last executing test programs:

28.947882265s ago: executing program 2 (id=131):
r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) (async)
ftruncate(r1, 0xc17a)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1900db00004d5821e2bb96db28847f759f3d095451ddafecaeece13eab80d19a5e5faeb1166ce425a47ba63a75a2e124566f0926c6fd3dac4124f1a9b328104580d977945ec15ee9dfb9f2e1b367062544dae7eb6d42c1159964273a8406ca508cab6511b286bdc484dfdb8a74b0205e4c3b469d542ed7194aceaa052aded1b73af379af29c6e7c2eaaffd2fa30d5b", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000f4ffffffffffffff", @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000280)='K', &(0x7f0000000400)=""/154}, 0x20) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') (async)
r6 = socket(0x2, 0x2, 0x1)
r7 = dup3(r5, r6, 0x80000)
r8 = dup2(r6, r7)
r9 = socket(0x2, 0x2, 0x1)
fsmount(r7, 0x1, 0x78) (async)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r9, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) (async)
mount$9p_fd(0x0, &(0x7f00000001c0)='./cgroup.net/devices.allow\x00', &(0x7f0000000240), 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB='tr=fd,rfdno=\x00\x00\x00', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x100)
mkdirat(r10, &(0x7f0000000300)='./file2\x00', 0x21) (async)
chroot(&(0x7f0000000000)='./file0/../file0\x00') (async)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r11 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) (async)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150)
pwrite64(r12, &(0x7f0000000140)='2', 0xfdef, 0xfecc) (async)
fallocate(r11, 0x0, 0xbf5, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000000040)={0xc, r11, 0x0, 0x0, 0x0, 0xfffffffffdffffff})

28.420888618s ago: executing program 2 (id=134):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r1, &(0x7f00000025c0)=[{0x0}], 0x1)

28.37169491s ago: executing program 2 (id=136):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/59, 0x3b)
getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x7a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000440006803e00040063636d2861657329"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000680)={'#! ', '.', [], 0xa, "c6"}, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00'}, 0x18)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

27.973073027s ago: executing program 2 (id=140):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3, 0x7b}, @timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [0x5, 0x0]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10)
clock_gettime(0x0, &(0x7f0000000240))
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10026}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x22a5, 0x38023}}}}}}, @IFLA_AF_SPEC={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc154}, 0x0)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000001200)='./file0\x00', 0x1000000, &(0x7f0000000180)=ANY=[], 0x1, 0x11f1, &(0x7f0000002440)="$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")
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r7 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r8 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0)
move_pages(r8, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="2000000076000d0b0000000100000000030000000b00002008000a"], 0x20}}, 0x0)
syz_open_procfs$pagemap(r8, &(0x7f0000000040))

27.557308715s ago: executing program 2 (id=146):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)}], 0x1)

27.309119316s ago: executing program 2 (id=152):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2, 0xd7, 0x8c, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}}) (async)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0)
getrlimit(0x5, &(0x7f00000000c0))
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r3, 0x0, 0x2}, 0x18) (async)
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0c0100001000130428bd700000000000e0000001000000000000000000000000000000000000000000000000000000014e2100004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000001000000003c0000000a0101000000000000000000000000000400000000000000060000000000000002000000000000000400000000004000ffffffffffffffff03000000000000007f00000000000000000000000000000000000000000000000800150000000000cc000000000000000000000000000000f600000000000000000000002abd7000000000000200010500000000000000001c00040002004e2100270000fe880000000000000000000000000101"], 0x10c}}, 0x804) (async)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) (async)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)=0x1)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0x20) (async)
r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) (async)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='fsi_master_acf_poll_response_busy\x00', r7, 0x0, 0x8000000}, 0x18) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), r4) (async)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") (async)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)

27.308708046s ago: executing program 32 (id=152):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2, 0xd7, 0x8c, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}}) (async)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0)
getrlimit(0x5, &(0x7f00000000c0))
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r3, 0x0, 0x2}, 0x18) (async)
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0c0100001000130428bd700000000000e0000001000000000000000000000000000000000000000000000000000000014e2100004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000001000000003c0000000a0101000000000000000000000000000400000000000000060000000000000002000000000000000400000000004000ffffffffffffffff03000000000000007f00000000000000000000000000000000000000000000000800150000000000cc000000000000000000000000000000f600000000000000000000002abd7000000000000200010500000000000000001c00040002004e2100270000fe880000000000000000000000000101"], 0x10c}}, 0x804) (async)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) (async)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)=0x1)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0x20) (async)
r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) (async)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='fsi_master_acf_poll_response_busy\x00', r7, 0x0, 0x8000000}, 0x18) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), r4) (async)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") (async)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)

3.25074039s ago: executing program 0 (id=440):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)

3.157349084s ago: executing program 0 (id=443):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010)
sendmsg$inet(r1, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, 0x0, 0x40}, 0x20000024)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x66, 0x66, 0x8, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x3}, @volatile={0xb, 0x0, 0x0, 0x9, 0x2}, @datasec={0xb, 0x4, 0x0, 0xf, 0x2, [{0x4, 0x662, 0x1ff}, {0x4, 0x3, 0x5}, {0x3, 0x3e, 0x40}, {0x4, 0x3, 0x3}], "58d5"}, @var={0x3, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x30, 0x2e, 0x2e, 0x10, 0x61, 0x30]}}, &(0x7f00000007c0)=""/55, 0x88, 0x37, 0x1, 0x5d4}, 0x28)

2.943061653s ago: executing program 0 (id=446):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@enum64={0x4, 0x2, 0x0, 0x13, 0x1, 0x1, [{0x7, 0x1, 0x7fffffff}, {0x6, 0xffff, 0x5}]}]}, {0x0, [0x0, 0x30, 0x61, 0x2e, 0x5f, 0x5f, 0x5f]}}, 0x0, 0x45, 0x0, 0x1}, 0x28)
r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f00000002c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r1, 0x47f8, 0x4000, 0x2, 0x0, 0x1f)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @broadcast, @initdev}, &(0x7f00000003c0)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, <r4=>0x0}, &(0x7f0000000040)=0xc)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, r4, &(0x7f0000000100))
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000280)=[0x7, 0x4, 0x1c, 0x7])
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000002c0)='kfree\x00', r7, 0x0, 0x40}, 0x18)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$GIO_UNIMAP(r8, 0x4b66, &(0x7f0000000340)={0x0, 0x0})
ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f0000000280)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e20, @local}, 0x6, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000240)='team_slave_1\x00', 0x8, 0x6, 0x401})
syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500002400000000002f9078ac141400e00000010049adc2343741000208eafc00655804"], 0x0)
sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\fJR-', 0x4}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={<r9=>0x0, 0x22, "2f3fb0a088d2f40140a13e88b0f82febd0d16a2f07c0db8c3ec262c408514d8b4554"}, &(0x7f0000000180)=0x2a)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000001c0)={r9, 0x4}, &(0x7f0000000200)=0x8)

2.313300471s ago: executing program 5 (id=447):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/bus/input/handlers\x00', 0x0, 0x0)

2.030159783s ago: executing program 5 (id=449):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=@delchain={0x7c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x48, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x44, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0xfffffe09, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x89da}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xfc}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x9}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.956216076s ago: executing program 1 (id=451):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=[@ip_retopts={{0x10}}], 0x10}, 0xffff000000000000)

1.915094397s ago: executing program 5 (id=453):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)

1.898656509s ago: executing program 1 (id=454):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)={0x14, 0x5e, 0xe25, 0x0, 0x80000000, "", [@generic="d744"]}, 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')

1.883291379s ago: executing program 0 (id=456):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010)
sendmsg$inet(r1, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, 0x0, 0x40}, 0x20000024)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x66, 0x66, 0x8, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x3}, @volatile={0xb, 0x0, 0x0, 0x9, 0x2}, @datasec={0xb, 0x4, 0x0, 0xf, 0x2, [{0x4, 0x662, 0x1ff}, {0x4, 0x3, 0x5}, {0x3, 0x3e, 0x40}, {0x4, 0x3, 0x3}], "58d5"}, @var={0x3, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x30, 0x2e, 0x2e, 0x10, 0x61, 0x30]}}, &(0x7f00000007c0)=""/55, 0x88, 0x37, 0x1, 0x5d4}, 0x28)

1.806787312s ago: executing program 0 (id=457):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
ioctl$NS_GET_PARENT(r2, 0xb702, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r13 = socket$inet6_udp(0xa, 0x2, 0x0)
r14 = syz_open_dev$evdev(&(0x7f0000000000), 0x80, 0x2a0800)
ioctl$EVIOCGKEYCODE_V2(r14, 0x80284504, &(0x7f0000000300)=""/179)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r15=>0x0})
setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000400)={0x0, 0x0, 0x3, r15, 0x3}, 0xc)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000c80)={'lo\x00', <r16=>0x0})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r2, <r17=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000500)='%pI4   \x00'}, 0x20)
ioctl$LOOP_SET_FD(r2, 0x4c00, r17)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}, @TCA_STAB={0x4}]}, 0x4c}}, 0x0)

1.453157508s ago: executing program 5 (id=458):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket(0x10, 0x803, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4010, 0xffffffffffffffff, 0x79f45000)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c77661cc7eeb289c2a9c4b9f6a2ed317f20646e6f3d", @ANYRESHEX, @ANYBLOB=',k'])
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x42041, 0x30)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)

1.376429371s ago: executing program 1 (id=460):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=""/17, 0x11}, 0x100}], 0x1, 0x45833af92e4b38ff, 0x0)

957.248239ms ago: executing program 4 (id=462):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000240)="94", 0x1)
getpeername$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="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"/270], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
recvmmsg(r6, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb31}], 0x1, 0x40002042, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x18)
socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18)
r8 = inotify_init()
creat(&(0x7f00000000c0)='./file0\x00', 0x80)
inotify_add_watch(r8, &(0x7f0000000080)='./file0\x00', 0x4000cdd)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

874.842033ms ago: executing program 5 (id=463):
r0 = inotify_init1(0x80000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/20, @ANYRESHEX=r1, @ANYRES32, @ANYBLOB="0000000002"], 0x48)
inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r3, @ANYBLOB="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"], 0x50)
open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/32, 0x20}], 0x1)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x924}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x2}]}}]}, 0x48}}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4)
bind$llc(r8, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='afs_receive_data\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
r9 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580)=<r10=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4)
io_uring_enter(r9, 0x66a8, 0x4000, 0xf, 0x0, 0x18)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000341e6cfea723c0937af09ac8fa73b230542b2f6b5d2fd393a44ab4bbe3779842c830bfda832822fda852b9feb3ac3e311f7a828489bcad990b58336e9102486de2af5741e27eca529f946600e029981f8f542b1e4740529f698159dbaa8bced563698689698a66b2de1ec6a1698be3517ed59b1aeca89410315f9326a03d5434f384f6261301a0a7a9a93539d2b812eb4c8e4544c0e6757322b053ebe30d65384875b9a25d4efc4c6fbdfaf1334d9850c495300bf4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

870.343612ms ago: executing program 3 (id=464):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=@delchain={0x7c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x48, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x44, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0xfffffe09, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x89da}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xfc}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x9}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

827.514944ms ago: executing program 1 (id=465):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xfff1, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

809.677966ms ago: executing program 0 (id=466):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f00000000c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f", 0x85}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001bc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbd", 0xf6}], 0x1}}], 0x2, 0x2090)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r4, &(0x7f0000000180)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010102}}, 0x24)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x0, 0x0, 0x1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
socket(0x10, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xe5)
unshare(0x6020400)
socket$igmp(0x2, 0x3, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup\x00', 0x0, &(0x7f0000000380)='source')
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18)

807.998856ms ago: executing program 4 (id=467):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010)
sendmsg$inet(r1, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, 0x0, 0x40}, 0x20000024)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x66, 0x66, 0x8, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x3}, @volatile={0xb, 0x0, 0x0, 0x9, 0x2}, @datasec={0xb, 0x4, 0x0, 0xf, 0x2, [{0x4, 0x662, 0x1ff}, {0x4, 0x3, 0x5}, {0x3, 0x3e, 0x40}, {0x4, 0x3, 0x3}], "58d5"}, @var={0x3, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x30, 0x2e, 0x2e, 0x10, 0x61, 0x30]}}, &(0x7f00000007c0)=""/55, 0x88, 0x37, 0x1, 0x5d4}, 0x28)

721.239539ms ago: executing program 4 (id=468):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)

714.346849ms ago: executing program 3 (id=469):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/59, 0x3b)
getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x7a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000440006803e00040063636d2861657329"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000680)={'#! ', '.', [], 0xa, "c6"}, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00'}, 0x18)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

696.78722ms ago: executing program 4 (id=470):
r0 = open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x6, 0x207, 0x9, 0x0, 0x19, "0400"})
ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x8001)
openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', <r5=>0x0, 0x80, 0x10, 0x2, 0x8, {{0x2c, 0x4, 0x3, 0x3d, 0xb0, 0x67, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@cipso={0x86, 0x3f, 0x3, [{0x7, 0x4, "5fc8"}, {0x7, 0x12, "9065fc2863177fe28961ac20f671970f"}, {0x6, 0xd, "2b9b7ef3219e3a6e87d6f3"}, {0x6, 0x4, "8e2c"}, {0x5, 0x12, "fa30589d58e2b484fb04694f1775aa4d"}]}, @timestamp={0x44, 0x10, 0x15, 0x0, 0x2, [0x0, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x34, 0xcc, 0x3, 0x5, [{@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x3}, {@rand_addr=0x64010101, 0x400}, {@local}, {@private=0xa010101, 0x401}, {@rand_addr=0x64010102, 0x3}]}, @noop, @cipso={0x86, 0x15, 0x3, [{0x2, 0x2}, {0x0, 0xd, "9cc86b4f66f775b1fc58c4"}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000500)={'syztnl0\x00', <r6=>0x0, 0x40, 0x1, 0x9, 0x0, {{0x19, 0x4, 0x1, 0x5, 0x64, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast2, @rand_addr=0x64010100, {[@cipso={0x86, 0x14, 0x1, [{0x0, 0xc, "ab0458525f2a2af7fb4d"}, {0x38f74dafdb066792, 0x2}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xe9, 0x3, 0x7, [{@loopback, 0x1}, {@multicast1, 0x5c5}, {@empty, 0x9}]}, @rr={0x7, 0x1f, 0xe8, [@dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010102, @multicast2, @private=0xa010102, @multicast2, @dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0xa}]}]}}}}})
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x60, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x8, 0x6, @local}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@multicast1, @multicast1, <r9=>0x0}, &(0x7f00000003c0)=0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f00000005c0)={'sit0\x00', <r10=>0x0, 0x40, 0x700, 0xfffffffa, 0x3, {{0x27, 0x4, 0x2, 0x6, 0x9c, 0x68, 0x0, 0x1, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3a}, {[@cipso={0x86, 0x58, 0x1, [{0x5, 0x9, "9912c0b303bbdf"}, {0x7, 0xb, "d640d8b350ec285d41"}, {0x0, 0x3, "f6"}, {0x1, 0x12, "9bfeef27a4a9f2276aa0ef10f048e252"}, {0x5, 0xa, "580546cf35d26150"}, {0x5, 0x12, "ecb9eb035cc2367d4a4d0ed124366ce3"}, {0x5, 0x7, "7d4124d1a3"}, {0x6, 0x6, "e1dd54b3"}]}, @generic={0x86, 0xb, "d8189df8b8a2bd9fa0"}, @timestamp_prespec={0x44, 0x24, 0xf1, 0x3, 0xd, [{@loopback, 0x8}, {@rand_addr=0x64010102, 0x73}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0xfcef}, {@broadcast, 0x7}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'ip6_vti0\x00', <r11=>0x0, 0x29, 0x4, 0x7, 0x0, 0x50, @local, @private1, 0x700, 0x7, 0x1, 0xfffffffc}})
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000780)={@loopback, <r12=>0x0}, &(0x7f00000007c0)=0x14)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1c0, r4, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', <r13=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x17, 0x10, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4f21}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xb6}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}]}, &(0x7f0000000ac0)='GPL\x00', 0x401, 0xa5, &(0x7f0000000b00)=""/165, 0x40f00, 0x2d, '\x00', r13, @cgroup_sysctl=0x12, r0, 0x8, &(0x7f0000000c00)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000c40)={0x3, 0x5, 0x4, 0xff}, 0x10, 0x0, r1, 0x7, 0x0, &(0x7f0000000c80)=[{0x2, 0x2, 0x9, 0x3}, {0x1, 0x5, 0xd, 0xb}, {0x5, 0x3, 0xb, 0x3}, {0x3, 0x1, 0xc, 0xb}, {0x4, 0x5, 0x9}, {0x0, 0x1, 0xc, 0xc}, {0x3, 0x5, 0xd, 0x7}], 0x10, 0x8}, 0x94)

569.099926ms ago: executing program 1 (id=471):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @remote}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ffffff, {0x0, 0x0, 0x0, r3, {0x7, 0x9}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x13, 0xfff, 0x8001, 0x4, 0x80, 0xffffffffffffffff, 0xc, '\x00', r3, r0, 0x1, 0x1, 0x3}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000ff0f00000000000000feffff180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2}}}}}}}, 0x0)
recvmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000)

568.835436ms ago: executing program 3 (id=472):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804)

530.927157ms ago: executing program 4 (id=473):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket(0x10, 0x803, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4010, 0xffffffffffffffff, 0x79f45000)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c77661cc7eeb289c2a9c4b9f6a2ed317f20646e6f3d", @ANYRESHEX, @ANYBLOB=',k'])
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x42041, 0x30)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)

518.807268ms ago: executing program 3 (id=474):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x3, &(0x7f00000000c0)=[{0x8, 0x9, 0x2, 0xa}, {0x7, 0x1, 0xa, 0x5}, {0x0, 0x7, 0x6, 0x9}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sockstat\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f00000001c0), 0x4)
sendmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="efd7df", 0x3}], 0x1, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x4060019}, 0x20000041)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r6, 0x0)
r7 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0)
accept4(r6, 0x0, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="732c6e6f646f74732c7569643dec4b37861807db7786991e093281f9607c366b1c7e9ae2853f985a9a8f7b0c831d7cbea602ec702ba79c56d6ad97682b6eb677bbd40d27bc2166b418ae888989c766b58cc642b769ca798e7ace1d685d025d4eca8a565a60e484ac44cc68529bbe5e0171e8ae5a2460f8ac6fc4510c5b3fa1ec2f0b1610566062a2fbd8a60ecd4c8a40f818dcb03ea847e827bd137835dd2c60472b65dfae9035d0b2c6760ecf39808a0e", @ANYRESHEX=0x0, @ANYBLOB="2c646d61736b3d30303030303030303030303030303030303030303030322c756d61736b3d303030303030303030303030303030303030302c000f5186c5e6c7e221acae1f2bce3f628976329421ce230baaaf88191a4017d68f03a16b33a382d61eba86fceff31784759104935bbab41ae1aad4f295ee75b6600e5750d28fba3de65d9ea879618828e5668b6fd6be8d61ed7d6e494317a9b4c4e09b8dd4c502067ee7d71a"], 0x1, 0x159, &(0x7f0000000840)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N")

381.077504ms ago: executing program 5 (id=475):
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
setns(r1, 0x40000000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x14004040)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
read(r0, &(0x7f0000000300)=""/212, 0xd4)

238.6937ms ago: executing program 4 (id=476):
r0 = getpgrp(0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x4, 0x0, 0x10000, 0x9, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = gettid()
socket$inet_udp(0x2, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0xa5144411, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioprio_set$pid(0x2, 0x0, 0x4007)

231.1082ms ago: executing program 1 (id=477):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000700)='rpcb_register\x00', r0}, 0x18)
r1 = socket$caif_seqpacket(0x25, 0x5, 0x2)
getsockname(r1, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000004c0)=0x80)
r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = dup(r4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000180)=0x1)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x4, 0xf06, 0x1, 0x16, 0xfffffffd, 0x5}, 0x9c)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0xffffff3b, 0xfa00, {0x0, 0x0, 0x13f, 0x5}}, 0xff37)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000540)={<r6=>0x0, @rand_addr, @loopback}, &(0x7f0000000580)=0xc)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf89}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20)
r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r7, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r8, 0x400455c8, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000140)=0x1b)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(r3, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94)

43.831878ms ago: executing program 3 (id=478):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000e"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003580)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014)

0s ago: executing program 3 (id=479):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000240)="94", 0x1)
getpeername$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="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"/270], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
recvmmsg(r6, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb31}], 0x1, 0x40002042, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x18)
socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18)
r8 = inotify_init()
creat(&(0x7f00000000c0)='./file0\x00', 0x80)
inotify_add_watch(r8, &(0x7f0000000080)='./file0\x00', 0x4000cdd)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

ridge_slave_1) entered forwarding state
[   41.072449][ T3334] 8021q: adding VLAN 0 to HW filter on device batadv0
[   41.147525][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0
[   41.161573][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0
[   41.188193][ T3330] 8021q: adding VLAN 0 to HW filter on device batadv0
[   41.201726][ T3318] veth0_vlan: entered promiscuous mode
[   41.230750][ T3318] veth1_vlan: entered promiscuous mode
[   41.285729][ T3318] veth0_macvtap: entered promiscuous mode
[   41.303768][ T3318] veth1_macvtap: entered promiscuous mode
[   41.331403][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.354842][ T3317] veth0_vlan: entered promiscuous mode
[   41.364434][ T3317] veth1_vlan: entered promiscuous mode
[   41.392567][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.416981][ T1596] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.430993][ T3330] veth0_vlan: entered promiscuous mode
[   41.441740][ T1596] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.451482][ T3334] veth0_vlan: entered promiscuous mode
[   41.462772][ T1596] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.471734][ T1596] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.483526][ T3330] veth1_vlan: entered promiscuous mode
[   41.492025][ T3317] veth0_macvtap: entered promiscuous mode
[   41.503395][ T3334] veth1_vlan: entered promiscuous mode
[   41.510808][ T3324] veth0_vlan: entered promiscuous mode
[   41.519955][ T3317] veth1_macvtap: entered promiscuous mode
[   41.535247][   T29] kauditd_printk_skb: 9 callbacks suppressed
[   41.535263][   T29] audit: type=1400 audit(1764812549.596:81): avc:  denied  { mounton } for  pid=3318 comm="syz-executor" path="/root/syzkaller.ZvU9R5/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   41.546317][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.579989][   T29] audit: type=1400 audit(1764812549.626:82): avc:  denied  { mount } for  pid=3318 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   41.583184][ T3324] veth1_vlan: entered promiscuous mode
[   41.602018][   T29] audit: type=1400 audit(1764812549.626:83): avc:  denied  { mounton } for  pid=3318 comm="syz-executor" path="/root/syzkaller.ZvU9R5/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   41.632789][   T29] audit: type=1400 audit(1764812549.636:84): avc:  denied  { mount } for  pid=3318 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   41.632864][ T3324] veth0_macvtap: entered promiscuous mode
[   41.654850][   T29] audit: type=1400 audit(1764812549.636:85): avc:  denied  { mounton } for  pid=3318 comm="syz-executor" path="/root/syzkaller.ZvU9R5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   41.672866][ T3330] veth0_macvtap: entered promiscuous mode
[   41.687047][   T29] audit: type=1400 audit(1764812549.636:86): avc:  denied  { mounton } for  pid=3318 comm="syz-executor" path="/root/syzkaller.ZvU9R5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   41.687081][   T29] audit: type=1400 audit(1764812549.636:87): avc:  denied  { unmount } for  pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   41.708308][ T3334] veth0_macvtap: entered promiscuous mode
[   41.720641][   T29] audit: type=1400 audit(1764812549.636:88): avc:  denied  { mounton } for  pid=3318 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   41.744313][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.745758][   T29] audit: type=1400 audit(1764812549.636:89): avc:  denied  { mount } for  pid=3318 comm="syz-executor" name="/" dev="gadgetfs" ino=3783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   41.771845][ T3330] veth1_macvtap: entered promiscuous mode
[   41.806917][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   41.807698][ T3324] veth1_macvtap: entered promiscuous mode
[   41.831089][ T3334] veth1_macvtap: entered promiscuous mode
[   41.840709][   T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.854223][   T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.867611][ T3334] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.875944][   T29] audit: type=1400 audit(1764812549.926:90): avc:  denied  { read write } for  pid=3318 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   41.886775][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.912542][   T69] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.924531][   T69] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.934411][ T3334] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.947943][ T3330] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.963041][  T825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.973095][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.984193][ T3330] batman_adv: batadv0: Interface activated: batadv_slave_1
[   42.004368][  T825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.047269][  T825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.070606][  T825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.094939][  T825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.104517][  T825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.119402][ T3495] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   42.133075][  T825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.192053][  T825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.208888][ T3495] syz_tun: entered allmulticast mode
[   42.235092][ T3495] dvmrp8: entered allmulticast mode
[   42.259762][  T825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.299101][  T825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.326957][  T825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.364237][  T825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.396016][ T3524] =======================================================
[   42.396016][ T3524] WARNING: The mand mount option has been deprecated and
[   42.396016][ T3524]          and is ignored by this kernel. Remove the mand
[   42.396016][ T3524]          option from the mount to silence this warning.
[   42.396016][ T3524] =======================================================
[   42.461306][ T3524] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   42.546806][ T3519] netlink: 'syz.4.8': attribute type 3 has an invalid length.
[   42.772796][ T3542] loop1: detected capacity change from 0 to 512
[   42.881186][ T3542] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   42.918464][ T3542] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   42.926798][ T3542] EXT4-fs (loop1): orphan cleanup on readonly fs
[   42.943292][ T3542] EXT4-fs error (device loop1): ext4_do_update_inode:5628: inode #16: comm +}[@: corrupted inode contents
[   42.955680][ T3542] EXT4-fs (loop1): Remounting filesystem read-only
[   42.962576][ T3542] EXT4-fs (loop1): 1 truncate cleaned up
[   42.969096][   T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   42.979685][   T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   43.033033][ T3540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'.
[   43.041924][ T3540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'.
[   43.088645][   T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[   43.099298][ T3542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   43.112468][ T3542] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.167379][ T3548] Illegal XDP return value 953994316 on prog  (id 18) dev N/A, expect packet loss!
[   43.671483][ T3575] hub 9-0:1.0: USB hub found
[   43.678001][ T3575] FAULT_INJECTION: forcing a failure.
[   43.678001][ T3575] name failslab, interval 1, probability 0, space 0, times 0
[   43.690892][ T3575] CPU: 1 UID: 0 PID: 3575 Comm: syz.4.27 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   43.691019][ T3575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   43.691040][ T3575] Call Trace:
[   43.691106][ T3575]  <TASK>
[   43.691115][ T3575]  __dump_stack+0x1d/0x30
[   43.691138][ T3575]  dump_stack_lvl+0xe8/0x140
[   43.691163][ T3575]  dump_stack+0x15/0x1b
[   43.691187][ T3575]  should_fail_ex+0x265/0x280
[   43.691217][ T3575]  ? hub_probe+0x796/0x16f0
[   43.691258][ T3575]  should_failslab+0x8c/0xb0
[   43.691294][ T3575]  __kmalloc_cache_noprof+0x4c/0x4a0
[   43.691327][ T3575]  ? kobject_get+0x93/0xd0
[   43.691360][ T3575]  hub_probe+0x796/0x16f0
[   43.691463][ T3575]  ? read_tsc+0x9/0x20
[   43.691497][ T3575]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[   43.691537][ T3575]  usb_probe_interface+0x47c/0x700
[   43.691580][ T3575]  ? __pfx_usb_probe_interface+0x10/0x10
[   43.691684][ T3575]  really_probe+0x1bf/0x5c0
[   43.691721][ T3575]  __driver_probe_device+0x121/0x190
[   43.691760][ T3575]  driver_probe_device+0x37/0x2f0
[   43.691791][ T3575]  __device_attach_driver+0x205/0x310
[   43.691828][ T3575]  ? __pfx___device_attach_driver+0x10/0x10
[   43.691866][ T3575]  bus_for_each_drv+0x1c0/0x230
[   43.691993][ T3575]  __device_attach+0x1c7/0x290
[   43.692028][ T3575]  device_attach+0x17/0x20
[   43.692052][ T3575]  proc_ioctl+0x2f7/0x400
[   43.692176][ T3575]  proc_ioctl_default+0x71/0xa0
[   43.692271][ T3575]  usbdev_ioctl+0xe8b/0x1700
[   43.692309][ T3575]  ? __pfx_usbdev_ioctl+0x10/0x10
[   43.692410][ T3575]  __se_sys_ioctl+0xce/0x140
[   43.692439][ T3575]  __x64_sys_ioctl+0x43/0x50
[   43.692460][ T3575]  x64_sys_call+0x14b0/0x3000
[   43.692620][ T3575]  do_syscall_64+0xd8/0x2a0
[   43.692651][ T3575]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.692755][ T3575] RIP: 0033:0x7fc3dbe9f749
[   43.692782][ T3575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.692821][ T3575] RSP: 002b:00007fc3da907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   43.692912][ T3575] RAX: ffffffffffffffda RBX: 00007fc3dc0f5fa0 RCX: 00007fc3dbe9f749
[   43.692955][ T3575] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000003
[   43.692972][ T3575] RBP: 00007fc3da907090 R08: 0000000000000000 R09: 0000000000000000
[   43.693043][ T3575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.693099][ T3575] R13: 00007fc3dc0f6038 R14: 00007fc3dc0f5fa0 R15: 00007ffd2141ee48
[   43.693124][ T3575]  </TASK>
[   43.693140][ T3575] hub 9-0:1.0: config failed, out of memory (err -12)
[   44.086713][ T3594] syz_tun: entered allmulticast mode
[   44.105186][ T3593] loop0: detected capacity change from 0 to 764
[   44.115857][ T3593] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   44.173271][ T3593] Symlink component flag not implemented
[   44.180275][ T3593] Symlink component flag not implemented (7)
[   44.246165][ T3604] netlink: 'syz.0.37': attribute type 1 has an invalid length.
[   44.297389][ T3592] syz_tun: left allmulticast mode
[   44.491199][ T3615] capability: warning: `syz.1.42' uses deprecated v2 capabilities in a way that may be insecure
[   44.566360][ T3618] loop1: detected capacity change from 0 to 128
[   44.950504][    C1] hrtimer: interrupt took 58588 ns
[   44.992797][ T3632] loop1: detected capacity change from 0 to 764
[   45.010881][ T3629] netlink: 'syz.4.47': attribute type 12 has an invalid length.
[   45.035767][ T3632] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   45.066641][ T3632] Symlink component flag not implemented
[   45.072456][ T3632] Symlink component flag not implemented (7)
[   45.080559][ T3635] netlink: 'syz.4.49': attribute type 1 has an invalid length.
[   45.105987][ T3635] syz_tun: entered allmulticast mode
[   45.115954][ T3635] dvmrp8: entered allmulticast mode
[   45.122351][ T3634] syz_tun: left allmulticast mode
[   45.188771][ T3637] FAULT_INJECTION: forcing a failure.
[   45.188771][ T3637] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   45.201918][ T3637] CPU: 1 UID: 0 PID: 3637 Comm: syz.2.50 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   45.201992][ T3637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   45.202008][ T3637] Call Trace:
[   45.202017][ T3637]  <TASK>
[   45.202027][ T3637]  __dump_stack+0x1d/0x30
[   45.202056][ T3637]  dump_stack_lvl+0xe8/0x140
[   45.202100][ T3637]  dump_stack+0x15/0x1b
[   45.202192][ T3637]  should_fail_ex+0x265/0x280
[   45.202216][ T3637]  should_fail+0xb/0x20
[   45.202235][ T3637]  should_fail_usercopy+0x1a/0x20
[   45.202264][ T3637]  _copy_to_user+0x20/0xa0
[   45.202300][ T3637]  simple_read_from_buffer+0xb5/0x130
[   45.202394][ T3637]  proc_fail_nth_read+0x10e/0x150
[   45.202436][ T3637]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   45.202532][ T3637]  vfs_read+0x1a8/0x770
[   45.202557][ T3637]  ? __rcu_read_unlock+0x4f/0x70
[   45.202670][ T3637]  ? __fget_files+0x184/0x1c0
[   45.202696][ T3637]  ? mutex_lock+0x58/0x90
[   45.202735][ T3637]  ksys_read+0xda/0x1a0
[   45.202766][ T3637]  __x64_sys_read+0x40/0x50
[   45.202805][ T3637]  x64_sys_call+0x2889/0x3000
[   45.202828][ T3637]  do_syscall_64+0xd8/0x2a0
[   45.202852][ T3637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.202952][ T3637] RIP: 0033:0x7fe229aee15c
[   45.202967][ T3637] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   45.203039][ T3637] RSP: 002b:00007fe22854f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   45.203059][ T3637] RAX: ffffffffffffffda RBX: 00007fe229d45fa0 RCX: 00007fe229aee15c
[   45.203073][ T3637] RDX: 000000000000000f RSI: 00007fe22854f0a0 RDI: 0000000000000006
[   45.203085][ T3637] RBP: 00007fe22854f090 R08: 0000000000000000 R09: 0000000000000000
[   45.203101][ T3637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   45.203113][ T3637] R13: 00007fe229d46038 R14: 00007fe229d45fa0 R15: 00007ffd4c5a8248
[   45.203131][ T3637]  </TASK>
[   45.427776][ T3639] netlink: 20 bytes leftover after parsing attributes in process `syz.4.51'.
[   45.453914][ T3639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.51'.
[   45.645839][ T3663] netlink: 'syz.0.62': attribute type 1 has an invalid length.
[   45.647505][ T3661] loop4: detected capacity change from 0 to 1024
[   45.677611][ T3661] EXT4-fs: inline encryption not supported
[   45.720191][ T3661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.749196][ T3661] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.61: Allocating blocks 385-513 which overlap fs metadata
[   45.767753][ T3671] loop0: detected capacity change from 0 to 512
[   45.789659][ T3661] EXT4-fs (loop4): pa ffff888106c640e0: logic 16, phys. 129, len 24
[   45.797810][ T3661] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8
[   45.823862][ T3671] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[   45.837339][ T3661] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[   45.849801][ T3661] EXT4-fs (loop4): This should not happen!! Data will be lost
[   45.849801][ T3661] 
[   45.859493][ T3661] EXT4-fs (loop4): Total free blocks count 0
[   45.865542][ T3661] EXT4-fs (loop4): Free/Dirty block details
[   45.871490][ T3661] EXT4-fs (loop4): free_blocks=128
[   45.876737][ T3661] EXT4-fs (loop4): dirty_blocks=0
[   45.881839][ T3661] EXT4-fs (loop4): Block reservation details
[   45.888010][ T3661] EXT4-fs (loop4): i_reserved_data_blocks=0
[   45.895658][ T3671] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.64: bg 0: block 255: padding at end of block bitmap is not set
[   45.923663][ T3661] syz.4.61 (3661) used greatest stack depth: 9864 bytes left
[   45.953256][ T3671] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem
[   45.987935][ T3671] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.64: invalid indirect mapped block 1 (level 1)
[   46.019713][ T3671] EXT4-fs (loop0): 1 truncate cleaned up
[   46.029620][ T3678] netlink: 'syz.4.66': attribute type 1 has an invalid length.
[   46.038136][ T3671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.050779][ T3678] syz_tun: entered allmulticast mode
[   46.126320][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.188417][ T3686] FAULT_INJECTION: forcing a failure.
[   46.188417][ T3686] name failslab, interval 1, probability 0, space 0, times 0
[   46.201234][ T3686] CPU: 1 UID: 0 PID: 3686 Comm: syz.4.69 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   46.201261][ T3686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   46.201344][ T3686] Call Trace:
[   46.201351][ T3686]  <TASK>
[   46.201445][ T3686]  __dump_stack+0x1d/0x30
[   46.201468][ T3686]  dump_stack_lvl+0xe8/0x140
[   46.201495][ T3686]  dump_stack+0x15/0x1b
[   46.201566][ T3686]  should_fail_ex+0x265/0x280
[   46.201591][ T3686]  should_failslab+0x8c/0xb0
[   46.201617][ T3686]  kmem_cache_alloc_noprof+0x50/0x480
[   46.201659][ T3686]  ? io_submit_one+0xb8/0x1280
[   46.201699][ T3686]  io_submit_one+0xb8/0x1280
[   46.201821][ T3686]  __se_sys_io_submit+0xfb/0x280
[   46.201858][ T3686]  __x64_sys_io_submit+0x43/0x50
[   46.201895][ T3686]  x64_sys_call+0x2e40/0x3000
[   46.201925][ T3686]  do_syscall_64+0xd8/0x2a0
[   46.202013][ T3686]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.202041][ T3686] RIP: 0033:0x7fc3dbe9f749
[   46.202061][ T3686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   46.202082][ T3686] RSP: 002b:00007fc3da907038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[   46.202103][ T3686] RAX: ffffffffffffffda RBX: 00007fc3dc0f5fa0 RCX: 00007fc3dbe9f749
[   46.202115][ T3686] RDX: 0000200000000240 RSI: 0000000000000002 RDI: 00007fc3dcc32000
[   46.202129][ T3686] RBP: 00007fc3da907090 R08: 0000000000000000 R09: 0000000000000000
[   46.202154][ T3686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   46.202170][ T3686] R13: 00007fc3dc0f6038 R14: 00007fc3dc0f5fa0 R15: 00007ffd2141ee48
[   46.202193][ T3686]  </TASK>
[   46.447946][ T3695] netlink: 'syz.4.73': attribute type 1 has an invalid length.
[   46.543985][ T3709] netlink: 'syz.1.78': attribute type 1 has an invalid length.
[   46.551770][   T29] kauditd_printk_skb: 285 callbacks suppressed
[   46.551787][   T29] audit: type=1400 audit(1764812554.596:370): avc:  denied  { bind } for  pid=3704 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[   46.565950][ T3709] syz_tun: entered allmulticast mode
[   46.630474][ T3709] dvmrp8: entered allmulticast mode
[   46.645503][ T3715] FAULT_INJECTION: forcing a failure.
[   46.645503][ T3715] name failslab, interval 1, probability 0, space 0, times 0
[   46.658319][ T3715] CPU: 0 UID: 0 PID: 3715 Comm: syz.3.81 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   46.658350][ T3715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   46.658419][ T3715] Call Trace:
[   46.658431][ T3715]  <TASK>
[   46.658439][ T3715]  __dump_stack+0x1d/0x30
[   46.658462][ T3715]  dump_stack_lvl+0xe8/0x140
[   46.658488][ T3715]  dump_stack+0x15/0x1b
[   46.658512][ T3715]  should_fail_ex+0x265/0x280
[   46.658570][ T3715]  ? qdisc_get_rtab+0x1a5/0x2d0
[   46.658626][ T3715]  should_failslab+0x8c/0xb0
[   46.658662][ T3715]  __kmalloc_cache_noprof+0x4c/0x4a0
[   46.658769][ T3715]  qdisc_get_rtab+0x1a5/0x2d0
[   46.658800][ T3715]  tcf_police_init+0x38e/0xc70
[   46.658947][ T3715]  tcf_action_init_1+0x36a/0x4a0
[   46.658994][ T3715]  tcf_action_init+0x267/0x6d0
[   46.659115][ T3715]  tc_ctl_action+0x291/0x830
[   46.659172][ T3715]  ? __mutex_lock_slowpath+0xa/0x10
[   46.659207][ T3715]  ? __pfx_tc_ctl_action+0x10/0x10
[   46.659239][ T3715]  rtnetlink_rcv_msg+0x65a/0x6d0
[   46.659273][ T3715]  netlink_rcv_skb+0x123/0x220
[   46.659343][ T3715]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   46.659382][ T3715]  rtnetlink_rcv+0x1c/0x30
[   46.659491][ T3715]  netlink_unicast+0x5c0/0x690
[   46.659523][ T3715]  netlink_sendmsg+0x58b/0x6b0
[   46.659558][ T3715]  ? __pfx_netlink_sendmsg+0x10/0x10
[   46.659592][ T3715]  __sock_sendmsg+0x145/0x180
[   46.659633][ T3715]  ____sys_sendmsg+0x31e/0x4a0
[   46.659665][ T3715]  ___sys_sendmsg+0x17b/0x1d0
[   46.659750][ T3715]  __x64_sys_sendmsg+0xd4/0x160
[   46.659780][ T3715]  x64_sys_call+0x17ba/0x3000
[   46.659807][ T3715]  do_syscall_64+0xd8/0x2a0
[   46.659831][ T3715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.659905][ T3715] RIP: 0033:0x7f678c0df749
[   46.659923][ T3715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   46.659946][ T3715] RSP: 002b:00007f678ab3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   46.659970][ T3715] RAX: ffffffffffffffda RBX: 00007f678c335fa0 RCX: 00007f678c0df749
[   46.659984][ T3715] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000006
[   46.659999][ T3715] RBP: 00007f678ab3f090 R08: 0000000000000000 R09: 0000000000000000
[   46.660018][ T3715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   46.660033][ T3715] R13: 00007f678c336038 R14: 00007f678c335fa0 R15: 00007ffed6e7acf8
[   46.660056][ T3715]  </TASK>
[   47.066076][ T3722] Zero length message leads to an empty skb
[   47.118445][   T29] audit: type=1401 audit(1764812555.176:371): op=setxattr invalid_context=""
[   47.391058][   T29] audit: type=1400 audit(1764812555.446:372): avc:  denied  { setopt } for  pid=3748 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   47.619567][   T29] audit: type=1400 audit(1764812555.476:373): avc:  denied  { read } for  pid=3748 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   47.639406][   T29] audit: type=1400 audit(1764812555.476:374): avc:  denied  { append } for  pid=3748 comm="syz.2.93" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   47.663305][   T29] audit: type=1400 audit(1764812555.546:375): avc:  denied  { tracepoint } for  pid=3750 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   47.731716][ T3762] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[   47.739629][ T3762] audit: out of memory in audit_log_start
[   47.778014][   T29] audit: type=1400 audit(1764812555.836:376): avc:  denied  { mount } for  pid=3761 comm="syz.0.97" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   47.813835][ T3768] netlink: 'syz.4.100': attribute type 6 has an invalid length.
[   47.882700][ T3772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'.
[   47.910249][ T3770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'.
[   47.921877][ T3770] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.948888][ T3770] batman_adv: batadv0: Removing interface: batadv_slave_1
[   47.990470][   T29] audit: type=1400 audit(1764812556.046:377): avc:  denied  { name_bind } for  pid=3779 comm="syz.0.105" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   48.079139][ T3787] netlink: 'syz.4.108': attribute type 1 has an invalid length.
[   48.139057][ T3791] FAULT_INJECTION: forcing a failure.
[   48.139057][ T3791] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   48.152319][ T3791] CPU: 0 UID: 0 PID: 3791 Comm: syz.4.110 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   48.152351][ T3791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   48.152435][ T3791] Call Trace:
[   48.152443][ T3791]  <TASK>
[   48.152451][ T3791]  __dump_stack+0x1d/0x30
[   48.152479][ T3791]  dump_stack_lvl+0xe8/0x140
[   48.152541][ T3791]  dump_stack+0x15/0x1b
[   48.152562][ T3791]  should_fail_ex+0x265/0x280
[   48.152585][ T3791]  should_fail+0xb/0x20
[   48.152603][ T3791]  should_fail_usercopy+0x1a/0x20
[   48.152645][ T3791]  _copy_from_user+0x1c/0xb0
[   48.152728][ T3791]  ucma_write+0xd9/0x250
[   48.152768][ T3791]  ? __pfx_ucma_write+0x10/0x10
[   48.152866][ T3791]  vfs_write+0x269/0x960
[   48.152895][ T3791]  ? __rcu_read_unlock+0x4f/0x70
[   48.152929][ T3791]  ? __fget_files+0x184/0x1c0
[   48.153004][ T3791]  ksys_write+0xda/0x1a0
[   48.153028][ T3791]  __x64_sys_write+0x40/0x50
[   48.153056][ T3791]  x64_sys_call+0x2847/0x3000
[   48.153120][ T3791]  do_syscall_64+0xd8/0x2a0
[   48.153241][ T3791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.153270][ T3791] RIP: 0033:0x7fc3dbe9f749
[   48.153290][ T3791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   48.153314][ T3791] RSP: 002b:00007fc3da907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   48.153340][ T3791] RAX: ffffffffffffffda RBX: 00007fc3dc0f5fa0 RCX: 00007fc3dbe9f749
[   48.153375][ T3791] RDX: 0000000000000018 RSI: 0000200000000f80 RDI: 0000000000000005
[   48.153391][ T3791] RBP: 00007fc3da907090 R08: 0000000000000000 R09: 0000000000000000
[   48.153404][ T3791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   48.153416][ T3791] R13: 00007fc3dc0f6038 R14: 00007fc3dc0f5fa0 R15: 00007ffd2141ee48
[   48.153484][ T3791]  </TASK>
[   48.355604][ T3798] netlink: 132 bytes leftover after parsing attributes in process `syz.3.112'.
[   48.367750][ T3798] hub 9-0:1.0: USB hub found
[   48.372529][ T3798] hub 9-0:1.0: 8 ports detected
[   48.409520][ T3800] loop4: detected capacity change from 0 to 128
[   48.416847][ T3800] EXT4-fs: Ignoring removed nobh option
[   48.431338][ T3800] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   48.455136][ T3800] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   48.501908][ T3810] loop3: detected capacity change from 0 to 128
[   48.522004][ T3334] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   48.574394][ T3818] netlink: 'syz.2.121': attribute type 1 has an invalid length.
[   48.583448][ T3818] syz_tun: entered allmulticast mode
[   48.593748][ T3810] syz.3.118: attempt to access beyond end of device
[   48.593748][ T3810] loop3: rw=2049, sector=138, nr_sectors = 32 limit=128
[   48.599847][ T3818] dvmrp8: entered allmulticast mode
[   48.612726][ T3810] syz.3.118: attempt to access beyond end of device
[   48.612726][ T3810] loop3: rw=2049, sector=186, nr_sectors = 16 limit=128
[   48.627943][ T3810] syz.3.118: attempt to access beyond end of device
[   48.627943][ T3810] loop3: rw=2049, sector=218, nr_sectors = 16 limit=128
[   48.664308][ T3825] FAULT_INJECTION: forcing a failure.
[   48.664308][ T3825] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   48.677463][ T3825] CPU: 0 UID: 0 PID: 3825 Comm: syz.2.123 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   48.677490][ T3825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   48.677504][ T3825] Call Trace:
[   48.677511][ T3825]  <TASK>
[   48.677589][ T3825]  __dump_stack+0x1d/0x30
[   48.677613][ T3825]  dump_stack_lvl+0xe8/0x140
[   48.677639][ T3825]  dump_stack+0x15/0x1b
[   48.677658][ T3825]  should_fail_ex+0x265/0x280
[   48.677683][ T3825]  should_fail+0xb/0x20
[   48.677768][ T3825]  should_fail_usercopy+0x1a/0x20
[   48.677799][ T3825]  _copy_from_iter+0xcf/0xe70
[   48.677827][ T3825]  ? __build_skb_around+0x164/0x1c0
[   48.677921][ T3825]  ? __alloc_skb+0x223/0x320
[   48.677949][ T3825]  netlink_sendmsg+0x471/0x6b0
[   48.677977][ T3825]  ? __pfx_netlink_sendmsg+0x10/0x10
[   48.678011][ T3825]  __sock_sendmsg+0x145/0x180
[   48.678115][ T3825]  ____sys_sendmsg+0x31e/0x4a0
[   48.678144][ T3825]  ___sys_sendmsg+0x17b/0x1d0
[   48.678186][ T3825]  __x64_sys_sendmsg+0xd4/0x160
[   48.678282][ T3825]  x64_sys_call+0x17ba/0x3000
[   48.678308][ T3825]  do_syscall_64+0xd8/0x2a0
[   48.678338][ T3825]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.678446][ T3825] RIP: 0033:0x7fe229aef749
[   48.678466][ T3825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   48.678490][ T3825] RSP: 002b:00007fe22854f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   48.678515][ T3825] RAX: ffffffffffffffda RBX: 00007fe229d45fa0 RCX: 00007fe229aef749
[   48.678529][ T3825] RDX: 0000000020004000 RSI: 0000200000001200 RDI: 0000000000000006
[   48.678595][ T3825] RBP: 00007fe22854f090 R08: 0000000000000000 R09: 0000000000000000
[   48.678607][ T3825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   48.678619][ T3825] R13: 00007fe229d46038 R14: 00007fe229d45fa0 R15: 00007ffd4c5a8248
[   48.678641][ T3825]  </TASK>
[   48.950972][ T3836] loop1: detected capacity change from 0 to 512
[   48.995480][ T3836] EXT4-fs (loop1): orphan cleanup on readonly fs
[   49.008859][ T3836] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.125: bad orphan inode 13
[   49.042472][ T3832] loop0: detected capacity change from 0 to 8192
[   49.054449][ T3843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'.
[   49.085330][ T3836] ext4_test_bit(bit=12, block=18) = 1
[   49.090846][ T3836] is_bad_inode(inode)=0
[   49.094911][ T3846] loop2: detected capacity change from 0 to 512
[   49.095125][ T3836] NEXT_ORPHAN(inode)=2130706432
[   49.106295][ T3836] max_ino=32
[   49.109505][ T3836] i_nlink=1
[   49.113676][ T3846] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   49.138178][ T3846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.156467][ T3843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   49.163575][ T3836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   49.163953][ T3843] batman_adv: batadv0: Removing interface: batadv_slave_0
[   49.184032][ T3846] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   49.216742][ T3843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   49.224380][ T3843] batman_adv: batadv0: Removing interface: batadv_slave_1
[   49.224529][ T3846] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.131: iget: bad i_size value: 2533274857506816
[   49.249997][ T3851] FAULT_INJECTION: forcing a failure.
[   49.249997][ T3851] name failslab, interval 1, probability 0, space 0, times 0
[   49.262806][ T3851] CPU: 0 UID: 0 PID: 3851 Comm: syz.0.126 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   49.262839][ T3851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   49.262882][ T3851] Call Trace:
[   49.262892][ T3851]  <TASK>
[   49.262902][ T3851]  __dump_stack+0x1d/0x30
[   49.262929][ T3851]  dump_stack_lvl+0xe8/0x140
[   49.262954][ T3851]  dump_stack+0x15/0x1b
[   49.262983][ T3851]  should_fail_ex+0x265/0x280
[   49.263071][ T3851]  should_failslab+0x8c/0xb0
[   49.263106][ T3851]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[   49.263143][ T3851]  ? __alloc_skb+0x101/0x320
[   49.263169][ T3851]  __alloc_skb+0x101/0x320
[   49.263229][ T3851]  inet6_rt_notify+0x8b/0x1d0
[   49.263254][ T3851]  ? call_fib_notifiers+0x7e/0xa0
[   49.263303][ T3851]  fib6_del+0x783/0x8b0
[   49.263321][ T3851]  ? fib6_del+0x2b1/0x8b0
[   49.263345][ T3851]  __ip6_del_rt+0x5e/0x120
[   49.263432][ T3851]  ip6_del_rt+0x69/0x90
[   49.263449][ T3851]  __ipv6_ifa_notify+0x56e/0x850
[   49.263471][ T3851]  ? work_grab_pending+0x225/0x480
[   49.263499][ T3851]  ? __cancel_work+0x11a/0x180
[   49.263605][ T3851]  ipv6_del_addr+0x439/0x5b0
[   49.263626][ T3851]  inet6_addr_del+0x2fd/0x450
[   49.263647][ T3851]  addrconf_del_ifaddr+0xa7/0xe0
[   49.263666][ T3851]  inet6_ioctl+0x84/0x190
[   49.263732][ T3851]  ? ioctl_has_perm+0x257/0x2a0
[   49.263830][ T3851]  sock_do_ioctl+0x73/0x220
[   49.263872][ T3851]  sock_ioctl+0x41b/0x610
[   49.263910][ T3851]  ? __pfx_sock_ioctl+0x10/0x10
[   49.263936][ T3851]  __se_sys_ioctl+0xce/0x140
[   49.263986][ T3851]  __x64_sys_ioctl+0x43/0x50
[   49.264005][ T3851]  x64_sys_call+0x14b0/0x3000
[   49.264026][ T3851]  do_syscall_64+0xd8/0x2a0
[   49.264117][ T3851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.264140][ T3851] RIP: 0033:0x7f73a0b6f749
[   49.264228][ T3851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   49.264325][ T3851] RSP: 002b:00007f739f5ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   49.264342][ T3851] RAX: ffffffffffffffda RBX: 00007f73a0dc6090 RCX: 00007f73a0b6f749
[   49.264353][ T3851] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000004
[   49.264363][ T3851] RBP: 00007f739f5ae090 R08: 0000000000000000 R09: 0000000000000000
[   49.264374][ T3851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   49.264384][ T3851] R13: 00007f73a0dc6128 R14: 00007f73a0dc6090 R15: 00007ffc6f9f4f08
[   49.264401][ T3851]  </TASK>
[   49.578512][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.754644][ T3868] loop4: detected capacity change from 0 to 764
[   49.791764][ T3871] loop0: detected capacity change from 0 to 1024
[   49.809646][ T3871] EXT4-fs: Ignoring removed nobh option
[   49.815326][ T3871] EXT4-fs: Ignoring removed bh option
[   49.840389][ T3871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.961943][ T3871] bond1: option xmit_hash_policy: invalid value (8)
[   49.970122][ T3871] bond1 (unregistering): Released all slaves
[   50.076026][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.148275][ T3885] loop2: detected capacity change from 0 to 8192
[   50.271965][ T3890] syz.3.142 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   50.329883][ T3890] loop3: detected capacity change from 0 to 1024
[   50.344393][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.358826][ T3890] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   50.369787][ T3890] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   50.382439][ T3897] netlink: 88 bytes leftover after parsing attributes in process `syz.0.144'.
[   50.437639][ T3890] JBD2: no valid journal superblock found
[   50.443449][ T3890] EXT4-fs (loop3): Could not load journal inode
[   50.463907][ T3890] netlink: 48 bytes leftover after parsing attributes in process `syz.3.142'.
[   50.492257][ T3891] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2069)
[   50.501323][ T3891] FAT-fs (loop2): Filesystem has been set read-only
[   50.508124][ T3891] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2069)
[   50.538455][ T3891] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[   50.547372][ T3330] syz_tun (unregistering): left allmulticast mode
[   50.631200][ T3914] netlink: 'syz.3.151': attribute type 1 has an invalid length.
[   50.659246][ T3902] loop0: detected capacity change from 0 to 8192
[   50.675662][  T838] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.738832][  T838] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.799279][  T838] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.956204][  T838] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.072969][ T3941] netlink: 88 bytes leftover after parsing attributes in process `syz.1.158'.
[   51.092241][ T3945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.156'.
[   51.101226][ T3945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.156'.
[   51.119538][ T3945] loop3: detected capacity change from 0 to 512
[   51.206962][ T3947] loop4: detected capacity change from 0 to 1024
[   51.253637][ T3920] chnl_net:caif_netlink_parms(): no params data found
[   51.262889][ T3945] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   51.271188][ T3945] EXT4-fs (loop3): orphan cleanup on readonly fs
[   51.281665][ T3945] EXT4-fs error (device loop3): ext4_do_update_inode:5628: inode #16: comm +}[@: corrupted inode contents
[   51.293446][ T3945] EXT4-fs (loop3): Remounting filesystem read-only
[   51.300153][ T3945] EXT4-fs (loop3): 1 truncate cleaned up
[   51.313938][ T3947] EXT4-fs: inline encryption not supported
[   51.357788][ T3947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.372266][ T3957] x_tables: duplicate underflow at hook 1
[   51.400790][ T3947] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.159: Allocating blocks 385-513 which overlap fs metadata
[   51.417301][ T3947] EXT4-fs (loop4): pa ffff888106e80070: logic 16, phys. 129, len 24
[   51.425507][ T3947] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8
[   51.435910][   T69] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   51.436176][ T3947] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28
[   51.446729][   T69] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   51.446859][   T69] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[   51.459226][ T3947] EXT4-fs (loop4): This should not happen!! Data will be lost
[   51.459226][ T3947] 
[   51.459245][ T3947] EXT4-fs (loop4): Total free blocks count 0
[   51.459262][ T3947] EXT4-fs (loop4): Free/Dirty block details
[   51.490491][ T3945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   51.495670][ T3947] EXT4-fs (loop4): free_blocks=128
[   51.495690][ T3947] EXT4-fs (loop4): dirty_blocks=0
[   51.495711][ T3947] EXT4-fs (loop4): Block reservation details
[   51.502185][ T3945] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.514205][ T3947] EXT4-fs (loop4): i_reserved_data_blocks=0
[   51.568822][ T3947] syz.4.159 (3947) used greatest stack depth: 9576 bytes left
[   51.636174][   T29] kauditd_printk_skb: 199 callbacks suppressed
[   51.636265][   T29] audit: type=1400 audit(1764812559.696:571): avc:  denied  { write } for  pid=3927 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   51.664101][   T29] audit: type=1400 audit(1764812559.716:572): avc:  denied  { name_bind } for  pid=3927 comm="+}[@" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   51.737121][ T3969] Cannot find add_set index 0 as target
[   51.751481][ T3920] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.755258][   T29] audit: type=1400 audit(1764812559.746:573): avc:  denied  { read } for  pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   51.758746][ T3920] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.787110][ T3920] bridge_slave_0: entered allmulticast mode
[   51.793696][ T3920] bridge_slave_0: entered promiscuous mode
[   51.800771][ T3920] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.807955][ T3920] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.815838][ T3920] bridge_slave_1: entered allmulticast mode
[   51.822345][ T3920] bridge_slave_1: entered promiscuous mode
[   51.828673][  T838] bridge_slave_1: left allmulticast mode
[   51.834334][  T838] bridge_slave_1: left promiscuous mode
[   51.840163][  T838] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.876105][  T838] bridge_slave_0: left allmulticast mode
[   51.881857][  T838] bridge_slave_0: left promiscuous mode
[   51.887647][  T838] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.908257][ T3979] netlink: 'syz.3.166': attribute type 1 has an invalid length.
[   51.916158][ T3979] netlink: 224 bytes leftover after parsing attributes in process `syz.3.166'.
[   51.952264][  T838] dvmrp8 (unregistering): left allmulticast mode
[   52.006868][  T838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   52.017006][  T838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   52.027178][  T838] bond0 (unregistering): Released all slaves
[   52.086805][ T3920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.103852][ T3920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.159561][ T3996] loop1: detected capacity change from 0 to 1024
[   52.178688][ T3996] EXT4-fs: inline encryption not supported
[   52.184694][  T838] hsr_slave_0: left promiscuous mode
[   52.197690][ T3996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.210546][  T838] hsr_slave_1: left promiscuous mode
[   52.218037][   T29] audit: type=1326 audit(1764812560.276:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357f27f749 code=0x7ffc0000
[   52.241492][   T29] audit: type=1326 audit(1764812560.276:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357f27f749 code=0x7ffc0000
[   52.264776][   T29] audit: type=1326 audit(1764812560.276:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f357f27f749 code=0x7ffc0000
[   52.265466][  T838] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.288213][   T29] audit: type=1326 audit(1764812560.276:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357f27f749 code=0x7ffc0000
[   52.295468][  T838] batman_adv: batadv0: Removing interface: batadv_slave_0
[   52.318709][   T29] audit: type=1326 audit(1764812560.276:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357f27f749 code=0x7ffc0000
[   52.349082][   T29] audit: type=1326 audit(1764812560.276:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f357f27f749 code=0x7ffc0000
[   52.372379][   T29] audit: type=1326 audit(1764812560.276:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357f27f749 code=0x7ffc0000
[   52.404673][  T838] veth1_macvtap: left promiscuous mode
[   52.410271][  T838] veth0_macvtap: left promiscuous mode
[   52.415836][  T838] veth1_vlan: left promiscuous mode
[   52.421095][  T838] veth0_vlan: left promiscuous mode
[   52.428493][ T3996] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   52.496258][  T838] team0 (unregistering): Port device team_slave_1 removed
[   52.503738][ T4011] program syz.1.170 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   52.513260][  T838] team0 (unregistering): Port device team_slave_0 removed
[   52.550896][ T4015] FAULT_INJECTION: forcing a failure.
[   52.550896][ T4015] name failslab, interval 1, probability 0, space 0, times 0
[   52.563756][ T4015] CPU: 0 UID: 0 PID: 4015 Comm: syz.3.174 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   52.563789][ T4015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   52.563806][ T4015] Call Trace:
[   52.563815][ T4015]  <TASK>
[   52.563824][ T4015]  __dump_stack+0x1d/0x30
[   52.563847][ T4015]  dump_stack_lvl+0xe8/0x140
[   52.563935][ T4015]  dump_stack+0x15/0x1b
[   52.564018][ T4015]  should_fail_ex+0x265/0x280
[   52.564039][ T4015]  should_failslab+0x8c/0xb0
[   52.564062][ T4015]  kmem_cache_alloc_noprof+0x50/0x480
[   52.564134][ T4015]  ? audit_log_start+0x342/0x720
[   52.564161][ T4015]  ? avc_has_perm_noaudit+0x1b1/0x200
[   52.564243][ T4015]  audit_log_start+0x342/0x720
[   52.564273][ T4015]  selinux_inode_setxattr+0x613/0x6e0
[   52.564304][ T4015]  security_inode_setxattr+0x13a/0x1b0
[   52.564407][ T4015]  __vfs_setxattr_locked+0x83/0x1c0
[   52.564433][ T4015]  vfs_setxattr+0x132/0x270
[   52.564485][ T4015]  file_setxattr+0x139/0x1b0
[   52.564581][ T4015]  path_setxattrat+0x290/0x310
[   52.564629][ T4015]  __x64_sys_fsetxattr+0x6b/0x80
[   52.564721][ T4015]  x64_sys_call+0x23c4/0x3000
[   52.564754][ T4015]  do_syscall_64+0xd8/0x2a0
[   52.564819][ T4015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.564847][ T4015] RIP: 0033:0x7f678c0df749
[   52.564867][ T4015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   52.564890][ T4015] RSP: 002b:00007f678ab3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[   52.564960][ T4015] RAX: ffffffffffffffda RBX: 00007f678c335fa0 RCX: 00007f678c0df749
[   52.565051][ T4015] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007
[   52.565062][ T4015] RBP: 00007f678ab3f090 R08: 0000000000000001 R09: 0000000000000000
[   52.565149][ T4015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   52.565160][ T4015] R13: 00007f678c336038 R14: 00007f678c335fa0 R15: 00007ffed6e7acf8
[   52.565178][ T4015]  </TASK>
[   52.767091][ T3920] team0: Port device team_slave_0 added
[   52.773923][ T3920] team0: Port device team_slave_1 added
[   52.825560][ T3920] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.832559][ T3920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   52.858665][ T3920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.873389][ T3920] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.880425][ T3920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   52.906869][ T3920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.938218][ T3920] hsr_slave_0: entered promiscuous mode
[   52.944558][ T3920] hsr_slave_1: entered promiscuous mode
[   52.950905][ T3920] debugfs: 'hsr0' already exists in 'hsr'
[   52.956840][ T3920] Cannot create hsr debugfs directory
[   53.008399][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.084723][ T4041] loop1: detected capacity change from 0 to 1024
[   53.167309][ T4041] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   53.178536][ T4041] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   53.202843][ T4041] JBD2: no valid journal superblock found
[   53.208733][ T4041] EXT4-fs (loop1): Could not load journal inode
[   53.300617][ T4055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.178'.
[   53.309624][ T4055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.178'.
[   53.326343][ T4055] loop3: detected capacity change from 0 to 512
[   53.351109][ T4055] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   53.359443][ T4055] EXT4-fs (loop3): orphan cleanup on readonly fs
[   53.368190][ T4055] EXT4-fs error (device loop3): ext4_do_update_inode:5628: inode #16: comm +}[@: corrupted inode contents
[   53.379915][ T4055] EXT4-fs (loop3): Remounting filesystem read-only
[   53.386566][ T4055] EXT4-fs (loop3): 1 truncate cleaned up
[   53.403434][ T3920] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   53.413893][ T3920] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   53.424052][ T3920] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   53.436256][ T3920] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   53.525872][ T4063] futex_wake_op: syz.4.180 tries to shift op by 35; fix this program
[   53.622657][  T551] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   53.633334][  T551] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   53.640306][ T3920] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.651181][  T551] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[   53.672998][ T4041] netlink: 48 bytes leftover after parsing attributes in process `syz.1.177'.
[   53.688554][ T3920] 8021q: adding VLAN 0 to HW filter on device team0
[   53.690236][ T4055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   53.708191][ T4055] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.714202][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.724327][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.765678][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.772855][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.886460][ T4083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'.
[   53.993481][ T4098] mmap: syz.3.187 (4098) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   54.025553][ T3920] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.061173][ T4106] loop3: detected capacity change from 0 to 512
[   54.101949][ T4106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   54.117291][ T4110] loop0: detected capacity change from 0 to 512
[   54.171146][ T4106] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.182349][ T4110] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   54.202835][ T4110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.228579][ T4098] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.187: bg 0: block 360: padding at end of block bitmap is not set
[   54.261353][ T4110] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.290122][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   54.369333][ T3920] veth0_vlan: entered promiscuous mode
[   54.384181][ T3920] veth1_vlan: entered promiscuous mode
[   54.432770][ T3920] veth0_macvtap: entered promiscuous mode
[   54.454231][ T3920] veth1_macvtap: entered promiscuous mode
[   54.471000][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.475153][ T3920] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.494864][ T3920] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.522512][  T838] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.549609][ T4156] netlink: 'syz.0.195': attribute type 1 has an invalid length.
[   54.553220][  T838] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.606954][  T838] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.635501][  T838] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.753623][ T4162] loop3: detected capacity change from 0 to 1024
[   54.851924][ T4172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.196'.
[   54.860909][ T4172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.196'.
[   54.878394][ T4172] loop0: detected capacity change from 0 to 512
[   54.926396][ T4172] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   54.934598][ T4172] EXT4-fs (loop0): orphan cleanup on readonly fs
[   54.943902][ T4172] EXT4-fs error (device loop0): ext4_do_update_inode:5628: inode #16: comm +}[@: corrupted inode contents
[   54.955926][ T4172] EXT4-fs (loop0): Remounting filesystem read-only
[   54.962657][ T4172] EXT4-fs (loop0): 1 truncate cleaned up
[   54.968671][   T31] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   54.979233][   T31] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   54.993647][ T4162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.131640][   T31] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[   55.159674][ T4172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   55.173627][ T4172] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.927922][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.128386][ T4199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.199'.
[   56.137381][ T4199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.199'.
[   56.156153][ T4199] loop1: detected capacity change from 0 to 512
[   56.211340][ T4199] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   56.219670][ T4199] EXT4-fs (loop1): orphan cleanup on readonly fs
[   56.239886][ T4199] EXT4-fs error (device loop1): ext4_do_update_inode:5628: inode #16: comm +}[@: corrupted inode contents
[   56.251715][ T4199] EXT4-fs (loop1): Remounting filesystem read-only
[   56.258564][ T4199] EXT4-fs (loop1): 1 truncate cleaned up
[   56.272144][   T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   56.282836][   T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   56.323404][ T4204] netlink: 'syz.0.205': attribute type 1 has an invalid length.
[   56.554781][   T37] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[   56.565634][ T4199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   56.578576][ T4199] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.743328][   T29] kauditd_printk_skb: 208 callbacks suppressed
[   56.743343][   T29] audit: type=1400 audit(1764812564.796:769): avc:  denied  { create } for  pid=4216 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   56.809130][ T4215] loop4: detected capacity change from 0 to 512
[   56.818644][ T4215] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.209: bad orphan inode 13
[   56.829247][ T4215] ext4_test_bit(bit=12, block=4) = 1
[   56.834648][ T4215] is_bad_inode(inode)=0
[   56.838827][ T4215] NEXT_ORPHAN(inode)=0
[   56.842927][ T4215] max_ino=32
[   56.846144][ T4215] i_nlink=1
[   56.849908][ T4215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.859212][   T29] audit: type=1400 audit(1764812564.836:770): avc:  denied  { write } for  pid=4216 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   56.882014][   T29] audit: type=1400 audit(1764812564.836:771): avc:  denied  { nlmsg_write } for  pid=4216 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   56.903780][   T29] audit: type=1400 audit(1764812564.876:772): avc:  denied  { mounton } for  pid=4213 comm="syz.4.209" path="/43/file1" dev="tmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   56.906938][ T4225] can0: slcan on ptm0.
[   56.931084][ T4215] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.209: Unrecognised inode hash code 20
[   56.942449][ T4215] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.209: Corrupt directory, running e2fsck is recommended
[   56.955883][ T4215] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.209: Unrecognised inode hash code 20
[   56.967270][ T4215] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.209: Corrupt directory, running e2fsck is recommended
[   57.009279][   T29] audit: type=1400 audit(1764812565.016:773): avc:  denied  { add_name } for  pid=4213 comm="syz.4.209" name="control" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   57.030194][   T29] audit: type=1400 audit(1764812565.016:774): avc:  denied  { create } for  pid=4213 comm="syz.4.209" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   57.050539][   T29] audit: type=1400 audit(1764812565.016:775): avc:  denied  { ioctl } for  pid=4224 comm="syz.0.212" path="socket:[7594]" dev="sockfs" ino=7594 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   57.075021][   T29] audit: type=1400 audit(1764812565.016:776): avc:  denied  { module_request } for  pid=4224 comm="syz.0.212" kmod="netdev-rose0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   57.096723][   T29] audit: type=1400 audit(1764812565.046:777): avc:  denied  { sys_module } for  pid=4224 comm="syz.0.212" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   57.117693][   T29] audit: type=1400 audit(1764812565.046:778): avc:  denied  { read } for  pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   57.165096][ T4225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'.
[   57.186292][ T4219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'.
[   57.257618][ T3334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.275915][ T4224] can0 (unregistered): slcan off ptm0.
[   57.346078][ T4250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.213'.
[   57.355041][ T4250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.213'.
[   57.372770][ T4250] loop1: detected capacity change from 0 to 512
[   57.476637][ T4250] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   57.484865][ T4250] EXT4-fs (loop1): orphan cleanup on readonly fs
[   57.494128][ T4250] EXT4-fs error (device loop1): ext4_do_update_inode:5628: inode #16: comm +}[@: corrupted inode contents
[   57.505864][ T4250] EXT4-fs (loop1): Remounting filesystem read-only
[   57.512578][ T4250] EXT4-fs (loop1): 1 truncate cleaned up
[   57.642041][ T4259] capability: warning: `syz.0.218' uses 32-bit capabilities (legacy support in use)
[   57.743471][   T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   57.754094][   T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   57.797856][ T4271] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.823606][   T31] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[   57.844497][ T4250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   57.857366][ T4250] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.240776][ T4313] FAULT_INJECTION: forcing a failure.
[   58.240776][ T4313] name failslab, interval 1, probability 0, space 0, times 0
[   58.253652][ T4313] CPU: 0 UID: 0 PID: 4313 Comm: syz.1.234 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   58.253687][ T4313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   58.253706][ T4313] Call Trace:
[   58.253715][ T4313]  <TASK>
[   58.253725][ T4313]  __dump_stack+0x1d/0x30
[   58.253750][ T4313]  dump_stack_lvl+0xe8/0x140
[   58.253777][ T4313]  dump_stack+0x15/0x1b
[   58.253854][ T4313]  should_fail_ex+0x265/0x280
[   58.253881][ T4313]  ? resv_map_alloc+0x32/0x190
[   58.253914][ T4313]  should_failslab+0x8c/0xb0
[   58.253974][ T4313]  __kmalloc_cache_noprof+0x4c/0x4a0
[   58.254143][ T4313]  ? vfs_write+0x7e8/0x960
[   58.254172][ T4313]  resv_map_alloc+0x32/0x190
[   58.254252][ T4313]  hugetlbfs_get_inode+0x67/0x370
[   58.254295][ T4313]  hugetlb_file_setup+0x192/0x3d0
[   58.254334][ T4313]  ksys_mmap_pgoff+0x157/0x310
[   58.254412][ T4313]  x64_sys_call+0x16bb/0x3000
[   58.254442][ T4313]  do_syscall_64+0xd8/0x2a0
[   58.254533][ T4313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.254673][ T4313] RIP: 0033:0x7f357f27f749
[   58.254747][ T4313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.254766][ T4313] RSP: 002b:00007f357dce7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   58.254791][ T4313] RAX: ffffffffffffffda RBX: 00007f357f4d5fa0 RCX: 00007f357f27f749
[   58.254807][ T4313] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000
[   58.254828][ T4313] RBP: 00007f357dce7090 R08: ffffffffffffffff R09: 0000000000000000
[   58.254841][ T4313] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001
[   58.254853][ T4313] R13: 00007f357f4d6038 R14: 00007f357f4d5fa0 R15: 00007ffe955bebe8
[   58.254877][ T4313]  </TASK>
[   58.529127][ T4324] IPVS: set_ctl: invalid protocol: 92 172.20.20.46:20001
[   58.564025][ T4332] $Hÿ: renamed from bond0 (while UP)
[   58.579488][ T4332] $Hÿ: entered promiscuous mode
[   58.584611][ T4332] bond_slave_0: entered promiscuous mode
[   58.590533][ T4332] bond_slave_1: entered promiscuous mode
[   58.634023][ T4334] loop5: detected capacity change from 0 to 512
[   58.792803][ T4338] __nla_validate_parse: 1 callbacks suppressed
[   58.792821][ T4338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.240'.
[   58.807962][ T4338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.240'.
[   58.825715][ T4338] loop1: detected capacity change from 0 to 512
[   58.847286][ T4338] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   58.855719][ T4338] EXT4-fs (loop1): orphan cleanup on readonly fs
[   58.865173][ T4338] EXT4-fs error (device loop1): ext4_do_update_inode:5628: inode #16: comm +}[@: corrupted inode contents
[   58.877161][ T4338] EXT4-fs (loop1): Remounting filesystem read-only
[   58.883916][ T4338] EXT4-fs (loop1): 1 truncate cleaned up
[   58.997902][ T4334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.103404][ T4334] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.140028][   T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   59.150678][   T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   59.161703][ T4334] SELinux:  Context @ is not valid (left unmapped).
[   59.162045][   T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[   59.182005][ T4338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   59.195236][ T4338] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.270223][ T3920] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.326453][ T4352] netlink: 24 bytes leftover after parsing attributes in process `syz.5.246'.
[   59.340428][ T4352] netlink: 48 bytes leftover after parsing attributes in process `syz.5.246'.
[   59.358415][ T4352] program syz.5.246 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   59.475403][ T4358] FAULT_INJECTION: forcing a failure.
[   59.475403][ T4358] name failslab, interval 1, probability 0, space 0, times 0
[   59.488216][ T4358] CPU: 0 UID: 0 PID: 4358 Comm: syz.1.250 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   59.488257][ T4358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   59.488282][ T4358] Call Trace:
[   59.488296][ T4358]  <TASK>
[   59.488305][ T4358]  __dump_stack+0x1d/0x30
[   59.488328][ T4358]  dump_stack_lvl+0xe8/0x140
[   59.488348][ T4358]  dump_stack+0x15/0x1b
[   59.488366][ T4358]  should_fail_ex+0x265/0x280
[   59.488396][ T4358]  ? rtnl_newlink+0x5c/0x1360
[   59.488466][ T4358]  should_failslab+0x8c/0xb0
[   59.488501][ T4358]  __kmalloc_cache_noprof+0x4c/0x4a0
[   59.488540][ T4358]  ? __pfx_rtnl_newlink+0x10/0x10
[   59.488574][ T4358]  rtnl_newlink+0x5c/0x1360
[   59.488656][ T4358]  ? 0xffffffffa0201658
[   59.488702][ T4358]  ? copy_from_kernel_nofault+0x60/0x200
[   59.488786][ T4358]  ? copy_from_kernel_nofault+0x19d/0x200
[   59.488896][ T4358]  ? copy_from_kernel_nofault+0x188/0x200
[   59.488929][ T4358]  ? bpf_probe_read_compat+0x126/0x130
[   59.488949][ T4358]  ? __rcu_read_unlock+0x34/0x70
[   59.488993][ T4358]  ? bpf_trace_run3+0x12c/0x1d0
[   59.489075][ T4358]  ? __memcg_slab_free_hook+0x135/0x230
[   59.489097][ T4358]  ? __rcu_read_unlock+0x4f/0x70
[   59.489138][ T4358]  ? avc_has_perm_noaudit+0x1b1/0x200
[   59.489198][ T4358]  ? cred_has_capability+0x210/0x280
[   59.489249][ T4358]  ? selinux_capable+0x31/0x40
[   59.489296][ T4358]  ? security_capable+0x83/0x90
[   59.489322][ T4358]  ? ns_capable+0x7d/0xb0
[   59.489350][ T4358]  ? __pfx_rtnl_newlink+0x10/0x10
[   59.489395][ T4358]  rtnetlink_rcv_msg+0x5fe/0x6d0
[   59.489465][ T4358]  netlink_rcv_skb+0x123/0x220
[   59.489493][ T4358]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   59.489539][ T4358]  rtnetlink_rcv+0x1c/0x30
[   59.489649][ T4358]  netlink_unicast+0x5c0/0x690
[   59.489676][ T4358]  netlink_sendmsg+0x58b/0x6b0
[   59.489704][ T4358]  ? __pfx_netlink_sendmsg+0x10/0x10
[   59.489771][ T4358]  __sock_sendmsg+0x145/0x180
[   59.489803][ T4358]  ____sys_sendmsg+0x31e/0x4a0
[   59.489908][ T4358]  ___sys_sendmsg+0x17b/0x1d0
[   59.489987][ T4358]  __x64_sys_sendmsg+0xd4/0x160
[   59.490074][ T4358]  x64_sys_call+0x17ba/0x3000
[   59.490116][ T4358]  do_syscall_64+0xd8/0x2a0
[   59.490145][ T4358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.490173][ T4358] RIP: 0033:0x7f357f27f749
[   59.490187][ T4358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.490236][ T4358] RSP: 002b:00007f357dce7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   59.490265][ T4358] RAX: ffffffffffffffda RBX: 00007f357f4d5fa0 RCX: 00007f357f27f749
[   59.490280][ T4358] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000005
[   59.490308][ T4358] RBP: 00007f357dce7090 R08: 0000000000000000 R09: 0000000000000000
[   59.490400][ T4358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   59.490417][ T4358] R13: 00007f357f4d6038 R14: 00007f357f4d5fa0 R15: 00007ffe955bebe8
[   59.490441][ T4358]  </TASK>
[   59.792405][ T4366] ip6erspan0: entered allmulticast mode
[   59.793279][ T4365] loop0: detected capacity change from 0 to 512
[   59.829759][ T4360] loop4: detected capacity change from 0 to 1024
[   59.866677][ T4360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.946568][ T4384] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0
[   59.956367][ T4382] IPVS: stopping master sync thread 4384 ...
[   59.976652][ T4382] loop1: detected capacity change from 0 to 1024
[   59.983680][ T4382] EXT4-fs: Ignoring removed nobh option
[   59.989325][ T4382] EXT4-fs: Ignoring removed bh option
[   60.008308][ T4382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.051518][ T4382] EXT4-fs (loop1): pa ffff888106c640e0: logic 1, phys. 129, len 4
[   60.059508][ T4382] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 2, pa_free 3
[   60.073287][ T3334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.123505][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.583797][ T4404] 9pnet_fd: Insufficient options for proto=fd
[   60.629109][ T4403] loop1: detected capacity change from 0 to 256
[   60.645465][ T4403] FAT-fs (loop1): bogus number of FAT sectors
[   60.651980][ T4403] FAT-fs (loop1): Can't find a valid FAT filesystem
[   60.685851][ T4410] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4410 comm=syz.5.266
[   60.698341][ T4410] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4410 comm=syz.5.266
[   60.715406][ T4412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.267'.
[   60.832619][ T4421] bridge0: entered promiscuous mode
[   60.865064][ T4421] macsec1: entered allmulticast mode
[   60.870417][ T4421] bridge0: entered allmulticast mode
[   60.916742][ T4412] netlink: 48 bytes leftover after parsing attributes in process `syz.3.267'.
[   60.970665][ T4434] netlink: 'syz.0.270': attribute type 1 has an invalid length.
[   61.072077][ T4434] 8021q: adding VLAN 0 to HW filter on device bond1
[   61.117584][ T4451] IPVS: stopping master sync thread 4452 ...
[   61.123700][ T4452] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0
[   61.141057][ T4445] loop3: detected capacity change from 0 to 1024
[   61.148401][ T4445] EXT4-fs: Ignoring removed nobh option
[   61.154156][ T4445] EXT4-fs: Ignoring removed bh option
[   61.182543][ T4445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.195500][ T4459] netlink: 'syz.0.274': attribute type 7 has an invalid length.
[   61.203393][ T4459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'.
[   61.231606][ T4462] FAULT_INJECTION: forcing a failure.
[   61.231606][ T4462] name failslab, interval 1, probability 0, space 0, times 0
[   61.244468][ T4462] CPU: 1 UID: 0 PID: 4462 Comm: syz.1.276 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   61.244503][ T4462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   61.244519][ T4462] Call Trace:
[   61.244598][ T4462]  <TASK>
[   61.244608][ T4462]  __dump_stack+0x1d/0x30
[   61.244683][ T4462]  dump_stack_lvl+0xe8/0x140
[   61.244707][ T4462]  dump_stack+0x15/0x1b
[   61.244732][ T4462]  should_fail_ex+0x265/0x280
[   61.244760][ T4462]  ? __pfx_proc_alloc_inode+0x10/0x10
[   61.244786][ T4462]  should_failslab+0x8c/0xb0
[   61.244824][ T4462]  kmem_cache_alloc_lru_noprof+0x55/0x490
[   61.244852][ T4462]  ? proc_alloc_inode+0x34/0x90
[   61.244878][ T4462]  ? __pfx_proc_alloc_inode+0x10/0x10
[   61.244940][ T4462]  proc_alloc_inode+0x34/0x90
[   61.244959][ T4462]  alloc_inode+0x40/0x170
[   61.244983][ T4462]  new_inode+0x1d/0xe0
[   61.245080][ T4462]  proc_pid_make_inode+0x1f/0xd0
[   61.245108][ T4462]  proc_pident_instantiate+0x44/0x180
[   61.245137][ T4462]  proc_pident_lookup+0x115/0x1a0
[   61.245234][ T4462]  proc_tgid_base_lookup+0x2b/0x40
[   61.245275][ T4462]  __lookup_slow+0x193/0x250
[   61.245321][ T4462]  lookup_slow+0x3c/0x60
[   61.245423][ T4462]  path_lookupat+0x2f7/0x500
[   61.245507][ T4462]  filename_lookup+0x147/0x340
[   61.245604][ T4462]  user_path_at+0x3e/0x130
[   61.245629][ T4462]  __se_sys_mount+0x25b/0x2e0
[   61.245660][ T4462]  ? fput+0x8f/0xc0
[   61.245702][ T4462]  __x64_sys_mount+0x67/0x80
[   61.245754][ T4462]  x64_sys_call+0x2cca/0x3000
[   61.245784][ T4462]  do_syscall_64+0xd8/0x2a0
[   61.245836][ T4462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.245927][ T4462] RIP: 0033:0x7f357f27f749
[   61.245944][ T4462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   61.245962][ T4462] RSP: 002b:00007f357dce7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   61.245985][ T4462] RAX: ffffffffffffffda RBX: 00007f357f4d5fa0 RCX: 00007f357f27f749
[   61.246002][ T4462] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000
[   61.246086][ T4462] RBP: 00007f357dce7090 R08: 0000000000000000 R09: 0000000000000000
[   61.246102][ T4462] R10: 0000000000001001 R11: 0000000000000246 R12: 0000000000000001
[   61.246118][ T4462] R13: 00007f357f4d6038 R14: 00007f357f4d5fa0 R15: 00007ffe955bebe8
[   61.246144][ T4462]  </TASK>
[   61.478409][ T4451] EXT4-fs (loop3): pa ffff888106c64070: logic 1, phys. 129, len 4
[   61.486438][ T4451] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 2, pa_free 3
[   61.559280][ T4474] loop4: detected capacity change from 0 to 1024
[   61.615203][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.633000][ T4474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   61.653042][ T4480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.282'.
[   61.684987][ T4474] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.724162][ T4474] EXT4-fs error (device loop4): ext4_map_blocks:813: inode #15: comm syz.4.277: lblock 0 mapped to illegal pblock 0 (length 1)
[   61.725953][ T4489] netlink: 'syz.3.285': attribute type 1 has an invalid length.
[   61.745494][ T4474] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   61.751856][   T29] kauditd_printk_skb: 250 callbacks suppressed
[   61.751890][   T29] audit: type=1400 audit(1764812569.806:1017): avc:  denied  { watch watch_reads } for  pid=4472 comm="syz.5.279" path="/15/file0" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   61.757904][ T4474] EXT4-fs (loop4): This should not happen!! Data will be lost
[   61.757904][ T4474] 
[   61.776643][ T4493] netlink: 'syz.0.286': attribute type 2 has an invalid length.
[   61.817386][ T3334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   61.820421][   T29] audit: type=1400 audit(1764812569.826:1018): avc:  denied  { getopt } for  pid=4490 comm="syz.0.286" laddr=172.20.20.170 lport=41905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   61.850917][ T4491] loop0: detected capacity change from 0 to 128
[   61.862151][ T4491] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   61.896213][ T4491] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   61.898806][ T4489] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.914131][ T4500] FAULT_INJECTION: forcing a failure.
[   61.914131][ T4500] name failslab, interval 1, probability 0, space 0, times 0
[   61.926866][ T4500] CPU: 1 UID: 0 PID: 4500 Comm: syz.4.287 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   61.926931][ T4500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   61.926947][ T4500] Call Trace:
[   61.926956][ T4500]  <TASK>
[   61.926966][ T4500]  __dump_stack+0x1d/0x30
[   61.926989][ T4500]  dump_stack_lvl+0xe8/0x140
[   61.927053][ T4500]  dump_stack+0x15/0x1b
[   61.927111][ T4500]  should_fail_ex+0x265/0x280
[   61.927139][ T4500]  should_failslab+0x8c/0xb0
[   61.927174][ T4500]  kmem_cache_alloc_noprof+0x50/0x480
[   61.927226][ T4500]  ? skb_clone+0x151/0x1f0
[   61.927257][ T4500]  skb_clone+0x151/0x1f0
[   61.927333][ T4500]  __netlink_deliver_tap+0x2c9/0x500
[   61.927363][ T4500]  netlink_unicast+0x66b/0x690
[   61.927387][ T4500]  netlink_sendmsg+0x58b/0x6b0
[   61.927452][ T4500]  ? __pfx_netlink_sendmsg+0x10/0x10
[   61.927481][ T4500]  __sock_sendmsg+0x145/0x180
[   61.927520][ T4500]  sock_write_iter+0x1a7/0x1f0
[   61.927571][ T4500]  ? __pfx_sock_write_iter+0x10/0x10
[   61.927607][ T4500]  vfs_write+0x52a/0x960
[   61.927643][ T4500]  ksys_write+0xda/0x1a0
[   61.927669][ T4500]  __x64_sys_write+0x40/0x50
[   61.927810][ T4500]  x64_sys_call+0x2847/0x3000
[   61.927832][ T4500]  do_syscall_64+0xd8/0x2a0
[   61.927866][ T4500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.927894][ T4500] RIP: 0033:0x7fc3dbe9f749
[   61.927912][ T4500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   61.927935][ T4500] RSP: 002b:00007fc3da907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   61.927957][ T4500] RAX: ffffffffffffffda RBX: 00007fc3dc0f5fa0 RCX: 00007fc3dbe9f749
[   61.928077][ T4500] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003
[   61.928092][ T4500] RBP: 00007fc3da907090 R08: 0000000000000000 R09: 0000000000000000
[   61.928107][ T4500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   61.928122][ T4500] R13: 00007fc3dc0f6038 R14: 00007fc3dc0f5fa0 R15: 00007ffd2141ee48
[   61.928157][ T4500]  </TASK>
[   61.928176][ T4500] netlink: 'syz.4.287': attribute type 1 has an invalid length.
[   62.129483][ T4509] netlink: 'syz.1.293': attribute type 2 has an invalid length.
[   62.130055][ T4500] netlink: 'syz.4.287': attribute type 4 has an invalid length.
[   62.152951][ T4500] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.287'.
[   62.165106][ T4501] syz_tun: entered allmulticast mode
[   62.171037][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   62.188662][ T4510] loop1: detected capacity change from 0 to 128
[   62.199089][ T4489] dvmrp8: entered allmulticast mode
[   62.209708][ T4513] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0
[   62.216538][ T4512] IPVS: stopping master sync thread 4513 ...
[   62.236445][ T4510] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   62.248835][ T4512] loop4: detected capacity change from 0 to 1024
[   62.258508][ T4488] syz_tun: left allmulticast mode
[   62.267710][ T4512] EXT4-fs: Ignoring removed nobh option
[   62.273349][ T4512] EXT4-fs: Ignoring removed bh option
[   62.301335][ T4510] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   62.313610][   T29] audit: type=1400 audit(1764812570.376:1019): avc:  denied  { ioctl } for  pid=4508 comm="syz.1.293" path="socket:[8002]" dev="sockfs" ino=8002 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   62.380279][ T4512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.394216][ T3324] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   62.409619][   T29] audit: type=1400 audit(1764812570.466:1020): avc:  denied  { execute } for  pid=4525 comm="syz.3.298" path="/56/cpu.stat" dev="tmpfs" ino=316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   62.451854][ T4512] EXT4-fs (loop4): pa ffff888106e80150: logic 1, phys. 129, len 4
[   62.459835][ T4512] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 2, pa_free 3
[   62.478846][   T29] audit: type=1400 audit(1764812570.496:1021): avc:  denied  { node_bind } for  pid=4525 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   62.552008][ T3334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.587986][ T4533] FAULT_INJECTION: forcing a failure.
[   62.587986][ T4533] name failslab, interval 1, probability 0, space 0, times 0
[   62.600839][ T4533] CPU: 0 UID: 0 PID: 4533 Comm: syz.4.300 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   62.600873][ T4533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   62.600888][ T4533] Call Trace:
[   62.600895][ T4533]  <TASK>
[   62.600903][ T4533]  __dump_stack+0x1d/0x30
[   62.600952][ T4533]  dump_stack_lvl+0xe8/0x140
[   62.600978][ T4533]  dump_stack+0x15/0x1b
[   62.601001][ T4533]  should_fail_ex+0x265/0x280
[   62.601030][ T4533]  should_failslab+0x8c/0xb0
[   62.601066][ T4533]  kmem_cache_alloc_noprof+0x50/0x480
[   62.601118][ T4533]  ? fcntl_getlk+0x3d/0x6e0
[   62.601151][ T4533]  ? avc_has_perm+0xf7/0x180
[   62.601175][ T4533]  fcntl_getlk+0x3d/0x6e0
[   62.601227][ T4533]  ? should_fail_ex+0xdb/0x280
[   62.601257][ T4533]  do_fcntl+0x7ae/0xf60
[   62.601285][ T4533]  __se_sys_fcntl+0xb1/0x120
[   62.601388][ T4533]  __x64_sys_fcntl+0x43/0x50
[   62.601423][ T4533]  x64_sys_call+0x2d6f/0x3000
[   62.601447][ T4533]  do_syscall_64+0xd8/0x2a0
[   62.601472][ T4533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.601511][ T4533] RIP: 0033:0x7fc3dbe9f749
[   62.601605][ T4533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.601624][ T4533] RSP: 002b:00007fc3da907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[   62.601644][ T4533] RAX: ffffffffffffffda RBX: 00007fc3dc0f5fa0 RCX: 00007fc3dbe9f749
[   62.601742][ T4533] RDX: 0000200000000380 RSI: 0000000000000005 RDI: 0000000000000004
[   62.601755][ T4533] RBP: 00007fc3da907090 R08: 0000000000000000 R09: 0000000000000000
[   62.601768][ T4533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   62.601807][ T4533] R13: 00007fc3dc0f6038 R14: 00007fc3dc0f5fa0 R15: 00007ffd2141ee48
[   62.601890][ T4533]  </TASK>
[   62.803079][ T4540] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   62.833829][   T29] audit: type=1326 audit(1764812570.876:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.4.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dbe9f749 code=0x7ffc0000
[   62.857281][   T29] audit: type=1326 audit(1764812570.876:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.4.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fc3dbe9f749 code=0x7ffc0000
[   62.880727][   T29] audit: type=1326 audit(1764812570.876:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.4.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dbe9f749 code=0x7ffc0000
[   62.884102][ T4543] xt_hashlimit: max too large, truncated to 1048576
[   62.910600][   T29] audit: type=1400 audit(1764812570.926:1025): avc:  denied  { create } for  pid=4542 comm="syz.4.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   62.919806][ T4543] xt_CT: You must specify a L4 protocol and not use inversions on it
[   62.930434][   T29] audit: type=1400 audit(1764812570.926:1026): avc:  denied  { ioctl } for  pid=4542 comm="syz.4.304" path="socket:[8918]" dev="sockfs" ino=8918 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   63.016350][ T4551] netlink: 'syz.3.303': attribute type 1 has an invalid length.
[   63.024045][ T4551] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.303'.
[   63.104430][ T4552] bridge0: port 3(syz_tun) entered blocking state
[   63.111049][ T4552] bridge0: port 3(syz_tun) entered disabled state
[   63.118308][ T4552] syz_tun: entered promiscuous mode
[   63.121616][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811b47ec00: rx timeout, send abort
[   63.124027][ T4552] bridge0: port 3(syz_tun) entered blocking state
[   63.138260][ T4552] bridge0: port 3(syz_tun) entered forwarding state
[   63.423380][ T4560] loop1: detected capacity change from 0 to 512
[   63.446178][ T4560] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   63.454501][ T4560] EXT4-fs (loop1): orphan cleanup on readonly fs
[   63.463466][ T4560] EXT4-fs error (device loop1): ext4_do_update_inode:5628: inode #16: comm +}[@: corrupted inode contents
[   63.621654][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811b2b8200: rx timeout, send abort
[   63.631780][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811b47ec00: abort rx timeout. Force session deactivation
[   63.945018][ T4564] __nla_validate_parse: 2 callbacks suppressed
[   63.945035][ T4564] netlink: 12 bytes leftover after parsing attributes in process `syz.5.309'.
[   63.960209][ T4564] netlink: 12 bytes leftover after parsing attributes in process `syz.5.309'.
[   64.129972][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811b2b8200: abort rx timeout. Force session deactivation
[   64.209462][ T4564] loop5: detected capacity change from 0 to 512
[   64.230277][ T4564] EXT4-fs (loop5): revision level too high, forcing read-only mode
[   64.238418][ T4564] EXT4-fs (loop5): orphan cleanup on readonly fs
[   64.275335][ T4560] EXT4-fs (loop1): Remounting filesystem read-only
[   64.282133][ T4560] EXT4-fs (loop1): 1 truncate cleaned up
[   64.288014][ T4361] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   64.298641][ T4361] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   64.309363][ T4361] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[   64.321017][ T4564] EXT4-fs error (device loop5): ext4_do_update_inode:5628: inode #16: comm +}[@: corrupted inode contents
[   64.333746][ T4564] EXT4-fs (loop5): Remounting filesystem read-only
[   64.340527][ T4564] EXT4-fs (loop5): 1 truncate cleaned up
[   64.340968][ T4560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   64.346794][  T825] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   64.359377][ T4560] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.369394][  T825] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   64.426256][  T825] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started
[   64.438561][ T4564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   64.451720][ T4564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.846777][ T4595] bridge0: port 3(syz_tun) entered blocking state
[   64.853362][ T4595] bridge0: port 3(syz_tun) entered disabled state
[   64.860707][ T4595] syz_tun: entered allmulticast mode
[   64.876410][ T4595] syz_tun: entered promiscuous mode
[   64.889221][ T4595] bridge0: port 3(syz_tun) entered blocking state
[   64.895813][ T4595] bridge0: port 3(syz_tun) entered forwarding state
[   65.093745][ T4599] loop5: detected capacity change from 0 to 2048
[   65.112871][ T4599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.126801][ T4610] netem: change failed
[   65.135595][ T4599] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.185577][ T4615] loop3: detected capacity change from 0 to 4096
[   65.211512][ T4615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.262183][ T4605] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.320: bg 0: block 345: padding at end of block bitmap is not set
[   65.277624][ T4605] EXT4-fs (loop5): Remounting filesystem read-only
[   65.542783][ T4639] netlink: 24 bytes leftover after parsing attributes in process `syz.4.327'.
[   65.553700][ T4641] 9pnet_fd: Insufficient options for proto=fd
[   65.590685][ T3920] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.711131][ T4647] netlink: 'syz.4.331': attribute type 4 has an invalid length.
[   65.745659][ T4647] netlink: 'syz.4.331': attribute type 4 has an invalid length.
[   65.835536][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.039285][ T4676] 9pnet_fd: Insufficient options for proto=fd
[   66.721353][ T4713] netlink: 'syz.4.348': attribute type 39 has an invalid length.
[   66.841061][ T4722] loop5: detected capacity change from 0 to 1024
[   66.948239][   T29] kauditd_printk_skb: 46 callbacks suppressed
[   66.948257][   T29] audit: type=1400 audit(1764812574.976:1061): avc:  denied  { sqpoll } for  pid=4727 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   66.989830][ T4722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.010916][ T4722] FAULT_INJECTION: forcing a failure.
[   67.010916][ T4722] name failslab, interval 1, probability 0, space 0, times 0
[   67.023737][ T4722] CPU: 1 UID: 0 PID: 4722 Comm: syz.5.351 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   67.023770][ T4722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   67.023786][ T4722] Call Trace:
[   67.023794][ T4722]  <TASK>
[   67.023803][ T4722]  __dump_stack+0x1d/0x30
[   67.023831][ T4722]  dump_stack_lvl+0xe8/0x140
[   67.023877][ T4722]  dump_stack+0x15/0x1b
[   67.023900][ T4722]  should_fail_ex+0x265/0x280
[   67.023928][ T4722]  should_failslab+0x8c/0xb0
[   67.024012][ T4722]  kmem_cache_alloc_noprof+0x50/0x480
[   67.024044][ T4722]  ? getname_flags+0x80/0x3b0
[   67.024189][ T4722]  ? __fget_files+0x184/0x1c0
[   67.024224][ T4722]  getname_flags+0x80/0x3b0
[   67.024336][ T4722]  path_listxattrat+0x7e/0x2a0
[   67.024384][ T4722]  __x64_sys_listxattr+0x4a/0x60
[   67.024465][ T4722]  x64_sys_call+0x2a62/0x3000
[   67.024542][ T4722]  do_syscall_64+0xd8/0x2a0
[   67.024575][ T4722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.024669][ T4722] RIP: 0033:0x7fbecb2cf749
[   67.024688][ T4722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   67.024764][ T4722] RSP: 002b:00007fbec9d37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2
[   67.024788][ T4722] RAX: ffffffffffffffda RBX: 00007fbecb525fa0 RCX: 00007fbecb2cf749
[   67.024870][ T4722] RDX: 0000000000100000 RSI: 0000000000000000 RDI: 0000200000000100
[   67.024885][ T4722] RBP: 00007fbec9d37090 R08: 0000000000000000 R09: 0000000000000000
[   67.024899][ T4722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   67.024913][ T4722] R13: 00007fbecb526038 R14: 00007fbecb525fa0 R15: 00007ffc5c686888
[   67.024965][ T4722]  </TASK>
[   67.245610][ T4740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.352'.
[   67.254800][ T4740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.352'.
[   67.276950][ T4740] loop0: detected capacity change from 0 to 512
[   67.296995][ T4740] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   67.305342][ T4740] EXT4-fs (loop0): orphan cleanup on readonly fs
[   67.317715][ T4740] EXT4-fs error (device loop0): ext4_do_update_inode:5628: inode #16: comm +}[@: corrupted inode contents
[   67.332438][ T4740] EXT4-fs (loop0): Remounting filesystem read-only
[   67.339301][ T4740] EXT4-fs (loop0): 1 truncate cleaned up
[   67.345383][  T551] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   67.355944][  T551] Quota error (device loop0): write_blk: dquota write failed
[   67.363339][  T551] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries
[   67.373375][  T551] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   67.383923][  T551] Quota error (device loop0): write_blk: dquota write failed
[   67.391368][  T551] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list
[   67.806445][ T4737] bridge0: entered promiscuous mode
[   67.839910][   T29] audit: type=1400 audit(1764812575.866:1062): avc:  denied  { setopt } for  pid=4736 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   67.860673][  T551] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[   67.870817][  T551] Quota error (device loop0): v2_write_file_info: Can't write info structure
[   67.871301][ T4753] bridge0: left promiscuous mode
[   67.890807][ T4745] sd 0:0:1:0: device reset
[   67.891338][  T551] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   67.905563][ T4740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   67.949379][   T29] audit: type=1400 audit(1764812575.996:1063): avc:  denied  { create } for  pid=4736 comm="syz.4.356" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   67.970373][   T29] audit: type=1400 audit(1764812575.996:1064): avc:  denied  { write } for  pid=4736 comm="syz.4.356" name="file0" dev="tmpfs" ino=395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   68.251488][ T4779] loop0: detected capacity change from 0 to 512
[   68.272569][ T4779] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   68.281935][ T4779] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   68.291733][ T4779] EXT4-fs (loop0): group descriptors corrupted!
[   68.550759][ T4811] loop4: detected capacity change from 0 to 512
[   68.576969][ T4811] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   68.585761][ T4811] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   68.647380][ T4811] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.369: Allocating blocks 41-42 which overlap fs metadata
[   68.681927][ T4811] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.369: Failed to acquire dquot type 1
[   68.695294][ T4811] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   68.710028][ T4811] EXT4-fs error (device loop4): ext4_do_update_inode:5628: inode #12: comm syz.4.369: corrupted inode contents
[   68.727889][ T4811] EXT4-fs error (device loop4): ext4_dirty_inode:6513: inode #12: comm syz.4.369: mark_inode_dirty error
[   68.739493][ T4811] EXT4-fs error (device loop4): ext4_do_update_inode:5628: inode #12: comm syz.4.369: corrupted inode contents
[   68.751706][ T4811] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.369: mark_inode_dirty error
[   68.773868][ T4823] vhci_hcd: invalid port number 9
[   68.779027][ T4823] vhci_hcd: invalid port number 9
[   68.792986][ T4811] EXT4-fs error (device loop4): ext4_do_update_inode:5628: inode #12: comm syz.4.369: corrupted inode contents
[   68.841342][ T4811] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem
[   68.858369][ T4829] FAULT_INJECTION: forcing a failure.
[   68.858369][ T4829] name failslab, interval 1, probability 0, space 0, times 0
[   68.871147][ T4829] CPU: 1 UID: 0 PID: 4829 Comm: syz.1.375 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   68.871237][ T4829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   68.871250][ T4829] Call Trace:
[   68.871257][ T4829]  <TASK>
[   68.871265][ T4829]  __dump_stack+0x1d/0x30
[   68.871363][ T4829]  dump_stack_lvl+0xe8/0x140
[   68.871422][ T4829]  dump_stack+0x15/0x1b
[   68.871444][ T4829]  should_fail_ex+0x265/0x280
[   68.871467][ T4829]  ? __pfx_proc_alloc_inode+0x10/0x10
[   68.871486][ T4829]  should_failslab+0x8c/0xb0
[   68.871518][ T4829]  kmem_cache_alloc_lru_noprof+0x55/0x490
[   68.871607][ T4829]  ? proc_alloc_inode+0x34/0x90
[   68.871627][ T4829]  ? __pfx_proc_alloc_inode+0x10/0x10
[   68.871661][ T4829]  proc_alloc_inode+0x34/0x90
[   68.871684][ T4829]  alloc_inode+0x40/0x170
[   68.871766][ T4829]  new_inode+0x1d/0xe0
[   68.871851][ T4829]  proc_pid_make_inode+0x1f/0xd0
[   68.871883][ T4829]  proc_pident_instantiate+0x44/0x180
[   68.871969][ T4829]  proc_pident_lookup+0x115/0x1a0
[   68.872004][ T4829]  proc_tgid_base_lookup+0x2b/0x40
[   68.872029][ T4829]  __lookup_slow+0x193/0x250
[   68.872148][ T4829]  lookup_slow+0x3c/0x60
[   68.872253][ T4829]  path_lookupat+0x2f7/0x500
[   68.872294][ T4829]  filename_lookup+0x147/0x340
[   68.872412][ T4829]  user_path_at+0x3e/0x130
[   68.872465][ T4829]  __se_sys_mount+0x25b/0x2e0
[   68.872497][ T4829]  ? fput+0x8f/0xc0
[   68.872530][ T4829]  __x64_sys_mount+0x67/0x80
[   68.872554][ T4829]  x64_sys_call+0x2cca/0x3000
[   68.872637][ T4829]  do_syscall_64+0xd8/0x2a0
[   68.872667][ T4829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.872696][ T4829] RIP: 0033:0x7f357f27f749
[   68.872712][ T4829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.872731][ T4829] RSP: 002b:00007f357dce7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   68.872827][ T4829] RAX: ffffffffffffffda RBX: 00007f357f4d5fa0 RCX: 00007f357f27f749
[   68.872844][ T4829] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000
[   68.872914][ T4829] RBP: 00007f357dce7090 R08: 0000000000000000 R09: 0000000000000000
[   68.872926][ T4829] R10: 0000000000001001 R11: 0000000000000246 R12: 0000000000000001
[   68.872941][ T4829] R13: 00007f357f4d6038 R14: 00007f357f4d5fa0 R15: 00007ffe955bebe8
[   68.872965][ T4829]  </TASK>
[   69.107004][ T4811] EXT4-fs error (device loop4): ext4_do_update_inode:5628: inode #12: comm syz.4.369: corrupted inode contents
[   69.154301][ T4811] EXT4-fs error (device loop4): ext4_truncate:4633: inode #12: comm syz.4.369: mark_inode_dirty error
[   69.227976][ T4811] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem
[   69.243226][ T4811] EXT4-fs (loop4): 1 truncate cleaned up
[   69.357388][ T4850] FAULT_INJECTION: forcing a failure.
[   69.357388][ T4850] name failslab, interval 1, probability 0, space 0, times 0
[   69.370151][ T4850] CPU: 1 UID: 0 PID: 4850 Comm: syz.1.383 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   69.370185][ T4850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   69.370255][ T4850] Call Trace:
[   69.370264][ T4850]  <TASK>
[   69.370274][ T4850]  __dump_stack+0x1d/0x30
[   69.370361][ T4850]  dump_stack_lvl+0xe8/0x140
[   69.370383][ T4850]  dump_stack+0x15/0x1b
[   69.370402][ T4850]  should_fail_ex+0x265/0x280
[   69.370432][ T4850]  should_failslab+0x8c/0xb0
[   69.370468][ T4850]  kmem_cache_alloc_noprof+0x50/0x480
[   69.370540][ T4850]  ? alloc_empty_file+0x76/0x200
[   69.370616][ T4850]  alloc_empty_file+0x76/0x200
[   69.370776][ T4850]  alloc_file_pseudo+0xc6/0x160
[   69.370817][ T4850]  hugetlb_file_setup+0x2a6/0x3d0
[   69.370851][ T4850]  ksys_mmap_pgoff+0x157/0x310
[   69.370948][ T4850]  x64_sys_call+0x16bb/0x3000
[   69.370979][ T4850]  do_syscall_64+0xd8/0x2a0
[   69.371003][ T4850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.371096][ T4850] RIP: 0033:0x7f357f27f749
[   69.371111][ T4850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.371130][ T4850] RSP: 002b:00007f357dce7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   69.371155][ T4850] RAX: ffffffffffffffda RBX: 00007f357f4d5fa0 RCX: 00007f357f27f749
[   69.371171][ T4850] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000200000000000
[   69.371208][ T4850] RBP: 00007f357dce7090 R08: ffffffffffffffff R09: 0000000000000000
[   69.371220][ T4850] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001
[   69.371232][ T4850] R13: 00007f357f4d6038 R14: 00007f357f4d5fa0 R15: 00007ffe955bebe8
[   69.371255][ T4850]  </TASK>
[   69.735052][ T4860] netlink: 'syz.1.386': attribute type 1 has an invalid length.
[   69.776960][ T4860] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.455391][ T4881] netlink: 'syz.5.394': attribute type 1 has an invalid length.
[   70.503182][ T4881] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12)
[   70.509845][ T4881] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   70.517676][ T4881] vhci_hcd vhci_hcd.0: Device attached
[   70.666059][ T4886] vhci_hcd: connection closed
[   70.694181][ T1596] vhci_hcd: stop threads
[   70.703342][ T1596] vhci_hcd: release socket
[   70.707828][ T1596] vhci_hcd: disconnect device
[   70.712687][ T4016] vhci_hcd: vhci_device speed not set
[   70.795291][ T4898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'.
[   70.804223][ T4898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'.
[   70.821214][ T4898] loop1: detected capacity change from 0 to 512
[   70.846352][ T4898] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   70.854480][ T4898] EXT4-fs (loop1): orphan cleanup on readonly fs
[   70.864258][ T4898] EXT4-fs error (device loop1): ext4_do_update_inode:5628: inode #16: comm +}[@: corrupted inode contents
[   70.876433][ T4898] EXT4-fs (loop1): Remounting filesystem read-only
[   70.883078][ T4898] EXT4-fs (loop1): 1 truncate cleaned up
[   70.892214][   T52] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   70.902892][   T52] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   70.934059][   T52] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[   71.121296][ T4906] xt_TCPMSS: Only works on TCP SYN packets
[   71.279931][ T4909] loop5: detected capacity change from 0 to 128
[   71.341600][ T4909] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   71.360420][ T4915] netlink: 'syz.0.402': attribute type 1 has an invalid length.
[   71.429867][ T4915] 8021q: adding VLAN 0 to HW filter on device bond2
[   71.540453][ T4929] loop5: detected capacity change from 0 to 2048
[   71.580644][ T4929] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.600845][ T4934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.410'.
[   71.637055][ T4939] loop1: detected capacity change from 0 to 512
[   71.650466][ T4938] loop0: detected capacity change from 0 to 128
[   71.671163][ T4939] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   71.691118][ T4941] veth0: entered promiscuous mode
[   71.728943][ T4938] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   71.770252][ T4939] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.789031][ T4939] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.411: Failed to acquire dquot type 0
[   71.801427][ T4939] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.411: Failed to acquire dquot type 0
[   71.813634][ T4941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.413'.
[   71.862565][ T4938] bridge0: port 3(gretap0) entered blocking state
[   71.869203][ T4938] bridge0: port 3(gretap0) entered disabled state
[   71.924902][ T4938] gretap0: entered allmulticast mode
[   71.930959][ T4938] gretap0: entered promiscuous mode
[   71.946446][ T4939] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[   71.953121][ T4939] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   71.960799][ T4939] vhci_hcd vhci_hcd.0: Device attached
[   71.963937][   T29] kauditd_printk_skb: 354 callbacks suppressed
[   71.963955][   T29] audit: type=1326 audit(1764812580.006:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fbecb2cf749 code=0x7ffc0000
[   71.995823][   T29] audit: type=1326 audit(1764812580.006:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecb2cf749 code=0x7ffc0000
[   72.026029][ T4938] bridge0: port 3(gretap0) entered blocking state
[   72.032569][ T4938] bridge0: port 3(gretap0) entered forwarding state
[   72.067886][ T4950] gretap0: left allmulticast mode
[   72.072961][ T4950] gretap0: left promiscuous mode
[   72.078307][ T4950] bridge0: port 3(gretap0) entered disabled state
[   72.154856][ T3499] vhci_hcd: vhci_device speed not set
[   72.159766][   T29] audit: type=1400 audit(1764812580.086:1408): avc:  denied  { write } for  pid=4933 comm="syz.1.411" path="/103/file0/bus" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   72.183007][   T29] audit: type=1400 audit(1764812580.086:1409): avc:  denied  { lock } for  pid=4933 comm="syz.1.411" path="/103/file0/bus" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   72.205731][   T29] audit: type=1400 audit(1764812580.086:1410): avc:  denied  { setattr } for  pid=4933 comm="syz.1.411" name="bus" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   72.224790][ T3499] usb 3-1: new full-speed USB device number 2 using vhci_hcd
[   72.227653][   T29] audit: type=1400 audit(1764812580.126:1411): avc:  denied  { create } for  pid=4957 comm="syz.5.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[   72.254974][   T29] audit: type=1326 audit(1764812580.176:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.5.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecb2cf749 code=0x7ffc0000
[   72.278548][   T29] audit: type=1326 audit(1764812580.176:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.5.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbecb2cf749 code=0x7ffc0000
[   72.302037][   T29] audit: type=1326 audit(1764812580.176:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.5.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecb2cf749 code=0x7ffc0000
[   72.325535][   T29] audit: type=1326 audit(1764812580.186:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4933 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f357f27e3aa code=0x7ffc0000
[   72.618064][ T4951] vhci_hcd: connection reset by peer
[   72.625804][  T838] vhci_hcd: stop threads
[   72.630088][  T838] vhci_hcd: release socket
[   72.634533][  T838] vhci_hcd: disconnect device
[   72.675490][ T4972] loop0: detected capacity change from 0 to 512
[   72.704488][ T4970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.416'.
[   72.713443][ T4970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.416'.
[   72.766959][ T4972] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   72.775391][ T4972] EXT4-fs (loop0): orphan cleanup on readonly fs
[   72.784609][ T4972] EXT4-fs error (device loop0): ext4_do_update_inode:5628: inode #16: comm +}[@: corrupted inode contents
[   72.796299][ T4972] EXT4-fs (loop0): Remounting filesystem read-only
[   72.803282][ T4972] EXT4-fs (loop0): 1 truncate cleaned up
[   72.973150][   T53] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   72.983868][   T53] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   73.046771][ T4977] netlink: 'syz.3.418': attribute type 1 has an invalid length.
[   73.054948][   T53] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[   73.149914][ T4977] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.314544][ T4990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.422'.
[   73.335092][ T4993] loop3: detected capacity change from 0 to 128
[   73.371556][ T4993] EXT4-fs mount: 15 callbacks suppressed
[   73.371618][ T4993] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   73.411924][ T4997] loop4: detected capacity change from 0 to 128
[   73.423628][ T4993] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   73.469059][ T3318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   73.504291][ T4997] syz.4.425: attempt to access beyond end of device
[   73.504291][ T4997] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128
[   73.538276][ T4997] syz.4.425: attempt to access beyond end of device
[   73.538276][ T4997] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128
[   73.565403][ T4997] syz.4.425: attempt to access beyond end of device
[   73.565403][ T4997] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128
[   73.597785][ T4997] syz.4.425: attempt to access beyond end of device
[   73.597785][ T4997] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128
[   73.646426][ T4997] syz.4.425: attempt to access beyond end of device
[   73.646426][ T4997] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128
[   73.674969][ T4997] syz.4.425: attempt to access beyond end of device
[   73.674969][ T4997] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128
[   73.719133][ T4997] syz.4.425: attempt to access beyond end of device
[   73.719133][ T4997] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128
[   73.768798][ T4997] syz.4.425: attempt to access beyond end of device
[   73.768798][ T4997] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128
[   73.802605][ T4997] syz.4.425: attempt to access beyond end of device
[   73.802605][ T4997] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128
[   73.826461][ T4997] syz.4.425: attempt to access beyond end of device
[   73.826461][ T4997] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128
[   73.915985][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   73.969855][ T5015] netlink: 'syz.4.431': attribute type 1 has an invalid length.
[   74.031819][ T5015] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.049935][ T5021] netlink: 'syz.1.429': attribute type 1 has an invalid length.
[   74.107977][ T5030] FAULT_INJECTION: forcing a failure.
[   74.107977][ T5030] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   74.121154][ T5030] CPU: 0 UID: 0 PID: 5030 Comm: syz.4.434 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   74.121190][ T5030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   74.121205][ T5030] Call Trace:
[   74.121213][ T5030]  <TASK>
[   74.121222][ T5030]  __dump_stack+0x1d/0x30
[   74.121245][ T5030]  dump_stack_lvl+0xe8/0x140
[   74.121319][ T5030]  dump_stack+0x15/0x1b
[   74.121344][ T5030]  should_fail_ex+0x265/0x280
[   74.121375][ T5030]  should_fail+0xb/0x20
[   74.121461][ T5030]  should_fail_usercopy+0x1a/0x20
[   74.121493][ T5030]  _copy_from_user+0x1c/0xb0
[   74.121530][ T5030]  do_sys_poll+0x149/0xbd0
[   74.121564][ T5030]  ? selinux_file_open+0x2df/0x330
[   74.121718][ T5030]  __se_sys_poll+0xdd/0x200
[   74.121754][ T5030]  __x64_sys_poll+0x43/0x50
[   74.121807][ T5030]  x64_sys_call+0x289f/0x3000
[   74.121835][ T5030]  do_syscall_64+0xd8/0x2a0
[   74.121866][ T5030]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.121896][ T5030] RIP: 0033:0x7fc3dbe9f749
[   74.121955][ T5030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.121979][ T5030] RSP: 002b:00007fc3da907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007
[   74.122005][ T5030] RAX: ffffffffffffffda RBX: 00007fc3dc0f5fa0 RCX: 00007fc3dbe9f749
[   74.122022][ T5030] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000
[   74.122040][ T5030] RBP: 00007fc3da907090 R08: 0000000000000000 R09: 0000000000000000
[   74.122056][ T5030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   74.122073][ T5030] R13: 00007fc3dc0f6038 R14: 00007fc3dc0f5fa0 R15: 00007ffd2141ee48
[   74.122099][ T5030]  </TASK>
[   74.122173][ T5021] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12)
[   74.295422][ T5021] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   74.303179][ T5021] vhci_hcd vhci_hcd.0: Device attached
[   74.364468][ T5027] vhci_hcd: connection closed
[   74.364820][ T3530] vhci_hcd: stop threads
[   74.373968][ T3530] vhci_hcd: release socket
[   74.378442][ T3530] vhci_hcd: disconnect device
[   74.396389][ T5033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.436'.
[   74.440657][ T5039] netlink: 204 bytes leftover after parsing attributes in process `syz.4.438'.
[   74.540669][ T5039] FAULT_INJECTION: forcing a failure.
[   74.540669][ T5039] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   74.553837][ T5039] CPU: 0 UID: 0 PID: 5039 Comm: syz.4.438 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   74.553871][ T5039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   74.553888][ T5039] Call Trace:
[   74.553896][ T5039]  <TASK>
[   74.553960][ T5039]  __dump_stack+0x1d/0x30
[   74.554091][ T5039]  dump_stack_lvl+0xe8/0x140
[   74.554161][ T5039]  dump_stack+0x15/0x1b
[   74.554183][ T5039]  should_fail_ex+0x265/0x280
[   74.554207][ T5039]  should_fail+0xb/0x20
[   74.554226][ T5039]  should_fail_usercopy+0x1a/0x20
[   74.554250][ T5039]  _copy_from_iter+0xcf/0xe70
[   74.554310][ T5039]  ? __build_skb_around+0x164/0x1c0
[   74.554339][ T5039]  ? __alloc_skb+0x223/0x320
[   74.554424][ T5039]  netlink_sendmsg+0x471/0x6b0
[   74.554460][ T5039]  ? __pfx_netlink_sendmsg+0x10/0x10
[   74.554495][ T5039]  __sock_sendmsg+0x145/0x180
[   74.554547][ T5039]  ____sys_sendmsg+0x31e/0x4a0
[   74.554607][ T5039]  ___sys_sendmsg+0x17b/0x1d0
[   74.554667][ T5039]  __x64_sys_sendmsg+0xd4/0x160
[   74.554701][ T5039]  x64_sys_call+0x17ba/0x3000
[   74.554750][ T5039]  do_syscall_64+0xd8/0x2a0
[   74.554779][ T5039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.554822][ T5039] RIP: 0033:0x7fc3dbe9f749
[   74.554839][ T5039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.554863][ T5039] RSP: 002b:00007fc3da907038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   74.554887][ T5039] RAX: ffffffffffffffda RBX: 00007fc3dc0f5fa0 RCX: 00007fc3dbe9f749
[   74.554967][ T5039] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[   74.554979][ T5039] RBP: 00007fc3da907090 R08: 0000000000000000 R09: 0000000000000000
[   74.555011][ T5039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   74.555027][ T5039] R13: 00007fc3dc0f6038 R14: 00007fc3dc0f5fa0 R15: 00007ffd2141ee48
[   74.555051][ T5039]  </TASK>
[   74.852893][ T5052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.435'.
[   74.869990][ T5052] loop3: detected capacity change from 0 to 512
[   74.926312][ T5052] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   74.934678][ T5052] EXT4-fs (loop3): orphan cleanup on readonly fs
[   74.943745][ T5052] EXT4-fs error (device loop3): ext4_do_update_inode:5628: inode #16: comm +}[@: corrupted inode contents
[   74.955431][ T5052] EXT4-fs (loop3): Remounting filesystem read-only
[   74.962132][ T5052] EXT4-fs (loop3): 1 truncate cleaned up
[   75.036697][ T5058] netlink: 'syz.4.444': attribute type 1 has an invalid length.
[   75.288605][   T53] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   75.299267][   T53] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   75.322882][   T53] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[   75.336284][ T5052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   75.350708][ T5052] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.793244][ T5058] 8021q: adding VLAN 0 to HW filter on device bond2
[   76.148508][ T5101] FAULT_INJECTION: forcing a failure.
[   76.148508][ T5101] name failslab, interval 1, probability 0, space 0, times 0
[   76.161348][ T5101] CPU: 1 UID: 0 PID: 5101 Comm: syz.4.455 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   76.161382][ T5101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   76.161397][ T5101] Call Trace:
[   76.161405][ T5101]  <TASK>
[   76.161474][ T5101]  __dump_stack+0x1d/0x30
[   76.161510][ T5101]  dump_stack_lvl+0xe8/0x140
[   76.161537][ T5101]  dump_stack+0x15/0x1b
[   76.161562][ T5101]  should_fail_ex+0x265/0x280
[   76.161588][ T5101]  ? rtnl_newlink+0x5c/0x1360
[   76.161618][ T5101]  should_failslab+0x8c/0xb0
[   76.161649][ T5101]  __kmalloc_cache_noprof+0x4c/0x4a0
[   76.161728][ T5101]  ? __pfx_rtnl_newlink+0x10/0x10
[   76.161763][ T5101]  rtnl_newlink+0x5c/0x1360
[   76.161798][ T5101]  ? css_rstat_updated+0xb7/0x240
[   76.161868][ T5101]  ? do_user_addr_fault+0xd9e/0x1080
[   76.161976][ T5101]  ? kvm_sched_clock_read+0x11/0x20
[   76.162016][ T5101]  ? sched_clock+0x3f/0x60
[   76.162041][ T5101]  ? trace_clock_local+0x3f/0x60
[   76.162114][ T5101]  ? __rb_reserve_next+0x43e/0x6f0
[   76.162156][ T5101]  ? kernelmode_fixup_or_oops+0x59/0xb0
[   76.162188][ T5101]  ? __memcg_slab_free_hook+0x135/0x230
[   76.162250][ T5101]  ? __rcu_read_unlock+0x4f/0x70
[   76.162337][ T5101]  ? avc_has_perm_noaudit+0x1b1/0x200
[   76.162368][ T5101]  ? cred_has_capability+0x210/0x280
[   76.162474][ T5101]  ? selinux_capable+0x31/0x40
[   76.162506][ T5101]  ? security_capable+0x83/0x90
[   76.162532][ T5101]  ? ns_capable+0x7d/0xb0
[   76.162593][ T5101]  ? __pfx_rtnl_newlink+0x10/0x10
[   76.162659][ T5101]  rtnetlink_rcv_msg+0x5fe/0x6d0
[   76.162712][ T5101]  netlink_rcv_skb+0x123/0x220
[   76.162812][ T5101]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   76.162958][ T5101]  rtnetlink_rcv+0x1c/0x30
[   76.163048][ T5101]  netlink_unicast+0x5c0/0x690
[   76.163073][ T5101]  netlink_sendmsg+0x58b/0x6b0
[   76.163102][ T5101]  ? __pfx_netlink_sendmsg+0x10/0x10
[   76.163130][ T5101]  __sock_sendmsg+0x145/0x180
[   76.163238][ T5101]  ____sys_sendmsg+0x31e/0x4a0
[   76.163273][ T5101]  ___sys_sendmsg+0x17b/0x1d0
[   76.163320][ T5101]  __x64_sys_sendmsg+0xd4/0x160
[   76.163382][ T5101]  x64_sys_call+0x17ba/0x3000
[   76.163409][ T5101]  do_syscall_64+0xd8/0x2a0
[   76.163438][ T5101]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.163466][ T5101] RIP: 0033:0x7fc3dbe9f749
[   76.163486][ T5101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   76.163566][ T5101] RSP: 002b:00007fc3da907038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   76.163586][ T5101] RAX: ffffffffffffffda RBX: 00007fc3dc0f5fa0 RCX: 00007fc3dbe9f749
[   76.163598][ T5101] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000005
[   76.163611][ T5101] RBP: 00007fc3da907090 R08: 0000000000000000 R09: 0000000000000000
[   76.163623][ T5101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   76.163671][ T5101] R13: 00007fc3dc0f6038 R14: 00007fc3dc0f5fa0 R15: 00007ffd2141ee48
[   76.163690][ T5101]  </TASK>
[   76.459183][ T5098] loop1: detected capacity change from 0 to 512
[   76.484849][ T5098] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   76.535629][ T5098] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   76.594910][ T5098] EXT4-fs (loop1): 1 truncate cleaned up
[   76.595434][ T5098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.601164][ T5111] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2
[   76.612211][ T5111] __nla_validate_parse: 1 callbacks suppressed
[   76.612282][ T5111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'.
[   76.639879][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.702673][ T5113] netlink: 'syz.5.458': attribute type 1 has an invalid length.
[   76.847328][ T5113] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.875202][ T5113] syz_tun: entered allmulticast mode
[   77.028496][ T5113] dvmrp8: entered allmulticast mode
[   77.033095][ T5110] syz_tun: left allmulticast mode
[   77.226244][   T29] kauditd_printk_skb: 140 callbacks suppressed
[   77.226260][   T29] audit: type=1400 audit(1764812585.286:1544): avc:  denied  { name_bind } for  pid=5130 comm="syz.0.466" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   77.276172][ T5133] Non-string source
[   77.344844][   T29] audit: type=1400 audit(1764812585.326:1545): avc:  denied  { bind } for  pid=5130 comm="syz.0.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   77.384838][ T3499] usb 3-1: enqueue for inactive port 0
[   77.395092][ T3499] usb 3-1: enqueue for inactive port 0
[   77.419431][ T5149] veth0: entered promiscuous mode
[   77.427604][   T29] audit: type=1400 audit(1764812585.486:1546): avc:  denied  { watch } for  pid=5127 comm="syz.5.463" path="/43" dev="tmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   77.476698][ T5149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'.
[   77.493197][ T3499] vhci_hcd: vhci_device speed not set
[   77.505479][ T5152] netlink: 'syz.4.473': attribute type 1 has an invalid length.
[   77.518671][   T29] audit: type=1326 audit(1764812585.576:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678c0df749 code=0x7ffc0000
[   77.598595][ T5152] 8021q: adding VLAN 0 to HW filter on device bond3
[   77.617563][   T29] audit: type=1326 audit(1764812585.576:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678c0df749 code=0x7ffc0000
[   77.641113][   T29] audit: type=1326 audit(1764812585.576:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678c0df749 code=0x7ffc0000
[   77.664676][   T29] audit: type=1326 audit(1764812585.576:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678c0df749 code=0x7ffc0000
[   77.688046][   T29] audit: type=1326 audit(1764812585.576:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678c0df749 code=0x7ffc0000
[   77.711546][   T29] audit: type=1326 audit(1764812585.576:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f678c0df749 code=0x7ffc0000
[   77.734874][   T29] audit: type=1326 audit(1764812585.576:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678c0df749 code=0x7ffc0000
[   77.764244][ T5154] loop3: detected capacity change from 0 to 128
[   77.788481][ T5154] msdos: Unknown parameter 's'
[   78.023518][ T5163] ==================================================================
[   78.031661][ T5163] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_refill_alloc_cache
[   78.041322][ T5163] 
[   78.043646][ T5163] write to 0xffff88812819b280 of 8 bytes by task 5161 on cpu 0:
[   78.051271][ T5163]  page_pool_refill_alloc_cache+0x2a5/0x3c0
[   78.057183][ T5163]  page_pool_alloc_pages+0xd0/0x130
[   78.062392][ T5163]  bpf_test_run_xdp_live+0x54d/0x11c0
[   78.067780][ T5163]  bpf_prog_test_run_xdp+0x525/0x970
[   78.073089][ T5163]  bpf_prog_test_run+0x22a/0x390
[   78.078141][ T5163]  __sys_bpf+0x4c0/0x7c0
[   78.082509][ T5163]  __x64_sys_bpf+0x41/0x50
[   78.086935][ T5163]  x64_sys_call+0x28e1/0x3000
[   78.091626][ T5163]  do_syscall_64+0xd8/0x2a0
[   78.096132][ T5163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.102052][ T5163] 
[   78.104374][ T5163] read to 0xffff88812819b280 of 8 bytes by task 5163 on cpu 1:
[   78.111917][ T5163]  page_pool_put_unrefed_netmem+0x38b/0x4b0
[   78.117844][ T5163]  napi_pp_put_page+0xe9/0x200
[   78.122637][ T5163]  skb_free_head+0x12c/0x150
[   78.127268][ T5163]  skb_release_data+0x33b/0x370
[   78.132156][ T5163]  __kfree_skb+0x44/0x150
[   78.136511][ T5163]  sk_skb_reason_drop+0xbd/0x270
[   78.141465][ T5163]  udpv6_recvmsg+0x1f7/0xca0
[   78.146071][ T5163]  inet6_recvmsg+0x143/0x290
[   78.150673][ T5163]  sock_recvmsg+0x95/0x170
[   78.155106][ T5163]  sock_read_iter+0x152/0x1a0
[   78.159801][ T5163]  vfs_read+0x64c/0x770
[   78.163958][ T5163]  ksys_read+0xda/0x1a0
[   78.168117][ T5163]  __x64_sys_read+0x40/0x50
[   78.172632][ T5163]  x64_sys_call+0x2889/0x3000
[   78.177319][ T5163]  do_syscall_64+0xd8/0x2a0
[   78.181854][ T5163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.187754][ T5163] 
[   78.190083][ T5163] value changed: 0xffffea0004c68fc0 -> 0x0000000000000000
[   78.197193][ T5163] 
[   78.199520][ T5163] Reported by Kernel Concurrency Sanitizer on:
[   78.205669][ T5163] CPU: 1 UID: 0 PID: 5163 Comm: syz.5.475 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   78.215315][ T5163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   78.225384][ T5163] ==================================================================
[   80.425030][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110