last executing test programs:

15.878341013s ago: executing program 1 (id=476):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0, &(0x7f00000001c0)}, 0x20)
r2 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0xf792, 0x80, 0x9, 0x201, 0x0, r1}, &(0x7f0000000680)=<r3=>0x0, &(0x7f0000000440))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x4, 0x4}}, 0x10)
listen(r5, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r8 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x24004804)
close(r8)
accept4(r5, 0x0, 0x0, 0x80800)
r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x90)
io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000140)=r9, 0x1)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0)

14.89016046s ago: executing program 1 (id=492):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x1b3)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100000cffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)
socket$inet6(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x5}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x468fe4e8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4048000)

14.836521687s ago: executing program 1 (id=493):
socket$inet6_udplite(0xa, 0x2, 0x88)
arch_prctl$ARCH_GET_CPUID(0x1011)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc17}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, &(0x7f0000000580)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000540), 0x8, 0x15, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r2, 0x0, 0x6}, 0x18)
rseq(0x0, 0x0, 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)

14.313412455s ago: executing program 1 (id=496):
r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x300, 0x4}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000580)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x25dfdbfd, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0x8}, @NHA_OIF={0x8, 0x5, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0xc080}, 0x90)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone3(&(0x7f0000000180)={0x20000, &(0x7f0000000000)=<r5=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x27}, 0x0, 0x0, &(0x7f0000000100)=""/49, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}, 0x58)
syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[], 0x1, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==")
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x81000, 0x20)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000fa00000000000000000500000000000010", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r6, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r6, &(0x7f0000000a80), 0x0}, 0x20)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r8 = openat$cgroup_devices(r7, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB='b 5:* w'], 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRESOCT=r5, @ANYRES32=r8], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0)

14.151784956s ago: executing program 1 (id=498):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x38, 0x4])
write$tun(r0, &(0x7f0000000040)=ANY=[], 0xfdef)

13.943019402s ago: executing program 1 (id=505):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x1b3)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100000cffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)
socket$inet6(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x468fe4e8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4048000)

13.890385929s ago: executing program 32 (id=505):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x1b3)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100000cffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)
socket$inet6(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x468fe4e8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4048000)

1.932749391s ago: executing program 4 (id=773):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0x94)
r1 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
sendmmsg$inet(r1, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="170000b6caf90000dc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be57aff9352b356be67ca2746357d1787b35", 0x14}], 0x1}}], 0x2, 0x4004040)

1.884661717s ago: executing program 2 (id=775):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
fchdir(0xffffffffffffffff)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
r2 = syz_clone(0x800211, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300)
futex(&(0x7f000000cffc), 0xb, 0x1, 0x0, &(0x7f0000048000)=0x8000001, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, 0x0, 0x8d)
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x2000410, &(0x7f0000000180)={[{@nodelalloc}, {@min_batch_time={'min_batch_time', 0x3d, 0xef6}}, {@commit={'commit', 0x3d, 0x2}}, {@grpquota}], [{@seclabel}, {@fowner_lt}, {@uid_eq}, {@context={'context', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, 'ns/pid\x00'}}]}, 0xc1, 0x815, &(0x7f0000000780)="$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")
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r3, @ANYRES32=r2, @ANYRES16=r1, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x24040041}, 0x0)
close(r0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r5)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x2, 0x0, 0x1, 0x1}}, 0x26)
ioctl$PPPIOCGL2TPSTATS(r7, 0x40047452, 0x0)
ioctl$PPPIOCGMRU(r7, 0x80047453, &(0x7f0000000140))
r8 = socket$l2tp6(0xa, 0x2, 0x73)
recvfrom$l2tp6(r8, 0x0, 0x0, 0x40002000, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)

1.883288887s ago: executing program 4 (id=776):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, &(0x7f0000000580)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000540), 0x8, 0x15, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r1, 0x0, 0x6}, 0x18)
rseq(0x0, 0x0, 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)

1.859120971s ago: executing program 4 (id=777):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000003c0)={0x108, 0x78, 0x601, 0x0, 0x0, "", [@nested={0xf7, 0xee, 0x0, 0x1, [@generic="0b359702401027b4ceb349c904d09f445bb59ded7e3671971063ddd85222e3de46a41c67a79aa4ce662936ecb615a5f0e611e03c4dd0e2bae24248aefc7132e9b632a5bb7b7e8a52600ea5e1f1560dda8cdba443d0133eb7f64e2af464f935b08e4775e86734ba162a96d92de354ec1f50b80c62903c4acc965c7c98eb5f0306493b491e588cac2191fb1d9605dd22c8c22c6653b8199d356328f239ca35440595e067ce34cd61613f43d6c55231b6a107b6cbb0bd9d2d59f1148b3ed1ef49", @nested={0x34, 0x119, 0x0, 0x1, [@typed={0x5, 0x63, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x3d}, @nested={0x4, 0x1a}, @nested={0x4, 0x44}, @typed={0x14, 0x730, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @typed={0x8, 0xb9, 0x0, 0x0, @ipv4=@loopback}]}]}]}, 0x108}], 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r3, 0x29, 0x4e, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008881}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000480011012abd7000fedbdf250a00", @ANYRES32=r4, @ANYBLOB="020000000800020007000000080002000700000008000200030001000800020000000000140001"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x7, 0x0, 0xffffffff}, 0x10)
write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)
syz_open_procfs(0x0, &(0x7f0000000640)='mountinfo\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10)
r6 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0)
preadv2(r8, &(0x7f0000000180)=[{&(0x7f0000000740)=""/174, 0xae}], 0x1, 0x8000, 0x4, 0x1)

1.093067119s ago: executing program 5 (id=794):
socket(0x40000000015, 0x5, 0x0)
io_setup(0x2, &(0x7f0000000000))
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xb3)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000005880)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0)

1.055936144s ago: executing program 2 (id=795):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0, &(0x7f00000001c0)}, 0x20)
r2 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0xf792, 0x80, 0x9, 0x201, 0x0, r1}, &(0x7f0000000680)=<r3=>0x0, &(0x7f0000000440)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x4, 0x4}}, 0x10)
listen(r6, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r9 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x24004804)
close(r9)
accept4(r6, 0x0, 0x0, 0x80800)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x90)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0)

963.450596ms ago: executing program 5 (id=797):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000000}, 0x18)
r0 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="170000b6caf90000dc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be57aff9352b356be67ca2746357d1787b35", 0x14}], 0x1}}], 0x2, 0x4004040)

915.669772ms ago: executing program 4 (id=799):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)

913.398592ms ago: executing program 5 (id=800):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, &(0x7f0000000580)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000540), 0x8, 0x15, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r1, 0x0, 0x6}, 0x18)
rseq(0x0, 0x0, 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)

713.493398ms ago: executing program 5 (id=802):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000008c0)={[{@noblock_validity}, {}, {@auto_da_alloc}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@discard}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x26)
r2 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x17, 0x1003, 0x62}, 0x2c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000002040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
sendmmsg$inet(r2, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064", 0x14}], 0x1}}], 0x1, 0x4004040)
fallocate(r1, 0x0, 0x0, 0x1001f0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000101000000000001000000000000", @ANYRES32=r9], 0x20}}, 0x2000c004)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'lo\x00', <r11=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001dc0)={r1, 0xe0, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r12=>0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000001b40)=[0x0, 0x0, 0x0], &(0x7f0000001b80)=[0x0, 0x0], 0x0, 0x4c, &(0x7f0000001bc0)=[{}, {}], 0x10, 0x10, &(0x7f0000001c00), &(0x7f0000001c40), 0x8, 0x63, 0x8, 0x8, &(0x7f0000001c80)}}, 0x10)
getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000001e00)={@local, <r13=>0x0}, &(0x7f0000001e40)=0x14)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000002000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x104, r6, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6ed8aa3f6841ab75}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x90}, 0x200040d0)

610.080672ms ago: executing program 4 (id=804):
r0 = epoll_create(0x3ff)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000, 0x1b54c8})
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x2000000})

609.642392ms ago: executing program 4 (id=806):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0, &(0x7f00000001c0)}, 0x20)
r2 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0xf792, 0x80, 0x9, 0x201, 0x0, r1}, &(0x7f0000000680)=<r3=>0x0, &(0x7f0000000440)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x4, 0x4}}, 0x10)
listen(r6, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r9 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x24004804)
close(r9)
accept4(r6, 0x0, 0x0, 0x80800)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0)

308.33565ms ago: executing program 0 (id=814):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r2 = fcntl$dupfd(r0, 0x406, r0)
mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x1326020, 0x0)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
readv(r1, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/160, 0xa0}], 0x1)

307.40237ms ago: executing program 5 (id=815):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000d00)={0x20, r2, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@void, @val={0xc, 0x99, {0x2, 0x6c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8810}, 0x0)

289.700033ms ago: executing program 0 (id=816):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
unshare(0x22020400)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
gettid()
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0xffffffffffffffff, &(0x7f00000002c0)=0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='wake_reaper\x00', r0, 0x0, 0x3}, 0x18)
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0)

289.191033ms ago: executing program 3 (id=817):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)

259.567887ms ago: executing program 0 (id=818):
r0 = socket(0x840000000002, 0x3, 0x100)
getsockopt$inet_mreqn(r0, 0x0, 0x33, 0x0, &(0x7f0000000740)=0x2) (async)
getsockopt$inet_mreqn(r0, 0x0, 0x33, 0x0, &(0x7f0000000740)=0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae0000009542636d28294a4e2d867376"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRES64=r1, @ANYRESDEC=r1, @ANYBLOB="a6cceaea1b217b21cfdbf133dd375d22006c04ee213ae09a808b7ea0152e04134c8ede4defd7633498f51eb3ddc159bfb446703d408b3bda0e27dac79b9e1263da087877a8d07e09949ecd41e86c69cceca2833e72518f961845e995d63c1157b893d79b742c5f495435c3fa6bac463128dfb4e6a1db3353ff", @ANYRESOCT=r1], 0x548}}, 0x8000) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRES64=r1, @ANYRESDEC=r1, @ANYBLOB="a6cceaea1b217b21cfdbf133dd375d22006c04ee213ae09a808b7ea0152e04134c8ede4defd7633498f51eb3ddc159bfb446703d408b3bda0e27dac79b9e1263da087877a8d07e09949ecd41e86c69cceca2833e72518f961845e995d63c1157b893d79b742c5f495435c3fa6bac463128dfb4e6a1db3353ff", @ANYRESOCT=r1], 0x548}}, 0x8000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7a7}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7a7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x97}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x97}, 0x18)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000696499540a00000000000000000a00000704000880"], 0x18}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r10}, 0x18)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f00000001c0)={0x43, 0x2, 0x1}, 0x10)
bind$tipc(r11, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
close_range(r5, 0xffffffffffffffff, 0x0) (async)
close_range(r5, 0xffffffffffffffff, 0x0)

251.867398ms ago: executing program 5 (id=819):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000001000000"], 0x48)
r0 = syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4, 0x273, &(0x7f0000000680)="$eJzs281qE1EYxvGnH9ra2k60Wm1FfFEE3QxtvIJQWhADSm3EDxCmdqIh06RkQiUitju3Xkdx6U4Qb6AbL0BcuOvGZRfiSCexTdoUdWFGzf+3OW85fcI5vGfCWWS27r5aLuZDN+9V1dtj6pfWtS2l1Ks+1fU0xt64Pqpm67o6lv10/va9+zcy2ezsvNlcZuFa2sxGL7x7+vz1xffV4TtvRt8OaDP1cOtL+vPm+ObE1reFJ4XQCqGVylXzbLFcrnqLgW9LhbDomt26/NELfSuUQr/SMp8PyisrNfNKSyNDKxU/DM0r1azo16xatmqlZt5jr1Ay13VtZEj4mdzG/LyXSXoV+LMqlYw3I2nywExuI5EFAQCARP2d9//A5/7fCdz/u8HO/f9B4/ltxf0fAAAAAAAAAAAAAAAAAAAAAIB/wXYUOVEUOT/GI1L8hk/U+PuYpCFJw5KOSxqRNCrJkZSSdELSSUljkk5JOi1pXNIZSWclTTR9VtJ7xUGH9b+P/ncFnv/uRv+7W9OLu4PS8svV3GquPtbnM3kVFMjXlBx9jXvZUK/nrmdnpyyW0rnltUZ+bTXX15qflrNzYNrlp+t5a80PxOduN5+Ws3PA2uXTbfODunKpKe/K0YdHKivQUnwm9/Ivps1mbmb35Sfj//vfubarbf9c97D5ev4Xzkc01bY//ZrsT3bvkMLas6IXBH6FgoKCYrdI+psJnbDX9KRXAgAAAAAAAAAAAAAAAAD4HZ34OWHSewQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYL/vAQAA//94NGA9")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x4000)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0)
request_key(&(0x7f0000001d40)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe)
munlockall()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = eventfd2(0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r5}, 0x38)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r6, 0x0, 0x115}, 0x18)
ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="c37b98461025ba9c83"])
read$eventfd(r3, &(0x7f0000000040), 0x8)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, &(0x7f0000000200), &(0x7f0000000340)=0xfffffffffffffc23)
accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x80400)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)

199.906405ms ago: executing program 3 (id=820):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xf7b7, 0x808, 0x4, 0x289}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000580)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_CLOSE={0x13, 0xc, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x6e2, 0x3901, 0x1, 0x0, 0xe2c)

170.485038ms ago: executing program 2 (id=821):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000000}, 0x18)
r0 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="170000b6caf90000dc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be57aff9352b356be67ca2746357d1787b35", 0x14}], 0x1}}], 0x2, 0x4004040)

154.752461ms ago: executing program 0 (id=822):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0)
write$P9_RWALK(r2, &(0x7f0000000640)=ANY=[@ANYBLOB='5'], 0x30)

150.028971ms ago: executing program 2 (id=823):
socket(0x40000000015, 0x5, 0x0)
io_setup(0x2, &(0x7f0000000000))
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xb3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10)
pipe(&(0x7f0000005880)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0)

114.384726ms ago: executing program 3 (id=824):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, &(0x7f0000000580)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000540), 0x8, 0x15, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r1, 0x0, 0x6}, 0x18)
rseq(0x0, 0x0, 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)

113.956925ms ago: executing program 0 (id=825):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0)
write$P9_RWALK(r2, &(0x7f0000000640)=ANY=[@ANYBLOB='5'], 0x30)

82.03702ms ago: executing program 3 (id=826):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000))
r2 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0)
write$cgroup_type(r2, &(0x7f0000000000), 0xd4ba103)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="e058c1e4461e"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, r2}, 0x94)
close(r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r6, 0x58, &(0x7f0000000140)}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f)
munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)

71.870691ms ago: executing program 0 (id=827):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000050000000004", @ANYRES32=r0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc", 0x16)
socket$netlink(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x18)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)
socket$inet(0x2, 0x4000000000000001, 0x0)
r5 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x189)
recvmsg(r5, &(0x7f0000000400)={&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000000140)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000280)=""/154, 0x9a}, {&(0x7f0000000340)=""/179, 0xb3}, {&(0x7f0000000100)=""/35, 0x23}], 0x4, &(0x7f00000001c0)=""/100, 0x64}, 0x2042)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x443e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x200b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r5, 0x1)
r6 = socket(0x400000000010, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50, 0xcb, 0x5, 0x80f7}, {0x6, 0xfc, 0x4, 0x75}]}, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)

38.514775ms ago: executing program 2 (id=828):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
setxattr$system_posix_acl(0x0, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)

27.905167ms ago: executing program 3 (id=829):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000d00)={0x20, r2, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@void, @val={0xc, 0x99, {0x2, 0x6c}}}}, [@beacon]}, 0x20}, 0x1, 0x0, 0x0, 0x8810}, 0x0)

440.67µs ago: executing program 2 (id=830):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000001d555fa3816d1207d13d66ae7d4900000080020000008031f65076384af11e5db8088311afa118d1fa520000004a3a836678de96d8f51d373d689bfae6c9b92b75e1b7334e17c73b5e93d25542aa06e55a010d95e58648c987be39421d37f704c7442e77263bab4bae3a1008209a5c9ef03febea1684468f19dfb30063829ba56c58e7000090b6b8a7aa921fac27a2ebcc7273e0850d6705cdba4d661e48f8e8b95f5225db1fb9767247f136e0379ebd7c419c3fe96c72802f7fd51bfe99dc2f5268d3204016515d7544f77ddd39e067c2088fce0830ea187764c5758d532dabc1b1b493ef1d3fa5ca00"/248, @ANYRESHEX=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095", @ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0xffffff89, 0x8810, &(0x7f0000000080)={0xa, 0x4ea0, 0x4, @loopback={0xff00000000000000}, 0x2ab8f1b6}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f0000000000)={&(0x7f00000000c0)="e5a82dced95927ba0688e2fcca2134962612c5a932aaf64858297f795280f0e55e166aa160b31d5b3ff0f7ad8035b1b7ea7957c5df0be20ae7168e2807d446aa0ec3d324c5531f6028691465838152254431ccfb26174ecdd3f57367974d5a5b841afbe7d825b920dc21792b1749bddf4df887d3", 0x74})
syz_clone(0x57235a8dcb14b546, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x60000480)

0s ago: executing program 3 (id=831):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000002000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x120000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)={0xfc, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10009}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc95}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0xfedf, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6a7}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9e53}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x8010)
write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc13", 0x17)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
r6 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
pipe2(&(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r9, &(0x7f00000000c0)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
tee(r8, r10, 0xfffffffffffffc01, 0x8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r11 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r11, 0x0, 0x5, &(0x7f0000000240)={@private=0xa010100, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bf, 0x2, 0x7e, 0x6b}, 0x3c)
r12 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r12, 0x0, 0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000006c0)=@newtaction={0xa0, 0x30, 0x9, 0x100000, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xa, 0x0, 0x0, 0x1}}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {0x0, 0x0, 0x8, 0x43}, {0x3, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x84}, {}, {0x0, 0x0, 0x0, 0xafcd}, {0x6, 0x0, 0x1}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000004000000006955db32000b08d9bb6dfdb3c8a66226"], 0x50)

kernel console output (not intermixed with test programs):

00000 r/w without journal. Quota mode: none.
[   42.260373][ T3730] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   42.278387][ T3730] vhci_hcd vhci_hcd.2: invalid port number 96
[   42.284575][ T3730] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   42.301404][  T351] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.328663][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.329703][  T351] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.375392][  T351] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.383753][  T351] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.524544][ T3741] lo speed is unknown, defaulting to 1000
[   42.530694][ T3741] lo speed is unknown, defaulting to 1000
[   42.554968][ T3743] loop3: detected capacity change from 0 to 1024
[   42.570191][ T3743] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[   42.579844][ T3743] EXT4-fs (loop3): group descriptors corrupted!
[   42.631218][ T3745] siw: device registration error -23
[   42.638442][ T3743] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.716626][ T3743] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.811622][ T3743] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.851589][ T3743] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.903373][  T351] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.924775][  T351] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.949688][  T351] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.995224][  T351] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   43.103068][ T3751] loop3: detected capacity change from 0 to 512
[   43.136568][ T3751] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   43.182351][ T3751] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[   43.233466][ T3751] System zones: 1-12
[   43.254880][ T3751] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   43.317232][ T3751] EXT4-fs (loop3): 1 truncate cleaned up
[   43.342789][ T3751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.355872][ T3758] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   43.379726][ T3758] vhci_hcd vhci_hcd.2: invalid port number 96
[   43.385839][ T3758] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   43.410394][ T3760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'.
[   43.429477][ T3751] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   43.436894][ T3751] vhci_hcd vhci_hcd.2: invalid port number 96
[   43.443072][ T3751] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   43.495928][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.556045][ T3764] loop0: detected capacity change from 0 to 512
[   43.572676][ T3770] netlink: 260 bytes leftover after parsing attributes in process `syz.1.102'.
[   43.588760][ T3764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   43.638030][ T3776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'.
[   43.653020][ T3764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.670808][ T3773] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   43.701984][ T3764] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   43.717906][ T3778] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   43.728161][ T3773] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[   43.738055][ T3773] System zones: 1-12
[   43.740394][ T3778] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[   43.751215][ T3773] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   43.789926][ T3778] System zones: 1-12
[   43.807548][ T3773] EXT4-fs (loop3): 1 truncate cleaned up
[   43.813554][ T3778] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   43.831067][ T3773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.850571][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.889694][ T3778] EXT4-fs (loop4): 1 truncate cleaned up
[   43.895974][ T3778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.912356][ T3789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'.
[   43.926565][ T3773] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   43.934002][ T3773] vhci_hcd vhci_hcd.2: invalid port number 96
[   43.940154][ T3773] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   43.975651][ T3792] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   43.994371][ T3778] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   44.003119][ T3778] vhci_hcd vhci_hcd.2: invalid port number 96
[   44.003377][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.009291][ T3778] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   44.038850][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.071740][ T3792] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[   44.076802][ T3796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.110'.
[   44.105407][ T3792] System zones: 1-12
[   44.110354][ T3792] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   44.142328][ T3797] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   44.157267][ T3792] EXT4-fs (loop0): 1 truncate cleaned up
[   44.166232][   T29] kauditd_printk_skb: 4797 callbacks suppressed
[   44.166247][   T29] audit: type=1400 audit(1768439570.147:8191): avc:  denied  { create } for  pid=3798 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   44.182102][ T3792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.209943][ T3799] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.211736][   T29] audit: type=1400 audit(1768439570.187:8192): avc:  denied  { ioctl } for  pid=3798 comm="syz.1.112" path="socket:[6314]" dev="sockfs" ino=6314 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   44.217462][ T3799] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.249331][ T3797] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[   44.266282][ T3797] System zones: 1-12
[   44.277302][   T29] audit: type=1400 audit(1768439570.257:8193): avc:  denied  { create } for  pid=3798 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   44.296689][   T29] audit: type=1400 audit(1768439570.257:8194): avc:  denied  { mount } for  pid=3798 comm="syz.1.112" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   44.318786][   T29] audit: type=1400 audit(1768439570.257:8195): avc:  denied  { mounton } for  pid=3798 comm="syz.1.112" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   44.341001][ T3797] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   44.365911][   T29] audit: type=1400 audit(1768439570.347:8196): avc:  denied  { unmount } for  pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   44.366449][ T3797] EXT4-fs (loop4): 1 truncate cleaned up
[   44.400287][ T3797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.436732][   T29] audit: type=1400 audit(1768439570.377:8197): avc:  denied  { unmount } for  pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   44.456770][   T29] audit: type=1326 audit(1768439570.397:8198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.1.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a84ef749 code=0x7ffc0000
[   44.480214][   T29] audit: type=1326 audit(1768439570.397:8199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.1.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a84ef749 code=0x7ffc0000
[   44.503640][   T29] audit: type=1326 audit(1768439570.397:8200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.1.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a84ef749 code=0x7ffc0000
[   44.508046][ T3792] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   44.537950][ T3804] siw: device registration error -23
[   44.547485][ T3792] vhci_hcd vhci_hcd.2: invalid port number 96
[   44.553901][ T3792] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   44.573475][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.591017][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.613613][ T3811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.116'.
[   44.628162][ T3809] set_capacity_and_notify: 4 callbacks suppressed
[   44.628241][ T3809] loop1: detected capacity change from 0 to 512
[   44.646021][ T3813] loop0: detected capacity change from 0 to 512
[   44.653219][ T3813] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   44.665757][ T3809] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   44.677038][ T3809] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[   44.685529][ T3809] System zones: 1-12
[   44.690233][ T3809] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   44.720343][ T3813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.720884][ T3809] EXT4-fs (loop1): 1 truncate cleaned up
[   44.752390][ T3813] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   44.752505][ T3809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.826566][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.840492][ T3809] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   44.848017][ T3809] vhci_hcd vhci_hcd.2: invalid port number 96
[   44.854177][ T3809] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   44.879746][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.901242][ T3826] loop0: detected capacity change from 0 to 512
[   44.916516][ T3826] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   44.947870][ T3826] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[   44.958062][ T3826] System zones: 1-12
[   44.962763][ T3826] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   44.988023][ T3826] EXT4-fs (loop0): 1 truncate cleaned up
[   44.997388][ T3826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.011434][ T3830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.123'.
[   45.031003][ T3826] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   45.047831][ T3826] vhci_hcd vhci_hcd.2: invalid port number 96
[   45.054042][ T3826] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   45.072756][ T3837] loop1: detected capacity change from 0 to 512
[   45.084089][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.104691][ T3837] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   45.126018][ T3837] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[   45.138008][ T3837] System zones: 1-12
[   45.142913][ T3837] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   45.159830][ T3837] EXT4-fs (loop1): 1 truncate cleaned up
[   45.166194][ T3837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.220315][ T3837] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   45.239285][ T3837] vhci_hcd vhci_hcd.2: invalid port number 96
[   45.245500][ T3837] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   45.267199][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.279296][ T3846] loop0: detected capacity change from 0 to 1024
[   45.286922][ T3846] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   45.326871][ T3846] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.129: Invalid block bitmap block 0 in block_group 0
[   45.340651][ T3846] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.129: Failed to acquire dquot type 0
[   45.352586][ T3846] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.129: Freeing blocks not in datazone - block = 0, count = 4096
[   45.366603][ T3846] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.129: Invalid inode bitmap blk 0 in block_group 0
[   45.379288][   T90] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0
[   45.391036][ T3846] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[   45.400410][ T3846] EXT4-fs (loop0): 1 orphan inode deleted
[   45.408694][ T3846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.424781][ T3851] loop1: detected capacity change from 0 to 512
[   45.436047][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.448646][ T3851] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   45.473503][ T3851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.503018][ T3851] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   45.533589][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.630206][ T3860] loop0: detected capacity change from 0 to 512
[   45.633076][ T3861] siw: device registration error -23
[   45.638708][ T3860] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   45.662339][ T3860] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[   45.683637][ T3860] System zones: 1-12
[   45.694708][ T3860] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   45.710096][ T3860] EXT4-fs (loop0): 1 truncate cleaned up
[   45.716403][ T3860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.890207][ T3860] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   45.897604][ T3860] vhci_hcd vhci_hcd.2: invalid port number 96
[   45.903939][ T3860] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   46.039901][ T3866] lo speed is unknown, defaulting to 1000
[   46.046418][ T3866] lo speed is unknown, defaulting to 1000
[   46.263768][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.673651][ T3879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'.
[   46.795664][ T3885] loop0: detected capacity change from 0 to 512
[   46.812996][ T3881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'.
[   46.831384][ T3885] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   46.848981][ T3885] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[   46.857128][ T3885] System zones: 1-12
[   46.868007][ T3885] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   46.894453][ T3885] EXT4-fs (loop0): 1 truncate cleaned up
[   46.900624][ T3885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.947764][ T3885] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   46.955315][ T3885] vhci_hcd vhci_hcd.2: invalid port number 96
[   46.961451][ T3885] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   46.994404][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.995198][ T3890] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.010568][ T3890] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.051137][ T3894] loop0: detected capacity change from 0 to 512
[   47.080341][ T3894] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   47.100462][ T3894] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[   47.108799][ T3894] System zones: 1-12
[   47.116823][ T3894] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   47.136259][ T3894] EXT4-fs (loop0): 1 truncate cleaned up
[   47.142435][ T3894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.284507][ T3894] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   47.292206][ T3894] vhci_hcd vhci_hcd.2: invalid port number 96
[   47.298392][ T3894] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   47.319069][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.410432][ T3913] lo speed is unknown, defaulting to 1000
[   47.416765][ T3913] lo speed is unknown, defaulting to 1000
[   47.442853][ T3908] lo speed is unknown, defaulting to 1000
[   47.465455][ T3908] lo speed is unknown, defaulting to 1000
[   47.718508][ T3914] lo speed is unknown, defaulting to 1000
[   47.724801][ T3914] lo speed is unknown, defaulting to 1000
[   47.944332][ T3918] loop2: detected capacity change from 0 to 512
[   47.951513][ T3918] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   47.964855][ T3918] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[   47.973101][ T3918] System zones: 1-12
[   47.977683][ T3918] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   47.993080][ T3918] EXT4-fs (loop2): 1 truncate cleaned up
[   48.010345][ T3918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.070597][ T3918] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   48.088390][ T3918] vhci_hcd vhci_hcd.2: invalid port number 96
[   48.094542][ T3918] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   48.132546][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.151196][ T3924] capability: warning: `syz.4.159' uses 32-bit capabilities (legacy support in use)
[   48.240281][ T3926] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   48.264719][ T3926] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.158: Invalid block bitmap block 0 in block_group 0
[   48.315901][ T3926] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.158: Failed to acquire dquot type 0
[   48.342937][ T3926] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.158: Freeing blocks not in datazone - block = 0, count = 4096
[   48.356746][ T3926] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.158: Invalid inode bitmap blk 0 in block_group 0
[   48.379651][ T1608] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0
[   48.395740][ T3926] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[   48.427952][ T3926] EXT4-fs (loop2): 1 orphan inode deleted
[   48.439425][ T3926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.514445][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.574906][ T3946] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   48.603057][ T3946] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[   48.623856][ T3946] System zones: 1-12
[   48.644456][ T3946] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   48.686619][ T3953] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   48.715193][ T3946] EXT4-fs (loop4): 1 truncate cleaned up
[   48.728894][ T3946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.778605][ T3953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.829656][ T3953] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   48.843239][ T3946] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   48.856439][ T3946] vhci_hcd vhci_hcd.2: invalid port number 96
[   48.862640][ T3946] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   48.896399][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.910599][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.088502][ T3978] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.095905][ T3978] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.170182][   T29] kauditd_printk_skb: 2066 callbacks suppressed
[   49.170242][   T29] audit: type=1326 audit(1768439575.157:10261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaa47b2005 code=0x7ffc0000
[   49.257531][   T29] audit: type=1326 audit(1768439575.157:10262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaa47b2005 code=0x7ffc0000
[   49.281144][   T29] audit: type=1326 audit(1768439575.157:10263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaa47b2005 code=0x7ffc0000
[   49.304880][   T29] audit: type=1326 audit(1768439575.157:10264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaa47b2005 code=0x7ffc0000
[   49.328370][   T29] audit: type=1326 audit(1768439575.157:10265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaa47b2005 code=0x7ffc0000
[   49.351850][   T29] audit: type=1326 audit(1768439575.157:10266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaa47b2005 code=0x7ffc0000
[   49.375343][   T29] audit: type=1326 audit(1768439575.157:10267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaa47b2005 code=0x7ffc0000
[   49.398798][   T29] audit: type=1326 audit(1768439575.157:10268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdaa47765e7 code=0x7ffc0000
[   49.422255][   T29] audit: type=1326 audit(1768439575.157:10269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdaa471b829 code=0x7ffc0000
[   49.445616][   T29] audit: type=1326 audit(1768439575.157:10270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaa47b2005 code=0x7ffc0000
[   49.557237][ T3990] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   49.573849][ T3990] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[   49.582398][ T3990] System zones: 1-12
[   49.588385][ T3990] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   49.603859][ T3990] EXT4-fs (loop3): 1 truncate cleaned up
[   49.610769][ T3990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.650171][ T3990] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   49.657672][ T3990] vhci_hcd vhci_hcd.2: invalid port number 96
[   49.663792][ T3990] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   49.683923][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.762367][ T3995] siw: device registration error -23
[   49.830053][ T3997] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   49.851858][ T3997] vhci_hcd vhci_hcd.2: invalid port number 96
[   49.858014][ T3997] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   50.019221][ T4013] set_capacity_and_notify: 6 callbacks suppressed
[   50.019238][ T4013] loop2: detected capacity change from 0 to 128
[   50.180030][ T4021] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   50.189541][ T4021] vhci_hcd vhci_hcd.2: invalid port number 96
[   50.195658][ T4021] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   50.321967][ T4037] loop0: detected capacity change from 0 to 512
[   50.331712][ T4037] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   50.424131][ T4037] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.208: invalid indirect mapped block 4294967295 (level 1)
[   50.448207][ T4037] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.208: invalid indirect mapped block 4294967295 (level 1)
[   50.457323][ T4047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'.
[   50.473881][ T4037] EXT4-fs (loop0): 2 truncates cleaned up
[   50.483581][ T4037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.497519][ T4044] lo speed is unknown, defaulting to 1000
[   50.504099][ T4044] lo speed is unknown, defaulting to 1000
[   50.551403][ T4037] EXT4-fs (loop0): Online defrag not supported for non-extent files
[   50.606627][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.683790][ T4054] netlink: 260 bytes leftover after parsing attributes in process `syz.0.213'.
[   50.724512][ T4054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'.
[   50.745052][ T4054] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.752497][ T4054] batman_adv: batadv0: Removing interface: batadv_slave_0
[   50.770157][ T4054] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   50.777575][ T4054] batman_adv: batadv0: Removing interface: batadv_slave_1
[   51.179151][ T4071] loop2: detected capacity change from 0 to 1024
[   51.198427][ T4071] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   51.313532][ T4074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.221'.
[   51.354292][ T4071] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.222: Invalid block bitmap block 0 in block_group 0
[   51.390220][ T4079] loop4: detected capacity change from 0 to 128
[   51.409143][ T4071] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.222: Failed to acquire dquot type 0
[   51.456897][ T4071] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.222: Freeing blocks not in datazone - block = 0, count = 4096
[   51.478787][ T4083] netlink: 260 bytes leftover after parsing attributes in process `syz.4.225'.
[   51.490862][ T4071] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.222: Invalid inode bitmap blk 0 in block_group 0
[   51.506137][ T4071] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[   51.509437][ T4083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'.
[   51.526922][  T290] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0
[   51.527461][ T4071] EXT4-fs (loop2): 1 orphan inode deleted
[   51.544389][ T4083] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.551940][ T4083] batman_adv: batadv0: Removing interface: batadv_slave_0
[   51.560177][ T4071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.580262][ T4083] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.587666][ T4083] batman_adv: batadv0: Removing interface: batadv_slave_1
[   51.631716][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.849408][ T4102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.234'.
[   51.859206][ T4104] loop4: detected capacity change from 0 to 128
[   52.170045][ T4117] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   52.177706][ T4117] vhci_hcd vhci_hcd.2: invalid port number 96
[   52.183822][ T4117] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   52.285086][ T4118] lo speed is unknown, defaulting to 1000
[   52.291568][ T4118] lo speed is unknown, defaulting to 1000
[   52.582428][ T4120] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   52.604971][ T4120] vhci_hcd vhci_hcd.2: invalid port number 96
[   52.611154][ T4120] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   52.696357][ T4128] netlink: 260 bytes leftover after parsing attributes in process `syz.1.245'.
[   52.753381][ T4128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'.
[   52.866469][ T4144] loop1: detected capacity change from 0 to 128
[   52.880004][ T4142] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   52.889579][ T4142] vhci_hcd vhci_hcd.2: invalid port number 96
[   52.895687][ T4142] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   53.054342][ T4150] syzkaller0: entered promiscuous mode
[   53.060031][ T4150] syzkaller0: entered allmulticast mode
[   53.192985][ T4162] netlink: 260 bytes leftover after parsing attributes in process `syz.0.260'.
[   53.337938][ T4179] loop3: detected capacity change from 0 to 128
[   53.981710][ T4238] loop0: detected capacity change from 0 to 1024
[   53.990044][ T4238] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[   53.999729][ T4238] EXT4-fs (loop0): group descriptors corrupted!
[   54.158257][ T4229] capability: warning: `syz.4.287' uses deprecated v2 capabilities in a way that may be insecure
[   54.181274][   T29] kauditd_printk_skb: 6631 callbacks suppressed
[   54.181285][   T29] audit: type=1326 audit(1768439580.167:16890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaa47b2005 code=0x7ffc0000
[   54.211530][   T29] audit: type=1326 audit(1768439580.167:16891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56f7dff749 code=0x7ffc0000
[   54.235010][   T29] audit: type=1326 audit(1768439580.167:16892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f7dff749 code=0x7ffc0000
[   54.258534][   T29] audit: type=1326 audit(1768439580.167:16893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f7dff749 code=0x7ffc0000
[   54.282008][   T29] audit: type=1326 audit(1768439580.167:16894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdaa47765e7 code=0x7ffc0000
[   54.305448][   T29] audit: type=1326 audit(1768439580.167:16895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdaa471b829 code=0x7ffc0000
[   54.328956][   T29] audit: type=1326 audit(1768439580.167:16896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fdaa477f749 code=0x7ffc0000
[   54.352519][   T29] audit: type=1326 audit(1768439580.177:16897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaa47b2005 code=0x7ffc0000
[   54.376125][   T29] audit: type=1326 audit(1768439580.177:16898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdaa47765e7 code=0x7ffc0000
[   54.399540][   T29] audit: type=1326 audit(1768439580.177:16899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdaa471b829 code=0x7ffc0000
[   54.555224][ T4246] lo speed is unknown, defaulting to 1000
[   54.569426][ T4262] Illegal XDP return value 4294967274 on prog  (id 182) dev N/A, expect packet loss!
[   54.591438][ T4246] lo speed is unknown, defaulting to 1000
[   54.617275][ T4266] loop4: detected capacity change from 0 to 1024
[   54.624944][ T4266] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   54.687933][ T4266] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.302: Invalid block bitmap block 0 in block_group 0
[   54.721433][ T4266] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.302: Failed to acquire dquot type 0
[   54.743672][ T4271] loop3: detected capacity change from 0 to 1024
[   54.750837][ T4266] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.302: Freeing blocks not in datazone - block = 0, count = 4096
[   54.767096][ T4271] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[   54.776713][ T4271] EXT4-fs (loop3): group descriptors corrupted!
[   54.807600][ T4272] lo speed is unknown, defaulting to 1000
[   54.814099][ T4272] lo speed is unknown, defaulting to 1000
[   54.942577][ T4266] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.302: Invalid inode bitmap blk 0 in block_group 0
[   55.070498][ T4266] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[   55.120268][ T4266] EXT4-fs (loop4): 1 orphan inode deleted
[   55.165816][ T4266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.184423][   T12] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0
[   55.213305][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.351572][ T4280] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   55.362038][ T4280] vhci_hcd vhci_hcd.2: invalid port number 96
[   55.368170][ T4280] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   55.380142][ T4284] siw: device registration error -23
[   55.643441][ T4292] siw: device registration error -23
[   55.722495][ T4302] loop0: detected capacity change from 0 to 1024
[   55.730070][ T4302] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[   55.739780][ T4302] EXT4-fs (loop0): group descriptors corrupted!
[   55.758876][ T4286] __nla_validate_parse: 9 callbacks suppressed
[   55.758888][ T4286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.310'.
[   55.774004][ T4286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.310'.
[   55.816540][ T4305] loop4: detected capacity change from 0 to 1024
[   55.870928][ T4305] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   55.916695][ T4305] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.317: Invalid block bitmap block 0 in block_group 0
[   55.939769][ T4305] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.317: Failed to acquire dquot type 0
[   55.951269][ T4305] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.317: Freeing blocks not in datazone - block = 0, count = 4096
[   55.965194][ T4305] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.317: Invalid inode bitmap blk 0 in block_group 0
[   55.977800][ T1579] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0
[   55.978024][ T4305] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[   55.998165][ T4305] EXT4-fs (loop4): 1 orphan inode deleted
[   56.004358][ T4305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.061257][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.084535][ T4319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'.
[   56.106987][ T4318] siw: device registration error -23
[   56.140038][ T4321] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   56.153819][ T4321] vhci_hcd vhci_hcd.2: invalid port number 96
[   56.160172][ T4321] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   56.358686][ T4340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4340 comm=syz.1.332
[   56.418302][ T4340] loop1: detected capacity change from 0 to 4096
[   56.486746][ T4343] lo speed is unknown, defaulting to 1000
[   56.493120][ T4343] lo speed is unknown, defaulting to 1000
[   56.702170][ T4340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.796100][ T4346] netlink: 260 bytes leftover after parsing attributes in process `syz.2.334'.
[   56.816208][ T4340] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.332: bg 0: block 137: padding at end of block bitmap is not set
[   56.831048][ T4346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.334'.
[   56.849585][ T4346] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.857091][ T4346] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.865194][ T4346] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.872770][ T4346] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.900806][ T4349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.335'.
[   56.911817][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.919253][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.929526][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.936943][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.959753][ T4350] wg1 speed is unknown, defaulting to 1000
[   56.965758][ T4350] wg1 speed is unknown, defaulting to 1000
[   56.975915][ T4350] wg1 speed is unknown, defaulting to 1000
[   56.983946][ T4350] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   57.055337][ T4350] wg1 speed is unknown, defaulting to 1000
[   57.062315][ T4350] wg1 speed is unknown, defaulting to 1000
[   57.070689][ T4350] wg1 speed is unknown, defaulting to 1000
[   57.077254][ T4350] wg1 speed is unknown, defaulting to 1000
[   57.090132][ T4361] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   57.116425][ T4361] vhci_hcd vhci_hcd.2: invalid port number 96
[   57.122640][ T4361] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   57.155257][ T4350] wg1 speed is unknown, defaulting to 1000
[   57.165304][ T4359] lo speed is unknown, defaulting to 1000
[   57.171584][ T4359] lo speed is unknown, defaulting to 1000
[   57.177697][ T4350] wg1 speed is unknown, defaulting to 1000
[   57.187745][ T4350] wg1 speed is unknown, defaulting to 1000
[   57.277440][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.286860][ T4374] loop3: detected capacity change from 0 to 1024
[   57.296386][ T4374] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   57.352864][ T4374] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.344: Invalid block bitmap block 0 in block_group 0
[   57.433419][ T4381] FAULT_INJECTION: forcing a failure.
[   57.433419][ T4381] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   57.446549][ T4381] CPU: 0 UID: 0 PID: 4381 Comm: syz.4.341 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   57.446574][ T4381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   57.446592][ T4381] Call Trace:
[   57.446621][ T4381]  <TASK>
[   57.446629][ T4381]  __dump_stack+0x1d/0x30
[   57.446650][ T4381]  dump_stack_lvl+0x95/0xd0
[   57.446667][ T4381]  dump_stack+0x15/0x1b
[   57.446683][ T4381]  should_fail_ex+0x265/0x280
[   57.446756][ T4381]  should_fail+0xb/0x20
[   57.446774][ T4381]  should_fail_usercopy+0x1a/0x20
[   57.446794][ T4381]  _copy_from_user+0x1c/0xb0
[   57.446817][ T4381]  tcp_v6_parse_md5_keys+0x9a/0x450
[   57.446923][ T4381]  do_tcp_setsockopt+0x1004/0x1680
[   57.447036][ T4381]  ? selinux_socket_setsockopt+0x1ad/0x1e0
[   57.447060][ T4381]  tcp_setsockopt+0x51/0xb0
[   57.447082][ T4381]  sock_common_setsockopt+0x69/0x80
[   57.447101][ T4381]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   57.447200][ T4381]  __sys_setsockopt+0x184/0x200
[   57.447276][ T4381]  __x64_sys_setsockopt+0x64/0x80
[   57.447312][ T4381]  x64_sys_call+0x21d5/0x3000
[   57.447352][ T4381]  do_syscall_64+0xca/0x2b0
[   57.447388][ T4381]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.447412][ T4381] RIP: 0033:0x7fe1840ff749
[   57.447429][ T4381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   57.447448][ T4381] RSP: 002b:00007fe182b1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   57.447533][ T4381] RAX: ffffffffffffffda RBX: 00007fe184356180 RCX: 00007fe1840ff749
[   57.447560][ T4381] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000005
[   57.447574][ T4381] RBP: 00007fe182b1d090 R08: 00000000000000d8 R09: 0000000000000000
[   57.447588][ T4381] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001
[   57.447602][ T4381] R13: 00007fe184356218 R14: 00007fe184356180 R15: 00007ffc51b5db68
[   57.447621][ T4381]  </TASK>
[   57.648673][ T4374] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.344: Failed to acquire dquot type 0
[   57.720976][ T4374] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.344: Freeing blocks not in datazone - block = 0, count = 4096
[   57.831672][ T4374] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.344: Invalid inode bitmap blk 0 in block_group 0
[   57.849676][   T12] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0
[   57.915204][ T4374] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[   57.930047][ T4374] EXT4-fs (loop3): 1 orphan inode deleted
[   57.953758][ T4374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.150627][ T4399] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   58.158039][ T4399] vhci_hcd vhci_hcd.2: invalid port number 96
[   58.164230][ T4399] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   58.228679][ T4400] lo speed is unknown, defaulting to 1000
[   58.235056][ T4400] lo speed is unknown, defaulting to 1000
[   58.293571][ T4400] wg1 speed is unknown, defaulting to 1000
[   58.370216][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.700700][ T4415] loop2: detected capacity change from 0 to 1024
[   58.720470][ T4415] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[   58.730200][ T4415] EXT4-fs (loop2): group descriptors corrupted!
[   58.758031][ T4418] netlink: 16 bytes leftover after parsing attributes in process `syz.3.360'.
[   58.848011][ T4423] loop2: detected capacity change from 0 to 128
[   59.020956][ T4431] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   59.041650][ T4435] loop0: detected capacity change from 0 to 1024
[   59.049679][ T4431] vhci_hcd vhci_hcd.2: invalid port number 96
[   59.055882][ T4431] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   59.086396][ T4435] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   59.128305][ T4435] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.369: Invalid block bitmap block 0 in block_group 0
[   59.153346][ T4435] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.369: Failed to acquire dquot type 0
[   59.179846][ T4435] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.369: Freeing blocks not in datazone - block = 0, count = 4096
[   59.190051][   T29] kauditd_printk_skb: 2338 callbacks suppressed
[   59.190103][   T29] audit: type=1326 audit(1768439585.177:19206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe184132005 code=0x7ffc0000
[   59.241600][   T29] audit: type=1400 audit(1768439585.177:19207): avc:  denied  { read write } for  pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   59.243221][ T4449] audit: audit_backlog=65 > audit_backlog_limit=64
[   59.266099][   T29] audit: type=1400 audit(1768439585.177:19208): avc:  denied  { open } for  pid=3315 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   59.272774][ T4449] audit: audit_lost=11 audit_rate_limit=0 audit_backlog_limit=64
[   59.297067][   T29] audit: type=1400 audit(1768439585.177:19209): avc:  denied  { ioctl } for  pid=3315 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   59.304779][ T4449] audit: backlog limit exceeded
[   59.335316][   T29] audit: type=1326 audit(1768439585.177:19210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe1840f65e7 code=0x7ffc0000
[   59.341268][ T4451] syzkaller0: entered promiscuous mode
[   59.358640][   T29] audit: type=1326 audit(1768439585.177:19211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe18409b829 code=0x7ffc0000
[   59.358671][   T29] audit: type=1326 audit(1768439585.177:19212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fe1840ff749 code=0x7ffc0000
[   59.411274][ T4451] syzkaller0: entered allmulticast mode
[   59.469716][ T4435] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.369: Invalid inode bitmap blk 0 in block_group 0
[   59.482797][ T4435] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[   59.491713][   T90] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0
[   59.509864][ T4435] EXT4-fs (loop0): 1 orphan inode deleted
[   59.571398][ T4459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.377'.
[   59.585691][ T4461] FAULT_INJECTION: forcing a failure.
[   59.585691][ T4461] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   59.598899][ T4461] CPU: 0 UID: 0 PID: 4461 Comm: syz.4.379 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   59.598934][ T4461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   59.598946][ T4461] Call Trace:
[   59.598953][ T4461]  <TASK>
[   59.599002][ T4461]  __dump_stack+0x1d/0x30
[   59.599030][ T4461]  dump_stack_lvl+0x95/0xd0
[   59.599099][ T4461]  dump_stack+0x15/0x1b
[   59.599118][ T4461]  should_fail_ex+0x265/0x280
[   59.599141][ T4461]  should_fail+0xb/0x20
[   59.599201][ T4461]  should_fail_usercopy+0x1a/0x20
[   59.599232][ T4461]  _copy_from_user+0x1c/0xb0
[   59.599308][ T4461]  ___sys_sendmsg+0xc1/0x1d0
[   59.599350][ T4461]  __x64_sys_sendmsg+0xd4/0x160
[   59.599385][ T4461]  x64_sys_call+0x17ba/0x3000
[   59.599426][ T4461]  do_syscall_64+0xca/0x2b0
[   59.599568][ T4461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.599597][ T4461] RIP: 0033:0x7fe1840ff749
[   59.599616][ T4461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.599638][ T4461] RSP: 002b:00007fe182b5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   59.599662][ T4461] RAX: ffffffffffffffda RBX: 00007fe184355fa0 RCX: 00007fe1840ff749
[   59.599681][ T4461] RDX: 0000000020004081 RSI: 0000200000000880 RDI: 0000000000000003
[   59.599769][ T4461] RBP: 00007fe182b5f090 R08: 0000000000000000 R09: 0000000000000000
[   59.599786][ T4461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   59.599801][ T4461] R13: 00007fe184356038 R14: 00007fe184355fa0 R15: 00007ffc51b5db68
[   59.599885][ T4461]  </TASK>
[   59.855082][ T4464] lo speed is unknown, defaulting to 1000
[   59.861718][ T4464] lo speed is unknown, defaulting to 1000
[   59.922151][ T4464] wg1 speed is unknown, defaulting to 1000
[   60.070760][ T4466] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   60.127639][ T4466] vhci_hcd vhci_hcd.2: invalid port number 96
[   60.134035][ T4466] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   60.369799][ T4474] lo speed is unknown, defaulting to 1000
[   60.376450][ T4474] lo speed is unknown, defaulting to 1000
[   60.391901][ T4478] loop2: detected capacity change from 0 to 128
[   60.541580][ T4474] wg1 speed is unknown, defaulting to 1000
[   60.611123][ T4484] siw: device registration error -23
[   60.724058][ T4494] loop3: detected capacity change from 0 to 1024
[   60.754626][ T4494] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   60.768867][ T4494] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.392: Invalid block bitmap block 0 in block_group 0
[   60.784217][ T4496] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   60.791962][ T4496] vhci_hcd vhci_hcd.2: invalid port number 96
[   60.798267][ T4496] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   60.808768][ T4494] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.392: Failed to acquire dquot type 0
[   60.850758][ T4494] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.392: Freeing blocks not in datazone - block = 0, count = 4096
[   60.867128][ T4494] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.392: Invalid inode bitmap blk 0 in block_group 0
[   60.879937][  T290] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0
[   60.920327][ T4494] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[   60.938949][ T4494] EXT4-fs (loop3): 1 orphan inode deleted
[   61.093447][ T4517] loop4: detected capacity change from 0 to 128
[   61.100550][ T4511] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   61.108783][ T4511] vhci_hcd vhci_hcd.2: invalid port number 96
[   61.115263][ T4511] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   61.136678][ T4519] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   61.146321][ T4515] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   61.154454][ T4519] vhci_hcd vhci_hcd.2: invalid port number 96
[   61.160626][ T4519] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   61.196646][ T4523] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   61.213413][ T4523] loop3: detected capacity change from 0 to 1024
[   61.220549][ T4523] EXT4-fs: inline encryption not supported
[   61.226416][ T4523] EXT4-fs: Ignoring removed orlov option
[   61.259442][ T4523] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   61.333645][ T4533] loop1: detected capacity change from 0 to 1024
[   61.371205][ T4533] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   61.426525][ T4533] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.410: Invalid block bitmap block 0 in block_group 0
[   61.495816][ T4547] FAULT_INJECTION: forcing a failure.
[   61.495816][ T4547] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   61.509049][ T4547] CPU: 0 UID: 0 PID: 4547 Comm: ÿ Not tainted syzkaller #0 PREEMPT(voluntary) 
[   61.509153][ T4547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   61.509169][ T4547] Call Trace:
[   61.509178][ T4547]  <TASK>
[   61.509188][ T4547]  __dump_stack+0x1d/0x30
[   61.509242][ T4547]  dump_stack_lvl+0x95/0xd0
[   61.509333][ T4547]  dump_stack+0x15/0x1b
[   61.509360][ T4547]  should_fail_ex+0x265/0x280
[   61.509457][ T4547]  should_fail+0xb/0x20
[   61.509482][ T4547]  should_fail_usercopy+0x1a/0x20
[   61.509518][ T4547]  _copy_from_user+0x1c/0xb0
[   61.509549][ T4547]  ip_mcast_join_leave+0xa1/0x180
[   61.509627][ T4547]  do_ip_setsockopt+0x18e0/0x2240
[   61.509670][ T4547]  ip_setsockopt+0x58/0x110
[   61.509785][ T4547]  udp_setsockopt+0x99/0xb0
[   61.509862][ T4547]  sock_common_setsockopt+0x69/0x80
[   61.509885][ T4547]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   61.509914][ T4547]  __sys_setsockopt+0x184/0x200
[   61.509957][ T4547]  __x64_sys_setsockopt+0x64/0x80
[   61.510003][ T4547]  x64_sys_call+0x21d5/0x3000
[   61.510028][ T4547]  do_syscall_64+0xca/0x2b0
[   61.510062][ T4547]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.510091][ T4547] RIP: 0033:0x7fb9c773f749
[   61.510106][ T4547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   61.510125][ T4547] RSP: 002b:00007fb9c619f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   61.510150][ T4547] RAX: ffffffffffffffda RBX: 00007fb9c7995fa0 RCX: 00007fb9c773f749
[   61.510219][ T4547] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000004
[   61.510231][ T4547] RBP: 00007fb9c619f090 R08: 0000000000000088 R09: 0000000000000000
[   61.510247][ T4547] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[   61.510259][ T4547] R13: 00007fb9c7996038 R14: 00007fb9c7995fa0 R15: 00007ffdb7821668
[   61.510276][ T4547]  </TASK>
[   61.707117][ T4533] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.410: Failed to acquire dquot type 0
[   61.722001][ T4533] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.410: Freeing blocks not in datazone - block = 0, count = 4096
[   61.740736][ T4533] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.410: Invalid inode bitmap blk 0 in block_group 0
[   61.757409][ T4533] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[   61.766288][   T12] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0
[   61.766664][ T4533] EXT4-fs (loop1): 1 orphan inode deleted
[   61.830906][ T4557] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   61.851284][ T4557] vhci_hcd vhci_hcd.2: invalid port number 96
[   61.857454][ T4557] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   61.873581][ T4562] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   61.883323][ T4562] vhci_hcd vhci_hcd.2: invalid port number 96
[   61.889455][ T4562] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   61.918475][ T4560] lo speed is unknown, defaulting to 1000
[   61.940636][ T4560] lo speed is unknown, defaulting to 1000
[   62.033200][ T4560] wg1 speed is unknown, defaulting to 1000
[   62.191565][ T4584] netlink: 260 bytes leftover after parsing attributes in process `syz.1.425'.
[   62.297618][ T4586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'.
[   62.306988][ T4600] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   62.314651][ T4600] vhci_hcd vhci_hcd.2: invalid port number 96
[   62.320847][ T4600] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   62.415344][ T4612] FAULT_INJECTION: forcing a failure.
[   62.415344][ T4612] name failslab, interval 1, probability 0, space 0, times 0
[   62.415685][ T4616] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   62.415714][ T4616] vhci_hcd vhci_hcd.2: invalid port number 96
[   62.415795][ T4616] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   62.429489][ T4612] CPU: 0 UID: 0 PID: 4612 Comm: syz.4.434 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   62.429573][ T4612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   62.429624][ T4612] Call Trace:
[   62.429648][ T4612]  <TASK>
[   62.429671][ T4612]  __dump_stack+0x1d/0x30
[   62.429754][ T4612]  dump_stack_lvl+0x95/0xd0
[   62.429822][ T4612]  dump_stack+0x15/0x1b
[   62.429879][ T4612]  should_fail_ex+0x265/0x280
[   62.430016][ T4612]  should_failslab+0x8c/0xb0
[   62.430096][ T4612]  kmem_cache_alloc_noprof+0x69/0x4b0
[   62.430155][ T4612]  ? getname_flags+0x80/0x3b0
[   62.430301][ T4612]  getname_flags+0x80/0x3b0
[   62.430376][ T4612]  __x64_sys_symlinkat+0x4d/0x70
[   62.430453][ T4612]  x64_sys_call+0x2a36/0x3000
[   62.430569][ T4612]  do_syscall_64+0xca/0x2b0
[   62.430678][ T4612]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.430753][ T4612] RIP: 0033:0x7fe1840ff749
[   62.430799][ T4612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.430853][ T4612] RSP: 002b:00007fe182b5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[   62.430971][ T4612] RAX: ffffffffffffffda RBX: 00007fe184355fa0 RCX: 00007fe1840ff749
[   62.431006][ T4612] RDX: 0000000000000000 RSI: ffffffffffffff9c RDI: 0000000000000000
[   62.431057][ T4612] RBP: 00007fe182b5f090 R08: 0000000000000000 R09: 0000000000000000
[   62.431097][ T4612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   62.431131][ T4612] R13: 00007fe184356038 R14: 00007fe184355fa0 R15: 00007ffc51b5db68
[   62.431184][ T4612]  </TASK>
[   62.712799][ T4629] lo speed is unknown, defaulting to 1000
[   62.718868][ T4629] lo speed is unknown, defaulting to 1000
[   62.794030][ T4629] wg1 speed is unknown, defaulting to 1000
[   62.832997][ T4637] veth0_to_team: entered promiscuous mode
[   63.015449][ T4650] SELinux:  Context system_u:object_r:fonts_t:s0 is not valid (left unmapped).
[   63.028085][ T4650] netlink: 'syz.4.448': attribute type 1 has an invalid length.
[   63.035845][ T4650] netlink: 224 bytes leftover after parsing attributes in process `syz.4.448'.
[   63.079787][ T4653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4653 comm=syz.4.448
[   63.296047][ T4669] loop0: detected capacity change from 0 to 1024
[   63.320180][ T4669] EXT4-fs: Ignoring removed orlov option
[   63.326078][ T4669] EXT4-fs: Ignoring removed nomblk_io_submit option
[   63.358396][ T4674] siw: device registration error -23
[   63.598209][ T4698] FAULT_INJECTION: forcing a failure.
[   63.598209][ T4698] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   63.611522][ T4698] CPU: 0 UID: 0 PID: 4698 Comm: syz.3.465 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   63.611569][ T4698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   63.611646][ T4698] Call Trace:
[   63.611653][ T4698]  <TASK>
[   63.611661][ T4698]  __dump_stack+0x1d/0x30
[   63.611734][ T4698]  dump_stack_lvl+0x95/0xd0
[   63.611762][ T4698]  dump_stack+0x15/0x1b
[   63.611787][ T4698]  should_fail_ex+0x265/0x280
[   63.611817][ T4698]  should_fail+0xb/0x20
[   63.611874][ T4698]  should_fail_usercopy+0x1a/0x20
[   63.611897][ T4698]  _copy_from_user+0x1c/0xb0
[   63.611928][ T4698]  __sys_sendto+0x19e/0x330
[   63.612045][ T4698]  __x64_sys_sendto+0x76/0x90
[   63.612076][ T4698]  x64_sys_call+0x29a7/0x3000
[   63.612100][ T4698]  do_syscall_64+0xca/0x2b0
[   63.612204][ T4698]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.612228][ T4698] RIP: 0033:0x7fb9c773f749
[   63.612285][ T4698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   63.612307][ T4698] RSP: 002b:00007fb9c619f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   63.612329][ T4698] RAX: ffffffffffffffda RBX: 00007fb9c7995fa0 RCX: 00007fb9c773f749
[   63.612343][ T4698] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003
[   63.612405][ T4698] RBP: 00007fb9c619f090 R08: 000020000005ffe4 R09: 000000000000001c
[   63.612426][ T4698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   63.612439][ T4698] R13: 00007fb9c7996038 R14: 00007fb9c7995fa0 R15: 00007ffdb7821668
[   63.612460][ T4698]  </TASK>
[   63.790064][ T4700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.464'.
[   63.850391][ T4703] loop0: detected capacity change from 0 to 256
[   63.923926][ T4704] loop3: detected capacity change from 0 to 128
[   63.966012][ T4704] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.113294][ T4714] lo speed is unknown, defaulting to 1000
[   64.119870][ T4714] lo speed is unknown, defaulting to 1000
[   64.175944][ T4714] wg1 speed is unknown, defaulting to 1000
[   64.387037][   T29] kauditd_printk_skb: 2629 callbacks suppressed
[   64.387095][   T29] audit: type=1400 audit(1768439590.367:21831): avc:  denied  { setopt } for  pid=4718 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   64.474234][   T29] audit: type=1400 audit(1768439590.397:21832): avc:  denied  { ioctl } for  pid=4718 comm="syz.4.472" path="socket:[10348]" dev="sockfs" ino=10348 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   64.499196][   T29] audit: type=1400 audit(1768439590.427:21833): avc:  denied  { block_suspend } for  pid=4723 comm="syz.3.474" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   64.550078][   T29] audit: type=1326 audit(1768439590.537:21834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.4.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1840ff749 code=0x7ffc0000
[   64.589817][   T29] audit: type=1326 audit(1768439590.537:21835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.4.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1840ff749 code=0x7ffc0000
[   64.597368][ T4728] vlan2: entered promiscuous mode
[   64.613331][   T29] audit: type=1326 audit(1768439590.537:21836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.4.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1840ff749 code=0x7ffc0000
[   64.618575][ T4728] vlan2: entered allmulticast mode
[   64.641901][   T29] audit: type=1326 audit(1768439590.537:21837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.4.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1840ff749 code=0x7ffc0000
[   64.647015][ T4728] hsr_slave_1: entered allmulticast mode
[   64.676061][   T29] audit: type=1326 audit(1768439590.537:21838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.4.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1840ff749 code=0x7ffc0000
[   64.699542][   T29] audit: type=1326 audit(1768439590.537:21839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.4.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe1840ff749 code=0x7ffc0000
[   64.723039][   T29] audit: type=1326 audit(1768439590.537:21840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.4.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1840ff749 code=0x7ffc0000
[   64.827031][ T4739] FAULT_INJECTION: forcing a failure.
[   64.827031][ T4739] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   64.840298][ T4739] CPU: 0 UID: 0 PID: 4739 Comm: syz.2.479 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   64.840325][ T4739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   64.840358][ T4739] Call Trace:
[   64.840365][ T4739]  <TASK>
[   64.840374][ T4739]  __dump_stack+0x1d/0x30
[   64.840400][ T4739]  dump_stack_lvl+0x95/0xd0
[   64.840419][ T4739]  dump_stack+0x15/0x1b
[   64.840512][ T4739]  should_fail_ex+0x265/0x280
[   64.840609][ T4739]  should_fail+0xb/0x20
[   64.840631][ T4739]  should_fail_usercopy+0x1a/0x20
[   64.840658][ T4739]  strncpy_from_user+0x27/0x260
[   64.840698][ T4739]  ? __fget_files+0x184/0x1c0
[   64.840719][ T4739]  __se_sys_add_key+0x86/0x350
[   64.840789][ T4739]  __x64_sys_add_key+0x67/0x80
[   64.840820][ T4739]  x64_sys_call+0x2ea3/0x3000
[   64.840849][ T4739]  do_syscall_64+0xca/0x2b0
[   64.840889][ T4739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.840937][ T4739] RIP: 0033:0x7f56f7dff749
[   64.840954][ T4739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   64.841052][ T4739] RSP: 002b:00007f56f6867038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   64.841072][ T4739] RAX: ffffffffffffffda RBX: 00007f56f8055fa0 RCX: 00007f56f7dff749
[   64.841087][ T4739] RDX: 0000200000000300 RSI: 0000000000000000 RDI: 0000200000000040
[   64.841101][ T4739] RBP: 00007f56f6867090 R08: fffffffffffffffc R09: 0000000000000000
[   64.841113][ T4739] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[   64.841124][ T4739] R13: 00007f56f8056038 R14: 00007f56f8055fa0 R15: 00007ffd0593d288
[   64.841145][ T4739]  </TASK>
[   64.847609][ T4728] FAULT_INJECTION: forcing a failure.
[   64.847609][ T4728] name failslab, interval 1, probability 0, space 0, times 0
[   65.007672][ T4744] lo speed is unknown, defaulting to 1000
[   65.008249][ T4728] CPU: 0 UID: 0 PID: 4728 Comm: syz.4.475 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   65.008347][ T4728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   65.008418][ T4728] Call Trace:
[   65.008445][ T4728]  <TASK>
[   65.008466][ T4728]  __dump_stack+0x1d/0x30
[   65.008604][ T4728]  dump_stack_lvl+0x95/0xd0
[   65.008668][ T4728]  dump_stack+0x15/0x1b
[   65.008729][ T4728]  should_fail_ex+0x265/0x280
[   65.008799][ T4728]  should_failslab+0x8c/0xb0
[   65.008983][ T4728]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[   65.009097][ T4728]  ? __alloc_skb+0x2ff/0x4b0
[   65.009220][ T4728]  __alloc_skb+0x2ff/0x4b0
[   65.009286][ T4728]  ? __alloc_skb+0x228/0x4b0
[   65.009373][ T4728]  audit_log_start+0x3a0/0x720
[   65.009437][ T4728]  ? kstrtouint+0x76/0xc0
[   65.009509][ T4728]  audit_seccomp+0x48/0x100
[   65.009647][ T4728]  ? __seccomp_filter+0x832/0x1260
[   65.009745][ T4728]  __seccomp_filter+0x843/0x1260
[   65.009858][ T4728]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   65.009966][ T4728]  ? vfs_write+0x7e8/0x960
[   65.010019][ T4728]  ? __rcu_read_unlock+0x4f/0x70
[   65.010082][ T4728]  ? __fget_files+0x184/0x1c0
[   65.010205][ T4728]  __secure_computing+0x82/0x150
[   65.010287][ T4728]  syscall_trace_enter+0xcf/0x1e0
[   65.010353][ T4728]  do_syscall_64+0xa4/0x2b0
[   65.010523][ T4728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.010605][ T4728] RIP: 0033:0x7fe1840ff749
[   65.010655][ T4728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   65.010707][ T4728] RSP: 002b:00007fe182b5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   65.010760][ T4728] RAX: ffffffffffffffda RBX: 00007fe184355fa0 RCX: 00007fe1840ff749
[   65.010848][ T4728] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006
[   65.010881][ T4728] RBP: 00007fe182b5f090 R08: 0000000000000000 R09: 0000000000000000
[   65.010913][ T4728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   65.010953][ T4728] R13: 00007fe184356038 R14: 00007fe184355fa0 R15: 00007ffc51b5db68
[   65.011007][ T4728]  </TASK>
[   65.062727][ T4728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'.
[   65.154749][ T4744] lo speed is unknown, defaulting to 1000
[   65.310701][ T4755] SELinux: failed to load policy
[   65.327882][ T4744] wg1 speed is unknown, defaulting to 1000
[   65.503526][ T4767] lo speed is unknown, defaulting to 1000
[   65.510416][ T4767] lo speed is unknown, defaulting to 1000
[   65.541099][ T4770] netlink: 260 bytes leftover after parsing attributes in process `syz.3.491'.
[   65.602896][ T4778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.491'.
[   65.809367][ T4782] loop2: detected capacity change from 0 to 128
[   65.965517][ T4767] wg1 speed is unknown, defaulting to 1000
[   66.018470][ T4783] lo speed is unknown, defaulting to 1000
[   66.024978][ T4783] lo speed is unknown, defaulting to 1000
[   66.081917][ T4783] wg1 speed is unknown, defaulting to 1000
[   66.130885][ T4786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'.
[   66.150727][ T4786] loop1: detected capacity change from 0 to 128
[   66.178093][ T4775] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   66.230592][ T4794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'.
[   66.324432][ T4800] loop4: detected capacity change from 0 to 1024
[   66.332222][ T4800] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[   66.341890][ T4800] EXT4-fs (loop4): group descriptors corrupted!
[   66.384837][ T4800] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.442007][ T4800] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.480555][ T4811] netlink: 260 bytes leftover after parsing attributes in process `syz.3.506'.
[   66.522348][ T4800] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.554370][  T351] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.591731][ T4800] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.616642][ T4820] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.658016][  T351] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.687738][ T4827] loop3: detected capacity change from 0 to 1024
[   66.703564][ T4827] EXT4-fs: Ignoring removed mblk_io_submit option
[   66.740115][   T90] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.751772][  T351] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.778565][   T90] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.811134][   T90] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.820613][  T351] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.856889][   T90] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.866677][ T3410] wg1 speed is unknown, defaulting to 1000
[   66.872597][ T3410] syz0: Port: 1 Link DOWN
[   66.905142][ T4842] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.912369][ T4842] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.957316][ T4821] lo speed is unknown, defaulting to 1000
[   66.966882][  T351] bridge_slave_1: left allmulticast mode
[   66.972677][  T351] bridge_slave_1: left promiscuous mode
[   66.978402][  T351] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.010437][  T351] bridge_slave_0: left allmulticast mode
[   67.016144][  T351] bridge_slave_0: left promiscuous mode
[   67.022066][  T351] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.191911][  T351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   67.213470][  T351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   67.219302][ T4867] __nla_validate_parse: 10 callbacks suppressed
[   67.219360][ T4867] netlink: 260 bytes leftover after parsing attributes in process `syz.3.518'.
[   67.239888][  T351] bond0 (unregistering): Released all slaves
[   67.261828][ T4821] lo speed is unknown, defaulting to 1000
[   67.310193][ T4867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'.
[   67.328105][ T4821] wg1 speed is unknown, defaulting to 1000
[   67.383125][ T4883] loop0: detected capacity change from 0 to 512
[   67.390167][ T4880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.519'.
[   67.406176][ T4883] EXT4-fs (loop0): 1 truncate cleaned up
[   67.476791][ T4890] FAULT_INJECTION: forcing a failure.
[   67.476791][ T4890] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   67.490061][ T4890] CPU: 1 UID: 0 PID: 4890 Comm: syz.0.520 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   67.490145][ T4890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   67.490157][ T4890] Call Trace:
[   67.490163][ T4890]  <TASK>
[   67.490170][ T4890]  __dump_stack+0x1d/0x30
[   67.490260][ T4890]  dump_stack_lvl+0x95/0xd0
[   67.490288][ T4890]  dump_stack+0x15/0x1b
[   67.490314][ T4890]  should_fail_ex+0x265/0x280
[   67.490341][ T4890]  should_fail+0xb/0x20
[   67.490364][ T4890]  should_fail_usercopy+0x1a/0x20
[   67.490391][ T4890]  _copy_to_user+0x20/0xa0
[   67.490437][ T4890]  simple_read_from_buffer+0xb5/0x130
[   67.490464][ T4890]  proc_fail_nth_read+0x10e/0x150
[   67.490508][ T4890]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   67.490537][ T4890]  vfs_read+0x1a8/0x770
[   67.490558][ T4890]  ? __rcu_read_unlock+0x4f/0x70
[   67.490579][ T4890]  ? __fget_files+0x184/0x1c0
[   67.490600][ T4890]  ? mutex_lock+0x58/0x90
[   67.490652][ T4890]  ksys_read+0xda/0x1a0
[   67.490684][ T4890]  __x64_sys_read+0x40/0x50
[   67.490753][ T4890]  x64_sys_call+0x2889/0x3000
[   67.490784][ T4890]  do_syscall_64+0xca/0x2b0
[   67.490852][ T4890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.490959][ T4890] RIP: 0033:0x7fdaa477e15c
[   67.490978][ T4890] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   67.491000][ T4890] RSP: 002b:00007fdaa31be030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   67.491032][ T4890] RAX: ffffffffffffffda RBX: 00007fdaa49d6090 RCX: 00007fdaa477e15c
[   67.491048][ T4890] RDX: 000000000000000f RSI: 00007fdaa31be0a0 RDI: 0000000000000006
[   67.491064][ T4890] RBP: 00007fdaa31be090 R08: 0000000000000000 R09: 0000000000000000
[   67.491132][ T4890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   67.491147][ T4890] R13: 00007fdaa49d6128 R14: 00007fdaa49d6090 R15: 00007ffeb7d448e8
[   67.491166][ T4890]  </TASK>
[   67.522542][ T4883] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.520: bg 0: block 465: padding at end of block bitmap is not set
[   67.706649][  T351] hsr_slave_0: left promiscuous mode
[   67.712915][  T351] hsr_slave_1: left promiscuous mode
[   67.721724][  T351] veth1_macvtap: left promiscuous mode
[   67.727257][  T351] veth0_macvtap: left promiscuous mode
[   67.733042][  T351] veth1_vlan: left promiscuous mode
[   67.739170][  T351] veth0_vlan: left promiscuous mode
[   67.748841][ T4892] netlink: 16 bytes leftover after parsing attributes in process `syz.3.521'.
[   67.762523][ T4883] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 944 with error 28
[   67.775013][ T4883] EXT4-fs (loop0): This should not happen!! Data will be lost
[   67.775013][ T4883] 
[   67.784714][ T4883] EXT4-fs (loop0): Total free blocks count 0
[   67.790741][ T4883] EXT4-fs (loop0): Free/Dirty block details
[   67.796726][ T4883] EXT4-fs (loop0): free_blocks=0
[   67.801703][ T4883] EXT4-fs (loop0): dirty_blocks=944
[   67.806909][ T4883] EXT4-fs (loop0): Block reservation details
[   67.812929][ T4883] EXT4-fs (loop0): i_reserved_data_blocks=944
[   67.838067][ T4902] syz.2.523 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   67.858385][ T4902] loop2: detected capacity change from 0 to 2048
[   67.959952][  T351] team0 (unregistering): Port device team_slave_1 removed
[   67.973491][  T351] team0 (unregistering): Port device team_slave_0 removed
[   68.058217][ T4911] lo speed is unknown, defaulting to 1000
[   68.084420][ T4821] chnl_net:caif_netlink_parms(): no params data found
[   68.097791][ T4920] loop4: detected capacity change from 0 to 1024
[   68.114274][ T4911] lo speed is unknown, defaulting to 1000
[   68.126432][ T4920] EXT4-fs: Ignoring removed orlov option
[   68.132233][ T4920] EXT4-fs: Ignoring removed nomblk_io_submit option
[   68.263759][ T4920] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[   68.271052][ T3481] IPVS: starting estimator thread 0...
[   68.294462][ T4821] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.302199][ T4821] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.311698][ T4821] bridge_slave_0: entered allmulticast mode
[   68.318772][ T4821] bridge_slave_0: entered promiscuous mode
[   68.359743][ T4940] IPVS: using max 2256 ests per chain, 112800 per kthread
[   68.381966][ T4821] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.389106][ T4821] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.418568][ T4821] bridge_slave_1: entered allmulticast mode
[   68.437359][ T4821] bridge_slave_1: entered promiscuous mode
[   68.475016][ T4821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.486111][ T4821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.548156][ T4821] team0: Port device team_slave_0 added
[   68.557580][ T4821] team0: Port device team_slave_1 added
[   68.606441][ T4959] loop0: detected capacity change from 0 to 1024
[   68.618894][ T4821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.625992][ T4821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.627182][ T4959] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   68.651963][ T4821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.674295][ T4821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.681400][ T4821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.707535][ T4821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.748949][ T4959] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.537: Invalid block bitmap block 0 in block_group 0
[   68.764610][ T4959] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.537: Failed to acquire dquot type 0
[   68.776371][ T4959] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.537: Freeing blocks not in datazone - block = 0, count = 4096
[   68.809972][ T4959] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.537: Invalid inode bitmap blk 0 in block_group 0
[   68.816155][ T4966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'.
[   68.833693][ T4959] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[   68.842331][  T290] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0
[   68.854022][ T4959] EXT4-fs (loop0): 1 orphan inode deleted
[   68.861836][ T4959] EXT4-fs mount: 19 callbacks suppressed
[   68.861847][ T4959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.888022][ T4821] hsr_slave_0: entered promiscuous mode
[   68.918266][ T4821] hsr_slave_1: entered promiscuous mode
[   68.934219][ T4977] netlink: 35 bytes leftover after parsing attributes in process `syz.2.540'.
[   68.943276][ T4977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.540'.
[   68.954309][ T4821] debugfs: 'hsr0' already exists in 'hsr'
[   68.960137][ T4821] Cannot create hsr debugfs directory
[   68.980164][ T4980] siw: device registration error -23
[   69.037691][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.049178][ T4989] 9p: Bad value for 'source'
[   69.055584][ T4989] loop2: detected capacity change from 0 to 128
[   69.225600][ T4821] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   69.243707][ T5002] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   69.254288][ T5002] vhci_hcd vhci_hcd.2: invalid port number 96
[   69.260446][ T5002] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   69.275097][ T4821] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   69.284477][ T4821] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   69.295288][ T4821] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   69.361778][ T4821] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.374726][ T4821] 8021q: adding VLAN 0 to HW filter on device team0
[   69.384272][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.391371][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.399192][   T29] kauditd_printk_skb: 2036 callbacks suppressed
[   69.399208][   T29] audit: type=1326 audit(1768439595.367:23870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c773f749 code=0x7ffc0000
[   69.428919][   T29] audit: type=1326 audit(1768439595.367:23871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c773f749 code=0x7ffc0000
[   69.452379][   T29] audit: type=1326 audit(1768439595.367:23872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fb9c773f749 code=0x7ffc0000
[   69.475817][   T29] audit: type=1326 audit(1768439595.367:23873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c773f749 code=0x7ffc0000
[   69.499238][   T29] audit: type=1326 audit(1768439595.377:23874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb9c77365e7 code=0x7ffc0000
[   69.522558][   T29] audit: type=1326 audit(1768439595.377:23875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb9c76db829 code=0x7ffc0000
[   69.543824][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.546034][   T29] audit: type=1326 audit(1768439595.377:23876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fb9c773f749 code=0x7ffc0000
[   69.553073][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.576336][   T29] audit: type=1326 audit(1768439595.377:23877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb9c77365e7 code=0x7ffc0000
[   69.606842][   T29] audit: type=1326 audit(1768439595.377:23878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb9c76db829 code=0x7ffc0000
[   69.612535][ T4821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   69.630263][   T29] audit: type=1326 audit(1768439595.377:23879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fb9c773f749 code=0x7ffc0000
[   69.664130][ T4821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.738500][ T4821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.851815][ T4821] veth0_vlan: entered promiscuous mode
[   69.860454][ T4821] veth1_vlan: entered promiscuous mode
[   69.876558][ T4821] veth0_macvtap: entered promiscuous mode
[   69.884323][ T4821] veth1_macvtap: entered promiscuous mode
[   69.895898][ T4821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.908658][ T4821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.920648][ T1608] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.931795][ T1608] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.942891][ T1608] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.952199][ T1608] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.102424][ T5044] loop0: detected capacity change from 0 to 1024
[   70.110003][ T5044] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   70.122632][ T5044] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.553: Invalid block bitmap block 0 in block_group 0
[   70.136958][ T5044] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.553: Failed to acquire dquot type 0
[   70.149116][ T5044] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.553: Freeing blocks not in datazone - block = 0, count = 4096
[   70.187157][ T5044] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.553: Invalid inode bitmap blk 0 in block_group 0
[   70.219814][  T351] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0
[   70.232565][ T5044] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[   70.247310][ T5044] EXT4-fs (loop0): 1 orphan inode deleted
[   70.253746][ T5044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.312473][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.430783][ T5066] loop3: detected capacity change from 0 to 1024
[   70.437912][ T5066] EXT4-fs: Ignoring removed orlov option
[   70.453455][ T5066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.514050][ T5075] netlink: 35 bytes leftover after parsing attributes in process `syz.0.565'.
[   70.523157][ T5075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.565'.
[   70.537857][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.596788][ T5077] siw: device registration error -23
[   70.622426][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.753393][ T5099] netlink: 35 bytes leftover after parsing attributes in process `syz.4.577'.
[   71.074632][ T5136] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   71.092228][ T5139] FAULT_INJECTION: forcing a failure.
[   71.092228][ T5139] name failslab, interval 1, probability 0, space 0, times 0
[   71.105015][ T5139] CPU: 1 UID: 0 PID: 5139 Comm: syz.4.595 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   71.105041][ T5139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   71.105103][ T5139] Call Trace:
[   71.105110][ T5139]  <TASK>
[   71.105117][ T5139]  __dump_stack+0x1d/0x30
[   71.105151][ T5139]  dump_stack_lvl+0x95/0xd0
[   71.105179][ T5139]  dump_stack+0x15/0x1b
[   71.105265][ T5139]  should_fail_ex+0x265/0x280
[   71.105295][ T5139]  should_failslab+0x8c/0xb0
[   71.105393][ T5139]  kmem_cache_alloc_noprof+0x69/0x4b0
[   71.105418][ T5139]  ? audit_log_start+0x342/0x720
[   71.105445][ T5139]  audit_log_start+0x342/0x720
[   71.105471][ T5139]  ? kstrtouint+0x76/0xc0
[   71.105522][ T5139]  audit_seccomp+0x48/0x100
[   71.105626][ T5139]  ? __seccomp_filter+0x832/0x1260
[   71.105659][ T5139]  __seccomp_filter+0x843/0x1260
[   71.105697][ T5139]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   71.105732][ T5139]  ? vfs_write+0x7e8/0x960
[   71.105823][ T5139]  ? __rcu_read_unlock+0x4f/0x70
[   71.105848][ T5139]  ? __fget_files+0x184/0x1c0
[   71.105923][ T5139]  __secure_computing+0x82/0x150
[   71.105956][ T5139]  syscall_trace_enter+0xcf/0x1e0
[   71.106038][ T5139]  do_syscall_64+0xa4/0x2b0
[   71.106075][ T5139]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.106095][ T5139] RIP: 0033:0x7fe1840ff749
[   71.106109][ T5139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   71.106125][ T5139] RSP: 002b:00007fe182b5ef08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[   71.106174][ T5139] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe1840ff749
[   71.106187][ T5139] RDX: 00007fe182b5ef20 RSI: 0000000000000058 RDI: 00007fe182b5ef20
[   71.106198][ T5139] RBP: 00007fe182b5f090 R08: 0000000000000000 R09: 0000000000000058
[   71.106214][ T5139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   71.106229][ T5139] R13: 00007fe184356038 R14: 00007fe184355fa0 R15: 00007ffc51b5db68
[   71.106252][ T5139]  </TASK>
[   71.330553][ T5136] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.593: Invalid block bitmap block 0 in block_group 0
[   71.395796][ T5136] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.593: Failed to acquire dquot type 0
[   71.508939][ T5136] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.593: Freeing blocks not in datazone - block = 0, count = 4096
[   71.563603][ T5136] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.593: Invalid inode bitmap blk 0 in block_group 0
[   71.593781][  T351] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0
[   71.605531][ T5136] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[   71.614283][ T5136] EXT4-fs (loop2): 1 orphan inode deleted
[   71.620709][ T5136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.762620][ T5158] lo speed is unknown, defaulting to 1000
[   71.768929][ T5158] lo speed is unknown, defaulting to 1000
[   72.103708][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.190771][ T5172] set_capacity_and_notify: 1 callbacks suppressed
[   72.190838][ T5172] loop0: detected capacity change from 0 to 1024
[   72.204298][ T5172] EXT4-fs: Ignoring removed orlov option
[   72.210116][ T5172] EXT4-fs: Ignoring removed nomblk_io_submit option
[   72.222736][ T5172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.367152][ T5181] __nla_validate_parse: 3 callbacks suppressed
[   72.367204][ T5181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'.
[   72.426210][ T5181] loop2: detected capacity change from 0 to 128
[   72.447813][ T5186] netlink: 35 bytes leftover after parsing attributes in process `syz.4.612'.
[   72.456800][ T5186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.612'.
[   72.533722][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.657695][ T5202] netlink: 'syz.2.620': attribute type 7 has an invalid length.
[   72.665475][ T5202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'.
[   72.732784][ T5215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.626'.
[   72.758648][ T5215] loop0: detected capacity change from 0 to 128
[   72.765452][ T5216] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   72.773017][ T5216] vhci_hcd vhci_hcd.2: invalid port number 96
[   72.779210][ T5216] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   72.867652][ T5226] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[   72.943843][ T5235] loop4: detected capacity change from 0 to 1024
[   72.950822][ T5235] EXT4-fs: Ignoring removed orlov option
[   72.956529][ T5235] EXT4-fs: Ignoring removed nomblk_io_submit option
[   72.975439][ T5235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.995250][ T5235] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[   73.017882][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.042132][ T5250] netlink: 260 bytes leftover after parsing attributes in process `syz.4.642'.
[   73.095268][ T5250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.642'.
[   73.306066][ T5279] netlink: 260 bytes leftover after parsing attributes in process `syz.3.655'.
[   73.381648][ T5282] lo speed is unknown, defaulting to 1000
[   73.388272][ T5282] lo speed is unknown, defaulting to 1000
[   73.590270][ T5283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.655'.
[   73.604740][ T5285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.656'.
[   73.787687][ T5288] siw: device registration error -23
[   73.831813][ T5300] FAULT_INJECTION: forcing a failure.
[   73.831813][ T5300] name failslab, interval 1, probability 0, space 0, times 0
[   73.844585][ T5300] CPU: 1 UID: 0 PID: 5300 Comm: syz.3.660 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   73.844735][ T5300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   73.844750][ T5300] Call Trace:
[   73.844757][ T5300]  <TASK>
[   73.844765][ T5300]  __dump_stack+0x1d/0x30
[   73.844794][ T5300]  dump_stack_lvl+0x95/0xd0
[   73.844916][ T5300]  dump_stack+0x15/0x1b
[   73.844935][ T5300]  should_fail_ex+0x265/0x280
[   73.844957][ T5300]  should_failslab+0x8c/0xb0
[   73.844983][ T5300]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[   73.845008][ T5300]  ? __alloc_skb+0x2ff/0x4b0
[   73.845061][ T5300]  __alloc_skb+0x2ff/0x4b0
[   73.845089][ T5300]  ? __alloc_skb+0x228/0x4b0
[   73.845118][ T5300]  netlink_alloc_large_skb+0xbf/0xf0
[   73.845299][ T5300]  netlink_sendmsg+0x3cf/0x6b0
[   73.845337][ T5300]  ? __pfx_netlink_sendmsg+0x10/0x10
[   73.845382][ T5300]  __sock_sendmsg+0x145/0x180
[   73.845413][ T5300]  ____sys_sendmsg+0x31e/0x4a0
[   73.845462][ T5300]  ___sys_sendmsg+0x17b/0x1d0
[   73.845511][ T5300]  __x64_sys_sendmsg+0xd4/0x160
[   73.845609][ T5300]  x64_sys_call+0x17ba/0x3000
[   73.845702][ T5300]  do_syscall_64+0xca/0x2b0
[   73.845745][ T5300]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.845773][ T5300] RIP: 0033:0x7fb9c773f749
[   73.845835][ T5300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   73.845858][ T5300] RSP: 002b:00007fb9c619f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   73.845893][ T5300] RAX: ffffffffffffffda RBX: 00007fb9c7995fa0 RCX: 00007fb9c773f749
[   73.845908][ T5300] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004
[   73.845963][ T5300] RBP: 00007fb9c619f090 R08: 0000000000000000 R09: 0000000000000000
[   73.845978][ T5300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   73.845992][ T5300] R13: 00007fb9c7996038 R14: 00007fb9c7995fa0 R15: 00007ffdb7821668
[   73.846014][ T5300]  </TASK>
[   74.067176][ T5304] loop2: detected capacity change from 0 to 128
[   74.203417][ T5317] loop2: detected capacity change from 0 to 128
[   74.241880][ T5324] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.249422][ T5324] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.257855][ T5324] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.265380][ T5324] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.399874][   T29] kauditd_printk_skb: 3653 callbacks suppressed
[   74.399897][   T29] audit: type=1326 audit(1768439600.387:27525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe184132005 code=0x7ffc0000
[   74.430939][   T29] audit: type=1326 audit(1768439600.387:27526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe184132005 code=0x7ffc0000
[   74.454626][   T29] audit: type=1326 audit(1768439600.387:27527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe184132005 code=0x7ffc0000
[   74.478067][   T29] audit: type=1326 audit(1768439600.387:27528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe184132005 code=0x7ffc0000
[   74.501509][   T29] audit: type=1326 audit(1768439600.387:27529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe184132005 code=0x7ffc0000
[   74.525078][   T29] audit: type=1326 audit(1768439600.387:27530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe184132005 code=0x7ffc0000
[   74.548874][   T29] audit: type=1326 audit(1768439600.387:27531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe184132005 code=0x7ffc0000
[   74.572466][   T29] audit: type=1326 audit(1768439600.387:27532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe1840f65e7 code=0x7ffc0000
[   74.595824][   T29] audit: type=1326 audit(1768439600.387:27533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe18409b829 code=0x7ffc0000
[   74.619203][   T29] audit: type=1326 audit(1768439600.387:27534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fe1840ff749 code=0x7ffc0000
[   74.701944][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.709115][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.919289][ T5375] loop5: detected capacity change from 0 to 1024
[   74.929055][ T5375] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   74.953996][ T5375] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.693: Invalid block bitmap block 0 in block_group 0
[   74.968326][ T5375] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.693: Failed to acquire dquot type 0
[   74.980349][ T5375] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.693: Freeing blocks not in datazone - block = 0, count = 4096
[   74.994378][ T5375] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.693: Invalid inode bitmap blk 0 in block_group 0
[   75.007417][ T5375] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[   75.007645][   T52] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 0
[   75.016858][ T5375] EXT4-fs (loop5): 1 orphan inode deleted
[   75.033877][ T5375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.065512][ T4821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.334411][ T5408] lo speed is unknown, defaulting to 1000
[   75.340583][ T5408] lo speed is unknown, defaulting to 1000
[   75.461019][ T5413] loop3: detected capacity change from 0 to 1024
[   75.471597][ T5413] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   75.485640][ T5412] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[   75.494617][    T9] IPVS: starting estimator thread 0...
[   75.504336][ T5413] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.708: Invalid block bitmap block 0 in block_group 0
[   75.560744][ T5413] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.708: Failed to acquire dquot type 0
[   75.574481][ T5413] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.708: Freeing blocks not in datazone - block = 0, count = 4096
[   75.589629][ T5415] IPVS: using max 2304 ests per chain, 115200 per kthread
[   75.597041][ T5413] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.708: Invalid inode bitmap blk 0 in block_group 0
[   75.609722][ T1608] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0
[   75.620301][ T5413] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[   75.630059][ T5413] EXT4-fs (loop3): 1 orphan inode deleted
[   75.643646][ T5423] FAULT_INJECTION: forcing a failure.
[   75.643646][ T5423] name failslab, interval 1, probability 0, space 0, times 0
[   75.653180][ T5413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.656337][ T5423] CPU: 0 UID: 0 PID: 5423 Comm: syz.5.710 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   75.656441][ T5423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   75.656531][ T5423] Call Trace:
[   75.656560][ T5423]  <TASK>
[   75.656583][ T5423]  __dump_stack+0x1d/0x30
[   75.656657][ T5423]  dump_stack_lvl+0x95/0xd0
[   75.656730][ T5423]  dump_stack+0x15/0x1b
[   75.656796][ T5423]  should_fail_ex+0x265/0x280
[   75.656943][ T5423]  should_failslab+0x8c/0xb0
[   75.657016][ T5423]  __kmalloc_noprof+0xb9/0x5a0
[   75.657100][ T5423]  ? io_cache_alloc_new+0x2a/0xb0
[   75.657230][ T5423]  io_cache_alloc_new+0x2a/0xb0
[   75.657316][ T5423]  __io_prep_rw+0xcf/0x6c0
[   75.657469][ T5423]  ? __io_alloc_req_refill+0x12e/0x1d0
[   75.657559][ T5423]  io_prep_read+0x31/0xe0
[   75.657682][ T5423]  ? blk_start_plug_nr_ios+0xc3/0xe0
[   75.657755][ T5423]  io_submit_sqes+0x70f/0x11b0
[   75.657960][ T5423]  __se_sys_io_uring_enter+0x1bd/0x1a30
[   75.658068][ T5423]  ? 0xffffffff81000000
[   75.658117][ T5423]  ? __rcu_read_unlock+0x4f/0x70
[   75.658190][ T5423]  ? proc_fail_nth_write+0x13b/0x160
[   75.658295][ T5423]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   75.658390][ T5423]  ? vfs_write+0x7e8/0x960
[   75.658443][ T5423]  ? __rcu_read_unlock+0x4f/0x70
[   75.658598][ T5423]  ? __fget_files+0x184/0x1c0
[   75.658671][ T5423]  ? mutex_unlock+0x4f/0x90
[   75.658765][ T5423]  ? fput+0x8f/0xc0
[   75.658898][ T5423]  __x64_sys_io_uring_enter+0x78/0x90
[   75.659009][ T5423]  x64_sys_call+0x27e4/0x3000
[   75.659122][ T5423]  do_syscall_64+0xca/0x2b0
[   75.659259][ T5423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.659408][ T5423] RIP: 0033:0x7f8bef1af749
[   75.659468][ T5423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.659556][ T5423] RSP: 002b:00007f8bedc17038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[   75.659699][ T5423] RAX: ffffffffffffffda RBX: 00007f8bef405fa0 RCX: 00007f8bef1af749
[   75.659739][ T5423] RDX: 00000000000004c3 RSI: 0000000000004be7 RDI: 0000000000000005
[   75.659781][ T5423] RBP: 00007f8bedc17090 R08: 0000000000000000 R09: 0000000000000000
[   75.659821][ T5423] R10: 0000000000000043 R11: 0000000000000246 R12: 0000000000000001
[   75.659855][ T5423] R13: 00007f8bef406038 R14: 00007f8bef405fa0 R15: 00007fff41e36158
[   75.659919][ T5423]  </TASK>
[   75.918428][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.951464][ T5433] FAULT_INJECTION: forcing a failure.
[   75.951464][ T5433] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   75.964715][ T5433] CPU: 0 UID: 0 PID: 5433 Comm: syz.5.715 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   75.964750][ T5433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   75.964763][ T5433] Call Trace:
[   75.964770][ T5433]  <TASK>
[   75.964777][ T5433]  __dump_stack+0x1d/0x30
[   75.964809][ T5433]  dump_stack_lvl+0x95/0xd0
[   75.964837][ T5433]  dump_stack+0x15/0x1b
[   75.964864][ T5433]  should_fail_ex+0x265/0x280
[   75.964923][ T5433]  should_fail+0xb/0x20
[   75.964972][ T5433]  should_fail_usercopy+0x1a/0x20
[   75.965000][ T5433]  _copy_from_user+0x1c/0xb0
[   75.965040][ T5433]  __x64_sys_epoll_ctl+0x92/0x100
[   75.965069][ T5433]  x64_sys_call+0x745/0x3000
[   75.965100][ T5433]  do_syscall_64+0xca/0x2b0
[   75.965163][ T5433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.965185][ T5433] RIP: 0033:0x7f8bef1af749
[   75.965202][ T5433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.965220][ T5433] RSP: 002b:00007f8bedc17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[   75.965279][ T5433] RAX: ffffffffffffffda RBX: 00007f8bef405fa0 RCX: 00007f8bef1af749
[   75.965292][ T5433] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004
[   75.965304][ T5433] RBP: 00007f8bedc17090 R08: 0000000000000000 R09: 0000000000000000
[   75.965316][ T5433] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001
[   75.965329][ T5433] R13: 00007f8bef406038 R14: 00007f8bef405fa0 R15: 00007fff41e36158
[   75.965410][ T5433]  </TASK>
[   76.168942][ T5438] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   76.188437][ T5438] vhci_hcd vhci_hcd.2: invalid port number 96
[   76.194640][ T5438] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   76.246882][ T5445] siw: device registration error -23
[   76.302370][ T5453] FAULT_INJECTION: forcing a failure.
[   76.302370][ T5453] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   76.315577][ T5453] CPU: 0 UID: 0 PID: 5453 Comm: syz.4.723 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   76.315719][ T5453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   76.315731][ T5453] Call Trace:
[   76.315737][ T5453]  <TASK>
[   76.315812][ T5453]  __dump_stack+0x1d/0x30
[   76.315837][ T5453]  dump_stack_lvl+0x95/0xd0
[   76.315932][ T5453]  dump_stack+0x15/0x1b
[   76.316031][ T5453]  should_fail_ex+0x265/0x280
[   76.316054][ T5453]  should_fail+0xb/0x20
[   76.316072][ T5453]  should_fail_usercopy+0x1a/0x20
[   76.316149][ T5453]  _copy_from_user+0x1c/0xb0
[   76.316177][ T5453]  __sys_sendto+0x19e/0x330
[   76.316270][ T5453]  __x64_sys_sendto+0x76/0x90
[   76.316296][ T5453]  x64_sys_call+0x29a7/0x3000
[   76.316339][ T5453]  do_syscall_64+0xca/0x2b0
[   76.316440][ T5453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.316524][ T5453] RIP: 0033:0x7fe1840ff749
[   76.316540][ T5453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   76.316558][ T5453] RSP: 002b:00007fe182b5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   76.316577][ T5453] RAX: ffffffffffffffda RBX: 00007fe184355fa0 RCX: 00007fe1840ff749
[   76.316590][ T5453] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000005
[   76.316603][ T5453] RBP: 00007fe182b5f090 R08: 000020000005ffe4 R09: 000000000000001c
[   76.316650][ T5453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   76.316704][ T5453] R13: 00007fe184356038 R14: 00007fe184355fa0 R15: 00007ffc51b5db68
[   76.316724][ T5453]  </TASK>
[   76.352090][ T5452] loop5: detected capacity change from 0 to 1024
[   76.510863][ T5452] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   76.530698][ T5452] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.724: Invalid block bitmap block 0 in block_group 0
[   76.549926][ T5452] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.724: Failed to acquire dquot type 0
[   76.561252][ T5442] loop0: detected capacity change from 0 to 512
[   76.581867][ T5452] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.724: Freeing blocks not in datazone - block = 0, count = 4096
[   76.621257][ T5452] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.724: Invalid inode bitmap blk 0 in block_group 0
[   76.651375][  T290] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0
[   76.673904][ T5468] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   76.683181][ T5452] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[   76.720589][ T5468] EXT4-fs (loop4): invalid journal inode
[   76.726419][ T5452] EXT4-fs (loop5): 1 orphan inode deleted
[   76.735317][ T5473] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   76.736559][ T5468] EXT4-fs (loop4): can't get journal size
[   76.742869][ T5473] vhci_hcd vhci_hcd.2: invalid port number 96
[   76.749392][ T5452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.754635][ T5473] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   76.818479][ T5468] EXT4-fs (loop4): 1 truncate cleaned up
[   76.829427][ T4821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.846546][ T5474] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[   76.854390][ T5468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.856812][ T3573] IPVS: starting estimator thread 0...
[   76.950555][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.959735][ T5478] IPVS: using max 2256 ests per chain, 112800 per kthread
[   77.140246][ T5507] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   77.216447][ T5507] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.743: Invalid block bitmap block 0 in block_group 0
[   77.231725][ T5507] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.743: Failed to acquire dquot type 0
[   77.235619][ T5515] FAULT_INJECTION: forcing a failure.
[   77.235619][ T5515] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   77.243629][ T5507] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.743: Freeing blocks not in datazone - block = 0, count = 4096
[   77.256191][ T5515] CPU: 0 UID: 0 PID: 5515 Comm: syz.2.746 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   77.256285][ T5515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   77.256337][ T5515] Call Trace:
[   77.256364][ T5515]  <TASK>
[   77.256387][ T5515]  __dump_stack+0x1d/0x30
[   77.256465][ T5515]  dump_stack_lvl+0x95/0xd0
[   77.256584][ T5515]  dump_stack+0x15/0x1b
[   77.256645][ T5515]  should_fail_ex+0x265/0x280
[   77.256779][ T5515]  should_fail+0xb/0x20
[   77.256839][ T5515]  should_fail_usercopy+0x1a/0x20
[   77.256998][ T5515]  strncpy_from_user+0x27/0x260
[   77.257109][ T5515]  getname_flags+0xae/0x3b0
[   77.257225][ T5515]  getname_uflags+0x21/0x30
[   77.257285][ T5515]  __x64_sys_execveat+0x5d/0x90
[   77.257428][ T5515]  x64_sys_call+0x1c0e/0x3000
[   77.257510][ T5515]  do_syscall_64+0xca/0x2b0
[   77.257624][ T5515]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.257778][ T5515] RIP: 0033:0x7f56f7dff749
[   77.257801][ T5515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.257834][ T5515] RSP: 002b:00007f56f6867038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[   77.257897][ T5515] RAX: ffffffffffffffda RBX: 00007f56f8055fa0 RCX: 00007f56f7dff749
[   77.257938][ T5515] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[   77.257971][ T5515] RBP: 00007f56f6867090 R08: 0000000000001000 R09: 0000000000000000
[   77.258061][ T5515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   77.258111][ T5515] R13: 00007f56f8056038 R14: 00007f56f8055fa0 R15: 00007ffd0593d288
[   77.258235][ T5515]  </TASK>
[   77.305622][ T5521] FAULT_INJECTION: forcing a failure.
[   77.305622][ T5521] name failslab, interval 1, probability 0, space 0, times 0
[   77.315477][ T5507] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.743: Invalid inode bitmap blk 0 in block_group 0
[   77.318081][ T5521] CPU: 0 UID: 0 PID: 5521 Comm: syz.3.749 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   77.318170][ T5521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   77.318211][ T5521] Call Trace:
[   77.318232][ T5521]  <TASK>
[   77.318254][ T5521]  __dump_stack+0x1d/0x30
[   77.318339][ T5521]  dump_stack_lvl+0x95/0xd0
[   77.318437][ T5521]  dump_stack+0x15/0x1b
[   77.318509][ T5521]  should_fail_ex+0x265/0x280
[   77.318570][ T5521]  should_failslab+0x8c/0xb0
[   77.318643][ T5521]  kmem_cache_alloc_noprof+0x69/0x4b0
[   77.318716][ T5521]  ? getname_flags+0x80/0x3b0
[   77.318856][ T5521]  getname_flags+0x80/0x3b0
[   77.318938][ T5521]  __x64_sys_rmdir+0x21/0x40
[   77.318998][ T5521]  x64_sys_call+0x2469/0x3000
[   77.319091][ T5521]  do_syscall_64+0xca/0x2b0
[   77.319191][ T5521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.319212][ T5521] RIP: 0033:0x7fb9c773f749
[   77.319226][ T5521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.319264][ T5521] RSP: 002b:00007fb9c619f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[   77.319331][ T5521] RAX: ffffffffffffffda RBX: 00007fb9c7995fa0 RCX: 00007fb9c773f749
[   77.319373][ T5521] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   77.319489][ T5521] RBP: 00007fb9c619f090 R08: 0000000000000000 R09: 0000000000000000
[   77.319618][ T5521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   77.319659][ T5521] R13: 00007fb9c7996038 R14: 00007fb9c7995fa0 R15: 00007ffdb7821668
[   77.319723][ T5521]  </TASK>
[   77.342276][   T31] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0
[   77.558377][ T5523] lo speed is unknown, defaulting to 1000
[   77.567582][ T5507] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[   77.574106][ T5523] lo speed is unknown, defaulting to 1000
[   77.588139][ T5507] EXT4-fs (loop0): 1 orphan inode deleted
[   77.684065][ T5507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.982531][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.051545][ T5532] __nla_validate_parse: 20 callbacks suppressed
[   78.051564][ T5532] netlink: 260 bytes leftover after parsing attributes in process `syz.3.754'.
[   78.129601][ T5540] set_capacity_and_notify: 2 callbacks suppressed
[   78.129619][ T5540] loop0: detected capacity change from 0 to 1024
[   78.154216][ T5532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.754'.
[   78.180479][ T5544] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   78.187828][ T5544] vhci_hcd vhci_hcd.2: invalid port number 96
[   78.194004][ T5544] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[   78.203064][ T5540] EXT4-fs: Ignoring removed orlov option
[   78.208870][ T5540] EXT4-fs: Ignoring removed nomblk_io_submit option
[   78.249486][ T5548] netlink: 16 bytes leftover after parsing attributes in process `syz.4.758'.
[   78.279737][ T5540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.446009][ T3573] IPVS: starting estimator thread 0...
[   78.456146][ T5540] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[   78.517553][ T5560] loop5: detected capacity change from 0 to 2048
[   78.540513][ T5590] netlink: 16 bytes leftover after parsing attributes in process `syz.3.774'.
[   78.550043][ T5578] IPVS: using max 2208 ests per chain, 110400 per kthread
[   78.569946][ T5592] loop2: detected capacity change from 0 to 2048
[   78.576787][ T5592] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   78.579871][ T5560] Alternate GPT is invalid, using primary GPT.
[   78.591830][ T5560]  loop5: p2 p3 p7
[   78.618140][ T3573] IPVS: starting estimator thread 0...
[   78.637416][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.745244][ T5596] IPVS: using max 2544 ests per chain, 127200 per kthread
[   79.016987][ T5619] netlink: 16 bytes leftover after parsing attributes in process `syz.5.788'.
[   79.286498][ T5635] loop0: detected capacity change from 0 to 512
[   79.293688][ T5635] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   79.303710][ T5635] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.793: invalid block
[   79.316114][ T5635] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.793: invalid indirect mapped block 4294967295 (level 1)
[   79.336149][ T5635] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.793: invalid indirect mapped block 4294967295 (level 1)
[   79.354342][ T5635] EXT4-fs (loop0): 2 truncates cleaned up
[   79.360672][ T5635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.393279][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.414690][   T29] kauditd_printk_skb: 2164 callbacks suppressed
[   79.414703][   T29] audit: type=1326 audit(1768439605.397:29687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe1840ff749 code=0x7ffc0000
[   79.505159][   T29] audit: type=1326 audit(1768439605.427:29688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe1840f65e7 code=0x7ffc0000
[   79.528575][   T29] audit: type=1326 audit(1768439605.427:29689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe18409b829 code=0x7ffc0000
[   79.551948][   T29] audit: type=1326 audit(1768439605.427:29690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fe1840ff749 code=0x7ffc0000
[   79.575492][   T29] audit: type=1326 audit(1768439605.427:29691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1840ff749 code=0x7ffc0000
[   79.599324][   T29] audit: type=1326 audit(1768439605.427:29692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1840ff749 code=0x7ffc0000
[   79.622841][   T29] audit: type=1326 audit(1768439605.427:29693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe1840f65e7 code=0x7ffc0000
[   79.646457][   T29] audit: type=1326 audit(1768439605.427:29694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe18409b829 code=0x7ffc0000
[   79.670099][   T29] audit: type=1326 audit(1768439605.427:29695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1840ff749 code=0x7ffc0000
[   79.693597][   T29] audit: type=1326 audit(1768439605.427:29696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe1840ff749 code=0x7ffc0000
[   79.734764][ T5659] netlink: 16 bytes leftover after parsing attributes in process `syz.0.801'.
[   79.762851][ T5658] loop5: detected capacity change from 0 to 1024
[   79.783645][ T5658] EXT4-fs: Ignoring removed orlov option
[   79.789421][ T5658] EXT4-fs: Ignoring removed nomblk_io_submit option
[   79.828453][ T5668] loop3: detected capacity change from 0 to 1024
[   79.837485][ T5668] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   79.839390][ T5658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.866600][ T5658] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[   79.873928][ T5668] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.807: Invalid block bitmap block 0 in block_group 0
[   79.889016][ T5668] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.807: Failed to acquire dquot type 0
[   79.900772][ T5668] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.807: Freeing blocks not in datazone - block = 0, count = 4096
[   79.914854][ T5668] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.807: Invalid inode bitmap blk 0 in block_group 0
[   79.927629][ T1608] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0
[   79.939786][ T5668] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[   79.949317][ T5668] EXT4-fs (loop3): 1 orphan inode deleted
[   79.957739][ T5668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.057241][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.101870][ T4821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.122349][ T5691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.816'.
[   80.168323][ T5700] loop5: detected capacity change from 0 to 128
[   80.199878][ T5698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.818'.
[   80.345208][ T5717] netlink: 'syz.3.826': attribute type 1 has an invalid length.
[   80.347245][ T5719] loop0: detected capacity change from 0 to 128
[   80.425878][ T5727] loop3: detected capacity change from 0 to 128
[   80.438838][ T5727] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000)
[   80.446865][ T5727] FAT-fs (loop3): Filesystem has been set read-only
[   80.530170][ T5728] ==================================================================
[   80.538326][ T5728] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark
[   80.546307][ T5728] 
[   80.548648][ T5728] write to 0xffff88811a56fb14 of 4 bytes by task 5719 on cpu 1:
[   80.556287][ T5728]  xas_set_mark+0x12b/0x140
[   80.560867][ T5728]  __folio_start_writeback+0x155/0x340
[   80.566598][ T5728]  __block_write_full_folio+0x53a/0x8f0
[   80.572181][ T5728]  block_write_full_folio+0x2c1/0x2e0
[   80.577587][ T5728]  mpage_writepages+0x6cf/0x1250
[   80.582558][ T5728]  fat_writepages+0x24/0x30
[   80.587101][ T5728]  do_writepages+0x1c6/0x310
[   80.591711][ T5728]  file_write_and_wait_range+0x156/0x2c0
[   80.597371][ T5728]  __generic_file_fsync+0x46/0x160
[   80.602507][ T5728]  fat_file_fsync+0x49/0x100
[   80.607115][ T5728]  vfs_fsync_range+0x10d/0x130
[   80.611908][ T5728]  generic_file_write_iter+0x1b8/0x2f0
[   80.617390][ T5728]  iter_file_splice_write+0x66b/0xa20
[   80.622783][ T5728]  direct_splice_actor+0x156/0x2a0
[   80.627914][ T5728]  splice_direct_to_actor+0x312/0x680
[   80.633309][ T5728]  do_splice_direct+0xda/0x150
[   80.638088][ T5728]  do_sendfile+0x380/0x650
[   80.642535][ T5728]  __x64_sys_sendfile64+0x105/0x150
[   80.647766][ T5728]  x64_sys_call+0x2db1/0x3000
[   80.652462][ T5728]  do_syscall_64+0xca/0x2b0
[   80.657038][ T5728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.662978][ T5728] 
[   80.665339][ T5728] read to 0xffff88811a56fb14 of 4 bytes by task 5728 on cpu 0:
[   80.672893][ T5728]  __writeback_single_inode+0x201/0x7c0
[   80.678478][ T5728]  writeback_single_inode+0x16d/0x3f0
[   80.683875][ T5728]  sync_inode_metadata+0x5b/0x90
[   80.688850][ T5728]  __generic_file_fsync+0x109/0x160
[   80.694067][ T5728]  fat_file_fsync+0x49/0x100
[   80.698701][ T5728]  vfs_fsync_range+0x10d/0x130
[   80.703500][ T5728]  generic_file_write_iter+0x1b8/0x2f0
[   80.709008][ T5728]  iter_file_splice_write+0x66b/0xa20
[   80.714425][ T5728]  direct_splice_actor+0x156/0x2a0
[   80.719556][ T5728]  splice_direct_to_actor+0x312/0x680
[   80.724963][ T5728]  do_splice_direct+0xda/0x150
[   80.729746][ T5728]  do_sendfile+0x380/0x650
[   80.734191][ T5728]  __x64_sys_sendfile64+0x105/0x150
[   80.739412][ T5728]  x64_sys_call+0x2db1/0x3000
[   80.744114][ T5728]  do_syscall_64+0xca/0x2b0
[   80.748642][ T5728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.754574][ T5728] 
[   80.756907][ T5728] value changed: 0x0a000021 -> 0x04000021
[   80.762630][ T5728] 
[   80.764979][ T5728] Reported by Kernel Concurrency Sanitizer on:
[   80.771142][ T5728] CPU: 0 UID: 0 PID: 5728 Comm: syz.0.827 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   80.780785][ T5728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   80.790864][ T5728] ==================================================================
[   80.897945][ T5731] lo speed is unknown, defaulting to 1000
[   80.904450][ T5731] lo speed is unknown, defaulting to 1000
[   81.105973][ T5733] loop3: detected capacity change from 0 to 128