last executing test programs:

1m34.393648305s ago: executing program 3 (id=1925):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000000200010002000000fedbdf250297b8c8a74c490000000000000004000b"], 0x1c}}, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000740), &(0x7f00000007c0)='%pB    \x00'}, 0x20)
preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x20000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40000) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70356ddeb75bdf50d9ae3eae60d00030000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000e00000000000000000000008500000050000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) (async)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") (async)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) (async)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x4}, {0x2, 0x2}], {}, [], {0x10, 0x5}}, 0x3c, 0x2)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

1m34.233327578s ago: executing program 3 (id=1931):
mincore(&(0x7f0000048000/0x3000)=nil, 0x3000, &(0x7f0000000040)=""/26)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@arp={0x806, @ether_ipv4={0x306, 0x800, 0x6, 0x4, 0x2, @local, @remote, @remote, @remote}}}}, 0x0)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$binfmt_elf32(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"/5464], 0x1558)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r6=>0x0})
r7 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r8=>0x0})
bind$can_raw(r7, &(0x7f0000000000)={0x1d, r8}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0)

1m34.157686055s ago: executing program 3 (id=1933):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1)
unshare(0x6a040000)

1m33.892560596s ago: executing program 3 (id=1941):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc4)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x224, 0x30, 0x51b, 0x0, 0x0, {}, [{0x210, 0x1, [@m_skbmod={0x78, 0x1, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x0, 0x5, 0xab8}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xfffffffffffffef9, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x224}}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000800)=[{&(0x7f0000000000)=""/78, 0x4e}, {0x0}], 0x2, 0x8, 0xfffffffb)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0)
r2 = syz_io_uring_setup(0x3771, &(0x7f0000000300)={0x0, 0x358c, 0x40, 0x1, 0x299}, &(0x7f00000001c0), &(0x7f0000000280))
io_uring_register$IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f0000000380)={0x0, 0x8988, 0x40, 0x0, 0xd0}, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x42838000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0xb0, 0x3, 0x8, 0x201, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x4bb1a250}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x80000}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x87f}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd6b}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff752}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
r4 = memfd_secret(0x80000)
syz_genetlink_get_family_id$SEG6(0x0, r4)
sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe5e2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}]}, 0x28}}, 0x4)

1m33.368937019s ago: executing program 3 (id=1946):
r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8)
write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x12)
mkdirat$cgroup(r1, &(0x7f0000000180)='syz0\x00', 0x1ff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r5, 0x0, r7, 0x0, 0x1, 0x0)
vmsplice(r7, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)
ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0)
write(r4, 0x0, 0x0)
close_range(r4, r6, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00')
ppoll(&(0x7f0000000280)=[{r8}], 0x1, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000c62)
io_setup(0x15, &(0x7f0000000240)=<r9=>0x0)
io_submit(r9, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}])

1m33.187136953s ago: executing program 3 (id=1948):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
unshare(0x2c020400)
syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0)

1m33.172472645s ago: executing program 32 (id=1948):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
unshare(0x2c020400)
syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0)

54.726414564s ago: executing program 4 (id=2808):
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5)
sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r6, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x1}, 0x20)
r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
flock(r8, 0x2)
clock_gettime(0x0, &(0x7f0000000080)={<r9=>0x0, <r10=>0x0})
openat(r8, &(0x7f00000002c0)='./file0\x00', 0x208000, 0x82)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'erspan0\x00', <r11=>0x0, 0x80, 0x7, 0x0, 0x7, {{0x14, 0x4, 0x3, 0x2f, 0x50, 0x67, 0x0, 0x1, 0x29, 0x0, @local, @multicast1, {[@rr={0x7, 0xf, 0x83, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}]}, @noop, @timestamp_addr={0x44, 0xc, 0xb2, 0x1, 0x4, [{@empty, 0xd}]}, @noop, @lsrr={0x83, 0xf, 0x14, [@remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @rr={0x7, 0xf, 0x64, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty]}]}}}}})
setsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f00000003c0)={r11, @dev={0xac, 0x14, 0x14, 0x38}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc)
sendmsg$can_bcm(r8, &(0x7f0000000280)={&(0x7f0000000040), 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0xcf4, 0x800, {0x77359400}, {r9, r10/1000+60000}, {0x2, 0x1}, 0x1, @canfd={{}, 0x28, 0x3, 0x0, 0x0, "bfb1fcd0e6e9d825155b365e1dde75b2cfb94a536220fe259d81975c62ec09a3692ad4aceeb342b9c337a6ac182cb79afbf208b51c9068726baab60d1a1c1101"}}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x844)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff}, 0x20)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

54.726019715s ago: executing program 4 (id=2809):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]})
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x4, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffe0}, {0x6, 0xbf1597172e385d47}, {0x4, 0xffe4}}, [{0x8, 0xb, 0xfffff001}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x200448c4)

54.703348346s ago: executing program 4 (id=2810):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
inotify_init1(0x0)

54.687616718s ago: executing program 4 (id=2811):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x44)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
syz_clone3(&(0x7f0000001200)={0x280, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[0x0], 0x1}, 0x58)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x20004004)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20)
setgroups(0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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")
creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_buf(r4, 0x0, 0x29, 0x0, &(0x7f0000695ffc))
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
writev(r5, &(0x7f0000000340)=[{0x0, 0xfe}, {&(0x7f0000000440)='n', 0x1}], 0x2)

54.609662224s ago: executing program 4 (id=2814):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f00000000c0))
statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x2000, 0xffff4a9c0080ffff, &(0x7f0000000240))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r2, 0x1, 0x3c, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
umount2(&(0x7f000001a300)='./file0\x00', 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$cgroup_int(r6, &(0x7f0000000540), 0xfffffdd8)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ff90000000000000100000850000007b00000095"], &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r7}, 0x18)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={<r8=>0x0, 0x7, 0x20}, &(0x7f0000000340)=0xc)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000380)={0x9, 0x205, 0xa, 0xa0, r8}, &(0x7f00000003c0)=0x10)

53.722473666s ago: executing program 4 (id=2841):
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000640)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14)

39.377209414s ago: executing program 33 (id=2841):
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000640)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14)

1.824039342s ago: executing program 1 (id=4441):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r2, &(0x7f0000000380), 0x2, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_freezer_state(r3, &(0x7f0000002b00), 0x2, 0x0)
close(r4)
prctl$PR_SET_NAME(0xf, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x0)
gettid()
timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000003c0)="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", &(0x7f0000000040)="1f0bca"}}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r6, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0)

1.489282938s ago: executing program 0 (id=4448):
syz_emit_ethernet(0x52, &(0x7f0000000840)={@link_local, @random="b638ae46feff", @void, {@ipv4={0x800, @dccp={{0xd, 0x4, 0x0, 0x2, 0x44, 0x65, 0x0, 0xf, 0x21, 0x0, @empty, @multicast1, {[@lsrr={0x83, 0x1f, 0xfe, [@multicast1, @local, @multicast2, @remote, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x26}, @remote]}]}}, {{0x4e22, 0x4e24, 0x4, 0x1, 0x9, 0x0, 0x0, 0xa, 0x1, "c699b4", 0x0, "74a40e"}}}}}}, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x2, [@fwd={0xb}, @fwd={0x6}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x17, 0x0, 0x4e, 0x1}, @ptr={0x1}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x23, 0x0, 0x34, 0x2}, @fwd={0x3}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x5}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x4}]}}, &(0x7f0000000240)=""/119, 0x86, 0x77, 0x0, 0x6c4}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe9c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
munlockall()
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x42a4c4, 0x1)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r2)
sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x1e4, r4, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x158, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @private1, 0xfffffff9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @local, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff5}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb44}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc7e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x133}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x810}, 0x400c090)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18)
ioctl$TIOCSETD(r3, 0x5423, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x2)
setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000080)=0x6, 0x4)

1.455343751s ago: executing program 0 (id=4451):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

1.436908023s ago: executing program 0 (id=4452):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
open_by_handle_at(0xffffffffffffffff, 0x0, 0x800)
openat$selinux_access(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2)
open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r1, 0x400, 0x2)
process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0)

1.352786159s ago: executing program 0 (id=4455):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x58, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x1}}], 0x48, 0x20000801}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x2, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0xfddf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2ca}, 0x94)
setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000000c0)={0xffff, {{0xa, 0x4e24, 0x6, @mcast2, 0x7ff}}}, 0x88)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24)
socket(0x10, 0x3, 0x0) (async)
socket$rds(0x15, 0x5, 0x0) (async)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x58, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x1}}], 0x48, 0x20000801}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x2, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0xfddf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2ca}, 0x94) (async)
setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000000c0)={0xffff, {{0xa, 0x4e24, 0x6, @mcast2, 0x7ff}}}, 0x88) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r3}, 0x18) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) (async)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) (async)

1.327046052s ago: executing program 0 (id=4457):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x560b, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x80000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r1, 0x2)
r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
r3 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r3], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13)
writev(r6, &(0x7f0000000840)=[{&(0x7f0000002940)="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", 0xf80}, {&(0x7f00000005c0)="653a8d5f3bcd64c149e356af4540cd2624084987a46b7adc8a4229fe4ec2b565a654270c3bb89d3d5806d01917a6b6652f9d9b9b0cfbec5566d02e18e9c8afcc6392143a1a5c9671b311cc0d99bd40306d5e662f4e45f26814dd8f2134f4fa9d1774575899f208a342de1c0d8aa389c488809407441c512f26f9ca1ae6a7b3b5aa6cc35fc3bf965b6ed1c6e9ce3cb215e257", 0x92}, {&(0x7f0000000680)="3f1607c121905d8c42ae645e986038013517b170407c5a22d22c820149aa9fc8666a30d72fbf33a9a27b9fd7662207a44c5f17f2f34ba3382fd9aec43a09d36e87201c98babe5c05486c8fa09ff1f7eee2377c581a4a85d9c870ae9a853e441ff8ea613c82dc7897e924684012f6dbf30369f8a45027be13d9a18f5f76f7b81baab126bb13c673bd04eba0ee14116939c8872f56b8b7809c58e32a1511976dea6c11e807b214609834f7cbcdf0b1", 0xae}, {&(0x7f0000003940)="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", 0x1a4}], 0x4)

1.196765002s ago: executing program 6 (id=4463):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4})

1.094984611s ago: executing program 5 (id=4467):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/19, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c000280080002"], 0x44}, 0x1, 0x2}, 0x0)

1.072354992s ago: executing program 5 (id=4468):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)=0x2)
getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000100)=""/16, &(0x7f0000000140)=0x10)
ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000180)=0x7fffffff)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10, r0, 0x8000000)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x8010, r0, 0x10000000)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd=r1, 0x3, {0x0, r1}, 0x4, 0xd, 0x1, {0x0, r4, r1}})
sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_getnetconf={0x24, 0x52, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffffd}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4c}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000300))
ioctl$SG_BLKSECTGET(r0, 0x1267, &(0x7f0000000340))
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='\x00')
sync_file_range(r0, 0x2, 0x93, 0x3)
ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f00000003c0)={'custom0\x00'})
bpf$ENABLE_STATS(0x20, &(0x7f0000000500), 0x4)
setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000540)=0x1, 0x4)
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000580)={{r0}, {@void, @actul_num={@void, 0x40, 0x65}}})
bpf$ENABLE_STATS(0x20, &(0x7f00000005c0), 0x4)
bpf$ENABLE_STATS(0x20, &(0x7f0000000600), 0x4)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000640)=<r5=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000680)={"00a7c2c680acd25ef5b1a9a4ff223c01", <r6=>0x0, 0x0, {0x9, 0x7fff}, {0xf5fd, 0x2}, 0x3, [0x100, 0x6, 0x7, 0xfffffffffffffff7, 0x3, 0x6, 0xffffffff, 0x7ff, 0xfffffffffffffffa, 0x7, 0x3, 0xed, 0x7, 0x8000000000000000, 0xffffffffffffffc0, 0x8]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000780)={"36df8ae9822d3e486e64413730e58627", r5, r6, {0x10000, 0x1}, {0x6, 0xffff}, 0xa, [0x9200000, 0x2, 0xffffffff, 0x1, 0x7, 0xa, 0x6, 0x400, 0x8000, 0x9, 0x21, 0x40, 0x37, 0x9, 0x7f, 0x1]})
read(r0, &(0x7f0000000880)=""/194, 0xc2)
recvfrom$x25(r1, &(0x7f0000000980)=""/43, 0x2b, 0x40, 0x0, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
fsetxattr$security_evm(r7, &(0x7f00000009c0), &(0x7f0000000a00)=@v2={0x5, 0x1, 0x3, 0x3, 0x6a, "4f0abe93930c55e26bfdd25928e65922d85db3d0a68c4d750f2af1cfa3d92af0040dccec6a09a05e5fec6043d2f023b66a837b2a2df29aff9cf90080e028f54536e91a4d13c12b8b6bc43e6c41acc1f2d4c7bd984936c236988000ffdf32a6192cf5d9cb4a7cf0da7154"}, 0x73, 0x1)
r8 = openat(r1, &(0x7f0000000a80)='./file0\x00', 0x18000, 0x1b0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000ac0)=0x3)

1.058021754s ago: executing program 6 (id=4469):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000080)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1ee)

1.045728145s ago: executing program 6 (id=4470):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000401000004000000c5000000881480008eee8f16b218b275bee7edbdcdd44dee47fcdd5d27604968444d6596fc1e10fa3a9e0dac7edd733b1af45476b6d784c56b3a0a18338d1126996d1805199973210379be12", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}, {0x40, 0x6, 0x1, 0x1}, {0x2, 0x9, 0xa5}]})
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4, @perf_config_ext={0xacf8, 0xf3}, 0x1100, 0x5ddc, 0x3a68, 0x5, 0x0, 0x8, 0x8697, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x2}, 0x94)
socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000000)=0x2, 0xfcc0)
r4 = socket$netlink(0x10, 0x3, 0x4)
write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"})
r5 = syz_open_pts(r2, 0x0)
dup3(r5, r2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000004000000563c"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000b00)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x6, 0x6, 0x0, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x7fb9da8a, 0x0, 0x2, 0xffffffff, 0x3, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x8}}]}}]}, 0x45c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
syz_io_uring_setup(0x116, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x700, 0x7800, 0x9, 0xffffffff, {{0x19, 0x4, 0x0, 0x28, 0x64, 0x68, 0x0, 0x7, 0x2b, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x19}, {[@timestamp_prespec={0x44, 0x4, 0x80, 0x3, 0x5}, @cipso={0x86, 0x45, 0x2, [{0x6, 0x6, "bdd28718"}, {0x1, 0xf, "03091e502f2282ec2b099e24a5"}, {0x6, 0x5, "a41dae"}, {0x7, 0x5, "e477ef"}, {0x7, 0x11, "a1c907c0ba31bfa48f02766ddcbce4"}, {0x1, 0xd, "81dd8beabcaef79a2909d0"}, {0x7, 0x2}]}, @end, @generic={0x44, 0x3, "c0"}]}}}}})
r8 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r9=>0x0})
bind$can_raw(r8, &(0x7f0000000000)={0x1d, r9}, 0x10)
bind$can_raw(r8, &(0x7f0000000080), 0x10)
getrusage(0x1, &(0x7f0000000040))

998.226849ms ago: executing program 1 (id=4471):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r2}, 0x18)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa", @ANYRES32=r4, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)

997.412818ms ago: executing program 6 (id=4472):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x560b, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x80000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r1, 0x2)
r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
r3 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r3], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13)
writev(r6, &(0x7f0000000840)=[{&(0x7f0000002940)="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", 0xf80}, {&(0x7f00000005c0)="653a8d5f3bcd64c149e356af4540cd2624084987a46b7adc8a4229fe4ec2b565a654270c3bb89d3d5806d01917a6b6652f9d9b9b0cfbec5566d02e18e9c8afcc6392143a1a5c9671b311cc0d99bd40306d5e662f4e45f26814dd8f2134f4fa9d1774575899f208a342de1c0d8aa389c488809407441c512f26f9ca1ae6a7b3b5aa6cc35fc3bf965b6ed1c6e9ce3cb215e257", 0x92}, {&(0x7f0000000680)="3f1607c121905d8c42ae645e986038013517b170407c5a22d22c820149aa9fc8666a30d72fbf33a9a27b9fd7662207a44c5f17f2f34ba3382fd9aec43a09d36e87201c98babe5c05486c8fa09ff1f7eee2377c581a4a85d9c870ae9a853e441ff8ea613c82dc7897e924684012f6dbf30369f8a45027be13d9a18f5f76f7b81baab126bb13c673bd04eba0ee14116939c8872f56b8b7809c58e32a1511976dea6c11e807b214609834f7cbcdf0b1", 0xae}, {&(0x7f0000003940)="988af4a9b74f40c53af3710eb516c64444ea7e309798bd56296437809ffa15ed5d70e136cc1dcba81f188ff71db827391dc73de105f497ab3374f713f910494967af415740ed147f06ca5eda869837d51f001a2e0612bc6f8b9edfd894b83bfe05ea42d0bc384d5e8f4a39a93528a28aeb3683ddaf85363766991972734c688fa9d86df0d4c48ddb52260e8a085a0cebc5cfa012abffedd7ab09626ca30e010400008301d7c746935843f02e74bbf8520e9e4cc717d28d929ddcaf66dd1485a4f10f88903d632fc3030c611dc86681060000000000000019c00e409a34214a6f8278d4951c736f93795b97e3bf2f211394c4307d83a7392f0030b9471949792432bbaf088907b3fca686b36e579f2dfe6ef0e32a058ecdd4e0dcd88b7d4e6d8108436590cae8b30a341be0800ec66cb6045970c47775ce0efa1d9a4d10631193af060c369ecd80707029b5c34c6a5c7214a0f4ce46d212e73b9fd0fc9ff9fc4507e2fd2d671a942e4d7200000000c2953192ffd56b9649457dd04c3bdfc0c6d996b33db017dd4e547ad34ebab76a5cb0a7ff84c84de93e02dd580a88af4107a53bba2858", 0x1a4}], 0x4)

985.591129ms ago: executing program 1 (id=4473):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [], {0x14}}, 0x28}}, 0x0)

968.901871ms ago: executing program 1 (id=4474):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x560b, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x80000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r1, 0x2)
r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
r3 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r3], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13)
writev(r6, &(0x7f0000000840)=[{&(0x7f0000002940)="3edb5d1d8f7edfdc94154599dce5cda4cfd70d59c38fe6be6e11600344d0dc4cbda24fc496f5675b33aa822407efbfe5fd0db8edd53756276fcedfe3329674cdb8d56f486d724f381a488aa8e58052abf3fdae7cab6d8281d472ce6a65273e0534450b9b890e9a83ee7e3d18040713d1ccc73ef50fa8e3760a2146dc664b1765aa82802f90a2b6089d5f1c6cc20fd654669ec26d6d725a714e0440df273208785cddaf243027f40a6fb2895b777c637e3d5076886d15cf0dbb6a1d4a99109be043a006a7c282c38eef62e38eec7d815bf1aa1c1a6b9bc87ba3284434129b8c4d94e0c24cc0ebcfae88dcae8f7a06719b8dc9b9d76b7c11ee695978a2e9e524aa7368a62c44d53e62e09a8ee7e082ca5d2a1504ccc5cff1fce2cda2f2d3a14273894a4717fc7bf3c745b7598acb09471fc698640270514944efcfb0521ece73578de17a0b382d84d8c200c0862ac8ccf9efc1d0b80ced0b74111e90433a5d2174baef34aec2e6bf6ff2d9473f4766c06133d71847960bcb695ae9ee765b06368841d4627cb23e714ca33ddbf885bfdbcd9bde915f3580aa58966fc6634cda30c84d970718fb09088bfc9eea2be39ef7bc0f3dd887acd0669462790ab223213b22690f7b9ced94d8e55f4d0f6182bcf1ffffbc5df42603a1ee0757819486cf7d52e83376529e69d1f1f06e835d1ce88f3fcc85efd455ae4b7c336e094f1a266e6c99ff90ef4a51ce323336d89e4da1a593d8fb841361a700c7850a251e921d4e10d81c0d5d84555098027b80d1e4bbb390c0680515f9ac193cbe0787e79c99c7e6c267b29a3b17d2098a4f15d37c454a66230520a3a38960e4b54ec56d823a6a0bd54ddf6037ebca9f8a56b86c290701f14cc749f73da8a52d8152dd8c0f23b37d04839baf3dfd66ff13dc0df6651aec3496f9c237b30866e11a82210e8efa8c93a30a26ffd285b9c5a02117abe49f8623c5fb13b3867d8bdcfeca094f5221a42b011ad86295465355139f920eba36f308e9a8048a45d10ae207a62975ac99229c817feced96dc0c3f4e24c343a35c23e3f1aaa0e4c4f9db1ff6304eaa8f2460eb1c7caa20fc49b9bb2ebdca81cb7ea5acbc1087fe05195e899c518071aee982e934dfa346952435ef2a6998129b13783fbbf43678f94cd0f3c146b0926d7109487182b5c601c95ba2186c9601ed0e3555b07c3e1d164d053c6303f2feb9a0f0bdcec9326578e1ec417f4436a5ef4c979520da19a42f28e8ac6d2d498c0d6c7b8a3c93df4572316feae5dadda89656437a1668860c00874256cec32f2bc4d97279151105fa6538e128e1da094bd75bf37c5573c333edddfacae43164510905144013f9a9d59a45ec7eb6460950b51383d80319626f6d60afad3e0115ed14f1bf35dc4b24b6c9b61dae1fe39faf348867bd7b12df226d4134a2ae1487101ed325707bf9c39bedcd85d7bee05b314987e07029f50356f063dd1b343970eea206a00fbb37ad7592ddffbed7acb2022ea0e882a591d3c94a37133d47abfd1fe1196660723147d5e2cb3ec06245a3cc7afcb0d5ce61570a754d458e1122bcb1285c7acf54406c886ee48039723ba140a05f33c9b853dd930d78a9724ca462c9c33d5d70b12e389efa7fc1ea28edfe2e47c1fc3bf341a9d8f28c6d2ef16cc17a425d3d05e1c802c223d390cca5e497ab710f3f957f36b5a884c61d9677a6478b864167c8ca34d4fa1fb77d84209c9d8e580bf760085cf1e77e3f736dd194d218746991885b9ec99f6dd45fc38a4cf87b080125562f9e83d8be3097373040f12da9c11b0ac7a112b1a72606d5c3c5c06bb0a4f7eb6c8ead491979aa83a1c830ae53eeb2e18b0257999d44b8f0bac6472a24960f8ab8bfc2f2469dbf066401215f9b513d6a02927f6aa6567762610aefa07c05fd570a12160ccebdea34f1b0ef33f0dbe8cd52798153542e08744cdba38730ce0837dfdb3f71a2cc6e1d8bf2ad5029234867a95c9a73b84268d3dbe4b6fedd3b7c1864e8a731ebca738231d87f6c9f500a6dbea908aaa14d2e869b886eaf8877b2ed821fe6180f290ff3cf98e3514c61cc0e5fb19c2d8a71079cdbae4c37d71dd688a2e4d803230864eab16a28abfad49633f4e7a26418ee2a5847ae3d686fb7e3a7f0e1abc926af2a2e87b977bd547a7b3b673499e911a05879123a8cc8899d3e717e8bd5ff8fa1f1ea062817ca71c5e50ae41664478f05f760caab19e6c1d7c6b6fbed71c5fa4df2f7f2cfb45c1be4ccebd6dc768ca9634bdeea03b056e7030eb87de1b4edabdbf92576e91b0e74a1757851ceae03d95494a9154de239bad04b11c356cf72b631493dadbcc9468ed0ddc46f8d50d14ea28b45c93df5dcf112a5eef97d25e4abcc80af7fd9049817449bee4aabbd8afc298bd5c7d5a4fa685026d9ce16b47df7e7db3fa85739960c0247062deea855fd8f63822f71d883b07f2b85623c45a9a634e353403d780f75358d88b7db82d283e4f38cd7b098706df7108a749dc094f0861c1cc509287fc6acbdc470f3a3cf9cb77cd0121e65e8cc940ffa721cdd1eaf2e36d02059c5120af16508a55285f4b70c261286a4b770d66826ee67d6fde3870272c8f59dc48e4f525f2154c48dde9959107c43ea4bbd5d413afb8a5ab535bc419b7c1fdb315a17030dd65a8f935c14b1b0bceb3755ccb36b8de107fe17c77d83d8367245fb35276db2d7141af06db66f220304f5e7eedd9d5b95833280966f0da9ef46ea9c912d2f7ca88078e7cc3b222ee2ba6f7a809d149ca60160b88c47e75e7d86b70894d5511e7952506a08ab005c281b4cde6964143a26e26d604b226bacef74dcc202a7f8e7d4e1fcb0feec0f08bf38f73b564bf14df2705e0c6d9df6672464571c38c17865ce337c4862e11e0cb7a433b9b0f7789940e4560bb3f9acaa4c68f56fb14a98a26eac0e4a688fb6ca117f6d919d30e17908ec7e56a9fd1bf7d87caf50b1446c9b1ad5093a16d1b15aba773206334532fa4f03ff8db48ec3889735bba7a037d87da2302343c6d515bbadb6aca4bbf756748b61308f23fd059cb7e50201c691987672f76b45a6cd74e4a2e18b2bbd0ded23adc585dfeabaa86715d3b85102d3a9883172fabe29f9bbec93f3f74084943ce8f98a356692a73448a5cbd67dee22128ced74b06491e0dc9173ca69f1c3642163e1d022c2213af53d0ae4e4926c3a42d9a9b4323eaeedadb1762c6ab9b4144de7e15107e15bca6cbe88983c8f539ae6e0979e2ee9099729cc2ff908518588e85134e5e8fa4049bd5eb50edecac5b33e7fc72f8cab09435c2edabe41792030751d04abf2b7f19c73090b4ff87d06d2be6930e36f51d98df0a7ce891520bea854f710b8959e2a9deece1fc4a0b2ccdf03f76a42a7ce2a6b0b949ab69aa4743447d3efbe0e42f2f50ce6db077cbfafac5c5e1adde724462f2418235c9c72d82fb786dd48f54fcda83f3cd93fa5197a0f6c0f787153647944cb24ab001f75af440ea5138b282f7a6b94380c6f25515888a11242891e917a4458f133dc21a2305aaff493eb8c78e114b81303b9c59f183016f877fcc08f79915df841ffcbd36f0996d85ddc34c8aebc969cf860c9fbe6e391f5685a38d31c7ef94e78f712bd2d67368de2f756ba31f1f5a653e6029d26d6a761a4844ff1a540a6e57901ed472edaed6561348fd7cd74f04ca2b6804320191849ff015bf0a300a43242038b4ec8f820b1d98ff0dceed0f5140c26a64de1370e232b8d01f88049aaa572537d51a9457844dbc14e5bc7d61657fc90264bee0cd7b67ffd0876d1a9c01d65489819f09025654b983490216126fc94d3ad4eb644cbd25ce7820b207f03fab40c45d95fad0abc1377ff07f33ccc635a67a8bfad88c1b0d636cfef048f2641eeb914e048aefc2d747218418f80e110d636dee834c9d021ecff31334555f95bf58ee582ac0654c4bdfcdcab4a21f872ccfa51cea61992c84a579a5ec26aa82a90efa14d8f22cb8b7f9dc0cb7b50c69e1a4f7501e03ff42302935ce79b0d836970bcd7c50247398832c646702b9a7eb0ca5e945a8271b3971a93733ec57a2666780c7034576d00fa9b07e2b7bb10be2cca7f93dee8aed9b74f0879fa74189d240e15772bd6c9894208138741413ea85fb4501d4305e8c44074686c579e2404f0153d09477c642adc6172b5f91244b3cc6d5dc69fecaff95649baea0d1e1109f585aaf36cf70b3cdb8bf285ada90e4d23bf54be12b863a474ffba462973fed0661af50b1cf3f55bb16ee479c1e4107502486b78c38ca50d170a5b975e70b398046d73a8b617ec50ae6ae24efedb8592d29a9aa85f921815cc35106155ef1646a472eb700012b4bea553738614c957a2b599b541fad531350e149d2e3a10d342fa7a3cf1a65b9034880f8e0b3dfc53208622365bf0f61940b085f255bf028893bfb095310364194910734e5c21fa5c171ec741085718e9626854d3dbfe36b45e3724dd3cc0461f3cbcafa6c2aaeb69bef00a11b29d027d2b2dc658042d82e8242161a2984c1df34e267404403acc8f70a7a79680296095ae2addbd6259fab777f5cff8ac8e980c60d3e63997d9de1326161b2bf7d4a3052e67688cea06f653b4bf763ca6685731a77f354d160eff8a56cdf74041fa28cbabdbae775a4a6aa52edb4be1846954b20b58b03eebb9c097b02dd71ac25ffbe3bfad95ecee6f7ddf7f46dee074070d9cd5294435185491bb79a10b1aab1e88d46594dc22628ba4ef99906ead9589a8d25ea9812ddebebbf1e419305924266f2cb2218840c15092f5ae151507b907f74addfead619da0e1fbfb60ba0164d81df6e194670eac1f8ca386a80d688f9779e474e206149f574ffc52798699de1d003a433e4f0b8e5eb76fd32face2d6b4e53c065df30dc930c70098ee80f5fc1bbdd18a68bae84205b5f2f5e9b418cbd897618f4931c0751d69b8e4427463d6953d71c4b0db5f340bf17b37352b9257cd9e2d47377af0ce2c449fb26910937fab501c721ce7a2a5b533047b6b0a0087be5e53a70d4d64716d8f1e719b39118071184e0854129a4c0acbca8d35d7cb87b96a37be4a9f1a99977ecb023e9b9cf22c6ab111d4e38a5f8c526222939617369f13e485d47855e4479b1af1e2fbe771222fb6e96904188c4f7153f6518cd90f3c12c0da1c03d73f9dd625c849b0bd674b200d17130e0eb68db6279f6e4c2a02778ddb9c3507ee2375772e58205d4f6265c8aff28880344fb02b92f7cdb5784039ad35c352cd5b488bb1d8f5f66507d3cdce26ed8b5049cdcbb95bc04984b1f9603407e1feb6170a3d62cd11bc2bbc6fe3c1facae31d0dbfabd2c8f0081fb1231cb4792e74579e092075b06b4246de30594bc95a0e8f7f1d511468c1140ba8df9d9e9f42e62028dc7244a4ab23028b2ae8530d7d85cbb0bd6b2407134194e59f187e7822ef8ea9732a1df1e0a860cf9f2abe999e27d78a2190ea328b797b41054a5e12314622fa995e16a82f19d4d8125f6abfbf344cd3a04feccaf63cc48050c6d43a0e9aa8f0d14ce72180ce6b4f380b1fd16d6f09f246bd7d556ca72924c474e8f6365b48276248492fc9ab88f7488a4bf2707858", 0xf80}, {&(0x7f00000005c0)="653a8d5f3bcd64c149e356af4540cd2624084987a46b7adc8a4229fe4ec2b565a654270c3bb89d3d5806d01917a6b6652f9d9b9b0cfbec5566d02e18e9c8afcc6392143a1a5c9671b311cc0d99bd40306d5e662f4e45f26814dd8f2134f4fa9d1774575899f208a342de1c0d8aa389c488809407441c512f26f9ca1ae6a7b3b5aa6cc35fc3bf965b6ed1c6e9ce3cb215e257", 0x92}, {&(0x7f0000000680)="3f1607c121905d8c42ae645e986038013517b170407c5a22d22c820149aa9fc8666a30d72fbf33a9a27b9fd7662207a44c5f17f2f34ba3382fd9aec43a09d36e87201c98babe5c05486c8fa09ff1f7eee2377c581a4a85d9c870ae9a853e441ff8ea613c82dc7897e924684012f6dbf30369f8a45027be13d9a18f5f76f7b81baab126bb13c673bd04eba0ee14116939c8872f56b8b7809c58e32a1511976dea6c11e807b214609834f7cbcdf0b1", 0xae}, {&(0x7f0000003940)="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", 0x1a4}], 0x4)

519.126228ms ago: executing program 0 (id=4475):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00')
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0xc8, 0x0, 0x101, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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")
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
gettid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000300)=0x2)
ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
read(r3, 0x0, 0x0)

254.108229ms ago: executing program 5 (id=4476):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080)

253.580199ms ago: executing program 5 (id=4477):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fstatfs(r2, &(0x7f0000000300)=""/221)

239.93421ms ago: executing program 5 (id=4478):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/19, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c000280080002"], 0x44}, 0x1, 0x2}, 0x0)

229.655071ms ago: executing program 5 (id=4479):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x320)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x17, 0xfa00, {0xffffffffffffffff, &(0x7f00000007c0), 0x13f, 0x9}}, 0x20)
stat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x2}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@resuid={'resuid', 0x3d, r2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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")
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x141241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r6=>r3, {0x8dd}}, './bus\x00'})
sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000000106030000000000000000000500000505004b55495bec7816e2da8001000700000005000100070000000500000500010007000000050001000700000005000100070300009b79eaf572", @ANYRES8=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x14801)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000012c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x210, 0x2e8, 0x2e8, 0x210, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ipv6={@mcast2, @loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xff], 'team_slave_1\x00', 'vlan0\x00', {0xff}, {0x101}, 0x8, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @common=@unspec=@realm={{0x30}, {0x6ff1, 0x2934, 0x1}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd92}, 0x90)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x22004810)
socket$inet6(0xa, 0x800, 0x88)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r8, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000040)=ANY=[], 0xfdef)

182.746115ms ago: executing program 6 (id=4481):
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0)

141.886148ms ago: executing program 1 (id=4483):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x7, 0x401})

141.160128ms ago: executing program 2 (id=4484):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r2}, 0x18)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa", @ANYRES32=r4, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)

108.631161ms ago: executing program 6 (id=4485):
r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8)
write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x12)
mkdirat$cgroup(r1, &(0x7f0000000180)='syz0\x00', 0x1ff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0x1, 0x0)
vmsplice(r6, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)
ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0)
write(r4, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00')
ppoll(&(0x7f0000000280)=[{r7}], 0x1, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000c62)
io_setup(0x15, &(0x7f0000000240)=<r8=>0x0)
io_submit(r8, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}])

107.850761ms ago: executing program 2 (id=4486):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='ufshcd_clk_gating\x00', r2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x40004)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000500)=0x7)
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000580)={{0x84, @loopback, 0x4e24, 0x3, 'rr\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e23, 0x10000, 0x1000, 0x80012d5a, 0x12d5c}}, 0x44)

94.924092ms ago: executing program 2 (id=4487):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = memfd_create(0x0, 0x8)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYRESHEX=r1, @ANYRESHEX], 0xfc}}, 0x2404c080)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[], 0x7c}}, 0x44004)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100", @ANYBLOB="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", @ANYRESOCT=r2, @ANYRES16=r4, @ANYRES64, @ANYRESHEX, @ANYRES16=r0, @ANYRES8=r3], 0x68}, 0x1, 0x0, 0x0, 0x48d0}, 0x4000080)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x1f, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB="ae58d718983c327e00000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a300000000014000380080002400000000008000140000000001400000098a06e85b51e7620f2416d84e8110001fb260e4c0da2deca4ea9f728758aca61ff33429a73e48df749c5c195782f1d6bf16467a33f0a25b9cd566e07c8f5343614410fd90870005cdcd9b506dfe7ca037f2ebc22d596b59d1a801c8f4378371d5c73f13790f4cd9f95affc756b11c24829770a3512862a293b62abce02d48973e89907836f9b29e5d4"], 0x68}}, 0x2000c401)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00', <r6=>0x0})
connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0xf0}, 0x1}, 0x18)
close_range(r2, 0xffffffffffffffff, 0x0)

74.208164ms ago: executing program 1 (id=4488):
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0xc0, &(0x7f0000000300)=0x1, 0x0, 0x4)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8})

73.712454ms ago: executing program 2 (id=4489):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xac}}, 0x0)

35.214387ms ago: executing program 2 (id=4490):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x9)
fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007})
fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000})
syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x0, 0x3, 0x8002ae}, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880})
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000180)={[{@errors_remount}, {@dioread_lock}, {@noquota}, {@noblock_validity}, {@inlinecrypt}]}, 0xfc, 0x564, &(0x7f00000008c0)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUo2ixoPe6JNNQsumW7KY0sWB7sBcvUgQRC6J37x6L/4B/RUELRUrQg5eV2cym22Y32aSbJu1+PjDJezOzee+7M9+XNzu7bAB9ayz7UYh4NSK+TSJGWrYNRr5xbHW/lYfXp7MliXr9s7+TSPJ1zf2T/PehvPJKRPz+dcTJwvp2q0vLc6VyOV3I6+O1+Svj1aXlU5fmS7PpbHp5cmrqzDtTk++/927PYn3z/L8/fHr3ozPfHF/5/tf7R24ncTYO59ta43gKN1orYzGWPydDcfaJHSd60Nhekux2B9iWgTzPhyIbA0ZiIM/6tuojz7JrwA77KktroE8l8h/6VHMe0Ly279F18HPjwYerF0Dr4x9cfW0khhvXRgdXkseujLLr3dEetJ+18dtfd25nS/TudQiATd24GRGnBwfXj39JPv5t3+ku9nmyDeMfPDt3s/nPW+3mP4W1+U+0mf8capO727F5/hfu96CZjrL53wdt579rN61GB/LaS40531By8VI5zca2lyPiRAztz+ob3M/5orByr95pY+v8L1uy9ptzwbwf9wf3P/6YmVKt9FRBt3hwM+K1tvPfZO34J22Of/Z8nO+yjWPpndc7bds8/p1V/znijbbH/9EdrWTj+5PjjfNhvHlWrPfPrWN/dGp/t+PPjv/BjeMfTVrv11a33sZPw/+lnbZt9/zfl3zeKO/L110r1WoLExH7kk/Wr5989Nhmvbl/Fv+J4xuPf+3O/wNZYncZ/62jt1p3Hd5a/Dsri39mS8d/64V7H3/5Y6f2uzv+bzdKJ/I13Yx/3XbwaZ47AAAAAAAA2GsKEXE4kkJxrVwoFIur7+84GgcL5Uq1dvJiZfHyTDQ+KzsaQ4Xmne6RlvdDTOTvh23WJ5+oT0XEkYj4buBAo16crpRndjt4AAAAAAAAAAAAAAAAAAAA2CMORQy3+/x/5s+B3e4dsOM2+Mpv4AXXOf/zLb34pidgT/L/H/qX/If+Jf+hf8l/6F/yH/qX/If+Jf+hf20l/385t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPnsqW+8vD6dFafubq0OFe5emomrc4V5xeni9OVhSvF2UpltpwWpyvzm/29cqVyZWIyFq+N19Jqbby6tHxhvrJ4uXbh0nxpNr2QDj2TqAAAAAAAAAAAAAAAAAAAAOD5Ul1aniuVy+mCgsK2CoN7oxsKPS7s9sgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/8HwAA///F1Dry")
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x40)
getdents(r4, &(0x7f0000000480)=""/40, 0x28)
getdents(r4, 0xfffffffffffffffd, 0x58)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000080000000a00000008"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, <r6=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000240)=r5}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000001c0)='\xa7x{8\xb8\x81\xae$\xbb\x17\x90\xaa\x96\xd4\x9b\xd8\x87\x84\xca\xf6\xa6;\xd2!?,J\r\x94EA\x11\xc2\n\xc4h\xad\xc4\xe7*<\x87\xb5H\xfb\xf6t\x12\xed\x8f\x9caU^\xffW\xa1\x06\xcc', 0x0)

0s ago: executing program 2 (id=4491):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x560b, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x80000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r1, 0x2)
r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
r3 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r3], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13)
writev(r6, &(0x7f0000000840)=[{&(0x7f0000002940)="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", 0xf80}, {&(0x7f00000005c0)="653a8d5f3bcd64c149e356af4540cd2624084987a46b7adc8a4229fe4ec2b565a654270c3bb89d3d5806d01917a6b6652f9d9b9b0cfbec5566d02e18e9c8afcc6392143a1a5c9671b311cc0d99bd40306d5e662f4e45f26814dd8f2134f4fa9d1774575899f208a342de1c0d8aa389c488809407441c512f26f9ca1ae6a7b3b5aa6cc35fc3bf965b6ed1c6e9ce3cb215e257", 0x92}, {&(0x7f0000000680)="3f1607c121905d8c42ae645e986038013517b170407c5a22d22c820149aa9fc8666a30d72fbf33a9a27b9fd7662207a44c5f17f2f34ba3382fd9aec43a09d36e87201c98babe5c05486c8fa09ff1f7eee2377c581a4a85d9c870ae9a853e441ff8ea613c82dc7897e924684012f6dbf30369f8a45027be13d9a18f5f76f7b81baab126bb13c673bd04eba0ee14116939c8872f56b8b7809c58e32a1511976dea6c11e807b214609834f7cbcdf0b1", 0xae}, {&(0x7f0000003940)="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", 0x1a4}], 0x4)

kernel console output (not intermixed with test programs):

cd.0: devid(0) speed(1) speed_str(low-speed)
[  185.949914][T14375] vhci_hcd vhci_hcd.0: Device attached
[  186.061865][T14379] vhci_hcd: connection closed
[  186.062206][ T5605] vhci_hcd: stop threads
[  186.071263][ T5605] vhci_hcd: release socket
[  186.075745][ T5605] vhci_hcd: disconnect device
[  186.119221][T13839] veth0_vlan: entered promiscuous mode
[  186.124968][   T10] vhci_hcd: vhci_device speed not set
[  186.133828][T13839] veth1_vlan: entered promiscuous mode
[  186.143802][T14409] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3213'.
[  186.148065][T13839] veth0_macvtap: entered promiscuous mode
[  186.162664][T13839] veth1_macvtap: entered promiscuous mode
[  186.182816][T13839] batman_adv: batadv0: Interface activated: batadv_slave_0
[  186.194461][T13839] batman_adv: batadv0: Interface activated: batadv_slave_1
[  186.211510][ T5603] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.231269][ T5603] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.252848][ T5603] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.277273][ T5603] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.309197][T14423] 
: renamed from bond0
[  186.363363][T14435] wg1 speed is unknown, defaulting to 1000
[  186.394211][T14446] gretap0: entered promiscuous mode
[  186.401927][T14446] macsec1: entered promiscuous mode
[  186.407197][T14446] macsec1: entered allmulticast mode
[  186.412529][T14446] gretap0: entered allmulticast mode
[  186.419731][T14446] gretap0: left allmulticast mode
[  186.424852][T14446] gretap0: left promiscuous mode
[  186.475093][   T29] kauditd_printk_skb: 496 callbacks suppressed
[  186.475116][   T29] audit: type=1400 audit(1754537123.526:20624): avc:  denied  { write } for  pid=14436 comm="syz.5.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  186.523099][   T29] audit: type=1326 audit(1754537123.600:20625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14480 comm="syz.0.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515485eb69 code=0x7ffc0000
[  186.546815][   T29] audit: type=1326 audit(1754537123.600:20626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14480 comm="syz.0.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515485eb69 code=0x7ffc0000
[  186.585535][   T29] audit: type=1326 audit(1754537123.600:20627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14480 comm="syz.0.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f515485eb69 code=0x7ffc0000
[  186.609274][   T29] audit: type=1326 audit(1754537123.600:20628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14480 comm="syz.0.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515485eb69 code=0x7ffc0000
[  186.633178][   T29] audit: type=1326 audit(1754537123.600:20629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14480 comm="syz.0.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515485eb69 code=0x7ffc0000
[  186.635650][T14483] wg1 speed is unknown, defaulting to 1000
[  186.682538][   T29] audit: type=1326 audit(1754537123.747:20630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14489 comm="syz.1.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76c337eb69 code=0x7ffc0000
[  186.682572][   T29] audit: type=1326 audit(1754537123.747:20631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14489 comm="syz.1.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f76c337eb69 code=0x7ffc0000
[  186.682679][   T29] audit: type=1326 audit(1754537123.747:20632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14489 comm="syz.1.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76c337eb69 code=0x7ffc0000
[  186.682708][   T29] audit: type=1326 audit(1754537123.757:20633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.0.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515485eb69 code=0x7ffc0000
[  186.952636][T14540] netlink: 'syz.1.3239': attribute type 10 has an invalid length.
[  187.112670][T14565] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.3251'.
[  187.150276][T14572] netlink: 'syz.1.3255': attribute type 10 has an invalid length.
[  187.159896][T14565] netlink: zone id is out of range
[  187.165166][T14565] netlink: zone id is out of range
[  187.170416][T14565] netlink: zone id is out of range
[  187.207968][T14572] geneve1: entered promiscuous mode
[  187.278877][T14575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.290122][T14575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.306062][T14585] loop6: detected capacity change from 0 to 512
[  187.369923][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3266'.
[  187.530356][T14621] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3270'.
[  187.563664][T14611] wg1 speed is unknown, defaulting to 1000
[  187.584543][T14633] netlink: 'syz.5.3272': attribute type 10 has an invalid length.
[  187.596133][T14633] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  187.684456][T14611] chnl_net:caif_netlink_parms(): no params data found
[  187.760298][T14611] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.767548][T14611] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.777697][T14611] bridge_slave_0: entered allmulticast mode
[  187.778431][T14611] bridge_slave_0: entered promiscuous mode
[  187.786951][T14611] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.787042][T14611] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.789661][T14611] bridge_slave_1: entered allmulticast mode
[  187.796017][T14611] bridge_slave_1: entered promiscuous mode
[  187.881915][T14611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.883974][T14611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.927781][T14611] team0: Port device team_slave_0 added
[  187.928651][T14611] team0: Port device team_slave_1 added
[  187.972688][T14611] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.972701][T14611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.972728][T14611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.973195][T14611] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.973206][T14611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.973232][T14611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.005242][T14872] usb usb7: usbfs: process 14872 (syz.0.3281) did not claim interface 0 before use
[  188.099441][T14611] hsr_slave_0: entered promiscuous mode
[  188.110063][T14611] hsr_slave_1: entered promiscuous mode
[  188.150419][T14907] netlink: 'syz.5.3283': attribute type 10 has an invalid length.
[  188.159591][T14611] debugfs: 'hsr0' already exists in 'hsr'
[  188.165367][T14611] Cannot create hsr debugfs directory
[  188.318105][T14611] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  188.328046][T14611] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.391200][T14611] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  188.401105][T14611] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.462628][T14611] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  188.472519][T14611] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.499480][T14991] wg1 speed is unknown, defaulting to 1000
[  188.543252][T14611] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  188.553130][T14611] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.652710][T15026] usb usb7: usbfs: process 15026 (syz.6.3293) did not claim interface 0 before use
[  188.672578][T14611] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  188.687240][T14611] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  188.721353][T14611] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  188.743347][T14611] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  188.743380][T15046] loop6: detected capacity change from 0 to 2048
[  188.774604][T15046] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  188.794512][T14611] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.807366][T14611] 8021q: adding VLAN 0 to HW filter on device team0
[  188.816749][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.823868][ T5594] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.835667][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.842819][ T5602] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.910163][T15058] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  188.931335][T14611] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.933147][T15058] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1812 with error 28
[  188.950700][T15058] EXT4-fs (loop6): This should not happen!! Data will be lost
[  188.950700][T15058] 
[  188.960453][T15058] EXT4-fs (loop6): Total free blocks count 0
[  188.966454][T15058] EXT4-fs (loop6): Free/Dirty block details
[  188.972371][T15058] EXT4-fs (loop6): free_blocks=2415919104
[  188.978438][T15058] EXT4-fs (loop6): dirty_blocks=1824
[  188.983764][T15058] EXT4-fs (loop6): Block reservation details
[  188.989862][T15058] EXT4-fs (loop6): i_reserved_data_blocks=114
[  188.995991][ T3388] usb 1-1: enqueue for inactive port 0
[  189.001608][ T3388] usb 1-1: enqueue for inactive port 0
[  189.075439][ T3388] vhci_hcd: vhci_device speed not set
[  189.109279][T14611] veth0_vlan: entered promiscuous mode
[  189.125054][T14611] veth1_vlan: entered promiscuous mode
[  189.153551][T14611] veth0_macvtap: entered promiscuous mode
[  189.161059][T14611] veth1_macvtap: entered promiscuous mode
[  189.171626][ T5602] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  189.172649][T14611] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.198128][T14611] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.210894][ T5602] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.224747][T15092] usb usb7: usbfs: process 15092 (syz.2.3303) did not claim interface 0 before use
[  189.239289][ T5602] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.253200][ T5602] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.262604][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.411285][T15115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3312'.
[  189.475725][T15119] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3313'.
[  189.508557][T15130] netlink: 'syz.2.3317': attribute type 10 has an invalid length.
[  189.519933][T15130] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  189.697137][T15166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3331'.
[  189.840553][T15188] FAULT_INJECTION: forcing a failure.
[  189.840553][T15188] name failslab, interval 1, probability 0, space 0, times 0
[  189.853299][T15188] CPU: 1 UID: 0 PID: 15188 Comm: syz.2.3340 Tainted: G        W           6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[  189.853416][T15188] Tainted: [W]=WARN
[  189.853422][T15188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  189.853433][T15188] Call Trace:
[  189.853438][T15188]  <TASK>
[  189.853445][T15188]  __dump_stack+0x1d/0x30
[  189.853511][T15188]  dump_stack_lvl+0xe8/0x140
[  189.853557][T15188]  dump_stack+0x15/0x1b
[  189.853650][T15188]  should_fail_ex+0x265/0x280
[  189.853682][T15188]  should_failslab+0x8c/0xb0
[  189.853711][T15188]  __kmalloc_node_noprof+0xa9/0x410
[  189.853747][T15188]  ? __vmalloc_node_range_noprof+0x3f9/0xe00
[  189.853853][T15188]  __vmalloc_node_range_noprof+0x3f9/0xe00
[  189.853899][T15188]  ? cred_has_capability+0x210/0x280
[  189.853935][T15188]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[  189.853988][T15188]  __vmalloc_noprof+0x83/0xc0
[  189.854027][T15188]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[  189.854055][T15188]  bpf_prog_alloc_no_stats+0x47/0x3a0
[  189.854119][T15188]  ? bpf_prog_alloc+0x2a/0x150
[  189.854226][T15188]  bpf_prog_alloc+0x3c/0x150
[  189.854251][T15188]  bpf_prog_load+0x514/0x1070
[  189.854283][T15188]  ? security_bpf+0x2b/0x90
[  189.854311][T15188]  __sys_bpf+0x462/0x7b0
[  189.854373][T15188]  __x64_sys_bpf+0x41/0x50
[  189.854402][T15188]  x64_sys_call+0x2aea/0x2ff0
[  189.854469][T15188]  do_syscall_64+0xd2/0x200
[  189.854501][T15188]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  189.854532][T15188]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.854556][T15188] RIP: 0033:0x7f654f9ceb69
[  189.854629][T15188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.854648][T15188] RSP: 002b:00007f654e037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  189.854667][T15188] RAX: ffffffffffffffda RBX: 00007f654fbf5fa0 RCX: 00007f654f9ceb69
[  189.854679][T15188] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005
[  189.854693][T15188] RBP: 00007f654e037090 R08: 0000000000000000 R09: 0000000000000000
[  189.854707][T15188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  189.854721][T15188] R13: 0000000000000001 R14: 00007f654fbf5fa0 R15: 00007ffe1a9c6778
[  189.854817][T15188]  </TASK>
[  189.854824][T15188] syz.2.3340: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[  189.857276][T15189] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3339'.
[  189.868642][T15188] ,cpuset=/,mems_allowed=0
[  190.108900][T15188] CPU: 1 UID: 0 PID: 15188 Comm: syz.2.3340 Tainted: G        W           6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[  190.108992][T15188] Tainted: [W]=WARN
[  190.109049][T15188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  190.109061][T15188] Call Trace:
[  190.109069][T15188]  <TASK>
[  190.109077][T15188]  __dump_stack+0x1d/0x30
[  190.109097][T15188]  dump_stack_lvl+0xe8/0x140
[  190.109115][T15188]  dump_stack+0x15/0x1b
[  190.109124][T15188]  warn_alloc+0x12b/0x1a0
[  190.109136][T15188]  ? should_failslab+0x8c/0xb0
[  190.109268][T15188]  __vmalloc_node_range_noprof+0x497/0xe00
[  190.109293][T15188]  ? cred_has_capability+0x210/0x280
[  190.109312][T15188]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[  190.109330][T15188]  __vmalloc_noprof+0x83/0xc0
[  190.109371][T15188]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[  190.109387][T15188]  bpf_prog_alloc_no_stats+0x47/0x3a0
[  190.109449][T15188]  ? bpf_prog_alloc+0x2a/0x150
[  190.109502][T15188]  bpf_prog_alloc+0x3c/0x150
[  190.109530][T15188]  bpf_prog_load+0x514/0x1070
[  190.109592][T15188]  ? security_bpf+0x2b/0x90
[  190.109609][T15188]  __sys_bpf+0x462/0x7b0
[  190.109628][T15188]  __x64_sys_bpf+0x41/0x50
[  190.109643][T15188]  x64_sys_call+0x2aea/0x2ff0
[  190.109726][T15188]  do_syscall_64+0xd2/0x200
[  190.109745][T15188]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  190.109762][T15188]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.109780][T15188] RIP: 0033:0x7f654f9ceb69
[  190.109790][T15188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.109800][T15188] RSP: 002b:00007f654e037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  190.109812][T15188] RAX: ffffffffffffffda RBX: 00007f654fbf5fa0 RCX: 00007f654f9ceb69
[  190.109894][T15188] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005
[  190.109901][T15188] RBP: 00007f654e037090 R08: 0000000000000000 R09: 0000000000000000
[  190.109909][T15188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  190.109916][T15188] R13: 0000000000000001 R14: 00007f654fbf5fa0 R15: 00007ffe1a9c6778
[  190.109926][T15188]  </TASK>
[  190.109939][T15188] Mem-Info:
[  190.324837][T15188] active_anon:22253 inactive_anon:0 isolated_anon:0
[  190.324837][T15188]  active_file:17357 inactive_file:2565 isolated_file:0
[  190.324837][T15188]  unevictable:0 dirty:49 writeback:0
[  190.324837][T15188]  slab_reclaimable:3676 slab_unreclaimable:20333
[  190.324837][T15188]  mapped:31029 shmem:19107 pagetables:990
[  190.324837][T15188]  sec_pagetables:0 bounce:0
[  190.324837][T15188]  kernel_misc_reclaimable:0
[  190.324837][T15188]  free:1834714 free_pcp:24434 free_cma:0
[  190.369859][T15188] Node 0 active_anon:88912kB inactive_anon:0kB active_file:69416kB inactive_file:10236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124140kB dirty:296kB writeback:32kB shmem:76388kB writeback_tmp:0kB kernel_stack:4560kB pagetables:3964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  190.398804][T15188] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  190.427654][T15188] lowmem_reserve[]: 0 2883 7862 7862
[  190.433033][T15188] Node 0 DMA32 free:2949348kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952980kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB
[  190.463313][T15188] lowmem_reserve[]: 0 0 4978 4978
[  190.468347][T15188] Node 0 Normal free:4374148kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:88912kB inactive_anon:0kB active_file:69416kB inactive_file:10236kB unevictable:0kB writepending:328kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:94104kB local_pcp:54440kB free_cma:0kB
[  190.500510][T15188] lowmem_reserve[]: 0 0 0 0
[  190.505103][T15188] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  190.517838][T15188] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949348kB
[  190.533814][T15188] Node 0 Normal: 3*4kB (UM) 5*8kB (UE) 5*16kB (UE) 4*32kB (UM) 2*64kB (U) 2*128kB (UM) 2*256kB (UM) 71*512kB (UME) 55*1024kB (UME) 28*2048kB (UME) 1031*4096kB (UM) = 4374148kB
[  190.551319][T15188] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  190.560595][T15188] 38981 total pagecache pages
[  190.565264][T15188] 1 pages in swap cache
[  190.569429][T15188] Free swap  = 124992kB
[  190.573569][T15188] Total swap = 124996kB
[  190.577694][T15188] 2097051 pages RAM
[  190.581489][T15188] 0 pages HighMem/MovableOnly
[  190.586222][T15188] 80406 pages reserved
[  190.682137][T15195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.694899][T15195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.830150][T15212] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3349'.
[  191.384293][   T29] kauditd_printk_skb: 379 callbacks suppressed
[  191.384309][   T29] audit: type=1400 audit(1754537128.692:21013): avc:  denied  { read } for  pid=15234 comm="syz.5.3356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  191.460367][   T29] audit: type=1400 audit(1754537128.776:21014): avc:  denied  { bind } for  pid=15243 comm="syz.0.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  191.568968][   T29] audit: type=1326 audit(1754537128.891:21015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15246 comm="syz.6.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9937deb69 code=0x7ffc0000
[  191.605029][   T29] audit: type=1326 audit(1754537128.891:21016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15246 comm="syz.6.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fc9937deb69 code=0x7ffc0000
[  191.628877][   T29] audit: type=1326 audit(1754537128.891:21017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15246 comm="syz.6.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9937deb69 code=0x7ffc0000
[  191.652481][   T29] audit: type=1326 audit(1754537128.891:21018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15246 comm="syz.6.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9937deb69 code=0x7ffc0000
[  191.676111][   T29] audit: type=1326 audit(1754537128.891:21019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15246 comm="syz.6.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9937deb69 code=0x7ffc0000
[  191.699830][   T29] audit: type=1326 audit(1754537128.891:21020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15246 comm="syz.6.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9937deb69 code=0x7ffc0000
[  191.723517][   T29] audit: type=1326 audit(1754537128.891:21021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15246 comm="syz.6.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9937deb69 code=0x7ffc0000
[  191.748213][   T29] audit: type=1326 audit(1754537128.891:21022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15246 comm="syz.6.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9937deb69 code=0x7ffc0000
[  191.991078][T15288] FAULT_INJECTION: forcing a failure.
[  191.991078][T15288] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  192.004423][T15288] CPU: 0 UID: 0 PID: 15288 Comm: syz.0.3376 Tainted: G        W           6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[  192.004461][T15288] Tainted: [W]=WARN
[  192.004467][T15288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  192.004479][T15288] Call Trace:
[  192.004486][T15288]  <TASK>
[  192.004494][T15288]  __dump_stack+0x1d/0x30
[  192.004517][T15288]  dump_stack_lvl+0xe8/0x140
[  192.004549][T15288]  dump_stack+0x15/0x1b
[  192.004565][T15288]  should_fail_ex+0x265/0x280
[  192.004744][T15288]  should_fail_alloc_page+0xf2/0x100
[  192.004772][T15288]  __alloc_frozen_pages_noprof+0xff/0x360
[  192.004829][T15288]  alloc_pages_mpol+0xb3/0x250
[  192.004866][T15288]  alloc_pages_noprof+0x90/0x130
[  192.004883][T15288]  pte_alloc_one+0x2d/0x120
[  192.004970][T15288]  __pte_alloc+0x32/0x2b0
[  192.005017][T15288]  handle_mm_fault+0x1c55/0x2c20
[  192.005078][T15288]  ? __rcu_read_lock+0x37/0x50
[  192.005108][T15288]  __get_user_pages+0x1036/0x1fb0
[  192.005164][T15288]  __gup_longterm_locked+0x9c9/0x1010
[  192.005244][T15288]  ? exc_page_fault+0x62/0xa0
[  192.005274][T15288]  ? do_user_addr_fault+0xbb8/0x1090
[  192.005335][T15288]  ? should_fail_ex+0xdb/0x280
[  192.005365][T15288]  pin_user_pages_remote+0x7e/0xb0
[  192.005394][T15288]  process_vm_rw+0x484/0x960
[  192.005519][T15288]  __x64_sys_process_vm_readv+0x78/0x90
[  192.005567][T15288]  x64_sys_call+0x1874/0x2ff0
[  192.005587][T15288]  do_syscall_64+0xd2/0x200
[  192.005618][T15288]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  192.005686][T15288]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  192.005745][T15288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.005767][T15288] RIP: 0033:0x7f515485eb69
[  192.005782][T15288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.005854][T15288] RSP: 002b:00007f5152ec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136
[  192.005873][T15288] RAX: ffffffffffffffda RBX: 00007f5154a85fa0 RCX: 00007f515485eb69
[  192.005886][T15288] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 000000000000014a
[  192.005899][T15288] RBP: 00007f5152ec7090 R08: 0000000000000286 R09: 0000000000000000
[  192.005912][T15288] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001
[  192.005924][T15288] R13: 0000000000000000 R14: 00007f5154a85fa0 R15: 00007ffe50d6db28
[  192.005942][T15288]  </TASK>
[  192.245320][   T23] usb usb2-port1: attempt power cycle
[  192.325416][T15296] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.3379'.
[  192.334879][T15296] netlink: zone id is out of range
[  192.339982][T15296] netlink: zone id is out of range
[  192.345421][T15296] netlink: zone id is out of range
[  192.440859][T15309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3383'.
[  192.488502][T15323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3385'.
[  192.584624][T15341] wg1 speed is unknown, defaulting to 1000
[  192.626914][T15352] netlink: 'syz.5.3398': attribute type 10 has an invalid length.
[  192.637499][T15352] bond0: (slave dummy0): Releasing backup interface
[  192.644063][T15354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3397'.
[  192.655437][T15352] team0: Port device dummy0 added
[  192.666882][T15352] netlink: 'syz.5.3398': attribute type 10 has an invalid length.
[  192.686505][T15352] team0: Port device dummy0 removed
[  192.697398][T15352] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  192.698848][T15360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3399'.
[  192.854970][T15386] netlink: 'syz.1.3403': attribute type 1 has an invalid length.
[  192.883292][T15386] atomic_op ffff88812f21ad28 conn xmit_atomic 0000000000000000
[  192.935394][T15412] netlink: 'syz.5.3411': attribute type 10 has an invalid length.
[  192.947036][T15412] bond0: (slave dummy0): Releasing backup interface
[  192.956944][T15412] team0: Port device dummy0 added
[  192.970264][T15412] netlink: 'syz.5.3411': attribute type 10 has an invalid length.
[  192.980589][T15412] team0: Port device dummy0 removed
[  192.989469][T15412] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  193.378764][T15482] netlink: zone id is out of range
[  193.383990][T15482] netlink: zone id is out of range
[  193.389235][T15482] netlink: zone id is out of range
[  193.863427][T15520] loop6: detected capacity change from 0 to 764
[  194.032970][   T23] usb usb2-port1: unable to enumerate USB device
[  194.092264][T15532] bond_slave_1: entered promiscuous mode
[  194.122119][T15532] bond0: (slave bond_slave_1): Releasing backup interface
[  194.131743][T15532] bond_slave_1 (unregistering): left promiscuous mode
[  194.273606][T15570] netlink: 'syz.1.3464': attribute type 10 has an invalid length.
[  194.320488][T15570] team0: Port device dummy0 added
[  194.328745][T15581] netlink: 'syz.1.3464': attribute type 10 has an invalid length.
[  194.376096][T15581] team0: Port device dummy0 removed
[  194.394205][T15581] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  194.515622][T15618] __nla_validate_parse: 6 callbacks suppressed
[  194.515639][T15618] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3487'.
[  194.601392][T15618] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.608595][T15618] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.699493][T15618] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.733501][T15618] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.778504][ T5602] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.797799][ T5602] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.812334][T15628] wg1 speed is unknown, defaulting to 1000
[  194.816135][ T5602] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.856225][ T5602] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.900695][T15655] wg1 speed is unknown, defaulting to 1000
[  195.733786][T15810] netlink: 'syz.1.3545': attribute type 10 has an invalid length.
[  195.752487][T15810] bond0: (slave dummy0): Releasing backup interface
[  195.774597][T15810] team0: Port device dummy0 added
[  195.792461][T15810] netlink: 'syz.1.3545': attribute type 10 has an invalid length.
[  195.821616][T15810] team0: Port device dummy0 removed
[  195.828380][T15810] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  196.039050][T15864] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15864 comm=syz.2.3561
[  196.051713][T15864] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15864 comm=syz.2.3561
[  196.097546][T15872] loop6: detected capacity change from 0 to 1024
[  196.160249][   T29] kauditd_printk_skb: 611 callbacks suppressed
[  196.160261][   T29] audit: type=1326 audit(1754537133.710:21634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15867 comm="syz.6.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9937deb69 code=0x7ffc0000
[  196.190149][   T29] audit: type=1326 audit(1754537133.710:21635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15867 comm="syz.6.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9937deb69 code=0x7ffc0000
[  196.243090][   T29] audit: type=1400 audit(1754537133.742:21636): avc:  denied  { mount } for  pid=15844 comm="syz.5.3555" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  196.265522][   T29] audit: type=1326 audit(1754537133.763:21637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15867 comm="syz.6.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9937deb69 code=0x7ffc0000
[  196.289171][   T29] audit: type=1326 audit(1754537133.763:21638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15867 comm="syz.6.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9937deb69 code=0x7ffc0000
[  196.312970][   T29] audit: type=1326 audit(1754537133.763:21639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15867 comm="syz.6.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9937deb69 code=0x7ffc0000
[  196.313002][   T29] audit: type=1326 audit(1754537133.773:21640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15867 comm="syz.6.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9937deb69 code=0x7ffc0000
[  196.313040][   T29] audit: type=1326 audit(1754537133.773:21641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15867 comm="syz.6.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9937deb69 code=0x7ffc0000
[  196.313093][   T29] audit: type=1326 audit(1754537133.773:21642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15867 comm="syz.6.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9937deb69 code=0x7ffc0000
[  196.313193][   T29] audit: type=1326 audit(1754537133.784:21643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15867 comm="syz.6.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9937deb69 code=0x7ffc0000
[  196.342267][T15890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3569'.
[  196.623725][T15922] wg1 speed is unknown, defaulting to 1000
[  196.986736][T15997] netlink: 'syz.5.3606': attribute type 10 has an invalid length.
[  196.998419][T15997] bond0: (slave dummy0): Releasing backup interface
[  197.007734][T15997] team0: Port device dummy0 added
[  197.018335][T15997] netlink: 'syz.5.3606': attribute type 10 has an invalid length.
[  197.030844][T15997] team0: Port device dummy0 removed
[  197.038998][T15997] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  197.083951][T16010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3608'.
[  197.123253][T16018] syz_tun: entered allmulticast mode
[  197.157094][T16021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3611'.
[  197.260735][T16016] syz_tun: left allmulticast mode
[  197.272413][T16038] netlink: 'syz.6.3622': attribute type 10 has an invalid length.
[  197.284177][T16038] team0: Port device dummy0 added
[  197.292981][T16038] netlink: 'syz.6.3622': attribute type 10 has an invalid length.
[  197.313159][T16038] team0: Port device dummy0 removed
[  197.322019][T16038] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  197.374959][T16051] loop6: detected capacity change from 0 to 512
[  197.384808][T16051] EXT4-fs: Ignoring removed nobh option
[  197.403936][T16051] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002]
[  197.412187][T16051] System zones: 0-2, 18-18, 34-34
[  197.418429][T16051] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.437802][T16051] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.466160][T16069] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3633'.
[  197.478797][T16051] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  197.513400][T13839] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.626765][T16091] infiniband syz1: set down
[  197.631407][T16091] infiniband syz1: added syz_tun
[  197.646292][T16101] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3638'.
[  197.654988][T16091] RDS/IB: syz1: added
[  197.669591][T16091] smc: adding ib device syz1 with port count 1
[  197.676033][T16091] smc:    ib device syz1 port 1 has pnetid SYZ0 (user defined)
[  197.864647][T16144] netlink: 'syz.1.3645': attribute type 178 has an invalid length.
[  198.407757][T16258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3658'.
[  198.426605][T16255] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3659'.
[  198.522324][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3669'.
[  198.641129][T16309] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3674'.
[  198.917010][T16355] loop6: detected capacity change from 0 to 512
[  198.945357][T16355] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.113244][T16376] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=16376 comm=syz.6.3696
[  199.184546][T16384] wg1 speed is unknown, defaulting to 1000
[  199.589162][T16420] __nla_validate_parse: 2 callbacks suppressed
[  199.589178][T16420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3714'.
[  199.719746][T13839] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.759389][T16441] netlink: 'syz.5.3721': attribute type 1 has an invalid length.
[  199.767219][T16441] netlink: 'syz.5.3721': attribute type 2 has an invalid length.
[  199.791608][T16444] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.3723'.
[  199.792182][T16446] netlink: 'syz.1.3722': attribute type 10 has an invalid length.
[  199.817907][T16444] netlink: zone id is out of range
[  199.823092][T16444] netlink: zone id is out of range
[  199.828263][T16444] netlink: zone id is out of range
[  199.837295][T16446] bond0: (slave dummy0): Releasing backup interface
[  199.872081][T16446] team0: Port device dummy0 added
[  199.879732][T16465] netlink: 'syz.1.3722': attribute type 10 has an invalid length.
[  199.898752][T16465] team0: Port device dummy0 removed
[  199.918350][T16465] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  199.946665][T16475] rdma_rxe: rxe_newlink: failed to add syz_tun
[  199.986911][T16485] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16485 comm=syz.2.3733
[  199.999612][T16485] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16485 comm=syz.2.3733
[  200.080236][T16495] loop6: detected capacity change from 0 to 512
[  200.088240][T16495] EXT4-fs: Ignoring removed nobh option
[  200.094719][T16506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3741'.
[  200.117333][T16495] EXT4-fs error (device loop6): ext4_do_update_inode:5563: inode #3: comm syz.6.3737: corrupted inode contents
[  200.133638][T16497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.142115][T16497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.153052][T16495] EXT4-fs error (device loop6): ext4_dirty_inode:6454: inode #3: comm syz.6.3737: mark_inode_dirty error
[  200.166820][T16495] EXT4-fs error (device loop6): ext4_do_update_inode:5563: inode #3: comm syz.6.3737: corrupted inode contents
[  200.179205][T16495] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.3737: mark_inode_dirty error
[  200.191355][T16495] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3737: Failed to acquire dquot type 0
[  200.203344][T16495] EXT4-fs error (device loop6): ext4_do_update_inode:5563: inode #16: comm syz.6.3737: corrupted inode contents
[  200.205404][T16521] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3742'.
[  200.224857][T16495] EXT4-fs error (device loop6): ext4_dirty_inode:6454: inode #16: comm syz.6.3737: mark_inode_dirty error
[  200.240598][T16495] EXT4-fs error (device loop6): ext4_do_update_inode:5563: inode #16: comm syz.6.3737: corrupted inode contents
[  200.252688][T16495] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.3737: mark_inode_dirty error
[  200.264077][T16495] EXT4-fs error (device loop6): ext4_do_update_inode:5563: inode #16: comm syz.6.3737: corrupted inode contents
[  200.276322][T16495] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem
[  200.285089][T16495] EXT4-fs error (device loop6): ext4_do_update_inode:5563: inode #16: comm syz.6.3737: corrupted inode contents
[  200.295856][T16520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.297295][T16495] EXT4-fs error (device loop6): ext4_truncate:4592: inode #16: comm syz.6.3737: mark_inode_dirty error
[  200.307024][T16520] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.316548][T16495] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem
[  200.334384][T16495] EXT4-fs (loop6): 1 truncate cleaned up
[  200.340353][T16495] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.353196][T16495] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.381912][T16495] wg1 speed is unknown, defaulting to 1000
[  200.441810][T16531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3746'.
[  200.514629][T16495] syz.6.3737 (16495) used greatest stack depth: 9752 bytes left
[  200.534322][T13839] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.535717][T16564] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16564 comm=syz.5.3750
[  200.555872][T16564] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16564 comm=syz.5.3750
[  200.597487][T16568] wg1 speed is unknown, defaulting to 1000
[  200.899414][T16624] netlink: 'syz.6.3766': attribute type 27 has an invalid length.
[  200.908461][T16623] netlink: 'syz.6.3766': attribute type 27 has an invalid length.
[  200.945741][   T29] kauditd_printk_skb: 758 callbacks suppressed
[  200.945758][   T29] audit: type=1400 audit(1754537138.740:22400): avc:  denied  { mount } for  pid=16629 comm="syz.2.3768" name="/" dev="ramfs" ino=43045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  200.977447][T16623] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.983714][   T29] audit: type=1326 audit(1754537138.740:22401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16631 comm="syz.1.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8913deb69 code=0x7ffc0000
[  200.984612][T16623] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.008054][   T29] audit: type=1326 audit(1754537138.740:22402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16631 comm="syz.1.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8913deb69 code=0x7ffc0000
[  201.038703][   T29] audit: type=1326 audit(1754537138.740:22403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16631 comm="syz.1.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fc8913deb69 code=0x7ffc0000
[  201.062367][   T29] audit: type=1326 audit(1754537138.740:22404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16631 comm="syz.1.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8913deb69 code=0x7ffc0000
[  201.086030][   T29] audit: type=1326 audit(1754537138.740:22405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16631 comm="syz.1.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8913deb69 code=0x7ffc0000
[  201.110202][   T29] audit: type=1400 audit(1754537138.834:22406): avc:  denied  { read write } for  pid=16634 comm="syz.1.3770" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  201.135060][   T29] audit: type=1400 audit(1754537138.834:22407): avc:  denied  { open } for  pid=16634 comm="syz.1.3770" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  201.159694][   T29] audit: type=1400 audit(1754537138.834:22408): avc:  denied  { execmem } for  pid=16634 comm="syz.1.3770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  201.188715][T16639] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3772'.
[  201.210691][   T29] audit: type=1400 audit(1754537138.981:22409): avc:  denied  { read } for  pid=16638 comm="syz.2.3772" dev="nsfs" ino=4026533542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  201.246710][T16623] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.256699][T16623] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.295511][T16635] tipc: Started in network mode
[  201.300489][T16635] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  201.309407][T16635] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  201.326580][   T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.339466][   T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.352839][T16652] wg1 speed is unknown, defaulting to 1000
[  201.406158][T16656] loop6: detected capacity change from 0 to 512
[  201.419890][T16656] ext4: Unknown parameter 'mask'
[  201.437904][   T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.469739][   T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.507489][T16656] FAULT_INJECTION: forcing a failure.
[  201.507489][T16656] name failslab, interval 1, probability 0, space 0, times 0
[  201.523622][T16656] CPU: 0 UID: 0 PID: 16656 Comm: syz.6.3778 Tainted: G        W           6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[  201.523716][T16656] Tainted: [W]=WARN
[  201.523723][T16656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  201.523737][T16656] Call Trace:
[  201.523744][T16656]  <TASK>
[  201.523752][T16656]  __dump_stack+0x1d/0x30
[  201.523837][T16656]  dump_stack_lvl+0xe8/0x140
[  201.523891][T16656]  dump_stack+0x15/0x1b
[  201.523910][T16656]  should_fail_ex+0x265/0x280
[  201.523995][T16656]  should_failslab+0x8c/0xb0
[  201.524020][T16656]  __kmalloc_noprof+0xa5/0x3e0
[  201.524051][T16656]  ? unregister_netdevice_many_notify+0x4c9/0x15d0
[  201.524137][T16656]  ? unlist_netdevice+0x2cc/0x320
[  201.524220][T16656]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  201.524244][T16656]  unregister_netdevice_many_notify+0x4c9/0x15d0
[  201.524273][T16656]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  201.524337][T16656]  rtnl_dellink+0x3cb/0x550
[  201.524384][T16656]  ? selinux_capable+0x31/0x40
[  201.524478][T16656]  ? security_capable+0x83/0x90
[  201.524542][T16656]  ? ns_capable+0x7d/0xb0
[  201.524564][T16656]  ? __pfx_rtnl_dellink+0x10/0x10
[  201.524597][T16656]  rtnetlink_rcv_msg+0x5fe/0x6d0
[  201.524632][T16656]  ? netlink_rcv_skb+0xc4/0x220
[  201.524712][T16656]  netlink_rcv_skb+0x120/0x220
[  201.524736][T16656]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  201.524806][T16656]  rtnetlink_rcv+0x1c/0x30
[  201.524844][T16656]  netlink_unicast+0x5c0/0x690
[  201.524865][T16656]  netlink_sendmsg+0x58b/0x6b0
[  201.524895][T16656]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.524929][T16656]  __sock_sendmsg+0x145/0x180
[  201.525018][T16656]  ____sys_sendmsg+0x31e/0x4e0
[  201.525113][T16656]  ___sys_sendmsg+0x17b/0x1d0
[  201.525152][T16656]  __x64_sys_sendmsg+0xd4/0x160
[  201.525179][T16656]  x64_sys_call+0x191e/0x2ff0
[  201.525203][T16656]  do_syscall_64+0xd2/0x200
[  201.525276][T16656]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  201.525303][T16656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.525327][T16656] RIP: 0033:0x7fc9937deb69
[  201.525344][T16656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.525391][T16656] RSP: 002b:00007fc991e3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  201.525446][T16656] RAX: ffffffffffffffda RBX: 00007fc993a05fa0 RCX: 00007fc9937deb69
[  201.525461][T16656] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000009
[  201.525475][T16656] RBP: 00007fc991e3f090 R08: 0000000000000000 R09: 0000000000000000
[  201.525489][T16656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  201.525502][T16656] R13: 0000000000000000 R14: 00007fc993a05fa0 R15: 00007ffc72c4bf08
[  201.525518][T16656]  </TASK>
[  201.850428][T16656] team0 (unregistering): Port device team_slave_0 removed
[  201.883453][T16703] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3787'.
[  201.894325][T16701] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3784'.
[  201.896229][T16656] team0 (unregistering): Port device team_slave_1 removed
[  201.966079][T16733] FAULT_INJECTION: forcing a failure.
[  201.966079][T16733] name failslab, interval 1, probability 0, space 0, times 0
[  201.978762][T16733] CPU: 0 UID: 0 PID: 16733 Comm: syz.0.3791 Tainted: G        W           6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[  201.978804][T16733] Tainted: [W]=WARN
[  201.978816][T16733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  201.978829][T16733] Call Trace:
[  201.978835][T16733]  <TASK>
[  201.978843][T16733]  __dump_stack+0x1d/0x30
[  201.978866][T16733]  dump_stack_lvl+0xe8/0x140
[  201.978887][T16733]  dump_stack+0x15/0x1b
[  201.978905][T16733]  should_fail_ex+0x265/0x280
[  201.978994][T16733]  ? __pfx_cond_bools_destroy+0x10/0x10
[  201.979050][T16733]  should_failslab+0x8c/0xb0
[  201.979076][T16733]  __kmalloc_noprof+0xa5/0x3e0
[  201.979114][T16733]  ? hashtab_duplicate+0x55/0x360
[  201.979145][T16733]  ? __pfx_cond_bools_destroy+0x10/0x10
[  201.979167][T16733]  hashtab_duplicate+0x55/0x360
[  201.979195][T16733]  ? __kmalloc_noprof+0x1dd/0x3e0
[  201.979299][T16733]  ? cond_policydb_dup+0xa3/0x4e0
[  201.979323][T16733]  ? __pfx_cond_bools_copy+0x10/0x10
[  201.979349][T16733]  cond_policydb_dup+0xd2/0x4e0
[  201.979376][T16733]  security_set_bools+0xa0/0x340
[  201.979487][T16733]  sel_commit_bools_write+0x1ea/0x270
[  201.979514][T16733]  vfs_writev+0x406/0x8b0
[  201.979544][T16733]  ? __pfx_sel_commit_bools_write+0x10/0x10
[  201.979621][T16733]  ? mutex_lock+0xd/0x30
[  201.979648][T16733]  do_writev+0xe7/0x210
[  201.979678][T16733]  __x64_sys_writev+0x45/0x50
[  201.979706][T16733]  x64_sys_call+0x1e9a/0x2ff0
[  201.979738][T16733]  do_syscall_64+0xd2/0x200
[  201.979771][T16733]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  201.979798][T16733]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  201.979846][T16733]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.979901][T16733] RIP: 0033:0x7f515485eb69
[  201.979918][T16733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.979938][T16733] RSP: 002b:00007f5152ec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  201.979958][T16733] RAX: ffffffffffffffda RBX: 00007f5154a85fa0 RCX: 00007f515485eb69
[  201.979973][T16733] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000006
[  201.979987][T16733] RBP: 00007f5152ec7090 R08: 0000000000000000 R09: 0000000000000000
[  201.980054][T16733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  201.980110][T16733] R13: 0000000000000000 R14: 00007f5154a85fa0 R15: 00007ffe50d6db28
[  201.980130][T16733]  </TASK>
[  202.313023][T16764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3799'.
[  202.336085][T16768] netlink: 'syz.2.3800': attribute type 10 has an invalid length.
[  202.356627][T16768] bond0: (slave dummy0): Releasing backup interface
[  202.386359][T16779] netlink: 'syz.2.3800': attribute type 10 has an invalid length.
[  202.409751][T16768] team0: Port device dummy0 added
[  202.427033][T16779] team0: Port device dummy0 removed
[  202.453945][T16779] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  202.490083][T16789] netlink: 'syz.1.3804': attribute type 10 has an invalid length.
[  202.518633][T16789] bond0: (slave dummy0): Releasing backup interface
[  202.529399][T16789] team0: Port device dummy0 added
[  202.539494][T16792] netlink: 'syz.1.3804': attribute type 10 has an invalid length.
[  202.569935][T16792] team0: Port device dummy0 removed
[  202.598401][T16792] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  203.200741][T16914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3820'.
[  203.301883][T16938] random: crng reseeded on system resumption
[  203.319008][T16938] Restarting kernel threads ...
[  203.338337][T16938] Done restarting kernel threads.
[  203.465183][T16953] loop6: detected capacity change from 0 to 1024
[  203.479021][T16953] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.571886][T16961] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  203.664529][T13839] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.721879][T16991] loop6: detected capacity change from 0 to 512
[  203.756278][T16991] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.772498][T16991] ext4 filesystem being mounted at /112/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.797120][T17004] bond0: (slave dummy0): Releasing backup interface
[  203.806700][T17004] team0: Port device dummy0 added
[  203.816384][T17004] team0: Port device dummy0 removed
[  203.831103][T17004] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  203.848685][T13839] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.165528][T17079] pimreg: entered allmulticast mode
[  204.174310][T17063] bond0: (slave netdevsim1): Releasing backup interface
[  204.442506][T17123] FAULT_INJECTION: forcing a failure.
[  204.442506][T17123] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  204.455684][T17123] CPU: 1 UID: 0 PID: 17123 Comm: syz.1.3890 Tainted: G        W           6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[  204.455720][T17123] Tainted: [W]=WARN
[  204.455727][T17123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  204.455741][T17123] Call Trace:
[  204.455748][T17123]  <TASK>
[  204.455756][T17123]  __dump_stack+0x1d/0x30
[  204.455802][T17123]  dump_stack_lvl+0xe8/0x140
[  204.455823][T17123]  dump_stack+0x15/0x1b
[  204.455842][T17123]  should_fail_ex+0x265/0x280
[  204.455874][T17123]  should_fail+0xb/0x20
[  204.455972][T17123]  should_fail_usercopy+0x1a/0x20
[  204.456049][T17123]  _copy_to_user+0x20/0xa0
[  204.456069][T17123]  simple_read_from_buffer+0xb5/0x130
[  204.456101][T17123]  proc_fail_nth_read+0x10e/0x150
[  204.456126][T17123]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  204.456207][T17123]  vfs_read+0x19d/0x6f0
[  204.456229][T17123]  ? __rcu_read_unlock+0x4f/0x70
[  204.456311][T17123]  ? __fget_files+0x184/0x1c0
[  204.456336][T17123]  ksys_read+0xda/0x1a0
[  204.456394][T17123]  __x64_sys_read+0x40/0x50
[  204.456414][T17123]  x64_sys_call+0x27bc/0x2ff0
[  204.456435][T17123]  do_syscall_64+0xd2/0x200
[  204.456464][T17123]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  204.456486][T17123]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  204.456572][T17123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.456593][T17123] RIP: 0033:0x7fc8913dd57c
[  204.456608][T17123] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  204.456624][T17123] RSP: 002b:00007fc88fa3f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  204.456643][T17123] RAX: ffffffffffffffda RBX: 00007fc891605fa0 RCX: 00007fc8913dd57c
[  204.456740][T17123] RDX: 000000000000000f RSI: 00007fc88fa3f0a0 RDI: 0000000000000004
[  204.456752][T17123] RBP: 00007fc88fa3f090 R08: 0000000000000000 R09: 0000000000000000
[  204.456763][T17123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  204.456830][T17123] R13: 0000000000000000 R14: 00007fc891605fa0 R15: 00007ffc389c8068
[  204.456850][T17123]  </TASK>
[  204.504514][T17125] wg1 speed is unknown, defaulting to 1000
[  204.819092][T17162] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17162 comm=syz.5.3895
[  204.831812][T17162] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17162 comm=syz.5.3895
[  204.850949][T17164] FAULT_INJECTION: forcing a failure.
[  204.850949][T17164] name failslab, interval 1, probability 0, space 0, times 0
[  204.863668][T17164] CPU: 1 UID: 0 PID: 17164 Comm: syz.1.3896 Tainted: G        W           6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[  204.863732][T17164] Tainted: [W]=WARN
[  204.863740][T17164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  204.863816][T17164] Call Trace:
[  204.863823][T17164]  <TASK>
[  204.863830][T17164]  __dump_stack+0x1d/0x30
[  204.863851][T17164]  dump_stack_lvl+0xe8/0x140
[  204.863871][T17164]  dump_stack+0x15/0x1b
[  204.863889][T17164]  should_fail_ex+0x265/0x280
[  204.863974][T17164]  should_failslab+0x8c/0xb0
[  204.864002][T17164]  kmem_cache_alloc_noprof+0x50/0x310
[  204.864063][T17164]  ? getname_flags+0x80/0x3b0
[  204.864091][T17164]  ? fput+0x8f/0xc0
[  204.864169][T17164]  getname_flags+0x80/0x3b0
[  204.864196][T17164]  __x64_sys_symlinkat+0x40/0x70
[  204.864220][T17164]  x64_sys_call+0x293d/0x2ff0
[  204.864267][T17164]  do_syscall_64+0xd2/0x200
[  204.864298][T17164]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  204.864320][T17164]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  204.864473][T17164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.864492][T17164] RIP: 0033:0x7fc8913deb69
[  204.864505][T17164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.864522][T17164] RSP: 002b:00007fc88fa3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[  204.864539][T17164] RAX: ffffffffffffffda RBX: 00007fc891605fa0 RCX: 00007fc8913deb69
[  204.864591][T17164] RDX: 0000200000000140 RSI: 0000000000000007 RDI: 0000200000000000
[  204.864602][T17164] RBP: 00007fc88fa3f090 R08: 0000000000000000 R09: 0000000000000000
[  204.864618][T17164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  204.864629][T17164] R13: 0000000000000000 R14: 00007fc891605fa0 R15: 00007ffc389c8068
[  204.864645][T17164]  </TASK>
[  205.152762][T17185] syz1: rxe_newlink: already configured on syz_tun
[  205.163741][T17185] __nla_validate_parse: 4 callbacks suppressed
[  205.163755][T17185] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3906'.
[  205.249449][T17199] validate_nla: 3 callbacks suppressed
[  205.249464][T17199] netlink: 'syz.2.3910': attribute type 1 has an invalid length.
[  205.272455][T17199] 8021q: adding VLAN 0 to HW filter on device bond1
[  205.317272][T17252] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17252 comm=syz.1.3916
[  205.329954][T17252] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17252 comm=syz.1.3916
[  205.436026][T17268] FAULT_INJECTION: forcing a failure.
[  205.436026][T17268] name failslab, interval 1, probability 0, space 0, times 0
[  205.448767][T17268] CPU: 1 UID: 0 PID: 17268 Comm: syz.2.3923 Tainted: G        W           6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[  205.448801][T17268] Tainted: [W]=WARN
[  205.448808][T17268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  205.448821][T17268] Call Trace:
[  205.448828][T17268]  <TASK>
[  205.448835][T17268]  __dump_stack+0x1d/0x30
[  205.448856][T17268]  dump_stack_lvl+0xe8/0x140
[  205.448955][T17268]  dump_stack+0x15/0x1b
[  205.448973][T17268]  should_fail_ex+0x265/0x280
[  205.449006][T17268]  ? audit_log_d_path+0x8d/0x150
[  205.449084][T17268]  should_failslab+0x8c/0xb0
[  205.449108][T17268]  __kmalloc_cache_noprof+0x4c/0x320
[  205.449215][T17268]  audit_log_d_path+0x8d/0x150
[  205.449288][T17268]  audit_log_d_path_exe+0x42/0x70
[  205.449318][T17268]  audit_log_task+0x1e9/0x250
[  205.449444][T17268]  audit_seccomp+0x61/0x100
[  205.449468][T17268]  ? __seccomp_filter+0x68c/0x10d0
[  205.449494][T17268]  __seccomp_filter+0x69d/0x10d0
[  205.449520][T17268]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  205.449553][T17268]  ? vfs_write+0x75e/0x8e0
[  205.449571][T17268]  ? __rcu_read_unlock+0x4f/0x70
[  205.449590][T17268]  ? __fget_files+0x184/0x1c0
[  205.449685][T17268]  __secure_computing+0x82/0x150
[  205.449835][T17268]  syscall_trace_enter+0xcf/0x1e0
[  205.449858][T17268]  do_syscall_64+0xac/0x200
[  205.449890][T17268]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  205.449992][T17268]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  205.450061][T17268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.450124][T17268] RIP: 0033:0x7f654f9ceb69
[  205.450138][T17268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.450155][T17268] RSP: 002b:00007f654e037038 EFLAGS: 00000246 ORIG_RAX: 000000000000001f
[  205.450178][T17268] RAX: ffffffffffffffda RBX: 00007f654fbf5fa0 RCX: 00007f654f9ceb69
[  205.450192][T17268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  205.450206][T17268] RBP: 00007f654e037090 R08: 0000000000000000 R09: 0000000000000000
[  205.450294][T17268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.450306][T17268] R13: 0000000000000000 R14: 00007f654fbf5fa0 R15: 00007ffe1a9c6778
[  205.450325][T17268]  </TASK>
[  205.730885][   T29] kauditd_printk_skb: 392 callbacks suppressed
[  205.730900][   T29] audit: type=1326 audit(1754537143.758:22800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.2.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654f9ceb69 code=0x7ffc0000
[  205.764657][   T29] audit: type=1326 audit(1754537143.758:22801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.2.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f654f9ceb69 code=0x7ffc0000
[  205.788237][   T29] audit: type=1326 audit(1754537143.758:22802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.2.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654f9ceb69 code=0x7ffc0000
[  205.812038][   T29] audit: type=1326 audit(1754537143.758:22803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.2.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f654f9ceb69 code=0x7ffc0000
[  205.836477][   T29] audit: type=1326 audit(1754537143.758:22804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.2.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654f9ceb69 code=0x7ffc0000
[  205.860382][   T29] audit: type=1326 audit(1754537143.769:22805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.2.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654f9ceb69 code=0x7ffc0000
[  205.884679][   T29] audit: type=1326 audit(1754537143.853:22806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17285 comm="syz.1.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8913deb69 code=0x7ffc0000
[  205.908357][   T29] audit: type=1326 audit(1754537143.853:22807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17285 comm="syz.1.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8913deb69 code=0x7ffc0000
[  205.931943][   T29] audit: type=1326 audit(1754537143.853:22808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17285 comm="syz.1.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8913deb69 code=0x7ffc0000
[  205.955611][   T29] audit: type=1326 audit(1754537143.853:22809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17285 comm="syz.1.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fc8913deb69 code=0x7ffc0000
[  206.056780][T17293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.065480][T17293] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.077718][T17295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.086193][T17295] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.168069][T17319] netlink: 192436 bytes leftover after parsing attributes in process `syz.5.3942'.
[  206.177800][T17319] netlink: zone id is out of range
[  206.182956][T17319] netlink: zone id is out of range
[  206.188141][T17319] netlink: zone id is out of range
[  206.286128][T15040] usb usb2-port1: attempt power cycle
[  206.713923][T17339] rdma_rxe: rxe_newlink: failed to add syz_tun
[  206.722281][T17339] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3949'.
[  207.102217][T17382] netlink: 192436 bytes leftover after parsing attributes in process `syz.5.3965'.
[  207.111751][T17382] netlink: zone id is out of range
[  207.116903][T17382] netlink: zone id is out of range
[  207.122043][T17382] netlink: zone id is out of range
[  207.378938][T17399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3973'.
[  207.532726][T17428] FAULT_INJECTION: forcing a failure.
[  207.532726][T17428] name failslab, interval 1, probability 0, space 0, times 0
[  207.545398][T17428] CPU: 1 UID: 0 PID: 17428 Comm: syz.2.3982 Tainted: G        W           6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[  207.545462][T17428] Tainted: [W]=WARN
[  207.545470][T17428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  207.545481][T17428] Call Trace:
[  207.545486][T17428]  <TASK>
[  207.545492][T17428]  __dump_stack+0x1d/0x30
[  207.545514][T17428]  dump_stack_lvl+0xe8/0x140
[  207.545536][T17428]  dump_stack+0x15/0x1b
[  207.545587][T17428]  should_fail_ex+0x265/0x280
[  207.545616][T17428]  should_failslab+0x8c/0xb0
[  207.545641][T17428]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  207.545684][T17428]  ? simple_xattr_set+0xa3/0x2b0
[  207.545742][T17428]  kstrdup+0x3e/0xd0
[  207.545765][T17428]  simple_xattr_set+0xa3/0x2b0
[  207.545830][T17428]  ? strlen+0x19/0x40
[  207.545939][T17428]  shmem_xattr_handler_set+0x12b/0x220
[  207.545970][T17428]  ? __pfx_shmem_xattr_handler_set+0x10/0x10
[  207.545993][T17428]  __vfs_setxattr+0x2e6/0x310
[  207.546017][T17428]  __vfs_setxattr_noperm+0xe8/0x410
[  207.546041][T17428]  __vfs_setxattr_locked+0x1af/0x1d0
[  207.546139][T17428]  vfs_setxattr+0x132/0x270
[  207.546171][T17428]  filename_setxattr+0x1ad/0x400
[  207.546197][T17428]  path_setxattrat+0x2c9/0x310
[  207.546289][T17428]  __x64_sys_lsetxattr+0x71/0x90
[  207.546316][T17428]  x64_sys_call+0x2877/0x2ff0
[  207.546337][T17428]  do_syscall_64+0xd2/0x200
[  207.546365][T17428]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  207.546401][T17428]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  207.546432][T17428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.546453][T17428] RIP: 0033:0x7f654f9ceb69
[  207.546466][T17428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  207.546483][T17428] RSP: 002b:00007f654e037038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[  207.546553][T17428] RAX: ffffffffffffffda RBX: 00007f654fbf5fa0 RCX: 00007f654f9ceb69
[  207.546609][T17428] RDX: 00002000000006c0 RSI: 00002000000000c0 RDI: 0000200000000080
[  207.546623][T17428] RBP: 00007f654e037090 R08: 0000000000000000 R09: 0000000000000000
[  207.546637][T17428] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001
[  207.546652][T17428] R13: 0000000000000000 R14: 00007f654fbf5fa0 R15: 00007ffe1a9c6778
[  207.546684][T17428]  </TASK>
[  207.866202][T17439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3986'.
[  207.933271][T17458] netlink: 'syz.1.3994': attribute type 4 has an invalid length.
[  207.944242][T17458] netlink: 'syz.1.3994': attribute type 4 has an invalid length.
[  208.182152][T15040] usb usb2-port1: unable to enumerate USB device
[  208.221996][T17494] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4008'.
[  208.226061][T17491] wg1 speed is unknown, defaulting to 1000
[  208.317403][T17507] netlink: 'syz.5.4013': attribute type 10 has an invalid length.
[  208.345184][T17507] bond0: (slave dummy0): Releasing backup interface
[  208.363231][T17520] netlink: 'syz.5.4013': attribute type 10 has an invalid length.
[  208.377109][T17507] team0: Port device dummy0 added
[  208.384906][T17522] FAULT_INJECTION: forcing a failure.
[  208.384906][T17522] name failslab, interval 1, probability 0, space 0, times 0
[  208.397678][T17522] CPU: 1 UID: 0 PID: 17522 Comm: syz.0.4014 Tainted: G        W           6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[  208.397712][T17522] Tainted: [W]=WARN
[  208.397719][T17522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  208.397763][T17522] Call Trace:
[  208.397770][T17522]  <TASK>
[  208.397777][T17522]  __dump_stack+0x1d/0x30
[  208.397800][T17522]  dump_stack_lvl+0xe8/0x140
[  208.397842][T17522]  dump_stack+0x15/0x1b
[  208.397861][T17522]  should_fail_ex+0x265/0x280
[  208.397954][T17522]  should_failslab+0x8c/0xb0
[  208.397984][T17522]  __kvmalloc_node_noprof+0x123/0x4e0
[  208.398057][T17522]  ? io_alloc_cache_init+0x31/0xa0
[  208.398092][T17522]  io_alloc_cache_init+0x31/0xa0
[  208.398116][T17522]  io_ring_ctx_alloc+0x2b7/0x6a0
[  208.398202][T17522]  io_uring_create+0x10f/0x610
[  208.398230][T17522]  __se_sys_io_uring_setup+0x1f7/0x210
[  208.398271][T17522]  __x64_sys_io_uring_setup+0x31/0x40
[  208.398374][T17522]  x64_sys_call+0x2b21/0x2ff0
[  208.398397][T17522]  do_syscall_64+0xd2/0x200
[  208.398451][T17522]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  208.398477][T17522]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  208.398579][T17522]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.398635][T17522] RIP: 0033:0x7f515485eb69
[  208.398649][T17522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  208.398665][T17522] RSP: 002b:00007f5152ec6fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[  208.398683][T17522] RAX: ffffffffffffffda RBX: 00007f5154a85fa0 RCX: 00007f515485eb69
[  208.398695][T17522] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111
[  208.398708][T17522] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000
[  208.398759][T17522] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[  208.398773][T17522] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000
[  208.398793][T17522]  </TASK>
[  208.596471][T17520] team0: Port device dummy0 removed
[  208.604435][T17520] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  208.784780][T17546] random: crng reseeded on system resumption
[  208.829687][T17549] netlink: 'syz.0.4021': attribute type 2 has an invalid length.
[  208.837430][T17549] netlink: 'syz.0.4021': attribute type 8 has an invalid length.
[  208.845221][T17549] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4021'.
[  208.854375][T17546] FAULT_INJECTION: forcing a failure.
[  208.854375][T17546] name failslab, interval 1, probability 0, space 0, times 0
[  208.866972][T17546] CPU: 0 UID: 0 PID: 17546 Comm: syz.1.4019 Tainted: G        W           6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[  208.867010][T17546] Tainted: [W]=WARN
[  208.867017][T17546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  208.867051][T17546] Call Trace:
[  208.867057][T17546]  <TASK>
[  208.867065][T17546]  __dump_stack+0x1d/0x30
[  208.867089][T17546]  dump_stack_lvl+0xe8/0x140
[  208.867124][T17546]  dump_stack+0x15/0x1b
[  208.867140][T17546]  should_fail_ex+0x265/0x280
[  208.867170][T17546]  ? dev_create_fw_entry+0x43/0xf0
[  208.867258][T17546]  should_failslab+0x8c/0xb0
[  208.867287][T17546]  __kmalloc_cache_noprof+0x4c/0x320
[  208.867375][T17546]  ? __pfx_fw_name_devm_release+0x10/0x10
[  208.867407][T17546]  dev_create_fw_entry+0x43/0xf0
[  208.867485][T17546]  ? __pfx_devm_name_match+0x10/0x10
[  208.867530][T17546]  devres_for_each_res+0xff/0x160
[  208.867600][T17546]  ? __pfx_devm_name_match+0x10/0x10
[  208.867628][T17546]  ? __pfx_dev_create_fw_entry+0x10/0x10
[  208.867657][T17546]  dev_cache_fw_image+0x62/0x270
[  208.867698][T17546]  ? __pfx_dev_cache_fw_image+0x10/0x10
[  208.867727][T17546]  dpm_for_each_dev+0x5d/0xa0
[  208.867783][T17546]  ? __pfx_fw_pm_notify+0x10/0x10
[  208.867810][T17546]  fw_pm_notify+0x164/0x1a0
[  208.867835][T17546]  ? __pfx_autoremove_wake_function+0x10/0x10
[  208.867880][T17546]  notifier_call_chain_robust+0x74/0x350
[  208.867904][T17546]  blocking_notifier_call_chain_robust+0x50/0x80
[  208.867943][T17546]  pm_notifier_call_chain_robust+0x2c/0x60
[  208.868015][T17546]  snapshot_open+0x120/0x270
[  208.868052][T17546]  ? __pfx_snapshot_open+0x10/0x10
[  208.868121][T17546]  misc_open+0x1d3/0x200
[  208.868155][T17546]  chrdev_open+0x2eb/0x3a0
[  208.868183][T17546]  do_dentry_open+0x646/0xa20
[  208.868250][T17546]  ? __pfx_chrdev_open+0x10/0x10
[  208.868278][T17546]  vfs_open+0x37/0x1e0
[  208.868304][T17546]  path_openat+0x1c5e/0x2170
[  208.868399][T17546]  do_filp_open+0x109/0x230
[  208.868441][T17546]  do_sys_openat2+0xa6/0x110
[  208.868534][T17546]  __x64_sys_openat+0xf2/0x120
[  208.868567][T17546]  x64_sys_call+0x2e9c/0x2ff0
[  208.868620][T17546]  do_syscall_64+0xd2/0x200
[  208.868653][T17546]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  208.868679][T17546]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  208.868786][T17546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.868811][T17546] RIP: 0033:0x7fc8913deb69
[  208.868870][T17546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  208.868891][T17546] RSP: 002b:00007fc88fa3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  208.868911][T17546] RAX: ffffffffffffffda RBX: 00007fc891605fa0 RCX: 00007fc8913deb69
[  208.868925][T17546] RDX: 0000000000002501 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  208.868936][T17546] RBP: 00007fc88fa3f090 R08: 0000000000000000 R09: 0000000000000000
[  208.868964][T17546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  208.868977][T17546] R13: 0000000000000000 R14: 00007fc891605fa0 R15: 00007ffc389c8068
[  208.868997][T17546]  </TASK>
[  209.211229][T17560] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4026'.
[  209.280963][T17571] openvswitch: netlink: Message has 6 unknown bytes.
[  209.351716][T17587] netlink: 192436 bytes leftover after parsing attributes in process `syz.5.4038'.
[  209.363098][T17587] netlink: zone id is out of range
[  209.368375][T17587] netlink: zone id is out of range
[  209.373712][T17587] netlink: zone id is out of range
[  209.399487][T17592] wg1 speed is unknown, defaulting to 1000
[  209.682508][T17650] SELinux:  Context ›Y7 is not valid (left unmapped).
[  209.717266][T17655] blktrace: Concurrent blktraces are not allowed on sg0
[  209.805662][T17670] Invalid ELF header magic: != ELF
[  209.815373][T17667] wg1 speed is unknown, defaulting to 1000
[  209.901625][T17688] netlink: 'syz.6.4067': attribute type 10 has an invalid length.
[  209.916639][T17688] bond0: (slave dummy0): Releasing backup interface
[  209.924572][T17688] netlink: 'syz.6.4067': attribute type 10 has an invalid length.
[  209.935435][T17688] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  209.972925][T17709] lo: Caught tx_queue_len zero misconfig
[  209.978611][T17709] sch_tbf: burst 19870 is lower than device lo mtu (11337746) !
[  209.998098][T17713] netlink: 'syz.0.4070': attribute type 27 has an invalid length.
[  210.026239][T17713] vlan2: left promiscuous mode
[  210.029500][T17715] __nla_validate_parse: 1 callbacks suppressed
[  210.029514][T17715] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4071'.
[  210.031072][T17713] bridge0: left promiscuous mode
[  210.051291][T17713] vlan2: left allmulticast mode
[  210.056315][T17713] bridge0: left allmulticast mode
[  210.085160][T17713] syz_tun: entered allmulticast mode
[  210.128364][T17713] syz_tun: left allmulticast mode
[  210.205138][T17758] wg1 speed is unknown, defaulting to 1000
[  210.219583][T17744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.234153][T17744] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.259309][ T5605] bridge0: port 3(team0) entered disabled state
[  210.266807][ T5605] bridge_slave_1: left allmulticast mode
[  210.272736][ T5605] bridge_slave_1: left promiscuous mode
[  210.278460][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.285872][ T5605] bridge_slave_0: left allmulticast mode
[  210.291539][ T5605] bridge_slave_0: left promiscuous mode
[  210.297326][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.317931][T17776] loop6: detected capacity change from 0 to 1024
[  210.331089][T17776] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  210.342122][T17776] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  210.355686][T17776] JBD2: no valid journal superblock found
[  210.361437][T17776] EXT4-fs (loop6): Could not load journal inode
[  210.427255][T17787] Invalid ELF header magic: != ELF
[  210.440969][T17789] sctp: [Deprecated]: syz.2.4087 (pid 17789) Use of int in max_burst socket option.
[  210.440969][T17789] Use struct sctp_assoc_value instead
[  210.456914][T17789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.465586][T17789] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.504395][   T29] kauditd_printk_skb: 552 callbacks suppressed
[  210.504412][   T29] audit: type=1400 audit(1754537148.766:23362): avc:  denied  { read } for  pid=17791 comm="syz.1.4088" dev="nsfs" ino=4026533532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  210.532137][   T29] audit: type=1400 audit(1754537148.766:23363): avc:  denied  { open } for  pid=17791 comm="syz.1.4088" path="net:[4026533532]" dev="nsfs" ino=4026533532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  210.555703][   T29] audit: type=1400 audit(1754537148.766:23364): avc:  denied  { create } for  pid=17791 comm="syz.1.4088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  210.576238][   T29] audit: type=1400 audit(1754537148.777:23365): avc:  denied  { setopt } for  pid=17791 comm="syz.1.4088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  210.597756][ T5605] bond1 (unregistering): Released all slaves
[  210.625872][   T29] audit: type=1326 audit(1754537148.892:23366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17798 comm="syz.1.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8913deb69 code=0x7ffc0000
[  210.649556][   T29] audit: type=1326 audit(1754537148.892:23367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17798 comm="syz.1.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8913deb69 code=0x7ffc0000
[  210.673121][   T29] audit: type=1326 audit(1754537148.892:23368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17798 comm="syz.1.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fc8913deb69 code=0x7ffc0000
[  210.696711][   T29] audit: type=1326 audit(1754537148.892:23369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17798 comm="syz.1.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8913deb69 code=0x7ffc0000
[  210.720294][   T29] audit: type=1326 audit(1754537148.892:23370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17798 comm="syz.1.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8913deb69 code=0x7ffc0000
[  210.747147][   T29] audit: type=1326 audit(1754537148.892:23371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17798 comm="syz.1.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8913deb69 code=0x7ffc0000
[  210.788804][ T5605] tipc: Disabling bearer <udp:syz2>
[  210.794385][ T5605] tipc: Left network mode
[  210.894312][ T5605] hsr_slave_0: left promiscuous mode
[  210.902617][ T5605] hsr_slave_1: left promiscuous mode
[  210.914332][ T5605] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.921769][ T5605] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.938685][T17844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4096'.
[  210.947896][T17844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4096'.
[  210.970861][ T5605] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.978455][ T5605] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.992055][ T5605] veth1_macvtap: left promiscuous mode
[  210.997553][ T5605] veth0_macvtap: left promiscuous mode
[  211.113647][ T5605] team_slave_1 (unregistering): left promiscuous mode
[  211.120653][ T5605] team_slave_1 (unregistering): left allmulticast mode
[  211.149666][ T5605] team0 (unregistering): Port device team_slave_1 removed
[  211.165556][ T5605] team_slave_0 (unregistering): left promiscuous mode
[  211.172502][ T5605] team_slave_0 (unregistering): left allmulticast mode
[  211.182151][ T5605] team0 (unregistering): Port device team_slave_0 removed
[  211.230387][T17860] bridge0: port 3(syz_tun) entered blocking state
[  211.237013][T17860] bridge0: port 3(syz_tun) entered disabled state
[  211.258923][T17860] syz_tun: entered allmulticast mode
[  211.276398][T17860] syz_tun: entered promiscuous mode
[  211.300658][T17867] syz_tun: left allmulticast mode
[  211.305795][T17867] syz_tun: left promiscuous mode
[  211.310948][T17867] bridge0: port 3(syz_tun) entered disabled state
[  211.322872][T17867] bond0: (slave dummy0): Releasing backup interface
[  211.342426][T17867] bridge_slave_0: left allmulticast mode
[  211.348119][T17867] bridge_slave_0: left promiscuous mode
[  211.354031][T17867] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.371652][T17867] bridge_slave_1: left allmulticast mode
[  211.377426][T17867] bridge_slave_1: left promiscuous mode
[  211.383324][T17867] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.428992][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4121'.
[  211.437938][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4121'.
[  211.460814][T17867] bond0: (slave bond_slave_0): Releasing backup interface
[  211.479417][T17867] team0: Port device team_slave_0 removed
[  211.493860][T17867] team0: Port device team_slave_1 removed
[  211.501986][T17867] batman_adv: batadv0: Removing interface: batadv_slave_0
[  211.516494][T17867] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.536324][T17872] team0: Caught tx_queue_len zero misconfig
[  211.560052][T17850] wg1 speed is unknown, defaulting to 1000
[  211.570529][T17927] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -32018, delta: 1
[  211.579288][T17927] ref_ctr increment failed for inode: 0x571 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88810005d080
[  211.630662][T17913] wg1 speed is unknown, defaulting to 1000
[  211.680348][T17944] netlink: 'syz.5.4131': attribute type 10 has an invalid length.
[  211.689884][T17944] bond0: (slave dummy0): Releasing backup interface
[  211.700046][T17944] team0: Port device dummy0 added
[  211.728519][T17952] netlink: 'syz.5.4131': attribute type 10 has an invalid length.
[  211.759644][T17952] team0: Port device dummy0 removed
[  211.767484][T17952] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  211.794022][ T5605] IPVS: stop unused estimator thread 0...
[  211.811001][T17961] loop6: detected capacity change from 0 to 2048
[  211.822435][T17961] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  211.889164][T18006] netlink: 192436 bytes leftover after parsing attributes in process `syz.5.4137'.
[  211.902666][T18006] netlink: zone id is out of range
[  211.907844][T18006] netlink: zone id is out of range
[  211.907951][T18006] netlink: zone id is out of range
[  211.952450][T13839] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  212.027668][T18020] loop6: detected capacity change from 0 to 1024
[  212.035233][T18020] EXT4-fs: inline encryption not supported
[  212.045053][T18016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.055976][T18020] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.056966][T18016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.115411][T13839] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.153140][T18038] netlink: 'syz.6.4144': attribute type 10 has an invalid length.
[  212.168148][T18038] bond0: (slave dummy0): Releasing backup interface
[  212.177189][T18038] netlink: 'syz.6.4144': attribute type 10 has an invalid length.
[  212.186649][T18034] wg1 speed is unknown, defaulting to 1000
[  212.188101][T18038] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  212.252341][T18046] loop6: detected capacity change from 0 to 2048
[  212.289345][T18046] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  212.348973][T18034] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4146'.
[  212.411726][T18069] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  212.428355][T18069] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1778 with error 28
[  212.440910][T18069] EXT4-fs (loop6): This should not happen!! Data will be lost
[  212.440910][T18069] 
[  212.440927][T18069] EXT4-fs (loop6): Total free blocks count 0
[  212.456588][T18069] EXT4-fs (loop6): Free/Dirty block details
[  212.456606][T18069] EXT4-fs (loop6): free_blocks=2415919104
[  212.456622][T18069] EXT4-fs (loop6): dirty_blocks=1792
[  212.456716][T18069] EXT4-fs (loop6): Block reservation details
[  212.456729][T18069] EXT4-fs (loop6): i_reserved_data_blocks=112
[  212.548455][T18083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4149'.
[  212.567996][T18087] option changes via remount are deprecated (pid=18086 comm=syz.2.4150)
[  212.603661][T18089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4151'.
[  212.636802][T18089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4151'.
[  212.718754][T18096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.727392][T18096] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.787057][T18112] batman_adv: batadv0: Adding interface: gretap1
[  212.793463][T18112] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.819426][T18112] batman_adv: batadv0: Interface activated: gretap1
[  212.878150][T18128] netlink: zone id is out of range
[  212.883301][T18128] netlink: zone id is out of range
[  212.888541][T18128] netlink: zone id is out of range
[  212.935964][T18136] rdma_rxe: rxe_newlink: failed to add syz_tun
[  213.077834][ T5605] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  213.455786][T18188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.464345][T18188] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.464972][T18204] FAULT_INJECTION: forcing a failure.
[  213.464972][T18204] name failslab, interval 1, probability 0, space 0, times 0
[  213.484778][T18204] CPU: 0 UID: 0 PID: 18204 Comm: syz.6.4191 Tainted: G        W           6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[  213.484867][T18204] Tainted: [W]=WARN
[  213.484873][T18204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  213.484884][T18204] Call Trace:
[  213.484890][T18204]  <TASK>
[  213.484897][T18204]  __dump_stack+0x1d/0x30
[  213.484917][T18204]  dump_stack_lvl+0xe8/0x140
[  213.484933][T18204]  dump_stack+0x15/0x1b
[  213.485031][T18204]  should_fail_ex+0x265/0x280
[  213.485057][T18204]  should_failslab+0x8c/0xb0
[  213.485080][T18204]  __kmalloc_noprof+0xa5/0x3e0
[  213.485168][T18204]  ? fib_create_info+0xbb1/0x1980
[  213.485192][T18204]  fib_create_info+0xbb1/0x1980
[  213.485243][T18204]  fib_table_insert+0x60/0xeb0
[  213.485271][T18204]  ? fib_trie_table+0xd0/0xf0
[  213.485359][T18204]  ? fib_new_table+0x1ac/0x1c0
[  213.485376][T18204]  inet_rtm_newroute+0xab/0x140
[  213.485420][T18204]  ? __pfx_inet_rtm_newroute+0x10/0x10
[  213.485468][T18204]  rtnetlink_rcv_msg+0x5fe/0x6d0
[  213.485496][T18204]  ? avc_has_perm_noaudit+0x1b1/0x200
[  213.485516][T18204]  netlink_rcv_skb+0x120/0x220
[  213.485537][T18204]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  213.485617][T18204]  rtnetlink_rcv+0x1c/0x30
[  213.485641][T18204]  netlink_unicast+0x5c0/0x690
[  213.485660][T18204]  netlink_sendmsg+0x58b/0x6b0
[  213.485683][T18204]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.485776][T18204]  __sock_sendmsg+0x145/0x180
[  213.485816][T18204]  __sys_sendto+0x268/0x330
[  213.485845][T18204]  __x64_sys_sendto+0x76/0x90
[  213.485883][T18204]  x64_sys_call+0x2d05/0x2ff0
[  213.485902][T18204]  do_syscall_64+0xd2/0x200
[  213.485929][T18204]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  213.485955][T18204]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  213.486005][T18204]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.486024][T18204] RIP: 0033:0x7fc9937deb69
[  213.486038][T18204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.486069][T18204] RSP: 002b:00007fc991e1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  213.486086][T18204] RAX: ffffffffffffffda RBX: 00007fc993a06080 RCX: 00007fc9937deb69
[  213.486135][T18204] RDX: 0000000000000078 RSI: 00002000000007c0 RDI: 0000000000000003
[  213.486145][T18204] RBP: 00007fc991e1e090 R08: 0000000000000000 R09: 0000000000000000
[  213.486156][T18204] R10: 2251197285d76a80 R11: 0000000000000246 R12: 0000000000000001
[  213.486168][T18204] R13: 0000000000000000 R14: 00007fc993a06080 R15: 00007ffc72c4bf08
[  213.486259][T18204]  </TASK>
[  214.047927][T18242] wg1 speed is unknown, defaulting to 1000
[  214.119885][T18250] netlink: zone id is out of range
[  214.125062][T18250] netlink: zone id is out of range
[  214.130274][T18250] netlink: zone id is out of range
[  214.150113][T18252] syz1: rxe_newlink: already configured on syz_tun
[  214.427513][T18320] bond2: entered promiscuous mode
[  214.432647][T18320] bond2: entered allmulticast mode
[  214.438042][T18320] 8021q: adding VLAN 0 to HW filter on device bond2
[  214.447613][T18320] bond2 (unregistering): Released all slaves
[  214.550054][T18320] wg1 speed is unknown, defaulting to 1000
[  214.681749][T18320] netlink: 'syz.2.4224': attribute type 13 has an invalid length.
[  214.694820][T18320] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  214.923800][T18440] __nla_validate_parse: 12 callbacks suppressed
[  214.923816][T18440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4240'.
[  214.925433][T18439] 9pnet_fd: Insufficient options for proto=fd
[  214.987577][T18447] wg1 speed is unknown, defaulting to 1000
[  215.035560][T18439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4239'.
[  215.038431][T18451] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4243'.
[  215.052173][T18459] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.4242'.
[  215.129323][T18459] netlink: 'syz.2.4242': attribute type 8 has an invalid length.
[  215.180232][T18481] netlink: 192436 bytes leftover after parsing attributes in process `syz.6.4249'.
[  215.239134][T18484] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4246'.
[  215.252730][T18490] loop6: detected capacity change from 0 to 764
[  215.259717][T18484] netlink: 'syz.0.4246': attribute type 1 has an invalid length.
[  215.269784][   T29] kauditd_printk_skb: 905 callbacks suppressed
[  215.269796][   T29] audit: type=1400 audit(1754537153.774:24277): avc:  denied  { mounton } for  pid=18480 comm="syz.6.4249" path="/181/file1" dev="tmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  215.301599][   T29] audit: type=1400 audit(1754537153.806:24278): avc:  denied  { mount } for  pid=18480 comm="syz.6.4249" name="/" dev="loop6" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  215.325527][T18490] Symlink component flag not implemented
[  215.331571][T18490] Symlink component flag not implemented (7)
[  215.351197][   T29] audit: type=1400 audit(1754537153.837:24279): avc:  denied  { create } for  pid=18508 comm="syz.5.4251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  215.371037][   T29] audit: type=1326 audit(1754537153.837:24280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18485 comm="syz.1.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8913deb69 code=0x7ffc0000
[  215.394638][   T29] audit: type=1400 audit(1754537153.837:24282): avc:  denied  { getopt } for  pid=18508 comm="syz.5.4251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  215.399182][T18512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4253'.
[  215.414329][   T29] audit: type=1326 audit(1754537153.837:24281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18485 comm="syz.1.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8913deb69 code=0x7ffc0000
[  215.447051][   T29] audit: type=1400 audit(1754537153.858:24283): avc:  denied  { ioctl } for  pid=18480 comm="syz.6.4249" path="socket:[47435]" dev="sockfs" ino=47435 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  215.482123][T18513] rdma_rxe: rxe_newlink: failed to add syz_tun
[  215.490691][T18513] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4252'.
[  215.538286][   T29] audit: type=1400 audit(1754537153.995:24284): avc:  denied  { allowed } for  pid=18510 comm="syz.5.4252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  215.546285][T18519] FAULT_INJECTION: forcing a failure.
[  215.546285][T18519] name failslab, interval 1, probability 0, space 0, times 0
[  215.557911][   T29] audit: type=1400 audit(1754537153.995:24285): avc:  denied  { create } for  pid=18510 comm="syz.5.4252" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  215.570562][T18519] CPU: 1 UID: 0 PID: 18519 Comm: syz.2.4256 Tainted: G        W           6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[  215.570661][T18519] Tainted: [W]=WARN
[  215.570669][T18519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  215.570682][T18519] Call Trace:
[  215.570689][T18519]  <TASK>
[  215.570697][T18519]  __dump_stack+0x1d/0x30
[  215.570716][T18519]  dump_stack_lvl+0xe8/0x140
[  215.570741][T18519]  dump_stack+0x15/0x1b
[  215.570758][T18519]  should_fail_ex+0x265/0x280
[  215.570790][T18519]  should_failslab+0x8c/0xb0
[  215.570845][T18519]  kmem_cache_alloc_noprof+0x50/0x310
[  215.570876][T18519]  ? audit_log_start+0x365/0x6c0
[  215.570909][T18519]  audit_log_start+0x365/0x6c0
[  215.571010][T18519]  audit_seccomp+0x48/0x100
[  215.571038][T18519]  ? __seccomp_filter+0x68c/0x10d0
[  215.571062][T18519]  __seccomp_filter+0x69d/0x10d0
[  215.571158][T18519]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  215.571184][T18519]  ? vfs_write+0x75e/0x8e0
[  215.571204][T18519]  ? __rcu_read_unlock+0x4f/0x70
[  215.571226][T18519]  ? __fget_files+0x184/0x1c0
[  215.571253][T18519]  __secure_computing+0x82/0x150
[  215.571338][T18519]  syscall_trace_enter+0xcf/0x1e0
[  215.571367][T18519]  do_syscall_64+0xac/0x200
[  215.571398][T18519]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  215.571423][T18519]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  215.571478][T18519]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.571501][T18519] RIP: 0033:0x7f654f9ceb69
[  215.571518][T18519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  215.571538][T18519] RSP: 002b:00007f654e037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[  215.571558][T18519] RAX: ffffffffffffffda RBX: 00007f654fbf5fa0 RCX: 00007f654f9ceb69
[  215.571571][T18519] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000
[  215.571664][T18519] RBP: 00007f654e037090 R08: 0000000000000000 R09: 0000000000000000
[  215.571678][T18519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  215.571691][T18519] R13: 0000000000000000 R14: 00007f654fbf5fa0 R15: 00007ffe1a9c6778
[  215.571710][T18519]  </TASK>
[  215.571719][T18519] audit: audit_lost=16 audit_rate_limit=0 audit_backlog_limit=64
[  215.955658][T18527] netlink: 'syz.2.4258': attribute type 10 has an invalid length.
[  215.963621][T18527] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4258'.
[  215.987873][T18532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4259'.
[  215.988366][T18527] team0: Port device geneve1 added
[  216.066992][T18548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18548 comm=syz.6.4265
[  216.156320][T18558] loop6: detected capacity change from 0 to 2048
[  216.173411][T18560] wg1 speed is unknown, defaulting to 1000
[  216.199841][T18558] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  216.400922][T18595] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  216.425262][T18595] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1702 with error 28
[  216.437817][T18595] EXT4-fs (loop6): This should not happen!! Data will be lost
[  216.437817][T18595] 
[  216.447585][T18595] EXT4-fs (loop6): Total free blocks count 0
[  216.453699][T18595] EXT4-fs (loop6): Free/Dirty block details
[  216.459840][T18595] EXT4-fs (loop6): free_blocks=2415919104
[  216.465561][T18595] EXT4-fs (loop6): dirty_blocks=1712
[  216.470905][T18595] EXT4-fs (loop6): Block reservation details
[  216.477174][T18595] EXT4-fs (loop6): i_reserved_data_blocks=107
[  216.490927][T18613] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  216.543036][T18615] wg1 speed is unknown, defaulting to 1000
[  216.566367][T18624] syz1: rxe_newlink: already configured on syz_tun
[  216.591571][    T9] IPVS: starting estimator thread 0...
[  216.601147][T18630] netlink: 'syz.5.4284': attribute type 10 has an invalid length.
[  216.618238][T18630] bond0: (slave dummy0): Releasing backup interface
[  216.637333][T18630] team0: Port device dummy0 added
[  216.645797][T18630] netlink: 'syz.5.4284': attribute type 10 has an invalid length.
[  216.657901][T18630] team0: Port device dummy0 removed
[  216.665866][T18630] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  216.696353][T18628] IPVS: using max 2688 ests per chain, 134400 per kthread
[  216.706698][T18641] SELinux:  Context system_u:object_r:traceroute_exec_t:s0 is not valid (left unmapped).
[  216.722113][T18641] net_ratelimit: 3 callbacks suppressed
[  216.722129][T18641] openvswitch: netlink: Message has 6 unknown bytes.
[  216.777538][T18662] wg1 speed is unknown, defaulting to 1000
[  216.918241][T18694] dvmrp1: entered allmulticast mode
[  216.982041][T18710] netlink: 'syz.1.4296': attribute type 10 has an invalid length.
[  217.017009][T18710] team0: Port device dummy0 added
[  217.024779][ T5613] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  217.025719][T18710] netlink: 'syz.1.4296': attribute type 10 has an invalid length.
[  217.049354][T18710] team0: Port device dummy0 removed
[  217.059427][T18710] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  217.233722][T18772] netlink: 'syz.1.4314': attribute type 10 has an invalid length.
[  217.243712][T18772] bond0: (slave dummy0): Releasing backup interface
[  217.252878][T18772] team0: Port device dummy0 added
[  217.262422][T18772] netlink: 'syz.1.4314': attribute type 10 has an invalid length.
[  217.288099][T18772] team0: Port device dummy0 removed
[  217.295027][T18772] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  217.358631][T18782] loop6: detected capacity change from 0 to 8192
[  217.370713][T18788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18788 comm=syz.2.4320
[  217.400736][T18803] FAULT_INJECTION: forcing a failure.
[  217.400736][T18803] name failslab, interval 1, probability 0, space 0, times 0
[  217.413477][T18803] CPU: 0 UID: 0 PID: 18803 Comm: syz.0.4321 Tainted: G        W           6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[  217.413520][T18803] Tainted: [W]=WARN
[  217.413528][T18803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  217.413541][T18803] Call Trace:
[  217.413549][T18803]  <TASK>
[  217.413558][T18803]  __dump_stack+0x1d/0x30
[  217.413650][T18803]  dump_stack_lvl+0xe8/0x140
[  217.413672][T18803]  dump_stack+0x15/0x1b
[  217.413749][T18803]  should_fail_ex+0x265/0x280
[  217.413829][T18803]  should_failslab+0x8c/0xb0
[  217.413854][T18803]  kmem_cache_alloc_noprof+0x50/0x310
[  217.413885][T18803]  ? getname_flags+0x80/0x3b0
[  217.414024][T18803]  getname_flags+0x80/0x3b0
[  217.414053][T18803]  do_sys_openat2+0x60/0x110
[  217.414086][T18803]  __x64_sys_openat+0xf2/0x120
[  217.414122][T18803]  x64_sys_call+0x2e9c/0x2ff0
[  217.414205][T18803]  do_syscall_64+0xd2/0x200
[  217.414237][T18803]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  217.414287][T18803]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  217.414314][T18803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.414365][T18803] RIP: 0033:0x7f515485eb69
[  217.414382][T18803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.414403][T18803] RSP: 002b:00007f5152ec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  217.414425][T18803] RAX: ffffffffffffffda RBX: 00007f5154a85fa0 RCX: 00007f515485eb69
[  217.414440][T18803] RDX: 0000000000064382 RSI: 0000200000000f40 RDI: ffffffffffffff9c
[  217.414467][T18803] RBP: 00007f5152ec7090 R08: 0000000000000000 R09: 0000000000000000
[  217.414482][T18803] R10: 00000000000001e1 R11: 0000000000000246 R12: 0000000000000001
[  217.414501][T18803] R13: 0000000000000000 R14: 00007f5154a85fa0 R15: 00007ffe50d6db28
[  217.414519][T18803]  </TASK>
[  217.425257][T18782] loop6: detected capacity change from 0 to 1024
[  217.624191][T18782] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  217.635986][T18782] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  217.645899][T18782] EXT4-fs (loop6): group descriptors corrupted!
[  217.697184][T18827] netlink: 'syz.2.4330': attribute type 10 has an invalid length.
[  217.718481][T18827] bond0: (slave dummy0): Releasing backup interface
[  217.733950][T18827] team0: Port device dummy0 added
[  217.741253][T18827] netlink: 'syz.2.4330': attribute type 10 has an invalid length.
[  217.751852][T18827] team0: Port device dummy0 removed
[  217.772559][T18827] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  217.783792][T18837] FAULT_INJECTION: forcing a failure.
[  217.783792][T18837] name failslab, interval 1, probability 0, space 0, times 0
[  217.796496][T18837] CPU: 1 UID: 0 PID: 18837 Comm: syz.1.4334 Tainted: G        W           6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[  217.796531][T18837] Tainted: [W]=WARN
[  217.796572][T18837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  217.796586][T18837] Call Trace:
[  217.796593][T18837]  <TASK>
[  217.796602][T18837]  __dump_stack+0x1d/0x30
[  217.796623][T18837]  dump_stack_lvl+0xe8/0x140
[  217.796643][T18837]  dump_stack+0x15/0x1b
[  217.796660][T18837]  should_fail_ex+0x265/0x280
[  217.796762][T18837]  should_failslab+0x8c/0xb0
[  217.796787][T18837]  kmem_cache_alloc_noprof+0x50/0x310
[  217.796861][T18837]  ? getname_flags+0x80/0x3b0
[  217.796887][T18837]  getname_flags+0x80/0x3b0
[  217.796910][T18837]  path_setxattrat+0x223/0x310
[  217.796948][T18837]  __x64_sys_lsetxattr+0x71/0x90
[  217.797007][T18837]  x64_sys_call+0x2877/0x2ff0
[  217.797030][T18837]  do_syscall_64+0xd2/0x200
[  217.797072][T18837]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  217.797097][T18837]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  217.797127][T18837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.797196][T18837] RIP: 0033:0x7fc8913deb69
[  217.797210][T18837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.797227][T18837] RSP: 002b:00007fc88fa3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[  217.797285][T18837] RAX: ffffffffffffffda RBX: 00007fc891605fa0 RCX: 00007fc8913deb69
[  217.797299][T18837] RDX: 0000200000000280 RSI: 0000200000000000 RDI: 0000200000000400
[  217.797311][T18837] RBP: 00007fc88fa3f090 R08: 0000000000000000 R09: 0000000000000000
[  217.797366][T18837] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001
[  217.797397][T18837] R13: 0000000000000000 R14: 00007fc891605fa0 R15: 00007ffc389c8068
[  217.797415][T18837]  </TASK>
[  218.046921][T18856] FAULT_INJECTION: forcing a failure.
[  218.046921][T18856] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  218.060138][T18856] CPU: 0 UID: 0 PID: 18856 Comm: syz.2.4341 Tainted: G        W           6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[  218.060191][T18856] Tainted: [W]=WARN
[  218.060197][T18856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  218.060248][T18856] Call Trace:
[  218.060255][T18856]  <TASK>
[  218.060263][T18856]  __dump_stack+0x1d/0x30
[  218.060287][T18856]  dump_stack_lvl+0xe8/0x140
[  218.060306][T18856]  dump_stack+0x15/0x1b
[  218.060325][T18856]  should_fail_ex+0x265/0x280
[  218.060362][T18856]  should_fail+0xb/0x20
[  218.060449][T18856]  should_fail_usercopy+0x1a/0x20
[  218.060485][T18856]  _copy_from_user+0x1c/0xb0
[  218.060511][T18856]  xsk_setsockopt+0x308/0x640
[  218.060602][T18856]  ? __pfx_xsk_setsockopt+0x10/0x10
[  218.060634][T18856]  __sys_setsockopt+0x184/0x200
[  218.060662][T18856]  __x64_sys_setsockopt+0x64/0x80
[  218.060689][T18856]  x64_sys_call+0x20ec/0x2ff0
[  218.060767][T18856]  do_syscall_64+0xd2/0x200
[  218.060802][T18856]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  218.060828][T18856]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  218.060860][T18856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.060944][T18856] RIP: 0033:0x7f654f9ceb69
[  218.060959][T18856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.060976][T18856] RSP: 002b:00007f654e037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  218.060998][T18856] RAX: ffffffffffffffda RBX: 00007f654fbf5fa0 RCX: 00007f654f9ceb69
[  218.061013][T18856] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003
[  218.061026][T18856] RBP: 00007f654e037090 R08: 0000000000000020 R09: 0000000000000000
[  218.061037][T18856] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  218.061049][T18856] R13: 0000000000000000 R14: 00007f654fbf5fa0 R15: 00007ffe1a9c6778
[  218.061069][T18856]  </TASK>
[  218.345105][T18884] openvswitch: netlink: Message has 6 unknown bytes.
[  218.362864][T18888] netlink: 'syz.1.4352': attribute type 13 has an invalid length.
[  218.373207][T18888] program syz.1.4352 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  218.374199][T18886] wg1 speed is unknown, defaulting to 1000
[  218.426942][ T3388] IPVS: starting estimator thread 0...
[  218.459154][T18907] wg1 speed is unknown, defaulting to 1000
[  218.496729][ T3388] IPVS: starting estimator thread 0...
[  218.503007][T18914] FAULT_INJECTION: forcing a failure.
[  218.503007][T18914] name failslab, interval 1, probability 0, space 0, times 0
[  218.515736][T18914] CPU: 0 UID: 0 PID: 18914 Comm: syz.6.4357 Tainted: G        W           6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[  218.515768][T18914] Tainted: [W]=WARN
[  218.515775][T18914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  218.515866][T18914] Call Trace:
[  218.515891][T18914]  <TASK>
[  218.515897][T18914]  __dump_stack+0x1d/0x30
[  218.515918][T18914]  dump_stack_lvl+0xe8/0x140
[  218.515936][T18914]  dump_stack+0x15/0x1b
[  218.515954][T18914]  should_fail_ex+0x265/0x280
[  218.515989][T18914]  ? audit_log_d_path+0x8d/0x150
[  218.516118][T18914]  should_failslab+0x8c/0xb0
[  218.516145][T18914]  __kmalloc_cache_noprof+0x4c/0x320
[  218.516253][T18914]  audit_log_d_path+0x8d/0x150
[  218.516282][T18914]  audit_log_d_path_exe+0x42/0x70
[  218.516323][T18914]  audit_log_task+0x1e9/0x250
[  218.516358][T18914]  audit_seccomp+0x61/0x100
[  218.516383][T18914]  ? __seccomp_filter+0x68c/0x10d0
[  218.516407][T18914]  __seccomp_filter+0x69d/0x10d0
[  218.516458][T18914]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  218.516565][T18914]  ? vfs_write+0x75e/0x8e0
[  218.516652][T18914]  ? __rcu_read_unlock+0x4f/0x70
[  218.516677][T18914]  ? __fget_files+0x184/0x1c0
[  218.516706][T18914]  __secure_computing+0x82/0x150
[  218.516773][T18914]  syscall_trace_enter+0xcf/0x1e0
[  218.516801][T18914]  do_syscall_64+0xac/0x200
[  218.516837][T18914]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  218.516861][T18914]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  218.516928][T18914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.516950][T18914] RIP: 0033:0x7fc9937deb69
[  218.516966][T18914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.516987][T18914] RSP: 002b:00007fc991e3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  218.517009][T18914] RAX: ffffffffffffffda RBX: 00007fc993a05fa0 RCX: 00007fc9937deb69
[  218.517099][T18914] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 000000000000000d
[  218.517113][T18914] RBP: 00007fc991e3f090 R08: 0000000000000000 R09: 0000000000000000
[  218.517125][T18914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  218.517202][T18914] R13: 0000000000000000 R14: 00007fc993a05fa0 R15: 00007ffc72c4bf08
[  218.517220][T18914]  </TASK>
[  218.525424][T18904] IPVS: using max 2784 ests per chain, 139200 per kthread
[  218.756533][T18918] IPVS: using max 2592 ests per chain, 129600 per kthread
[  218.818496][T18950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18950 comm=syz.5.4363
[  218.839263][T18946] netlink: zone id is out of range
[  218.844674][T18946] netlink: zone id is out of range
[  218.849946][T18946] netlink: zone id is out of range
[  218.997340][T18982] tipc: Started in network mode
[  219.002344][T18982] tipc: Node identity 12a1ee879d17, cluster identity 4711
[  219.009530][T18982] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.017059][T18982] syzkaller0: entered promiscuous mode
[  219.022634][T18982] syzkaller0: entered allmulticast mode
[  219.045702][T18981] tipc: Resetting bearer <eth:syzkaller0>
[  219.054317][T18988] program syz.2.4367 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  219.054716][T18981] tipc: Disabling bearer <eth:syzkaller0>
[  219.100863][T18993] openvswitch: netlink: Message has 6 unknown bytes.
[  219.115741][T18993] FAULT_INJECTION: forcing a failure.
[  219.115741][T18993] name failslab, interval 1, probability 0, space 0, times 0
[  219.128648][T18993] CPU: 1 UID: 0 PID: 18993 Comm: syz.0.4369 Tainted: G        W           6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[  219.128689][T18993] Tainted: [W]=WARN
[  219.128695][T18993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  219.128706][T18993] Call Trace:
[  219.128711][T18993]  <TASK>
[  219.128718][T18993]  __dump_stack+0x1d/0x30
[  219.128737][T18993]  dump_stack_lvl+0xe8/0x140
[  219.128755][T18993]  dump_stack+0x15/0x1b
[  219.128769][T18993]  should_fail_ex+0x265/0x280
[  219.128843][T18993]  ? audit_log_d_path+0x8d/0x150
[  219.128875][T18993]  should_failslab+0x8c/0xb0
[  219.128978][T18993]  __kmalloc_cache_noprof+0x4c/0x320
[  219.129008][T18993]  audit_log_d_path+0x8d/0x150
[  219.129035][T18993]  audit_log_d_path_exe+0x42/0x70
[  219.129151][T18993]  audit_log_task+0x1e9/0x250
[  219.129177][T18993]  audit_seccomp+0x61/0x100
[  219.129213][T18993]  ? __seccomp_filter+0x68c/0x10d0
[  219.129233][T18993]  __seccomp_filter+0x69d/0x10d0
[  219.129320][T18993]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  219.129344][T18993]  ? vfs_write+0x75e/0x8e0
[  219.129370][T18993]  __secure_computing+0x82/0x150
[  219.129390][T18993]  syscall_trace_enter+0xcf/0x1e0
[  219.129485][T18993]  do_syscall_64+0xac/0x200
[  219.129513][T18993]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  219.129581][T18993]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  219.129644][T18993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.129722][T18993] RIP: 0033:0x7f515485eb69
[  219.129736][T18993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  219.129753][T18993] RSP: 002b:00007f5152ec7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d0
[  219.129770][T18993] RAX: ffffffffffffffda RBX: 00007f5154a85fa0 RCX: 00007f515485eb69
[  219.129831][T18993] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 00007f51555bf000
[  219.129881][T18993] RBP: 00007f5152ec7090 R08: 0000200000001140 R09: 0000000000000000
[  219.129892][T18993] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000001
[  219.129903][T18993] R13: 0000000000000000 R14: 00007f5154a85fa0 R15: 00007ffe50d6db28
[  219.129919][T18993]  </TASK>
[  219.416049][T19000] loop6: detected capacity change from 0 to 2048
[  219.431952][T19000] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  219.624607][T19014] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  219.640012][T19014] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  219.652591][T19014] EXT4-fs (loop6): This should not happen!! Data will be lost
[  219.652591][T19014] 
[  219.662333][T19014] EXT4-fs (loop6): Total free blocks count 0
[  219.668373][T19014] EXT4-fs (loop6): Free/Dirty block details
[  219.674335][T19014] EXT4-fs (loop6): free_blocks=2415919104
[  219.680158][T19014] EXT4-fs (loop6): dirty_blocks=3440
[  219.685439][T19014] EXT4-fs (loop6): Block reservation details
[  219.691487][T19014] EXT4-fs (loop6): i_reserved_data_blocks=215
[  219.762456][T19026] random: crng reseeded on system resumption
[  219.800439][T19021] __nla_validate_parse: 30 callbacks suppressed
[  219.800484][T19021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4378'.
[  220.034587][ T5602] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  220.245298][   T29] kauditd_printk_skb: 828 callbacks suppressed
[  220.245313][   T29] audit: type=1326 audit(1754537158.972:25113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19073 comm="syz.0.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515485eb69 code=0x7ffc0000
[  220.275281][   T29] audit: type=1326 audit(1754537158.972:25114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19073 comm="syz.0.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515485eb69 code=0x7ffc0000
[  220.298957][   T29] audit: type=1326 audit(1754537158.982:25115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19073 comm="syz.0.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f515485eb69 code=0x7ffc0000
[  220.322616][   T29] audit: type=1326 audit(1754537158.982:25116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19073 comm="syz.0.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515485eb69 code=0x7ffc0000
[  220.346417][   T29] audit: type=1326 audit(1754537158.982:25117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19073 comm="syz.0.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515485eb69 code=0x7ffc0000
[  220.370041][   T29] audit: type=1326 audit(1754537158.982:25118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19073 comm="syz.0.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f515485eb69 code=0x7ffc0000
[  220.393595][   T29] audit: type=1326 audit(1754537158.982:25119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19073 comm="syz.0.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515485eb69 code=0x7ffc0000
[  220.417249][   T29] audit: type=1326 audit(1754537158.982:25120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19073 comm="syz.0.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515485eb69 code=0x7ffc0000
[  220.440802][   T29] audit: type=1326 audit(1754537158.982:25121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19073 comm="syz.0.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f515485eb69 code=0x7ffc0000
[  220.464399][   T29] audit: type=1326 audit(1754537158.982:25122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19073 comm="syz.0.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515485eb69 code=0x7ffc0000
[  220.532873][T19088] FAULT_INJECTION: forcing a failure.
[  220.532873][T19088] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  220.546014][T19088] CPU: 1 UID: 0 PID: 19088 Comm: syz.6.4403 Tainted: G        W           6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[  220.546103][T19088] Tainted: [W]=WARN
[  220.546109][T19088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  220.546121][T19088] Call Trace:
[  220.546129][T19088]  <TASK>
[  220.546213][T19088]  __dump_stack+0x1d/0x30
[  220.546235][T19088]  dump_stack_lvl+0xe8/0x140
[  220.546290][T19088]  dump_stack+0x15/0x1b
[  220.546309][T19088]  should_fail_ex+0x265/0x280
[  220.546338][T19088]  should_fail+0xb/0x20
[  220.546402][T19088]  should_fail_usercopy+0x1a/0x20
[  220.546430][T19088]  copy_fpstate_to_sigframe+0x628/0x7d0
[  220.546465][T19088]  ? copy_fpstate_to_sigframe+0xe6/0x7d0
[  220.546563][T19088]  ? x86_task_fpu+0x36/0x60
[  220.546597][T19088]  get_sigframe+0x34d/0x490
[  220.546626][T19088]  ? get_signal+0xdc8/0xf70
[  220.546657][T19088]  x64_setup_rt_frame+0xa8/0x580
[  220.546693][T19088]  arch_do_signal_or_restart+0x27c/0x480
[  220.546714][T19088]  exit_to_user_mode_loop+0x7a/0x100
[  220.546734][T19088]  do_syscall_64+0x1d6/0x200
[  220.546800][T19088]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  220.546821][T19088]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  220.546859][T19088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.546879][T19088] RIP: 0033:0x7fc9937deb67
[  220.546928][T19088] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  220.546944][T19088] RSP: 002b:00007fc991e3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1
[  220.546962][T19088] RAX: 00000000000001c1 RBX: 00007fc993a05fa0 RCX: 00007fc9937deb69
[  220.546973][T19088] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001080
[  220.546984][T19088] RBP: 00007fc991e3f090 R08: 0000000000000001 R09: 0000000000000000
[  220.546995][T19088] R10: 0000200000001100 R11: 0000000000000246 R12: 0000000000000001
[  220.547006][T19088] R13: 0000000000000000 R14: 00007fc993a05fa0 R15: 00007ffc72c4bf08
[  220.547021][T19088]  </TASK>
[  220.836452][T19096] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -32018, delta: 1
[  220.845186][T19096] ref_ctr increment failed for inode: 0x67a offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff8881042ab3c0
[  220.865159][T19099] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4408'.
[  220.940657][T19112] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4415'.
[  220.980201][T19109] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4414'.
[  221.055617][T19021] syz.1.4378 (19021) used greatest stack depth: 7160 bytes left
[  221.077105][T19132] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4424'.
[  221.119213][T19139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4427'.
[  221.199041][T19155] netlink: 'syz.2.4434': attribute type 13 has an invalid length.
[  221.267755][T19155] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.275031][T19155] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.316183][T19176] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4444'.
[  221.328521][T19170] FAULT_INJECTION: forcing a failure.
[  221.328521][T19170] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  221.334784][T19155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.341818][T19170] CPU: 1 UID: 0 PID: 19170 Comm: syz.0.4442 Tainted: G        W           6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[  221.341854][T19170] Tainted: [W]=WARN
[  221.341867][T19170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  221.341881][T19170] Call Trace:
[  221.341888][T19170]  <TASK>
[  221.341897][T19170]  __dump_stack+0x1d/0x30
[  221.341920][T19170]  dump_stack_lvl+0xe8/0x140
[  221.341951][T19170]  dump_stack+0x15/0x1b
[  221.342073][T19170]  should_fail_ex+0x265/0x280
[  221.342166][T19170]  should_fail+0xb/0x20
[  221.342194][T19170]  should_fail_usercopy+0x1a/0x20
[  221.342226][T19170]  _copy_from_user+0x1c/0xb0
[  221.342270][T19170]  kstrtouint_from_user+0x69/0xf0
[  221.342376][T19170]  ? 0xffffffff81000000
[  221.342390][T19170]  ? selinux_file_permission+0x1e4/0x320
[  221.342470][T19170]  proc_fail_nth_write+0x50/0x160
[  221.342495][T19170]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  221.342522][T19170]  vfs_write+0x269/0x8e0
[  221.342654][T19170]  ? vfs_read+0x47f/0x6f0
[  221.342720][T19170]  ? __rcu_read_unlock+0x4f/0x70
[  221.342741][T19170]  ? __fget_files+0x184/0x1c0
[  221.342764][T19170]  ? fput+0x8f/0xc0
[  221.342794][T19170]  ksys_write+0xda/0x1a0
[  221.342817][T19170]  __x64_sys_write+0x40/0x50
[  221.342845][T19170]  x64_sys_call+0x27fe/0x2ff0
[  221.342897][T19170]  do_syscall_64+0xd2/0x200
[  221.342929][T19170]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  221.342974][T19170]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  221.343028][T19170]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.343051][T19170] RIP: 0033:0x7f515485d61f
[  221.343068][T19170] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  221.343087][T19170] RSP: 002b:00007f5152ec7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  221.343106][T19170] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f515485d61f
[  221.343200][T19170] RDX: 0000000000000001 RSI: 00007f5152ec70a0 RDI: 0000000000000005
[  221.343213][T19170] RBP: 00007f5152ec7090 R08: 0000000000000000 R09: 0000000000000000
[  221.343227][T19170] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  221.343241][T19170] R13: 0000000000000000 R14: 00007f5154a85fa0 R15: 00007ffe50d6db28
[  221.343313][T19170]  </TASK>
[  221.575579][T19155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.641457][ T5602] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.656100][ T5602] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.666278][ T5602] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.683732][ T5602] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.717873][T19197] batman_adv: batadv0: Adding interface: gretap1
[  221.724315][T19197] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.753577][T19197] batman_adv: batadv0: Interface activated: gretap1
[  221.783111][T19213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4458'.
[  221.800062][T19213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4458'.
[  221.912145][T19229] wg1 speed is unknown, defaulting to 1000
[  221.925520][T19226] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4462'.
[  223.027458][T19317] program syz.1.4488 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  223.151971][T19321] wg1 speed is unknown, defaulting to 1000
[  223.234639][ T5605] ==================================================================
[  223.242728][ T5605] BUG: KCSAN: data-race in copy_process / free_pid
[  223.249223][ T5605] 
[  223.251528][ T5605] read-write to 0xffffffff8685fc68 of 4 bytes by task 19359 on cpu 0:
[  223.259660][ T5605]  free_pid+0x77/0x180
[  223.263712][ T5605]  free_pids+0x7a/0xb0
[  223.267760][ T5605]  release_task+0x9a9/0xb60
[  223.272259][ T5605]  do_exit+0xd81/0x15c0
[  223.276410][ T5605]  call_usermodehelper_exec_async+0x247/0x250
[  223.282472][ T5605]  ret_from_fork+0xdd/0x150
[  223.286962][ T5605]  ret_from_fork_asm+0x1a/0x30
[  223.291715][ T5605] 
[  223.294022][ T5605] read to 0xffffffff8685fc68 of 4 bytes by task 5605 on cpu 1:
[  223.301546][ T5605]  copy_process+0x14a6/0x2000
[  223.306209][ T5605]  kernel_clone+0x16c/0x5c0
[  223.310707][ T5605]  user_mode_thread+0x7d/0xb0
[  223.315375][ T5605]  call_usermodehelper_exec_work+0x41/0x160
[  223.321261][ T5605]  process_scheduled_works+0x4cb/0x9d0
[  223.326719][ T5605]  worker_thread+0x582/0x770
[  223.331302][ T5605]  kthread+0x486/0x510
[  223.335354][ T5605]  ret_from_fork+0xdd/0x150
[  223.339840][ T5605]  ret_from_fork_asm+0x1a/0x30
[  223.344589][ T5605] 
[  223.346894][ T5605] value changed: 0x80000122 -> 0x80000121
[  223.352590][ T5605] 
[  223.354893][ T5605] Reported by Kernel Concurrency Sanitizer on:
[  223.361025][ T5605] CPU: 1 UID: 0 PID: 5605 Comm: kworker/u8:39 Tainted: G        W           6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[  223.374900][ T5605] Tainted: [W]=WARN
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  223.378683][ T5605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  223.388725][ T5605] Workqueue: events_unbound call_usermodehelper_exec_work
[  223.395834][ T5605] ==================================================================
[  223.486268][T19321] chnl_net:caif_netlink_parms(): no params data found
[  223.560816][ T5602] smc: removing ib device syz1
[  223.854804][ T5605] dvmrp1 (unregistering): left allmulticast mode
[  224.023068][ T5605] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  224.031792][ T5605] bond0 (unregistering): Released all slaves
[  224.069874][ T5605] tipc: Left network mode
[  224.086265][ T5605] hsr_slave_0: left promiscuous mode
[  224.091986][ T5605] hsr_slave_1: left promiscuous mode
[  224.098586][ T5605] pimreg (unregistering): left allmulticast mode
[  224.318319][ T5605] IPVS: stop unused estimator thread 0...
[  224.890895][ T5605] bridge_slave_1: left allmulticast mode
[  224.896537][ T5605] bridge_slave_1: left promiscuous mode
[  224.902235][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.909855][ T5605] bridge_slave_0: left allmulticast mode
[  224.915551][ T5605] bridge_slave_0: left promiscuous mode
[  224.921269][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.930381][ T5605] bridge_slave_1: left allmulticast mode
[  224.936109][ T5605] bridge_slave_1: left promiscuous mode
[  224.941728][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.949298][ T5605] bridge_slave_0: left allmulticast mode
[  224.955054][ T5605] bridge_slave_0: left promiscuous mode
[  224.960716][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.969226][ T5605] bridge_slave_1: left allmulticast mode
[  224.975002][ T5605] bridge_slave_1: left promiscuous mode
[  224.980649][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.988267][ T5605] bridge_slave_0: left allmulticast mode
[  224.993917][ T5605] bridge_slave_0: left promiscuous mode
[  224.999590][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.007638][ T5605] batman_adv: batadv0: Interface deactivated: gretap1
[  225.014742][ T5605] batman_adv: batadv0: Interface deactivated: gretap1
[  225.031566][ T5605] batman_adv: batadv0: Removing interface: gretap1
[  225.185344][ T5605] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[  225.194249][ T5605] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[  225.203089][ T5605] 
 (unregistering): Released all slaves
[  225.250824][ T5605] bond0 (unregistering): Released all slaves
[  225.265658][ T5605] batman_adv: batadv0: Removing interface: gretap1
[  225.432529][ T5605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  225.442051][ T5605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  225.451366][ T5605] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  225.460040][ T5605] bond0 (unregistering): Released all slaves
[  225.477841][ T5605] team0: Port device geneve1 removed
[  225.546755][ T5605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  225.555975][ T5605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  225.565318][ T5605] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  225.573730][ T5605] bond0 (unregistering): Released all slaves
[  225.581617][ T5605] bond1 (unregistering): Released all slaves
[  225.617602][ T5605] tipc: Left network mode
[  225.670893][ T5605] hsr_slave_0: left promiscuous mode
[  225.676474][ T5605] hsr_slave_1: left promiscuous mode
[  225.682157][ T5605] batman_adv: batadv0: Removing interface: batadv_slave_0
[  225.691578][ T5605] batman_adv: batadv0: Removing interface: batadv_slave_1
[  225.699781][ T5605] hsr_slave_0: left promiscuous mode
[  225.705383][ T5605] hsr_slave_1: left promiscuous mode
[  225.711030][ T5605] batman_adv: batadv0: Removing interface: batadv_slave_0
[  225.718488][ T5605] batman_adv: batadv0: Removing interface: batadv_slave_1
[  225.726643][ T5605] hsr_slave_0: left promiscuous mode
[  225.732261][ T5605] hsr_slave_1: left promiscuous mode
[  225.737861][ T5605] batman_adv: batadv0: Removing interface: batadv_slave_0
[  225.745379][ T5605] batman_adv: batadv0: Removing interface: batadv_slave_1
[  225.765489][ T5605] team0 (unregistering): Port device team_slave_1 removed
[  225.774876][ T5605] team0 (unregistering): Port device team_slave_0 removed
[  225.851249][ T5605] team0 (unregistering): Port device team_slave_1 removed
[  225.860156][ T5605] team0 (unregistering): Port device team_slave_0 removed
[  226.463759][ T5605] IPVS: stop unused estimator thread 0...
[  226.470265][ T5605] IPVS: stop unused estimator thread 0...