last executing test programs:

1m55.24551521s ago: executing program 2 (id=315):
syz_emit_ethernet(0x4a, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18)
r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"})
ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0xfffe, 0x3f00, 0x0, 0x2, 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0xfffffffffffffe03, &(0x7f0000001f40)={&(0x7f0000000940)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRESHEX=r3, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000200000044000500ac1414aa000000000000000000000000000000003c00000900000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x801)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="a0000000210001000000000000000000be0c6ec900000000000000000000000000000000000000000000000000008fa015bf1a911be9e72c4929607fb8ca3be33f9da65031d32e6fb092ed3f047ff42d82252d2daf1d9cc9f535709f1808690baff69269e8ef36362d7ced66ceb649b6db39fa16364f257d47a8a8ab5441f85578faf714410a1e94692e0bf1906cee5316ba779f43d836c2b45e73ed7531efc773fae7666ee5480b1f1c832bf0677c70b43a86ec8b245c89983f09f0023fd9ad5f2349938a0e70d92ed639543b4e7c9b2eaafa000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a010100000000000000000000000000fc010000000000000000000000000001000000060000000000000000000000003c000000000000000a000a00"], 0xa0}}, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'})

1m55.204217012s ago: executing program 2 (id=317):
r0 = socket$inet6(0xa, 0x3, 0x38)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e27, 0x8, @loopback, 0x4}, 0x1c)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xff2b}], 0x1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x43a1bd78, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xc64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x8}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffffffc}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8)
r3 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f00000000c0)='dE\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000007c0)='\xd5@=\b\a:\x993\x00', &(0x7f0000000600)='dU|\xcbM\xe6\x91q\b', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001ec0)='\\$#[8V\x89\xeb}\f\xc1\x9f\xcfp\x8a\x01\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\x900\x10\xaf\x1f\x02Bl\x93\xcb\xf83S\xaf`]\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xbb\x13\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v', &(0x7f0000000640)='\xbd\x10\xe2\n\xc4\xa8\xa8?\a\x9ew\xc2A\xd6WP@O<\xf4s\x85~X\x85\xdc\xa3\xad\xe5`\xfd\x03p\xaeS^\x04\x11\x04a\xf8\xa6f\x96nB\x02\x10+C$\f\xb3\xcc\xed\"M\xb6 V\xc5\x9a\x11o^\xda\xc87\xaaV\xd88\x93\xd3\x85\x9a?\x8fY\xd1\x1a@;\x1a=@\x7f.7\x00\xc7\xf0\x97\xfe\xa1\xba\x80\xbb\xdas\x1c\x10\xac\xbf\x05\x9f\x86\v\x17\x82;s>#\xa7\xdb\xca\xabY\x87$Ug\xf0\x91\x86\x19\xd8\x886\xd0Y\xbf~\xf2\xd9@\x0f\xc5\xb4\xdb\x15\xa7\xee\xc3H<(\x95\xaa1y\xbf\x10\x1fq**', 0x0)
close(r3)

1m55.065828498s ago: executing program 2 (id=321):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18)
chroot(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')

1m55.008323391s ago: executing program 2 (id=324):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$9p_unix(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x80000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18)
chroot(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')

1m54.800070549s ago: executing program 2 (id=326):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000740)=0xe)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000340)=0xff)

1m54.472326524s ago: executing program 2 (id=336):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x5, 0x0, 0x0, 0x0, 0xb, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd0, 0x3d}, 0x100b28, 0x6, 0x0, 0x4, 0x1, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa85, 0xf)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4f23, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x8, 0x4)
r1 = socket(0xa, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x77359c01}]}}]}, 0x40}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000240)=0x468, 0x4)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r4, @ANYBLOB='\x00\x00\b\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)

1m54.33990933s ago: executing program 32 (id=336):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x5, 0x0, 0x0, 0x0, 0xb, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd0, 0x3d}, 0x100b28, 0x6, 0x0, 0x4, 0x1, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa85, 0xf)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4f23, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x8, 0x4)
r1 = socket(0xa, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x77359c01}]}}]}, 0x40}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000240)=0x468, 0x4)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r4, @ANYBLOB='\x00\x00\b\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)

2.632879443s ago: executing program 5 (id=2281):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad000000660082070000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348)
io_uring_enter(r1, 0x0, 0x1000002, 0x37, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYRES8=r2, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYBLOB="9a593c79ac85d80a1c76b0f7a59d599de287ccd54ecd736ef824bbad6b8190deb715a21ad64070769b4ba6b45f51fb7d2548e2cb091b768e862b15f0a964de68049c710595f2ec1b8084c9c95612fba97e82d8a164a7eae5634634ad7bb3062f58ef8c53c7a46b777813bbcacf71fbbb0760e6083d7245e8ae78f5d978694ebc416414e263b6d2349c845f91301a4220233c371e0fbf3c469c44d19d009c0f6b1dc350097075e878c42e85d80d0d188663b27b67ba6645b065502cc13a7db3d1e870d5978a8827045c5fb8caad869c61ae3932d7b3734be43f06dbbaa492b7788c3da615d5a84fabffceea9122e0aab9b794ba", @ANYRES32=r0, @ANYRES8=r0, @ANYRES64=r1, @ANYRESOCT, @ANYRESHEX, @ANYRES32=r1], 0x48)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, 0x0, 0x5)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3, 0x0, 0x10}, 0x18)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, 0x0, 0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000340)={0x3, &(0x7f0000000200)=[{0x3, 0x2, 0x6, 0x2873}, {0x0, 0x10, 0xfd, 0x3}, {0x1000, 0x6, 0x2, 0x7}]})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000001c0)={'veth1_macvtap\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})

2.208132172s ago: executing program 3 (id=2290):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0x3, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r2, &(0x7f0000000940), 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)

2.113229217s ago: executing program 5 (id=2291):
pipe(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x2a002, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)

2.073885978s ago: executing program 5 (id=2293):
r0 = socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000500), 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000400000000c000000180001801400020076657468305f746f5f626f6e64000000040003805d073dac039331bc08d25b577c3f7a578bf14570c5c2ba652ec2736e962c2bade336d673d7b1353f2d9202e47e7c03afda86d9a1dd6df3a90c4c9a154dbf7d7f179f7382bc385b74516b76201bd010596f6581b8b67000"/140], 0x30}}, 0x0)
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @local}, 0x8, {0x2, 0x4e21, @multicast1}, 'veth1_to_team\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="31000000bf3f9f8008000a00", @ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xfffffffffffffffe)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x888b, 0x4)
connect$unix(r0, &(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

1.37246658s ago: executing program 1 (id=2299):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51})
io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000ac0)={0x6154, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000280)=""/182, 0xb6}, {&(0x7f0000000680)=""/241, 0xf1}, {&(0x7f0000000580)=""/190, 0xbe}, {&(0x7f0000000780)=""/71, 0x47}, {&(0x7f00000008c0)=""/107, 0x6b}, {&(0x7f0000000940)=""/178, 0xb2}], &(0x7f0000000a80)=[0x1, 0xbc, 0xfffffffffffffffe, 0x1], 0x6}, 0x20)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

1.37108143s ago: executing program 3 (id=2300):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="020000000100"/28], 0x50)
listen(r0, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000003c0)=0x800001, 0x4)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x0, &(0x7f0000000200)})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001900)=@newtaction={0x14, 0x30, 0x100, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44811}, 0x20000051)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
timer_create(0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="690f38480a7ef729cc75b0a91d5f2f847950d0674e5baa062c003e08b748e5978ce48ce7554400"/48], 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0))
socket(0x400000000010, 0x3, 0x0)
r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x8)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000100)='GPL\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c)
fchdir(r6)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000300)={[{@usrquota}, {@noblock_validity}, {@mblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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")
socket$nl_route(0x10, 0x3, 0x0)

1.017225945s ago: executing program 5 (id=2303):
pipe(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x2a002, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)

978.777497ms ago: executing program 5 (id=2304):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0x3, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x800000000006}, 0x18)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r1, &(0x7f0000000940), 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)

765.537687ms ago: executing program 0 (id=2306):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x9, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0xc001)
sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r0, 0x0, 0x0, 0x400000000000000)

762.705127ms ago: executing program 0 (id=2307):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xbf)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000005880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r0, {0x1}}, './file0\x00'})
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x24}}, 0x8000)
fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x12, 0x14, 0x63, 0x0, 0xf, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local}}}}}, 0x0)

736.328278ms ago: executing program 0 (id=2308):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x58)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r3}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000030601010000000020000000010000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
epoll_create(0x8617)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8)
close_range(r5, 0xffffffffffffffff, 0x0)
listen(r1, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000001f40))

680.66488ms ago: executing program 5 (id=2309):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000700)={{0x0, 0xff}, {0x11, 0x76}, 0xfffffffd, 0x1})
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x8d)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000004fc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="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", @ANYRES16=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2, 0x0, 0x20000ffffffff}, 0x18)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x0)
syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0)
open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e)
timerfd_create(0x0, 0x0)
timerfd_create(0x0, 0x0)
memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Ux\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xb9\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x7)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x9, 0x0, 0x0, 0x0, 0x3)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sync()

673.904071ms ago: executing program 4 (id=2310):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000020010000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x13, r1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x64}, 0x1, 0x0, 0x0, 0x48004}, 0x22000080)
setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r6=>0x0})
bind$can_raw(r5, &(0x7f0000000200)={0x1d, r6}, 0x10)
socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x7}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80)

621.503793ms ago: executing program 3 (id=2311):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x5e)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]})
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2b, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)

564.888775ms ago: executing program 4 (id=2312):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd')
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x4, 0x1, 0x80000001, 0x4, 0x1, "9e8e6d238c8c3874765693917c5c30185e88c2", 0x8, 0x9})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r3 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x80000001, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000004c0)='\x02;\xe5\b\x00\x00\x9c\x00\x00\x00\x00\x00\x00')

550.008176ms ago: executing program 1 (id=2313):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd')
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x4, 0x1, 0x80000001, 0x4, 0x1, "9e8e6d238c8c3874765693917c5c30185e88c2", 0x8, 0x9})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r3 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x80000001, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000004c0)='\x02;\xe5\b\x00\x00\x9c\x00\x00\x00\x00\x00\x00')

517.989298ms ago: executing program 3 (id=2314):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x9, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0xc001)
sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r0, 0x0, 0x0, 0x400000000000000)

493.802739ms ago: executing program 0 (id=2315):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad000000660082070000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348)
io_uring_enter(r1, 0x0, 0x1000002, 0x37, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYRES8=r2, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYBLOB="9a593c79ac85d80a1c76b0f7a59d599de287ccd54ecd736ef824bbad6b8190deb715a21ad64070769b4ba6b45f51fb7d2548e2cb091b768e862b15f0a964de68049c710595f2ec1b8084c9c95612fba97e82d8a164a7eae5634634ad7bb3062f58ef8c53c7a46b777813bbcacf71fbbb0760e6083d7245e8ae78f5d978694ebc416414e263b6d2349c845f91301a4220233c371e0fbf3c469c44d19d009c0f6b1dc350097075e878c42e85d80d0d188663b27b67ba6645b065502cc13a7db3d1e870d5978a8827045c5fb8caad869c61ae3932d7b3734be43f06dbbaa492b7788c3da615d5a84fabffceea9122e0aab9b794ba", @ANYRES32=r0, @ANYRES8=r0, @ANYRES64=r1, @ANYRESOCT, @ANYRESHEX, @ANYRES32=r1], 0x48)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, 0x0, 0x5)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3, 0x0, 0x10}, 0x18)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000340)={0x3, &(0x7f0000000200)=[{0x3, 0x2, 0x6, 0x2873}, {0x0, 0x10, 0xfd, 0x3}, {0x1000, 0x6, 0x2, 0x7}]})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000001c0)={'veth1_macvtap\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})

479.775069ms ago: executing program 4 (id=2316):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0x3, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r2, &(0x7f0000000940), 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)

442.048971ms ago: executing program 1 (id=2317):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xbf)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000005880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r0, {0x1}}, './file0\x00'})
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x24}}, 0x8000)
fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x12, 0x14, 0x63, 0x0, 0xf, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local}}}}}, 0x0)

398.572543ms ago: executing program 1 (id=2318):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xbf)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000005880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r0, {0x1}}, './file0\x00'})
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x24}}, 0x8000)
fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x12, 0x14, 0x63, 0x0, 0xf, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local}}}}}, 0x0)

397.821953ms ago: executing program 3 (id=2319):
r0 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x80000001, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000004c0)='\x02;\xe5\b\x00\x00\x9c\x00\x00\x00\x00\x00\x00')

340.672735ms ago: executing program 3 (id=2320):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd')
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x4, 0x1, 0x80000001, 0x4, 0x1, "9e8e6d238c8c3874765693917c5c30185e88c2", 0x8, 0x9})

339.977946ms ago: executing program 1 (id=2321):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xce)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240))
sendmsg$TEAM_CMD_OPTIONS_SET(r2, 0x0, 0x200448c0)

275.391658ms ago: executing program 4 (id=2322):
r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e)
close(r0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc)
listen(r1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x200000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

244.83693ms ago: executing program 4 (id=2323):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000020010000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x13, r1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x64}, 0x1, 0x0, 0x0, 0x48004}, 0x22000080)
setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r6=>0x0})
bind$can_raw(r5, &(0x7f0000000200)={0x1d, r6}, 0x10)
socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x7}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80)

164.380563ms ago: executing program 4 (id=2324):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51})
io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000ac0)={0x6154, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000280)=""/182, 0xb6}, {&(0x7f0000000680)=""/241, 0xf1}, {&(0x7f0000000580)=""/190, 0xbe}, {&(0x7f0000000780)=""/71, 0x47}, {&(0x7f00000008c0)=""/107, 0x6b}, {&(0x7f0000000940)=""/178, 0xb2}], &(0x7f0000000a80)=[0x1, 0xbc, 0xfffffffffffffffe, 0x1], 0x6}, 0x20)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

93.477256ms ago: executing program 0 (id=2325):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x5e)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]})
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2b, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$eJzs3T9oJFUcB/DvzO4ac7fIqY0g/gER0UA4O8HmbBQO5DhEBBVORGyUixAT7LJWNhZaq6SyCWJntJQ0wUYRrKKmiI2gwcJgocXK7iQSNytqNtk5Mp8PTGYm89783rDzfbvN7AZorAtJLiVpJZlL0klSHG5wb7Vc2N9dnd28lvT7T/1SDNtV+5WDfueT9JI8kmSjLPJKO1lef27nt60nHnh7qXP/h+vPzk71Ivft7mw/uffBlbc+ufzw8lff/HSlyKV0/3ZdJ68Y8792kdx2GsVuEEW77hHwX1x94+NvB7m/Pcl9w/x3UqZ68d5ZvGmjk4fe/6e+7/789Z3THCtw8vr9zuA9sNcHGqdM0k1Rzieptstyfr76DP9d61z56sLi63MvLyxdf6numQo4Kd1k+/HPZj49P5L/H1tV/oGza5D/p6+ufT/Y3muNHOzP1DMo4HTdVa0G+Z97YeXBjMs/cKbJPzSX/ENzyT80l/xDc8k/NJf8wxnWOdjojT0s/9Bc8g/NJf/QXIfzDwA0S3+m7ieQgbrUPf8AAAAAAAAAAAAAAAAAAABHrc5uXjtYplXzi/eS3ceStMfVbw1/jzi5efj33K/FoNlfiqrbRJ6/Z8ITTOijmp++vuWHeut/eXe99VeuJ703k1xst4/ef8X+/Xd8t/7L8c6LExb4n4qR/UefmW79UX+s1Vv/8lby+WD+uThu/ilzx3A9fv7pHv6K5WN67fcJTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDU/BkAAP//d4lu0g==")
socket$nl_netfilter(0x10, 0x3, 0xc)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)

695.71µs ago: executing program 0 (id=2326):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
gettid()
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd')
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x4, 0x1, 0x80000001, 0x4, 0x1, "9e8e6d238c8c3874765693917c5c30185e88c2", 0x8, 0x9})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r2 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x80000001, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f00000004c0)='\x02;\xe5\b\x00\x00\x9c\x00\x00\x00\x00\x00\x00')

0s ago: executing program 1 (id=2327):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
pwritev2(r1, &(0x7f0000000280)=[{&(0x7f0000000000)="a801d19893d8a671143e33c9ffe32763f2d59526373bf940585e9f24d330e81b2fa91bc16180480b92a1202b7b89280ada84a3a364e616bfca6dafadad5baeea6d957b581e8b674bc1fddb7662972e33447b82efbd8026d7c713d3f74035ac04b8043e5d4f6ca406ffe9c0f710f08dfb671d5a0536b385406ac44c47ae3279332fc7ea49ae432a0fba89da087cd12e0d5c117aa8d7e43b82b8c74abd8e37a714fda64a70aaf4f85d77288dbc39fe6b7b010e6db24ce2bd609a36", 0xba}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000000c0)="fc57dc83495e8c0eb77b8663408b832919d2f523b79a7c83735a4fc459ae5b080500f5bf4afb11b8072e9cf2b8f4943902fb9f608c27d8ec6b882b9e888410044001592dd5e218bbb097f4e86c95814c4a67f49e3f8f97d9", 0x58}, {&(0x7f0000000140)="8f61075b4ff957223a5eb6d01b2f20535a1f26293caa681cb604076aa9884bb5d309921c09536f7f41082c92308d828754619c6f1501358520b8b419507265dbe0b9c7c34404d0015e54c08072808abc1760739cf552fbe62d63cecb93787e8d649171b9c1bbc0d5fb40528192407472eae0cd45d17f4ebed7727cb37792c0ec4784813683328e3b5fc0ef37a35a0bb9f5953f3db355dcb654ea093cb728594e0aa681834de98b4e6da86b30b683ab2e401c4107c54a003e0cd5cf0ff37159a958e051837d7c3c602e152af0051b2f8d8e9e9ab9d7beb1298d8e8d82a26a447f643c4eb47918ca22fb36006adcf68084ce3d", 0xf2}], 0x4, 0x9, 0x7, 0x10)
sendfile(r1, r1, 0x0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
unshare(0x400)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x401, 0x3ff, 0x1000, 0x8001, 0x1a, "08400000c38eaad6a4540ad9455fb5031af800"})
ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000400)={{}, 0x1000, 0x1, 0x7})
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffff8, 0x7)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffffedc7fff, 0x1000, 0x4, 0x5}, 0x20)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0x5, 0x2, 0x4]}, &(0x7f00000001c0)=0x44)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x7c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0xfffffffffffffd70, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18)
r7 = io_uring_setup(0x4d3f, &(0x7f0000000d80)={0x0, 0x3f08, 0x40, 0x2003, 0x2f8})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f0000000480), 0x66)
pipe2$9p(0x0, 0x80000)
socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TCSETS2(r8, 0x402c542b, &(0x7f0000000280)={0x4c, 0x5f, 0x6, 0x3, 0x7, "00da900eaf7919c635d4a15ac41e3100", 0x80000000, 0x7fe})
r9 = dup(r8)
write$UHID_INPUT(r9, &(0x7f0000000300)={0xd, {"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", 0x1000}}, 0x1006)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e80)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)
write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0)
msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="b5088657027414dc"], 0x8, 0x800)

kernel console output (not intermixed with test programs):

8: selecting invalid altsetting 2047
[  120.737379][ T6893] lo speed is unknown, defaulting to 1000
[  120.770074][   T29] kauditd_printk_skb: 826 callbacks suppressed
[  120.770088][   T29] audit: type=1400 audit(1765499930.594:6237): avc:  denied  { ioctl } for  pid=6902 comm="syz.0.1289" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24185 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  120.816415][   T29] audit: type=1326 audit(1765499930.604:6238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.3.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe6e29265e7 code=0x7ffc0000
[  120.839983][   T29] audit: type=1326 audit(1765499930.604:6239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.3.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe6e28cb829 code=0x7ffc0000
[  120.863418][   T29] audit: type=1326 audit(1765499930.604:6240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.3.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e292f749 code=0x7ffc0000
[  120.886961][   T29] audit: type=1326 audit(1765499930.604:6241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.3.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e292f749 code=0x7ffc0000
[  120.995067][   T29] audit: type=1326 audit(1765499930.814:6242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6917 comm="syz.4.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  121.018669][   T29] audit: type=1326 audit(1765499930.814:6243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6917 comm="syz.4.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  121.042167][   T29] audit: type=1326 audit(1765499930.814:6244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6917 comm="syz.4.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  121.065617][   T29] audit: type=1326 audit(1765499930.814:6245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6917 comm="syz.4.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  121.074866][ T6923] loop3: detected capacity change from 0 to 128
[  121.089294][   T29] audit: type=1326 audit(1765499930.814:6246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.3.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e292f749 code=0x7ffc0000
[  121.130185][ T6923] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  121.148261][ T6922] loop5: detected capacity change from 0 to 128
[  121.181933][ T6922] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  121.199404][ T6923] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.206366][ T6922] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.263037][ T6396] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  121.387022][ T6941] netlink: 'syz.0.1300': attribute type 1 has an invalid length.
[  121.394867][ T6941] __nla_validate_parse: 6 callbacks suppressed
[  121.394884][ T6941] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1300'.
[  121.454489][ T6946] xt_CT: You must specify a L4 protocol and not use inversions on it
[  121.471409][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  121.519186][ T6948] loop4: detected capacity change from 0 to 1024
[  121.546369][ T6958] FAULT_INJECTION: forcing a failure.
[  121.546369][ T6958] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  121.559614][ T6958] CPU: 0 UID: 0 PID: 6958 Comm: syz.3.1303 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  121.559648][ T6958] Tainted: [W]=WARN
[  121.559655][ T6958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  121.559721][ T6958] Call Trace:
[  121.559729][ T6958]  <TASK>
[  121.559737][ T6958]  __dump_stack+0x1d/0x30
[  121.559763][ T6958]  dump_stack_lvl+0xe8/0x140
[  121.559786][ T6958]  dump_stack+0x15/0x1b
[  121.559807][ T6958]  should_fail_ex+0x265/0x280
[  121.559831][ T6958]  should_fail+0xb/0x20
[  121.559853][ T6958]  should_fail_usercopy+0x1a/0x20
[  121.559878][ T6958]  _copy_to_user+0x20/0xa0
[  121.559907][ T6958]  simple_read_from_buffer+0xb5/0x130
[  121.559987][ T6958]  proc_fail_nth_read+0x10e/0x150
[  121.560048][ T6958]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  121.560077][ T6958]  vfs_read+0x1a8/0x770
[  121.560095][ T6958]  ? __rcu_read_unlock+0x4f/0x70
[  121.560116][ T6958]  ? __fget_files+0x184/0x1c0
[  121.560184][ T6958]  ? mutex_lock+0x58/0x90
[  121.560211][ T6958]  ksys_read+0xda/0x1a0
[  121.560258][ T6958]  __x64_sys_read+0x40/0x50
[  121.560277][ T6958]  x64_sys_call+0x2889/0x3000
[  121.560302][ T6958]  do_syscall_64+0xd8/0x2a0
[  121.560337][ T6958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.560367][ T6958] RIP: 0033:0x7fe6e292e15c
[  121.560382][ T6958] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  121.560401][ T6958] RSP: 002b:00007fe6e1397030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  121.560421][ T6958] RAX: ffffffffffffffda RBX: 00007fe6e2b85fa0 RCX: 00007fe6e292e15c
[  121.560434][ T6958] RDX: 000000000000000f RSI: 00007fe6e13970a0 RDI: 0000000000000009
[  121.560446][ T6958] RBP: 00007fe6e1397090 R08: 0000000000000000 R09: 0000000000000000
[  121.560502][ T6958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.560514][ T6958] R13: 00007fe6e2b86038 R14: 00007fe6e2b85fa0 R15: 00007ffc1c5f9bf8
[  121.560534][ T6958]  </TASK>
[  121.767639][ T6964] loop1: detected capacity change from 0 to 128
[  121.774789][ T6948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.791013][ T6964] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  121.806508][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1308'.
[  121.844045][ T6964] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.880150][ T6978] loop4: detected capacity change from 0 to 128
[  121.897382][ T6981] pim6reg1: entered promiscuous mode
[  121.902792][ T6981] pim6reg1: entered allmulticast mode
[  121.918443][ T6978] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.018336][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'.
[  122.029964][ T6990] Illegal XDP return value 4294967274 on prog  (id 953) dev syz_tun, expect packet loss!
[  122.107397][ T7000] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1319'.
[  122.147210][ T7005] sg_write: data in/out 710/2388 bytes for SCSI command 0x68-- guessing data in;
[  122.147210][ T7005]    program syz.4.1322 not setting count and/or reply_len properly
[  122.194210][ T7008] loop1: detected capacity change from 0 to 512
[  122.206505][ T7008] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  122.222584][ T7008] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1323: bg 0: block 384: padding at end of block bitmap is not set
[  122.244189][ T7008] EXT4-fs (loop1): Remounting filesystem read-only
[  122.251027][ T7008] EXT4-fs (loop1): 1 truncate cleaned up
[  122.294403][ T7018] loop1: detected capacity change from 0 to 512
[  122.303804][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1325'.
[  122.313641][ T7018] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  122.322520][ T7018] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  122.347838][ T7022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1327'.
[  122.349558][ T7018] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm wg1: Allocating blocks 41-42 which overlap fs metadata
[  122.383977][ T7018] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm wg1: Failed to acquire dquot type 1
[  122.395012][ T7018] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  122.397977][ T7027] netlink: 'syz.4.1328': attribute type 1 has an invalid length.
[  122.416158][ T7018] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm wg1: corrupted inode contents
[  122.417252][ T7027] netlink: 'syz.4.1328': attribute type 4 has an invalid length.
[  122.436418][ T7027] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1328'.
[  122.446235][ T7018] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm wg1: mark_inode_dirty error
[  122.457440][ T7018] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm wg1: corrupted inode contents
[  122.469631][ T7018] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm wg1: mark_inode_dirty error
[  122.481085][ T7028] netlink: 'syz.4.1328': attribute type 1 has an invalid length.
[  122.488920][ T7028] netlink: 'syz.4.1328': attribute type 4 has an invalid length.
[  122.496752][ T7028] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1328'.
[  122.506196][ T7018] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm wg1: corrupted inode contents
[  122.517815][ T7028] FAULT_INJECTION: forcing a failure.
[  122.517815][ T7028] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  122.530992][ T7028] CPU: 1 UID: 0 PID: 7028 Comm: syz.4.1328 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  122.531038][ T7028] Tainted: [W]=WARN
[  122.531047][ T7028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  122.531066][ T7028] Call Trace:
[  122.531077][ T7028]  <TASK>
[  122.531158][ T7028]  __dump_stack+0x1d/0x30
[  122.531190][ T7028]  dump_stack_lvl+0xe8/0x140
[  122.531220][ T7028]  dump_stack+0x15/0x1b
[  122.531246][ T7028]  should_fail_ex+0x265/0x280
[  122.531306][ T7028]  should_fail+0xb/0x20
[  122.531333][ T7028]  should_fail_usercopy+0x1a/0x20
[  122.531364][ T7028]  _copy_from_user+0x1c/0xb0
[  122.531399][ T7028]  kstrtouint_from_user+0x69/0xf0
[  122.531427][ T7028]  ? 0xffffffff81000000
[  122.531445][ T7028]  ? selinux_file_permission+0x1e2/0x320
[  122.531497][ T7028]  proc_fail_nth_write+0x50/0x160
[  122.531565][ T7028]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  122.531623][ T7028]  vfs_write+0x269/0x960
[  122.531646][ T7028]  ? vfs_read+0x4e6/0x770
[  122.531668][ T7028]  ? __rcu_read_unlock+0x4f/0x70
[  122.531737][ T7028]  ? __fget_files+0x184/0x1c0
[  122.531766][ T7028]  ? mutex_lock+0x58/0x90
[  122.531800][ T7028]  ksys_write+0xda/0x1a0
[  122.531875][ T7028]  __x64_sys_write+0x40/0x50
[  122.531901][ T7028]  x64_sys_call+0x2847/0x3000
[  122.531932][ T7028]  do_syscall_64+0xd8/0x2a0
[  122.531976][ T7028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.532042][ T7028] RIP: 0033:0x7f06a120e1ff
[  122.532061][ T7028] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  122.532084][ T7028] RSP: 002b:00007f069fc56030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  122.532108][ T7028] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f06a120e1ff
[  122.532124][ T7028] RDX: 0000000000000001 RSI: 00007f069fc560a0 RDI: 0000000000000009
[  122.532152][ T7028] RBP: 00007f069fc56090 R08: 0000000000000000 R09: 0000000000000000
[  122.532167][ T7028] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  122.532183][ T7028] R13: 00007f06a1466128 R14: 00007f06a1466090 R15: 00007fff8d0dac28
[  122.532207][ T7028]  </TASK>
[  122.532445][ T7018] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  122.554424][ T7032] lo speed is unknown, defaulting to 1000
[  122.558690][ T7018] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm wg1: corrupted inode contents
[  122.770449][ T7018] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm wg1: mark_inode_dirty error
[  122.782980][ T7018] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  122.794742][ T7018] EXT4-fs (loop1): 1 truncate cleaned up
[  122.978211][ T7061] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.993398][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1337'.
[  123.058461][ T7061] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.075734][ T7066] loop5: detected capacity change from 0 to 128
[  123.089588][ T7066] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.302185][ T7072] lo speed is unknown, defaulting to 1000
[  123.358628][ T7074] usb usb8: selecting invalid altsetting 2047
[  123.539806][ T7061] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.848489][ T7061] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.919220][ T5495] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.945075][ T5495] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.952851][ T7083] loop5: detected capacity change from 0 to 128
[  123.965076][ T5495] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.984917][ T7083] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.003424][ T7086] syzkaller0: entered promiscuous mode
[  124.008990][ T7086] syzkaller0: entered allmulticast mode
[  124.021123][ T5495] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.034559][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1350'.
[  124.049898][ T7086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.058618][ T7086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.178093][ T7115] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  124.226103][ T7117] lo speed is unknown, defaulting to 1000
[  124.658793][ T7161] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  124.848301][ T7174] lo speed is unknown, defaulting to 1000
[  124.972230][ T7188] set_capacity_and_notify: 2 callbacks suppressed
[  124.972251][ T7188] loop1: detected capacity change from 0 to 256
[  125.016781][ T7188] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  125.051494][ T7198] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  125.160811][ T7211] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.187767][ T7211] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.240829][ T7211] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.262298][ T7219] lo speed is unknown, defaulting to 1000
[  125.292289][ T7211] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.355979][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.370800][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.379527][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.391858][ T5483] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.459104][ T7237] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  125.492987][ T7244] loop4: detected capacity change from 0 to 128
[  125.504276][ T7244] FAULT_INJECTION: forcing a failure.
[  125.504276][ T7244] name failslab, interval 1, probability 0, space 0, times 0
[  125.517006][ T7244] CPU: 1 UID: 0 PID: 7244 Comm: syz.4.1392 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  125.517046][ T7244] Tainted: [W]=WARN
[  125.517093][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  125.517106][ T7244] Call Trace:
[  125.517114][ T7244]  <TASK>
[  125.517123][ T7244]  __dump_stack+0x1d/0x30
[  125.517152][ T7244]  dump_stack_lvl+0xe8/0x140
[  125.517310][ T7244]  dump_stack+0x15/0x1b
[  125.517335][ T7244]  should_fail_ex+0x265/0x280
[  125.517364][ T7244]  should_failslab+0x8c/0xb0
[  125.517466][ T7244]  kmem_cache_alloc_noprof+0x69/0x4b0
[  125.517496][ T7244]  ? skb_clone+0x151/0x1f0
[  125.517579][ T7244]  skb_clone+0x151/0x1f0
[  125.517614][ T7244]  __netlink_deliver_tap+0x2c9/0x500
[  125.517712][ T7244]  netlink_unicast+0x66b/0x690
[  125.517751][ T7244]  netlink_sendmsg+0x58b/0x6b0
[  125.517821][ T7244]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.517855][ T7244]  __sock_sendmsg+0x145/0x180
[  125.517874][ T7244]  ____sys_sendmsg+0x31e/0x4a0
[  125.517944][ T7244]  ___sys_sendmsg+0x17b/0x1d0
[  125.518077][ T7244]  __x64_sys_sendmsg+0xd4/0x160
[  125.518123][ T7244]  x64_sys_call+0x17ba/0x3000
[  125.518156][ T7244]  do_syscall_64+0xd8/0x2a0
[  125.518200][ T7244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.518228][ T7244] RIP: 0033:0x7f06a120f749
[  125.518246][ T7244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.518275][ T7244] RSP: 002b:00007f069fc77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  125.518326][ T7244] RAX: ffffffffffffffda RBX: 00007f06a1465fa0 RCX: 00007f06a120f749
[  125.518343][ T7244] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  125.518359][ T7244] RBP: 00007f069fc77090 R08: 0000000000000000 R09: 0000000000000000
[  125.518379][ T7244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  125.518395][ T7244] R13: 00007f06a1466038 R14: 00007f06a1465fa0 R15: 00007fff8d0dac28
[  125.518458][ T7244]  </TASK>
[  125.797033][ T7256] veth0_macvtap: left promiscuous mode
[  126.050337][ T7274] loop3: detected capacity change from 0 to 512
[  126.062330][ T7274] EXT4-fs (loop3): orphan cleanup on readonly fs
[  126.069297][ T7274] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.1405: ea_inode file size=4 entry size=6
[  126.087583][ T7274] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.1405: corrupted inode contents
[  126.113455][ T7274] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.1405: mark_inode_dirty error
[  126.127804][ T7274] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.1405: corrupted inode contents
[  126.141154][ T7274] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.1405: mark_inode_dirty error
[  126.153730][ T7274] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.1405: mark inode dirty (error -117)
[  126.167016][ T7274] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117)
[  126.176710][ T7274] EXT4-fs (loop3): 1 orphan inode deleted
[  126.437001][ T7305] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  126.458711][ T7305] __nla_validate_parse: 10 callbacks suppressed
[  126.458731][ T7305] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1417'.
[  126.489281][ T7309] loop1: detected capacity change from 0 to 512
[  126.504135][ T7309] EXT4-fs (loop1): orphan cleanup on readonly fs
[  126.514073][ T7309] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.1419: ea_inode file size=4 entry size=6
[  126.527466][ T7309] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.1419: corrupted inode contents
[  126.540499][ T7309] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.1419: mark_inode_dirty error
[  126.552411][ T7309] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.1419: corrupted inode contents
[  126.564779][ T7309] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.1419: mark_inode_dirty error
[  126.577146][ T7309] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.1419: mark inode dirty (error -117)
[  126.590226][ T7309] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117)
[  126.599572][ T7309] EXT4-fs (loop1): 1 orphan inode deleted
[  126.620971][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1420'.
[  126.668645][ T7321] rdma_rxe: rxe_newlink: failed to add bond0
[  126.735978][   T29] kauditd_printk_skb: 472 callbacks suppressed
[  126.735998][   T29] audit: type=1400 audit(1765499936.494:6716): avc:  denied  { getopt } for  pid=7320 comm="syz.0.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  126.790668][ T7324] xt_HMARK: spi-set and port-set can't be combined
[  126.798494][ T7324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.807126][ T7324] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.821197][   T29] audit: type=1400 audit(1765499936.614:6717): avc:  denied  { create } for  pid=7318 comm="syz.1.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  126.842244][   T29] audit: type=1400 audit(1765499936.614:6718): avc:  denied  { read write } for  pid=7318 comm="syz.1.1421" path="socket:[26161]" dev="sockfs" ino=26161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  126.870523][ T7324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.880062][ T7324] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.897036][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'.
[  127.076861][ T7341] vhci_hcd vhci_hcd.4: invalid port number 236
[  127.310442][   T29] audit: type=1326 audit(1765499937.134:6719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.3.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e292f749 code=0x7ffc0000
[  127.312614][   T29] audit: type=1326 audit(1765499937.134:6720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.3.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6e292f749 code=0x7ffc0000
[  127.312648][   T29] audit: type=1326 audit(1765499937.134:6721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.3.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e292f749 code=0x7ffc0000
[  127.312728][   T29] audit: type=1326 audit(1765499937.134:6722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.3.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e292f749 code=0x7ffc0000
[  127.312772][   T29] audit: type=1326 audit(1765499937.134:6723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.3.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6e292f749 code=0x7ffc0000
[  127.312893][   T29] audit: type=1326 audit(1765499937.134:6724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.3.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e292f749 code=0x7ffc0000
[  127.312921][   T29] audit: type=1326 audit(1765499937.134:6725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.3.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e292f749 code=0x7ffc0000
[  127.528657][ T7374] IPv6: addrconf: prefix option has invalid lifetime
[  127.789876][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1438'.
[  127.845047][ T7386] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1438'.
[  127.845086][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1438'.
[  127.845114][ T7386] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1438'.
[  127.870175][ T7386] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1438'.
[  127.870199][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1438'.
[  127.870297][ T7386] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1438'.
[  127.888354][ T7391] loop3: detected capacity change from 0 to 512
[  127.895710][ T7391] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002]
[  127.954158][ T7391] System zones: 1-12
[  127.957258][ T7386] lo speed is unknown, defaulting to 1000
[  127.965901][ T7391] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.1441: corrupted in-inode xattr: e_value size too large
[  127.981515][ T7391] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1441: couldn't read orphan inode 15 (err -117)
[  128.006212][ T7396] loop4: detected capacity change from 0 to 128
[  128.026838][ T7396] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.094869][ T7404] lo speed is unknown, defaulting to 1000
[  128.259269][ T7423] lo speed is unknown, defaulting to 1000
[  128.323695][ T7429] loop3: detected capacity change from 0 to 1024
[  128.330964][ T7429] EXT4-fs: Invalid want_extra_isize 129
[  128.369938][ T3397] IPVS: starting estimator thread 0...
[  128.455933][ T7435] IPVS: using max 2208 ests per chain, 110400 per kthread
[  128.466287][ T7446] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.476089][ T7446] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.555449][ T7451] lo speed is unknown, defaulting to 1000
[  128.570248][ T7446] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.580281][ T7446] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.669593][ T7446] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.679450][ T7446] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.717927][ T7446] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.727908][ T7446] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.750493][ T7457] loop4: detected capacity change from 0 to 128
[  128.762720][ T7457] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.776441][ T7462] IPVS: Unknown mcast interface: vcan0
[  128.781946][ T7462] FAULT_INJECTION: forcing a failure.
[  128.781946][ T7462] name failslab, interval 1, probability 0, space 0, times 0
[  128.794711][ T7462] CPU: 0 UID: 0 PID: 7462 Comm: syz.3.1467 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  128.794749][ T7462] Tainted: [W]=WARN
[  128.794775][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  128.794789][ T7462] Call Trace:
[  128.794840][ T7462]  <TASK>
[  128.794850][ T7462]  __dump_stack+0x1d/0x30
[  128.794881][ T7462]  dump_stack_lvl+0xe8/0x140
[  128.794917][ T7462]  dump_stack+0x15/0x1b
[  128.794943][ T7462]  should_fail_ex+0x265/0x280
[  128.794988][ T7462]  should_failslab+0x8c/0xb0
[  128.795018][ T7462]  kmem_cache_alloc_noprof+0x69/0x4b0
[  128.795047][ T7462]  ? skb_clone+0x151/0x1f0
[  128.795082][ T7462]  skb_clone+0x151/0x1f0
[  128.795150][ T7462]  __netlink_deliver_tap+0x2c9/0x500
[  128.795184][ T7462]  ? netlink_attachskb+0x2cc/0x650
[  128.795215][ T7462]  netlink_sendskb+0x126/0x150
[  128.795248][ T7462]  netlink_unicast+0x2a2/0x690
[  128.795345][ T7462]  netlink_ack+0x4c8/0x500
[  128.795500][ T7462]  netlink_rcv_skb+0x192/0x220
[  128.795545][ T7462]  ? __pfx_genl_rcv_msg+0x10/0x10
[  128.795581][ T7462]  genl_rcv+0x28/0x40
[  128.795606][ T7462]  netlink_unicast+0x5c0/0x690
[  128.795644][ T7462]  netlink_sendmsg+0x58b/0x6b0
[  128.795714][ T7462]  ? __pfx_netlink_sendmsg+0x10/0x10
[  128.795754][ T7462]  __sock_sendmsg+0x145/0x180
[  128.795779][ T7462]  ____sys_sendmsg+0x31e/0x4a0
[  128.795812][ T7462]  ___sys_sendmsg+0x17b/0x1d0
[  128.795929][ T7462]  __x64_sys_sendmsg+0xd4/0x160
[  128.795963][ T7462]  x64_sys_call+0x17ba/0x3000
[  128.796021][ T7462]  do_syscall_64+0xd8/0x2a0
[  128.796056][ T7462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.796079][ T7462] RIP: 0033:0x7fe6e292f749
[  128.796165][ T7462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.796187][ T7462] RSP: 002b:00007fe6e1397038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  128.796210][ T7462] RAX: ffffffffffffffda RBX: 00007fe6e2b85fa0 RCX: 00007fe6e292f749
[  128.796225][ T7462] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  128.796240][ T7462] RBP: 00007fe6e1397090 R08: 0000000000000000 R09: 0000000000000000
[  128.796255][ T7462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.796270][ T7462] R13: 00007fe6e2b86038 R14: 00007fe6e2b85fa0 R15: 00007ffc1c5f9bf8
[  128.796293][ T7462]  </TASK>
[  129.048897][ T7465] netlink: 'syz.0.1468': attribute type 1 has an invalid length.
[  129.066040][   T12] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.073204][ T7467] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  129.073204][ T7467]    program syz.3.1469 not setting count and/or reply_len properly
[  129.074309][   T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.129202][   T12] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.132499][ T7471] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  129.137579][   T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.157436][   T12] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.165656][   T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.180211][   T12] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  129.188529][   T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.242096][ T7479] loop3: detected capacity change from 0 to 128
[  129.248405][ T7483] loop4: detected capacity change from 0 to 1024
[  129.263589][ T7479] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.381547][ T7502] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  129.381547][ T7502]    program syz.3.1481 not setting count and/or reply_len properly
[  129.402952][ T7506] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  129.422743][ T7506] rdma_op ffff88811b504980 conn xmit_rdma 0000000000000000
[  129.516818][ T7523] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  129.689352][ T7546] EXT4-fs mount: 28 callbacks suppressed
[  129.689371][ T7546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.748493][ T7553] lo speed is unknown, defaulting to 1000
[  129.767389][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.857629][ T7569] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  129.857629][ T7569]    program syz.1.1493 not setting count and/or reply_len properly
[  129.990122][ T7582] set_capacity_and_notify: 3 callbacks suppressed
[  129.990182][ T7582] loop1: detected capacity change from 0 to 1024
[  129.998639][ T7582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.057446][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.077171][ T7587] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  130.194873][ T7600] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  130.339396][ T7615] loop1: detected capacity change from 0 to 1024
[  130.358901][ T7615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.423006][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.489641][ T7627] loop1: detected capacity change from 0 to 128
[  130.499954][ T7627] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  130.512476][ T7627] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.567259][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  130.574163][ T7634] lo speed is unknown, defaulting to 1000
[  130.612562][ T7639] veth0: entered promiscuous mode
[  130.926698][ T7651] netlink: 'syz.5.1521': attribute type 10 has an invalid length.
[  130.938670][ T7651] team0: Port device dummy0 added
[  131.041185][ T7656] loop1: detected capacity change from 0 to 1024
[  131.061872][ T7656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.136772][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.203465][ T7674] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  131.221914][ T7676] lo speed is unknown, defaulting to 1000
[  131.245113][ T7681] loop1: detected capacity change from 0 to 128
[  131.274409][ T7681] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  131.286857][ T7681] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.340788][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  131.368713][ T7692] loop5: detected capacity change from 0 to 1024
[  131.380514][ T7692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.509632][ T7715] loop1: detected capacity change from 0 to 128
[  131.520329][ T6396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.533647][ T7715] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  131.556332][ T7715] ext4 filesystem being mounted at /325/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.568768][ T7718] IPVS: Unknown mcast interface: vcan0
[  131.630140][ T7720] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  131.646789][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  131.781946][ T7738] lo speed is unknown, defaulting to 1000
[  131.873011][ T7753] loop4: detected capacity change from 0 to 512
[  131.873358][ T7753] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  131.919078][ T7753] rdma_op ffff88810b0fbd80 conn xmit_rdma 0000000000000000
[  131.992504][   T29] kauditd_printk_skb: 378 callbacks suppressed
[  131.992601][   T29] audit: type=1326 audit(2000000004.560:7104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.4.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  131.992642][   T29] audit: type=1326 audit(2000000004.560:7105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.4.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  131.992816][   T29] audit: type=1326 audit(2000000004.560:7106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.4.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  131.992853][   T29] audit: type=1326 audit(2000000004.560:7107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.4.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  131.999297][   T29] audit: type=1326 audit(2000000004.560:7108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.4.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  131.999329][   T29] audit: type=1326 audit(2000000004.560:7109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.4.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  131.999357][   T29] audit: type=1326 audit(2000000004.560:7110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.4.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  131.999397][   T29] audit: type=1326 audit(2000000004.560:7111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.4.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  131.999432][   T29] audit: type=1326 audit(2000000004.570:7112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.4.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  132.003679][   T29] audit: type=1326 audit(2000000004.570:7113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7766 comm="syz.4.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  132.012033][ T7767] loop4: detected capacity change from 0 to 128
[  132.033732][ T7767] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  132.272051][ T7776] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.283636][ T7767] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.318038][ T7776] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.327947][ T7781] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  132.338075][ T7781] __nla_validate_parse: 12 callbacks suppressed
[  132.338091][ T7781] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1564'.
[  132.377286][ T3322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  132.390521][ T7776] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.396871][ T7784] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  132.415639][ T7784] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1575'.
[  132.458052][ T7776] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.497278][ T5519] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.497341][ T5519] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.497376][ T5519] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.497431][ T5519] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.578969][ T7800] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  132.578969][ T7800]    program syz.0.1571 not setting count and/or reply_len properly
[  132.601903][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1570'.
[  132.667116][ T7803] lo speed is unknown, defaulting to 1000
[  132.711397][ T7809] loop3: detected capacity change from 0 to 128
[  132.729819][ T7809] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  132.764685][ T7814] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1577'.
[  132.774165][ T7809] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.882413][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  132.979045][ T7823] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  132.988990][ T7823] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.009964][ T7827] lo speed is unknown, defaulting to 1000
[  133.028626][ T7823] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  133.028669][ T7823] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.078885][ T7823] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  133.078963][ T7823] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.177640][ T7823] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  133.177676][ T7823] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.252432][ T5495] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  133.252493][ T5495] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.274521][   T12] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  133.274584][   T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.291801][   T12] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  133.300557][   T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.335111][   T12] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  133.335191][   T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.427046][ T7853] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  133.614145][ T7853] ext4 filesystem being mounted at /274/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  133.768023][ T3322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  133.866417][ T7870] lo speed is unknown, defaulting to 1000
[  133.977995][ T7879] netlink: 'syz.5.1589': attribute type 1 has an invalid length.
[  133.985972][ T7879] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1589'.
[  134.004706][ T7880] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1588'.
[  134.073846][ T7886] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.108362][ T7886] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.127023][ T7889] EXT4-fs: Ignoring removed i_version option
[  134.133106][ T7889] EXT4-fs: Ignoring removed bh option
[  134.177476][ T7886] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.188890][ T7889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.201813][ T7889] ext4 filesystem being mounted at /361/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  134.223205][ T7889] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1591: iget: bad i_size value: 2533274857506816
[  134.236895][ T7886] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.305131][ T5519] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.345038][ T5519] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.356102][ T5519] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.365158][ T5519] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.396533][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.447685][ T7901] EXT4-fs (loop4): too many log groups per flexible block group
[  134.467399][ T7901] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  134.485060][ T7901] EXT4-fs (loop4): mount failed
[  134.485623][ T7912] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  134.499296][ T7912] netlink: 'syz.1.1600': attribute type 1 has an invalid length.
[  134.521474][ T7912] 8021q: adding VLAN 0 to HW filter on device bond1
[  134.543440][ T7912] bond1: (slave ip6gretap1): making interface the new active one
[  134.556498][ T7912] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  134.575341][ T7912] veth1: entered promiscuous mode
[  134.584963][ T7912] erspan0: entered allmulticast mode
[  134.593806][ T7917] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1601'.
[  134.617413][ T7912] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000505)
[  134.627793][ T7912] FAT-fs (loop1): Filesystem has been set read-only
[  134.703064][ T7924] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  134.822668][T16313] hid-generic 0000:0003:0001.0001: item fetching failed at offset 0/2
[  134.838597][T16313] hid-generic 0000:0003:0001.0001: probe with driver hid-generic failed with error -22
[  134.868168][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1606'.
[  134.984820][ T7935] lo speed is unknown, defaulting to 1000
[  135.103385][ T7945] set_capacity_and_notify: 5 callbacks suppressed
[  135.103402][ T7945] loop5: detected capacity change from 0 to 1024
[  135.136841][ T7947] cgroup: Need name or subsystem set
[  135.149615][ T7945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  135.179115][ T7945] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.247350][ T7945] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1613: bg 0: block 112: padding at end of block bitmap is not set
[  135.303995][ T6396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  135.427961][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1620'.
[  135.547756][ T7977] lo speed is unknown, defaulting to 1000
[  135.663475][ T7986] loop4: detected capacity change from 0 to 128
[  135.680562][ T7986] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  135.712201][ T7986] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.804325][ T3322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  135.924478][ T8014] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.930562][ T8017] loop3: detected capacity change from 0 to 512
[  135.942535][ T8017] EXT4-fs: inline encryption not supported
[  135.963078][ T8017] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  135.981934][ T8017] loop3: detected capacity change from 0 to 512
[  135.982578][ T8014] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.017674][ T8017] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.1641: iget: bad extra_isize 90 (inode size 256)
[  136.031398][ T8017] EXT4-fs (loop3): Remounting filesystem read-only
[  136.038108][ T8017] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30)
[  136.066507][ T8017] EXT4-fs (loop3): 1 orphan inode deleted
[  136.081464][ T8014] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.103692][ T8017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.131138][ T8017] sg_write: data in/out 134243804/1 bytes for SCSI command 0xfb-- guessing data in;
[  136.131138][ T8017]    program syz.3.1641 not setting count and/or reply_len properly
[  136.150651][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1641'.
[  136.173666][ T8014] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.246052][   T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.258833][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.261789][   T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.285322][   T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.297444][ T5498] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.433175][ T8064] loop5: detected capacity change from 0 to 128
[  136.460863][ T8064] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  136.475327][ T8064] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.549457][ T8084] lo speed is unknown, defaulting to 1000
[  136.575699][ T6396] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  136.654358][ T8103] FAULT_INJECTION: forcing a failure.
[  136.654358][ T8103] name failslab, interval 1, probability 0, space 0, times 0
[  136.667252][ T8103] CPU: 1 UID: 0 PID: 8103 Comm: syz.5.1674 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  136.667291][ T8103] Tainted: [W]=WARN
[  136.667313][ T8103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  136.667326][ T8103] Call Trace:
[  136.667331][ T8103]  <TASK>
[  136.667337][ T8103]  __dump_stack+0x1d/0x30
[  136.667360][ T8103]  dump_stack_lvl+0xe8/0x140
[  136.667381][ T8103]  dump_stack+0x15/0x1b
[  136.667398][ T8103]  should_fail_ex+0x265/0x280
[  136.667461][ T8103]  should_failslab+0x8c/0xb0
[  136.667480][ T8103]  kmem_cache_alloc_noprof+0x69/0x4b0
[  136.667506][ T8103]  ? skb_clone+0x151/0x1f0
[  136.667532][ T8103]  skb_clone+0x151/0x1f0
[  136.667581][ T8103]  __netlink_deliver_tap+0x2c9/0x500
[  136.667648][ T8103]  ? netlink_attachskb+0x2cc/0x650
[  136.667678][ T8103]  netlink_sendskb+0x126/0x150
[  136.667702][ T8103]  netlink_unicast+0x2a2/0x690
[  136.667780][ T8103]  ethnl_default_doit+0x81c/0x910
[  136.667880][ T8103]  genl_family_rcv_msg_doit+0x143/0x1b0
[  136.667906][ T8103]  genl_rcv_msg+0x422/0x460
[  136.667926][ T8103]  ? __pfx_ethnl_default_doit+0x10/0x10
[  136.667989][ T8103]  netlink_rcv_skb+0x123/0x220
[  136.668013][ T8103]  ? __pfx_genl_rcv_msg+0x10/0x10
[  136.668085][ T8103]  genl_rcv+0x28/0x40
[  136.668101][ T8103]  netlink_unicast+0x5c0/0x690
[  136.668178][ T8103]  netlink_sendmsg+0x58b/0x6b0
[  136.668210][ T8103]  ? __pfx_netlink_sendmsg+0x10/0x10
[  136.668242][ T8103]  __sock_sendmsg+0x145/0x180
[  136.668345][ T8103]  ____sys_sendmsg+0x31e/0x4a0
[  136.668384][ T8103]  ___sys_sendmsg+0x17b/0x1d0
[  136.668446][ T8103]  __x64_sys_sendmsg+0xd4/0x160
[  136.668474][ T8103]  x64_sys_call+0x17ba/0x3000
[  136.668512][ T8103]  do_syscall_64+0xd8/0x2a0
[  136.668561][ T8103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.668580][ T8103] RIP: 0033:0x7fc88f32f749
[  136.668594][ T8103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  136.668663][ T8103] RSP: 002b:00007fc88dd97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  136.668680][ T8103] RAX: ffffffffffffffda RBX: 00007fc88f585fa0 RCX: 00007fc88f32f749
[  136.668691][ T8103] RDX: 0000000000000880 RSI: 0000200000001ac0 RDI: 0000000000000003
[  136.668702][ T8103] RBP: 00007fc88dd97090 R08: 0000000000000000 R09: 0000000000000000
[  136.668712][ T8103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  136.668723][ T8103] R13: 00007fc88f586038 R14: 00007fc88f585fa0 R15: 00007ffff0d35e78
[  136.668741][ T8103]  </TASK>
[  136.974575][ T8107] lo speed is unknown, defaulting to 1000
[  137.027049][   T29] kauditd_printk_skb: 373 callbacks suppressed
[  137.027069][   T29] audit: type=1326 audit(2000000009.590:7487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.5.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88f32f749 code=0x7ffc0000
[  137.056714][   T29] audit: type=1326 audit(2000000009.590:7488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.5.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88f32f749 code=0x7ffc0000
[  137.080284][   T29] audit: type=1326 audit(2000000009.590:7489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.5.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc88f32f749 code=0x7ffc0000
[  137.103665][   T29] audit: type=1326 audit(2000000009.600:7490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.5.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88f32f749 code=0x7ffc0000
[  137.103976][ T8127] loop5: detected capacity change from 0 to 128
[  137.127404][   T29] audit: type=1326 audit(2000000009.600:7491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.5.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc88f32f749 code=0x7ffc0000
[  137.157089][   T29] audit: type=1326 audit(2000000009.600:7492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.5.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88f32f749 code=0x7ffc0000
[  137.180655][   T29] audit: type=1326 audit(2000000009.600:7493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.5.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc88f32f749 code=0x7ffc0000
[  137.206997][   T29] audit: type=1326 audit(2000000009.650:7494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8104 comm="syz.3.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe6e29265e7 code=0x7ffc0000
[  137.230468][   T29] audit: type=1326 audit(2000000009.650:7495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8104 comm="syz.3.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe6e28cb829 code=0x7ffc0000
[  137.253886][   T29] audit: type=1326 audit(2000000009.650:7496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8104 comm="syz.3.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e292f749 code=0x7ffc0000
[  137.295431][ T8127] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  137.307921][ T8127] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.423090][ T6396] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  137.435818][ T8145] lo speed is unknown, defaulting to 1000
[  137.821859][ T8177] loop5: detected capacity change from 0 to 1024
[  137.840871][ T8177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.917826][ T6396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.937614][ T8185] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  137.937665][ T8185] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  137.968385][ T8187] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  137.979207][ T8187] __nla_validate_parse: 4 callbacks suppressed
[  137.979226][ T8187] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1698'.
[  138.161086][ T8196] lo speed is unknown, defaulting to 1000
[  138.228184][ T8199] loop4: detected capacity change from 0 to 128
[  138.263274][ T8203] loop4: detected capacity change from 0 to 512
[  138.271165][ T8203] ext4: Unknown parameter 'dont_measure'
[  138.282427][ T8206] xt_CT: You must specify a L4 protocol and not use inversions on it
[  138.535980][ T8228] loop5: detected capacity change from 0 to 512
[  138.561200][ T8228] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1715: inode has both inline data and extents flags
[  138.576516][ T8228] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1715: couldn't read orphan inode 15 (err -117)
[  138.589006][ T8228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.664205][ T6396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.803091][ T8265] syzkaller1: entered promiscuous mode
[  138.808728][ T8265] syzkaller1: entered allmulticast mode
[  138.832741][ T8267] syzkaller1: entered promiscuous mode
[  138.838376][ T8267] syzkaller1: entered allmulticast mode
[  138.882528][ T8244] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1723'.
[  138.891929][ T8244] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1723'.
[  138.954579][ T8271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.013824][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.060506][ T8280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  139.075156][ T8280] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.096838][ T8280] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.1737: lblock 0 mapped to illegal pblock 0 (length 1)
[  139.116298][ T8280] EXT4-fs (loop3): Remounting filesystem read-only
[  139.164308][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  139.258576][ T8303] EXT4-fs: Ignoring removed mblk_io_submit option
[  139.265129][ T8303] EXT4-fs: Ignoring removed i_version option
[  139.288186][ T8303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.313862][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.583248][ T8328] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  139.701407][ T8336] FAULT_INJECTION: forcing a failure.
[  139.701407][ T8336] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  139.714665][ T8336] CPU: 1 UID: 0 PID: 8336 Comm: syz.5.1758 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  139.714701][ T8336] Tainted: [W]=WARN
[  139.714710][ T8336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  139.714746][ T8336] Call Trace:
[  139.714754][ T8336]  <TASK>
[  139.714763][ T8336]  __dump_stack+0x1d/0x30
[  139.714794][ T8336]  dump_stack_lvl+0xe8/0x140
[  139.714823][ T8336]  dump_stack+0x15/0x1b
[  139.714847][ T8336]  should_fail_ex+0x265/0x280
[  139.714907][ T8336]  should_fail+0xb/0x20
[  139.714962][ T8336]  should_fail_usercopy+0x1a/0x20
[  139.714992][ T8336]  _copy_from_user+0x1c/0xb0
[  139.715104][ T8336]  get_user_ifreq+0x53/0x110
[  139.715143][ T8336]  sock_ioctl+0x54e/0x610
[  139.715184][ T8336]  ? __pfx_sock_ioctl+0x10/0x10
[  139.715300][ T8336]  __se_sys_ioctl+0xce/0x140
[  139.715400][ T8336]  __x64_sys_ioctl+0x43/0x50
[  139.715432][ T8336]  x64_sys_call+0x14b0/0x3000
[  139.715459][ T8336]  do_syscall_64+0xd8/0x2a0
[  139.715548][ T8336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.715587][ T8336] RIP: 0033:0x7fc88f32f749
[  139.715607][ T8336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  139.715630][ T8336] RSP: 002b:00007fc88dd76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  139.715654][ T8336] RAX: ffffffffffffffda RBX: 00007fc88f586090 RCX: 00007fc88f32f749
[  139.715669][ T8336] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000009
[  139.715680][ T8336] RBP: 00007fc88dd76090 R08: 0000000000000000 R09: 0000000000000000
[  139.715743][ T8336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  139.715759][ T8336] R13: 00007fc88f586128 R14: 00007fc88f586090 R15: 00007ffff0d35e78
[  139.715784][ T8336]  </TASK>
[  140.100073][ T8354] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  140.106644][ T8354] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  140.114464][ T8354] vhci_hcd vhci_hcd.0: Device attached
[  140.203005][ T8355] vhci_hcd: connection closed
[  140.203132][ T5495] vhci_hcd vhci_hcd.5: stop threads
[  140.213119][ T5495] vhci_hcd vhci_hcd.5: release socket
[  140.218782][ T5495] vhci_hcd vhci_hcd.5: disconnect device
[  140.267518][ T8360] FAULT_INJECTION: forcing a failure.
[  140.267518][ T8360] name failslab, interval 1, probability 0, space 0, times 0
[  140.280409][ T8360] CPU: 1 UID: 0 PID: 8360 Comm: syz.4.1765 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  140.280502][ T8360] Tainted: [W]=WARN
[  140.280510][ T8360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  140.280526][ T8360] Call Trace:
[  140.280534][ T8360]  <TASK>
[  140.280543][ T8360]  __dump_stack+0x1d/0x30
[  140.280575][ T8360]  dump_stack_lvl+0xe8/0x140
[  140.280680][ T8360]  dump_stack+0x15/0x1b
[  140.280721][ T8360]  should_fail_ex+0x265/0x280
[  140.280743][ T8360]  should_failslab+0x8c/0xb0
[  140.280765][ T8360]  kmem_cache_alloc_noprof+0x69/0x4b0
[  140.280793][ T8360]  ? security_file_alloc+0x32/0x100
[  140.280829][ T8360]  security_file_alloc+0x32/0x100
[  140.280896][ T8360]  init_file+0x5c/0x1c0
[  140.280942][ T8360]  alloc_empty_file+0x8b/0x200
[  140.280977][ T8360]  alloc_file_pseudo+0xc6/0x160
[  140.281012][ T8360]  aio_setup_ring+0x133/0x760
[  140.281093][ T8360]  ioctx_alloc+0x2aa/0x4c0
[  140.281124][ T8360]  ? fput+0x8f/0xc0
[  140.281158][ T8360]  __se_sys_io_setup+0x6b/0x1b0
[  140.281205][ T8360]  __x64_sys_io_setup+0x31/0x40
[  140.281236][ T8360]  x64_sys_call+0x2a8e/0x3000
[  140.281271][ T8360]  do_syscall_64+0xd8/0x2a0
[  140.281320][ T8360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.281347][ T8360] RIP: 0033:0x7f06a120f749
[  140.281365][ T8360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.281463][ T8360] RSP: 002b:00007f069fc35038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  140.281484][ T8360] RAX: ffffffffffffffda RBX: 00007f06a1466180 RCX: 00007f06a120f749
[  140.281501][ T8360] RDX: 0000000000000000 RSI: 0000200000002400 RDI: 00000000000008f0
[  140.281516][ T8360] RBP: 00007f069fc35090 R08: 0000000000000000 R09: 0000000000000000
[  140.281528][ T8360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.281540][ T8360] R13: 00007f06a1466218 R14: 00007f06a1466180 R15: 00007fff8d0dac28
[  140.281613][ T8360]  </TASK>
[  140.763491][ T8380] set_capacity_and_notify: 4 callbacks suppressed
[  140.763547][ T8380] loop4: detected capacity change from 0 to 512
[  140.778850][ T8380] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1774: inode has both inline data and extents flags
[  140.800508][ T8380] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1774: couldn't read orphan inode 15 (err -117)
[  140.813531][ T8380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.870102][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.932150][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1777'.
[  140.944265][ T8397] loop4: detected capacity change from 0 to 1024
[  140.962823][ T8397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.013338][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.414424][ T8440] loop3: detected capacity change from 0 to 1024
[  141.415378][ T8440] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  141.434987][ T8438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1788'.
[  141.441246][ T8445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1790'.
[  141.441772][ T8440] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  141.441804][ T8440] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  141.442887][ T8440] JBD2: no valid journal superblock found
[  141.442903][ T8440] EXT4-fs (loop3): Could not load journal inode
[  141.770966][ T8473] loop3: detected capacity change from 0 to 512
[  141.772964][ T8473] EXT4-fs: Ignoring removed bh option
[  141.820847][ T8473] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  141.820867][ T8473] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  141.827828][ T8473] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  142.003274][ T8473] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  142.026558][ T8473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.072594][ T8473] mmap: syz.3.1797 (8473) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  142.112973][   T29] kauditd_printk_skb: 303 callbacks suppressed
[  142.113000][   T29] audit: type=1400 audit(2000000014.680:7800): avc:  denied  { read } for  pid=8470 comm="syz.3.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  142.135395][   T29] audit: type=1326 audit(2000000014.700:7801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  142.171119][   T29] audit: type=1326 audit(2000000014.740:7802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  142.171161][   T29] audit: type=1326 audit(2000000014.740:7803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  142.171188][   T29] audit: type=1326 audit(2000000014.740:7804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  142.171280][   T29] audit: type=1326 audit(2000000014.740:7805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  142.171313][   T29] audit: type=1326 audit(2000000014.740:7806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  142.171346][   T29] audit: type=1326 audit(2000000014.740:7807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  142.171407][   T29] audit: type=1326 audit(2000000014.740:7808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  142.171481][   T29] audit: type=1326 audit(2000000014.740:7809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  142.173360][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.466589][ T8514] syz_tun: entered allmulticast mode
[  142.490613][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1806'.
[  142.553709][ T8514] syz_tun (unregistering): left allmulticast mode
[  142.599176][ T8521] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  142.642617][ T8521] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1812'.
[  142.706386][ T8531] loop5: detected capacity change from 0 to 512
[  142.714619][ T8531] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1816: inode has both inline data and extents flags
[  142.728145][ T8531] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1816: couldn't read orphan inode 15 (err -117)
[  142.740954][ T8531] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.805779][ T6396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.852042][ T8542] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.861961][ T8542] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.908897][ T8542] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.918838][ T8542] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.975291][ T8558] loop4: detected capacity change from 0 to 512
[  143.000375][ T8558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.000546][ T8558] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.055360][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.066535][ T8542] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  143.066600][ T8542] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.095103][ T8571] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  143.118063][ T8542] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  143.118165][ T8542] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.119144][ T8571] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1827'.
[  143.156403][ T5495] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  143.156522][ T5495] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.168042][ T5495] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  143.168076][ T5495] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.168120][ T5495] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  143.168193][ T5495] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.168302][ T5495] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  143.168332][ T5495] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.219558][ T8581] lo speed is unknown, defaulting to 1000
[  143.271403][ T8588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1832'.
[  143.297607][ T8588] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1832'.
[  143.509773][ T8615] loop4: detected capacity change from 0 to 1024
[  143.520070][ T8618] loop5: detected capacity change from 0 to 512
[  143.520385][ T8618] ext4: Unknown parameter 'smackfsdef'
[  143.546175][ T8615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.619106][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.675888][ T8636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53408 sclass=netlink_route_socket pid=8636 comm=syz.4.1850
[  143.736506][ T8638] netlink: 'syz.5.1849': attribute type 1 has an invalid length.
[  143.736528][ T8638] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1849'.
[  143.762278][ T8643] loop1: detected capacity change from 0 to 512
[  143.803182][ T8643] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1852: inode has both inline data and extents flags
[  143.803307][ T8643] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1852: couldn't read orphan inode 15 (err -117)
[  143.804124][ T8643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.970581][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.147949][ T8681] loop4: detected capacity change from 0 to 1024
[  144.160431][ T8681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.218632][ T8683] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.218829][ T8683] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.221051][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.350849][ T8683] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.353262][ T8683] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.401891][ T8699] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  144.428211][ T8699] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1864'.
[  144.458774][ T3512] syz1: Port: 1 Link DOWN
[  144.458831][ T5495] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.458873][ T5495] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.458968][ T5495] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.459003][ T5495] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.459462][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1865'.
[  144.573472][ T8716] SELinux:  Context × is not valid (left unmapped).
[  144.575116][ T8716] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.613416][ T8716] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.658224][ T8716] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.701681][ T8711] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1867: inode has both inline data and extents flags
[  144.701918][ T8711] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1867: couldn't read orphan inode 15 (err -117)
[  144.702556][ T8711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.710182][ T8716] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.757627][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.825805][ T5495] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.866778][ T5495] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.885354][ T5495] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.903212][ T5495] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.913309][ T8732] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  144.932498][ T8732] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.955554][ T8736] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  144.970004][ T8736] ext4 filesystem being mounted at /376/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  145.175936][ T5485] Bluetooth: hci0: Frame reassembly failed (-84)
[  145.188629][ T8756] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  145.201653][ T8762] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.234564][ T8756] team0 (unregistering): Port device team_slave_0 removed
[  145.307005][ T8766] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1886'.
[  145.347419][ T8764] lo speed is unknown, defaulting to 1000
[  145.390307][ T8765] lo speed is unknown, defaulting to 1000
[  145.601829][ T8795] pimreg: entered allmulticast mode
[  145.615395][ T8795] tmpfs: Bad value for 'mpol'
[  145.620688][ T8794] pimreg: left allmulticast mode
[  145.689073][ T8804] SELinux:  Context system_u:object_r:crond_exec_t:s0 is not valid (left unmapped).
[  145.788175][ T8815] lo speed is unknown, defaulting to 1000
[  145.979792][ T8829] set_capacity_and_notify: 7 callbacks suppressed
[  145.979806][ T8829] loop5: detected capacity change from 0 to 1024
[  146.237659][ T8847] lo speed is unknown, defaulting to 1000
[  146.537770][ T8856] lo speed is unknown, defaulting to 1000
[  146.555555][ T8858] netlink: 'syz.4.1924': attribute type 1 has an invalid length.
[  146.572607][ T8858] 8021q: adding VLAN 0 to HW filter on device bond1
[  146.594951][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1924'.
[  146.638297][ T8868] SELinux:  Context system_u:object_r:getty_etc_t:s0 is not valid (left unmapped).
[  146.644190][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1924'.
[  146.651739][ T8868] 9p: Bad value for 'wfdno'
[  146.719131][ T8872] wireguard0: entered promiscuous mode
[  146.724732][ T8872] wireguard0: entered allmulticast mode
[  146.751552][ T8877] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  146.780838][ T8874] 9pnet: p9_errstr2errno: server reported unknown error 0x0000
[  146.793588][ T8884] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  146.827955][ T8888] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.898464][ T8888] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.038703][ T8888] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.078474][ T8888] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.182641][ T8902] loop1: detected capacity change from 0 to 1024
[  147.193990][ T8902] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  147.205070][ T8902] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  147.217182][ T8902] JBD2: no valid journal superblock found
[  147.222999][ T8902] EXT4-fs (loop1): Could not load journal inode
[  147.256309][ T3498] Bluetooth: hci0: command 0x1003 tx timeout
[  147.534070][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  147.568598][ T8901] lo speed is unknown, defaulting to 1000
[  147.661321][ T5519] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.689916][ T5519] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.699426][ T8907] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  147.709335][ T8907] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.807659][ T8910] tmpfs: Bad value for 'mpol'
[  147.813689][ T8907] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  147.823524][ T8907] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.899275][ T5519] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.926565][ T5519] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.957701][ T8907] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  147.967542][ T8907] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.982876][   T29] kauditd_printk_skb: 796 callbacks suppressed
[  147.982891][   T29] audit: type=1400 audit(2000000020.550:8606): avc:  denied  { connect } for  pid=8912 comm="syz.4.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  148.030089][   T29] audit: type=1400 audit(2000000020.580:8607): avc:  denied  { write } for  pid=8912 comm="syz.4.1944" path="socket:[32648]" dev="sockfs" ino=32648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  148.068664][ T8907] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.078524][ T8907] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.149647][ T8915] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  148.172394][ T8915] __nla_validate_parse: 4 callbacks suppressed
[  148.172412][ T8915] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1945'.
[  148.196658][ T5495] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  148.204895][ T5495] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.261297][ T5495] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  148.269726][ T5495] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.312281][ T8921] loop1: detected capacity change from 0 to 512
[  148.319768][ T5495] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  148.328042][ T5495] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.336028][ T8921] ext4: Unknown parameter '.'
[  148.357152][ T5495] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  148.365483][ T5495] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.408198][ T8921] loop1: detected capacity change from 0 to 513
[  148.447402][ T8921] ext4: Unknown parameter '.'
[  148.466329][ T8921] loop1: detected capacity change from 0 to 513
[  148.506272][ T8921] ext4: Unknown parameter '.'
[  148.525348][ T8921] loop1: detected capacity change from 0 to 513
[  148.562314][ T8931] loop3: detected capacity change from 0 to 1024
[  148.642894][ T8921] ext4: Unknown parameter '.'
[  148.671745][   T29] audit: type=1326 audit(2000000021.180:8608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8928 comm="syz.5.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88f32f749 code=0x7ffc0000
[  148.695468][   T29] audit: type=1326 audit(2000000021.180:8609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8928 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88f32f749 code=0x7ffc0000
[  148.718981][   T29] audit: type=1326 audit(2000000021.180:8610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8928 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88f32f749 code=0x7ffc0000
[  148.742391][   T29] audit: type=1326 audit(2000000021.180:8611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8928 comm="syz.5.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88f32f749 code=0x7ffc0000
[  148.765865][   T29] audit: type=1326 audit(2000000021.180:8612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8928 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc88f32f749 code=0x7ffc0000
[  148.789305][   T29] audit: type=1326 audit(2000000021.180:8613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8928 comm="syz.5.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88f32f749 code=0x7ffc0000
[  148.812734][   T29] audit: type=1326 audit(2000000021.180:8614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8928 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88f32f749 code=0x7ffc0000
[  148.836197][   T29] audit: type=1326 audit(2000000021.180:8615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8928 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88f32f749 code=0x7ffc0000
[  148.886259][ T8921] loop1: detected capacity change from 0 to 513
[  148.892989][ T8921] ext4: Unknown parameter '.'
[  148.905250][ T8921] loop1: detected capacity change from 0 to 513
[  148.920139][ T8938] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  148.928656][ T8921] ext4: Unknown parameter '.'
[  148.937121][ T8921] loop1: detected capacity change from 0 to 513
[  148.944334][ T8938] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1952'.
[  148.954440][ T8921] ext4: Unknown parameter '.'
[  148.976457][ T8921] ext4: Unknown parameter '.'
[  148.985233][ T8921] ext4: Unknown parameter '.'
[  149.015763][ T8942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1954'.
[  149.020917][ T8921] ext4: Unknown parameter '.'
[  149.034303][ T8921] ext4: Unknown parameter '.'
[  149.045582][ T8921] ext4: Unknown parameter '.'
[  149.057509][ T8921] ext4: Unknown parameter '.'
[  149.066289][ T8921] ext4: Unknown parameter '.'
[  149.075144][ T8921] ext4: Unknown parameter '.'
[  149.085241][ T8921] ext4: Unknown parameter '.'
[  149.096409][ T8921] ext4: Unknown parameter '.'
[  149.107102][ T8921] ext4: Unknown parameter '.'
[  149.112377][ T8952] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1957'.
[  149.121795][ T8921] ext4: Unknown parameter '.'
[  149.122823][ T8950] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.131161][ T8921] ext4: Unknown parameter '.'
[  149.145705][ T8921] ext4: Unknown parameter '.'
[  149.203428][ T8960] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  149.353268][ T8977] syz_tun: entered allmulticast mode
[  149.376736][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1961'.
[  149.399859][ T8977] syz_tun (unregistering): left allmulticast mode
[  149.433340][ T8981] lo speed is unknown, defaulting to 1000
[  149.562491][ T8992] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  149.569056][ T8992] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  149.576794][ T8992] vhci_hcd vhci_hcd.0: Device attached
[  149.587760][ T8995] vhci_hcd: connection closed
[  149.588433][ T5519] vhci_hcd vhci_hcd.1: stop threads
[  149.598441][ T5519] vhci_hcd vhci_hcd.1: release socket
[  149.603844][ T5519] vhci_hcd vhci_hcd.1: disconnect device
[  149.613593][ T9000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  149.805807][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1977'.
[  149.814972][ T9010] bridge_slave_1: left allmulticast mode
[  149.820813][ T9010] bridge_slave_1: left promiscuous mode
[  149.826595][ T9010] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.834397][ T9010] bridge_slave_0: left allmulticast mode
[  149.840130][ T9010] bridge_slave_0: left promiscuous mode
[  149.845972][ T9010] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.234780][ T9033] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.246442][ T9030] lo speed is unknown, defaulting to 1000
[  150.759015][ T9067] FAULT_INJECTION: forcing a failure.
[  150.759015][ T9067] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  150.772363][ T9067] CPU: 1 UID: 0 PID: 9067 Comm: syz.4.1996 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  150.772403][ T9067] Tainted: [W]=WARN
[  150.772411][ T9067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  150.772448][ T9067] Call Trace:
[  150.772456][ T9067]  <TASK>
[  150.772465][ T9067]  __dump_stack+0x1d/0x30
[  150.772519][ T9067]  dump_stack_lvl+0xe8/0x140
[  150.772548][ T9067]  dump_stack+0x15/0x1b
[  150.772610][ T9067]  should_fail_ex+0x265/0x280
[  150.772639][ T9067]  should_fail+0xb/0x20
[  150.772667][ T9067]  should_fail_usercopy+0x1a/0x20
[  150.772698][ T9067]  strncpy_from_user+0x27/0x260
[  150.772783][ T9067]  getname_flags+0xae/0x3b0
[  150.772815][ T9067]  __se_sys_move_mount+0x16e/0x490
[  150.772844][ T9067]  ? fput+0x8f/0xc0
[  150.772927][ T9067]  __x64_sys_move_mount+0x67/0x80
[  150.772956][ T9067]  x64_sys_call+0x2a99/0x3000
[  150.773013][ T9067]  do_syscall_64+0xd8/0x2a0
[  150.773092][ T9067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.773129][ T9067] RIP: 0033:0x7f06a120f749
[  150.773148][ T9067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.773228][ T9067] RSP: 002b:00007f069fc77038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad
[  150.773287][ T9067] RAX: ffffffffffffffda RBX: 00007f06a1465fa0 RCX: 00007f06a120f749
[  150.773358][ T9067] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: ffffffffffffffff
[  150.773375][ T9067] RBP: 00007f069fc77090 R08: 0003000000000000 R09: 0000000000000000
[  150.773391][ T9067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  150.773409][ T9067] R13: 00007f06a1466038 R14: 00007f06a1465fa0 R15: 00007fff8d0dac28
[  150.773433][ T9067]  </TASK>
[  151.115705][ T9094] lo speed is unknown, defaulting to 1000
[  151.417133][ T9133] set_capacity_and_notify: 16 callbacks suppressed
[  151.417200][ T9133] loop5: detected capacity change from 0 to 1024
[  151.464402][ T9133] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO
[  151.616356][ T9151] lo speed is unknown, defaulting to 1000
[  151.776798][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'.
[  151.824185][ T9166] loop5: detected capacity change from 0 to 1024
[  151.931096][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2015'.
[  152.002839][ T9197] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  152.019556][ T9197] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2021'.
[  152.112478][ T9212] lo speed is unknown, defaulting to 1000
[  152.171121][ T9209] loop4: detected capacity change from 0 to 512
[  152.241956][ T9226] loop3: detected capacity change from 0 to 1024
[  152.312031][ T9231] loop4: detected capacity change from 0 to 8192
[  152.325381][ T9237] No such timeout policy "syz1"
[  152.346636][ T9231] loop4: detected capacity change from 0 to 1024
[  152.359102][ T9239] FAULT_INJECTION: forcing a failure.
[  152.359102][ T9239] name failslab, interval 1, probability 0, space 0, times 0
[  152.371829][ T9239] CPU: 1 UID: 0 PID: 9239 Comm: syz.0.2034 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  152.371862][ T9239] Tainted: [W]=WARN
[  152.371870][ T9239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  152.371887][ T9239] Call Trace:
[  152.371896][ T9239]  <TASK>
[  152.371959][ T9239]  __dump_stack+0x1d/0x30
[  152.371985][ T9239]  dump_stack_lvl+0xe8/0x140
[  152.372011][ T9239]  dump_stack+0x15/0x1b
[  152.372037][ T9239]  should_fail_ex+0x265/0x280
[  152.372112][ T9239]  should_failslab+0x8c/0xb0
[  152.372140][ T9239]  __kmalloc_cache_noprof+0x65/0x4c0
[  152.372165][ T9239]  ? bpf_prog_create_from_user+0x16b/0x260
[  152.372205][ T9239]  bpf_prog_create_from_user+0x16b/0x260
[  152.372270][ T9239]  ? do_seccomp+0x5ac/0xa30
[  152.372296][ T9239]  ? __pfx_seccomp_check_filter+0x10/0x10
[  152.372404][ T9239]  do_seccomp+0x5e1/0xa30
[  152.372433][ T9239]  ? fput+0x8f/0xc0
[  152.372459][ T9239]  ? ksys_write+0x192/0x1a0
[  152.372481][ T9239]  __x64_sys_seccomp+0x40/0x50
[  152.372568][ T9239]  x64_sys_call+0x28d6/0x3000
[  152.372593][ T9239]  do_syscall_64+0xd8/0x2a0
[  152.372627][ T9239]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.372728][ T9239] RIP: 0033:0x7fa70ba5f749
[  152.372743][ T9239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.372761][ T9239] RSP: 002b:00007fa70a4bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[  152.372848][ T9239] RAX: ffffffffffffffda RBX: 00007fa70bcb5fa0 RCX: 00007fa70ba5f749
[  152.372865][ T9239] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000001
[  152.372881][ T9239] RBP: 00007fa70a4bf090 R08: 0000000000000000 R09: 0000000000000000
[  152.372897][ T9239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  152.372909][ T9239] R13: 00007fa70bcb6038 R14: 00007fa70bcb5fa0 R15: 00007ffeb8a49098
[  152.373003][ T9239]  </TASK>
[  152.586482][ T9245] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  152.595219][ T9245] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2035'.
[  152.819426][ T9276] lo speed is unknown, defaulting to 1000
[  152.961064][ T9285] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  153.228529][   T29] kauditd_printk_skb: 643 callbacks suppressed
[  153.228546][   T29] audit: type=1400 audit(2000000025.800:9259): avc:  denied  { ioctl } for  pid=9309 comm="syz.0.2060" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  153.228963][ T9310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.306138][ T9310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.428869][ T9302] bond0: option resend_igmp: invalid value (1024)
[  153.435373][ T9302] bond0: option resend_igmp: allowed values 0 - 255
[  153.443473][ T9302] bond0 (unregistering): Released all slaves
[  153.658859][ T9320] lo speed is unknown, defaulting to 1000
[  153.674221][   T29] audit: type=1326 audit(2000000026.240:9260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.4.2063" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06a120f749 code=0x0
[  153.854259][ T9328] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  153.874248][ T9328] __nla_validate_parse: 1 callbacks suppressed
[  153.874269][ T9328] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2064'.
[  153.951454][ T9330] vlan2: entered allmulticast mode
[  153.956757][ T9330] bridge_slave_0: entered allmulticast mode
[  154.093661][ T9335] 9p: Bad value for 'wfdno'
[  154.132334][ T9344] loop5: detected capacity change from 0 to 512
[  154.139332][ T9344] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.2069: inode has both inline data and extents flags
[  154.167213][ T9344] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2069: couldn't read orphan inode 15 (err -117)
[  154.258984][ T9362] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  154.290150][   T29] audit: type=1326 audit(2000000026.860:9261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9367 comm="syz.1.2077" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f106462f749 code=0x0
[  154.344493][ T9366] lo speed is unknown, defaulting to 1000
[  154.350576][ T9362] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2075'.
[  154.410920][ T9377] pimreg: entered allmulticast mode
[  154.471349][   T29] audit: type=1400 audit(2000000027.030:9262): avc:  denied  { mount } for  pid=9383 comm="syz.5.2080" name="/" dev="hugetlbfs" ino=35072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  154.471390][   T29] audit: type=1400 audit(2000000027.030:9263): avc:  denied  { execute } for  pid=9383 comm="syz.5.2080" name="file0" dev="hugetlbfs" ino=35073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  154.471424][   T29] audit: type=1400 audit(2000000027.030:9264): avc:  denied  { execute_no_trans } for  pid=9383 comm="syz.5.2080" path="/364/file0/file0" dev="hugetlbfs" ino=35073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  154.471682][   T29] audit: type=1400 audit(2000000027.040:9265): avc:  denied  { unmount } for  pid=6396 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  154.481896][ T9389] 9p: Bad value for 'wfdno'
[  154.692322][ T9407] loop5: detected capacity change from 0 to 512
[  154.695449][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2083'.
[  154.711625][ T9407] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.2086: inode has both inline data and extents flags
[  154.790087][ T9407] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2086: couldn't read orphan inode 15 (err -117)
[  154.834900][ T9412] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  154.835449][ T9412] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2088'.
[  154.906211][ T9418] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  154.906844][ T9418] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2100'.
[  154.972083][ T9421] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  154.973998][ T9421] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2102'.
[  155.079759][   T29] audit: type=1326 audit(2000000027.650:9266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9429 comm="syz.5.2094" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc88f32f749 code=0x0
[  155.085067][ T9427] lo speed is unknown, defaulting to 1000
[  155.146516][ T9367] pimreg: left allmulticast mode
[  155.197741][ T9445] 9p: Bad value for 'wfdno'
[  155.204619][   T29] audit: type=1326 audit(2000000027.770:9267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9446 comm="syz.3.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e292f749 code=0x7ffc0000
[  155.204765][   T29] audit: type=1326 audit(2000000027.770:9268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9446 comm="syz.3.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e292f749 code=0x7ffc0000
[  155.277474][ T9450] lo speed is unknown, defaulting to 1000
[  155.330789][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2098'.
[  155.697773][ T9485] netlink: 'syz.4.2109': attribute type 39 has an invalid length.
[  155.874023][ T9493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2113'.
[  155.916320][ T9499] lo speed is unknown, defaulting to 1000
[  156.058644][ T9520] lo speed is unknown, defaulting to 1000
[  156.482042][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2126'.
[  156.542244][ T9556] loop4: detected capacity change from 0 to 1024
[  156.588232][ T9556] EXT4-fs: inline encryption not supported
[  156.594105][ T9556] EXT4-fs: Ignoring removed orlov option
[  156.607929][ T9556] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  156.618615][ T9556] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002]
[  156.618705][ T9556] System zones: 0-1, 3-12
[  156.731720][ T9571] lo speed is unknown, defaulting to 1000
[  156.811895][ T9579] loop4: detected capacity change from 0 to 1024
[  157.003368][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2138'.
[  157.159207][ T9611] loop1: detected capacity change from 0 to 1024
[  157.312964][ T9617] lo speed is unknown, defaulting to 1000
[  157.352296][ T9623] loop4: detected capacity change from 0 to 1024
[  157.368286][ T9620] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  157.628245][ T9658] loop1: detected capacity change from 0 to 512
[  157.637888][ T9658] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2155: inode has both inline data and extents flags
[  157.638083][ T9658] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2155: couldn't read orphan inode 15 (err -117)
[  158.383837][   T29] kauditd_printk_skb: 180 callbacks suppressed
[  158.383855][   T29] audit: type=1326 audit(2000000030.950:9449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9726 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  158.384149][   T29] audit: type=1326 audit(2000000030.950:9450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9726 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  158.384277][   T29] audit: type=1326 audit(2000000030.950:9451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9726 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  158.390961][   T29] audit: type=1326 audit(2000000030.960:9452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9726 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  158.391082][   T29] audit: type=1326 audit(2000000030.960:9453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9726 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  158.391369][   T29] audit: type=1326 audit(2000000030.960:9454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9726 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  158.392268][   T29] audit: type=1326 audit(2000000030.960:9455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9726 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  158.392736][   T29] audit: type=1326 audit(2000000030.960:9456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9726 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  158.393155][   T29] audit: type=1326 audit(2000000030.960:9457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9726 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f06a120f749 code=0x7ffc0000
[  158.393451][   T29] audit: type=1326 audit(2000000030.960:9458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9726 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f06a120f783 code=0x7ffc0000
[  158.401836][ T9727] loop4: detected capacity change from 0 to 128
[  158.442685][ T9727] ext4 filesystem being mounted at /403/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.742568][ T9755] loop5: detected capacity change from 0 to 1024
[  158.749507][ T9755] ext4: Unknown parameter 'fowner'
[  158.759311][ T9757] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0
[  158.785717][ T9755] IPVS: stopping backup sync thread 9757 ...
[  158.960758][ T9774] __nla_validate_parse: 1 callbacks suppressed
[  158.960773][ T9774] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2183'.
[  158.993728][ T9774] lo speed is unknown, defaulting to 1000
[  159.064261][ T9778] loop1: detected capacity change from 0 to 1024
[  159.122633][ T9778] PID 9778 killed due to inadequate hugepage pool
[  159.259085][ T9805] loop1: detected capacity change from 0 to 128
[  159.263960][ T9805] ext4 filesystem being mounted at /434/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.359343][ T9814] loop1: detected capacity change from 0 to 1024
[  159.718094][ T9833] EXT4-fs: Ignoring removed i_version option
[  159.726425][ T9833] EXT4-fs (loop4): orphan cleanup on readonly fs
[  159.726821][ T9833] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  159.727214][ T9833] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  159.727453][ T9833] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #13: comm syz.4.2195: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  159.773217][ T9833] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2195: couldn't read orphan inode 13 (err -117)
[  159.774015][ T9833] EXT4-fs mount: 40 callbacks suppressed
[  159.774032][ T9833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  159.786086][ T9833] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  159.809831][ T9833] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  160.020890][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.165336][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2202'.
[  160.533718][ T9880] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2211'.
[  160.558798][ T9881] pimreg: entered allmulticast mode
[  160.566786][ T9883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48410 sclass=netlink_route_socket pid=9883 comm=syz.0.2212
[  160.607957][ T9886] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0
[  160.608097][ T9885] IPVS: stopping backup sync thread 9886 ...
[  160.717815][ T9891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2215'.
[  161.106863][ T9924] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  161.115537][ T9924] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2224'.
[  161.118118][ T9923] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  161.137926][ T9923] EXT4-fs (loop4): 1 truncate cleaned up
[  161.144053][ T9923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.164005][ T9923] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2223'.
[  161.245724][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.279070][ T9872] pimreg: left allmulticast mode
[  161.294905][ T9937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2227'.
[  161.328138][ T9945] EXT4-fs: inline encryption not supported
[  161.334051][ T9945] EXT4-fs: Ignoring removed orlov option
[  161.351262][ T9945] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  161.367769][ T9945] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002]
[  161.376288][ T9945] System zones: 0-1, 3-12
[  161.381799][ T9945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.406849][ T9952] lo speed is unknown, defaulting to 1000
[  161.450452][ T9945] FAULT_INJECTION: forcing a failure.
[  161.450452][ T9945] name failslab, interval 1, probability 0, space 0, times 0
[  161.463255][ T9945] CPU: 1 UID: 0 PID: 9945 Comm: syz.4.2229 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  161.463364][ T9945] Tainted: [W]=WARN
[  161.463373][ T9945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  161.463434][ T9945] Call Trace:
[  161.463442][ T9945]  <TASK>
[  161.463450][ T9945]  __dump_stack+0x1d/0x30
[  161.463476][ T9945]  dump_stack_lvl+0xe8/0x140
[  161.463497][ T9945]  dump_stack+0x15/0x1b
[  161.463517][ T9945]  should_fail_ex+0x265/0x280
[  161.463541][ T9945]  should_failslab+0x8c/0xb0
[  161.463684][ T9945]  kmem_cache_alloc_noprof+0x69/0x4b0
[  161.463707][ T9945]  ? ext4_mb_new_blocks+0x2ce/0x2080
[  161.463743][ T9945]  ext4_mb_new_blocks+0x2ce/0x2080
[  161.463859][ T9945]  ? ext4_ext_search_right+0x30b/0x4f0
[  161.463892][ T9945]  ? ext4_inode_to_goal_block+0x1be/0x1e0
[  161.463992][ T9945]  ext4_ext_map_blocks+0xff5/0x38a0
[  161.464079][ T9945]  ? __account_obj_stock+0x211/0x350
[  161.464110][ T9945]  ext4_map_blocks+0x626/0xd20
[  161.464159][ T9945]  ext4_iomap_begin+0x89b/0xe40
[  161.464198][ T9945]  ? __pfx_ext4_iomap_begin+0x10/0x10
[  161.464229][ T9945]  iomap_iter+0x388/0x790
[  161.464267][ T9945]  __iomap_dio_rw+0x78a/0x1290
[  161.464313][ T9945]  iomap_dio_rw+0x40/0x90
[  161.464383][ T9945]  ext4_file_write_iter+0xb3a/0xf60
[  161.464486][ T9945]  ? __pfx_ext4_file_write_iter+0x10/0x10
[  161.464542][ T9945]  vfs_write+0x52a/0x960
[  161.464596][ T9945]  __x64_sys_pwrite64+0xfd/0x150
[  161.464626][ T9945]  x64_sys_call+0x9f7/0x3000
[  161.464654][ T9945]  do_syscall_64+0xd8/0x2a0
[  161.464752][ T9945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.464774][ T9945] RIP: 0033:0x7f06a120f749
[  161.464789][ T9945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.464807][ T9945] RSP: 002b:00007f069fc77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  161.464903][ T9945] RAX: ffffffffffffffda RBX: 00007f06a1465fa0 RCX: 00007f06a120f749
[  161.464919][ T9945] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000005
[  161.464936][ T9945] RBP: 00007f069fc77090 R08: 0000000000000000 R09: 0000000000000000
[  161.464951][ T9945] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000001
[  161.464963][ T9945] R13: 00007f06a1466038 R14: 00007f06a1465fa0 R15: 00007fff8d0dac28
[  161.464982][ T9945]  </TASK>
[  161.724047][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.025215][ T9974] FAULT_INJECTION: forcing a failure.
[  162.025215][ T9974] name failslab, interval 1, probability 0, space 0, times 0
[  162.037902][ T9974] CPU: 0 UID: 0 PID: 9974 Comm: syz.4.2236 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  162.037935][ T9974] Tainted: [W]=WARN
[  162.037941][ T9974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  162.037999][ T9974] Call Trace:
[  162.038081][ T9974]  <TASK>
[  162.038089][ T9974]  __dump_stack+0x1d/0x30
[  162.038114][ T9974]  dump_stack_lvl+0xe8/0x140
[  162.038138][ T9974]  dump_stack+0x15/0x1b
[  162.038233][ T9974]  should_fail_ex+0x265/0x280
[  162.038256][ T9974]  should_failslab+0x8c/0xb0
[  162.038279][ T9974]  __kmalloc_cache_noprof+0x65/0x4c0
[  162.038333][ T9974]  ? ip_vs_add_service+0x286/0xa70
[  162.038386][ T9974]  ip_vs_add_service+0x286/0xa70
[  162.038414][ T9974]  ? __ip_vs_service_find+0x26e/0x290
[  162.038443][ T9974]  ? __cond_resched+0x4e/0x90
[  162.038486][ T9974]  do_ip_vs_set_ctl+0x6ec/0x8c0
[  162.038521][ T9974]  ? __pfx_ip4_datagram_release_cb+0x10/0x10
[  162.038562][ T9974]  ? ip4_datagram_release_cb+0x351/0x380
[  162.038698][ T9974]  nf_setsockopt+0x199/0x1b0
[  162.038720][ T9974]  ip_setsockopt+0x102/0x110
[  162.038749][ T9974]  raw_setsockopt+0xbd/0x150
[  162.038770][ T9974]  sock_common_setsockopt+0x69/0x80
[  162.038824][ T9974]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  162.038852][ T9974]  __sys_setsockopt+0x184/0x200
[  162.038888][ T9974]  __x64_sys_setsockopt+0x64/0x80
[  162.038930][ T9974]  x64_sys_call+0x21d5/0x3000
[  162.039017][ T9974]  do_syscall_64+0xd8/0x2a0
[  162.039051][ T9974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.039071][ T9974] RIP: 0033:0x7f06a120f749
[  162.039086][ T9974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.039201][ T9974] RSP: 002b:00007f069fc35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  162.039225][ T9974] RAX: ffffffffffffffda RBX: 00007f06a1466180 RCX: 00007f06a120f749
[  162.039241][ T9974] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 000000000000000a
[  162.039255][ T9974] RBP: 00007f069fc35090 R08: 000000000000002c R09: 0000000000000000
[  162.039267][ T9974] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  162.039281][ T9974] R13: 00007f06a1466218 R14: 00007f06a1466180 R15: 00007fff8d0dac28
[  162.039302][ T9974]  </TASK>
[  162.856014][ T9977] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2238'.
[  163.030549][ T3503] IPVS: starting estimator thread 0...
[  163.161935][ T3503] IPVS: starting estimator thread 0...
[  163.216065][ T9978] IPVS: using max 2112 ests per chain, 105600 per kthread
[  163.265982][ T9989] IPVS: using max 2208 ests per chain, 110400 per kthread
[  163.365125][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2247'.
[  163.729803][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2252'.
[  163.814288][ T5483] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  163.829053][ T5483] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  163.850719][ T5483] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  163.859614][T10019] lo speed is unknown, defaulting to 1000
[  163.874914][ T5483] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  164.058051][   T29] kauditd_printk_skb: 1714 callbacks suppressed
[  164.058069][   T29] audit: type=1326 audit(2000000036.630:11173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10041 comm="syz.0.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70ba5f749 code=0x7ffc0000
[  164.125911][   T29] audit: type=1326 audit(2000000036.630:11174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10041 comm="syz.0.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70ba5f749 code=0x7ffc0000
[  164.149698][   T29] audit: type=1326 audit(2000000036.630:11175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10041 comm="syz.0.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70ba5f749 code=0x7ffc0000
[  164.162044][T10055] set_capacity_and_notify: 3 callbacks suppressed
[  164.162067][T10055] loop5: detected capacity change from 0 to 1024
[  164.173409][   T29] audit: type=1326 audit(2000000036.660:11176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10041 comm="syz.0.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa70ba565e7 code=0x7ffc0000
[  164.173443][   T29] audit: type=1326 audit(2000000036.660:11177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10041 comm="syz.0.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa70b9fb829 code=0x7ffc0000
[  164.173500][   T29] audit: type=1326 audit(2000000036.660:11178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10041 comm="syz.0.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa70ba5f749 code=0x7ffc0000
[  164.257415][   T29] audit: type=1326 audit(2000000036.660:11179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10041 comm="syz.0.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa70ba565e7 code=0x7ffc0000
[  164.280990][   T29] audit: type=1326 audit(2000000036.660:11180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10041 comm="syz.0.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa70b9fb829 code=0x7ffc0000
[  164.288544][T10055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.304664][   T29] audit: type=1326 audit(2000000036.660:11181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10041 comm="syz.0.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70ba5f749 code=0x7ffc0000
[  164.340244][   T29] audit: type=1326 audit(2000000036.660:11182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10041 comm="syz.0.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70ba5f749 code=0x7ffc0000
[  164.431054][ T6396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.491816][T10074] lo speed is unknown, defaulting to 1000
[  164.516864][T10075] lo speed is unknown, defaulting to 1000
[  164.524396][T10081] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  164.558675][T10079] __nla_validate_parse: 1 callbacks suppressed
[  164.558694][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2269'.
[  164.574936][T10081] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2263'.
[  164.665961][T10097] loop5: detected capacity change from 0 to 1024
[  164.703578][T10097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.791550][ T6396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.846602][T10112] loop1: detected capacity change from 0 to 128
[  164.857027][T10112] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  164.882087][T10112] ext4 filesystem being mounted at /449/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.911360][T10117] lo speed is unknown, defaulting to 1000
[  164.934570][T10115] FAULT_INJECTION: forcing a failure.
[  164.934570][T10115] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  164.947912][T10115] CPU: 0 UID: 0 PID: 10115 Comm: syz.4.2280 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  164.948015][T10115] Tainted: [W]=WARN
[  164.948024][T10115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  164.948041][T10115] Call Trace:
[  164.948050][T10115]  <TASK>
[  164.948067][T10115]  __dump_stack+0x1d/0x30
[  164.948098][T10115]  dump_stack_lvl+0xe8/0x140
[  164.948178][T10115]  dump_stack+0x15/0x1b
[  164.948203][T10115]  should_fail_ex+0x265/0x280
[  164.948232][T10115]  should_fail+0xb/0x20
[  164.948256][T10115]  should_fail_usercopy+0x1a/0x20
[  164.948297][T10115]  copy_fpstate_to_sigframe+0x628/0x7d0
[  164.948328][T10115]  ? copy_fpstate_to_sigframe+0xe6/0x7d0
[  164.948374][T10115]  ? x86_task_fpu+0x36/0x60
[  164.948435][T10115]  get_sigframe+0x34d/0x490
[  164.948462][T10115]  ? get_signal+0xdc7/0xf70
[  164.948491][T10115]  x64_setup_rt_frame+0xa8/0x580
[  164.948518][T10115]  arch_do_signal_or_restart+0x24c/0x450
[  164.948628][T10115]  exit_to_user_mode_loop+0x6a/0x740
[  164.948703][T10115]  do_syscall_64+0x202/0x2a0
[  164.948742][T10115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.948767][T10115] RIP: 0033:0x7f06a120f747
[  164.948786][T10115] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  164.948810][T10115] RSP: 002b:00007f069fc77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  164.948905][T10115] RAX: 0000000000000013 RBX: 00007f06a1465fa0 RCX: 00007f06a120f749
[  164.948921][T10115] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003
[  164.948935][T10115] RBP: 00007f069fc77090 R08: 0000000000000000 R09: 0000000000000000
[  164.948949][T10115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  164.948965][T10115] R13: 00007f06a1466038 R14: 00007f06a1465fa0 R15: 00007fff8d0dac28
[  164.948987][T10115]  </TASK>
[  165.174259][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2283'.
[  165.207136][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  165.455136][T10161] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2293'.
[  165.458077][T10161] bridge_slave_0: left allmulticast mode
[  165.458104][T10161] bridge_slave_0: left promiscuous mode
[  165.458325][T10161] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.468710][T10161] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  165.564382][T10171] vhci_hcd vhci_hcd.1: default hub control req: a100 vfffe i0000 l0
[  165.564856][T10171] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2295'.
[  165.713156][T10177] loop1: detected capacity change from 0 to 128
[  165.742059][T10177] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  165.802687][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2297'.
[  165.832791][T10177] ext4 filesystem being mounted at /452/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.999120][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  166.154455][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2300'.
[  166.163558][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2300'.
[  166.186678][T10187] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.259447][ T5498] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  166.311485][ T5498] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  166.322614][T10189] lo speed is unknown, defaulting to 1000
[  166.334104][T10192] loop3: detected capacity change from 0 to 1024
[  166.340650][ T5498] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  166.355238][T10192] EXT4-fs: Ignoring removed mblk_io_submit option
[  166.366736][ T5498] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  166.378472][T10192] EXT4-fs: inline encryption not supported
[  166.390828][T10192] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  166.405554][T10192] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  166.415093][T10192] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.2300: lblock 2 mapped to illegal pblock 2 (length 1)
[  166.429749][T10192] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.2300: lblock 0 mapped to illegal pblock 48 (length 1)
[  166.445573][T10192] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2300: Failed to acquire dquot type 0
[  166.462087][T10192] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  166.472511][T10192] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.2300: mark_inode_dirty error
[  166.487072][T10187] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.498360][T10192] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  166.515174][T10192] EXT4-fs (loop3): 1 orphan inode deleted
[  166.526364][ T5483] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1)
[  166.558092][T10187] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.606304][T10192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.621009][T10187] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.641274][ T5483] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 0
[  166.665220][T10192] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.676372][T10192] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.2300: Invalid inode table block 1 in block_group 0
[  166.689354][T10192] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  166.699465][T10192] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz.3.2300: mark_inode_dirty error
[  166.730410][ T5483] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.758333][ T5483] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.767506][ T5483] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.775746][ T5483] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.842850][T10218] loop3: detected capacity change from 0 to 128
[  166.860942][T10218] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  166.874916][T10218] ext4 filesystem being mounted at /479/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.893866][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2310'.
[  166.985379][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  167.074188][T10230] lo speed is unknown, defaulting to 1000
[  167.180005][T10246] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.227643][T10246] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.279579][T10252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2323'.
[  167.301276][T10246] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.368611][T10246] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.454234][ T5505] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.492632][ T5505] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.514168][ T5505] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.530016][ T5505] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.594202][ T5483] ==================================================================
[  167.602337][ T5483] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios
[  167.610880][ T5483] 
[  167.613214][ T5483] write to 0xffff88811a5a2108 of 44 bytes by task 10264 on cpu 1:
[  167.621034][ T5483]  tty_set_termios+0xc0/0x8c0
[  167.625770][ T5483]  set_termios+0x490/0x4d0
[  167.630215][ T5483]  tty_mode_ioctl+0x379/0x5c0
[  167.634913][ T5483]  n_tty_ioctl_helper+0x91/0x210
[  167.639875][ T5483]  n_tty_ioctl+0x101/0x230
[  167.644309][ T5483]  tty_ioctl+0x83f/0xb80
[  167.648555][ T5483]  __se_sys_ioctl+0xce/0x140
[  167.653161][ T5483]  __x64_sys_ioctl+0x43/0x50
[  167.657768][ T5483]  x64_sys_call+0x14b0/0x3000
[  167.662466][ T5483]  do_syscall_64+0xd8/0x2a0
[  167.666985][ T5483]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.672888][ T5483] 
[  167.675216][ T5483] read to 0xffff88811a5a2121 of 1 bytes by task 5483 on cpu 0:
[  167.682762][ T5483]  n_tty_receive_char_flow_ctrl+0x23/0x1d0
[  167.688622][ T5483]  n_tty_lookahead_flow_ctrl+0xed/0x130
[  167.694195][ T5483]  tty_port_default_lookahead_buf+0x91/0xc0
[  167.700117][ T5483]  flush_to_ldisc+0x288/0x340
[  167.704811][ T5483]  process_scheduled_works+0x4ce/0x9d0
[  167.710288][ T5483]  worker_thread+0x582/0x770
[  167.714893][ T5483]  kthread+0x489/0x510
[  167.718997][ T5483]  ret_from_fork+0x149/0x290
[  167.723619][ T5483]  ret_from_fork_asm+0x1a/0x30
[  167.728409][ T5483] 
[  167.730735][ T5483] value changed: 0x11 -> 0x76
[  167.735418][ T5483] 
[  167.737744][ T5483] Reported by Kernel Concurrency Sanitizer on:
[  167.743897][ T5483] CPU: 0 UID: 0 PID: 5483 Comm: kworker/u8:13 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  167.755466][ T5483] Tainted: [W]=WARN
[  167.759275][ T5483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  167.769337][ T5483] Workqueue: events_unbound flush_to_ldisc
[  167.775156][ T5483] ==================================================================
[  168.935912][ T3498] Bluetooth: hci0: command 0x1003 tx timeout
[  168.942200][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110