last executing test programs:

29.182137341s ago: executing program 1 (id=2):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd8a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'})
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', <r5=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c0200ff", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5], 0x22c}, 0x1, 0x0, 0x0, 0x40250c5}, 0x0)

29.029914886s ago: executing program 1 (id=7):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='kfree\x00', r1}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x13, &(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYRES32=r0, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r2, 0x0, 0x6}, 0x18)
nanosleep(0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x13c}}, 0x44000)
listen(r0, 0x5)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
accept(r0, 0x0, 0x0)

28.541333912s ago: executing program 1 (id=10):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="e166a5845b907728355dfef80bb626cd8b2d9bda4b049958605c8d0437daf269ab23b4d1f36f9bceca0234e6241d4560dc707973065456743be17d01175511e4e2aa502319a98488ff728025b23a68d3e4a1dfaf2e8e44e73af6aa788150acbe8e7ac70f2f5c00661548864000f55cfc0d356b35f249311b5a02838509f986cf0050c55b180e35a6474be6f34d1f1fa0401314788276471585f25d7a46902c61f14fe239153f6694e3a837bee9d0f99b1ae28e7fccbe4d9d4d8b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000000340)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@quota}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x80, 0x11, 0x5, 0x5360, 0x7}, 0x1a, 0x6, 0x81, 0x0, 0xffffffff, 0x101, 0x0})
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x11, 0x0, "efe21a000000000008d6a4ae6dddfbd1ce5d29c2cb5e5ca9000fff7f0000117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]})
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0185879, &(0x7f0000000040)={@desc={0x1, 0x0, @desc4}})
r5 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x5, 0x0, 0x40, 0x0, 0x0, 0x7fff, 0xc6190, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9e, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x4001, 0x7, 0x7, 0x2, 0x100000001, 0x2, 0xcb, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000300)='&{!+@*\',\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0)
r6 = socket$inet(0x2, 0xa, 0x266)
ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x1, @multicast}, 0x38, {0x2, 0x0, @remote}, 'batadv_slave_1\x00'})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

28.063272758s ago: executing program 1 (id=23):
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x14, r3, 0xb29, 0x0, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}}, 0x2404c044)

26.2606508s ago: executing program 1 (id=39):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'pimreg0\x00'})
socket$netlink(0x10, 0x3, 0xb)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)

26.199921216s ago: executing program 32 (id=39):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'pimreg0\x00'})
socket$netlink(0x10, 0x3, 0xb)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c)

9.002169249s ago: executing program 5 (id=305):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x80)

8.733329265s ago: executing program 5 (id=308):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000500), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x1)
mq_timedsend(r1, &(0x7f0000001040)="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", 0xa60, 0x2b97, 0x0)

8.675740141s ago: executing program 5 (id=310):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, r2)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x800)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040800)
r3 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="000000000000b702000000000000850000008600000095000000000a0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r10, 0x0, 0xf3a, 0x0)
ioctl$int_in(r10, 0x5452, &(0x7f0000000240)=0x1)
ioctl$int_in(r10, 0x5452, &(0x7f0000000000)=0x10001)
ioctl$TUNSETCARRIER(r10, 0x400454e2, &(0x7f0000000180))
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r7})

8.564468871s ago: executing program 5 (id=311):
socket(0x1e, 0x4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x4, 0x3}], 0x10, 0xbd6}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@random="36fad3dfbd02", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0xffffffff, "9036356a3a7b5dd10a6dfe9d8851dec6045515738ce8fba0f67447092d1054cc", "5882f500351691bfb749a8052cef72bf", {"053bf786ec57938bdcf2c059f2daa330", "f4ca1ec2abeb876c84ce405b9b360ee4"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
unshare(0x22020600)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x2400, 0x10000, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x0, 0x8, 0x1, 0x3, 0x9, 0x5, 0x8, 0xacb}, 0x0)

7.920451313s ago: executing program 5 (id=319):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = getpgrp(0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000400000000000900020073797a31000000000500010007000004050005000a00000015000300686173683a69702c706f72742c6e657400"], 0x50}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="74000000090601020000ffff00000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040844)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x17)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000000)='//sys\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/46}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x10, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x0, 0x6, 0x2, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r5)
keyctl$KEYCTL_MOVE(0x1e, r5, r5, r6, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14)
unshare(0x62040200)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r8}, 0x10)
socket$igmp6(0xa, 0x3, 0x2)

7.552536988s ago: executing program 5 (id=329):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000020000000000000000800040001000000", 0x24)

1.828824765s ago: executing program 2 (id=387):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/311, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000003900000000000000000800000000000000000000000000da5f132a5d4307f9ff00075a7f30dbe5dd7252956c24ce7cc8a21197f778"], 0x50)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000004340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002180)=""/239, 0xef}, 0xfff}], 0x1, 0x2b, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r6 = socket$key(0xf, 0x3, 0x2)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
unshare(0x6c000200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
unshare(0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, 0x0, 0xa0000, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68)
sendmsg$key(r6, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a0000000000000000020013"], 0x78}, 0x1, 0x7}, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

1.555213911s ago: executing program 3 (id=392):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
pipe2$9p(&(0x7f0000000140)={<r4=>0xffffffffffffffff}, 0x2800)
r5 = socket$phonet(0x23, 0x2, 0x1)
r6 = getegid()
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=<r7=>0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2100044, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}, {@loose}, {@aname={'aname', 0x3d, 'y\xa9rustV\x1eS=\xd4\x16\x95:e\x00'}}, {@privport}, {@fscache}, {@noxattr}, {@version_9p2000}, {@uname={'uname', 0x3d, 'y\xa9rustV\x1eS=\xd4\x16\x95:e\x00'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '-\x8b'}}, {@appraise_type}, {@appraise}, {@uid_eq={'uid', 0x3d, r7}}, {@dont_hash}]}})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
setresuid(0x0, 0xee00, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00e}]}, 0x10)
request_key(0x0, 0x0, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="78b9836d626cca20f62e4110e2c4b3002037052e700abd41147455a28da09e73c2069961edd21f8481fa9de8a74d29b6e4ee0c737ded0b2115dcca410be4d6", 0x3f}], 0x1}, 0x3)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00'], 0x34}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[], 0x48)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r10 = open(0x0, 0x143142, 0x80)
ftruncate(r10, 0x2007ffb)
r11 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r11, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
sendfile(r10, r10, 0x0, 0x1000000201005)

1.508392015s ago: executing program 0 (id=393):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1.382109028s ago: executing program 0 (id=394):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x28142, 0x8)
fcntl$setlease(r0, 0x400, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
listen(r2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4)
close(r3)
accept4(r2, 0x0, 0x0, 0x80800)

1.381792418s ago: executing program 3 (id=395):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x58}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x4000, 0x10000, 0x4, 0x6, 0xe2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0)

1.208494894s ago: executing program 0 (id=398):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = io_uring_setup(0x3eae, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (fail_nth: 1)

981.523186ms ago: executing program 3 (id=399):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
dup2(r0, r0)
chdir(&(0x7f0000000540)='./cgroup\x00')
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r2 = semget(0x1, 0x4, 0x39c)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x7fff])
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10)
ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000cc0)=@newtaction={0xa4, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x90, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x4000)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xb25fea8196ea28cd)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r6, 0x0, 0xfffffffffffffffe}, 0x18)
r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]})

913.171063ms ago: executing program 0 (id=400):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
unshare(0x22020400)
r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
unshare(0x2060280)
fsmount(r2, 0x0, 0x0)

912.486203ms ago: executing program 0 (id=401):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0xfff0, 0x3, 0xc, 0x43}]}, 0x10)
listen(r2, 0x5)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
close_range(r2, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
socket(0x8000000010, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r7}, 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000680)="d9", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

794.984964ms ago: executing program 3 (id=403):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0xf}, 0x18)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x2}, 0x48)

794.559524ms ago: executing program 2 (id=404):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x1}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00', r5}, 0x18)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r6, @ANYRESDEC], 0xe8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0xfc}}, 0x0)

793.932404ms ago: executing program 2 (id=406):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

767.434277ms ago: executing program 3 (id=407):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f00000004c0)={[{@grpquota}]}, 0x0, 0x7b3, &(0x7f0000000f80)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="997425bd7000fbdbdf2502000000400001800d0001"], 0x54}, 0x1, 0x0, 0x0, 0x4004080}, 0x2400c000)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01)
syz_io_uring_setup(0x704a, &(0x7f0000000540)={0x0, 0x4, 0x11100, 0x13, 0x17d}, &(0x7f0000000100), 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ecc0dc54dbae36ee55345fb9b1757cef21aadd5a5632116803837d91f4fe5693c6298e3d51d512f65dec40cd53b3b114422d097fa03a7a54dadd9b1cca5bae166cca4063b4ac02210b886c18618e957cc1e3a48ddf3a571976c05874c8ee1df6711869b49c22060b497d953caa4aea6b31caf44347a9eeb9775f68fca4b86293308efe3886", @ANYRES8], 0x48)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCSCLOCKID(r4, 0x400445a0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10)
r6 = inotify_init1(0x0)
inotify_add_watch(r6, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x6000d16)
pause()
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000701, 0xffffffffffffffff, 0x0)

766.942346ms ago: executing program 4 (id=408):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

764.240797ms ago: executing program 2 (id=409):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x58}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x4000, 0x10000, 0x4, 0x6, 0xe2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0)

676.498995ms ago: executing program 4 (id=410):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100203, 0x20, 0xfffffffb, 0x0, 0x0, 0xec, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)

519.83045ms ago: executing program 2 (id=411):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
unshare(0x22020400)
r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
unshare(0x2060280)
fsmount(r2, 0x0, 0x0)

498.436612ms ago: executing program 2 (id=412):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000034aef23058a3596d8945295a87d15fd50b"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000880)='btrfs_clear_extent_bit\x00', r0, 0x0, 0x9}, 0x18)
r3 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000400)='./file0\x00', 0xc80, &(0x7f0000000b80)=ANY=[@ANYRESDEC=r0, @ANYRES64=0x0, @ANYBLOB="970e7742938447d7c2d9e76f49bf582e553917fde88b53cc17c33b4fa106187f13a3b7bdd924191ff47b66d44e6316a29ccedbb2f899ab09d5dccb2cd0cc4422f020234a67b3195969906ff3050b17cd5f399b980213ba29c8b90f76660ed265ba3ff99263b3af617180d67b6a0407356d4a4d9693f66892189ec7d77a9d28dcec126493741b8376f016185b4d7205fb879c4bbc46266def47507a00c92649c59a6b351a292a9cd999ea33e0476d0b0aaa8545612a0c46e6ee94b9e09d429f8370621a7ceddf39dc8ef0b0238f81f27fe6992ff21ac8bca26faf6bbc1ac79f8663126929", @ANYRESHEX=r2, @ANYRESHEX], 0x1, 0x296, &(0x7f0000000cc0)="$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")
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f00000002c0)='devfreq_monitor\x00', r4, 0x0, 0x2}, 0x18)
r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r5, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x3, 0x2, 0x10, @local}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r8, &(0x7f0000000200)="e5786a9a66b8a6d06837df6ac96f5fee0077a6f807c1ed94b6e48b80795500"/44, 0xfffffffffffffebf, 0x8000, &(0x7f0000000240)={0x2, 0x0, @broadcast}, 0x10)
capget(&(0x7f0000000640)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000300)={0x1, 0x714, 0x2, 0x1000, 0x9, 0x2})
name_to_handle_at(r3, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3ece1f6b5200000007000000060007000a000000e5ff010009080000"], &(0x7f00000004c0), 0x600)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r9, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000}, 0x20000840)
connect$unix(r10, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0)
mlock2(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0)
mlock2(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x0)

494.545842ms ago: executing program 4 (id=413):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x7})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000080)={[{@nogrpid}, {@noinit_itable}, {@jqfmt_vfsold}, {@debug}, {@nodiscard}, {@quota}]}, 0x1, 0x43d, &(0x7f0000000700)="$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")
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x100000, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'})
r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r5, 0x2007ffc)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0)
ioctl$RTC_UIE_ON(r7, 0x7003)
ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x4, 0x3b, 0x11, 0x10, 0x4, 0xe80, 0x5, 0x40}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50)
kexec_load(0x0, 0x10, &(0x7f0000000340)=[{0x0, 0x0, 0x3e0000000000}], 0x0)
sendfile(r5, r5, 0x0, 0x800000009)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @multicast2}], 0x20)
sendmmsg$inet6(r1, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="98", 0x1}], 0x1}}], 0x1, 0x4000040)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084)

228.380398ms ago: executing program 3 (id=414):
io_setup(0xb, &(0x7f00000003c0)=<r0=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))
open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
io_submit(r0, 0x2, &(0x7f0000000a80))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xff}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
r8 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r8, 0x2)
r9 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2)
r10 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r10, 0x1)
flock(r9, 0x1)
flock(r10, 0x1)
flock(r8, 0x5)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c0001800600000005470000080002"], 0x38}}, 0x0)

212.5927ms ago: executing program 4 (id=415):
pipe2$9p(0x0, 0x84800)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, &(0x7f00000000c0), 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000040000001200000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00a\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2, <r5=>0x0}, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r6}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@mcast1, <r7=>0x0}, &(0x7f00000002c0)=0x14)
bind$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x4, r7, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x14)
ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000)=0x14)
read(r1, &(0x7f00000019c0)=""/4097, 0x1001)

145.543916ms ago: executing program 4 (id=416):
syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000180), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000340)="d1b542642259d9735818877a510686c40286d860afc7ce33b293f0463910474f6363c4bc702029b1dbc843d2db1ff8c08298a5baa780449a50715bdf01bea51ebe0049ca1dfe7d123b47b0e67871d01044a36476ccdf36e312fd2228dcf1c593a03943bcbeb3cb26208988dbda40de", &(0x7f00000003c0)=@udp}, 0x20)
getsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000080))
kexec_load(0x3e00, 0x0, &(0x7f00000002c0), 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000340)={[{@quota}, {@nombcache}, {@norecovery}, {@noload}, {@noquota}, {@auto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000001280)="$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")
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001c40), 0xffffffffffffffff)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x18)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0)
close(r8)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000001d00)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x1c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x0)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000001d80)={0x8, 0x12, 0x2, 0x7, 0x0, [@empty, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}, 0x98)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x7ff, <r9=>r2, 'id0\x00'})
ioctl$SNAPSHOT_CREATE_IMAGE(r9, 0x40043311, &(0x7f0000000000))
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r10, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000000040), 0x1e)
recvmmsg$unix(r9, &(0x7f0000001b00)=[{{&(0x7f0000000440), 0x6e, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/166, 0xa6}, {&(0x7f0000000580)=""/32, 0x20}, {&(0x7f00000005c0)=""/109, 0x6d}], 0x3, &(0x7f0000000680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f00000008c0), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000940)=""/150, 0x96}, {&(0x7f0000000a00)=""/102, 0x66}], 0x2, &(0x7f0000000ac0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000000b40)=@abs, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000bc0)=""/62, 0x3e}, {&(0x7f0000001f40)=""/146, 0x92}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/103, 0x67}, {&(0x7f0000000e40)=""/110, 0x6e}], 0x6, &(0x7f0000000f40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000000f80), 0x6e, &(0x7f00000019c0)=[{&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f0000001000)}, {&(0x7f0000001040)=""/194, 0xc2}, {&(0x7f0000001140)=""/76, 0x4c}, {&(0x7f00000011c0)=""/126, 0x7e}, {&(0x7f0000001740)=""/128, 0x80}, {&(0x7f0000001240)=""/49, 0x31}, {&(0x7f00000017c0)=""/171, 0xab}, {&(0x7f0000001880)=""/204, 0xcc}, {&(0x7f0000001980)=""/39, 0x27}], 0xa, &(0x7f0000001a80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x4, 0x2003, &(0x7f0000001c00))
r11 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001e40)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x700}, 0x10}, 0x1, 0x7}, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001d40)={'ip_vti0\x00'})

392.51µs ago: executing program 0 (id=417):
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
r1 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x18)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002080)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4000004, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffe00, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa, 0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x1, 0x10000, 0x0, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x3, 0x0, 0x80000001, 0x0, 0xfff7fffc, 0x80, 0x1, 0x0, 0x0, 0x0, 0x400, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc74, 0x0, 0xffffffff, 0x10, 0x1, 0x7, 0x400000, 0x0, 0x3, 0x40005, 0x1, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0xffffffb3, 0x1, 0x0, 0x3, 0x0, 0x9, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xffffffff, 0x0, 0x0, 0xffff, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1002, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x620, 0x0, 0x9, 0x0, 0x0, 0x2, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x10001, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x200, 0x6, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3, 0x80000001, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10, {0x7, 0x0, 0xba6d, 0x0, 0x0, 0xffffffff}}}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa, {0x1, 0x3}}}}]}]}, 0x488}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000000000000000000e123d8bee4001000000085000000a8000000959e539497ed8d59e500000000000000a92521d1df7f18ce4e14f9ffcf93868ab0b36e46fb364a933561c13737288e0247f4a83d29dc647b0f14f21e059c3fd22b7fad92e78238d4012ae71de87026672a52ec9333f928234a1b49160d92bbb56ecc98689a789c102ee2550434f7d9ef1a52fdeb2cd8e1d61b52aef48f2926a754bd7e45ebfd158566d59e940a802e54032374000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r7)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@sr0, 0x0, &(0x7f00000001c0)='./file0\x00')
r8 = open(0x0, 0x8060, 0x0)
fcntl$setlease(r8, 0x400, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0xc0200, 0x100)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r9=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r9, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
fcntl$setsig(r2, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8)
setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000000)=0x7b, 0x4)
dup2(r2, r3)
fcntl$setown(r2, 0x8, r1)
tkill(r1, 0x13)

0s ago: executing program 4 (id=418):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x6, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000afa200000000000007020000f8ffffffb703000008000000b7040000dd1800008500000016000000952ee1078144603672210a6f015bc3644bbee90d38b50d10bf4b37105592c4af5be68fa6025b64088f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x101, 0x85022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
close(r2)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x525, &(0x7f0000002700)="$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")
lremovexattr(&(0x7f0000000000)='./file2\x00', &(0x7f00000002c0)=@known='system.posix_acl_access\x00')
r3 = socket(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@init_itable}, {@nogrpid}, {@stripe}, {@noblock_validity}, {@i_version}, {@nouser_xattr}]}, 0x3, 0x46a, &(0x7f0000002280)="$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")
truncate(&(0x7f0000000000)='./bus\x00', 0x9471)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x4010, 0xffffffffffffffff, 0xb6d80000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000340)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00')
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe6000400000000008000f00fd000000", 0x24)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.10.6' (ED25519) to the list of known hosts.
[   27.763513][   T29] kauditd_printk_skb: 3 callbacks suppressed
[   27.763528][   T29] audit: type=1400 audit(1766216889.366:70): avc:  denied  { mounton } for  pid=3307 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   27.792457][   T29] audit: type=1400 audit(1766216889.396:71): avc:  denied  { mount } for  pid=3307 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.793202][ T3307] cgroup: Unknown subsys name 'net'
[   27.820088][   T29] audit: type=1400 audit(1766216889.426:72): avc:  denied  { unmount } for  pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.949602][ T3307] cgroup: Unknown subsys name 'cpuset'
[   27.955637][ T3307] cgroup: Unknown subsys name 'rlimit'
[   28.124564][   T29] audit: type=1400 audit(1766216889.726:73): avc:  denied  { setattr } for  pid=3307 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   28.147839][   T29] audit: type=1400 audit(1766216889.726:74): avc:  denied  { create } for  pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.168399][   T29] audit: type=1400 audit(1766216889.726:75): avc:  denied  { write } for  pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.188794][   T29] audit: type=1400 audit(1766216889.726:76): avc:  denied  { read } for  pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.209054][   T29] audit: type=1400 audit(1766216889.736:77): avc:  denied  { mounton } for  pid=3307 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   28.214650][ T3310] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   28.233874][   T29] audit: type=1400 audit(1766216889.736:78): avc:  denied  { mount } for  pid=3307 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   28.265653][   T29] audit: type=1400 audit(1766216889.776:79): avc:  denied  { read } for  pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   28.287239][ T3307] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   29.574970][ T3322] chnl_net:caif_netlink_parms(): no params data found
[   29.631130][ T3318] chnl_net:caif_netlink_parms(): no params data found
[   29.657287][ T3317] chnl_net:caif_netlink_parms(): no params data found
[   29.698349][ T3324] chnl_net:caif_netlink_parms(): no params data found
[   29.719864][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.726991][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.734159][ T3322] bridge_slave_0: entered allmulticast mode
[   29.740683][ T3322] bridge_slave_0: entered promiscuous mode
[   29.756546][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.763609][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.771002][ T3322] bridge_slave_1: entered allmulticast mode
[   29.777342][ T3322] bridge_slave_1: entered promiscuous mode
[   29.810457][ T3329] chnl_net:caif_netlink_parms(): no params data found
[   29.822766][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.829849][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.836930][ T3318] bridge_slave_0: entered allmulticast mode
[   29.843294][ T3318] bridge_slave_0: entered promiscuous mode
[   29.863828][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.870961][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.878126][ T3318] bridge_slave_1: entered allmulticast mode
[   29.884569][ T3318] bridge_slave_1: entered promiscuous mode
[   29.891891][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.904298][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.920915][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.927989][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.935209][ T3317] bridge_slave_0: entered allmulticast mode
[   29.941581][ T3317] bridge_slave_0: entered promiscuous mode
[   29.965772][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.972877][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.980129][ T3317] bridge_slave_1: entered allmulticast mode
[   29.986494][ T3317] bridge_slave_1: entered promiscuous mode
[   30.002759][ T3322] team0: Port device team_slave_0 added
[   30.015648][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.029302][ T3322] team0: Port device team_slave_1 added
[   30.041622][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.051777][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.060892][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.067944][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.075090][ T3324] bridge_slave_0: entered allmulticast mode
[   30.081425][ T3324] bridge_slave_0: entered promiscuous mode
[   30.102058][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.111254][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.118283][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.125544][ T3324] bridge_slave_1: entered allmulticast mode
[   30.132113][ T3324] bridge_slave_1: entered promiscuous mode
[   30.160241][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.167193][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.193194][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.203901][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.210961][ T3329] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.218190][ T3329] bridge_slave_0: entered allmulticast mode
[   30.224712][ T3329] bridge_slave_0: entered promiscuous mode
[   30.231843][ T3318] team0: Port device team_slave_0 added
[   30.247203][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.254229][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.280212][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.291725][ T3318] team0: Port device team_slave_1 added
[   30.297394][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.304511][ T3329] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.311795][ T3329] bridge_slave_1: entered allmulticast mode
[   30.318064][ T3329] bridge_slave_1: entered promiscuous mode
[   30.324957][ T3317] team0: Port device team_slave_0 added
[   30.331358][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.352671][ T3317] team0: Port device team_slave_1 added
[   30.359305][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.395416][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.402465][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.428385][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.440250][ T3329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.449603][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.456517][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.482446][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.502013][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.508975][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.534927][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.546534][ T3329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.560673][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.567598][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.593674][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.604986][ T3324] team0: Port device team_slave_0 added
[   30.612676][ T3322] hsr_slave_0: entered promiscuous mode
[   30.618646][ T3322] hsr_slave_1: entered promiscuous mode
[   30.638420][ T3324] team0: Port device team_slave_1 added
[   30.646015][ T3329] team0: Port device team_slave_0 added
[   30.652914][ T3329] team0: Port device team_slave_1 added
[   30.696799][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.703782][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.729715][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.746515][ T3318] hsr_slave_0: entered promiscuous mode
[   30.752543][ T3318] hsr_slave_1: entered promiscuous mode
[   30.758403][ T3318] debugfs: 'hsr0' already exists in 'hsr'
[   30.764138][ T3318] Cannot create hsr debugfs directory
[   30.769766][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.776692][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.802646][ T3329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.813529][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.820588][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.846536][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.859237][ T3317] hsr_slave_0: entered promiscuous mode
[   30.865240][ T3317] hsr_slave_1: entered promiscuous mode
[   30.871223][ T3317] debugfs: 'hsr0' already exists in 'hsr'
[   30.876961][ T3317] Cannot create hsr debugfs directory
[   30.887277][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.894229][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.920179][ T3329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.996223][ T3329] hsr_slave_0: entered promiscuous mode
[   31.002307][ T3329] hsr_slave_1: entered promiscuous mode
[   31.008108][ T3329] debugfs: 'hsr0' already exists in 'hsr'
[   31.013894][ T3329] Cannot create hsr debugfs directory
[   31.034578][ T3324] hsr_slave_0: entered promiscuous mode
[   31.040589][ T3324] hsr_slave_1: entered promiscuous mode
[   31.046326][ T3324] debugfs: 'hsr0' already exists in 'hsr'
[   31.052069][ T3324] Cannot create hsr debugfs directory
[   31.181691][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   31.195493][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   31.210005][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   31.225553][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   31.242724][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   31.253548][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   31.269369][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   31.280885][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   31.295089][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   31.306669][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   31.317756][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   31.328960][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   31.356801][ T3329] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   31.366733][ T3329] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   31.376796][ T3329] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   31.387425][ T3329] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   31.424028][ T3324] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   31.434586][ T3324] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   31.444056][ T3324] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   31.456496][ T3324] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   31.469464][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.502156][ T3322] 8021q: adding VLAN 0 to HW filter on device team0
[   31.526888][ T1974] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.533951][ T1974] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.542881][ T1974] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.549928][ T1974] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.567194][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.580345][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.602585][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.621889][ T3318] 8021q: adding VLAN 0 to HW filter on device team0
[   31.629893][ T3324] 8021q: adding VLAN 0 to HW filter on device team0
[   31.639398][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.651335][ T3317] 8021q: adding VLAN 0 to HW filter on device team0
[   31.667048][  T923] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.674174][  T923] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.682770][  T923] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.689809][  T923] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.699157][  T923] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.706260][  T923] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.723547][ T3329] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.731981][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.739085][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.750704][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.757799][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.766860][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.773944][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.803798][ T3329] 8021q: adding VLAN 0 to HW filter on device team0
[   31.820513][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.827629][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.844750][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.851816][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.868015][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.924786][ T3329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.935220][ T3329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.963623][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.984226][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.026641][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.060651][ T3329] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.112015][ T3322] veth0_vlan: entered promiscuous mode
[   32.120440][ T3322] veth1_vlan: entered promiscuous mode
[   32.169840][ T3322] veth0_macvtap: entered promiscuous mode
[   32.180263][ T3322] veth1_macvtap: entered promiscuous mode
[   32.223374][ T3317] veth0_vlan: entered promiscuous mode
[   32.230872][ T3318] veth0_vlan: entered promiscuous mode
[   32.237737][ T3329] veth0_vlan: entered promiscuous mode
[   32.250924][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.258334][ T3317] veth1_vlan: entered promiscuous mode
[   32.269438][ T3318] veth1_vlan: entered promiscuous mode
[   32.279304][ T3329] veth1_vlan: entered promiscuous mode
[   32.290484][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.301445][ T3324] veth0_vlan: entered promiscuous mode
[   32.311784][ T2157] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.321422][ T3324] veth1_vlan: entered promiscuous mode
[   32.327960][ T2157] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.337544][ T2157] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.346702][ T2157] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.370022][ T3317] veth0_macvtap: entered promiscuous mode
[   32.377518][ T3329] veth0_macvtap: entered promiscuous mode
[   32.385829][ T3317] veth1_macvtap: entered promiscuous mode
[   32.394666][ T3318] veth0_macvtap: entered promiscuous mode
[   32.402764][ T3329] veth1_macvtap: entered promiscuous mode
[   32.415937][ T3318] veth1_macvtap: entered promiscuous mode
[   32.424237][ T3324] veth0_macvtap: entered promiscuous mode
[   32.432681][ T3324] veth1_macvtap: entered promiscuous mode
[   32.449400][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.467369][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.475647][ T3322] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   32.492473][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.503568][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.520002][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.528354][ T2290] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.540930][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.553171][ T2290] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.559282][ T3487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   32.562961][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.582074][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.589947][ T2290] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.603462][ T2290] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.612435][ T2290] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.621932][ T2290] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.630904][ T2290] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.642220][ T3487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   32.654502][ T2290] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.674569][  T156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.694915][  T156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.719521][  T156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.748189][  T156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.769125][   T29] kauditd_printk_skb: 40 callbacks suppressed
[   32.769142][   T29] audit: type=1326 audit(1766216894.366:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3e2265f749 code=0x7ffc0000
[   32.788789][  T156] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.813993][ T3492] loop2: detected capacity change from 0 to 2048
[   32.864228][ T3492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.876880][  T156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.897079][  T156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.932210][   T29] audit: type=1400 audit(1766216894.376:121): avc:  denied  { write } for  pid=3495 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   32.952559][   T29] audit: type=1326 audit(1766216894.406:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2265f749 code=0x7ffc0000
[   32.953701][ T3492] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   32.975725][   T29] audit: type=1326 audit(1766216894.406:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3e2265f749 code=0x7ffc0000
[   32.975809][   T29] audit: type=1326 audit(1766216894.406:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2265f749 code=0x7ffc0000
[   33.001354][  T156] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.009053][   T29] audit: type=1326 audit(1766216894.406:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e2265f749 code=0x7ffc0000
[   33.040823][ T3512] FAULT_INJECTION: forcing a failure.
[   33.040823][ T3512] name failslab, interval 1, probability 0, space 0, times 1
[   33.063758][   T29] audit: type=1326 audit(1766216894.406:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2265f749 code=0x7ffc0000
[   33.063794][   T29] audit: type=1326 audit(1766216894.406:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3e2265f749 code=0x7ffc0000
[   33.063838][   T29] audit: type=1326 audit(1766216894.406:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2265f749 code=0x7ffc0000
[   33.076427][ T3512] CPU: 1 UID: 0 PID: 3512 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   33.076455][ T3512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   33.076470][ T3512] Call Trace:
[   33.076480][ T3512]  <TASK>
[   33.076488][ T3512]  __dump_stack+0x1d/0x30
[   33.076517][ T3512]  dump_stack_lvl+0xe8/0x140
[   33.076547][ T3512]  dump_stack+0x15/0x1b
[   33.076613][ T3512]  should_fail_ex+0x265/0x280
[   33.076640][ T3512]  should_failslab+0x8c/0xb0
[   33.076668][ T3512]  __kmalloc_cache_noprof+0x65/0x4c0
[   33.076813][ T3512]  ? getname_kernel+0xb6/0x1f0
[   33.076843][ T3512]  getname_kernel+0xb6/0x1f0
[   33.076907][ T3512]  kern_path+0x23/0x130
[   33.076963][ T3512]  lookup_bdev+0x66/0x150
[   33.076990][ T3512]  __se_sys_quotactl+0x1b7/0x670
[   33.077019][ T3512]  __x64_sys_quotactl+0x55/0x70
[   33.077043][ T3512]  x64_sys_call+0x19a4/0x3000
[   33.077119][ T3512]  do_syscall_64+0xd8/0x2c0
[   33.077158][ T3512]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   33.077220][ T3512] RIP: 0033:0x7f3880e2f749
[   33.077236][ T3512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   33.077256][ T3512] RSP: 002b:00007f387f897038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[   33.077281][ T3512] RAX: ffffffffffffffda RBX: 00007f3881085fa0 RCX: 00007f3880e2f749
[   33.077295][ T3512] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: ffffffff80000200
[   33.077309][ T3512] RBP: 00007f387f897090 R08: 0000000000000000 R09: 0000000000000000
[   33.077380][ T3512] R10: 0000200000001ac0 R11: 0000000000000246 R12: 0000000000000002
[   33.077393][ T3512] R13: 00007f3881086038 R14: 00007f3881085fa0 R15: 00007fff1db34948
[   33.077428][ T3512]  </TASK>
[   33.316732][   T29] audit: type=1326 audit(1766216894.406:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3e2265f749 code=0x7ffc0000
[   33.401108][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.467967][ T3520] loop1: detected capacity change from 0 to 1024
[   33.482986][ T3520] =======================================================
[   33.482986][ T3520] WARNING: The mand mount option has been deprecated and
[   33.482986][ T3520]          and is ignored by this kernel. Remove the mand
[   33.482986][ T3520]          option from the mount to silence this warning.
[   33.482986][ T3520] =======================================================
[   33.548803][    C1] hrtimer: interrupt took 36798 ns
[   33.556273][ T3520] EXT4-fs: Ignoring removed nobh option
[   33.562041][ T3520] EXT4-fs: Ignoring removed bh option
[   33.619710][ T3520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.760276][ T3544] vhci_hcd vhci_hcd.2: invalid port number 96
[   33.766380][ T3544] vhci_hcd vhci_hcd.2: default hub control req: 8011 v0005 i0060 l7
[   33.808859][ T3520] loop1: detected capacity change from 1024 to 64
[   33.820688][ T3520] syz.1.10: attempt to access beyond end of device
[   33.820688][ T3520] loop1: rw=8388611, sector=226, nr_sectors = 6 limit=64
[   33.854680][ T3520] syz.1.10: attempt to access beyond end of device
[   33.854680][ T3520] loop1: rw=8390659, sector=232, nr_sectors = 762 limit=64
[   33.907238][ T3520] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET)
[   33.938383][ T3329] EXT4-fs warning (device loop1): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   33.952779][ T3329] EXT4-fs warning (device loop1): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   33.980672][ T3329] EXT4-fs warning (device loop1): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   34.012323][ T3329] EXT4-fs warning (device loop1): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   34.026398][ T3329] EXT4-fs warning (device loop1): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   34.048617][ T3329] EXT4-fs warning (device loop1): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   34.071883][ T3329] EXT4-fs warning (device loop1): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   34.093513][ T3329] EXT4-fs warning (device loop1): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   34.094757][ T3564] tracefs: Unknown parameter 'ui['
[   34.107319][ T3329] EXT4-fs warning (device loop1): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   34.130678][ T3329] EXT4-fs warning (device loop1): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   34.135740][ T3562] loop3: detected capacity change from 0 to 764
[   34.209648][ T3562] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   34.548946][ T3574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.28'.
[   34.629844][ T3570] loop0: detected capacity change from 0 to 2048
[   34.689986][ T3570]  loop0: p1 < > p4
[   34.700882][ T3570] loop0: p4 size 8388608 extends beyond EOD, truncated
[   34.864002][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   35.070373][ T3562] syz.3.25 (3562) used greatest stack depth: 6120 bytes left
[   35.179670][ T3547] Zero length message leads to an empty skb
[   35.431857][ T3587] Unsupported ieee802154 address type: 0
[   35.650812][ T3329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.663742][ T1986] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.675198][ T3527] kmmpd-loop1: attempt to access beyond end of device
[   35.675198][ T3527] loop1: rw=8402945, sector=128, nr_sectors = 2 limit=64
[   35.688973][ T3527] Buffer I/O error on dev loop1, logical block 64, lost sync page write
[   35.771834][ T3601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.788259][ T3601] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.842950][ T3601] syzkaller0: entered promiscuous mode
[   35.848452][ T3601] syzkaller0: entered allmulticast mode
[   35.912471][ T3600] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   36.082862][ T3619] loop0: detected capacity change from 0 to 4096
[   36.108960][ T3619] ext4: Invalid gid '0x00000000ffffffff'
[   36.166104][ T1986] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.195108][ T3626] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   36.256993][ T1986] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.294524][ T3635] lo speed is unknown, defaulting to 1000
[   36.294936][ T3609] chnl_net:caif_netlink_parms(): no params data found
[   36.310381][ T3635] lo speed is unknown, defaulting to 1000
[   36.318694][ T3635] lo speed is unknown, defaulting to 1000
[   36.336983][ T1986] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.339083][ T3635] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   36.356097][ T3635] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   36.379894][ T3635] lo speed is unknown, defaulting to 1000
[   36.519893][ T3635] lo speed is unknown, defaulting to 1000
[   36.526302][ T3635] lo speed is unknown, defaulting to 1000
[   36.532387][ T3635] lo speed is unknown, defaulting to 1000
[   36.538552][ T3635] lo speed is unknown, defaulting to 1000
[   36.569133][ T3609] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.576211][ T3609] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.590621][ T3609] bridge_slave_0: entered allmulticast mode
[   36.597232][ T3609] bridge_slave_0: entered promiscuous mode
[   36.601807][ T3652] loop2: detected capacity change from 0 to 764
[   36.604624][ T3635] lo speed is unknown, defaulting to 1000
[   36.622965][ T1986] bridge_slave_1: left allmulticast mode
[   36.628788][ T1986] bridge_slave_1: left promiscuous mode
[   36.634432][ T1986] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.644026][ T3652] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   36.667799][ T3654] netlink: 'syz.3.52': attribute type 1 has an invalid length.
[   36.685659][ T1986] bridge_slave_0: left allmulticast mode
[   36.691365][ T1986] bridge_slave_0: left promiscuous mode
[   36.697104][ T1986] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.773559][ T1986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   36.793054][ T1986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   36.803789][ T1986] bond0 (unregistering): Released all slaves
[   36.813469][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.820569][ T3609] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.827792][ T3609] bridge_slave_1: entered allmulticast mode
[   36.837863][ T3609] bridge_slave_1: entered promiscuous mode
[   36.863859][ T3657] erspan1: entered allmulticast mode
[   36.882223][ T3654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'.
[   36.904649][ T1986] hsr_slave_0: left promiscuous mode
[   36.911140][ T1986] hsr_slave_1: left promiscuous mode
[   36.916838][ T1986] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   36.924697][ T1986] batman_adv: batadv0: Removing interface: batadv_slave_0
[   36.933353][ T1986] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   36.940910][ T1986] batman_adv: batadv0: Removing interface: batadv_slave_1
[   36.962076][ T1986] veth1_macvtap: left promiscuous mode
[   36.967694][ T1986] veth0_macvtap: left promiscuous mode
[   36.973594][ T1986] veth1_vlan: left promiscuous mode
[   36.978994][ T1986] veth0_vlan: left promiscuous mode
[   36.992370][ T3672] netlink: 324 bytes leftover after parsing attributes in process `syz.0.57'.
[   37.034405][ T3672] loop0: detected capacity change from 0 to 512
[   37.062902][ T3672] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[   37.082647][ T3672] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.57: iget: bogus i_mode (5)
[   37.104415][ T3672] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.57: couldn't read orphan inode 15 (err -117)
[   37.122915][ T1986] team0 (unregistering): Port device team_slave_1 removed
[   37.124634][ T3672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.142882][ T3672] ext2 filesystem being mounted at /15/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.146852][ T1986] team0 (unregistering): Port device team_slave_0 removed
[   37.161069][ T3672] EXT4-fs error (device loop0): ext4_add_entry:2415: inode #2: comm syz.0.57: Directory hole found for htree leaf block 0
[   37.194532][ T3609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.204221][ T3674] netlink: 204 bytes leftover after parsing attributes in process `gtp'.
[   37.214909][ T3609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.224091][ T3672] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   37.261763][ T3609] team0: Port device team_slave_0 added
[   37.280051][ T3609] team0: Port device team_slave_1 added
[   37.280105][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.416664][ T3683] mmap: syz.0.59 (3683) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   37.456462][ T3609] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.463482][ T3609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.489535][ T3609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.536737][ T3609] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.543825][ T3609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.569822][ T3609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.700322][ T3609] hsr_slave_0: entered promiscuous mode
[   37.706494][ T3609] hsr_slave_1: entered promiscuous mode
[   37.726316][ T3700] loop4: detected capacity change from 0 to 1024
[   37.739472][ T3609] debugfs: 'hsr0' already exists in 'hsr'
[   37.745249][ T3609] Cannot create hsr debugfs directory
[   37.800003][ T3700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.851638][   T29] kauditd_printk_skb: 5106 callbacks suppressed
[   37.851653][   T29] audit: type=1400 audit(1766216899.456:5236): avc:  denied  { read } for  pid=3699 comm="syz.4.67" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   37.880639][   T29] audit: type=1400 audit(1766216899.456:5237): avc:  denied  { open } for  pid=3699 comm="syz.4.67" path="/15/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   38.025753][   T29] audit: type=1400 audit(1766216899.616:5238): avc:  denied  { name_bind } for  pid=3713 comm="syz.0.69" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   38.047688][   T29] audit: type=1400 audit(1766216899.616:5239): avc:  denied  { node_bind } for  pid=3713 comm="syz.0.69" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   38.056037][ T3609] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   38.124786][ T3609] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   38.137586][ T3609] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   38.150663][ T3609] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   38.275481][ T3609] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.295861][ T3609] 8021q: adding VLAN 0 to HW filter on device team0
[   38.315501][  T156] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.322595][  T156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.355305][  T156] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.362404][  T156] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.428674][ T3609] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.571244][ T3609] veth0_vlan: entered promiscuous mode
[   38.593443][ T3609] veth1_vlan: entered promiscuous mode
[   38.593678][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.628311][ T3609] veth0_macvtap: entered promiscuous mode
[   38.646888][ T3609] veth1_macvtap: entered promiscuous mode
[   38.670974][ T3609] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.680534][ T3744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.71'.
[   38.708882][ T3744] team0 (unregistering): Port device team_slave_0 removed
[   38.723341][ T3744] team0 (unregistering): Port device team_slave_1 removed
[   38.737947][ T3609] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.751425][  T923] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.782089][   T29] audit: type=1400 audit(1766216900.386:5240): avc:  denied  { mounton } for  pid=3609 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   38.800986][ T3749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.805497][  T923] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.868810][  T923] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.877638][  T923] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.887148][ T3749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.981105][   T29] audit: type=1400 audit(1766216900.506:5241): avc:  denied  { bind } for  pid=3752 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   39.170477][ T3757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.40'.
[   39.285017][   T29] audit: type=1400 audit(1766216900.886:5242): avc:  denied  { create } for  pid=3769 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   39.306737][   T29] audit: type=1400 audit(1766216900.886:5243): avc:  denied  { write } for  pid=3769 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   39.505725][   T29] audit: type=1400 audit(1766216901.106:5244): avc:  denied  { block_suspend } for  pid=3778 comm="syz.2.82" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   39.629487][   T29] audit: type=1400 audit(1766216901.236:5245): avc:  denied  { getopt } for  pid=3782 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   39.816026][ T3790] syzkaller1: entered promiscuous mode
[   39.821627][ T3790] syzkaller1: entered allmulticast mode
[   40.309993][ T3823] netlink: 'syz.3.98': attribute type 21 has an invalid length.
[   40.334850][ T3827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'.
[   40.372494][ T3829] FAULT_INJECTION: forcing a failure.
[   40.372494][ T3829] name failslab, interval 1, probability 0, space 0, times 0
[   40.385233][ T3829] CPU: 0 UID: 0 PID: 3829 Comm: syz.4.100 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   40.385265][ T3829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   40.385301][ T3829] Call Trace:
[   40.385308][ T3829]  <TASK>
[   40.385316][ T3829]  __dump_stack+0x1d/0x30
[   40.385349][ T3829]  dump_stack_lvl+0xe8/0x140
[   40.385377][ T3829]  dump_stack+0x15/0x1b
[   40.385402][ T3829]  should_fail_ex+0x265/0x280
[   40.385495][ T3829]  should_failslab+0x8c/0xb0
[   40.385524][ T3829]  __kmalloc_node_track_caller_noprof+0xb9/0x5b0
[   40.385563][ T3829]  ? sidtab_sid2str_get+0xa0/0x130
[   40.385649][ T3829]  kmemdup_noprof+0x2b/0x70
[   40.385672][ T3829]  sidtab_sid2str_get+0xa0/0x130
[   40.385789][ T3829]  security_sid_to_context_core+0x1eb/0x2e0
[   40.385871][ T3829]  security_sid_to_context+0x27/0x40
[   40.385908][ T3829]  selinux_lsmprop_to_secctx+0x67/0xf0
[   40.385948][ T3829]  security_lsmprop_to_secctx+0x1a3/0x1c0
[   40.386017][ T3829]  audit_log_subj_ctx+0xa4/0x3e0
[   40.386045][ T3829]  ? skb_put+0xa9/0xf0
[   40.386076][ T3829]  audit_log_task_context+0x48/0x70
[   40.386105][ T3829]  audit_log_task+0xf4/0x250
[   40.386201][ T3829]  ? kstrtouint+0x76/0xc0
[   40.386227][ T3829]  audit_seccomp+0x61/0x100
[   40.386264][ T3829]  ? __seccomp_filter+0x832/0x1260
[   40.386295][ T3829]  __seccomp_filter+0x843/0x1260
[   40.386379][ T3829]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   40.386465][ T3829]  ? vfs_write+0x7e8/0x960
[   40.386488][ T3829]  ? __cond_resched+0x4e/0x90
[   40.386622][ T3829]  __secure_computing+0x82/0x150
[   40.386685][ T3829]  syscall_trace_enter+0xcf/0x1e0
[   40.386716][ T3829]  do_syscall_64+0xb2/0x2c0
[   40.386801][ T3829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.386827][ T3829] RIP: 0033:0x7f3880e2f749
[   40.386845][ T3829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.386961][ T3829] RSP: 002b:00007f387f897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   40.386985][ T3829] RAX: ffffffffffffffda RBX: 00007f3881085fa0 RCX: 00007f3880e2f749
[   40.387000][ T3829] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000003
[   40.387015][ T3829] RBP: 00007f387f897090 R08: 0000000000000010 R09: 0000000000000000
[   40.387031][ T3829] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[   40.387098][ T3829] R13: 00007f3881086038 R14: 00007f3881085fa0 R15: 00007fff1db34948
[   40.387123][ T3829]  </TASK>
[   40.444157][ T3806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.527652][ T3829] pimreg: entered allmulticast mode
[   40.529025][ T3806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.709795][ T3839] tmpfs: Unknown parameter 'defcontextC'
[   40.719083][ T3839] loop5: detected capacity change from 0 to 128
[   40.776788][ T3842] FAULT_INJECTION: forcing a failure.
[   40.776788][ T3842] name failslab, interval 1, probability 0, space 0, times 0
[   40.789458][ T3842] CPU: 1 UID: 0 PID: 3842 Comm: syz.5.106 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   40.789562][ T3842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   40.789577][ T3842] Call Trace:
[   40.789584][ T3842]  <TASK>
[   40.789592][ T3842]  __dump_stack+0x1d/0x30
[   40.789622][ T3842]  dump_stack_lvl+0xe8/0x140
[   40.789737][ T3842]  dump_stack+0x15/0x1b
[   40.789761][ T3842]  should_fail_ex+0x265/0x280
[   40.789790][ T3842]  should_failslab+0x8c/0xb0
[   40.789818][ T3842]  kmem_cache_alloc_noprof+0x69/0x4b0
[   40.789845][ T3842]  ? skb_clone+0x151/0x1f0
[   40.789893][ T3842]  skb_clone+0x151/0x1f0
[   40.789963][ T3842]  __netlink_deliver_tap+0x2c9/0x500
[   40.790005][ T3842]  netlink_unicast+0x66b/0x690
[   40.790041][ T3842]  netlink_sendmsg+0x58b/0x6b0
[   40.790138][ T3842]  ? __pfx_netlink_sendmsg+0x10/0x10
[   40.790176][ T3842]  __sock_sendmsg+0x145/0x180
[   40.790199][ T3842]  ____sys_sendmsg+0x31e/0x4a0
[   40.790315][ T3842]  ___sys_sendmsg+0x17b/0x1d0
[   40.790359][ T3842]  __x64_sys_sendmsg+0xd4/0x160
[   40.790402][ T3842]  x64_sys_call+0x17ba/0x3000
[   40.790432][ T3842]  do_syscall_64+0xd8/0x2c0
[   40.790485][ T3842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.790512][ T3842] RIP: 0033:0x7f5c8f16f749
[   40.790533][ T3842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.790554][ T3842] RSP: 002b:00007f5c8dbd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   40.790574][ T3842] RAX: ffffffffffffffda RBX: 00007f5c8f3c5fa0 RCX: 00007f5c8f16f749
[   40.790639][ T3842] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000007
[   40.790653][ T3842] RBP: 00007f5c8dbd7090 R08: 0000000000000000 R09: 0000000000000000
[   40.790668][ T3842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   40.790680][ T3842] R13: 00007f5c8f3c6038 R14: 00007f5c8f3c5fa0 R15: 00007ffcf4b93ee8
[   40.790701][ T3842]  </TASK>
[   41.137779][ T3850] process 'syz.5.108' launched '/dev/fd/13' with NULL argv: empty string added
[   41.242678][ T3859] loop0: detected capacity change from 0 to 512
[   41.243190][ T3859] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   41.243205][ T3859] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   41.244329][ T3859] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   41.244523][ T3859] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   41.244641][ T3859] EXT4-fs (loop0): 1 truncate cleaned up
[   41.245102][ T3859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.343956][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.500022][ T3879] bond0: (slave bond_slave_1): Releasing backup interface
[   41.863773][ T3895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.120'.
[   41.875274][ T3894] FAULT_INJECTION: forcing a failure.
[   41.875274][ T3894] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   41.888485][ T3894] CPU: 1 UID: 0 PID: 3894 Comm: syz.4.123 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   41.888512][ T3894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   41.888525][ T3894] Call Trace:
[   41.888531][ T3894]  <TASK>
[   41.888539][ T3894]  __dump_stack+0x1d/0x30
[   41.888569][ T3894]  dump_stack_lvl+0xe8/0x140
[   41.888611][ T3894]  dump_stack+0x15/0x1b
[   41.888636][ T3894]  should_fail_ex+0x265/0x280
[   41.888667][ T3894]  should_fail+0xb/0x20
[   41.888692][ T3894]  should_fail_usercopy+0x1a/0x20
[   41.888757][ T3894]  _copy_to_user+0x20/0xa0
[   41.888818][ T3894]  ucma_query+0xb51/0xd60
[   41.888853][ T3894]  ? path_openat+0x1e82/0x23b0
[   41.888893][ T3894]  ? _parse_integer+0x27/0x40
[   41.888916][ T3894]  ? kstrtoull+0x111/0x140
[   41.888940][ T3894]  ? kstrtouint+0x76/0xc0
[   41.888996][ T3894]  ? kstrtouint_from_user+0x9f/0xf0
[   41.889018][ T3894]  ? should_fail_ex+0xdb/0x280
[   41.889044][ T3894]  ucma_write+0x1b3/0x250
[   41.889146][ T3894]  ? __pfx_ucma_write+0x10/0x10
[   41.889239][ T3894]  vfs_write+0x269/0x960
[   41.889295][ T3894]  ? __rcu_read_unlock+0x4f/0x70
[   41.889316][ T3894]  ? __fget_files+0x184/0x1c0
[   41.889344][ T3894]  ksys_write+0xda/0x1a0
[   41.889418][ T3894]  __x64_sys_write+0x40/0x50
[   41.889454][ T3894]  x64_sys_call+0x2847/0x3000
[   41.889480][ T3894]  do_syscall_64+0xd8/0x2c0
[   41.889527][ T3894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.889549][ T3894] RIP: 0033:0x7f3880e2f749
[   41.889624][ T3894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   41.889646][ T3894] RSP: 002b:00007f387f897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   41.889665][ T3894] RAX: ffffffffffffffda RBX: 00007f3881085fa0 RCX: 00007f3880e2f749
[   41.889743][ T3894] RDX: 0000000000000018 RSI: 0000200000000000 RDI: 0000000000000006
[   41.889758][ T3894] RBP: 00007f387f897090 R08: 0000000000000000 R09: 0000000000000000
[   41.889772][ T3894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   41.889784][ T3894] R13: 00007f3881086038 R14: 00007f3881085fa0 R15: 00007fff1db34948
[   41.889802][ T3894]  </TASK>
[   42.127223][ T3875] loop2: detected capacity change from 0 to 32768
[   42.199160][ T3504]  loop2: p1 p2 p3 < > p4 < p5 p6 >
[   42.207654][ T3504] loop2: p1 start 460800 is beyond EOD, truncated
[   42.214290][ T3504] loop2: p2 size 83886080 extends beyond EOD, truncated
[   42.230866][ T3504] loop2: p5 start 460800 is beyond EOD, truncated
[   42.237348][ T3504] loop2: p6 size 83886080 extends beyond EOD, truncated
[   42.252019][ T3875]  loop2: p1 p2 p3 < > p4 < p5 p6 >
[   42.264204][ T3875] loop2: p1 start 460800 is beyond EOD, truncated
[   42.267988][ T3901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.124'.
[   42.270718][ T3875] loop2: p2 size 83886080 extends beyond EOD, truncated
[   42.286650][ T3901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.124'.
[   42.288521][ T3875] loop2: p5 start 460800 is beyond EOD, truncated
[   42.305681][ T3875] loop2: p6 size 83886080 extends beyond EOD, truncated
[   42.316189][ T3903] netlink: 'syz.4.126': attribute type 3 has an invalid length.
[   42.323961][ T3903] netlink: 'syz.4.126': attribute type 4 has an invalid length.
[   42.345416][ T3905] netlink: 40 bytes leftover after parsing attributes in process `syz.2.127'.
[   42.356317][ T3905] ref_tracker: memory allocation failure, unreliable refcount tracker.
[   42.386010][ T3907] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0
[   42.434849][ T3907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.463726][ T3911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'.
[   42.472676][ T3907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.489094][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[   42.489151][ T3650] udevd[3650]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   42.510565][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   42.510663][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   42.563449][ T3650] udevd[3650]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[   42.563477][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   42.585149][ T3915] udevd[3915]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   42.601074][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   42.664240][ T3926] loop4: detected capacity change from 0 to 512
[   42.714698][ T3929] loop5: detected capacity change from 0 to 256
[   42.721352][ T3929] vfat: Unknown parameter '�)��՝����"'
[   42.728037][ T3930] loop3: detected capacity change from 0 to 8192
[   42.736640][ T3926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.750274][ T3926] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.789745][ T3926] EXT4-fs error (device loop4): ext4_validate_inode_bitmap:105: comm syz.4.135: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20
[   42.836025][ T3926] EXT4-fs error (device loop4) in ext4_free_inode:361: Filesystem failed CRC
[   42.857028][ T3936] capability: warning: `syz.0.140' uses deprecated v2 capabilities in a way that may be insecure
[   42.906999][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.071721][   T29] kauditd_printk_skb: 387 callbacks suppressed
[   43.071737][   T29] audit: type=1400 audit(1766216904.676:5632): avc:  denied  { write } for  pid=3949 comm="syz.2.144" name="ip_mr_vif" dev="proc" ino=4026532473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   43.161002][ T3951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.143'.
[   43.212590][ T3945] loop4: detected capacity change from 0 to 512
[   43.250781][ T3945] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   43.285320][ T3945] EXT4-fs (loop4): 1 truncate cleaned up
[   43.299024][ T3945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.448811][   T29] audit: type=1400 audit(1766216905.016:5633): avc:  denied  { ioctl } for  pid=3935 comm="syz.0.140" path="socket:[6042]" dev="sockfs" ino=6042 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   43.473851][   T29] audit: type=1400 audit(1766216905.036:5634): avc:  denied  { write } for  pid=3944 comm="syz.4.142" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   43.549922][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.848492][   T29] audit: type=1400 audit(1766216905.446:5635): avc:  denied  { ioctl } for  pid=3969 comm="syz.4.148" path="socket:[6053]" dev="sockfs" ino=6053 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   43.873247][   T29] audit: type=1400 audit(1766216905.446:5636): avc:  denied  { sqpoll } for  pid=3969 comm="syz.4.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   43.928006][   T29] audit: type=1400 audit(1766216905.526:5637): avc:  denied  { getopt } for  pid=3974 comm="syz.5.150" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   43.983165][   T29] audit: type=1400 audit(1766216905.556:5638): avc:  denied  { module_request } for  pid=3974 comm="syz.5.150" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   44.035203][   T29] audit: type=1400 audit(1766216905.636:5639): avc:  denied  { bind } for  pid=3981 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   44.055072][   T29] audit: type=1400 audit(1766216905.636:5640): avc:  denied  { connect } for  pid=3981 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   44.116613][ T3991] netlink: 80 bytes leftover after parsing attributes in process `syz.4.155'.
[   44.162827][   T29] audit: type=1326 audit(1766216905.756:5641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3994 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3880e2f749 code=0x7ffc0000
[   44.200323][ T3998] netlink: 36 bytes leftover after parsing attributes in process `syz.2.151'.
[   44.427128][ T4010] loop4: detected capacity change from 0 to 512
[   44.457221][ T4012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'.
[   44.466108][ T4012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.162'.
[   44.485085][ T4016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4016 comm=syz.2.161
[   44.571727][ T4027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.164'.
[   44.591742][ T4027] netem: change failed
[   44.627799][ T4033] loop3: detected capacity change from 0 to 512
[   44.647422][ T4033] EXT4-fs: Ignoring removed oldalloc option
[   44.683824][ T4033] ------------[ cut here ]------------
[   44.689385][ T4033] EA inode 11 i_nlink=2
[   44.689407][ T4033] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.3.165/4033
[   44.704207][ T4033] Modules linked in:
[   44.708117][ T4033] CPU: 0 UID: 0 PID: 4033 Comm: syz.3.165 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   44.717891][ T4033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   44.728060][ T4033] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320
[   44.734803][ T4033] Code: 41 cc 9c ff 4c 8d 2d fa b8 20 05 49 8d 7e 40 e8 c1 61 b8 ff 49 8b 6e 40 4c 89 e7 e8 d5 5c b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 3c f7 ba 03 66 66 66 2e 0f 1f 84
[   44.754497][ T4033] RSP: 0018:ffffc90003c6b5a0 EFLAGS: 00010246
[   44.760638][ T4033] RAX: ffff888101cf8a90 RBX: ffff88811b8664e8 RCX: ffffffff81bb545b
[   44.768632][ T4033] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0d40
[   44.776653][ T4033] RBP: 000000000000000b R08: 000188811b86649b R09: 0000000000000000
[   44.784640][ T4033] R10: ffffc90003c6b4d0 R11: 0001c90003c6b4d0 R12: ffff88811b866498
[   44.792637][ T4033] R13: ffffffff86dc0d40 R14: ffff88811b866450 R15: 0000000000000001
[   44.800697][ T4033] FS:  00007f1aa6d6f6c0(0000) GS:ffff8882aedc2000(0000) knlGS:0000000000000000
[   44.809657][ T4033] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   44.816239][ T4033] CR2: 000000110c253b85 CR3: 000000011cc7e000 CR4: 00000000003506f0
[   44.824233][ T4033] DR0: 0000000000000002 DR1: 0100000000000000 DR2: 0000000000000000
[   44.832234][ T4033] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[   44.843884][ T4033] Call Trace:
[   44.847160][ T4033]  <TASK>
[   44.850117][ T4033]  ext4_xattr_set_entry+0x77f/0x1020
[   44.855429][ T4033]  ext4_xattr_ibody_set+0x184/0x3c0
[   44.860749][ T4033]  ext4_expand_extra_isize_ea+0xcbb/0x11f0
[   44.866623][ T4033]  __ext4_expand_extra_isize+0x246/0x280
[   44.872339][ T4033]  __ext4_mark_inode_dirty+0x29d/0x3f0
[   44.877822][ T4033]  ext4_evict_inode+0x7c4/0xd40
[   44.882735][ T4033]  ? __pfx_ext4_evict_inode+0x10/0x10
[   44.888117][ T4033]  evict+0x2af/0x510
[   44.892053][ T4033]  ? __dquot_initialize+0x146/0x7c0
[   44.897291][ T4033]  iput+0x4bd/0x650
[   44.901138][ T4033]  ext4_process_orphan+0x1a9/0x1c0
[   44.906310][ T4033]  ext4_orphan_cleanup+0x6a8/0xa00
[   44.911546][ T4033]  ext4_fill_super+0x3411/0x37a0
[   44.916493][ T4033]  ? set_blocksize+0x1a8/0x310
[   44.921302][ T4033]  ? sb_set_blocksize+0xfc/0x170
[   44.926360][ T4033]  ? setup_bdev_super+0x30e/0x370
[   44.931532][ T4033]  ? __pfx_ext4_fill_super+0x10/0x10
[   44.936903][ T4033]  get_tree_bdev_flags+0x291/0x300
[   44.942068][ T4033]  ? __pfx_ext4_fill_super+0x10/0x10
[   44.947424][ T4033]  get_tree_bdev+0x1f/0x30
[   44.951975][ T4033]  ext4_get_tree+0x1c/0x30
[   44.956468][ T4033]  vfs_get_tree+0x57/0x1d0
[   44.960919][ T4033]  do_new_mount+0x24d/0x6a0
[   44.965513][ T4033]  path_mount+0x4ab/0xb80
[   44.969896][ T4033]  ? user_path_at+0xbf/0x130
[   44.974499][ T4033]  __se_sys_mount+0x28c/0x2e0
[   44.979227][ T4033]  __x64_sys_mount+0x67/0x80
[   44.983829][ T4033]  x64_sys_call+0x2cca/0x3000
[   44.988510][ T4033]  do_syscall_64+0xd8/0x2c0
[   44.993063][ T4033]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.999052][ T4033] RIP: 0033:0x7f1aa8310eea
[   45.003477][ T4033] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   45.023142][ T4033] RSP: 002b:00007f1aa6d6ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   45.031736][ T4033] RAX: ffffffffffffffda RBX: 00007f1aa6d6eef0 RCX: 00007f1aa8310eea
[   45.039738][ T4033] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f1aa6d6eeb0
[   45.047722][ T4033] RBP: 0000200000000180 R08: 00007f1aa6d6eef0 R09: 0000000000800718
[   45.055787][ T4033] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000000
[   45.063784][ T4033] R13: 00007f1aa6d6eeb0 R14: 0000000000000478 R15: 0000200000000600
[   45.071792][ T4033]  </TASK>
[   45.074876][ T4033] ---[ end trace 0000000000000000 ]---
[   45.080950][ T4033] EXT4-fs (loop3): 1 orphan inode deleted
[   45.087102][ T4033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.115590][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.172870][ T4050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.171'.
[   45.219097][ T4050] bond_slave_0: entered promiscuous mode
[   45.224789][ T4050] bond_slave_1: entered promiscuous mode
[   45.243495][ T4050] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   45.280522][ T4058] loop4: detected capacity change from 0 to 512
[   45.287251][ T4050] bond_slave_0: left promiscuous mode
[   45.288378][ T4058] ext3: Unknown parameter 'subj_type'
[   45.292672][ T4050] bond_slave_1: left promiscuous mode
[   45.306942][ T4060] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   45.306942][ T4060]    program syz.2.174 not setting count and/or reply_len properly
[   45.629859][ T4067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.177'.
[   45.653242][ T4067] netlink: 'syz.5.177': attribute type 2 has an invalid length.
[   46.180287][ T3490] IPVS: starting estimator thread 0...
[   46.185849][ T4085] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   46.238831][ T4091] set_capacity_and_notify: 1 callbacks suppressed
[   46.238848][ T4091] loop3: detected capacity change from 0 to 256
[   46.268791][ T4088] IPVS: using max 2304 ests per chain, 115200 per kthread
[   46.284788][ T4091] FAT-fs (loop3): bogus number of FAT sectors
[   46.290973][ T4091] FAT-fs (loop3): Can't find a valid FAT filesystem
[   46.312902][ T4093] ip6erspan0: entered promiscuous mode
[   46.389736][ T4098] netlink: 'syz.3.185': attribute type 13 has an invalid length.
[   46.647462][ T4113] loop0: detected capacity change from 0 to 8192
[   46.706362][ T4115] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   46.753495][ T4125] tipc: Started in network mode
[   46.766631][ T4125] tipc: Node identity , cluster identity 4711
[   46.772721][ T4125] tipc: Failed to obtain node identity
[   46.778162][ T4125] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[   46.804227][ T3539] IPVS: starting estimator thread 0...
[   46.909011][ T4127] IPVS: using max 2304 ests per chain, 115200 per kthread
[   47.072747][ T4138] SELinux: failed to load policy
[   47.183284][ T3497] kernel write not supported for file /snd/seq (pid: 3497 comm: kworker/0:7)
[   47.516498][ T4168] loop2: detected capacity change from 0 to 512
[   47.583483][ T4168] EXT4-fs (loop2): orphan cleanup on readonly fs
[   47.590453][ T4168] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.203: Failed to acquire dquot type 1
[   47.602745][ T4168] EXT4-fs (loop2): 1 truncate cleaned up
[   48.377407][ T4168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   48.437625][ T4192] tipc: Started in network mode
[   48.442646][ T4192] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   48.679352][   T29] kauditd_printk_skb: 165 callbacks suppressed
[   48.679368][   T29] audit: type=1400 audit(1766216910.286:5805): avc:  denied  { name_connect } for  pid=4191 comm="syz.4.215" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   48.712439][ T4192] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   48.721118][ T4192] tipc: Enabled bearer <udp:syz0>, priority 10
[   48.749655][ T4202] veth2: entered promiscuous mode
[   48.754746][ T4202] veth2: entered allmulticast mode
[   48.780877][   T29] audit: type=1400 audit(1766216910.336:5806): avc:  denied  { ioctl } for  pid=4191 comm="syz.4.215" path="socket:[8253]" dev="sockfs" ino=8253 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   48.805349][   T29] audit: type=1400 audit(1766216910.346:5807): avc:  denied  { bind } for  pid=4195 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   48.825036][   T29] audit: type=1400 audit(1766216910.346:5808): avc:  denied  { setopt } for  pid=4195 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   49.093458][ T4210] FAULT_INJECTION: forcing a failure.
[   49.093458][ T4210] name failslab, interval 1, probability 0, space 0, times 0
[   49.106094][ T4210] CPU: 1 UID: 0 PID: 4210 Comm: syz.0.220 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   49.106126][ T4210] Tainted: [W]=WARN
[   49.106193][ T4210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   49.106207][ T4210] Call Trace:
[   49.106216][ T4210]  <TASK>
[   49.106225][ T4210]  __dump_stack+0x1d/0x30
[   49.106250][ T4210]  dump_stack_lvl+0xe8/0x140
[   49.106272][ T4210]  dump_stack+0x15/0x1b
[   49.106328][ T4210]  should_fail_ex+0x265/0x280
[   49.106352][ T4210]  should_failslab+0x8c/0xb0
[   49.106447][ T4210]  kmem_cache_alloc_noprof+0x69/0x4b0
[   49.106470][ T4210]  ? dup_fd+0x3a/0x510
[   49.106491][ T4210]  dup_fd+0x3a/0x510
[   49.106517][ T4210]  copy_files+0x98/0xf0
[   49.106541][ T4210]  copy_process+0xc17/0x1ef0
[   49.106648][ T4210]  kernel_clone+0x16c/0x5c0
[   49.106673][ T4210]  ? vfs_write+0x7e8/0x960
[   49.106698][ T4210]  __x64_sys_clone+0xe6/0x120
[   49.106747][ T4210]  x64_sys_call+0x12d0/0x3000
[   49.106835][ T4210]  do_syscall_64+0xd8/0x2c0
[   49.106909][ T4210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.106985][ T4210] RIP: 0033:0x7f15e672f749
[   49.106999][ T4210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   49.107018][ T4210] RSP: 002b:00007f15e5154fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   49.107037][ T4210] RAX: ffffffffffffffda RBX: 00007f15e6986180 RCX: 00007f15e672f749
[   49.107049][ T4210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040800200
[   49.107064][ T4210] RBP: 00007f15e5155090 R08: 0000000000000000 R09: 0000000000000000
[   49.107079][ T4210] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[   49.107094][ T4210] R13: 00007f15e6986218 R14: 00007f15e6986180 R15: 00007ffe10411328
[   49.107156][ T4210]  </TASK>
[   49.426557][ T4212] can0: slcan on ttyS3.
[   49.773082][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.835081][ T4217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'.
[   49.844012][ T4215] tipc: Node number set to 1
[   49.844083][ T4188] can0 (unregistered): slcan off ttyS3.
[   49.857497][ T4217] hsr_slave_1 (unregistering): left promiscuous mode
[   49.859403][   T29] audit: type=1326 audit(1766216911.436:5809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4214 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e672f749 code=0x7ffc0000
[   49.887481][   T29] audit: type=1326 audit(1766216911.436:5810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4214 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f15e672f749 code=0x7ffc0000
[   49.925324][ T4220] delete_channel: no stack
[   49.931622][ T4220] delete_channel: no stack
[   49.955161][   T29] audit: type=1326 audit(1766216911.516:5811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4214 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e672f749 code=0x7ffc0000
[   49.978625][   T29] audit: type=1326 audit(1766216911.516:5812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4214 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e672f749 code=0x7ffc0000
[   50.002169][   T29] audit: type=1326 audit(1766216911.516:5813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4214 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15e672f749 code=0x7ffc0000
[   50.025588][   T29] audit: type=1326 audit(1766216911.526:5814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4214 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e672f749 code=0x7ffc0000
[   50.061609][ T4229] netlink: 'syz.0.225': attribute type 58 has an invalid length.
[   50.075038][ T4231] netlink: 'syz.2.224': attribute type 29 has an invalid length.
[   50.092021][ T4231] netlink: 'syz.2.224': attribute type 29 has an invalid length.
[   50.112817][ T4231] capability: warning: `syz.2.224' uses 32-bit capabilities (legacy support in use)
[   50.242471][ T4244] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4244 comm=syz.5.232
[   50.254868][ T4244] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4244 comm=syz.5.232
[   50.304575][ T4246] netlink: 'syz.2.224': attribute type 32 has an invalid length.
[   50.370646][ T4262] Driver unsupported XDP return value 0 on prog  (id 192) dev N/A, expect packet loss!
[   50.419352][ T4271] netlink: 'syz.5.239': attribute type 30 has an invalid length.
[   50.530196][ T4286] loop3: detected capacity change from 0 to 512
[   50.538224][ T4286] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   50.554025][ T4286] EXT4-fs (loop3): 1 truncate cleaned up
[   50.562497][ T4286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.593183][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.773611][ T4300] @: renamed from vlan0 (while UP)
[   50.842899][ T4308] loop4: detected capacity change from 0 to 512
[   50.853724][ T4308] EXT4-fs (loop4): failed to initialize system zone (-117)
[   50.862591][ T4308] EXT4-fs (loop4): mount failed
[   50.886400][ T4308] loop4: detected capacity change from 0 to 1024
[   50.912876][ T4308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   50.949884][ T4308] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.965310][ T4308] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   51.131609][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   51.203995][ T4336] netlink: 20 bytes leftover after parsing attributes in process `syz.5.263'.
[   51.371229][ T4351] loop0: detected capacity change from 0 to 512
[   51.377820][ T4351] ext4: Bad value for 'min_batch_time'
[   51.392080][ T4354] loop5: detected capacity change from 0 to 1024
[   51.415429][ T4354] EXT4-fs: Ignoring removed oldalloc option
[   51.421453][ T4354] EXT4-fs: Ignoring removed bh option
[   51.425246][ T3497] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   51.434993][ T3497] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   51.463922][ T4354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.516311][ T4354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4354 comm=syz.5.270
[   51.560334][ T3609] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.673243][ T4372] netlink: 'syz.4.276': attribute type 7 has an invalid length.
[   51.702787][ T4359] hid-generic 0000:0000:0000.0001: pid 4359 passed too short report
[   51.878685][ T4395] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4395 comm=syz.2.280
[   52.042222][ T4395] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4395 comm=syz.2.280
[   52.076163][ T4404] loop0: detected capacity change from 0 to 1024
[   52.113238][ T4404] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   52.124389][ T4404] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   52.153059][ T4404] JBD2: no valid journal superblock found
[   52.158864][ T4404] EXT4-fs (loop0): Could not load journal inode
[   52.167456][ T4407] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   52.237326][ T4404] FAULT_INJECTION: forcing a failure.
[   52.237326][ T4404] name failslab, interval 1, probability 0, space 0, times 0
[   52.250015][ T4404] CPU: 1 UID: 0 PID: 4404 Comm:  Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   52.250053][ T4404] Tainted: [W]=WARN
[   52.250061][ T4404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   52.250112][ T4404] Call Trace:
[   52.250120][ T4404]  <TASK>
[   52.250128][ T4404]  __dump_stack+0x1d/0x30
[   52.250158][ T4404]  dump_stack_lvl+0xe8/0x140
[   52.250187][ T4404]  dump_stack+0x15/0x1b
[   52.250236][ T4404]  should_fail_ex+0x265/0x280
[   52.250263][ T4404]  should_failslab+0x8c/0xb0
[   52.250292][ T4404]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[   52.250321][ T4404]  ? __alloc_skb+0x324/0x4d0
[   52.250405][ T4404]  __alloc_skb+0x324/0x4d0
[   52.250433][ T4404]  ? __alloc_skb+0x24d/0x4d0
[   52.250463][ T4404]  __ip_append_data+0x1935/0x2440
[   52.250603][ T4404]  ? __pfx_ip_reply_glue_bits+0x10/0x10
[   52.250636][ T4404]  ? ipv4_mtu+0x210/0x230
[   52.250662][ T4404]  ip_send_unicast_reply+0x5ca/0xb70
[   52.250760][ T4404]  ? bpf_get_current_comm+0x75/0xb0
[   52.250818][ T4404]  tcp_v4_send_reset+0xddf/0x10b0
[   52.250855][ T4404]  ? tcp_v4_send_reset+0xb23/0x10b0
[   52.250905][ T4404]  tcp_v4_do_rcv+0x71f/0xa20
[   52.250947][ T4404]  ? tcp_v4_fill_cb+0x185/0x1a0
[   52.250989][ T4404]  tcp_v4_rcv+0x1839/0x1f60
[   52.251029][ T4404]  ? __pfx_tcp_v4_rcv+0x10/0x10
[   52.251084][ T4404]  ip_protocol_deliver_rcu+0x397/0x780
[   52.251107][ T4404]  ip_local_deliver_finish+0x1fc/0x2f0
[   52.251129][ T4404]  ip_local_deliver+0xe8/0x1c0
[   52.251151][ T4404]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[   52.251232][ T4404]  ip_rcv_finish+0x194/0x1c0
[   52.251257][ T4404]  ip_rcv+0x62/0x140
[   52.251278][ T4404]  ? __pfx_ip_rcv_finish+0x10/0x10
[   52.251302][ T4404]  ? __pfx_ip_rcv+0x10/0x10
[   52.251320][ T4404]  __netif_receive_skb+0xff/0x270
[   52.251404][ T4404]  ? tun_rx_batched+0xc7/0x430
[   52.251432][ T4404]  netif_receive_skb+0x4b/0x2e0
[   52.251463][ T4404]  ? should_failslab+0x8c/0xb0
[   52.251521][ T4404]  ? tun_rx_batched+0xc7/0x430
[   52.251549][ T4404]  tun_rx_batched+0xfc/0x430
[   52.251602][ T4404]  ? eth_type_trans+0x215/0x3d0
[   52.251640][ T4404]  tun_get_user+0x1ed0/0x2670
[   52.251668][ T4404]  ? ref_tracker_alloc+0x1f2/0x2f0
[   52.251764][ T4404]  tun_chr_write_iter+0x15e/0x210
[   52.251792][ T4404]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   52.251861][ T4404]  vfs_write+0x52a/0x960
[   52.251885][ T4404]  ksys_write+0xda/0x1a0
[   52.251933][ T4404]  __x64_sys_write+0x40/0x50
[   52.251955][ T4404]  x64_sys_call+0x2847/0x3000
[   52.251980][ T4404]  do_syscall_64+0xd8/0x2c0
[   52.252050][ T4404]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.252075][ T4404] RIP: 0033:0x7f15e672e1ff
[   52.252090][ T4404] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[   52.252108][ T4404] RSP: 002b:00007f15e5197000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   52.252127][ T4404] RAX: ffffffffffffffda RBX: 00007f15e6985fa0 RCX: 00007f15e672e1ff
[   52.252139][ T4404] RDX: 0000000000000036 RSI: 0000200000000140 RDI: 00000000000000c8
[   52.252153][ T4404] RBP: 00007f15e5197090 R08: 0000000000000000 R09: 0000000000000000
[   52.252315][ T4404] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001
[   52.252328][ T4404] R13: 00007f15e6986038 R14: 00007f15e6985fa0 R15: 00007ffe10411328
[   52.252348][ T4404]  </TASK>
[   52.616343][ T4415] loop3: detected capacity change from 0 to 512
[   52.656097][ T4423] loop4: detected capacity change from 0 to 128
[   52.664103][ T4415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.689335][ T4415] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.712549][ T4423] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   52.771872][ T4423] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.794677][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.824291][ T4433] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   52.826083][ T4435] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   52.846996][ T4435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'.
[   52.907652][ T4440] veth0_to_team: entered promiscuous mode
[   52.923437][ T4440] 9pnet_fd: Insufficient options for proto=fd
[   52.946509][ T3324] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   53.048953][ T4451] FAULT_INJECTION: forcing a failure.
[   53.048953][ T4451] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   53.062048][ T4451] CPU: 1 UID: 0 PID: 4451 Comm: syz.3.304 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   53.062085][ T4451] Tainted: [W]=WARN
[   53.062093][ T4451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   53.062106][ T4451] Call Trace:
[   53.062112][ T4451]  <TASK>
[   53.062145][ T4451]  __dump_stack+0x1d/0x30
[   53.062173][ T4451]  dump_stack_lvl+0xe8/0x140
[   53.062235][ T4451]  dump_stack+0x15/0x1b
[   53.062257][ T4451]  should_fail_ex+0x265/0x280
[   53.062282][ T4451]  should_fail+0xb/0x20
[   53.062302][ T4451]  should_fail_usercopy+0x1a/0x20
[   53.062329][ T4451]  _copy_to_user+0x20/0xa0
[   53.062434][ T4451]  simple_read_from_buffer+0xb5/0x130
[   53.062498][ T4451]  proc_fail_nth_read+0x10e/0x150
[   53.062528][ T4451]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   53.062567][ T4451]  vfs_read+0x1a8/0x770
[   53.062589][ T4451]  ? __rcu_read_unlock+0x4f/0x70
[   53.062614][ T4451]  ? __fget_files+0x184/0x1c0
[   53.062688][ T4451]  ? mutex_lock+0x58/0x90
[   53.062721][ T4451]  ksys_read+0xda/0x1a0
[   53.062742][ T4451]  __x64_sys_read+0x40/0x50
[   53.062810][ T4451]  x64_sys_call+0x2889/0x3000
[   53.062842][ T4451]  do_syscall_64+0xd8/0x2c0
[   53.062981][ T4451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.063003][ T4451] RIP: 0033:0x7f1aa830e15c
[   53.063018][ T4451] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   53.063036][ T4451] RSP: 002b:00007f1aa6d4e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   53.063107][ T4451] RAX: ffffffffffffffda RBX: 00007f1aa8566090 RCX: 00007f1aa830e15c
[   53.063120][ T4451] RDX: 000000000000000f RSI: 00007f1aa6d4e0a0 RDI: 0000000000000006
[   53.063132][ T4451] RBP: 00007f1aa6d4e090 R08: 0000000000000000 R09: 0000000000000000
[   53.063144][ T4451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   53.063157][ T4451] R13: 00007f1aa8566128 R14: 00007f1aa8566090 R15: 00007ffe03b20478
[   53.063178][ T4451]  </TASK>
[   53.348319][ T4464] loop3: detected capacity change from 0 to 4096
[   53.390215][ T4464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.421662][ T4455] loop0: detected capacity change from 0 to 8192
[   53.470726][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.716719][   T29] kauditd_printk_skb: 448 callbacks suppressed
[   53.716811][   T29] audit: type=1326 audit(1766216915.316:6263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4478 comm="syz.3.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f1aa830f749 code=0x7ffc0000
[   53.764808][ T4485] FAULT_INJECTION: forcing a failure.
[   53.764808][ T4485] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   53.778008][ T4485] CPU: 1 UID: 0 PID: 4485 Comm: syz.4.315 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   53.778041][ T4485] Tainted: [W]=WARN
[   53.778129][ T4485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   53.778141][ T4485] Call Trace:
[   53.778147][ T4485]  <TASK>
[   53.778155][ T4485]  __dump_stack+0x1d/0x30
[   53.778182][ T4485]  dump_stack_lvl+0xe8/0x140
[   53.778210][ T4485]  dump_stack+0x15/0x1b
[   53.778270][ T4485]  should_fail_ex+0x265/0x280
[   53.778293][ T4485]  should_fail+0xb/0x20
[   53.778316][ T4485]  should_fail_usercopy+0x1a/0x20
[   53.778348][ T4485]  fpu__restore_sig+0x12d/0xaa0
[   53.778440][ T4485]  ? x86_task_fpu+0x36/0x60
[   53.778479][ T4485]  ? should_fail_ex+0xdb/0x280
[   53.778513][ T4485]  __ia32_sys_rt_sigreturn+0x29f/0x350
[   53.778611][ T4485]  x64_sys_call+0x274a/0x3000
[   53.778643][ T4485]  do_syscall_64+0xd8/0x2c0
[   53.778683][ T4485]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.778723][ T4485] RIP: 0033:0x7f3880e2f747
[   53.778740][ T4485] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[   53.778762][ T4485] RSP: 002b:00007f387f897038 EFLAGS: 00000246
[   53.778780][ T4485] RAX: 0000000000000013 RBX: 00007f3881085fa0 RCX: 00007f3880e2f749
[   53.778793][ T4485] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 000000000000000b
[   53.778808][ T4485] RBP: 00007f387f897090 R08: 0000000000000000 R09: 0000000000000000
[   53.778822][ T4485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   53.778903][ T4485] R13: 00007f3881086038 R14: 00007f3881085fa0 R15: 00007fff1db34948
[   53.778924][ T4485]  </TASK>
[   53.784642][   T29] audit: type=1326 audit(1766216915.356:6264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4476 comm="syz.3.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa830f749 code=0x7ffc0000
[   53.969488][   T29] audit: type=1326 audit(1766216915.356:6265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4476 comm="syz.3.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa830f749 code=0x7ffc0000
[   54.009424][ T4489] netlink: 'syz.0.316': attribute type 13 has an invalid length.
[   54.070249][ T4488] ip6tnl0: Caught tx_queue_len zero misconfig
[   54.076708][ T4491] syzkaller1: tun_chr_ioctl cmd 1074025677
[   54.083553][ T4491] syzkaller1: linktype set to 823
[   54.094080][ T4491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.318'.
[   54.103026][ T4491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.318'.
[   54.204704][   T29] audit: type=1400 audit(1766216915.806:6266): avc:  denied  { create } for  pid=4504 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   54.225007][   T29] audit: type=1400 audit(1766216915.806:6267): avc:  denied  { write } for  pid=4504 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   54.373972][ T4516] loop4: detected capacity change from 0 to 128
[   54.381793][ T4516] vfat: Unknown parameter '18446744073709551615'
[   54.420286][   T29] audit: type=1326 audit(1766216916.026:6268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4515 comm="syz.4.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3880e2f749 code=0x7ffc0000
[   54.443699][   T29] audit: type=1326 audit(1766216916.026:6269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4515 comm="syz.4.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3880e2f749 code=0x7ffc0000
[   54.467060][   T29] audit: type=1326 audit(1766216916.026:6270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4515 comm="syz.4.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3880e2f749 code=0x7ffc0000
[   54.582231][   T29] audit: type=1326 audit(1766216916.096:6271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4515 comm="syz.4.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3880e2f749 code=0x7ffc0000
[   54.609238][   T29] audit: type=1326 audit(1766216916.096:6272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4515 comm="syz.4.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3880e2f749 code=0x7ffc0000
[   55.069905][ T4555] loop3: detected capacity change from 0 to 512
[   55.084820][ T4555] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   55.102462][ T4555] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.336: bg 0: block 384: padding at end of block bitmap is not set
[   55.119209][ T4552] IPv6: NLM_F_CREATE should be specified when creating new route
[   55.141642][ T4555] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem
[   55.150996][ T4555] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.336: attempt to clear invalid blocks 983260 len 1
[   55.168965][ T4555] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.336: Invalid inode table block 0 in block_group 0
[   55.181929][ T4555] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem
[   55.191616][ T4555] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[   55.200601][ T4555] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.336: Invalid inode table block 0 in block_group 0
[   55.242057][ T4555] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem
[   55.314930][ T4555] EXT4-fs error (device loop3): ext4_truncate:4635: inode #11: comm syz.3.336: mark_inode_dirty error
[   55.358191][ T4555] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[   55.418570][ T4555] EXT4-fs (loop3): 1 truncate cleaned up
[   55.436615][ T4555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.518141][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.519900][ T4573] syz.2.341: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[   55.541615][ T4573] CPU: 0 UID: 0 PID: 4573 Comm: syz.2.341 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   55.541648][ T4573] Tainted: [W]=WARN
[   55.541654][ T4573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   55.541751][ T4573] Call Trace:
[   55.541759][ T4573]  <TASK>
[   55.541768][ T4573]  __dump_stack+0x1d/0x30
[   55.541879][ T4573]  dump_stack_lvl+0xe8/0x140
[   55.541951][ T4573]  dump_stack+0x15/0x1b
[   55.541977][ T4573]  warn_alloc+0x12b/0x1a0
[   55.542020][ T4573]  __vmalloc_node_range_noprof+0xa0/0x1310
[   55.542048][ T4573]  ? update_load_avg+0x1da/0x820
[   55.542113][ T4573]  ? __list_add_valid_or_report+0x38/0xe0
[   55.542221][ T4573]  ? save_fpregs_to_fpstate+0x100/0x160
[   55.542242][ T4573]  ? finish_task_switch+0x7a/0x2a0
[   55.542331][ T4573]  ? should_fail_ex+0x30/0x280
[   55.542355][ T4573]  ? should_failslab+0x8c/0xb0
[   55.542382][ T4573]  vmalloc_user_noprof+0x7d/0xb0
[   55.542411][ T4573]  ? xskq_create+0x80/0xe0
[   55.542480][ T4573]  xskq_create+0x80/0xe0
[   55.542497][ T4573]  xsk_init_queue+0x95/0xf0
[   55.542596][ T4573]  xsk_setsockopt+0x3f5/0x640
[   55.542633][ T4573]  ? __pfx_xsk_setsockopt+0x10/0x10
[   55.542671][ T4573]  __sys_setsockopt+0x184/0x200
[   55.542706][ T4573]  __x64_sys_setsockopt+0x64/0x80
[   55.542784][ T4573]  x64_sys_call+0x21d5/0x3000
[   55.542814][ T4573]  do_syscall_64+0xd8/0x2c0
[   55.542856][ T4573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.542936][ T4573] RIP: 0033:0x7f3e2265f749
[   55.542954][ T4573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   55.542973][ T4573] RSP: 002b:00007f3e210bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   55.542999][ T4573] RAX: ffffffffffffffda RBX: 00007f3e228b5fa0 RCX: 00007f3e2265f749
[   55.543012][ T4573] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[   55.543025][ T4573] RBP: 00007f3e226e3f91 R08: 0000000000000004 R09: 0000000000000000
[   55.543038][ T4573] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   55.543053][ T4573] R13: 00007f3e228b6038 R14: 00007f3e228b5fa0 R15: 00007ffdd725c5b8
[   55.543075][ T4573]  </TASK>
[   55.543093][ T4573] Mem-Info:
[   55.763721][ T4573] active_anon:10196 inactive_anon:2 isolated_anon:0
[   55.763721][ T4573]  active_file:18653 inactive_file:2346 isolated_file:0
[   55.763721][ T4573]  unevictable:6 dirty:476 writeback:0
[   55.763721][ T4573]  slab_reclaimable:3254 slab_unreclaimable:19549
[   55.763721][ T4573]  mapped:31949 shmem:3282 pagetables:993
[   55.763721][ T4573]  sec_pagetables:0 bounce:0
[   55.763721][ T4573]  kernel_misc_reclaimable:0
[   55.763721][ T4573]  free:1874987 free_pcp:14002 free_cma:0
[   55.808714][ T4573] Node 0 active_anon:41596kB inactive_anon:8kB active_file:74612kB inactive_file:9384kB unevictable:24kB isolated(anon):0kB isolated(file):0kB mapped:128492kB dirty:1904kB writeback:0kB shmem:13824kB kernel_stack:3440kB pagetables:3972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   55.836201][ T4573] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   55.865900][ T4573] lowmem_reserve[]: 0 2880 7859 7859
[   55.871241][ T4573] Node 0 DMA32 free:2945968kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949496kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB
[   55.902730][ T4573] lowmem_reserve[]: 0 0 4978 4978
[   55.907837][ T4573] Node 0 Normal free:4531080kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46004kB inactive_anon:8kB active_file:74612kB inactive_file:9384kB unevictable:24kB writepending:1904kB zspages:0kB present:5242880kB managed:5098240kB mlocked:24kB bounce:0kB free_pcp:54856kB local_pcp:12656kB free_cma:0kB
[   55.941072][ T4573] lowmem_reserve[]: 0 0 0 0
[   55.945604][ T4573] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   55.958349][ T4573] Node 0 DMA32: 6*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945968kB
[   55.974664][ T4573] Node 0 Normal: 648*4kB (U) 232*8kB (UME) 20*16kB (UE) 84*32kB (UE) 57*64kB (UE) 119*128kB (UME) 103*256kB (UME) 77*512kB (UM) 55*1024kB (UM) 40*2048kB (UME) 1048*4096kB (UM) = 4522976kB
[   55.993561][ T4573] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[   56.002865][ T4573] 26484 total pagecache pages
[   56.007536][ T4573] 2 pages in swap cache
[   56.011724][ T4573] Free swap  = 124988kB
[   56.015929][ T4573] Total swap = 124996kB
[   56.020106][ T4573] 2097051 pages RAM
[   56.023915][ T4573] 0 pages HighMem/MovableOnly
[   56.028578][ T4573] 81277 pages reserved
[   56.182988][ T4589] 9p: Bad value for 'rfdno'
[   56.199664][ T4589] 9p: Bad value for 'rfdno'
[   56.215356][ T4589] 9p: Bad value for 'rfdno'
[   56.228823][ T4589] 9p: Bad value for 'rfdno'
[   56.244995][ T4589] 9p: Bad value for 'rfdno'
[   56.258230][ T4589] 9p: Bad value for 'rfdno'
[   56.272735][ T4589] 9p: Bad value for 'rfdno'
[   56.288439][ T4589] 9p: Bad value for 'rfdno'
[   56.307855][ T4589] 9p: Bad value for 'rfdno'
[   56.328842][ T4589] 9p: Bad value for 'rfdno'
[   56.358627][ T4589] 9p: Bad value for 'rfdno'
[   56.370535][ T4589] 9p: Bad value for 'rfdno'
[   56.386513][ T4595] FAULT_INJECTION: forcing a failure.
[   56.386513][ T4595] name failslab, interval 1, probability 0, space 0, times 0
[   56.399216][ T4595] CPU: 0 UID: 0 PID: 4595 Comm: syz.0.347 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   56.399249][ T4595] Tainted: [W]=WARN
[   56.399255][ T4595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   56.399267][ T4595] Call Trace:
[   56.399276][ T4595]  <TASK>
[   56.399284][ T4595]  __dump_stack+0x1d/0x30
[   56.399376][ T4595]  dump_stack_lvl+0xe8/0x140
[   56.399400][ T4595]  dump_stack+0x15/0x1b
[   56.399422][ T4595]  should_fail_ex+0x265/0x280
[   56.399448][ T4595]  should_failslab+0x8c/0xb0
[   56.399483][ T4595]  kmem_cache_alloc_noprof+0x69/0x4b0
[   56.399542][ T4595]  ? alloc_empty_file+0x76/0x200
[   56.399570][ T4595]  alloc_empty_file+0x76/0x200
[   56.399603][ T4589] 9p: Bad value for 'rfdno'
[   56.399621][ T4595]  path_openat+0x63/0x23b0
[   56.399655][ T4595]  ? _parse_integer_limit+0x170/0x190
[   56.399681][ T4595]  ? _parse_integer+0x27/0x40
[   56.399759][ T4595]  ? kstrtoull+0x111/0x140
[   56.399781][ T4595]  ? kstrtouint+0x76/0xc0
[   56.399805][ T4595]  do_filp_open+0x109/0x230
[   56.399850][ T4595]  do_sys_openat2+0xa6/0x150
[   56.399964][ T4595]  __x64_sys_openat+0xf2/0x120
[   56.400052][ T4595]  x64_sys_call+0x2b07/0x3000
[   56.400081][ T4595]  do_syscall_64+0xd8/0x2c0
[   56.400120][ T4595]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.400172][ T4595] RIP: 0033:0x7f15e672f749
[   56.400188][ T4595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   56.400257][ T4595] RSP: 002b:00007f15e5197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   56.400278][ T4595] RAX: ffffffffffffffda RBX: 00007f15e6985fa0 RCX: 00007f15e672f749
[   56.400292][ T4595] RDX: 0000000000005400 RSI: 0000200000000080 RDI: ffffffffffffff9c
[   56.400306][ T4595] RBP: 00007f15e5197090 R08: 0000000000000000 R09: 0000000000000000
[   56.400320][ T4595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.400357][ T4595] R13: 00007f15e6986038 R14: 00007f15e6985fa0 R15: 00007ffe10411328
[   56.400377][ T4595]  </TASK>
[   56.702856][ T4589] 9p: Bad value for 'rfdno'
[   56.707435][ T4589] 9p: Bad value for 'rfdno'
[   56.712290][ T4589] 9p: Bad value for 'rfdno'
[   56.716919][ T4589] 9p: Bad value for 'rfdno'
[   56.721528][ T4589] 9p: Bad value for 'rfdno'
[   56.726219][ T4589] 9p: Bad value for 'rfdno'
[   56.731133][ T4589] 9p: Bad value for 'rfdno'
[   56.735727][ T4589] 9p: Bad value for 'rfdno'
[   56.749005][ T4589] 9p: Bad value for 'rfdno'
[   56.753590][ T4589] 9p: Bad value for 'rfdno'
[   56.758223][ T4589] 9p: Bad value for 'rfdno'
[   56.778931][ T4589] 9p: Bad value for 'rfdno'
[   56.783520][ T4589] 9p: Bad value for 'rfdno'
[   56.788126][ T4589] 9p: Bad value for 'rfdno'
[   56.809231][ T4589] 9p: Bad value for 'rfdno'
[   56.814317][ T4589] 9p: Bad value for 'rfdno'
[   56.819027][ T4589] 9p: Bad value for 'rfdno'
[   56.823756][ T4589] 9p: Bad value for 'rfdno'
[   56.828419][ T4589] 9p: Bad value for 'rfdno'
[   56.843191][ T4589] 9p: Bad value for 'rfdno'
[   57.002132][ T4624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.358'.
[   57.021498][ T4624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.358'.
[   57.030504][ T4624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.358'.
[   57.063240][ T4628] loop2: detected capacity change from 0 to 512
[   57.293972][ T4632] syzkaller0: entered allmulticast mode
[   57.309006][ T4632] syzkaller0: entered promiscuous mode
[   57.345910][ T4632] syzkaller0 (unregistering): left promiscuous mode
[   57.352561][ T4632] syzkaller0 (unregistering): left allmulticast mode
[   57.609292][ T4647] netlink: 120 bytes leftover after parsing attributes in process `syz.0.366'.
[   58.232733][ T4658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.369'.
[   58.684615][ T4660] netlink: 260 bytes leftover after parsing attributes in process `syz.0.370'.
[   58.693754][ T4660] netlink: 260 bytes leftover after parsing attributes in process `syz.0.370'.
[   58.708158][ T4660] loop0: detected capacity change from 0 to 1024
[   58.735308][ T4660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   58.747568][ T4660] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.765119][   T29] kauditd_printk_skb: 4705 callbacks suppressed
[   58.765179][   T29] audit: type=1400 audit(1766216920.366:10975): avc:  denied  { ioctl } for  pid=4659 comm="syz.0.370" path="/77/file1/file1" dev="loop0" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   58.796233][ T4660] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.370: Freeing blocks not in datazone - block = 0, count = 16
[   58.810581][ T4660] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.370: bg 0: block 112: padding at end of block bitmap is not set
[   58.842650][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   58.875566][   T29] audit: type=1400 audit(1766216920.476:10976): avc:  denied  { connect } for  pid=4664 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   59.146508][   T29] audit: type=1326 audit(1766216920.746:10977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e672f749 code=0x7ffc0000
[   59.174871][   T29] audit: type=1326 audit(1766216920.776:10978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f15e672f749 code=0x7ffc0000
[   59.198318][   T29] audit: type=1326 audit(1766216920.776:10979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e672f749 code=0x7ffc0000
[   59.221893][   T29] audit: type=1326 audit(1766216920.776:10980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e672f749 code=0x7ffc0000
[   59.660869][ T4698] Non-string source
[   59.665086][ T4698] netlink: 72 bytes leftover after parsing attributes in process `syz.3.383'.
[   59.708911][ T4686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.379'.
[   59.717822][ T4686] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[   59.864986][   T29] audit: type=1326 audit(1766216921.466:10981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4702 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e672f749 code=0x7ffc0000
[   59.888577][   T29] audit: type=1326 audit(1766216921.466:10982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4702 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15e672f749 code=0x7ffc0000
[   59.912033][   T29] audit: type=1326 audit(1766216921.466:10983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4702 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e672f749 code=0x7ffc0000
[   59.935530][   T29] audit: type=1326 audit(1766216921.466:10984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4702 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15e672f749 code=0x7ffc0000
[   60.816900][ T4755] FAULT_INJECTION: forcing a failure.
[   60.816900][ T4755] name failslab, interval 1, probability 0, space 0, times 0
[   60.829567][ T4755] CPU: 1 UID: 0 PID: 4755 Comm: syz.0.398 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   60.829621][ T4755] Tainted: [W]=WARN
[   60.829628][ T4755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   60.829640][ T4755] Call Trace:
[   60.829647][ T4755]  <TASK>
[   60.829655][ T4755]  __dump_stack+0x1d/0x30
[   60.829742][ T4755]  dump_stack_lvl+0xe8/0x140
[   60.829771][ T4755]  dump_stack+0x15/0x1b
[   60.829793][ T4755]  should_fail_ex+0x265/0x280
[   60.829820][ T4755]  should_failslab+0x8c/0xb0
[   60.829848][ T4755]  __kvmalloc_node_noprof+0x149/0x6b0
[   60.829887][ T4755]  ? io_sqe_buffers_register+0xc7/0x540
[   60.829922][ T4755]  io_sqe_buffers_register+0xc7/0x540
[   60.830034][ T4755]  ? __fget_files+0x184/0x1c0
[   60.830071][ T4755]  __se_sys_io_uring_register+0x9ef/0xf20
[   60.830102][ T4755]  ? fput+0x8f/0xc0
[   60.830140][ T4755]  ? ksys_write+0x192/0x1a0
[   60.830212][ T4755]  __x64_sys_io_uring_register+0x55/0x70
[   60.830298][ T4755]  x64_sys_call+0x27ad/0x3000
[   60.830357][ T4755]  do_syscall_64+0xd8/0x2c0
[   60.830399][ T4755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.830426][ T4755] RIP: 0033:0x7f15e672f749
[   60.830445][ T4755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.830463][ T4755] RSP: 002b:00007f15e5197038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[   60.830523][ T4755] RAX: ffffffffffffffda RBX: 00007f15e6985fa0 RCX: 00007f15e672f749
[   60.830539][ T4755] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000004
[   60.830553][ T4755] RBP: 00007f15e5197090 R08: 0000000000000000 R09: 0000000000000000
[   60.830566][ T4755] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001
[   60.830579][ T4755] R13: 00007f15e6986038 R14: 00007f15e6985fa0 R15: 00007ffe10411328
[   60.830596][ T4755]  </TASK>
[   61.278368][ T4775] loop3: detected capacity change from 0 to 2048
[   61.414060][ T4775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.433183][ T4775] netlink: 44 bytes leftover after parsing attributes in process `syz.3.407'.
[   61.533277][ T4790] loop4: detected capacity change from 0 to 512
[   61.535554][ T4792] loop2: detected capacity change from 0 to 128
[   61.547448][ T4792] vfat: Unknown parameter '00000000000000000003'
[   61.557208][ T4790] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   61.587652][ T4790] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002]
[   61.607602][ T4790] System zones: 1-12
[   61.618104][ T4790] EXT4-fs (loop4): 1 truncate cleaned up
[   61.628359][ T4790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.733723][ T4790] netlink: 'syz.4.413': attribute type 4 has an invalid length.
[   61.745550][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.746606][ T4790] .`: renamed from bond0 (while UP)
[   61.776527][ T4789] rtc_cmos 00:00: Alarms can be up to one day in the future
[   61.804765][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.878611][ T4804] loop4: detected capacity change from 0 to 512
[   61.893442][ T4804] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.416: iget: bad extended attribute block 1
[   61.917922][ T4804] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.416: couldn't read orphan inode 15 (err -117)
[   61.932159][ T4804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.983051][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.012085][ T4797] __nla_validate_parse: 2 callbacks suppressed
[   62.012099][ T4797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.414'.
[   62.029477][ T4797] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[   62.046644][ T4811] loop4: detected capacity change from 0 to 512
[   62.053822][ T3006] ==================================================================
[   62.061911][ T3006] BUG: KCSAN: data-race in set_nlink / set_nlink
[   62.068237][ T3006] 
[   62.070543][ T3006] read to 0xffff888107ccc518 of 4 bytes by task 3504 on cpu 0:
[   62.078068][ T3006]  set_nlink+0x29/0xb0
[   62.082128][ T3006]  kernfs_iop_permission+0x1e2/0x220
[   62.087407][ T3006]  inode_permission+0x2de/0x3c0
[   62.092257][ T3006]  link_path_walk+0x779/0xe30
[   62.096931][ T3006]  path_openat+0x1c0/0x23b0
[   62.101440][ T3006]  do_filp_open+0x109/0x230
[   62.105944][ T3006]  do_sys_openat2+0xa6/0x150
[   62.110535][ T3006]  __x64_sys_openat+0xf2/0x120
[   62.115297][ T3006]  x64_sys_call+0x2b07/0x3000
[   62.119971][ T3006]  do_syscall_64+0xd8/0x2c0
[   62.124479][ T3006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.130362][ T3006] 
[   62.132671][ T3006] write to 0xffff888107ccc518 of 4 bytes by task 3006 on cpu 1:
[   62.140298][ T3006]  set_nlink+0x99/0xb0
[   62.144372][ T3006]  kernfs_iop_permission+0x1e2/0x220
[   62.149655][ T3006]  inode_permission+0x2de/0x3c0
[   62.154499][ T3006]  link_path_walk+0x779/0xe30
[   62.159173][ T3006]  path_lookupat+0x8c/0x500
[   62.163669][ T3006]  filename_lookup+0x147/0x340
[   62.168428][ T3006]  vfs_statx+0x9d/0x390
[   62.172580][ T3006]  vfs_fstatat+0x115/0x170
[   62.176990][ T3006]  __se_sys_newfstatat+0x55/0x260
[   62.182013][ T3006]  __x64_sys_newfstatat+0x55/0x70
[   62.187035][ T3006]  x64_sys_call+0x111f/0x3000
[   62.191799][ T3006]  do_syscall_64+0xd8/0x2c0
[   62.196304][ T3006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.202186][ T3006] 
[   62.204491][ T3006] value changed: 0x00000008 -> 0x00000009
[   62.210186][ T3006] 
[   62.212491][ T3006] Reported by Kernel Concurrency Sanitizer on:
[   62.218629][ T3006] CPU: 1 UID: 0 PID: 3006 Comm: udevd Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   62.229468][ T3006] Tainted: [W]=WARN
[   62.233251][ T3006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   62.243291][ T3006] ==================================================================
[   62.316595][ T4811] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   62.331432][ T4811] EXT4-fs (loop4): mount failed
[   62.340618][ T4811] loop4: detected capacity change from 0 to 512
[   62.347795][ T4811] EXT4-fs: Ignoring removed i_version option
[   62.347837][ T3398] rtc_cmos 00:00: Alarms can be up to one day in the future
[   62.353833][ T4811] ext4: Unknown parameter 'nouser_xattr'
[   62.361465][ T3398] rtc_cmos 00:00: Alarms can be up to one day in the future
[   62.361722][ T3398] rtc_cmos 00:00: Alarms can be up to one day in the future
[   62.361951][ T3398] rtc_cmos 00:00: Alarms can be up to one day in the future
[   62.361970][ T3398] rtc rtc0: __rtc_set_alarm: err=-22