.835820][   T29] audit: type=1326 audit(1765034065.664:7282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9904 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34a928f749 code=0x7ffc0000
[  139.859410][   T29] audit: type=1326 audit(1765034065.664:7283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9904 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a928f749 code=0x7ffc0000
[  139.883078][   T29] audit: type=1326 audit(1765034065.664:7284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9904 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34a928f749 code=0x7ffc0000
[  139.906546][   T29] audit: type=1326 audit(1765034065.664:7285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9904 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a928f749 code=0x7ffc0000
[  139.930216][   T29] audit: type=1326 audit(1765034065.664:7286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9904 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a928f749 code=0x7ffc0000
[  139.953707][   T29] audit: type=1326 audit(1765034065.674:7287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9904 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f34a928f749 code=0x7ffc0000
[  139.977203][   T29] audit: type=1326 audit(1765034065.674:7288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9904 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a928f749 code=0x7ffc0000
[  140.000748][   T29] audit: type=1326 audit(1765034065.674:7289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9904 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a928f749 code=0x7ffc0000
[  140.224212][ T9927] bond1 (unregistering): Released all slaves
[  140.323773][T10014] loop2: detected capacity change from 0 to 2048
[  140.344730][T10014]  loop2: p1 < > p3 p4
[  140.349431][T10014] loop2: p3 start 458752 is beyond EOD, truncated
[  140.356000][T10014] loop2: p4 start 268435456 is beyond EOD, truncated
[  140.447022][T10035] FAULT_INJECTION: forcing a failure.
[  140.447022][T10035] name failslab, interval 1, probability 0, space 0, times 0
[  140.459948][T10035] CPU: 0 UID: 0 PID: 10035 Comm: syz.4.1439 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  140.459984][T10035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  140.460000][T10035] Call Trace:
[  140.460007][T10035]  <TASK>
[  140.460014][T10035]  __dump_stack+0x1d/0x30
[  140.460090][T10035]  dump_stack_lvl+0xe8/0x140
[  140.460110][T10035]  dump_stack+0x15/0x1b
[  140.460153][T10035]  should_fail_ex+0x265/0x280
[  140.460174][T10035]  should_failslab+0x8c/0xb0
[  140.460193][T10035]  __kmalloc_noprof+0xb9/0x5a0
[  140.460222][T10035]  ? genl_family_rcv_msg_attrs_parse+0x75/0x190
[  140.460285][T10035]  genl_family_rcv_msg_attrs_parse+0x75/0x190
[  140.460390][T10035]  genl_family_rcv_msg_doit+0x48/0x1b0
[  140.460427][T10035]  ? selinux_capable+0x31/0x40
[  140.460455][T10035]  ? security_capable+0x83/0x90
[  140.460506][T10035]  ? ns_capable+0x7d/0xb0
[  140.460540][T10035]  genl_rcv_msg+0x422/0x460
[  140.460598][T10035]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  140.460710][T10035]  netlink_rcv_skb+0x123/0x220
[  140.460803][T10035]  ? __pfx_genl_rcv_msg+0x10/0x10
[  140.460893][T10035]  genl_rcv+0x28/0x40
[  140.460913][T10035]  netlink_unicast+0x5c0/0x690
[  140.460945][T10035]  netlink_sendmsg+0x58b/0x6b0
[  140.461012][T10035]  ? __pfx_netlink_sendmsg+0x10/0x10
[  140.461046][T10035]  __sock_sendmsg+0x145/0x180
[  140.461153][T10035]  ____sys_sendmsg+0x31e/0x4a0
[  140.461187][T10035]  ___sys_sendmsg+0x17b/0x1d0
[  140.461231][T10035]  __x64_sys_sendmsg+0xd4/0x160
[  140.461340][T10035]  x64_sys_call+0x17ba/0x3000
[  140.461368][T10035]  do_syscall_64+0xd8/0x2a0
[  140.461458][T10035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.461485][T10035] RIP: 0033:0x7f34a928f749
[  140.461501][T10035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.461530][T10035] RSP: 002b:00007f34a7cef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  140.461552][T10035] RAX: ffffffffffffffda RBX: 00007f34a94e5fa0 RCX: 00007f34a928f749
[  140.461614][T10035] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000006
[  140.461627][T10035] RBP: 00007f34a7cef090 R08: 0000000000000000 R09: 0000000000000000
[  140.461640][T10035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.461690][T10035] R13: 00007f34a94e6038 R14: 00007f34a94e5fa0 R15: 00007ffd7a6e2ab8
[  140.461710][T10035]  </TASK>
[  140.769846][T10040] vcan0 speed is unknown, defaulting to 1000
[  140.908885][T10040] wg1 speed is unknown, defaulting to 1000
[  141.187206][T10091] bridge0: entered promiscuous mode
[  141.192773][T10089] FAULT_INJECTION: forcing a failure.
[  141.192773][T10089] name failslab, interval 1, probability 0, space 0, times 0
[  141.205677][T10089] CPU: 1 UID: 0 PID: 10089 Comm: syz.1.1451 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  141.205744][T10089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  141.205757][T10089] Call Trace:
[  141.205764][T10089]  <TASK>
[  141.205774][T10089]  __dump_stack+0x1d/0x30
[  141.205807][T10089]  dump_stack_lvl+0xe8/0x140
[  141.205835][T10089]  dump_stack+0x15/0x1b
[  141.205928][T10089]  should_fail_ex+0x265/0x280
[  141.205958][T10089]  should_failslab+0x8c/0xb0
[  141.205985][T10089]  kmem_cache_alloc_noprof+0x69/0x4b0
[  141.206007][T10089]  ? getname_flags+0x80/0x3b0
[  141.206149][T10089]  getname_flags+0x80/0x3b0
[  141.206173][T10089]  user_path_at+0x28/0x130
[  141.206211][T10089]  do_fchmodat+0x9c/0x180
[  141.206248][T10089]  __x64_sys_fchmodat+0x42/0x50
[  141.206336][T10089]  x64_sys_call+0x2e6c/0x3000
[  141.206366][T10089]  do_syscall_64+0xd8/0x2a0
[  141.206428][T10089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.206458][T10089] RIP: 0033:0x7f14ed3ef749
[  141.206478][T10089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.206500][T10089] RSP: 002b:00007f14ebe57038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c
[  141.206519][T10089] RAX: ffffffffffffffda RBX: 00007f14ed645fa0 RCX: 00007f14ed3ef749
[  141.206532][T10089] RDX: 00000000fffffed3 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  141.206569][T10089] RBP: 00007f14ebe57090 R08: 0000000000000000 R09: 0000000000000000
[  141.206585][T10089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  141.206601][T10089] R13: 00007f14ed646038 R14: 00007f14ed645fa0 R15: 00007ffcd6fd57b8
[  141.206622][T10089]  </TASK>
[  141.382135][T10091] macsec1: entered allmulticast mode
[  141.387504][T10091] bridge0: entered allmulticast mode
[  141.394579][T10091] bridge0: port 4(macsec1) entered blocking state
[  141.401097][T10091] bridge0: port 4(macsec1) entered disabled state
[  141.414788][T10091] bridge0: left allmulticast mode
[  141.419908][T10091] bridge0: left promiscuous mode
[  141.432128][T10096] netlink: 'syz.1.1452': attribute type 1 has an invalid length.
[  141.443591][T10085] loop2: detected capacity change from 0 to 512
[  141.455522][ T9935] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.455856][T10085] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  141.474920][ T9935] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.483167][ T9935] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.526773][ T9935] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.543748][T10111] loop1: detected capacity change from 0 to 4096
[  141.555340][T10087] siw: device registration error -23
[  141.601271][T10085] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1449: Allocating blocks 41-42 which overlap fs metadata
[  141.624524][T10111] EXT4-fs: Ignoring removed nomblk_io_submit option
[  141.631983][T10085] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1449: Failed to acquire dquot type 1
[  141.652601][T10085] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  141.667343][T10085] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1449: corrupted inode contents
[  141.679916][T10085] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.1449: mark_inode_dirty error
[  141.692158][T10085] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1449: corrupted inode contents
[  141.704828][T10085] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.1449: mark_inode_dirty error
[  141.716575][T10085] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1449: corrupted inode contents
[  141.716983][T10111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.728788][T10085] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  141.752782][T10085] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1449: corrupted inode contents
[  141.765234][T10085] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.1449: mark_inode_dirty error
[  141.776636][T10085] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  141.786466][T10085] EXT4-fs (loop2): 1 truncate cleaned up
[  141.792832][T10085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.889836][T10085] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98
[  141.937009][T10141] __nla_validate_parse: 7 callbacks suppressed
[  141.937030][T10141] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1460'.
[  141.988099][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.156633][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.230106][T10161] loop4: detected capacity change from 0 to 2048
[  142.268848][T10170] FAULT_INJECTION: forcing a failure.
[  142.268848][T10170] name failslab, interval 1, probability 0, space 0, times 0
[  142.281730][T10170] CPU: 0 UID: 0 PID: 10170 Comm: syz.2.1468 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  142.281767][T10170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  142.281783][T10170] Call Trace:
[  142.281858][T10170]  <TASK>
[  142.281868][T10170]  __dump_stack+0x1d/0x30
[  142.281963][T10170]  dump_stack_lvl+0xe8/0x140
[  142.281991][T10170]  dump_stack+0x15/0x1b
[  142.282017][T10170]  should_fail_ex+0x265/0x280
[  142.282049][T10170]  should_failslab+0x8c/0xb0
[  142.282122][T10170]  kmem_cache_alloc_noprof+0x69/0x4b0
[  142.282147][T10170]  ? audit_log_start+0x342/0x720
[  142.282175][T10170]  audit_log_start+0x342/0x720
[  142.282203][T10170]  ? kstrtouint+0x76/0xc0
[  142.282264][T10170]  audit_seccomp+0x48/0x100
[  142.282303][T10170]  ? __seccomp_filter+0x832/0x1260
[  142.282332][T10170]  __seccomp_filter+0x843/0x1260
[  142.282368][T10170]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  142.282432][T10170]  ? vfs_write+0x7e8/0x960
[  142.282458][T10170]  ? __cond_resched+0x4e/0x90
[  142.282489][T10170]  __secure_computing+0x82/0x150
[  142.282526][T10170]  syscall_trace_enter+0xcf/0x1e0
[  142.282620][T10170]  do_syscall_64+0xb2/0x2a0
[  142.282666][T10170]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.282695][T10170] RIP: 0033:0x7fc69436f749
[  142.282736][T10170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.282760][T10170] RSP: 002b:00007fc692dd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000005a
[  142.282787][T10170] RAX: ffffffffffffffda RBX: 00007fc6945c5fa0 RCX: 00007fc69436f749
[  142.282804][T10170] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000000
[  142.282820][T10170] RBP: 00007fc692dd7090 R08: 0000000000000000 R09: 0000000000000000
[  142.282838][T10170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  142.282914][T10170] R13: 00007fc6945c6038 R14: 00007fc6945c5fa0 R15: 00007ffeaa8c24c8
[  142.282936][T10170]  </TASK>
[  142.484992][T10161]  loop4: p1 < > p3 p4
[  142.504473][T10161] loop4: p3 start 458752 is beyond EOD, truncated
[  142.510990][T10161] loop4: p4 start 268435456 is beyond EOD, truncated
[  142.548191][T10182] bond1 (unregistering): Released all slaves
[  142.568242][T10176] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  142.674863][T10274] loop4: detected capacity change from 0 to 4096
[  142.681694][T10274] EXT4-fs: Ignoring removed nomblk_io_submit option
[  142.690842][T10274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.729126][T10278] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  142.934296][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.936740][T10291] FAULT_INJECTION: forcing a failure.
[  142.936740][T10291] name failslab, interval 1, probability 0, space 0, times 0
[  142.956006][T10291] CPU: 0 UID: 0 PID: 10291 Comm: syz.2.1480 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  142.956094][T10291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  142.956111][T10291] Call Trace:
[  142.956119][T10291]  <TASK>
[  142.956129][T10291]  __dump_stack+0x1d/0x30
[  142.956161][T10291]  dump_stack_lvl+0xe8/0x140
[  142.956189][T10291]  dump_stack+0x15/0x1b
[  142.956214][T10291]  should_fail_ex+0x265/0x280
[  142.956268][T10291]  should_failslab+0x8c/0xb0
[  142.956295][T10291]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[  142.956323][T10291]  ? __alloc_skb+0x324/0x4d0
[  142.956352][T10291]  __alloc_skb+0x324/0x4d0
[  142.956458][T10291]  ? __alloc_skb+0x24d/0x4d0
[  142.956542][T10291]  audit_log_start+0x3a0/0x720
[  142.956564][T10291]  ? kstrtouint+0x76/0xc0
[  142.956655][T10291]  audit_seccomp+0x48/0x100
[  142.956709][T10291]  ? __seccomp_filter+0x832/0x1260
[  142.956773][T10291]  __seccomp_filter+0x843/0x1260
[  142.956807][T10291]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  142.956844][T10291]  ? vfs_write+0x7e8/0x960
[  142.956881][T10291]  ? kmem_cache_free+0xe3/0x3a0
[  142.956911][T10291]  __secure_computing+0x82/0x150
[  142.956939][T10291]  syscall_trace_enter+0xcf/0x1e0
[  142.956973][T10291]  do_syscall_64+0xb2/0x2a0
[  142.957097][T10291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.957125][T10291] RIP: 0033:0x7fc69436f749
[  142.957146][T10291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.957171][T10291] RSP: 002b:00007fc692dd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147
[  142.957206][T10291] RAX: ffffffffffffffda RBX: 00007fc6945c5fa0 RCX: 00007fc69436f749
[  142.957221][T10291] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000008
[  142.957276][T10291] RBP: 00007fc692dd7090 R08: 0000000000000004 R09: 0000000000000001
[  142.957291][T10291] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001
[  142.957306][T10291] R13: 00007fc6945c6038 R14: 00007fc6945c5fa0 R15: 00007ffeaa8c24c8
[  142.957328][T10291]  </TASK>
[  143.226555][T10310] loop5: detected capacity change from 0 to 7
[  143.233324][T10310] Buffer I/O error on dev loop5, logical block 0, async page read
[  143.241475][T10310] Buffer I/O error on dev loop5, logical block 0, async page read
[  143.249392][T10310]  loop5: unable to read partition table
[  143.284343][T10310] loop_reread_partitions: partition scan of loop5 (�被x������ڬ��dG�����ݡ�����
[  143.284343][T10310] 
) failed (rc=-5)
[  143.310877][T10317] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  143.313448][T10320] vcan0 speed is unknown, defaulting to 1000
[  143.336823][T10310] xt_recent: Unsupported userspace flags (000000b1)
[  143.408667][T10335] bond1 (unregistering): Released all slaves
[  143.425933][T10373] FAULT_INJECTION: forcing a failure.
[  143.425933][T10373] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.439176][T10373] CPU: 0 UID: 0 PID: 10373 Comm: syz.4.1493 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  143.439213][T10373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  143.439230][T10373] Call Trace:
[  143.439239][T10373]  <TASK>
[  143.439249][T10373]  __dump_stack+0x1d/0x30
[  143.439287][T10373]  dump_stack_lvl+0xe8/0x140
[  143.439377][T10373]  dump_stack+0x15/0x1b
[  143.439405][T10373]  should_fail_ex+0x265/0x280
[  143.439483][T10373]  should_fail+0xb/0x20
[  143.439509][T10373]  should_fail_usercopy+0x1a/0x20
[  143.439542][T10373]  _copy_from_user+0x1c/0xb0
[  143.439645][T10373]  memdup_user+0x5e/0xd0
[  143.439677][T10373]  strndup_user+0x68/0xb0
[  143.439699][T10373]  __se_sys_mount+0x4d/0x2e0
[  143.439762][T10373]  ? fput+0x8f/0xc0
[  143.439797][T10373]  ? ksys_write+0x192/0x1a0
[  143.439823][T10373]  __x64_sys_mount+0x67/0x80
[  143.439884][T10373]  x64_sys_call+0x2cca/0x3000
[  143.439918][T10373]  do_syscall_64+0xd8/0x2a0
[  143.440042][T10373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.440098][T10373] RIP: 0033:0x7f34a928f749
[  143.440118][T10373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.440144][T10373] RSP: 002b:00007f34a7cef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  143.440170][T10373] RAX: ffffffffffffffda RBX: 00007f34a94e5fa0 RCX: 00007f34a928f749
[  143.440188][T10373] RDX: 0000200000000280 RSI: 0000200000000180 RDI: 0000200000000080
[  143.440205][T10373] RBP: 00007f34a7cef090 R08: 0000200000000440 R09: 0000000000000000
[  143.440219][T10373] R10: 0000000000808008 R11: 0000000000000246 R12: 0000000000000001
[  143.440277][T10373] R13: 00007f34a94e6038 R14: 00007f34a94e5fa0 R15: 00007ffd7a6e2ab8
[  143.440325][T10373]  </TASK>
[  143.628293][T10320] wg1 speed is unknown, defaulting to 1000
[  143.754564][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.763352][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.773214][T10459] FAULT_INJECTION: forcing a failure.
[  143.773214][T10459] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.786401][T10459] CPU: 1 UID: 0 PID: 10459 Comm: syz.3.1502 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  143.786502][T10459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  143.786581][T10459] Call Trace:
[  143.786589][T10459]  <TASK>
[  143.786598][T10459]  __dump_stack+0x1d/0x30
[  143.786628][T10459]  dump_stack_lvl+0xe8/0x140
[  143.786694][T10459]  dump_stack+0x15/0x1b
[  143.786802][T10459]  should_fail_ex+0x265/0x280
[  143.786831][T10459]  should_fail+0xb/0x20
[  143.786857][T10459]  should_fail_usercopy+0x1a/0x20
[  143.786951][T10459]  _copy_from_user+0x1c/0xb0
[  143.786989][T10459]  do_ipv6_setsockopt+0x124/0x2160
[  143.787040][T10459]  ? _parse_integer+0x27/0x40
[  143.787110][T10459]  ? kstrtoull+0x111/0x140
[  143.787147][T10459]  ? __rcu_read_unlock+0x4f/0x70
[  143.787216][T10459]  ? avc_has_perm_noaudit+0xab/0x130
[  143.787304][T10459]  ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0
[  143.787420][T10459]  ipv6_setsockopt+0x59/0x130
[  143.787464][T10459]  rawv6_setsockopt+0x1d2/0x420
[  143.787509][T10459]  sock_common_setsockopt+0x69/0x80
[  143.787586][T10459]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  143.787615][T10459]  __sys_setsockopt+0x184/0x200
[  143.787658][T10459]  __x64_sys_setsockopt+0x64/0x80
[  143.787775][T10459]  x64_sys_call+0x21d5/0x3000
[  143.787808][T10459]  do_syscall_64+0xd8/0x2a0
[  143.787853][T10459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.787961][T10459] RIP: 0033:0x7fb470a1f749
[  143.787981][T10459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.788005][T10459] RSP: 002b:00007fb46f487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  143.788091][T10459] RAX: ffffffffffffffda RBX: 00007fb470c75fa0 RCX: 00007fb470a1f749
[  143.788108][T10459] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000003
[  143.788151][T10459] RBP: 00007fb46f487090 R08: 0000000000000018 R09: 0000000000000000
[  143.788169][T10459] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001
[  143.788186][T10459] R13: 00007fb470c76038 R14: 00007fb470c75fa0 R15: 00007ffe1f4ddb98
[  143.788220][T10459]  </TASK>
[  144.131574][T10484] netlink: 'syz.3.1510': attribute type 13 has an invalid length.
[  144.147871][T10484] gretap0: refused to change device tx_queue_len
[  144.154815][T10484] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  144.179724][T10484] netlink: 'syz.3.1510': attribute type 10 has an invalid length.
[  144.187697][T10484] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1510'.
[  144.209192][T10484] veth1_vlan: left promiscuous mode
[  144.220603][T10484] batman_adv: batadv0: Adding interface: veth1_vlan
[  144.227295][T10484] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  144.254516][T10484] batman_adv: batadv0: Interface activated: veth1_vlan
[  144.268682][T10491] syz.2.1513 uses obsolete (PF_INET,SOCK_PACKET)
[  144.311923][T10509] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1515'.
[  144.353279][T10512] dvmrp5: entered allmulticast mode
[  144.362547][T10512] dvmrp5: left allmulticast mode
[  144.371926][T10516] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  144.451517][T10528] loop2: detected capacity change from 0 to 2048
[  144.505253][T10528]  loop2: p1 < > p3 p4
[  144.510270][T10528] loop2: p3 start 458752 is beyond EOD, truncated
[  144.516826][T10528] loop2: p4 start 268435456 is beyond EOD, truncated
[  144.536756][T10546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.545998][T10546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.557349][T10561] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1527'.
[  144.582726][T10565] 9pnet_fd: Insufficient options for proto=fd
[  144.621986][T10570] vcan0 speed is unknown, defaulting to 1000
[  144.667461][T10570] wg1 speed is unknown, defaulting to 1000
[  144.678038][T10574] xt_recent: Unsupported userspace flags (000000b1)
[  144.839494][   T29] kauditd_printk_skb: 517 callbacks suppressed
[  144.839537][   T29] audit: type=1326 audit(1765034070.694:7798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10597 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  144.869347][   T29] audit: type=1326 audit(1765034070.694:7799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10597 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  144.893172][   T29] audit: type=1326 audit(1765034070.694:7800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10597 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  144.894448][T10602] FAULT_INJECTION: forcing a failure.
[  144.894448][T10602] name failslab, interval 1, probability 0, space 0, times 0
[  144.916751][   T29] audit: type=1326 audit(1765034070.694:7801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10597 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  144.916792][   T29] audit: type=1326 audit(1765034070.694:7802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10597 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  144.929415][T10602] CPU: 0 UID: 0 PID: 10602 Comm: syz.1.1534 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  144.929449][T10602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  144.929468][T10602] Call Trace:
[  144.929479][T10602]  <TASK>
[  144.929491][T10602]  __dump_stack+0x1d/0x30
[  144.929529][T10602]  dump_stack_lvl+0xe8/0x140
[  144.929649][T10602]  dump_stack+0x15/0x1b
[  144.929677][T10602]  should_fail_ex+0x265/0x280
[  144.929711][T10602]  should_failslab+0x8c/0xb0
[  144.929744][T10602]  kmem_cache_alloc_noprof+0x69/0x4b0
[  144.929814][T10602]  ? audit_log_start+0x342/0x720
[  144.929848][T10602]  audit_log_start+0x342/0x720
[  144.929880][T10602]  ? kstrtouint+0x76/0xc0
[  144.929961][T10602]  audit_seccomp+0x48/0x100
[  144.930007][T10602]  ? __seccomp_filter+0x832/0x1260
[  144.930094][T10602]  __seccomp_filter+0x843/0x1260
[  144.930136][T10602]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  144.930193][T10602]  ? vfs_write+0x7e8/0x960
[  144.930219][T10602]  ? __rcu_read_unlock+0x4f/0x70
[  144.930327][T10602]  ? __fget_files+0x184/0x1c0
[  144.930393][T10602]  __secure_computing+0x82/0x150
[  144.930476][T10602]  syscall_trace_enter+0xcf/0x1e0
[  144.930513][T10602]  do_syscall_64+0xb2/0x2a0
[  144.930637][T10602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.930670][T10602] RIP: 0033:0x7f14ed3ef749
[  144.930699][T10602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.930726][T10602] RSP: 002b:00007f14ebe57038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bb
[  144.930754][T10602] RAX: ffffffffffffffda RBX: 00007f14ed645fa0 RCX: 00007f14ed3ef749
[  144.930778][T10602] RDX: 0000000000000000 RSI: 0000000080000601 RDI: ffffffffffffffff
[  144.930796][T10602] RBP: 00007f14ebe57090 R08: 0000000000000000 R09: 0000000000000000
[  144.930813][T10602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  144.930831][T10602] R13: 00007f14ed646038 R14: 00007f14ed645fa0 R15: 00007ffcd6fd57b8
[  144.930859][T10602]  </TASK>
[  144.930871][T10602] audit: audit_lost=10 audit_rate_limit=0 audit_backlog_limit=64
[  144.953157][   T29] audit: type=1326 audit(1765034070.744:7803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10601 comm="syz.1.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ed3ef749 code=0x7ffc0000
[  144.976435][T10602] audit: out of memory in audit_log_start
[  144.986403][   T29] audit: type=1326 audit(1765034070.744:7804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10601 comm="syz.1.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14ed3edf90 code=0x7ffc0000
[  145.072229][T10604] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  145.074410][   T29] audit: type=1326 audit(1765034070.754:7805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10601 comm="syz.1.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f14ed3ee1ff code=0x7ffc0000
[  145.283729][T10606] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.309008][T10610] loop1: detected capacity change from 0 to 2048
[  145.316154][T10612] loop2: detected capacity change from 0 to 128
[  145.322626][T10612] msdos: Unknown parameter '���'
[  145.331740][T10612] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=42 sclass=netlink_xfrm_socket pid=10612 comm=syz.2.1538
[  145.345804][T10606] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.368475][T10610]  loop1: p1 < > p3 p4
[  145.373184][T10610] loop1: p3 start 458752 is beyond EOD, truncated
[  145.379668][T10610] loop1: p4 start 268435456 is beyond EOD, truncated
[  145.394207][T10625] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1539'.
[  145.415957][T10606] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.465825][T10606] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.503477][T10649] bond1 (unregistering): Released all slaves
[  145.525694][T10648] loop2: detected capacity change from 0 to 4096
[  145.533052][T10648] EXT4-fs: Ignoring removed nomblk_io_submit option
[  145.542610][T10648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.573686][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.597786][T10723] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.655435][T10728] vcan0 speed is unknown, defaulting to 1000
[  145.686755][T10723] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.698018][T10728] wg1 speed is unknown, defaulting to 1000
[  145.746147][T10723] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.771079][T10735] bond2 (unregistering): Released all slaves
[  145.783921][T10756] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  145.836420][T10723] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.866789][T10831] loop3: detected capacity change from 0 to 512
[  145.873777][T10831] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  145.896254][T10831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.909202][T10831] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.927877][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.936974][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.942397][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.959251][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.977140][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.008249][T10848] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  146.019830][T10848] syzkaller0: entered promiscuous mode
[  146.025483][T10848] syzkaller0: entered allmulticast mode
[  146.092740][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.109191][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.120035][T10860] loop3: detected capacity change from 0 to 2048
[  146.128536][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.137002][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.154965][T10860]  loop3: p1 < > p3 p4
[  146.156037][T10867] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.165985][T10860] loop3: p3 start 458752 is beyond EOD, truncated
[  146.175335][T10860] loop3: p4 start 268435456 is beyond EOD, truncated
[  146.203581][T10876] netlink: 'syz.3.1554': attribute type 13 has an invalid length.
[  146.212384][T10876] gretap0: refused to change device tx_queue_len
[  146.219087][T10876] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  146.236122][T10867] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.251598][T10876] netlink: 'syz.3.1554': attribute type 10 has an invalid length.
[  146.259563][T10876] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1554'.
[  146.306169][T10867] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.335722][T10884] bond1 (unregistering): Released all slaves
[  146.358030][T10867] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.423809][T10966] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  146.492528][T10976] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1561'.
[  146.502487][T10976] FAULT_INJECTION: forcing a failure.
[  146.502487][T10976] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  146.515681][T10976] CPU: 0 UID: 0 PID: 10976 Comm: syz.3.1561 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  146.515727][T10976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  146.515743][T10976] Call Trace:
[  146.515757][T10976]  <TASK>
[  146.515766][T10976]  __dump_stack+0x1d/0x30
[  146.515796][T10976]  dump_stack_lvl+0xe8/0x140
[  146.515864][T10976]  dump_stack+0x15/0x1b
[  146.515885][T10976]  should_fail_ex+0x265/0x280
[  146.515915][T10976]  should_fail+0xb/0x20
[  146.515940][T10976]  should_fail_usercopy+0x1a/0x20
[  146.515996][T10976]  _copy_to_user+0x20/0xa0
[  146.516033][T10976]  simple_read_from_buffer+0xb5/0x130
[  146.516132][T10976]  proc_fail_nth_read+0x10e/0x150
[  146.516292][T10976]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  146.516331][T10976]  vfs_read+0x1a8/0x770
[  146.516374][T10976]  ? __rcu_read_unlock+0x4f/0x70
[  146.516403][T10976]  ? __fget_files+0x184/0x1c0
[  146.516465][T10976]  ? mutex_lock+0x58/0x90
[  146.516493][T10976]  ksys_read+0xda/0x1a0
[  146.516544][T10976]  __x64_sys_read+0x40/0x50
[  146.516567][T10976]  x64_sys_call+0x2889/0x3000
[  146.516600][T10976]  do_syscall_64+0xd8/0x2a0
[  146.516675][T10976]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.516704][T10976] RIP: 0033:0x7fb470a1e15c
[  146.516725][T10976] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  146.516749][T10976] RSP: 002b:00007fb46f487030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  146.516783][T10976] RAX: ffffffffffffffda RBX: 00007fb470c75fa0 RCX: 00007fb470a1e15c
[  146.516842][T10976] RDX: 000000000000000f RSI: 00007fb46f4870a0 RDI: 0000000000000004
[  146.516863][T10976] RBP: 00007fb46f487090 R08: 0000000000000000 R09: 0000000000000000
[  146.516876][T10976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  146.516888][T10976] R13: 00007fb470c76038 R14: 00007fb470c75fa0 R15: 00007ffe1f4ddb98
[  146.516912][T10976]  </TASK>
[  146.546576][T10980] netlink: 'syz.2.1562': attribute type 13 has an invalid length.
[  146.731867][T10983] netlink: 'syz.2.1562': attribute type 10 has an invalid length.
[  146.739871][T10983] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1562'.
[  146.768577][T10988] bond1 (unregistering): Released all slaves
[  146.812003][T10980] gretap0: refused to change device tx_queue_len
[  146.821432][T10980] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  146.840762][T10982] vcan0 speed is unknown, defaulting to 1000
[  146.890322][T11060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.914578][T11060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.934480][T10982] wg1 speed is unknown, defaulting to 1000
[  146.941142][T11075] loop2: detected capacity change from 0 to 1024
[  146.950761][T11075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  146.969345][T11075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  146.984712][T11075] EXT4-fs error (device loop2): ext4_get_journal_inode:5849: inode #32: comm syz.2.1566: iget: special inode unallocated
[  147.004377][T11075] EXT4-fs (loop2): Remounting filesystem read-only
[  147.011006][T11075] EXT4-fs (loop2): no journal found
[  147.016311][T11075] EXT4-fs (loop2): can't get journal size
[  147.023015][T11075] EXT4-fs (loop2): filesystem is read-only
[  147.029600][T11075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  147.129775][T11113] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  147.196204][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.313703][T11135] loop3: detected capacity change from 0 to 512
[  147.425566][T11156] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1582'.
[  147.513809][T11172] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1590'.
[  147.618433][T11202] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1598'.
[  147.629056][T11194] netlink: 17188 bytes leftover after parsing attributes in process `syz.4.1596'.
[  147.658517][T11208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.670471][T11208] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.736986][T11229] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1602'.
[  147.774573][T11256] loop5: detected capacity change from 0 to 7
[  147.780876][T11256] Buffer I/O error on dev loop5, logical block 0, async page read
[  147.781772][T11234] bond1 (unregistering): Released all slaves
[  147.789170][T11256] Buffer I/O error on dev loop5, logical block 0, async page read
[  147.802696][T11256]  loop5: unable to read partition table
[  147.808947][T11256] loop_reread_partitions: partition scan of loop5 (�被x������ڬ��dG�����ݡ�����
[  147.808947][T11256] 
) failed (rc=-5)
[  147.837925][T11256] vcan0 speed is unknown, defaulting to 1000
[  147.873411][T11256] wg1 speed is unknown, defaulting to 1000
[  147.881918][T11312] xt_recent: Unsupported userspace flags (000000b1)
[  147.982174][T11349] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1609'.
[  148.282379][T11368] x_tables: duplicate underflow at hook 2
[  148.350523][T11378] loop2: detected capacity change from 0 to 128
[  148.475899][T11386] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  148.650405][T11407] syzkaller0: entered promiscuous mode
[  148.655996][T11407] syzkaller0: entered allmulticast mode
[  148.668681][T11407] Driver unsupported XDP return value 0 on prog  (id 1092) dev N/A, expect packet loss!
[  148.970347][T11421] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.015768][T11421] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.065592][T11421] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.140854][T11430] bond1 (unregistering): Released all slaves
[  149.153661][T11421] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.226295][T11501] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1633'.
[  149.241965][   T53] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.263566][   T53] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.273014][   T53] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.287306][   T53] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.341314][   T53] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.353462][ T1926] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.365772][   T53] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.379824][T10192] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.503673][T11543] netlink: 12 bytes leftover after parsing attributes in process `wޣ�'.
[  149.565614][T11550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1644'.
[  149.575185][T11550] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  149.606941][T11554] loop2: detected capacity change from 0 to 1024
[  149.613761][T11554] EXT4-fs: Ignoring removed oldalloc option
[  149.619875][T11554] EXT4-fs: Ignoring removed nomblk_io_submit option
[  149.636646][T11554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.666952][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.774879][T11592] loop1: detected capacity change from 0 to 4096
[  149.781608][T11592] EXT4-fs: Ignoring removed nomblk_io_submit option
[  149.820573][T11592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.862513][T11609] bond1 (unregistering): Released all slaves
[  149.890812][T11676] loop2: detected capacity change from 0 to 1024
[  149.898301][T11676] EXT4-fs: inline encryption not supported
[  149.904229][T11676] EXT4-fs: Ignoring removed oldalloc option
[  149.915137][T11676] ext4: Bad value for 'debug_want_extra_isize'
[  149.978839][   T29] kauditd_printk_skb: 343 callbacks suppressed
[  149.978857][   T29] audit: type=1400 audit(1765034075.834:8149): avc:  denied  { bind } for  pid=11643 comm="syz.2.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  150.010581][   T29] audit: type=1400 audit(1765034075.834:8150): avc:  denied  { name_bind } for  pid=11643 comm="syz.2.1656" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  150.010651][   T29] audit: type=1400 audit(1765034075.834:8151): avc:  denied  { node_bind } for  pid=11643 comm="syz.2.1656" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  150.025930][   T29] audit: type=1326 audit(1765034075.844:8152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705463f749 code=0x7ffc0000
[  150.076946][   T29] audit: type=1326 audit(1765034075.844:8153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f705463f749 code=0x7ffc0000
[  150.100373][   T29] audit: type=1326 audit(1765034075.844:8154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705463f749 code=0x7ffc0000
[  150.123923][   T29] audit: type=1326 audit(1765034075.844:8155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f705463f749 code=0x7ffc0000
[  150.147456][   T29] audit: type=1326 audit(1765034075.844:8156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705463f749 code=0x7ffc0000
[  150.171030][   T29] audit: type=1326 audit(1765034075.844:8157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f705463f749 code=0x7ffc0000
[  150.194655][   T29] audit: type=1326 audit(1765034075.844:8158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705463f749 code=0x7ffc0000
[  150.225025][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1659'.
[  150.249782][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.794612][T11776] bond1 (unregistering): Released all slaves
[  150.852656][T11847] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.896086][T11847] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.946225][T11847] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.989428][T11862] netlink: 'syz.1.1687': attribute type 13 has an invalid length.
[  151.001742][T11862] gretap0: refused to change device tx_queue_len
[  151.008507][T11862] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  151.027680][T11847] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.043005][T11862] netlink: 'syz.1.1687': attribute type 10 has an invalid length.
[  151.055588][T11863] bond2 (unregistering): Released all slaves
[  151.068026][T11862] veth1_vlan: left promiscuous mode
[  151.074187][T11862] batman_adv: batadv0: Adding interface: veth1_vlan
[  151.080813][T11862] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  151.106587][T11862] batman_adv: batadv0: Interface activated: veth1_vlan
[  151.124283][T10192] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.136324][T10192] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.148133][T11026] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.160510][T11026] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.294646][T11959] program syz.0.1692 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  151.404893][   T48] ==================================================================
[  151.413034][   T48] BUG: KCSAN: data-race in blk_mq_dispatch_rq_list / blk_mq_dispatch_rq_list
[  151.421836][   T48] 
[  151.424177][   T48] read-write to 0xffff8881008abaf8 of 4 bytes by task 24 on cpu 1:
[  151.432093][   T48]  blk_mq_dispatch_rq_list+0xc76/0xf80
[  151.437597][   T48]  __blk_mq_sched_dispatch_requests+0x1c8/0xc70
[  151.444060][   T48]  blk_mq_sched_dispatch_requests+0x86/0x120
[  151.450096][   T48]  blk_mq_run_hw_queue+0x17e/0x220
[  151.455265][   T48]  blk_mq_run_hw_queues+0x18e/0x270
[  151.460518][   T48]  blk_mq_requeue_work+0x3b9/0x3f0
[  151.465662][   T48]  process_scheduled_works+0x4ce/0x9d0
[  151.471146][   T48]  worker_thread+0x582/0x770
[  151.475751][   T48]  kthread+0x489/0x510
[  151.479842][   T48]  ret_from_fork+0x149/0x290
[  151.484450][   T48]  ret_from_fork_asm+0x1a/0x30
[  151.489230][   T48] 
[  151.491562][   T48] read to 0xffff8881008abaf8 of 4 bytes by task 48 on cpu 0:
[  151.498938][   T48]  blk_mq_dispatch_rq_list+0x8d3/0xf80
[  151.504446][   T48]  __blk_mq_sched_dispatch_requests+0x7eb/0xc70
[  151.510709][   T48]  blk_mq_sched_dispatch_requests+0x86/0x120
[  151.516713][   T48]  blk_mq_run_work_fn+0x66/0xe0
[  151.521578][   T48]  process_scheduled_works+0x4ce/0x9d0
[  151.527059][   T48]  worker_thread+0x582/0x770
[  151.531678][   T48]  kthread+0x489/0x510
[  151.535765][   T48]  ret_from_fork+0x149/0x290
[  151.540382][   T48]  ret_from_fork_asm+0x1a/0x30
[  151.545161][   T48] 
[  151.547494][   T48] value changed: 0x00000003 -> 0x00000004
[  151.553222][   T48] 
[  151.555568][   T48] Reported by Kernel Concurrency Sanitizer on:
[  151.561725][   T48] CPU: 0 UID: 0 PID: 48 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT(voluntary) 
[  151.571455][   T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  151.581521][   T48] Workqueue: kblockd blk_mq_run_work_fn
[  151.587094][   T48] ==================================================================