last executing test programs:

1.77989476s ago: executing program 4 (id=3168):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000006c0))
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
r4 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
pidfd_send_signal(r5, 0x2b, 0x0, 0x0)
getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [0x3ff, 0x8, 0x88, 0x1, 0xb]}, &(0x7f0000000080)=0x54)
sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20)

1.70122502s ago: executing program 4 (id=3169):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x39}, 0x18)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = dup2(r1, r1)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000040000480240001800b00010072656a6563740000140002800800014000000000050002000000000018000180080001006f7366000c0022715e2201400000001408000b40000000000900010073797a30"], 0xf0}}, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x39}, 0x18) (async)
creat(&(0x7f00000000c0)='./file0\x00', 0x0) (async)
dup2(r1, r1) (async)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) (async)
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000040000480240001800b00010072656a6563740000140002800800014000000000050002000000000018000180080001006f7366000c0022715e2201400000001408000b40000000000900010073797a30"], 0xf0}}, 0x0) (async)

1.598727141s ago: executing program 4 (id=3171):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c01000010001307fefffdfffcdbdf25fe8000000000000000000000000000bb20010000000000000000000000000001000000004e21ffff0a0000006c000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="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"/292], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10)
r6 = socket$inet6(0x10, 0x3, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x0)
sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170)

1.593488371s ago: executing program 4 (id=3172):
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mknod$loop(0x0, 0x6000, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000007c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x4000)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000001180)='kfree\x00', r4, 0x0, 0x4}, 0x18)
pipe2(&(0x7f0000001cc0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB='\awfdno=', @ANYRESHEX=r6, @ANYBLOB=',debug=0x0000000000000005,access=any,\x00'])
socket$kcm(0x29, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_enter(0xffffffffffffffff, 0x47f8, 0x0, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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")

1.534662941s ago: executing program 3 (id=3176):
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0})

1.496480272s ago: executing program 3 (id=3177):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r2, 0x2285, 0x0)
writev(r2, 0x0, 0x0)

1.429623122s ago: executing program 3 (id=3178):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xfffffeff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x116f9834f8d19c8f}, 0x4006)

1.295834063s ago: executing program 3 (id=3179):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x10f1e000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
io_uring_setup(0x7a53, &(0x7f0000000240)={0x0, 0x93c7, 0x40, 0x0, 0x17c})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r2, 0x0, 0x0)
openat$cgroup_subtree(r6, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000000f80)="$eJzs3U1rG9caAOB3ZMn5cO6NAyHcexeXQBZNSSPHdj9SKDRdljY00O5TYSsmWI6CJYfYDTRZNJtuSiiU0kDpD+i+y9A/0F8RaAOhBNMuSkFl5JGt2JIdOzJSoueBSc6ZD595feY9PqORUABD62T6Ty7ivxHxVRJxtG1bPrKNJ9f2W31yayZdkmg0Pv49iSRb19o/yf4fyyr/iYifv4g4k9vabm15Zb5UqZQXs/pEfeH6RG155ezVhdJcea58bWp6+vwb01Nvv/Vmz2J99dKf33704P3zX55a/ebHR8fuJXEhjmTb2uN4DrfbKydLf2elQlzYtONkDxobJEm/T4A9GcnyvBDpGHA0RrKsB15+n0dEY02uAQyZpJn/YxvjADAkWvOA1r19j+6DXxiP31u7AWrGPtoef37ttZE42Lw3OryaPHVnlN7vjveg/bSNn367fy9dYvvXIQ7tUAfYldt3IuJcPr91/E+y8W/vzjVfPN7e5jaG7e8P9NODdP7zWqf5X259/hMd5j9jHXJ3L3bO/9yjHjTTVTr/e6fj/Hd96BofyWr/as75CsmVq5XyuYj4d0ScjsKBtL7d85zzqw8b3ba1z//SJW2/NRfMzuNR/sDTx8yW6qWIGH2euFse34n4X75T/Ml6/ycd+j/9fVzq+BMLW9acKN//f7f2d45/fzV+iHilY/9vPNFKtn8+OdG8HiZaV8VWf9w98Uu39vsdf9r/h7ePfzxpf15b230b3x/8q9xt216v/9Hkk2a5lQQ3S/X64mTEaPJhs36wff3UxrGtemv/NP7Tp7Yf/zpd/+nN16fPGP/d43e77joI/T+7q/7ffeHhB5991639Z+v/15ul09mabPzrLLtWnvUEn/f3BwAAAAAAAIMkFxFHIskV18u5XLG49v6O43E4V6nW6meuVJeuzUbzs7LjUci1nnQfbXs/xGT2fthWfWpTfToijkXE1yOHmvXiTLUy2+/gAQAAAAAAAAAAAAAAAAAAYECMdfn8f+rXkX6fHbDvml9scKDfZwH0w45f+d+Lb3oCBtKO+Q+8tOQ/DC/5D8NL/sPwkv8wvOQ/DC/5D8NL/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXbp4MV0aq09uzaT12RvLS/PVG2dny7X54sLSTHGmuni9OFetzlXKxZnqwk4/r1KtXp+ciqWbE/VyrT5RW165vFBdula/fHWhNFe+XC5s7Jrb38gAAAAAAAAAAAAAAAAAAADgxVFbXpkvVSrlRYWuhXdjIE5jPwNcs6fD84MShUKXwp2se3d3VB8HJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY5J8AAAD//9ybLZI=")
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r6], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
r9 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r9, 0x0, 0x27, 0x400ed80, &(0x7f0000000040)={0xa, 0x4e22, 0x10000, @local}, 0x1c)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000048002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x20000000)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

1.222746533s ago: executing program 1 (id=3180):
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_io_uring_setup(0x88f, &(0x7f00000000c0)={0x0, 0xaee4, 0x0, 0x2, 0x1fb}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x5, 0x206, 0x7, 0x0, <r4=>0x0}, &(0x7f0000000380)=0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000500)={r4, @in={{0x2, 0x4e24, @local}}, 0x10, 0x315}, 0x90)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000000)={@private1}, 0x14)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCFLSH(r6, 0x540b, 0x7ffffffe)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xb8, &(0x7f000000cf3d)=""/184, 0x41000, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
msgget$private(0x0, 0x40e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r11, 0x0, 0x1034}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
read$rfkill(r10, &(0x7f0000000040), 0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x0, 0x8, 0x2}})

903.889994ms ago: executing program 4 (id=3182):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x80}, 0x18)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
syz_io_uring_setup(0x497, &(0x7f00000005c0)={0x0, 0x4660, 0x10000, 0x2, 0x285}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000480)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0})
r5 = mq_open(&(0x7f0000000300)='#$^^u-\x00', 0x800, 0x100, &(0x7f0000000340)={0x2, 0x6, 0x7, 0xffffffffffffff81})
poll(&(0x7f0000000380)=[{r2, 0x10000}, {r1, 0x400}, {r0, 0x10}, {r0, 0x828a}, {r5, 0x1208}, {r1, 0x382}], 0x6, 0x3d19)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}})
syz_emit_ethernet(0x72, &(0x7f0000000180)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0xffff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0xffff]}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x3600}}}}}}}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000240)={0x6, 0x9, 0x0, 'queue1\x00', 0xfffffffa})

894.140295ms ago: executing program 1 (id=3183):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c01000010001307fefffdfffcdbdf25fe8000000000000000000000000000bb20010000000000000000000000000001000000004e21ffff0a0000006c000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="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"/292], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10)
r6 = socket$inet6(0x10, 0x3, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x0)
sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170)

866.574965ms ago: executing program 3 (id=3185):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe800000000000"], 0xfdef)

809.416035ms ago: executing program 1 (id=3187):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000"], 0x48)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0xf7}, 0x18)
r3 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8)
faccessat2(r3, &(0x7f0000000000)='\x00', 0x2, 0x1100)
ioctl$VT_DISALLOCATE(r0, 0x5608)
accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0)
syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\v'], 0x1, 0x34e, &(0x7f0000000440)="$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")
socket(0x2, 0x2, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
syz_pidfd_open(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)

808.847935ms ago: executing program 4 (id=3188):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={r5, 0x0, r4})
sendmmsg$inet6(r1, &(0x7f0000002540)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x5}}, 0x20)
pwrite64(r6, &(0x7f00000000c0)='\x00', 0x1, 0x9000)
lseek(r6, 0x5, 0x4)
listen(r1, 0x2000fff)
r7 = accept(r1, 0xfffffffffffffffd, &(0x7f0000000180)=0x21)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x3, 0x0, 0x4, 0x8, 0x20005, 0xb, 0x0, 0x3, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PTP_EXTTS_REQUEST2(r6, 0x40103d0b, &(0x7f0000000380)={0x6, 0x8})
r8 = socket$inet6(0xa, 0x2, 0xff)
setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r10 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_STOP_AP(r10, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00032dbd7000ffdbdf251000000008000300", @ANYRES32=r11, @ANYBLOB="0c009900080000006f000000"], 0x28}, 0x1, 0x0, 0x0, 0x844}, 0x40824)

750.425835ms ago: executing program 3 (id=3191):
mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000007c0)={0x1, &(0x7f00000000c0)=[{0x3, 0x0, 0xa, 0x7ffc9ffb}]})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f0000000700)={'syztnl2\x00', <r2=>0x0, 0x0, 0x80, 0x10000, 0x3, {{0xb, 0x4, 0x0, 0x5, 0x2c, 0x64, 0x0, 0xcf, 0x4, 0x0, @multicast1, @loopback, {[@noop, @lsrr={0x83, 0xb, 0x60, [@local, @rand_addr=0x64010102]}, @ssrr={0x89, 0xb, 0x2c, [@local, @local]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
read(r1, &(0x7f0000004200)=""/102365, 0x20b5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r3, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x4048043)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x0, 0x10}, 0xc)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000008b6200000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff8c000280080001407f00"], 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000f06010400000000000000000500000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000)
syz_read_part_table(0x59d, &(0x7f0000000000)="$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")
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]})
syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000a00)={[{@errors_remount}, {@discard}, {@test_dummy_encryption}, {@noauto_da_alloc}, {@bsdgroups}, {@sysvgroups}, {@abort}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}]}, 0x1, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q6KCqFVibHxpaUHl4EWjiQeMJnrAm7UthFCooTURQqQagxcTQ6Jn9WjiX+DNi1FPJl71bkiIcgE91czsTNldum1XtruF/XySYZ9n5pk+z7czz84z80wJoGcNZ/8kETsi4reIGKxm6wsMVz9uXLsw9fe1C1NJLC298WeSl7t+7cJUWbTcb3uRGUkj0o+TopJ68+fOn5qcnZ05W+THFk6/OzZ/7vzTJ09Pnpg5MXNm4siRw4fGn3t24pm2xJnFdX3fB3P7977y1uVXp45dfuenb7P27ii218bRYEvD57oNZ4H/tZRbXplWPx5rOYLNbWdNOunrYkNoSSUissPVn/f/wajEzYM3GC9/1NXGARsquzatcmFbXALuYkl0uwVAd5QX+uz+t1w6NPTYFK6+UL0ByuK+USzVLX3lrXp+b7Rzg+ofjohji/98mS2x+nMIAIC2+HTqi6Px1ErjvzTurSm3q5hDGYqI/0fE7oi4JyL21JS5LyLuX7vKtDbTODV06/gnvdJyUC3Ixn/PF3Nb9eO/5WYOVYrczjz+/uT4ydmZg8XvZCT6t2T58WrZYgpssa6O71/69bNm9deO/7Ilq78cCxbtuNLX8IBuenJhMh+UtsHVDyP29a0Uf7I8E5AFtTci9rX2o3eViZNPfLO/WaG1419FG+aZlr6OeLx6/BejIf5Ssvr85Nj/Ynbm4Fh5Vtzq518uvd6s/tuKvw2y47+t/vxvLDKU1M7Xzrdex6XfP2l6T/Nfz/+B5M1834Fi3fuTCwtnxyMGkqN5vm79xM19y3xZPot/5MDK/X93sU8W/wMRkZ3ED0bEQxHxcNH2RyLi0Yg4sEr8P77YfFt9/Ft3dOP4Tzd8/23Ntyyf/w3Hv/VE5dQP361c+1dvr+/4H85TI8Wa/PtvDett4G3++gAAAOCOkObvwCfp6HI6TUdHq+/w74lt6ezc/MKTx+feOzNdfVd+KPrT8knXYM3z0PGkfOZZzU8Uz4rL7YeK58afV7bm+dGpudnpLscOvW57k/6f+aPS7dYBG26lebSJgS40BOi4xv6f1mcvvtbJxgAd1fQ9mm2dbQfQeWu8R5d2qh1A5/n/WqB3rdT/LzbkzQXA3cn1H3qX/g+9S/+H3qX/Q09a64/kK7f5t/8Sd1wiWV/hSLvf1M2R6I+ItvzAgU0RTpHo9jcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAe/wbAAD///mA6oc=")
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008010)
r6 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
gettid()
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x14, 0x3b, 0x200, 0x10, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)

618.096516ms ago: executing program 1 (id=3193):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xfffffeff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x116f9834f8d19c8f}, 0x4006)

594.095856ms ago: executing program 1 (id=3195):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@barrier}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x582, &(0x7f0000001f80)="$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")
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000400)={<r4=>r0, 0xf, 0xf83f, 0x4})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x7c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5e}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x24000011)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xa6c3, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7)

542.768436ms ago: executing program 2 (id=3196):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r6, 0x0, 0x20004804)

515.594697ms ago: executing program 2 (id=3197):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x83f}], 0x3}, 0x0)

501.294837ms ago: executing program 2 (id=3198):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c01000010001307fefffdfffcdbdf25fe8000000000000000000000000000bb20010000000000000000000000000001000000004e21ffff0a0000006c000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="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"/292], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10)
r6 = socket$inet6(0x10, 0x3, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x0)
sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170)

476.215437ms ago: executing program 1 (id=3199):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000001c0)})
r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000580)=<r2=>0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\x92Ync_\x00le\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r3)
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120)
lseek(r4, 0x101, 0x1)
getdents64(r4, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4})
io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91)
newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', &(0x7f00000007c0), 0x4000)
rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r6, {0x80000001}}, './file1\x00'})
r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r7])
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r7, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r8}, 0x18)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r10=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r11}, 0x38)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRESHEX=r10, @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x10)

440.378517ms ago: executing program 2 (id=3201):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', r2}, 0x18)

382.444597ms ago: executing program 2 (id=3203):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x82a2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x0, 0x98}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r0, 0x0, 0x2}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

381.695717ms ago: executing program 0 (id=3204):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, 0x0, 0x0)

329.680057ms ago: executing program 0 (id=3205):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file1\x00'})
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc625, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x200000008, 0x80000006}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40)
syz_io_uring_complete(0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0)

328.829628ms ago: executing program 2 (id=3206):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b70300000000ff80850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r3}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pselect6(0x40, &(0x7f0000000100)={0x9, 0xd000001, 0x0, 0xfffffffffffffffc, 0x401, 0x0, 0x200, 0x7}, 0x0, 0x0, 0x0, 0x0)

35.839329ms ago: executing program 0 (id=3207):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', r1}, 0x18)

22.00332ms ago: executing program 0 (id=3208):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x83f}], 0x3}, 0x0)

562.39µs ago: executing program 0 (id=3209):
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0})

0s ago: executing program 0 (id=3210):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@barrier}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x582, &(0x7f0000001f80)="$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")
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000400)={<r4=>r0, 0xf, 0xf83f, 0x4})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl1\x00', 0x0})
sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x7c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5e}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x24000011)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xa6c3, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7)

kernel console output (not intermixed with test programs):

 64 89 01 48
[  102.094121][T10513] RSP: 002b:00007f27af2f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  102.094141][T10513] RAX: ffffffffffffffda RBX: 00007f27b0ae5fa0 RCX: 00007f27b088f6c9
[  102.094153][T10513] RDX: 00000000000000c8 RSI: 00002000000001c0 RDI: 0000000000000004
[  102.094226][T10513] RBP: 00007f27af2f7090 R08: 0000000000000000 R09: 0000000000000000
[  102.094239][T10513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  102.094251][T10513] R13: 00007f27b0ae6038 R14: 00007f27b0ae5fa0 R15: 00007ffec7ce0858
[  102.094269][T10513]  </TASK>
[  102.320557][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2518'.
[  102.329515][T10499] batman_adv: batadv0: Interface deactivated: veth1_vlan
[  102.336832][T10499] batman_adv: batadv0: Removing interface: veth1_vlan
[  102.377711][T10514] capability: warning: `syz.1.2523' uses deprecated v2 capabilities in a way that may be insecure
[  102.390079][T10514] unsupported nla_type 52263
[  102.407145][T10516] loop3: detected capacity change from 0 to 512
[  102.463243][T10516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.476493][T10516] ext4 filesystem being mounted at /443/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  102.513129][T10516] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2525: corrupted inode contents
[  102.525183][T10516] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.2525: mark_inode_dirty error
[  102.556810][T10516] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2525: corrupted inode contents
[  102.593954][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.618906][T10529] syzkaller0: entered promiscuous mode
[  102.624518][T10529] syzkaller0: entered allmulticast mode
[  102.632369][T10527] syzkaller0: entered promiscuous mode
[  102.637930][T10527] syzkaller0: entered allmulticast mode
[  102.645668][T10531] loop4: detected capacity change from 0 to 512
[  102.658537][T10531] EXT4-fs (loop4): orphan cleanup on readonly fs
[  102.673146][T10531] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.2529: ea_inode file size=4 entry size=6
[  102.687361][T10531] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  102.700565][T10531] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.2529: corrupted inode contents
[  102.713008][T10531] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #15: comm syz.4.2529: mark_inode_dirty error
[  102.727315][T10531] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.2529: corrupted inode contents
[  102.739733][T10531] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.2529: mark_inode_dirty error
[  102.752013][T10531] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.2529: mark inode dirty (error -117)
[  102.764749][T10531] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117)
[  102.774388][T10531] EXT4-fs (loop4): 1 orphan inode deleted
[  102.780724][T10531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  102.820440][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.842911][T10545] loop0: detected capacity change from 0 to 1024
[  102.850621][T10545] EXT4-fs: test_dummy_encryption option not supported
[  102.891729][T10548] loop4: detected capacity change from 0 to 1024
[  102.904227][T10548] EXT4-fs: Ignoring removed orlov option
[  102.920850][T10548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.971175][T10571] 9pnet_fd: Insufficient options for proto=fd
[  103.033408][T10583] syzkaller0: entered promiscuous mode
[  103.039036][T10583] syzkaller0: entered allmulticast mode
[  103.129099][T10590] loop0: detected capacity change from 0 to 1024
[  103.136133][T10592] FAULT_INJECTION: forcing a failure.
[  103.136133][T10592] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  103.149358][T10592] CPU: 0 UID: 0 PID: 10592 Comm: syz.2.2545 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  103.149389][T10592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  103.149405][T10592] Call Trace:
[  103.149413][T10592]  <TASK>
[  103.149420][T10592]  __dump_stack+0x1d/0x30
[  103.149454][T10592]  dump_stack_lvl+0xe8/0x140
[  103.149478][T10592]  dump_stack+0x15/0x1b
[  103.149500][T10592]  should_fail_ex+0x265/0x280
[  103.149524][T10592]  should_fail+0xb/0x20
[  103.149557][T10592]  should_fail_usercopy+0x1a/0x20
[  103.149582][T10592]  _copy_from_user+0x1c/0xb0
[  103.149613][T10592]  memdup_user+0x5e/0xd0
[  103.149645][T10592]  strndup_user+0x68/0xb0
[  103.149682][T10592]  keyctl_restrict_keyring+0x15a/0x1b0
[  103.149706][T10592]  __se_sys_keyctl+0x1ed/0xb80
[  103.149725][T10592]  ? __rcu_read_unlock+0x4f/0x70
[  103.149754][T10592]  ? __fget_files+0x184/0x1c0
[  103.149799][T10592]  ? fput+0x8f/0xc0
[  103.149821][T10592]  __x64_sys_keyctl+0x67/0x80
[  103.149844][T10592]  x64_sys_call+0x2f7c/0x3000
[  103.149874][T10592]  do_syscall_64+0xd2/0x200
[  103.149898][T10592]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  103.149955][T10592]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  103.150073][T10592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.150099][T10592] RIP: 0033:0x7fa8f659f6c9
[  103.150117][T10592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.150190][T10592] RSP: 002b:00007fa8f4fff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  103.150212][T10592] RAX: ffffffffffffffda RBX: 00007fa8f67f5fa0 RCX: 00007fa8f659f6c9
[  103.150227][T10592] RDX: 0000200000000240 RSI: 000000002b79109d RDI: 000000000000001d
[  103.150242][T10592] RBP: 00007fa8f4fff090 R08: 0000000000000000 R09: 0000000000000000
[  103.150257][T10592] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001
[  103.150297][T10592] R13: 00007fa8f67f6038 R14: 00007fa8f67f5fa0 R15: 00007ffc2b7aa8d8
[  103.150315][T10592]  </TASK>
[  103.151441][T10590] EXT4-fs: Ignoring removed orlov option
[  103.378226][T10590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.426372][T10613] loop2: detected capacity change from 0 to 1024
[  103.433133][T10613] EXT4-fs: Ignoring removed orlov option
[  103.439759][T10613] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  103.455374][T10613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.479350][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.674122][ T9699] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 232: padding at end of block bitmap is not set
[  103.690025][ T9699] EXT4-fs (loop0): Remounting filesystem read-only
[  103.715597][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.748783][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.818038][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2561'.
[  103.818618][T10649] netlink: 'syz.1.2561': attribute type 10 has an invalid length.
[  103.863061][T10655] loop3: detected capacity change from 0 to 2048
[  103.884515][T10655] Alternate GPT is invalid, using primary GPT.
[  103.884778][T10655]  loop3: p1 p2 p3
[  103.920828][T10665] loop0: detected capacity change from 0 to 732
[  103.921277][T10665] iso9660: Unknown parameter ''
[  104.029469][T10684] batadv0: entered promiscuous mode
[  104.029491][T10684] batadv0: entered allmulticast mode
[  104.075060][T10689] netlink: 'syz.1.2574': attribute type 10 has an invalid length.
[  104.097489][T10692] netlink: 'syz.1.2575': attribute type 10 has an invalid length.
[  104.138781][T10701] loop0: detected capacity change from 0 to 1024
[  104.139255][T10701] EXT4-fs: Ignoring removed orlov option
[  104.139689][T10701] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  104.214499][T10701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.287098][T10710] loop3: detected capacity change from 0 to 1024
[  104.294130][T10710] EXT4-fs: Ignoring removed orlov option
[  104.295423][T10710] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  104.300838][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.331220][T10710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.412955][T10718] lo speed is unknown, defaulting to 1000
[  104.419641][T10718] lo speed is unknown, defaulting to 1000
[  104.640259][T10723] loop4: detected capacity change from 0 to 512
[  104.708412][T10723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.708963][T10723] ext4 filesystem being mounted at /499/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  104.714259][T10723] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2583: corrupted inode contents
[  104.799036][T10724] loop0: detected capacity change from 0 to 1024
[  104.807959][T10723] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.2583: mark_inode_dirty error
[  104.823783][T10724] EXT4-fs: Ignoring removed orlov option
[  104.834788][T10724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.853418][T10723] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2583: corrupted inode contents
[  104.912191][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.928439][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.949484][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.070410][T10747] __nla_validate_parse: 5 callbacks suppressed
[  105.070481][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2586'.
[  105.094120][T10751] loop1: detected capacity change from 0 to 1024
[  105.104734][   T29] kauditd_printk_skb: 224 callbacks suppressed
[  105.104749][   T29] audit: type=1326 audit(1762729752.120:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.0.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc2b3f6c9 code=0x7ffc0000
[  105.111609][T10751] EXT4-fs: Ignoring removed orlov option
[  105.141523][   T29] audit: type=1326 audit(1762729752.150:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.0.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc2b3f6c9 code=0x7ffc0000
[  105.145602][T10762] loop0: detected capacity change from 0 to 1024
[  105.165089][   T29] audit: type=1326 audit(1762729752.150:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.0.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3fc2b3f6c9 code=0x7ffc0000
[  105.194800][   T29] audit: type=1326 audit(1762729752.150:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.0.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3fc2b3f703 code=0x7ffc0000
[  105.218265][   T29] audit: type=1326 audit(1762729752.150:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.0.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3fc2b3e17f code=0x7ffc0000
[  105.223958][T10762] EXT4-fs: Ignoring removed orlov option
[  105.241587][   T29] audit: type=1326 audit(1762729752.150:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.2.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f659f6c9 code=0x7ffc0000
[  105.270750][   T29] audit: type=1326 audit(1762729752.150:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.2.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f659f6c9 code=0x7ffc0000
[  105.294692][   T29] audit: type=1326 audit(1762729752.150:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.0.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3fc2b3f757 code=0x7ffc0000
[  105.318135][   T29] audit: type=1326 audit(1762729752.150:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.0.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3fc2b3df10 code=0x7ffc0000
[  105.341745][   T29] audit: type=1326 audit(1762729752.150:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.0.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3fc2b3f2cb code=0x7ffc0000
[  105.369812][T10762] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  105.377774][T10774] loop4: detected capacity change from 0 to 2048
[  105.392579][T10751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.430310][T10762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.444757][T10774] Alternate GPT is invalid, using primary GPT.
[  105.444865][T10774]  loop4: p1 p2 p3
[  105.521718][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.578392][T10785] lo speed is unknown, defaulting to 1000
[  105.584279][T10785] lo speed is unknown, defaulting to 1000
[  105.590933][T10785] lo speed is unknown, defaulting to 1000
[  105.597579][T10785] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  105.607705][T10785] lo speed is unknown, defaulting to 1000
[  105.613899][T10785] lo speed is unknown, defaulting to 1000
[  105.619922][T10785] lo speed is unknown, defaulting to 1000
[  105.626102][T10785] lo speed is unknown, defaulting to 1000
[  105.632352][T10785] lo speed is unknown, defaulting to 1000
[  105.713346][T10798] loop0: detected capacity change from 0 to 1024
[  105.720196][T10798] EXT4-fs: Ignoring removed orlov option
[  105.734931][T10798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.888092][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.936768][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.939538][T10817] netlink: 'syz.4.2607': attribute type 10 has an invalid length.
[  105.953691][T10817] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2607'.
[  106.119677][T10823] SELinux: ebitmap: truncated map
[  106.132169][T10823] SELinux: failed to load policy
[  106.187608][T10835] loop4: detected capacity change from 0 to 128
[  106.296325][T10835] syz.4.2610: attempt to access beyond end of device
[  106.296325][T10835] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128
[  106.324652][T10841] syzkaller1: entered promiscuous mode
[  106.330555][T10841] syzkaller1: entered allmulticast mode
[  106.356024][T10835] syz.4.2610: attempt to access beyond end of device
[  106.356024][T10835] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128
[  106.369494][T10835] Buffer I/O error on dev loop4, logical block 79, lost async page write
[  106.377967][T10835] syz.4.2610: attempt to access beyond end of device
[  106.377967][T10835] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128
[  106.387631][T10844] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  106.387631][T10844]    program syz.1.2612 not setting count and/or reply_len properly
[  106.391497][T10835] Buffer I/O error on dev loop4, logical block 80, lost async page write
[  106.419105][T10835] syz.4.2610: attempt to access beyond end of device
[  106.419105][T10835] loop4: rw=2049, sector=162, nr_sectors = 6 limit=128
[  106.434152][T10835] syz.4.2610: attempt to access beyond end of device
[  106.434152][T10835] loop4: rw=2049, sector=166, nr_sectors = 2 limit=128
[  106.447614][T10835] Buffer I/O error on dev loop4, logical block 83, lost async page write
[  106.454253][T10848] loop0: detected capacity change from 0 to 1024
[  106.470778][T10835] syz.4.2610: attempt to access beyond end of device
[  106.470778][T10835] loop4: rw=2049, sector=168, nr_sectors = 2 limit=128
[  106.479078][T10848] EXT4-fs: Ignoring removed orlov option
[  106.484315][T10835] Buffer I/O error on dev loop4, logical block 84, lost async page write
[  106.506356][T10848] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  106.521073][T10835] syz.4.2610: attempt to access beyond end of device
[  106.521073][T10835] loop4: rw=2049, sector=154, nr_sectors = 2 limit=128
[  106.534626][T10835] Buffer I/O error on dev loop4, logical block 77, lost async page write
[  106.543377][T10835] syz.4.2610: attempt to access beyond end of device
[  106.543377][T10835] loop4: rw=2049, sector=156, nr_sectors = 2 limit=128
[  106.556897][T10835] Buffer I/O error on dev loop4, logical block 78, lost async page write
[  106.565820][T10835] syz.4.2610: attempt to access beyond end of device
[  106.565820][T10835] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128
[  106.566467][T10848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.579314][T10835] Buffer I/O error on dev loop4, logical block 79, lost async page write
[  106.579424][T10835] syz.4.2610: attempt to access beyond end of device
[  106.579424][T10835] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128
[  106.613190][T10835] Buffer I/O error on dev loop4, logical block 80, lost async page write
[  106.634369][T10856] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.2615'.
[  106.644052][T10856] netlink: zone id is out of range
[  106.649174][T10856] netlink: zone id is out of range
[  106.733625][T10856] netlink: zone id is out of range
[  106.739150][T10856] netlink: zone id is out of range
[  106.764206][T10856] netlink: zone id is out of range
[  106.764238][T10856] netlink: zone id is out of range
[  106.764599][T10856] netlink: zone id is out of range
[  106.764664][T10856] netlink: zone id is out of range
[  106.787031][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.799155][T10861] loop2: detected capacity change from 0 to 2048
[  106.826893][T10861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  106.845608][T10861] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.893750][T10859] loop3: detected capacity change from 0 to 732
[  106.900561][T10859] iso9660: Unknown parameter ''
[  106.910148][T10861] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.944114][T10875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  106.951427][T10875] IPv6: NLM_F_CREATE should be set when creating new route
[  106.958844][T10875] IPv6: NLM_F_CREATE should be set when creating new route
[  106.968948][T10875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  106.985459][T10861] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.021894][T10887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2621'.
[  107.053734][T10861] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.087644][T10893] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  107.087644][T10893]    program syz.3.2624 not setting count and/or reply_len properly
[  107.121155][   T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.135177][   T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.152575][   T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.168053][T10901] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2629'.
[  107.177425][   T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.190874][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  107.265244][T10916] loop2: detected capacity change from 0 to 512
[  107.285279][T10916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.298215][T10916] ext4 filesystem being mounted at /572/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.341228][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.391151][T10931] loop4: detected capacity change from 0 to 1024
[  107.418365][T10939] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  107.418365][T10939]    program syz.2.2638 not setting count and/or reply_len properly
[  107.419350][T10931] EXT4-fs: Ignoring removed orlov option
[  107.446207][T10936] syzkaller0: entered promiscuous mode
[  107.451741][T10936] syzkaller0: entered allmulticast mode
[  107.482404][T10931] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.550899][T10959] loop3: detected capacity change from 0 to 2048
[  107.586446][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.596770][T10970] FAULT_INJECTION: forcing a failure.
[  107.596770][T10970] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  107.605963][T10959] Alternate GPT is invalid, using primary GPT.
[  107.609944][T10970] CPU: 0 UID: 0 PID: 10970 Comm: syz.1.2649 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  107.609995][T10970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  107.610009][T10970] Call Trace:
[  107.610016][T10970]  <TASK>
[  107.610024][T10970]  __dump_stack+0x1d/0x30
[  107.610049][T10970]  dump_stack_lvl+0xe8/0x140
[  107.610072][T10970]  dump_stack+0x15/0x1b
[  107.610093][T10970]  should_fail_ex+0x265/0x280
[  107.610116][T10970]  should_fail+0xb/0x20
[  107.610214][T10970]  should_fail_usercopy+0x1a/0x20
[  107.610238][T10970]  _copy_to_user+0x20/0xa0
[  107.610346][T10970]  simple_read_from_buffer+0xb5/0x130
[  107.610401][T10970]  proc_fail_nth_read+0x10e/0x150
[  107.610448][T10970]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  107.610483][T10970]  vfs_read+0x1a8/0x770
[  107.610552][T10970]  ? __rcu_read_unlock+0x4f/0x70
[  107.610582][T10970]  ? __fget_files+0x184/0x1c0
[  107.610671][T10970]  ksys_read+0xda/0x1a0
[  107.610699][T10970]  __x64_sys_read+0x40/0x50
[  107.610728][T10970]  x64_sys_call+0x27c0/0x3000
[  107.610760][T10970]  do_syscall_64+0xd2/0x200
[  107.610783][T10970]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  107.610816][T10970]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  107.610873][T10970]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.610897][T10970] RIP: 0033:0x7f793bc0e0dc
[  107.610914][T10970] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  107.610969][T10970] RSP: 002b:00007f793a66f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  107.610990][T10970] RAX: ffffffffffffffda RBX: 00007f793be65fa0 RCX: 00007f793bc0e0dc
[  107.611004][T10970] RDX: 000000000000000f RSI: 00007f793a66f0a0 RDI: 0000000000000006
[  107.611017][T10970] RBP: 00007f793a66f090 R08: 0000000000000000 R09: 0000000000000000
[  107.611036][T10970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  107.611082][T10970] R13: 00007f793be66038 R14: 00007f793be65fa0 R15: 00007ffe9766e6c8
[  107.611101][T10970]  </TASK>
[  107.815562][T10959]  loop3: p1 p2 p3
[  107.844019][T10959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2646'.
[  107.953623][T10983] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  107.953623][T10983]    program syz.4.2654 not setting count and/or reply_len properly
[  107.993054][T10987] syzkaller1: entered promiscuous mode
[  107.998635][T10987] syzkaller1: entered allmulticast mode
[  108.015823][T10979] loop1: detected capacity change from 0 to 512
[  108.038205][T10979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.194748][T10990] lo speed is unknown, defaulting to 1000
[  108.228735][T10990] lo speed is unknown, defaulting to 1000
[  108.271691][T10979] ext4 filesystem being mounted at /523/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.567640][T10998] syzkaller0: entered promiscuous mode
[  108.573167][T10998] syzkaller0: entered allmulticast mode
[  108.605598][T11000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.656939][T11000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.801116][T11000] loop2: detected capacity change from 0 to 1024
[  108.829022][T11000] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  108.970462][T11024] loop0: detected capacity change from 0 to 128
[  109.008243][T11033] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  109.008243][T11033]    program syz.4.2666 not setting count and/or reply_len properly
[  109.045875][T11035] syzkaller1: entered promiscuous mode
[  109.051393][T11035] syzkaller1: entered allmulticast mode
[  109.115922][T11043] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.122977][T11043] syzkaller0: entered promiscuous mode
[  109.128572][T11043] syzkaller0: entered allmulticast mode
[  109.136800][T11043] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2669'.
[  109.147271][T11043] tipc: Resetting bearer <eth:syzkaller0>
[  109.154836][T11042] tipc: Resetting bearer <eth:syzkaller0>
[  109.165996][T11042] tipc: Disabling bearer <eth:syzkaller0>
[  109.176494][T11047] syzkaller0: entered promiscuous mode
[  109.182008][T11047] syzkaller0: entered allmulticast mode
[  109.235865][T11049] syzkaller0: entered promiscuous mode
[  109.241370][T11049] syzkaller0: entered allmulticast mode
[  109.248740][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.258744][T11049] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  109.331645][T11062] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  109.331645][T11062]    program syz.1.2678 not setting count and/or reply_len properly
[  109.459096][T11078] loop0: detected capacity change from 0 to 1024
[  109.485510][T11078] EXT4-fs: Ignoring removed orlov option
[  109.530660][T11078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.545033][T11084] netlink: 'syz.1.2685': attribute type 1 has an invalid length.
[  109.552813][T11084] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2685'.
[  109.589315][T11076] loop2: detected capacity change from 0 to 512
[  109.593345][T11102] syzkaller0: entered promiscuous mode
[  109.601518][T11102] syzkaller0: entered allmulticast mode
[  109.605241][T11076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.619919][T11076] ext4 filesystem being mounted at /577/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.635024][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2690'.
[  109.818463][T11110] process 'syz.3.2692' launched './file0' with NULL argv: empty string added
[  109.832872][T11110] loop3: detected capacity change from 0 to 764
[  109.855495][T11112] FAULT_INJECTION: forcing a failure.
[  109.855495][T11112] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  109.868598][T11112] CPU: 0 UID: 0 PID: 11112 Comm: syz.3.2693 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  109.868617][T11112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  109.868708][T11112] Call Trace:
[  109.868716][T11112]  <TASK>
[  109.868721][T11112]  __dump_stack+0x1d/0x30
[  109.868800][T11112]  dump_stack_lvl+0xe8/0x140
[  109.868813][T11112]  dump_stack+0x15/0x1b
[  109.868833][T11112]  should_fail_ex+0x265/0x280
[  109.868868][T11112]  should_fail+0xb/0x20
[  109.868888][T11112]  should_fail_usercopy+0x1a/0x20
[  109.868964][T11112]  _copy_from_user+0x1c/0xb0
[  109.868980][T11112]  do_ip6t_set_ctl+0x3a9/0x840
[  109.869068][T11112]  ? kstrtoull+0x111/0x140
[  109.869087][T11112]  ? __rcu_read_unlock+0x4f/0x70
[  109.869131][T11112]  nf_setsockopt+0x199/0x1b0
[  109.869147][T11112]  ipv6_setsockopt+0x11a/0x130
[  109.869168][T11112]  tcp_setsockopt+0x98/0xb0
[  109.869180][T11112]  sock_common_setsockopt+0x69/0x80
[  109.869203][T11112]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  109.869219][T11112]  __sys_setsockopt+0x184/0x200
[  109.869259][T11112]  __x64_sys_setsockopt+0x64/0x80
[  109.869278][T11112]  x64_sys_call+0x20ec/0x3000
[  109.869343][T11112]  do_syscall_64+0xd2/0x200
[  109.869355][T11112]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  109.869377][T11112]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  109.869444][T11112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.869458][T11112] RIP: 0033:0x7fdac1b1f6c9
[  109.869468][T11112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.869479][T11112] RSP: 002b:00007fdac057f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  109.869513][T11112] RAX: ffffffffffffffda RBX: 00007fdac1d75fa0 RCX: 00007fdac1b1f6c9
[  109.869528][T11112] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  109.869542][T11112] RBP: 00007fdac057f090 R08: 00000000000005a8 R09: 0000000000000000
[  109.869556][T11112] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  109.869563][T11112] R13: 00007fdac1d76038 R14: 00007fdac1d75fa0 R15: 00007ffe5a261e78
[  109.869607][T11112]  </TASK>
[  110.092248][T11114] loop3: detected capacity change from 0 to 128
[  110.101946][T11114] FAT-fs (loop3): error, clusters badly computed (2 != 0)
[  110.102352][T11115] 9p: Unknown access argument ¿: -22
[  110.109179][T11114] FAT-fs (loop3): Filesystem has been set read-only
[  110.296021][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.309492][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.364542][T11133] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.381020][T11133] syzkaller0: entered promiscuous mode
[  110.386612][T11133] syzkaller0: entered allmulticast mode
[  110.405719][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2698'.
[  110.406512][T11133] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2702'.
[  110.428337][T11133] tipc: Resetting bearer <eth:syzkaller0>
[  110.434314][T11135] syzkaller1: entered promiscuous mode
[  110.439866][T11135] syzkaller1: entered allmulticast mode
[  110.444602][T11137] loop3: detected capacity change from 0 to 2048
[  110.461351][T11132] tipc: Resetting bearer <eth:syzkaller0>
[  110.477559][   T29] kauditd_printk_skb: 301 callbacks suppressed
[  110.477575][   T29] audit: type=1326 audit(1762729757.480:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11140 comm="syz.0.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc2b3f6c9 code=0x7ffc0000
[  110.507399][   T29] audit: type=1326 audit(1762729757.480:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11140 comm="syz.0.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc2b3f6c9 code=0x7ffc0000
[  110.507720][T11141] loop0: detected capacity change from 0 to 1024
[  110.531136][   T29] audit: type=1326 audit(1762729757.490:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11140 comm="syz.0.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3fc2b3f6c9 code=0x7ffc0000
[  110.541707][T11141] EXT4-fs: Ignoring removed orlov option
[  110.561024][   T29] audit: type=1326 audit(1762729757.490:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11140 comm="syz.0.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3fc2b3f703 code=0x7ffc0000
[  110.561061][   T29] audit: type=1326 audit(1762729757.490:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11140 comm="syz.0.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3fc2b3e17f code=0x7ffc0000
[  110.569034][T11141] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  110.593854][T11137] Alternate GPT is invalid, using primary GPT.
[  110.614487][T11132] tipc: Disabling bearer <eth:syzkaller0>
[  110.623739][T11137]  loop3: p1 p2 p3
[  110.630182][   T29] audit: type=1326 audit(1762729757.500:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11140 comm="syz.0.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3fc2b3f757 code=0x7ffc0000
[  110.662794][   T29] audit: type=1326 audit(1762729757.520:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11140 comm="syz.0.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3fc2b3df10 code=0x7ffc0000
[  110.686509][   T29] audit: type=1326 audit(1762729757.520:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11140 comm="syz.0.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3fc2b3f2cb code=0x7ffc0000
[  110.710133][   T29] audit: type=1326 audit(1762729757.550:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11140 comm="syz.0.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3fc2b3e32a code=0x7ffc0000
[  110.733550][   T29] audit: type=1326 audit(1762729757.550:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11140 comm="syz.0.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3fc2b3e32a code=0x7ffc0000
[  110.778216][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2704'.
[  110.889009][T11161] loop0: detected capacity change from 0 to 128
[  110.889921][T11154] loop4: detected capacity change from 0 to 2048
[  110.907226][T11161] loop0: detected capacity change from 0 to 512
[  110.913958][T11161] ext4: Unknown parameter 'audit'
[  110.939078][T11161] lo speed is unknown, defaulting to 1000
[  110.962668][T11150] loop2: detected capacity change from 0 to 512
[  110.970526][T11169] loop3: detected capacity change from 0 to 512
[  110.973435][T11161] lo speed is unknown, defaulting to 1000
[  111.015089][T11178] loop3: detected capacity change from 0 to 512
[  111.041814][T11150] ext4 filesystem being mounted at /580/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.170464][T11180] FAULT_INJECTION: forcing a failure.
[  111.170464][T11180] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  111.183756][T11180] CPU: 0 UID: 0 PID: 11180 Comm: syz.4.2714 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  111.183789][T11180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  111.183820][T11180] Call Trace:
[  111.183857][T11180]  <TASK>
[  111.183865][T11180]  __dump_stack+0x1d/0x30
[  111.183890][T11180]  dump_stack_lvl+0xe8/0x140
[  111.183910][T11180]  dump_stack+0x15/0x1b
[  111.183928][T11180]  should_fail_ex+0x265/0x280
[  111.183951][T11180]  should_fail_alloc_page+0xf2/0x100
[  111.184028][T11180]  __alloc_frozen_pages_noprof+0xff/0x360
[  111.184058][T11180]  alloc_pages_mpol+0xb3/0x260
[  111.184084][T11180]  alloc_migration_target_by_mpol+0x11b/0x280
[  111.184128][T11180]  migrate_pages_batch+0x349/0x1b60
[  111.184162][T11180]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  111.184195][T11180]  ? __walk_page_range+0x324/0x340
[  111.184235][T11180]  ? mas_ascend+0x1e9/0x560
[  111.184261][T11180]  migrate_pages+0xf55/0x1760
[  111.184367][T11180]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  111.184407][T11180]  __se_sys_mbind+0x975/0xac0
[  111.184523][T11180]  __x64_sys_mbind+0x78/0x90
[  111.184562][T11180]  x64_sys_call+0x2936/0x3000
[  111.184639][T11180]  do_syscall_64+0xd2/0x200
[  111.184663][T11180]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  111.184697][T11180]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  111.184764][T11180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.184788][T11180] RIP: 0033:0x7f27b088f6c9
[  111.184804][T11180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.184822][T11180] RSP: 002b:00007f27af2f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  111.184841][T11180] RAX: ffffffffffffffda RBX: 00007f27b0ae5fa0 RCX: 00007f27b088f6c9
[  111.184855][T11180] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000
[  111.184870][T11180] RBP: 00007f27af2f7090 R08: 0000000000000000 R09: 0000000000000002
[  111.184961][T11180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  111.184974][T11180] R13: 00007f27b0ae6038 R14: 00007f27b0ae5fa0 R15: 00007ffec7ce0858
[  111.184991][T11180]  </TASK>
[  111.186696][T11195] FAULT_INJECTION: forcing a failure.
[  111.186696][T11195] name failslab, interval 1, probability 0, space 0, times 0
[  111.241437][T11197] syzkaller0: entered promiscuous mode
[  111.242304][T11195] CPU: 1 UID: 0 PID: 11195 Comm: syz.1.2720 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  111.242391][T11195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  111.242406][T11195] Call Trace:
[  111.242412][T11195]  <TASK>
[  111.242420][T11195]  __dump_stack+0x1d/0x30
[  111.242454][T11195]  dump_stack_lvl+0xe8/0x140
[  111.242476][T11195]  dump_stack+0x15/0x1b
[  111.242496][T11195]  should_fail_ex+0x265/0x280
[  111.242519][T11195]  should_failslab+0x8c/0xb0
[  111.242642][T11195]  __kmalloc_noprof+0xa5/0x570
[  111.242675][T11195]  ? security_sk_alloc+0x52/0x120
[  111.242705][T11195]  security_sk_alloc+0x52/0x120
[  111.242767][T11195]  sk_prot_alloc+0xc2/0x190
[  111.242810][T11195]  sk_alloc+0x34/0x360
[  111.242924][T11195]  tipc_sk_create+0xec/0x11c0
[  111.242996][T11195]  ? kmem_cache_alloc_noprof+0x242/0x480
[  111.243027][T11195]  ? security_inode_alloc+0x37/0x100
[  111.243051][T11195]  ? selinux_inode_alloc_security+0x105/0x130
[  111.243147][T11195]  ? security_inode_alloc+0x69/0x100
[  111.243171][T11195]  ? inode_init_always_gfp+0x4cd/0x500
[  111.243203][T11195]  __sock_create+0x2ec/0x5b0
[  111.243261][T11195]  __sys_socketpair+0x170/0x430
[  111.243291][T11195]  ? ksys_write+0x192/0x1a0
[  111.243320][T11195]  __x64_sys_socketpair+0x52/0x60
[  111.243466][T11195]  x64_sys_call+0x2bf6/0x3000
[  111.243496][T11195]  do_syscall_64+0xd2/0x200
[  111.243519][T11195]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  111.243551][T11195]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  111.243607][T11195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.243632][T11195] RIP: 0033:0x7f793bc0f6c9
[  111.243697][T11195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.243801][T11195] RSP: 002b:00007f793a66f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  111.243833][T11195] RAX: ffffffffffffffda RBX: 00007f793be65fa0 RCX: 00007f793bc0f6c9
[  111.243848][T11195] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e
[  111.243861][T11195] RBP: 00007f793a66f090 R08: 0000000000000000 R09: 0000000000000000
[  111.243885][T11195] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000001
[  111.243899][T11195] R13: 00007f793be66038 R14: 00007f793be65fa0 R15: 00007ffe9766e6c8
[  111.243959][T11195]  </TASK>
[  111.306410][T11199] loop3: detected capacity change from 0 to 512
[  111.310514][T11197] syzkaller0: entered allmulticast mode
[  111.532300][T11205] loop4: detected capacity change from 0 to 732
[  111.593958][T11203] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  111.605245][T11205] iso9660: Unknown parameter ''
[  111.614664][T11199] ext4 filesystem being mounted at /481/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.729245][T11210] loop1: detected capacity change from 0 to 732
[  111.749290][T11210] iso9660: Unknown parameter ''
[  112.007752][T11239] syzkaller1: entered promiscuous mode
[  112.013261][T11239] syzkaller1: entered allmulticast mode
[  112.036462][T11242] syzkaller0: entered promiscuous mode
[  112.041960][T11242] syzkaller0: entered allmulticast mode
[  112.088742][T11247] 9pnet_fd: Insufficient options for proto=fd
[  112.258258][T11253] loop2: detected capacity change from 0 to 732
[  112.272136][T11253] iso9660: Unknown parameter ''
[  112.342594][T11259] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  112.342594][T11259]    program syz.1.2741 not setting count and/or reply_len properly
[  112.384092][T11263] loop2: detected capacity change from 0 to 1024
[  112.391027][T11263] EXT4-fs: Ignoring removed orlov option
[  112.397283][T11263] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  112.448752][T11270] loop1: detected capacity change from 0 to 512
[  112.464604][T11270] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  112.479562][T11270] EXT4-fs (loop1): mount failed
[  112.504230][T11275] FAULT_INJECTION: forcing a failure.
[  112.504230][T11275] name failslab, interval 1, probability 0, space 0, times 0
[  112.516955][T11275] CPU: 0 UID: 0 PID: 11275 Comm: syz.1.2746 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  112.517024][T11275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  112.517038][T11275] Call Trace:
[  112.517046][T11275]  <TASK>
[  112.517055][T11275]  __dump_stack+0x1d/0x30
[  112.517080][T11275]  dump_stack_lvl+0xe8/0x140
[  112.517103][T11275]  dump_stack+0x15/0x1b
[  112.517122][T11275]  should_fail_ex+0x265/0x280
[  112.517157][T11275]  should_failslab+0x8c/0xb0
[  112.517325][T11275]  kmem_cache_alloc_noprof+0x50/0x480
[  112.517372][T11275]  ? skb_clone+0x151/0x1f0
[  112.517394][T11275]  skb_clone+0x151/0x1f0
[  112.517414][T11275]  __netlink_deliver_tap+0x2c9/0x500
[  112.517532][T11275]  netlink_unicast+0x66b/0x690
[  112.517568][T11275]  netlink_sendmsg+0x58b/0x6b0
[  112.517591][T11275]  ? __pfx_netlink_sendmsg+0x10/0x10
[  112.517661][T11275]  __sock_sendmsg+0x145/0x180
[  112.517742][T11275]  ____sys_sendmsg+0x31e/0x4e0
[  112.517841][T11275]  ___sys_sendmsg+0x17b/0x1d0
[  112.517871][T11275]  __x64_sys_sendmsg+0xd4/0x160
[  112.517894][T11275]  x64_sys_call+0x191e/0x3000
[  112.517925][T11275]  do_syscall_64+0xd2/0x200
[  112.517949][T11275]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  112.518096][T11275]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  112.518134][T11275]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.518158][T11275] RIP: 0033:0x7f793bc0f6c9
[  112.518175][T11275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.518196][T11275] RSP: 002b:00007f793a66f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  112.518217][T11275] RAX: ffffffffffffffda RBX: 00007f793be65fa0 RCX: 00007f793bc0f6c9
[  112.518231][T11275] RDX: 0000000000004080 RSI: 0000200000000180 RDI: 0000000000000004
[  112.518246][T11275] RBP: 00007f793a66f090 R08: 0000000000000000 R09: 0000000000000000
[  112.518260][T11275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.518298][T11275] R13: 00007f793be66038 R14: 00007f793be65fa0 R15: 00007ffe9766e6c8
[  112.518316][T11275]  </TASK>
[  112.892719][T11297] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  112.892719][T11297]    program syz.0.2752 not setting count and/or reply_len properly
[  112.925637][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2753'.
[  112.939968][T11300] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.2751'.
[  112.949484][T11300] net_ratelimit: 587 callbacks suppressed
[  112.949501][T11300] netlink: zone id is out of range
[  112.960422][T11300] netlink: zone id is out of range
[  112.966078][T11300] netlink: zone id is out of range
[  112.971375][T11300] netlink: zone id is out of range
[  112.976903][T11300] netlink: zone id is out of range
[  112.982259][T11300] netlink: zone id is out of range
[  112.987501][T11300] netlink: zone id is out of range
[  112.992860][T11300] netlink: zone id is out of range
[  112.998397][T11300] netlink: zone id is out of range
[  113.004084][T11300] netlink: zone id is out of range
[  113.071709][T11305] loop3: detected capacity change from 0 to 1024
[  113.079304][T11305] EXT4-fs: Ignoring removed orlov option
[  113.086543][T11305] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  113.104010][T11307] syzkaller0: entered promiscuous mode
[  113.109512][T11307] syzkaller0: entered allmulticast mode
[  113.173897][T11315] xt_hashlimit: max too large, truncated to 1048576
[  113.188845][T11315] xt_CT: You must specify a L4 protocol and not use inversions on it
[  113.322181][T11327] bridge0: entered promiscuous mode
[  113.329244][T11327] bridge0: port 1(macsec1) entered blocking state
[  113.335799][T11327] bridge0: port 1(macsec1) entered disabled state
[  113.342782][T11327] macsec1: entered allmulticast mode
[  113.348372][T11327] bridge0: entered allmulticast mode
[  113.354499][T11327] macsec1: left allmulticast mode
[  113.359534][T11327] bridge0: left allmulticast mode
[  113.370020][T11327] bridge0: left promiscuous mode
[  113.486688][T11342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2770'.
[  113.508987][T11338] loop2: detected capacity change from 0 to 1024
[  113.520478][T11338] EXT4-fs: Ignoring removed orlov option
[  113.555647][T11346] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  113.602761][T11352] FAULT_INJECTION: forcing a failure.
[  113.602761][T11352] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  113.615973][T11352] CPU: 1 UID: 0 PID: 11352 Comm: syz.3.2773 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  113.616005][T11352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  113.616020][T11352] Call Trace:
[  113.616101][T11352]  <TASK>
[  113.616110][T11352]  __dump_stack+0x1d/0x30
[  113.616136][T11352]  dump_stack_lvl+0xe8/0x140
[  113.616161][T11352]  dump_stack+0x15/0x1b
[  113.616254][T11352]  should_fail_ex+0x265/0x280
[  113.616274][T11352]  should_fail+0xb/0x20
[  113.616290][T11352]  should_fail_usercopy+0x1a/0x20
[  113.616311][T11352]  _copy_to_user+0x20/0xa0
[  113.616380][T11352]  simple_read_from_buffer+0xb5/0x130
[  113.616410][T11352]  proc_fail_nth_read+0x10e/0x150
[  113.616500][T11352]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  113.616536][T11352]  vfs_read+0x1a8/0x770
[  113.616563][T11352]  ? __rcu_read_unlock+0x4f/0x70
[  113.616626][T11352]  ? __fget_files+0x184/0x1c0
[  113.616659][T11352]  ksys_read+0xda/0x1a0
[  113.616686][T11352]  __x64_sys_read+0x40/0x50
[  113.616712][T11352]  x64_sys_call+0x27c0/0x3000
[  113.616820][T11352]  do_syscall_64+0xd2/0x200
[  113.616844][T11352]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  113.616874][T11352]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  113.616957][T11352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.616980][T11352] RIP: 0033:0x7fdac1b1e0dc
[  113.617009][T11352] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  113.617031][T11352] RSP: 002b:00007fdac057f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  113.617053][T11352] RAX: ffffffffffffffda RBX: 00007fdac1d75fa0 RCX: 00007fdac1b1e0dc
[  113.617069][T11352] RDX: 000000000000000f RSI: 00007fdac057f0a0 RDI: 0000000000000005
[  113.617082][T11352] RBP: 00007fdac057f090 R08: 0000000000000000 R09: 0000000000000000
[  113.617097][T11352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  113.617169][T11352] R13: 00007fdac1d76038 R14: 00007fdac1d75fa0 R15: 00007ffe5a261e78
[  113.617190][T11352]  </TASK>
[  113.825991][T11350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2772'.
[  113.869988][T11356] FAULT_INJECTION: forcing a failure.
[  113.869988][T11356] name failslab, interval 1, probability 0, space 0, times 0
[  113.882706][T11356] CPU: 1 UID: 0 PID: 11356 Comm: syz.3.2776 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  113.882734][T11356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  113.882751][T11356] Call Trace:
[  113.882757][T11356]  <TASK>
[  113.882766][T11356]  __dump_stack+0x1d/0x30
[  113.882850][T11356]  dump_stack_lvl+0xe8/0x140
[  113.882879][T11356]  dump_stack+0x15/0x1b
[  113.882898][T11356]  should_fail_ex+0x265/0x280
[  113.882973][T11356]  should_failslab+0x8c/0xb0
[  113.883022][T11356]  kmem_cache_alloc_noprof+0x50/0x480
[  113.883125][T11356]  ? getname_flags+0x80/0x3b0
[  113.883212][T11356]  getname_flags+0x80/0x3b0
[  113.883318][T11356]  do_sys_openat2+0x60/0x110
[  113.883340][T11356]  __x64_sys_creat+0x65/0x90
[  113.883366][T11356]  x64_sys_call+0x2da3/0x3000
[  113.883471][T11356]  do_syscall_64+0xd2/0x200
[  113.883491][T11356]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  113.883520][T11356]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  113.883583][T11356]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.883609][T11356] RIP: 0033:0x7fdac1b1f6c9
[  113.883625][T11356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.883643][T11356] RSP: 002b:00007fdac057f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  113.883734][T11356] RAX: ffffffffffffffda RBX: 00007fdac1d75fa0 RCX: 00007fdac1b1f6c9
[  113.883765][T11356] RDX: 0000000000000000 RSI: ecf86c37d53048fc RDI: 0000000000000000
[  113.883777][T11356] RBP: 00007fdac057f090 R08: 0000000000000000 R09: 0000000000000000
[  113.883789][T11356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  113.883802][T11356] R13: 00007fdac1d76038 R14: 00007fdac1d75fa0 R15: 00007ffe5a261e78
[  113.883820][T11356]  </TASK>
[  114.079444][T11359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.099400][T11359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.158043][T11372] loop1: detected capacity change from 0 to 1024
[  114.159441][T11374] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) !
[  114.203002][T11382] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  114.203002][T11382]    program syz.3.2785 not setting count and/or reply_len properly
[  114.267768][T11387] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2788'.
[  114.316065][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2792'.
[  114.336368][T11399] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2792'.
[  114.346018][T11399] netlink: 'syz.1.2792': attribute type 10 has an invalid length.
[  114.380725][T11407] loop3: detected capacity change from 0 to 1024
[  114.387787][T11407] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  114.399995][T11407] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #11: comm {/}\: iget: bogus i_mode (1)
[  114.411094][T11407] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm {/}\: couldn't read orphan inode 11 (err -117)
[  114.447341][T11415] loop3: detected capacity change from 0 to 732
[  114.454055][T11415] iso9660: Unknown parameter ''
[  114.505533][T11419] syzkaller0: entered promiscuous mode
[  114.511016][T11419] syzkaller0: entered allmulticast mode
[  114.666452][T11443] syzkaller0: entered promiscuous mode
[  114.671980][T11443] syzkaller0: entered allmulticast mode
[  114.726541][T11452] syzkaller0: entered promiscuous mode
[  114.732025][T11452] syzkaller0: entered allmulticast mode
[  114.827493][T11462] vlan0: entered promiscuous mode
[  114.945696][T11480] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  114.945696][T11480]    program syz.2.2826 not setting count and/or reply_len properly
[  115.179306][T11488] syzkaller0: entered promiscuous mode
[  115.184924][T11488] syzkaller0: entered allmulticast mode
[  115.267071][T11492] FAULT_INJECTION: forcing a failure.
[  115.267071][T11492] name failslab, interval 1, probability 0, space 0, times 0
[  115.280056][T11492] CPU: 1 UID: 0 PID: 11492 Comm: syz.0.2830 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  115.280085][T11492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  115.280099][T11492] Call Trace:
[  115.280170][T11492]  <TASK>
[  115.280180][T11492]  __dump_stack+0x1d/0x30
[  115.280273][T11492]  dump_stack_lvl+0xe8/0x140
[  115.280340][T11492]  dump_stack+0x15/0x1b
[  115.280358][T11492]  should_fail_ex+0x265/0x280
[  115.280380][T11492]  should_failslab+0x8c/0xb0
[  115.280411][T11492]  __kmalloc_noprof+0xa5/0x570
[  115.280490][T11492]  ? iovec_from_user+0x84/0x210
[  115.280573][T11492]  iovec_from_user+0x84/0x210
[  115.280589][T11492]  __import_iovec+0xf3/0x540
[  115.280683][T11492]  io_send_setup+0x2c9/0x380
[  115.280699][T11492]  io_send_zc_prep+0x3af/0x5d0
[  115.280714][T11492]  io_submit_sqes+0x5ef/0x1060
[  115.280773][T11492]  __se_sys_io_uring_enter+0x1c1/0x1b70
[  115.280851][T11492]  ? 0xffffffff81000000
[  115.280859][T11492]  ? __rcu_read_unlock+0x4f/0x70
[  115.280875][T11492]  ? get_pid_task+0x96/0xd0
[  115.280940][T11492]  ? proc_fail_nth_write+0x13b/0x160
[  115.281014][T11492]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  115.281045][T11492]  ? vfs_write+0x7e8/0x960
[  115.281108][T11492]  ? __rcu_read_unlock+0x4f/0x70
[  115.281173][T11492]  ? __fget_files+0x184/0x1c0
[  115.281190][T11492]  ? fput+0x8f/0xc0
[  115.281201][T11492]  __x64_sys_io_uring_enter+0x78/0x90
[  115.281221][T11492]  x64_sys_call+0x2df0/0x3000
[  115.281290][T11492]  do_syscall_64+0xd2/0x200
[  115.281304][T11492]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  115.281321][T11492]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  115.281354][T11492]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.281385][T11492] RIP: 0033:0x7f3fc2b3f6c9
[  115.281413][T11492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.281425][T11492] RSP: 002b:00007f3fc15a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  115.281442][T11492] RAX: ffffffffffffffda RBX: 00007f3fc2d95fa0 RCX: 00007f3fc2b3f6c9
[  115.281449][T11492] RDX: 0000000000000020 RSI: 00000000000022d0 RDI: 0000000000000003
[  115.281533][T11492] RBP: 00007f3fc15a7090 R08: 0000000000000000 R09: 0000000000000000
[  115.281546][T11492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  115.281589][T11492] R13: 00007f3fc2d96038 R14: 00007f3fc2d95fa0 R15: 00007fff10b35708
[  115.281602][T11492]  </TASK>
[  115.538801][   T29] kauditd_printk_skb: 806 callbacks suppressed
[  115.538816][   T29] audit: type=1326 audit(1762729762.550:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.0.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc2b3f6c9 code=0x7ffc0000
[  115.568649][   T29] audit: type=1326 audit(1762729762.550:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.0.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc2b3f6c9 code=0x7ffc0000
[  115.574896][T11494] __nla_validate_parse: 6 callbacks suppressed
[  115.574979][T11494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2831'.
[  115.592231][   T29] audit: type=1326 audit(1762729762.560:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.0.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3fc2b3f6c9 code=0x7ffc0000
[  115.631071][   T29] audit: type=1326 audit(1762729762.560:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.0.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3fc2b3f703 code=0x7ffc0000
[  115.654386][   T29] audit: type=1326 audit(1762729762.560:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.0.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3fc2b3e17f code=0x7ffc0000
[  115.677853][   T29] audit: type=1326 audit(1762729762.560:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.0.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3fc2b3f757 code=0x7ffc0000
[  115.701545][   T29] audit: type=1326 audit(1762729762.580:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.0.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3fc2b3df10 code=0x7ffc0000
[  115.725092][   T29] audit: type=1326 audit(1762729762.580:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.0.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3fc2b3e32a code=0x7ffc0000
[  115.748570][   T29] audit: type=1326 audit(1762729762.580:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.0.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc2b3f6c9 code=0x7ffc0000
[  115.772050][   T29] audit: type=1326 audit(1762729762.580:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.0.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc2b3f6c9 code=0x7ffc0000
[  115.992085][ T3312] syz_tun (unregistering): left allmulticast mode
[  116.074981][T11543] syzkaller0: entered promiscuous mode
[  116.080563][T11543] syzkaller0: entered allmulticast mode
[  116.093069][T11540] loop3: detected capacity change from 0 to 1024
[  116.102878][T11543] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  116.111124][T11543] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2844'.
[  116.129498][T11531] lo speed is unknown, defaulting to 1000
[  116.140142][   T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.172865][T11531] lo speed is unknown, defaulting to 1000
[  116.182252][T11550] loop2: detected capacity change from 0 to 1024
[  116.189035][T11550] EXT4-fs: Ignoring removed orlov option
[  116.195280][T11550] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  116.207514][   T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.256157][   T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.269348][T11531] chnl_net:caif_netlink_parms(): no params data found
[  116.309876][   T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.321621][T11531] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.329040][T11531] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.336350][T11531] bridge_slave_0: entered allmulticast mode
[  116.342966][T11531] bridge_slave_0: entered promiscuous mode
[  116.350894][T11531] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.358025][T11531] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.365639][T11531] bridge_slave_1: entered allmulticast mode
[  116.372159][T11531] bridge_slave_1: entered promiscuous mode
[  116.391909][T11531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.404204][T11531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.423340][T11531] team0: Port device team_slave_0 added
[  116.429895][T11531] team0: Port device team_slave_1 added
[  116.448425][T11531] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.455619][T11531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  116.481560][T11531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.500302][T11531] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.507435][T11531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  116.533395][T11531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.585058][   T31] team0: Port device geneve1 removed
[  116.625213][   T31] .` (unregistering): Released all slaves
[  116.639074][T11531] hsr_slave_0: entered promiscuous mode
[  116.645097][T11531] hsr_slave_1: entered promiscuous mode
[  116.650941][T11531] debugfs: 'hsr0' already exists in 'hsr'
[  116.656787][T11531] Cannot create hsr debugfs directory
[  116.668817][   T31] tipc: Left network mode
[  116.695027][   T31] hsr_slave_0: left promiscuous mode
[  116.700741][   T31] hsr_slave_1: left promiscuous mode
[  116.708549][   T31] veth1_macvtap: left promiscuous mode
[  116.714447][   T31] veth0_macvtap: left promiscuous mode
[  116.719960][   T31] veth1_vlan: left promiscuous mode
[  116.725483][   T31] veth0_vlan: left promiscuous mode
[  116.753298][   T31] pimreg (unregistering): left allmulticast mode
[  116.812673][ T3425] lo speed is unknown, defaulting to 1000
[  116.818473][ T3425] syz2: Port: 1 Link DOWN
[  116.874071][T11571] loop3: detected capacity change from 0 to 732
[  116.880982][T11571] iso9660: Unknown parameter ''
[  117.023334][T11573] 9pnet_fd: Insufficient options for proto=fd
[  117.142133][T11598] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.149473][T11598] syzkaller0: entered promiscuous mode
[  117.155352][T11598] syzkaller0: entered allmulticast mode
[  117.163429][T11598] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  117.171744][T11598] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2867'.
[  117.205009][T11597] tipc: Resetting bearer <eth:syzkaller0>
[  117.220607][T11597] tipc: Disabling bearer <eth:syzkaller0>
[  117.318185][T11620] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.2870'.
[  117.554322][T11625] loop1: detected capacity change from 0 to 512
[  117.575525][T11625] ext4 filesystem being mounted at /574/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.017444][T11531] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  118.026813][T11531] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  118.037285][T11531] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  118.046343][T11531] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  118.084201][T11531] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.096549][T11531] 8021q: adding VLAN 0 to HW filter on device team0
[  118.105926][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.113053][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.125952][  T272] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.133003][  T272] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.159646][T11531] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  118.170186][T11531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  118.273683][T11531] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.349931][T11658] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.359893][T11663] loop3: detected capacity change from 0 to 2048
[  118.368854][T11658] syzkaller0: entered promiscuous mode
[  118.374510][T11658] syzkaller0: entered allmulticast mode
[  118.384487][T11658] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  118.394163][T11658] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2882'.
[  118.404953][T11663] Alternate GPT is invalid, using primary GPT.
[  118.411265][T11663]  loop3: p1 p2 p3
[  118.415292][T11531] veth0_vlan: entered promiscuous mode
[  118.422151][T11658] tipc: Resetting bearer <eth:syzkaller0>
[  118.436665][T11656] tipc: Resetting bearer <eth:syzkaller0>
[  118.451530][T11663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2883'.
[  118.466467][T11656] tipc: Disabling bearer <eth:syzkaller0>
[  118.477821][T11531] veth1_vlan: entered promiscuous mode
[  118.494937][T11531] veth0_macvtap: entered promiscuous mode
[  118.502533][T11531] veth1_macvtap: entered promiscuous mode
[  118.513927][T11531] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.525454][T11531] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.538518][   T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.547978][   T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.565877][   T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.593032][   T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.605642][T11675] loop3: detected capacity change from 0 to 2048
[  118.633714][T11680] loop4: detected capacity change from 0 to 1024
[  118.640376][T11680] EXT4-fs: Ignoring removed orlov option
[  118.646963][T11680] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  118.657735][T11675] Alternate GPT is invalid, using primary GPT.
[  118.664004][T11675]  loop3: p1 p2 p3
[  118.707509][T11675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2886'.
[  118.717202][T11686] capability: warning: `syz.4.2889' uses 32-bit capabilities (legacy support in use)
[  118.821617][T11688] loop9: detected capacity change from 0 to 7
[  118.893951][T11693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2892'.
[  118.960811][T11700] loop3: detected capacity change from 0 to 512
[  118.993960][ T3318] syz_tun (unregistering): left allmulticast mode
[  119.027168][T11700] ext4 filesystem being mounted at /533/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.040597][T11700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2895'.
[  119.058637][T11701] lo speed is unknown, defaulting to 1000
[  119.059985][T11716] syzkaller0: entered promiscuous mode
[  119.069983][T11716] syzkaller0: entered allmulticast mode
[  119.078594][T11716] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  119.087463][T11716] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2896'.
[  119.090125][T11700] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2895: bg 0: block 18: invalid block bitmap
[  119.136551][   T52] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.170113][T11719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11719 comm=syz.3.2895
[  119.172795][T11701] chnl_net:caif_netlink_parms(): no params data found
[  119.195003][T11719] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.2895: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  119.211672][T11719] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  119.220907][T11719] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.2895: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  119.221785][   T52] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.237613][T11719] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  119.256488][T11719] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.2895: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  119.273049][T11719] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  119.289800][T11701] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.296892][T11701] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.304314][T11701] bridge_slave_0: entered allmulticast mode
[  119.310876][T11701] bridge_slave_0: entered promiscuous mode
[  119.319637][   T52] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.330492][T11701] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.337578][T11701] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.344761][T11701] bridge_slave_1: entered allmulticast mode
[  119.351111][T11701] bridge_slave_1: entered promiscuous mode
[  119.368992][T11701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.379442][T11701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.394930][   T52] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.410946][T11701] team0: Port device team_slave_0 added
[  119.417858][T11701] team0: Port device team_slave_1 added
[  119.454137][T11701] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.461300][T11701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  119.487350][T11701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.501562][T11701] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.508772][T11701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  119.534909][T11701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.601318][T11732] loop3: detected capacity change from 0 to 1024
[  119.620887][T11701] hsr_slave_0: entered promiscuous mode
[  119.627876][T11701] hsr_slave_1: entered promiscuous mode
[  119.634087][T11701] debugfs: 'hsr0' already exists in 'hsr'
[  119.639812][T11701] Cannot create hsr debugfs directory
[  119.643380][T11738] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  119.643380][T11738]    program syz.1.2905 not setting count and/or reply_len properly
[  119.646445][T11732] EXT4-fs: Ignoring removed orlov option
[  119.678331][T11732] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  119.773336][   T52] team0: Port device geneve1 removed
[  119.786580][T11754] netlink: 'syz.3.2909': attribute type 10 has an invalid length.
[  119.817652][T11742] loop4: detected capacity change from 0 to 512
[  119.835828][   T52] bond0 (unregistering): Released all slaves
[  119.843591][T11742] ext4 filesystem being mounted at /573/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.869773][T11764] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  119.926695][   T52] tipc: Left network mode
[  119.944052][T11760] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  119.975837][T11764] syzkaller0: entered promiscuous mode
[  119.981379][T11764] syzkaller0: entered allmulticast mode
[  120.014678][   T52] hsr_slave_0: left promiscuous mode
[  120.022155][   T52] hsr_slave_1: left promiscuous mode
[  120.028115][   T52] batman_adv: batadv0: Interface deactivated: veth1_vlan
[  120.035223][   T52] batman_adv: batadv0: Removing interface: veth1_vlan
[  120.045341][   T52] veth1_macvtap: left promiscuous mode
[  120.051275][   T52] veth0_macvtap: left promiscuous mode
[  120.057094][   T52] veth1_vlan: left promiscuous mode
[  120.057182][T11772] loop1: detected capacity change from 0 to 512
[  120.062677][   T52] veth0_vlan: left promiscuous mode
[  120.073948][T11772] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  120.105676][T11772] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2913: couldn't read orphan inode 26 (err -116)
[  120.118232][   T52] pimreg (unregistering): left allmulticast mode
[  120.118232][T11772] EXT4-fs (loop1): Remounting filesystem read-only
[  120.118768][T11772] ext4 filesystem being mounted at /581/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.298355][T11784] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  120.298355][T11784]    program syz.3.2917 not setting count and/or reply_len properly
[  120.370344][T11792] loop3: detected capacity change from 0 to 2048
[  120.401897][T11800] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.414580][T11792] Alternate GPT is invalid, using primary GPT.
[  120.417137][T11800] syzkaller0: entered promiscuous mode
[  120.420930][T11792]  loop3: p1 p2 p3
[  120.426327][T11800] syzkaller0: entered allmulticast mode
[  120.439151][T11800] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  120.449926][T11800] tipc: Resetting bearer <eth:syzkaller0>
[  120.456636][T11799] tipc: Resetting bearer <eth:syzkaller0>
[  120.465092][T11799] tipc: Disabling bearer <eth:syzkaller0>
[  120.538222][T11701] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  120.547004][T11701] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  120.556592][T11701] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  120.565934][T11701] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  120.566837][T11810] loop4: detected capacity change from 0 to 1024
[  120.602576][T11810] EXT4-fs: Ignoring removed orlov option
[  120.650001][T11701] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.661567][T11701] 8021q: adding VLAN 0 to HW filter on device team0
[  120.684213][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.691448][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.727951][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.735086][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.748708][T11835] loop3: detected capacity change from 0 to 1024
[  120.767778][T11835] EXT4-fs: Ignoring removed bh option
[  120.778988][T11808] loop1: detected capacity change from 0 to 512
[  120.795745][T11701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  120.847756][T11808] ext4 filesystem being mounted at /587/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.884683][T11701] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.103163][T11701] veth0_vlan: entered promiscuous mode
[  121.129505][T11701] veth1_vlan: entered promiscuous mode
[  121.143060][T11701] veth0_macvtap: entered promiscuous mode
[  121.150252][T11701] veth1_macvtap: entered promiscuous mode
[  121.160299][T11701] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.174698][T11701] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.191670][   T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.214853][   T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.224145][   T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.233207][   T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.294078][   T29] kauditd_printk_skb: 458 callbacks suppressed
[  121.294095][   T29] audit: type=1326 audit(1762729768.310:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac1b1f6c9 code=0x7ffc0000
[  121.325658][   T29] audit: type=1326 audit(1762729768.320:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac1b1f6c9 code=0x7ffc0000
[  121.350076][   T29] audit: type=1326 audit(1762729768.340:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdac1b1f6c9 code=0x7ffc0000
[  121.373532][   T29] audit: type=1326 audit(1762729768.340:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac1b1f6c9 code=0x7ffc0000
[  121.397114][   T29] audit: type=1326 audit(1762729768.340:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac1b1f6c9 code=0x7ffc0000
[  121.420636][   T29] audit: type=1326 audit(1762729768.340:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdac1b1f6c9 code=0x7ffc0000
[  121.444187][   T29] audit: type=1326 audit(1762729768.340:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac1b1f6c9 code=0x7ffc0000
[  121.467769][   T29] audit: type=1326 audit(1762729768.340:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fdac1b1f6c9 code=0x7ffc0000
[  121.491219][   T29] audit: type=1326 audit(1762729768.340:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac1b1f6c9 code=0x7ffc0000
[  121.496897][T11876] __nla_validate_parse: 4 callbacks suppressed
[  121.496913][T11876] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2943'.
[  121.515110][   T29] audit: type=1326 audit(1762729768.340:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdac1b1f6c9 code=0x7ffc0000
[  121.595711][T11884] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  121.595711][T11884]    program syz.3.2947 not setting count and/or reply_len properly
[  121.618476][T11881] FAULT_INJECTION: forcing a failure.
[  121.618476][T11881] name failslab, interval 1, probability 0, space 0, times 0
[  121.631359][T11881] CPU: 0 UID: 0 PID: 11881 Comm: syz.1.2945 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  121.631426][T11881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  121.631440][T11881] Call Trace:
[  121.631445][T11881]  <TASK>
[  121.631453][T11881]  __dump_stack+0x1d/0x30
[  121.631482][T11881]  dump_stack_lvl+0xe8/0x140
[  121.631503][T11881]  dump_stack+0x15/0x1b
[  121.631522][T11881]  should_fail_ex+0x265/0x280
[  121.631599][T11881]  should_failslab+0x8c/0xb0
[  121.631629][T11881]  __kmalloc_noprof+0xa5/0x570
[  121.631852][T11881]  ? kobject_get_path+0x92/0x1c0
[  121.631879][T11881]  kobject_get_path+0x92/0x1c0
[  121.631905][T11881]  kobject_uevent_env+0x1da/0x570
[  121.631935][T11881]  ? device_pm_check_callbacks+0x683/0x6a0
[  121.632031][T11881]  kobject_uevent+0x1d/0x30
[  121.632060][T11881]  device_del+0x710/0x790
[  121.632082][T11881]  __del_gendisk+0x494/0x570
[  121.632178][T11881]  del_gendisk+0xac/0xf0
[  121.632199][T11881]  loop_remove+0x26/0x80
[  121.632225][T11881]  loop_control_ioctl+0x3b3/0x3f0
[  121.632254][T11881]  ? __pfx_loop_control_ioctl+0x10/0x10
[  121.632312][T11881]  __se_sys_ioctl+0xce/0x140
[  121.632334][T11881]  __x64_sys_ioctl+0x43/0x50
[  121.632354][T11881]  x64_sys_call+0x1816/0x3000
[  121.632378][T11881]  do_syscall_64+0xd2/0x200
[  121.632450][T11881]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  121.632479][T11881]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  121.632514][T11881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.632561][T11881] RIP: 0033:0x7f793bc0f6c9
[  121.632580][T11881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.632600][T11881] RSP: 002b:00007f793a66f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  121.632622][T11881] RAX: ffffffffffffffda RBX: 00007f793be65fa0 RCX: 00007f793bc0f6c9
[  121.632650][T11881] RDX: 0000000000000001 RSI: 0000000000004c81 RDI: 0000000000000003
[  121.632663][T11881] RBP: 00007f793a66f090 R08: 0000000000000000 R09: 0000000000000000
[  121.632676][T11881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.632688][T11881] R13: 00007f793be66038 R14: 00007f793be65fa0 R15: 00007ffe9766e6c8
[  121.632706][T11881]  </TASK>
[  121.911914][T11893] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2951'.
[  122.033917][T11913] loop4: detected capacity change from 0 to 1024
[  122.041280][T11913] EXT4-fs: Ignoring removed orlov option
[  122.050549][T11913] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  122.088891][T11922] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2961'.
[  122.258861][T11937] FAULT_INJECTION: forcing a failure.
[  122.258861][T11937] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  122.271099][T11938] loop4: detected capacity change from 0 to 1024
[  122.271954][T11937] CPU: 1 UID: 0 PID: 11937 Comm: syz.0.2966 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  122.272024][T11937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  122.272038][T11937] Call Trace:
[  122.272045][T11937]  <TASK>
[  122.272054][T11937]  __dump_stack+0x1d/0x30
[  122.272079][T11937]  dump_stack_lvl+0xe8/0x140
[  122.272140][T11937]  dump_stack+0x15/0x1b
[  122.272164][T11937]  should_fail_ex+0x265/0x280
[  122.272186][T11937]  should_fail+0xb/0x20
[  122.272256][T11937]  should_fail_usercopy+0x1a/0x20
[  122.272281][T11937]  _copy_from_user+0x1c/0xb0
[  122.272315][T11937]  ___sys_sendmsg+0xc1/0x1d0
[  122.272345][T11937]  __sys_sendmmsg+0x178/0x300
[  122.272374][T11937]  __x64_sys_sendmmsg+0x57/0x70
[  122.272431][T11937]  x64_sys_call+0x1c4a/0x3000
[  122.272457][T11937]  do_syscall_64+0xd2/0x200
[  122.272481][T11937]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  122.272594][T11937]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  122.272679][T11937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.272702][T11937] RIP: 0033:0x7f74c20bf6c9
[  122.272722][T11937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.272743][T11937] RSP: 002b:00007f74c0b1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  122.272808][T11937] RAX: ffffffffffffffda RBX: 00007f74c2315fa0 RCX: 00007f74c20bf6c9
[  122.272822][T11937] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003
[  122.272837][T11937] RBP: 00007f74c0b1f090 R08: 0000000000000000 R09: 0000000000000000
[  122.272850][T11937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  122.272939][T11937] R13: 00007f74c2316038 R14: 00007f74c2315fa0 R15: 00007ffdc9dd31c8
[  122.272958][T11937]  </TASK>
[  122.455389][T11938] EXT4-fs: Ignoring removed orlov option
[  122.476014][T11938] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  122.491910][T11944] FAULT_INJECTION: forcing a failure.
[  122.491910][T11944] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  122.505111][T11944] CPU: 0 UID: 0 PID: 11944 Comm: syz.0.2970 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  122.505138][T11944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  122.505151][T11944] Call Trace:
[  122.505157][T11944]  <TASK>
[  122.505164][T11944]  __dump_stack+0x1d/0x30
[  122.505186][T11944]  dump_stack_lvl+0xe8/0x140
[  122.505245][T11944]  dump_stack+0x15/0x1b
[  122.505264][T11944]  should_fail_ex+0x265/0x280
[  122.505283][T11944]  should_fail+0xb/0x20
[  122.505302][T11944]  should_fail_usercopy+0x1a/0x20
[  122.505354][T11944]  _copy_from_iter+0xd2/0xe80
[  122.505381][T11944]  ? __build_skb_around+0x1ab/0x200
[  122.505414][T11944]  ? __alloc_skb+0x223/0x320
[  122.505447][T11944]  netlink_sendmsg+0x471/0x6b0
[  122.505533][T11944]  ? __pfx_netlink_sendmsg+0x10/0x10
[  122.505556][T11944]  __sock_sendmsg+0x145/0x180
[  122.505585][T11944]  ____sys_sendmsg+0x31e/0x4e0
[  122.505676][T11944]  ___sys_sendmsg+0x17b/0x1d0
[  122.505750][T11944]  __x64_sys_sendmsg+0xd4/0x160
[  122.505777][T11944]  x64_sys_call+0x191e/0x3000
[  122.505805][T11944]  do_syscall_64+0xd2/0x200
[  122.505830][T11944]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  122.505866][T11944]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  122.505929][T11944]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.505955][T11944] RIP: 0033:0x7f74c20bf6c9
[  122.505972][T11944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.505995][T11944] RSP: 002b:00007f74c0b1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  122.506092][T11944] RAX: ffffffffffffffda RBX: 00007f74c2315fa0 RCX: 00007f74c20bf6c9
[  122.506105][T11944] RDX: 00000000200c4004 RSI: 0000200000000580 RDI: 0000000000000004
[  122.506117][T11944] RBP: 00007f74c0b1f090 R08: 0000000000000000 R09: 0000000000000000
[  122.506149][T11944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  122.506163][T11944] R13: 00007f74c2316038 R14: 00007f74c2315fa0 R15: 00007ffdc9dd31c8
[  122.506184][T11944]  </TASK>
[  123.019572][T12031] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2980'.
[  123.143317][T12038] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2985'.
[  123.158607][T12044] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  123.158607][T12044]    program syz.0.2984 not setting count and/or reply_len properly
[  123.271170][T12050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2986'.
[  123.310448][T12050] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2986'.
[  123.343915][T12050] netlink: 'syz.2.2986': attribute type 10 has an invalid length.
[  123.351756][T12050] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2986'.
[  123.370539][T12050] batman_adv: batadv0: Adding interface: veth1_vlan
[  123.377202][T12050] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  123.403098][T12050] batman_adv: batadv0: Interface activated: veth1_vlan
[  123.413456][T12012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.449804][T12046] lo speed is unknown, defaulting to 1000
[  123.472656][T12012] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.535148][T12046] chnl_net:caif_netlink_parms(): no params data found
[  123.588676][T12094] netlink: 'syz.0.2997': attribute type 1 has an invalid length.
[  123.611409][T12012] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.622671][T12046] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.629827][T12046] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.637289][T12046] bridge_slave_0: entered allmulticast mode
[  123.643816][T12046] bridge_slave_0: entered promiscuous mode
[  123.655583][T12094] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  123.667570][T12099] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2998'.
[  123.673728][T12094] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  123.687448][T12046] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.694554][T12046] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.701871][T12046] bridge_slave_1: entered allmulticast mode
[  123.708713][T12046] bridge_slave_1: entered promiscuous mode
[  123.717255][T12012] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.732695][T12097] gretap1: entered promiscuous mode
[  123.766954][T12046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  123.777551][T12046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.800627][T12046] team0: Port device team_slave_0 added
[  123.809598][T12046] team0: Port device team_slave_1 added
[  123.829151][T12046] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.836139][T12046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  123.862185][T12046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.875109][T12046] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.882110][T12046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  123.908049][T12046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.970303][T12012] geneve1 (unregistering): left allmulticast mode
[  123.977189][T12012] team0: Port device geneve1 removed
[  124.035823][T12012] bond0 (unregistering): Released all slaves
[  124.044483][T12012] bond1 (unregistering): (slave vlan2): Releasing active interface
[  124.053229][T12012] bond1 (unregistering): Released all slaves
[  124.061823][T12108] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3002'.
[  124.082576][T12046] hsr_slave_0: entered promiscuous mode
[  124.089073][T12046] hsr_slave_1: entered promiscuous mode
[  124.095337][T12046] debugfs: 'hsr0' already exists in 'hsr'
[  124.101161][T12046] Cannot create hsr debugfs directory
[  124.107282][T12012] tipc: Left network mode
[  124.147733][T12012] hsr_slave_0: left promiscuous mode
[  124.153298][T12012] hsr_slave_1: left promiscuous mode
[  124.159543][T12012] batman_adv: batadv0: Interface deactivated: veth1_vlan
[  124.166728][T12012] batman_adv: batadv0: Removing interface: veth1_vlan
[  124.176865][T12012] veth1_macvtap: left promiscuous mode
[  124.182433][T12012] veth0_macvtap: left promiscuous mode
[  124.188559][T12012] veth1_vlan: left promiscuous mode
[  124.193948][T12012] veth0_vlan: left promiscuous mode
[  124.230400][T12012] pimreg (unregistering): left allmulticast mode
[  124.387370][T12124] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  124.387370][T12124]    program syz.0.3005 not setting count and/or reply_len properly
[  124.428739][T12130] FAULT_INJECTION: forcing a failure.
[  124.428739][T12130] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  124.441856][T12130] CPU: 1 UID: 0 PID: 12130 Comm: syz.4.3010 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  124.441953][T12130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  124.442036][T12130] Call Trace:
[  124.442041][T12130]  <TASK>
[  124.442045][T12130]  __dump_stack+0x1d/0x30
[  124.442061][T12130]  dump_stack_lvl+0xe8/0x140
[  124.442073][T12130]  dump_stack+0x15/0x1b
[  124.442149][T12130]  should_fail_ex+0x265/0x280
[  124.442162][T12130]  should_fail+0xb/0x20
[  124.442172][T12130]  should_fail_usercopy+0x1a/0x20
[  124.442185][T12130]  _copy_to_user+0x20/0xa0
[  124.442201][T12130]  simple_read_from_buffer+0xb5/0x130
[  124.442333][T12130]  proc_fail_nth_read+0x10e/0x150
[  124.442419][T12130]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  124.442438][T12130]  vfs_read+0x1a8/0x770
[  124.442478][T12130]  ? __rcu_read_unlock+0x4f/0x70
[  124.442494][T12130]  ? __fget_files+0x184/0x1c0
[  124.442512][T12130]  ksys_read+0xda/0x1a0
[  124.442607][T12130]  __x64_sys_read+0x40/0x50
[  124.442622][T12130]  x64_sys_call+0x27c0/0x3000
[  124.442636][T12130]  do_syscall_64+0xd2/0x200
[  124.442654][T12130]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  124.442671][T12130]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  124.442784][T12130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.442798][T12130] RIP: 0033:0x7f27b088e0dc
[  124.442808][T12130] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  124.442819][T12130] RSP: 002b:00007f27af2f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  124.442894][T12130] RAX: ffffffffffffffda RBX: 00007f27b0ae5fa0 RCX: 00007f27b088e0dc
[  124.442902][T12130] RDX: 000000000000000f RSI: 00007f27af2f70a0 RDI: 0000000000000009
[  124.442955][T12130] RBP: 00007f27af2f7090 R08: 0000000000000000 R09: 0000000000000000
[  124.442962][T12130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.442969][T12130] R13: 00007f27b0ae6038 R14: 00007f27b0ae5fa0 R15: 00007ffec7ce0858
[  124.442980][T12130]  </TASK>
[  124.687322][T12135] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  124.794261][T12144] loop4: detected capacity change from 0 to 2048
[  124.828065][T12046] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  124.840512][T12046] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  124.844488][T12046] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  124.859757][T12046] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  124.864593][T12144] Alternate GPT is invalid, using primary GPT.
[  124.872995][T12144]  loop4: p1 p2 p3
[  124.950341][T12046] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.959146][T12046] 8021q: adding VLAN 0 to HW filter on device team0
[  124.964311][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.973499][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.995986][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.996096][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.118958][T12046] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.210854][T12046] veth0_vlan: entered promiscuous mode
[  125.213365][T12046] veth1_vlan: entered promiscuous mode
[  125.237489][T12046] veth0_macvtap: entered promiscuous mode
[  125.238914][T12046] veth1_macvtap: entered promiscuous mode
[  125.244903][T12046] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.274885][T12046] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.313812][   T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.315375][   T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.315676][   T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.315781][   T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.379737][T12183] loop4: detected capacity change from 0 to 1024
[  125.395255][T12183] EXT4-fs: Ignoring removed orlov option
[  125.395617][T12183] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  125.420250][T12183] EXT4-fs mount: 40 callbacks suppressed
[  125.420268][T12183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.466211][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.629368][T12209] loop3: detected capacity change from 0 to 2048
[  125.683253][T12212] lo speed is unknown, defaulting to 1000
[  125.694084][T12209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.725688][T11986] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.790098][T11986] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.855851][T11986] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.886190][T12244] loop2: detected capacity change from 0 to 1024
[  125.896797][T12212] chnl_net:caif_netlink_parms(): no params data found
[  125.912827][T12244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.990315][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.071600][T11986] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.119583][T12212] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.126838][T12212] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.173779][T12212] bridge_slave_0: entered allmulticast mode
[  126.180427][T12212] bridge_slave_0: entered promiscuous mode
[  126.197474][T12271] 9pnet_fd: Insufficient options for proto=fd
[  126.208843][T12271] loop3: detected capacity change from 0 to 512
[  126.225128][T12263] net_ratelimit: 1173 callbacks suppressed
[  126.225147][T12263] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  126.248389][T12265] team0: No ports can be present during mode change
[  126.257757][T12271] EXT4-fs (loop3): too many log groups per flexible block group
[  126.258024][ T3561] lo speed is unknown, defaulting to 1000
[  126.265730][T12271] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  126.271715][T12212] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.285212][T12212] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.287839][T12271] EXT4-fs (loop3): mount failed
[  126.297819][T12212] bridge_slave_1: entered allmulticast mode
[  126.307931][T12212] bridge_slave_1: entered promiscuous mode
[  126.343990][   T29] kauditd_printk_skb: 654 callbacks suppressed
[  126.344005][   T29] audit: type=1326 audit(1762729773.350:4870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.1.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3154f6c9 code=0x7ffc0000
[  126.373926][   T29] audit: type=1326 audit(1762729773.350:4871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.1.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3154f6c9 code=0x7ffc0000
[  126.400998][T11701] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.418761][T12212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.421380][T12280] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  126.421380][T12280]    program syz.2.3042 not setting count and/or reply_len properly
[  126.430262][T12212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.490873][T12212] team0: Port device team_slave_0 added
[  126.501003][T12212] team0: Port device team_slave_1 added
[  126.539387][T12212] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.546495][T12212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  126.572710][T12212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.583597][   T29] audit: type=1326 audit(1762729773.550:4872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12288 comm="syz.3.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac1b1f6c9 code=0x7ffc0000
[  126.585557][T12212] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.607125][   T29] audit: type=1326 audit(1762729773.550:4873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12288 comm="syz.3.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac1b1f6c9 code=0x7ffc0000
[  126.607161][   T29] audit: type=1326 audit(1762729773.550:4874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12288 comm="syz.3.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdac1b1f6c9 code=0x7ffc0000
[  126.614101][T12212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  126.637727][   T29] audit: type=1326 audit(1762729773.550:4875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12288 comm="syz.3.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac1b1f6c9 code=0x7ffc0000
[  126.661012][T12212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.721756][   T29] audit: type=1326 audit(1762729773.550:4876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12288 comm="syz.3.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac1b1f6c9 code=0x7ffc0000
[  126.745363][   T29] audit: type=1326 audit(1762729773.550:4877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12288 comm="syz.3.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdac1b1f6c9 code=0x7ffc0000
[  126.769007][   T29] audit: type=1326 audit(1762729773.550:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12288 comm="syz.3.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac1b1f6c9 code=0x7ffc0000
[  126.792604][   T29] audit: type=1326 audit(1762729773.550:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12288 comm="syz.3.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fdac1b1f6c9 code=0x7ffc0000
[  126.827074][T12290] __nla_validate_parse: 5 callbacks suppressed
[  126.827090][T12290] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3048'.
[  126.864958][T12297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3051'.
[  126.909594][T11986] team0: Port device geneve1 removed
[  126.935837][T12301] loop3: detected capacity change from 0 to 2048
[  126.946890][T12304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3054'.
[  126.957637][T11986] bond0 (unregistering): Released all slaves
[  126.974559][T12301] Alternate GPT is invalid, using primary GPT.
[  126.981044][T12301]  loop3: p1 p2 p3
[  126.986218][T12297] team0: Port device team_slave_1 removed
[  126.997065][T12304] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3054'.
[  126.998349][T12212] hsr_slave_0: entered promiscuous mode
[  127.012836][T12212] hsr_slave_1: entered promiscuous mode
[  127.024204][T12304] netlink: 'syz.1.3054': attribute type 10 has an invalid length.
[  127.032192][T12304] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3054'.
[  127.043916][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3053'.
[  127.049218][T11986] tipc: Left network mode
[  127.059196][T12304] batman_adv: batadv0: Adding interface: veth1_vlan
[  127.065813][T12304] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  127.091947][T12304] batman_adv: batadv0: Interface activated: veth1_vlan
[  127.138253][T11986] hsr_slave_0: left promiscuous mode
[  127.144605][T11986] hsr_slave_1: left promiscuous mode
[  127.150160][T11986] batman_adv: batadv0: Interface deactivated: veth1_vlan
[  127.157242][T11986] batman_adv: batadv0: Removing interface: veth1_vlan
[  127.167774][T11986] veth1_macvtap: left promiscuous mode
[  127.173240][T11986] veth0_macvtap: left promiscuous mode
[  127.178940][T11986] veth1_vlan: left promiscuous mode
[  127.184300][T11986] veth0_vlan: left promiscuous mode
[  127.233993][T11986] pimreg (unregistering): left allmulticast mode
[  127.302808][T12314] syzkaller1: entered promiscuous mode
[  127.308539][T12314] syzkaller1: entered allmulticast mode
[  127.366216][T12322] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.377140][T12322] syzkaller0: entered promiscuous mode
[  127.382745][T12322] syzkaller0: entered allmulticast mode
[  127.391091][T12322] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  127.414359][T12322] tipc: Resetting bearer <eth:syzkaller0>
[  127.421242][T12321] tipc: Resetting bearer <eth:syzkaller0>
[  127.431380][T12321] tipc: Disabling bearer <eth:syzkaller0>
[  127.451646][T12327] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  127.451646][T12327]    program syz.1.3065 not setting count and/or reply_len properly
[  127.616716][T12347] vlan2: entered allmulticast mode
[  127.621959][T12347] bridge_slave_0: entered allmulticast mode
[  127.665714][T12354] netlink: 'syz.1.3078': attribute type 32 has an invalid length.
[  127.673624][T12354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3078'.
[  127.688485][T12354] bond1: Setting coupled_control to off (0)
[  127.742505][T12212] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  127.747478][T12362] netlink: 'syz.1.3081': attribute type 10 has an invalid length.
[  127.757167][T12362] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3081'.
[  127.760596][T12364] loop3: detected capacity change from 0 to 1024
[  127.772935][T12364] EXT4-fs: Ignoring removed orlov option
[  127.780005][T12364] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  127.804923][T12364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.806179][T12362] team0: Port device geneve1 added
[  127.835539][T12372] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  127.835539][T12372]    program syz.2.3085 not setting count and/or reply_len properly
[  127.852645][T12212] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  127.853656][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.871396][T12212] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  127.890886][T12212] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  127.907223][T12378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3088'.
[  127.912939][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3087'.
[  127.948510][T12212] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.956826][T12387] random: crng reseeded on system resumption
[  127.966403][T12389] vcan0: tx drop: invalid da for name 0x00000000000000c8
[  127.975823][T12389] IPv6: sit1: Disabled Multicast RS
[  127.982410][T12389] sit1: entered allmulticast mode
[  128.010077][T12212] 8021q: adding VLAN 0 to HW filter on device team0
[  128.022476][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.029627][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.049372][T12212] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  128.059834][T12212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  128.087439][T12398] ieee802154 phy0 wpan0: encryption failed: -22
[  128.096797][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.104089][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.121969][T12396] netlink: 'syz.3.3092': attribute type 10 has an invalid length.
[  128.139741][T12400] loop2: detected capacity change from 0 to 1024
[  128.146525][T12400] EXT4-fs: Ignoring removed nomblk_io_submit option
[  128.157859][T12400] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e041c01c, mo2=0002]
[  128.166051][T12400] System zones: 0-1, 3-36
[  128.171353][T12212] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.180041][T12400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.262718][T11701] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.274705][T12417] netlink: 'syz.3.3096': attribute type 10 has an invalid length.
[  128.321596][T12422] loop3: detected capacity change from 0 to 2048
[  128.344697][T12422] Alternate GPT is invalid, using primary GPT.
[  128.351100][T12422]  loop3: p1 p2 p3
[  128.409981][T12212] veth0_vlan: entered promiscuous mode
[  128.444174][T12212] veth1_vlan: entered promiscuous mode
[  128.471427][T12212] veth0_macvtap: entered promiscuous mode
[  128.479885][T12212] veth1_macvtap: entered promiscuous mode
[  128.501248][T12212] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.517526][T12212] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.521065][T12440] FAULT_INJECTION: forcing a failure.
[  128.521065][T12440] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  128.537863][T12440] CPU: 1 UID: 0 PID: 12440 Comm: syz.2.3105 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  128.537882][T12440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  128.537890][T12440] Call Trace:
[  128.537894][T12440]  <TASK>
[  128.537899][T12440]  __dump_stack+0x1d/0x30
[  128.537913][T12440]  dump_stack_lvl+0xe8/0x140
[  128.537926][T12440]  dump_stack+0x15/0x1b
[  128.537954][T12440]  should_fail_ex+0x265/0x280
[  128.537966][T12440]  should_fail+0xb/0x20
[  128.537976][T12440]  should_fail_usercopy+0x1a/0x20
[  128.538012][T12440]  _copy_from_user+0x1c/0xb0
[  128.538028][T12440]  ___sys_sendmsg+0xc1/0x1d0
[  128.538047][T12440]  __sys_sendmmsg+0x178/0x300
[  128.538109][T12440]  __x64_sys_sendmmsg+0x57/0x70
[  128.538121][T12440]  x64_sys_call+0x1c4a/0x3000
[  128.538135][T12440]  do_syscall_64+0xd2/0x200
[  128.538147][T12440]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  128.538176][T12440]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  128.538369][T12440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.538382][T12440] RIP: 0033:0x7fe6eae5f6c9
[  128.538392][T12440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.538480][T12440] RSP: 002b:00007fe6e98c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  128.538493][T12440] RAX: ffffffffffffffda RBX: 00007fe6eb0b5fa0 RCX: 00007fe6eae5f6c9
[  128.538501][T12440] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003
[  128.538509][T12440] RBP: 00007fe6e98c7090 R08: 0000000000000000 R09: 0000000000000000
[  128.538516][T12440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.538524][T12440] R13: 00007fe6eb0b6038 R14: 00007fe6eb0b5fa0 R15: 00007ffd0ca256a8
[  128.538535][T12440]  </TASK>
[  128.543297][T11988] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.577447][T12442] loop3: detected capacity change from 0 to 1024
[  128.583675][T11988] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.619975][T12442] EXT4-fs: Ignoring removed orlov option
[  128.749662][T12442] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  128.761631][T11988] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.765384][T12442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.798985][T11988] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.825724][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.850587][T12459] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  128.850587][T12459]    program syz.3.3108 not setting count and/or reply_len properly
[  128.906579][T12468] syzkaller0: entered promiscuous mode
[  128.912125][T12468] syzkaller0: entered allmulticast mode
[  129.031979][T12457] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  129.039544][T12457] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  129.055910][T12457] vhci_hcd: invalid port number 32
[  129.061061][T12457] vhci_hcd: default hub control req: 0300 vfffa i0020 l0
[  129.095481][T12479] loop3: detected capacity change from 0 to 732
[  129.102746][T12479] iso9660: Unknown parameter ''
[  129.191844][T12490] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  129.191844][T12490]    program syz.2.3122 not setting count and/or reply_len properly
[  129.243099][T12498] loop2: detected capacity change from 0 to 128
[  129.258296][T12498] msdos: Bad value for 'uid'
[  129.262966][T12498] msdos: Bad value for 'uid'
[  129.271187][T12502] netlink: 'syz.3.3126': attribute type 10 has an invalid length.
[  129.304324][T12509] syzkaller0: entered promiscuous mode
[  129.309865][T12509] syzkaller0: entered allmulticast mode
[  129.330427][T12513] loop2: detected capacity change from 0 to 1024
[  129.341606][T12513] EXT4-fs: Ignoring removed orlov option
[  129.348019][T12513] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  129.366763][T12513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.445701][T11701] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.491147][T12531] loop4: detected capacity change from 0 to 256
[  129.508332][T12538] loop3: detected capacity change from 0 to 512
[  129.522586][T12531] FAT-fs (loop4): Directory bread(block 64) failed
[  129.526408][T12538] ext4: Bad value for 'sb'
[  129.530876][T12540] netlink: 'syz.0.3140': attribute type 10 has an invalid length.
[  129.542373][T12537] bridge_slave_0: left allmulticast mode
[  129.548086][T12537] bridge_slave_0: left promiscuous mode
[  129.553908][T12537] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.561484][T12531] FAT-fs (loop4): Directory bread(block 65) failed
[  129.568225][T12531] FAT-fs (loop4): Directory bread(block 66) failed
[  129.575115][T12531] FAT-fs (loop4): Directory bread(block 67) failed
[  129.581794][T12531] FAT-fs (loop4): Directory bread(block 68) failed
[  129.582542][T12541] netlink: 'syz.2.3137': attribute type 10 has an invalid length.
[  129.588600][T12531] FAT-fs (loop4): Directory bread(block 69) failed
[  129.604446][T12531] FAT-fs (loop4): Directory bread(block 70) failed
[  129.611013][T12531] FAT-fs (loop4): Directory bread(block 71) failed
[  129.617715][T12531] FAT-fs (loop4): Directory bread(block 72) failed
[  129.625079][T12537] bridge_slave_1: left allmulticast mode
[  129.630802][T12537] bridge_slave_1: left promiscuous mode
[  129.636583][T12537] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.645056][T12531] FAT-fs (loop4): Directory bread(block 73) failed
[  129.662365][T12531] syz.4.3138: attempt to access beyond end of device
[  129.662365][T12531] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256
[  129.717356][T12537] bond0: (slave bond_slave_0): Releasing backup interface
[  129.734499][T12537] bond0: (slave bond_slave_1): Releasing backup interface
[  129.761850][T12537] team0: Port device team_slave_0 removed
[  129.804362][T12537] team0: Port device team_slave_1 removed
[  129.826114][T12537] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.833701][T12537] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.845064][T12537] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.852485][T12537] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.862746][T12537] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  129.884528][T12540] team0: Port device geneve1 added
[  130.102105][T12568] netlink: zone id is out of range
[  130.107489][T12568] netlink: zone id is out of range
[  130.113795][T12568] netlink: zone id is out of range
[  130.120175][T12568] netlink: zone id is out of range
[  130.133088][T12568] netlink: zone id is out of range
[  130.146172][T12568] netlink: zone id is out of range
[  130.152031][T12568] netlink: zone id is out of range
[  130.159356][T12568] netlink: zone id is out of range
[  130.470742][T12594] syzkaller1: entered promiscuous mode
[  130.470816][T12594] syzkaller1: entered allmulticast mode
[  130.496369][T12598] loop3: detected capacity change from 0 to 1024
[  130.506259][T12598] EXT4-fs: Ignoring removed orlov option
[  130.513750][T12598] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  130.547315][T12598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.639393][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.735843][T12616] netlink: 'syz.2.3164': attribute type 10 has an invalid length.
[  130.780492][T12616] team0: Port device geneve1 added
[  130.822550][T12618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.822666][T12618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.922340][T12625] loop2: detected capacity change from 0 to 1024
[  130.922784][T12625] EXT4-fs: Ignoring removed orlov option
[  130.937027][T12625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.026807][T12637] syzkaller1: entered promiscuous mode
[  131.026825][T12637] syzkaller1: entered allmulticast mode
[  131.130553][T12648] bridge_slave_0: left allmulticast mode
[  131.136284][T12648] bridge_slave_0: left promiscuous mode
[  131.142002][T12648] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.159149][T12648] bridge_slave_1: left allmulticast mode
[  131.164928][T12648] bridge_slave_1: left promiscuous mode
[  131.170711][T12648] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.188953][T12652] netlink: 'syz.1.3175': attribute type 10 has an invalid length.
[  131.202826][T12648] bond0: (slave bond_slave_0): Releasing backup interface
[  131.210681][T12658] 9pnet_fd: Insufficient options for proto=fd
[  131.219459][T12648] bond0: (slave bond_slave_1): Releasing backup interface
[  131.227006][T12658] loop4: detected capacity change from 0 to 512
[  131.235378][T12648] team0: Port device team_slave_0 removed
[  131.244620][T12658] EXT4-fs (loop4): too many log groups per flexible block group
[  131.244903][T12648] team0: Port device team_slave_1 removed
[  131.252500][T12658] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  131.260561][T12648] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.265365][T12658] EXT4-fs (loop4): mount failed
[  131.272211][T12648] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.286592][T12648] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.294045][T12648] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.303203][T12648] net_ratelimit: 586 callbacks suppressed
[  131.303217][T12648] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  131.476654][   T29] kauditd_printk_skb: 1026 callbacks suppressed
[  131.476670][   T29] audit: type=1326 audit(1762729778.490:5906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12665 comm="syz.3.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac1b1f6c9 code=0x7ffc0000
[  131.506532][   T29] audit: type=1326 audit(1762729778.490:5907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12665 comm="syz.3.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac1b1f6c9 code=0x7ffc0000
[  131.543986][T12666] loop3: detected capacity change from 0 to 1024
[  131.571302][T12666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.573232][   T29] audit: type=1326 audit(1762729778.490:5908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12667 comm="syz.1.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3154f6c9 code=0x7ffc0000
[  131.607005][   T29] audit: type=1326 audit(1762729778.490:5909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12667 comm="syz.1.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0f3154f6c9 code=0x7ffc0000
[  131.630354][   T29] audit: type=1326 audit(1762729778.490:5910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12667 comm="syz.1.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3154f6c9 code=0x7ffc0000
[  131.653915][   T29] audit: type=1326 audit(1762729778.490:5911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12667 comm="syz.1.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0f3154f6c9 code=0x7ffc0000
[  131.677370][   T29] audit: type=1326 audit(1762729778.490:5912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12667 comm="syz.1.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3154f6c9 code=0x7ffc0000
[  131.700940][   T29] audit: type=1326 audit(1762729778.490:5913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12667 comm="syz.1.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f3154f6c9 code=0x7ffc0000
[  131.724438][   T29] audit: type=1326 audit(1762729778.490:5914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12667 comm="syz.1.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3154f6c9 code=0x7ffc0000
[  131.748006][   T29] audit: type=1326 audit(1762729778.490:5915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12667 comm="syz.1.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0f3154f6c9 code=0x7ffc0000
[  131.801145][T12677] ALSA: seq fatal error: cannot create timer (-19)
[  131.808322][T11701] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.819657][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.852779][T12684] __nla_validate_parse: 38 callbacks suppressed
[  131.852803][T12684] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3184'.
[  131.862745][T12686] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'.
[  131.951696][T12694] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  132.024149][ T1072] hid-generic 0000:0003:0000.0001: item fetching failed at offset 0/2
[  132.046633][T12697] loop3: detected capacity change from 0 to 2048
[  132.053593][ T1072] hid-generic 0000:0003:0000.0001: probe with driver hid-generic failed with error -22
[  132.097166][T12705] syzkaller1: entered promiscuous mode
[  132.102661][T12705] syzkaller1: entered allmulticast mode
[  132.112284][T12705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3194'.
[  132.113251][T12697] Alternate GPT is invalid, using primary GPT.
[  132.127702][T12697]  loop3: p2 p3 p7
[  132.197628][T12716] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3198'.
[  132.323425][T12739] program syz.1.3199 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  132.358879][T12741] bridge_slave_0: left allmulticast mode
[  132.364721][T12741] bridge_slave_0: left promiscuous mode
[  132.370437][T12741] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.380135][T12741] bridge_slave_1: left allmulticast mode
[  132.385903][T12741] bridge_slave_1: left promiscuous mode
[  132.391610][T12741] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.400524][T12744] validate_nla: 1 callbacks suppressed
[  132.400552][T12744] netlink: 'syz.0.3205': attribute type 10 has an invalid length.
[  132.414001][T12744] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3205'.
[  132.423282][T12741] bond0: (slave bond_slave_0): Releasing backup interface
[  132.433051][T12741] bond0: (slave bond_slave_1): Releasing backup interface
[  132.443946][T12741] team0: Port device team_slave_0 removed
[  132.450646][T12741] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.458158][T12741] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.466598][T12741] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.474193][T12741] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.483270][T12741] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  132.500632][T12744] batman_adv: batadv0: Adding interface: veth1_vlan
[  132.507342][T12744] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  132.533203][T12744] batman_adv: batadv0: Interface activated: veth1_vlan
[  132.752016][T12012] ==================================================================
[  132.760231][T12012] BUG: KCSAN: data-race in nci_rsp_packet / skb_queue_purge_reason
[  132.760276][T12012] 
[  132.760281][T12012] write to 0xffff888109ca5918 of 8 bytes by task 12752 on cpu 1:
[  132.760298][T12012]  skb_queue_purge_reason+0x121/0x250
[  132.760323][T12012]  nci_dev_up+0x33f/0x8f0
[  132.760347][T12012]  nfc_dev_up+0x103/0x1b0
[  132.760377][T12012]  nfc_genl_dev_up+0x53/0x90
[  132.760399][T12012]  genl_family_rcv_msg_doit+0x143/0x1b0
[  132.760431][T12012]  genl_rcv_msg+0x422/0x460
[  132.760458][T12012]  netlink_rcv_skb+0x123/0x220
[  132.811750][T12012]  genl_rcv+0x28/0x40
[  132.815743][T12012]  netlink_unicast+0x5c0/0x690
[  132.820509][T12012]  netlink_sendmsg+0x58b/0x6b0
[  132.825272][T12012]  __sock_sendmsg+0x145/0x180
[  132.829954][T12012]  ____sys_sendmsg+0x31e/0x4e0
[  132.834724][T12012]  ___sys_sendmsg+0x17b/0x1d0
[  132.839387][T12012]  __x64_sys_sendmsg+0xd4/0x160
[  132.844225][T12012]  x64_sys_call+0x191e/0x3000
[  132.848908][T12012]  do_syscall_64+0xd2/0x200
[  132.853403][T12012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.859298][T12012] 
[  132.861605][T12012] read to 0xffff888109ca5918 of 8 bytes by task 12012 on cpu 0:
[  132.869222][T12012]  nci_rsp_packet+0xddf/0xe30
[  132.873897][T12012]  nci_rx_work+0x16f/0x2c0
[  132.878305][T12012]  process_scheduled_works+0x4ce/0x9d0
[  132.883861][T12012]  worker_thread+0x582/0x770
[  132.888558][T12012]  kthread+0x489/0x510
[  132.892621][T12012]  ret_from_fork+0x122/0x1b0
[  132.897203][T12012]  ret_from_fork_asm+0x1a/0x30
[  132.901964][T12012] 
[  132.904277][T12012] value changed: 0xffff88811907e000 -> 0xffff888109ca5918
[  132.911382][T12012] 
[  132.913700][T12012] Reported by Kernel Concurrency Sanitizer on:
[  132.919841][T12012] CPU: 0 UID: 0 PID: 12012 Comm: kworker/u8:56 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  132.929904][T12012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  132.940180][T12012] Workqueue: nfc2_nci_rx_wq nci_rx_work
[  132.945737][T12012] ==================================================================