last executing test programs:

2.65825821s ago: executing program 2 (id=469):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)

2.61358582s ago: executing program 2 (id=470):
socket$nl_route(0x10, 0x3, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x223, 0x1, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)

2.61295903s ago: executing program 2 (id=471):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x80000007, 0x1, 0x8, 0x20005, 0x1b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0xf1a, 0x4)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4f25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b000000000600147379"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
io_uring_setup(0x1962, &(0x7f0000000100)={0x0, 0x0, 0x100, 0x0, 0x214})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x14}}, 0x4000054)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='jbd2_shrink_scan_exit\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getpeername(r6, &(0x7f0000000180)=@can, &(0x7f0000000200)=0x80)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4)

2.359841196s ago: executing program 0 (id=476):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0x100000000}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="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"/351], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x4, @perf_config_ext={0xf, 0x14}, 0x4c58, 0x1, 0x0, 0x0, 0xa, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r4, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='block_rq_requeue\x00', r3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, 0x0, 0x4004040)
sysinfo(0x0)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0)
sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2800408, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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")

2.216770578s ago: executing program 0 (id=479):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000019200)=ANY=[@ANYBLOB="bc010000190001000000000000000000e0000001000000000000000000000000ac1414bb0000000000000000000000004e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1bc}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002dbd7000fbdbdf2509000600"], 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)=',\xaa\b\x00\x00:\xe9\x15\xe8\xb3\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)

1.768133807s ago: executing program 0 (id=483):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

1.751948447s ago: executing program 2 (id=484):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, 0x0)
ioctl$TCSETSW2(r0, 0x402c542c, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8)
ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000580)={0x2, 0xdec})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffde1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000500)={0x0, 0x8}, 0x8)
r2 = gettid()
r3 = socket(0x10, 0x803, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10)
write(r3, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7", 0x1d)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x1000, 0x4)
sendto(r3, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000540))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
r6 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x1]}, 0x8)
unshare(0x26020480)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$lock(r7, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r7, 0x26, &(0x7f00000031c0)={0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r7], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xa6, '\x00', 0x0, @sk_lookup, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)

1.693191028s ago: executing program 0 (id=485):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x80000007, 0x1, 0x8, 0x20005, 0x1b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0xf1a, 0x4)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4f25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf2501000000"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800)
unshare(0x22020600)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r4 = io_uring_setup(0x1962, &(0x7f0000000100)={0x0, 0x0, 0x100, 0x0, 0x214})
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x14}}, 0x4000054)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='jbd2_shrink_scan_exit\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getpeername(r7, &(0x7f0000000180)=@can, &(0x7f0000000200)=0x80)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4)

1.59828897s ago: executing program 3 (id=486):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c71756965742c6e6f646f74732c666c7573682c756d61736b3d30303030303030303030303030303030303030303030302c646f74732c646f74732c756d61736b3d30303030303030303030303030303030303037373737372c6e66732c646f74732c747a3d5554432c646f74732c646f74732c6e6f636173652c7379735f696d6d757461626c652c646f74732c00f8a7354494367fe599abb0e9fee8f6cdbd4415cc7bc52b6352f54afc78e51de6b37ae8efbdfe1689a174697f9528b4217d017a472c4c8e00a5cdd06438f130234c66db3e61a4ea6b90f67ddc19c74c6ac93054e1668cf0ff55fdebea678f16269706271797abeebc6b043e549356dfa4c7e8b4e091a7a6cfc601e4e66e509afea6dcc9d274ab27afd6f183050075b86a3ffc8dfcd249c141fd90a5331224d62867d9b87a8e7d0cf56567584e7adde32f223d2a9bd69b39c51152b3a827f49a0f7e23d51ac4128630c7668a0b38090b5c86636aee6face102356400fbbd"], 0xfd, 0x1bf, &(0x7f0000000480)="$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")
mkdir(&(0x7f0000000180)='./bus\x00', 0x1b8)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000fc0)={[{@data_ordered}, {@nouser_xattr}, {@init_itable}, {@bsdgroups}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0xa00000}}]}, 0xfd, 0x50f, &(0x7f0000000a00)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
r0 = socket$caif_seqpacket(0x25, 0x5, 0x3)
sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f00000003c0)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000007c0)}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {0x0}, {&(0x7f0000000b40)}], 0x3}}], 0x2, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x40, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b100bf800", 0x33fe0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
wait4(0x0, 0x0, 0x40000000, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)

1.55631355s ago: executing program 3 (id=487):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x80000007, 0x1, 0x8, 0x20005, 0x1b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0xf1a, 0x4)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4f25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b000000000600147379"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800)
unshare(0x22020600)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r4 = io_uring_setup(0x1962, &(0x7f0000000100)={0x0, 0x0, 0x100, 0x0, 0x214})
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x14}}, 0x4000054)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='jbd2_shrink_scan_exit\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getpeername(r7, &(0x7f0000000180)=@can, &(0x7f0000000200)=0x80)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4)

1.336626495s ago: executing program 4 (id=492):
socket$nl_route(0x10, 0x3, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x223, 0x1, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)

1.263335516s ago: executing program 4 (id=494):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x80000007, 0x1, 0x8, 0x20005, 0x1b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0xf1a, 0x4)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4f25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b000000000600147379"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
io_uring_setup(0x1962, &(0x7f0000000100)={0x0, 0x0, 0x100, 0x0, 0x214})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x14}}, 0x4000054)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='jbd2_shrink_scan_exit\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getpeername(r6, &(0x7f0000000180)=@can, &(0x7f0000000200)=0x80)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4)

993.181221ms ago: executing program 4 (id=496):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x0, 0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYBLOB, @ANYRES32=r0, @ANYRES32=r1, @ANYRESDEC=r1], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000fdff00000000890bfef845c379f46e06acdf030d5d5fb92f7e37694dae555b3cbffc59b6ec"], 0x48)
r3 = memfd_create(&(0x7f00000002c0)='\xd9\x16h\xde\xf3|m\xe9^\xf5\"@\x05\xa0\x8f\xaa\x86nwZ\x11**F\xdf\x0f\x00\x00\x00\x00\x00\x00\x00\x13\x03\xe8_\xad\r\x00\x00\x00\x00\x00f', 0x7)
lseek(r3, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4)
sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x44)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="8b332abd7000001000001500000008000300", @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x2c}, 0x1, 0x0, 0x0, 0xc040000}, 0x4008040)
r8 = socket(0x2, 0x1, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r8, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x212}, 0xc, &(0x7f0000000280)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="b4080000", @ANYRES16=r7, @ANYBLOB="20002cbd7000fedbdf258800000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0x8b4}, 0x1, 0x0, 0x0, 0x81}, 0x1000)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="d3b5d7e7203e860443", @ANYRES16=r5, @ANYBLOB="000426bd7000fedbdf253200000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000700000056000000"], 0x28}}, 0x0)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
rmdir(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r10 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r11 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6})
mq_timedsend(r11, 0x0, 0x0, 0x0, 0x0)

893.148804ms ago: executing program 2 (id=498):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0500000004000000040000000a00000040000000", @ANYRES32, @ANYBLOB="000000000014000000ac33d19186527c1dfa523aba258e67355fe1b685f6000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x9c0028, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x275a, 0x0)
r2 = socket(0xa, 0x5, 0x0)
sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000240)="e6", 0x1}], 0x1, 0x0, 0x5a}, 0xc2f1788970f1e6ee)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000000140)={0x6a})
r4 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

845.724084ms ago: executing program 0 (id=499):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f00000013c0)={&(0x7f00000000c0)=""/171, 0xab, 0x0, &(0x7f0000000000)=""/38, 0x26}}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000001300))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
readv(r2, &(0x7f00000016c0)=[{&(0x7f0000001200)=""/147, 0x93}], 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0x0, "0006000000df0066952e0d16c708db720800"})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x1, 0x0, 0x7fff0000}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1)
r3 = syz_open_pts(r2, 0x42)
r4 = dup3(r3, r2, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f00000012c0)={0x7, 0x896, 0x6, 0x8, 0x19, "2b962d505da5ea4f47fbc1eb479ace8eefc684"})
write$UHID_INPUT(r4, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r5, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}, 0xa499}], 0x1, 0x10000, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP")
fchmodat(0xffffffffffffff9c, 0x0, 0x10)

676.087877ms ago: executing program 1 (id=500):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x12}, 0x14)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='+\\{]\x00')
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r4, &(0x7f0000000940), 0x10)
listen(r4, 0x0)
keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x1)
syz_emit_ethernet(0x72, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60004000003c3c0020010000000000000000000000000000ff0200000000000000000000000000010004"], 0x0)

675.633257ms ago: executing program 3 (id=501):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)

635.975988ms ago: executing program 1 (id=502):
r0 = socket$inet6(0xa, 0x2, 0x3a)
syz_emit_ethernet(0x8e, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @local, @void, {@ipv4={0x4305, @generic={{0x20, 0x4, 0x3, 0x3, 0x80, 0x65, 0x0, 0x8, 0x2e, 0x0, @private=0xa010101, @rand_addr=0x64010102, {[@cipso={0x86, 0x4e, 0x3, [{0x0, 0x8, "094ac467ec3f"}, {0x0, 0x12, "4c985e594ee96c2b09f6e55ec84c916e"}, {0x5, 0x5, "2450b2"}, {0x7, 0xc, "e17393606d00a7ab3c13"}, {0x1, 0xd, "cee8f17fabc8f286afabb2"}, {0x7, 0x10, "6549c337b0e2fdba29f02c960c99"}]}, @ssrr={0x89, 0x1b, 0xe6, [@dev={0xac, 0x14, 0x14, 0x25}, @local, @rand_addr=0x64010100, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0xffff, 0xb, @mcast2, 0x9}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=@ipv4_delrule={0x24, 0x21, 0xb12becd5a2b54cdf, 0x70bd2a, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240000ee}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r5}}, 0x30)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2, <r8=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
recvmmsg(r9, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x0)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000015c0)=@IORING_OP_UNLINKAT={0x24, 0x76, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001580)='./file0\x00', 0x0, 0x200, 0x0, {0x0, r11}})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000780)={0xa0002001}, r8, 0x3, 0x0, 0x0, {0x0, r11}})
connect$inet6(r10, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c)
getsockopt$inet6_opts(r10, 0x29, 0x1, 0x0, &(0x7f0000000240))
sendto$inet6(r0, &(0x7f0000000380)="800037bbfa9ba1ce", 0x8, 0x4000010, 0x0, 0x14)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x2, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000640)={0x6, 0x118, 0xfa00, {{0x9, 0x8001, "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", 0x80, 0x2, 0xed, 0x9, 0x0, 0x9, 0x7}, r5}}, 0x120)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@security={'security\x00', 0xe, 0x4, 0x5a8, 0xffffffff, 0x150, 0x368, 0x150, 0xffffffff, 0xffffffff, 0x4d8, 0x4d8, 0x4d8, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@inet=@esp={{0x30}, {[0x4d6, 0x4d2]}}, @common=@srh={{0x30}, {0x29, 0x60, 0x9, 0xc6, 0x1, 0x188a, 0x1000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x40, 'syz0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138}, {0x2, [0x4, 0x3], 0x4, 0x20, 0x2, [@mcast2, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x23}, @private0, @empty, @mcast2, @local, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @loopback, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @empty}], 0x10}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x5, 0x2}, {0x0, 0x4, 0x1}, {0x3, 0x2, 0x7}, 0x9, 0x2}}}, {{@ipv6={@local, @local, [0x0, 0x0, 0xff], [0xff, 0x4b0fd1ce1d88098b, 0xffffff00, 0xffffff00], 'veth1_to_bond\x00', 'team_slave_1\x00', {0xff}, {}, 0x0, 0x1a, 0x0, 0x40}, 0x0, 0x100, 0x170, 0x0, {}, [@common=@ipv6header={{0x28}, {0x49, 0xc9, 0x1}}, @common=@srh={{0x30}, {0x2, 0x6, 0x31, 0x10, 0x8, 0x2, 0x3508}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x3, 0xfff9, 0x6, 0x1, 0x0, "e481d0546cbd0839f5876630dd899cd08128a446db9e6bf7c1c29e2fbeaf8a18aa33bf1cda8cb534b9ec0440355cbfcb38c55f0659db825442fa04d08f7e4442"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608)

577.809549ms ago: executing program 3 (id=503):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5db, 0x2a000)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
socket(0xd, 0x3, 0x4)
ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f00000000c0)={&(0x7f0000000040)=""/123, 0x7b})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x8100)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000140)={{0x2, 0x0, 0x101, 0xbf4dcd7699d71f85, 0x97}, 0x89b, 0x2, 'id1\x00', 'timer0\x00', 0x0, 0x4, 0x5, 0xffffffffbb7627a0, 0x9})
syz_open_dev$tty20(0xc, 0x4, 0x1)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x9, 0xc00)
ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000280))
ioctl$BLKFRAGET(r3, 0x1265, &(0x7f00000002c0))

569.28646ms ago: executing program 1 (id=504):
socket$nl_route(0x10, 0x3, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x223, 0x1, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)

550.23794ms ago: executing program 1 (id=505):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='kmem_cache_free\x00', r1}, 0x14)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0xbc, 0x0, 0x7ffc0002}]})
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)

504.797121ms ago: executing program 3 (id=506):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58)
mkdir(&(0x7f0000000540)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r3}, 0x10)
r4 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESHEX=r4])

504.387471ms ago: executing program 1 (id=507):
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r3, 0x3, '\x00', 0x0, r2, 0x3, 0x80}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r5, 0x0, 0x3}, 0x18)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_RADAR_DETECT(r8, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r7, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x48041}, 0x1010)

495.284441ms ago: executing program 3 (id=508):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, 0x0)
ioctl$TCSETSW2(r0, 0x402c542c, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8)
ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000580)={0x2, 0xdec})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd98872209ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffde1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000500)={0x0, 0x8}, 0x8)
r2 = gettid()
r3 = socket(0x10, 0x803, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10)
write(r3, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7", 0x1d)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x1000, 0x4)
sendto(r3, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000540))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
r6 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x1]}, 0x8)
unshare(0x26020480)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$lock(r7, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r7, 0x26, &(0x7f00000031c0)={0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r7], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xa6, '\x00', 0x0, @sk_lookup, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)

473.950901ms ago: executing program 1 (id=509):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x80000007, 0x1, 0x8, 0x20005, 0x1b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0xf1a, 0x4)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4f25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf2501000000"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800)
unshare(0x22020600)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r4 = io_uring_setup(0x1962, &(0x7f0000000100)={0x0, 0x0, 0x100, 0x0, 0x214})
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x14}}, 0x4000054)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='jbd2_shrink_scan_exit\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getpeername(r7, &(0x7f0000000180)=@can, &(0x7f0000000200)=0x80)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4)

148.407187ms ago: executing program 4 (id=510):
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000008500000006000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdir(&(0x7f0000000540)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r2}, 0x10)
r3 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])

48.9245ms ago: executing program 2 (id=511):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c71756965742c6e6f646f74732c666c7573682c756d61736b3d30303030303030303030303030303030303030303030302c646f74732c646f74732c756d61736b3d30303030303030303030303030303030303037373737372c6e66732c646f74732c747a3d5554432c646f74732c646f74732c6e6f636173652c7379735f696d6d757461626c652c646f74732c00f8a7354494367fe599abb0e9fee8f6cdbd4415cc7bc52b6352f54afc78e51de6b37ae8efbdfe1689a174697f9528b4217d017a472c4c8e00a5cdd06438f130234c66db3e61a4ea6b90f67ddc19c74c6ac93054e1668cf0ff55fdebea678f16269706271797abeebc6b043e549356dfa4c7e8b4e091a7a6cfc601e4e66e509afea6dcc9d274ab27afd6f183050075b86a3ffc8dfcd249c141fd90a5331224d62867d9b87a8e7d0cf56567584e7adde32f223d2a9bd69b39c51152b3a827f49a0f7e23d51ac4128630c7668a0b38090b5c86636aee6face102356400fbbd"], 0xfd, 0x1bf, &(0x7f0000000480)="$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")
mkdir(&(0x7f0000000180)='./bus\x00', 0x1b8)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000fc0)={[{@data_ordered}, {@nouser_xattr}, {@init_itable}, {@bsdgroups}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0xa00000}}]}, 0xfd, 0x50f, &(0x7f0000000a00)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
r0 = socket$caif_seqpacket(0x25, 0x5, 0x3)
sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f00000003c0)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000007c0)}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {0x0}, {&(0x7f0000000b40)}], 0x3}}], 0x2, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x40, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b100bf800", 0x33fe0}], 0x1}, 0x0)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r2, 0x0, 0x40000000, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)

35.16915ms ago: executing program 4 (id=512):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x12}, 0x14)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='+\\{]\x00')
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r4, &(0x7f0000000940), 0x10)
keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x1)
syz_emit_ethernet(0x72, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60004000003c3c0020010000000000000000000000000000ff0200000000000000000000000000010004"], 0x0)

18.01097ms ago: executing program 4 (id=513):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x80000007, 0x1, 0x8, 0x20005, 0x1b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0xf1a, 0x4)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4f25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000300"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b000000000600147379"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800)
unshare(0x22020600)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r4 = io_uring_setup(0x1962, &(0x7f0000000100)={0x0, 0x0, 0x100, 0x0, 0x214})
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x14}}, 0x4000054)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='jbd2_shrink_scan_exit\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getpeername(r7, &(0x7f0000000180)=@can, &(0x7f0000000200)=0x80)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4)

0s ago: executing program 0 (id=514):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)

kernel console output (not intermixed with test programs):

entered promiscuous mode
[   28.511795][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.527414][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.542087][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.562631][ T3297] hsr_slave_0: entered promiscuous mode
[   28.568630][ T3297] hsr_slave_1: entered promiscuous mode
[   28.576305][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.601896][ T3298] hsr_slave_0: entered promiscuous mode
[   28.607783][ T3298] hsr_slave_1: entered promiscuous mode
[   28.613752][ T3298] debugfs: 'hsr0' already exists in 'hsr'
[   28.619502][ T3298] Cannot create hsr debugfs directory
[   28.639701][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.646748][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.653903][ T3303] bridge_slave_0: entered allmulticast mode
[   28.660381][ T3303] bridge_slave_0: entered promiscuous mode
[   28.667449][ T3300] team0: Port device team_slave_0 added
[   28.674135][ T3300] team0: Port device team_slave_1 added
[   28.684896][ T3305] team0: Port device team_slave_0 added
[   28.690633][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.697675][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.704826][ T3303] bridge_slave_1: entered allmulticast mode
[   28.711109][ T3303] bridge_slave_1: entered promiscuous mode
[   28.732072][ T3305] team0: Port device team_slave_1 added
[   28.737955][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.744983][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   28.770965][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.782216][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.789151][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   28.815199][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.843642][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.864189][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.885856][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.892862][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   28.918819][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.944058][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.951045][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   28.977097][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.995005][ T3303] team0: Port device team_slave_0 added
[   29.014821][ T3303] team0: Port device team_slave_1 added
[   29.028820][ T3300] hsr_slave_0: entered promiscuous mode
[   29.035133][ T3300] hsr_slave_1: entered promiscuous mode
[   29.040955][ T3300] debugfs: 'hsr0' already exists in 'hsr'
[   29.046667][ T3300] Cannot create hsr debugfs directory
[   29.085242][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.092319][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.118215][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.134523][ T3305] hsr_slave_0: entered promiscuous mode
[   29.140628][ T3305] hsr_slave_1: entered promiscuous mode
[   29.146535][ T3305] debugfs: 'hsr0' already exists in 'hsr'
[   29.152325][ T3305] Cannot create hsr debugfs directory
[   29.160612][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.167561][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.193553][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.278450][ T3303] hsr_slave_0: entered promiscuous mode
[   29.284497][ T3303] hsr_slave_1: entered promiscuous mode
[   29.290379][ T3303] debugfs: 'hsr0' already exists in 'hsr'
[   29.296116][ T3303] Cannot create hsr debugfs directory
[   29.344958][ T3297] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   29.364756][ T3297] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   29.373188][ T3297] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   29.383938][ T3297] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   29.418459][ T3298] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   29.433868][ T3298] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   29.450128][ T3298] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   29.470866][ T3298] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   29.491210][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   29.505978][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   29.514908][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   29.530755][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   29.549228][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.564687][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   29.573219][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   29.592274][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   29.601289][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   29.613188][ T3297] 8021q: adding VLAN 0 to HW filter on device team0
[   29.634791][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.641872][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.657470][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   29.666227][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   29.676808][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   29.686499][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.693604][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.705294][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   29.742051][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.772307][ T3298] 8021q: adding VLAN 0 to HW filter on device team0
[   29.792663][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.799776][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.809286][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.830118][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.840333][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.847394][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.870975][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   29.879756][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.891600][ T3300] 8021q: adding VLAN 0 to HW filter on device team0
[   29.902683][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.909792][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.922193][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.929234][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.940231][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.947318][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.964805][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.971867][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.002609][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.030343][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   30.051176][ T3300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.061651][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.085798][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.092986][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.114283][ T3297] veth0_vlan: entered promiscuous mode
[   30.123017][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.130136][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.149150][ T3297] veth1_vlan: entered promiscuous mode
[   30.170578][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.194009][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.217522][ T3297] veth0_macvtap: entered promiscuous mode
[   30.237009][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.267114][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.274833][ T3297] veth1_macvtap: entered promiscuous mode
[   30.304187][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.332745][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.345095][ T3298] veth0_vlan: entered promiscuous mode
[   30.360236][ T3298] veth1_vlan: entered promiscuous mode
[   30.370009][ T1707] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.386969][ T3298] veth0_macvtap: entered promiscuous mode
[   30.394444][ T1707] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.417680][ T3298] veth1_macvtap: entered promiscuous mode
[   30.429725][ T1707] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.438566][ T1707] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.449278][ T3300] veth0_vlan: entered promiscuous mode
[   30.465226][ T3305] veth0_vlan: entered promiscuous mode
[   30.480343][ T3305] veth1_vlan: entered promiscuous mode
[   30.497647][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.505307][ T3300] veth1_vlan: entered promiscuous mode
[   30.523506][ T3303] veth0_vlan: entered promiscuous mode
[   30.531228][ T3303] veth1_vlan: entered promiscuous mode
[   30.540837][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.552228][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   30.557857][ T3300] veth0_macvtap: entered promiscuous mode
[   30.573596][ T3305] veth0_macvtap: entered promiscuous mode
[   30.581495][   T39] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.590293][   T39] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.606352][   T39] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.615611][ T3300] veth1_macvtap: entered promiscuous mode
[   30.633633][ T3305] veth1_macvtap: entered promiscuous mode
[   30.640459][   T39] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.653152][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.664481][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.681524][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.689591][ T3303] veth0_macvtap: entered promiscuous mode
[   30.701531][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.715383][   T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.726936][ T3303] veth1_macvtap: entered promiscuous mode
[   30.755506][   T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.773963][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.781530][   T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.803487][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.810837][   T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.828988][   T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.871460][   T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.908505][   T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.941815][ T3486] netlink: 'syz.4.5': attribute type 6 has an invalid length.
[   30.949154][   T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.985540][   T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.998442][ T3492] loop1: detected capacity change from 0 to 128
[   31.022459][   T29] kauditd_printk_skb: 36 callbacks suppressed
[   31.022475][   T29] audit: type=1400 audit(1759472584.397:108): avc:  denied  { map_create } for  pid=3494 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   31.049809][   T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.050392][ T3492] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   31.072275][  T113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.089934][  T113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.108062][ T3492] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   31.114789][   T29] audit: type=1400 audit(1759472584.397:109): avc:  denied  { map_read map_write } for  pid=3494 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   31.136793][   T29] audit: type=1400 audit(1759472584.467:110): avc:  denied  { read } for  pid=3491 comm="syz.2.3" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   31.159580][   T29] audit: type=1400 audit(1759472584.467:111): avc:  denied  { open } for  pid=3491 comm="syz.2.3" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   31.183384][   T29] audit: type=1400 audit(1759472584.467:112): avc:  denied  { ioctl } for  pid=3491 comm="syz.2.3" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   31.208721][   T29] audit: type=1400 audit(1759472584.477:113): avc:  denied  { allowed } for  pid=3489 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   31.227722][   T29] audit: type=1400 audit(1759472584.477:114): avc:  denied  { create } for  pid=3489 comm="syz.0.6" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   31.253540][   T29] audit: type=1400 audit(1759472584.507:115): avc:  denied  { mount } for  pid=3488 comm="syz.1.7" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   31.290571][   T29] audit: type=1400 audit(1759472584.667:116): avc:  denied  { firmware_load } for  pid=3489 comm="syz.0.6" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[   31.369188][   T29] audit: type=1400 audit(1759472584.737:117): avc:  denied  { wake_alarm } for  pid=3489 comm="syz.0.6" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   31.401065][ T3490] syz.0.6 (3490) used greatest stack depth: 10176 bytes left
[   31.418831][ T3492] SELinux:  policydb version 0 does not match my version range 15-35
[   31.438077][ T3492] SELinux: failed to load policy
[   31.455520][ T3492] pim6reg: entered allmulticast mode
[   31.519018][ T3505] pim6reg: left allmulticast mode
[   31.561363][ T3513] netlink: 'syz.2.14': attribute type 6 has an invalid length.
[   31.593569][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   31.605837][ T3515] batadv_slave_0: entered promiscuous mode
[   31.612272][  T782] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   31.621616][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   31.629146][ T3520] batadv_slave_0: entered promiscuous mode
[   31.647661][ T3524] loop1: detected capacity change from 0 to 512
[   31.661430][ T3524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.675058][ T3524] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   31.751842][ T3524] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   31.777000][ T3524] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   31.790119][ T3524] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   31.816266][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.840521][ T3539] loop2: detected capacity change from 0 to 512
[   31.852740][ T3539] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   31.865852][ T3539] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   31.886800][ T3539] EXT4-fs (loop2): 1 orphan inode deleted
[   31.892593][ T3539] EXT4-fs (loop2): 1 truncate cleaned up
[   31.896244][ T3544] loop3: detected capacity change from 0 to 512
[   31.928090][ T3539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.951782][ T3544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.964497][ T3544] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   32.003844][ T3551] loop4: detected capacity change from 0 to 128
[   32.014907][ T3551] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   32.029433][ T3551] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   32.045839][ T3544] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   32.060238][ T3551] SELinux:  policydb version 0 does not match my version range 15-35
[   32.076621][ T3551] SELinux: failed to load policy
[   32.103080][ T3551] pim6reg: entered allmulticast mode
[   32.104454][ T3553] netlink: 260 bytes leftover after parsing attributes in process `syz.1.28'.
[   32.110664][ T3551] pim6reg: left allmulticast mode
[   32.123169][ T3553] netlink: 'syz.1.28': attribute type 6 has an invalid length.
[   32.187359][ T1707] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   32.196795][ T3544] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   32.214078][ T3544] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   32.289885][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.294359][ T3557] loop4: detected capacity change from 0 to 736
[   32.306754][ T3557] iso9660: Unknown parameter 'showssoc'
[   32.532878][ T3567] loop0: detected capacity change from 0 to 736
[   32.544783][ T3567] iso9660: Unknown parameter 'showssoc'
[   32.573086][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.660713][ T3573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.34'.
[   32.690762][ T3573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.34'.
[   32.785756][ T3577] netlink: 44 bytes leftover after parsing attributes in process `syz.4.36'.
[   32.841065][ T3581] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[   32.847610][ T3581] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   32.855034][ T3581] vhci_hcd vhci_hcd.0: Device attached
[   32.867388][ T3581] netlink: 100 bytes leftover after parsing attributes in process `syz.1.38'.
[   32.882507][ T3581] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   32.890552][ T3581] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   32.910865][ T3584] vhci_hcd: connection closed
[   32.911319][  T113] vhci_hcd: stop threads
[   32.920396][  T113] vhci_hcd: release socket
[   32.924847][  T113] vhci_hcd: disconnect device
[   32.938827][ T3587] netlink: 44 bytes leftover after parsing attributes in process `syz.0.40'.
[   32.968302][ T3591] pim6reg: entered allmulticast mode
[   32.974504][ T3591] pim6reg: left allmulticast mode
[   33.219664][ T3602] lo: entered promiscuous mode
[   33.226270][ T3602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   33.244466][ T3602] netlink: 16 bytes leftover after parsing attributes in process `syz.4.47'.
[   33.445841][ T3611] netlink: 44 bytes leftover after parsing attributes in process `syz.2.50'.
[   33.491789][ T3616] loop1: detected capacity change from 0 to 736
[   33.498663][ T3616] iso9660: Unknown parameter 'showssoc'
[   33.536887][ T3618] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[   33.543534][ T3618] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   33.551068][ T3618] vhci_hcd vhci_hcd.0: Device attached
[   33.558220][ T3618] netlink: 100 bytes leftover after parsing attributes in process `syz.2.53'.
[   33.569910][ T3618] siw: device registration error -23
[   33.576517][ T3619] vhci_hcd: connection closed
[   33.576735][   T51] vhci_hcd: stop threads
[   33.585761][   T51] vhci_hcd: release socket
[   33.590371][   T51] vhci_hcd: disconnect device
[   33.681411][ T3623] pim6reg: entered allmulticast mode
[   33.687129][ T3623] pim6reg: left allmulticast mode
[   33.952415][ T3630] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   33.959963][ T3630] batadv_slave_0: entered promiscuous mode
[   33.993420][ T3633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.58'.
[   34.002379][ T3633] IPVS: Error connecting to the multicast addr
[   34.039464][ T3637] loop0: detected capacity change from 0 to 512
[   34.051165][ T3637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.063793][ T3637] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.076332][ T3637] tipc: Started in network mode
[   34.081236][ T3637] tipc: Node identity df818f07, cluster identity 4711
[   34.087989][ T3637] tipc: Node number set to 3749809927
[   34.098884][ T3637] EXT4-fs (loop0): shut down requested (0)
[   34.110313][ T3637] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   34.119216][ T3637] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   34.128096][ T3637] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=15
[   34.137786][ T3637] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   34.146694][ T3637] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=15
[   34.159254][ T3637] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   34.175949][ T3643] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[   34.182469][ T3643] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   34.189978][ T3643] vhci_hcd vhci_hcd.0: Device attached
[   34.199919][ T3643] siw: device registration error -23
[   34.210256][ T3648] vhci_hcd: connection closed
[   34.210587][  T113] vhci_hcd: stop threads
[   34.219524][  T113] vhci_hcd: release socket
[   34.223932][  T113] vhci_hcd: disconnect device
[   34.237436][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.267451][ T3652] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.342990][ T3652] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.401606][ T3658] loop4: detected capacity change from 0 to 512
[   34.411754][ T3660] loop2: detected capacity change from 0 to 512
[   34.421379][ T3658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.421391][ T3660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.434107][ T3658] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   34.447231][ T3660] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.469566][ T3652] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.500948][ T3658] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   34.513765][ T3658] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   34.518950][ T3660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   34.534029][ T3660] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   34.544579][ T3652] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.558170][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.597117][   T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.608615][   T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.623777][   T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.638033][   T51] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.665986][ T3667] FAULT_INJECTION: forcing a failure.
[   34.665986][ T3667] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   34.679147][ T3667] CPU: 0 UID: 0 PID: 3667 Comm: syz.4.69 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   34.679242][ T3667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   34.679336][ T3667] Call Trace:
[   34.679343][ T3667]  <TASK>
[   34.679351][ T3667]  __dump_stack+0x1d/0x30
[   34.679407][ T3667]  dump_stack_lvl+0xe8/0x140
[   34.679444][ T3667]  dump_stack+0x15/0x1b
[   34.679534][ T3667]  should_fail_ex+0x265/0x280
[   34.679568][ T3667]  should_fail+0xb/0x20
[   34.679652][ T3667]  should_fail_usercopy+0x1a/0x20
[   34.679687][ T3667]  _copy_to_user+0x20/0xa0
[   34.679710][ T3667]  simple_read_from_buffer+0xb5/0x130
[   34.679805][ T3667]  proc_fail_nth_read+0x10e/0x150
[   34.679868][ T3667]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   34.679998][ T3667]  vfs_read+0x1a5/0x770
[   34.680017][ T3667]  ? __rcu_read_unlock+0x4f/0x70
[   34.680051][ T3667]  ? __fget_files+0x184/0x1c0
[   34.680076][ T3667]  ksys_read+0xda/0x1a0
[   34.680096][ T3667]  __x64_sys_read+0x40/0x50
[   34.680115][ T3667]  x64_sys_call+0x27c0/0x3000
[   34.680138][ T3667]  do_syscall_64+0xd2/0x200
[   34.680172][ T3667]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   34.680259][ T3667]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   34.680295][ T3667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   34.680314][ T3667] RIP: 0033:0x7fec7f42d8dc
[   34.680326][ T3667] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   34.680382][ T3667] RSP: 002b:00007fec7de97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   34.680414][ T3667] RAX: ffffffffffffffda RBX: 00007fec7f685fa0 RCX: 00007fec7f42d8dc
[   34.680495][ T3667] RDX: 000000000000000f RSI: 00007fec7de970a0 RDI: 0000000000000003
[   34.680505][ T3667] RBP: 00007fec7de97090 R08: 0000000000000000 R09: 0000000000000000
[   34.680515][ T3667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   34.680524][ T3667] R13: 00007fec7f686038 R14: 00007fec7f685fa0 R15: 00007ffe80f6eee8
[   34.680539][ T3667]  </TASK>
[   34.987058][ T3680] syz.1.74 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   35.039039][ T3682] loop3: detected capacity change from 0 to 512
[   35.047862][ T3682] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.72: casefold flag without casefold feature
[   35.071047][ T3682] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.72: couldn't read orphan inode 15 (err -117)
[   35.093734][ T3682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.203306][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.219936][ T3698] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[   35.226465][ T3698] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   35.233979][ T3698] vhci_hcd vhci_hcd.0: Device attached
[   35.234051][ T3700] loop2: detected capacity change from 0 to 1024
[   35.246200][ T3700] =======================================================
[   35.246200][ T3700] WARNING: The mand mount option has been deprecated and
[   35.246200][ T3700]          and is ignored by this kernel. Remove the mand
[   35.246200][ T3700]          option from the mount to silence this warning.
[   35.246200][ T3700] =======================================================
[   35.281965][ T3700] EXT4-fs: Ignoring removed mblk_io_submit option
[   35.288442][ T3700] EXT4-fs: Ignoring removed bh option
[   35.289355][ T3698] siw: device registration error -23
[   35.294034][ T3700] ext3: Unknown parameter 'subj_type'
[   35.309101][ T3701] vhci_hcd: connection closed
[   35.309274][  T113] vhci_hcd: stop threads
[   35.318281][  T113] vhci_hcd: release socket
[   35.320881][ T3700] mmap: syz.2.80 (3700) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   35.322751][  T113] vhci_hcd: disconnect device
[   35.347462][    C0] hrtimer: interrupt took 38176 ns
[   35.404026][ T3712] loop4: detected capacity change from 0 to 512
[   35.421064][ T3712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.433914][ T3712] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   35.473459][ T3712] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   35.485965][ T3712] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   35.505988][ T3716] netlink: 'syz.2.85': attribute type 21 has an invalid length.
[   35.515016][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.628086][ T3718] loop4: detected capacity change from 0 to 512
[   35.635999][ T3718] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   35.644113][ T3718] EXT4-fs (loop4): orphan cleanup on readonly fs
[   35.650863][ T3718] EXT4-fs warning (device loop4): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   35.665561][ T3718] EXT4-fs (loop4): Cannot turn on quotas: error -22
[   35.678040][ T3718] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #16: comm syz.4.86: casefold flag without casefold feature
[   35.691926][ T3718] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.86: couldn't read orphan inode 16 (err -117)
[   35.704316][ T3718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   35.717810][ T3718] random: crng reseeded on system resumption
[   35.762544][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.794955][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.934655][ T3767] serio: Serial port ttyS3
[   36.048254][   T29] kauditd_printk_skb: 1270 callbacks suppressed
[   36.048266][   T29] audit: type=1400 audit(1759472589.433:1386): avc:  denied  { recv } for  pid=3780 comm="modprobe" saddr=10.128.0.163 src=30036 daddr=10.128.1.20 dest=39932 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[   36.098194][   T29] audit: type=1326 audit(1759472589.474:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.4.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7f42eec9 code=0x7ffc0000
[   36.121587][   T29] audit: type=1326 audit(1759472589.474:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.4.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7f42eec9 code=0x7ffc0000
[   36.145031][   T29] audit: type=1326 audit(1759472589.474:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.4.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fec7f42eec9 code=0x7ffc0000
[   36.168576][   T29] audit: type=1326 audit(1759472589.474:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.4.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7f42eec9 code=0x7ffc0000
[   36.205993][   T29] audit: type=1400 audit(1759472589.536:1391): avc:  denied  { egress } for  pid=3297 comm="syz-executor" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[   36.229940][   T29] audit: type=1400 audit(1759472589.536:1392): avc:  denied  { sendto } for  pid=3297 comm="syz-executor" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[   36.273487][   T29] audit: type=1400 audit(1759472589.670:1393): avc:  denied  { create } for  pid=3800 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   36.320652][   T29] audit: type=1400 audit(1759472589.670:1394): avc:  denied  { write } for  pid=3800 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   36.330321][ T3810] pim6reg: entered allmulticast mode
[   36.340091][   T29] audit: type=1400 audit(1759472589.670:1395): avc:  denied  { read } for  pid=3800 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   36.347702][ T3810] pim6reg: left allmulticast mode
[   36.408534][ T3817] loop4: detected capacity change from 0 to 128
[   36.498223][ T3831] loop1: detected capacity change from 0 to 512
[   36.566154][ T3831] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   36.610685][ T3831] EXT4-fs (loop1): 1 truncate cleaned up
[   36.616858][ T3831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.807131][ T3891] pim6reg: entered allmulticast mode
[   36.818854][ T3891] pim6reg: left allmulticast mode
[   36.919722][ T3897] bridge1: the hash_elasticity option has been deprecated and is always 16
[   37.084771][ T3909] lo speed is unknown, defaulting to 1000
[   37.090746][ T3909] lo speed is unknown, defaulting to 1000
[   37.096782][ T3909] lo speed is unknown, defaulting to 1000
[   37.103396][ T3909] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   37.113311][ T3909] lo speed is unknown, defaulting to 1000
[   37.119539][ T3909] lo speed is unknown, defaulting to 1000
[   37.125966][ T3909] lo speed is unknown, defaulting to 1000
[   37.132062][ T3909] lo speed is unknown, defaulting to 1000
[   37.133041][ T3907] loop2: detected capacity change from 0 to 512
[   37.138183][ T3909] lo speed is unknown, defaulting to 1000
[   37.157357][ T3907] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   37.171648][ T3911] loop0: detected capacity change from 0 to 1024
[   37.179916][ T3907] EXT4-fs (loop2): 1 orphan inode deleted
[   37.185783][ T3907] EXT4-fs (loop2): 1 truncate cleaned up
[   37.193009][ T3911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.193200][ T3907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.222649][ T3911] FAULT_INJECTION: forcing a failure.
[   37.222649][ T3911] name failslab, interval 1, probability 0, space 0, times 0
[   37.235360][ T3911] CPU: 0 UID: 0 PID: 3911 Comm: syz.0.123 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   37.235389][ T3911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   37.235403][ T3911] Call Trace:
[   37.235408][ T3911]  <TASK>
[   37.235414][ T3911]  __dump_stack+0x1d/0x30
[   37.235486][ T3911]  dump_stack_lvl+0xe8/0x140
[   37.235525][ T3911]  dump_stack+0x15/0x1b
[   37.235560][ T3911]  should_fail_ex+0x265/0x280
[   37.235587][ T3911]  should_failslab+0x8c/0xb0
[   37.235745][ T3911]  __kmalloc_noprof+0xa5/0x570
[   37.235790][ T3911]  ? ext4_find_extent+0x16b/0x7a0
[   37.235879][ T3911]  ext4_find_extent+0x16b/0x7a0
[   37.235987][ T3911]  ? cgroup_get_e_css+0x19e/0x270
[   37.236026][ T3911]  ext4_ext_map_blocks+0x11f/0x38a0
[   37.236062][ T3911]  ? blk_mq_request_issue_directly+0x30a/0x380
[   37.236129][ T3911]  ? blk_mq_issue_direct+0x3b5/0x530
[   37.236179][ T3911]  ? __blk_mq_alloc_requests+0xd86/0xe30
[   37.236207][ T3911]  ? folio_mark_accessed+0x240/0x3d0
[   37.236301][ T3911]  ? folio_mark_accessed+0x240/0x3d0
[   37.236339][ T3911]  ? folio_mark_accessed+0x240/0x3d0
[   37.236445][ T3911]  ext4_map_query_blocks+0xa8/0x480
[   37.236486][ T3911]  ext4_map_blocks+0x330/0xd00
[   37.236582][ T3911]  ? __ext4_journal_start_sb+0x131/0x300
[   37.236612][ T3911]  ext4_iomap_begin+0x88d/0xe00
[   37.236774][ T3911]  ? __pfx_ext4_iomap_begin+0x10/0x10
[   37.236811][ T3911]  iomap_iter+0x32f/0x730
[   37.236831][ T3911]  ? should_failslab+0x8c/0xb0
[   37.236859][ T3911]  __iomap_dio_rw+0x705/0x1240
[   37.236899][ T3911]  ? ext4_journal_check_start+0x11a/0x1b0
[   37.236980][ T3911]  iomap_dio_rw+0x40/0x90
[   37.237007][ T3911]  ext4_file_write_iter+0xad9/0xf00
[   37.237054][ T3911]  do_iter_readv_writev+0x4a1/0x540
[   37.237088][ T3911]  vfs_writev+0x2df/0x8b0
[   37.237182][ T3911]  __se_sys_pwritev2+0xfc/0x1c0
[   37.237214][ T3911]  __x64_sys_pwritev2+0x67/0x80
[   37.237245][ T3911]  x64_sys_call+0x2c59/0x3000
[   37.237268][ T3911]  do_syscall_64+0xd2/0x200
[   37.237327][ T3911]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   37.237465][ T3911]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   37.237495][ T3911]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   37.237579][ T3911] RIP: 0033:0x7f27ad97eec9
[   37.237667][ T3911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   37.237688][ T3911] RSP: 002b:00007f27ac3df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[   37.237718][ T3911] RAX: ffffffffffffffda RBX: 00007f27adbd5fa0 RCX: 00007f27ad97eec9
[   37.237733][ T3911] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005
[   37.237747][ T3911] RBP: 00007f27ac3df090 R08: 0000000000000000 R09: 0000000000000003
[   37.237761][ T3911] R10: 0000000000007c00 R11: 0000000000000246 R12: 0000000000000001
[   37.237774][ T3911] R13: 00007f27adbd6038 R14: 00007f27adbd5fa0 R15: 00007ffeecec7c98
[   37.237856][ T3911]  </TASK>
[   37.528357][ T3911] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt.
[   37.562715][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.573553][ T3916] lo speed is unknown, defaulting to 1000
[   37.594056][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.643259][ T3921] netlink: 'syz.1.126': attribute type 21 has an invalid length.
[   37.669581][ T3926] pim6reg: entered allmulticast mode
[   37.687441][ T3926] pim6reg: left allmulticast mode
[   37.741380][ T3929] loop4: detected capacity change from 0 to 512
[   37.865461][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.046107][ T3947] loop1: detected capacity change from 0 to 512
[   38.098520][ T3947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.144921][ T3947] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   38.233990][ T3947] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   38.248596][ T3947] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   38.287380][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.375969][ T3964] loop1: detected capacity change from 0 to 1024
[   38.396712][ T3964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.495277][ T3967] batadv_slave_1: entered promiscuous mode
[   38.510815][ T3963] batadv_slave_1: left promiscuous mode
[   38.601032][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.695238][ T3974] loop4: detected capacity change from 0 to 512
[   38.702679][ T3974] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   38.720757][ T3974] EXT4-fs (loop4): 1 orphan inode deleted
[   38.726514][ T3974] EXT4-fs (loop4): 1 truncate cleaned up
[   38.733002][ T3974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.755883][ T3979] loop3: detected capacity change from 0 to 256
[   38.768908][ T3981] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.837751][ T3981] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.888822][ T3981] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.914055][ T3986] loop1: detected capacity change from 0 to 512
[   38.925557][ T3986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.938319][ T3986] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   38.949441][ T3981] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.979239][ T3992] __nla_validate_parse: 9 callbacks suppressed
[   38.979252][ T3992] netlink: 44 bytes leftover after parsing attributes in process `syz.3.148'.
[   39.001312][ T3986] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   39.014223][ T3986] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   39.039231][ T3847] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.066679][ T3847] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.084766][ T3847] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.095333][ T3847] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.110960][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.156951][ T4005] netlink: 'syz.1.152': attribute type 5 has an invalid length.
[   39.167101][ T4005] ip6erspan0: entered promiscuous mode
[   39.174986][ T4005] siw: device registration error -23
[   39.249929][ T4009] FAULT_INJECTION: forcing a failure.
[   39.249929][ T4009] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   39.263082][ T4009] CPU: 1 UID: 0 PID: 4009 Comm: syz.2.151 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   39.263114][ T4009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   39.263163][ T4009] Call Trace:
[   39.263296][ T4009]  <TASK>
[   39.263303][ T4009]  __dump_stack+0x1d/0x30
[   39.263342][ T4009]  dump_stack_lvl+0xe8/0x140
[   39.263440][ T4009]  dump_stack+0x15/0x1b
[   39.263473][ T4009]  should_fail_ex+0x265/0x280
[   39.263528][ T4009]  should_fail+0xb/0x20
[   39.263600][ T4009]  should_fail_usercopy+0x1a/0x20
[   39.263628][ T4009]  _copy_from_user+0x1c/0xb0
[   39.263652][ T4009]  __se_sys_mount+0x10d/0x2e0
[   39.263678][ T4009]  ? fput+0x8f/0xc0
[   39.263748][ T4009]  ? ksys_write+0x192/0x1a0
[   39.263780][ T4009]  __x64_sys_mount+0x67/0x80
[   39.263848][ T4009]  x64_sys_call+0x2b51/0x3000
[   39.263867][ T4009]  do_syscall_64+0xd2/0x200
[   39.263890][ T4009]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   39.263995][ T4009]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   39.264039][ T4009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.264064][ T4009] RIP: 0033:0x7f552bf9eec9
[   39.264080][ T4009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   39.264100][ T4009] RSP: 002b:00007f552a9bd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   39.264149][ T4009] RAX: ffffffffffffffda RBX: 00007f552c1f6180 RCX: 00007f552bf9eec9
[   39.264221][ T4009] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000
[   39.264235][ T4009] RBP: 00007f552a9bd090 R08: 0000200000000600 R09: 0000000000000000
[   39.264248][ T4009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   39.264261][ T4009] R13: 00007f552c1f6218 R14: 00007f552c1f6180 R15: 00007ffec7498608
[   39.264277][ T4009]  </TASK>
[   39.531284][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.720282][ T4043] netlink: 44 bytes leftover after parsing attributes in process `syz.3.161'.
[   39.982596][ T4081] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.040950][ T4081] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.108990][ T4097] loop3: detected capacity change from 0 to 512
[   40.116703][ T4097] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   40.129770][ T4081] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.130177][ T4097] EXT4-fs (loop3): 1 orphan inode deleted
[   40.145902][ T4097] EXT4-fs (loop3): 1 truncate cleaned up
[   40.151993][ T4097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.195461][ T4081] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.222930][ T4120] lo speed is unknown, defaulting to 1000
[   40.250113][ T3856] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.261139][ T3850] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.290353][ T3852] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.303026][ T3852] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.409205][ T4158] netlink: 44 bytes leftover after parsing attributes in process `syz.2.172'.
[   40.422689][ T4155] loop1: detected capacity change from 0 to 128
[   40.479832][ T4120] loop0: detected capacity change from 0 to 512
[   40.487714][ T4120] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   40.496006][ T4120] EXT4-fs (loop0): orphan cleanup on readonly fs
[   40.502807][ T4120] EXT4-fs warning (device loop0): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   40.518019][ T4120] EXT4-fs (loop0): Cannot turn on quotas: error -22
[   40.529937][ T4120] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.170: casefold flag without casefold feature
[   40.549364][ T4120] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.170: couldn't read orphan inode 16 (err -117)
[   40.573879][ T4120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   40.600957][ T4120] random: crng reseeded on system resumption
[   40.607124][ T4170] loop1: detected capacity change from 0 to 8192
[   40.650519][ T4174] veth0: entered promiscuous mode
[   40.655935][ T4174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'.
[   40.677419][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.833682][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.930356][ T4204] loop3: detected capacity change from 0 to 764
[   40.936934][   T29] kauditd_printk_skb: 1374 callbacks suppressed
[   40.936949][   T29] audit: type=1326 audit(1759472594.447:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f27ad975d67 code=0x7ffc0000
[   40.946107][   T29] audit: type=1326 audit(1759472594.447:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f27ad91af79 code=0x7ffc0000
[   40.989786][   T29] audit: type=1326 audit(1759472594.447:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f27ad97eec9 code=0x7ffc0000
[   41.013261][   T29] audit: type=1326 audit(1759472594.488:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f27ad975d67 code=0x7ffc0000
[   41.036535][   T29] audit: type=1326 audit(1759472594.488:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f27ad91af79 code=0x7ffc0000
[   41.036548][ T4204] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   41.060004][   T29] audit: type=1326 audit(1759472594.488:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f27ad97eec9 code=0x7ffc0000
[   41.091284][   T29] audit: type=1326 audit(1759472594.509:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f27ad975d67 code=0x7ffc0000
[   41.114539][   T29] audit: type=1326 audit(1759472594.509:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f27ad91af79 code=0x7ffc0000
[   41.137789][   T29] audit: type=1326 audit(1759472594.509:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f27ad97eec9 code=0x7ffc0000
[   41.161739][   T29] audit: type=1326 audit(1759472594.550:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f27ad975d67 code=0x7ffc0000
[   41.197579][ T4223] netlink: 44 bytes leftover after parsing attributes in process `syz.3.184'.
[   41.321052][ T4243] loop3: detected capacity change from 0 to 1024
[   41.328276][ T4243] EXT4-fs: Ignoring removed bh option
[   41.334089][ T4243] EXT4-fs: inline encryption not supported
[   41.341560][ T4248] loop2: detected capacity change from 0 to 764
[   41.354367][ T4243] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   41.373044][ T4248] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   41.381268][ T4243] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   41.385288][ T4248] FAULT_INJECTION: forcing a failure.
[   41.385288][ T4248] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   41.390269][ T4243] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.186: lblock 2 mapped to illegal pblock 2 (length 1)
[   41.402408][ T4248] CPU: 0 UID: 0 PID: 4248 Comm: syz.2.187 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   41.402490][ T4248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   41.402505][ T4248] Call Trace:
[   41.402514][ T4248]  <TASK>
[   41.402523][ T4248]  __dump_stack+0x1d/0x30
[   41.402606][ T4248]  dump_stack_lvl+0xe8/0x140
[   41.402648][ T4248]  dump_stack+0x15/0x1b
[   41.402733][ T4248]  should_fail_ex+0x265/0x280
[   41.402769][ T4248]  should_fail+0xb/0x20
[   41.402800][ T4248]  should_fail_usercopy+0x1a/0x20
[   41.403015][ T4248]  strncpy_from_user+0x25/0x230
[   41.403044][ T4248]  ? kmem_cache_alloc_noprof+0x242/0x480
[   41.403170][ T4248]  ? getname_flags+0x80/0x3b0
[   41.403209][ T4248]  getname_flags+0xae/0x3b0
[   41.403245][ T4248]  path_setxattrat+0x223/0x310
[   41.403300][ T4248]  __x64_sys_lsetxattr+0x71/0x90
[   41.403368][ T4248]  x64_sys_call+0x287b/0x3000
[   41.403406][ T4248]  do_syscall_64+0xd2/0x200
[   41.403430][ T4248]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   41.403469][ T4248]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   41.403536][ T4248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.403563][ T4248] RIP: 0033:0x7f552bf9eec9
[   41.403582][ T4248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   41.403621][ T4248] RSP: 002b:00007f552a9ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[   41.403644][ T4248] RAX: ffffffffffffffda RBX: 00007f552c1f5fa0 RCX: 00007f552bf9eec9
[   41.403660][ T4248] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000200000000240
[   41.403680][ T4248] RBP: 00007f552a9ff090 R08: 0000000000000001 R09: 0000000000000000
[   41.403696][ T4248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   41.403710][ T4248] R13: 00007f552c1f6038 R14: 00007f552c1f5fa0 R15: 00007ffec7498608
[   41.403735][ T4248]  </TASK>
[   41.603157][ T4243] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.186: lblock 0 mapped to illegal pblock 48 (length 1)
[   41.626082][ T4243] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.186: Failed to acquire dquot type 0
[   41.645636][ T4243] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   41.660714][ T4243] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.186: mark_inode_dirty error
[   41.714701][ T4243] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   41.732224][ T4243] EXT4-fs (loop3): 1 orphan inode deleted
[   41.750325][ T4283] pim6reg: entered allmulticast mode
[   41.751509][ T4243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.755747][  T782] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[   41.785297][ T4304] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   41.812467][  T782] EXT4-fs error (device loop3): ext4_release_dquot:6979: comm kworker/u8:5: Failed to release dquot type 0
[   41.814850][ T4303] pim6reg: left allmulticast mode
[   41.832758][ T4313] netlink: 44 bytes leftover after parsing attributes in process `syz.4.195'.
[   41.849399][ T4311] loop1: detected capacity change from 0 to 512
[   41.859562][ T4316] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0
[   41.882159][ T4319] netlink: 'syz.4.196': attribute type 6 has an invalid length.
[   41.892766][ T4311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.913722][ T4243] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.186: lblock 0 mapped to illegal pblock 48 (length 1)
[   41.917942][ T4311] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.991015][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.035886][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.103137][ T4337] loop3: detected capacity change from 0 to 256
[   42.164815][ T4343] FAULT_INJECTION: forcing a failure.
[   42.164815][ T4343] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   42.177915][ T4343] CPU: 0 UID: 0 PID: 4343 Comm: syz.1.203 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   42.177947][ T4343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   42.177957][ T4343] Call Trace:
[   42.177963][ T4343]  <TASK>
[   42.177971][ T4343]  __dump_stack+0x1d/0x30
[   42.178011][ T4343]  dump_stack_lvl+0xe8/0x140
[   42.178067][ T4343]  dump_stack+0x15/0x1b
[   42.178098][ T4343]  should_fail_ex+0x265/0x280
[   42.178159][ T4343]  should_fail+0xb/0x20
[   42.178182][ T4343]  should_fail_usercopy+0x1a/0x20
[   42.178228][ T4343]  strncpy_from_user+0x25/0x230
[   42.178254][ T4343]  ? __kmalloc_cache_noprof+0x249/0x4a0
[   42.178288][ T4343]  __se_sys_memfd_create+0x1ff/0x590
[   42.178375][ T4343]  __x64_sys_memfd_create+0x31/0x40
[   42.178395][ T4343]  x64_sys_call+0x2ac2/0x3000
[   42.178413][ T4343]  do_syscall_64+0xd2/0x200
[   42.178443][ T4343]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   42.178529][ T4343]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   42.178558][ T4343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.178578][ T4343] RIP: 0033:0x7f966b69eec9
[   42.178666][ T4343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   42.178682][ T4343] RSP: 002b:00007f966a0e5e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   42.178702][ T4343] RAX: ffffffffffffffda RBX: 000000000000052e RCX: 00007f966b69eec9
[   42.178717][ T4343] RDX: 00007f966a0e5ef0 RSI: 0000000000000000 RDI: 00007f966b722960
[   42.178731][ T4343] RBP: 0000200000000640 R08: 00007f966a0e5bb7 R09: 00007f966a0e5e40
[   42.178745][ T4343] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000
[   42.178758][ T4343] R13: 00007f966a0e5ef0 R14: 00007f966a0e5eb0 R15: 00002000000001c0
[   42.178786][ T4343]  </TASK>
[   42.399788][ T4348] netlink: 44 bytes leftover after parsing attributes in process `syz.3.206'.
[   42.452048][ T4353] veth0: entered promiscuous mode
[   42.460684][ T4353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'.
[   42.484325][ T4356] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.533568][ T4358] pim6reg: entered allmulticast mode
[   42.539396][ T4358] pim6reg: left allmulticast mode
[   42.551241][ T4356] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.604951][ T4356] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.621865][ T4366] loop3: detected capacity change from 0 to 256
[   42.641273][ T4356] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.704390][ T3847] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.716300][ T3847] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.728771][ T3847] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.763634][ T3847] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.781405][ T4371] loop2: detected capacity change from 0 to 512
[   42.799077][ T4371] EXT4-fs warning (device loop2): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   42.823060][ T4371] EXT4-fs (loop2): mount failed
[   42.856919][ T4375] netlink: 'syz.1.217': attribute type 21 has an invalid length.
[   42.865000][ T4375] netlink: 156 bytes leftover after parsing attributes in process `syz.1.217'.
[   42.898799][ T4387] netlink: 96 bytes leftover after parsing attributes in process `syz.2.220'.
[   42.903124][ T4386] veth0: entered promiscuous mode
[   42.961875][ T4392] netlink: 'syz.1.223': attribute type 6 has an invalid length.
[   43.472825][ T4403] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[   43.479436][ T4403] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   43.486978][ T4403] vhci_hcd vhci_hcd.0: Device attached
[   43.524891][ T4406] siw: device registration error -23
[   43.539992][ T4404] vhci_hcd: connection closed
[   43.540279][ T3847] vhci_hcd: stop threads
[   43.549270][ T3847] vhci_hcd: release socket
[   43.553718][ T3847] vhci_hcd: disconnect device
[   44.084470][ T4416] loop0: detected capacity change from 0 to 256
[   44.422819][ T4421] netlink: 'syz.0.240': attribute type 6 has an invalid length.
[   44.721931][ T4435] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.785512][ T4435] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.816361][ T4442] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[   44.822922][ T4442] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   44.830399][ T4442] vhci_hcd vhci_hcd.0: Device attached
[   44.837364][ T4442] __nla_validate_parse: 6 callbacks suppressed
[   44.837376][ T4442] netlink: 100 bytes leftover after parsing attributes in process `syz.3.239'.
[   44.856803][ T4442] siw: device registration error -23
[   44.863782][ T4443] vhci_hcd: connection closed
[   44.864028][  T782] vhci_hcd: stop threads
[   44.872989][  T782] vhci_hcd: release socket
[   44.877397][  T782] vhci_hcd: disconnect device
[   44.882846][ T4435] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.936241][ T4435] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.996565][ T3432] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.009447][ T3432] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.020993][ T3432] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.031744][  T782] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.093358][ T4449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.242'.
[   45.233154][ T4456] loop4: detected capacity change from 0 to 512
[   45.240332][ T4456] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   45.252387][ T4456] EXT4-fs (loop4): 1 orphan inode deleted
[   45.258269][ T4456] EXT4-fs (loop4): 1 truncate cleaned up
[   45.264647][ T4456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.293473][ T4464] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   45.301439][ T4464] batadv_slave_0: entered promiscuous mode
[   45.326820][ T4466] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[   45.333427][ T4466] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   45.340876][ T4466] vhci_hcd vhci_hcd.0: Device attached
[   45.346963][ T4466] netlink: 100 bytes leftover after parsing attributes in process `syz.1.247'.
[   45.356179][ T4467] vhci_hcd: connection closed
[   45.356331][  T782] vhci_hcd: stop threads
[   45.365540][  T782] vhci_hcd: release socket
[   45.369981][  T782] vhci_hcd: disconnect device
[   45.552692][ T4459] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   45.568034][ T4459] EXT4-fs (loop4): Remounting filesystem read-only
[   45.756851][ T4525] loop2: detected capacity change from 0 to 512
[   45.780283][ T4525] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.252: bg 0: block 248: padding at end of block bitmap is not set
[   45.795061][ T4525] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.252: Failed to acquire dquot type 1
[   45.807327][ T4525] EXT4-fs (loop2): 1 truncate cleaned up
[   45.813501][ T4525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.826122][ T4525] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.838729][   T29] kauditd_printk_skb: 770 callbacks suppressed
[   45.838744][   T29] audit: type=1400 audit(1759472599.489:3543): avc:  denied  { create } for  pid=4524 comm="syz.2.252" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   45.890236][   T29] audit: type=1400 audit(1759472599.489:3544): avc:  denied  { write } for  pid=4524 comm="syz.2.252" path="socket:[8212]" dev="sockfs" ino=8212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   45.936809][   T29] audit: type=1400 audit(1759472599.581:3545): avc:  denied  { bind } for  pid=4544 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   45.957105][   T29] audit: type=1400 audit(1759472599.581:3546): avc:  denied  { setopt } for  pid=4544 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   45.979559][   T29] audit: type=1400 audit(1759472599.622:3547): avc:  denied  { create } for  pid=4544 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   45.979901][ T4545] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   45.999200][   T29] audit: type=1400 audit(1759472599.622:3548): avc:  denied  { connect } for  pid=4544 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   46.027098][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.060397][ T4525] syz.2.252 (4525) used greatest stack depth: 9200 bytes left
[   46.069766][ T4556] loop1: detected capacity change from 0 to 512
[   46.077254][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.088007][ T4555] loop4: detected capacity change from 0 to 1024
[   46.094784][ T3859] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5
[   46.103796][ T3859] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:12: Failed to release dquot type 1
[   46.108351][ T4555] EXT4-fs: Ignoring removed bh option
[   46.122085][ T4555] EXT4-fs: inline encryption not supported
[   46.131996][ T4561] FAULT_INJECTION: forcing a failure.
[   46.131996][ T4561] name failslab, interval 1, probability 0, space 0, times 0
[   46.144629][ T4561] CPU: 0 UID: 0 PID: 4561 Comm: syz.0.257 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   46.144653][ T4561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   46.144714][ T4561] Call Trace:
[   46.144719][ T4561]  <TASK>
[   46.144725][ T4561]  __dump_stack+0x1d/0x30
[   46.144764][ T4561]  dump_stack_lvl+0xe8/0x140
[   46.144801][ T4561]  dump_stack+0x15/0x1b
[   46.144837][ T4561]  should_fail_ex+0x265/0x280
[   46.144914][ T4561]  ? bpf_prog_alloc_no_stats+0xc4/0x3b0
[   46.145011][ T4561]  should_failslab+0x8c/0xb0
[   46.145041][ T4561]  __kmalloc_cache_noprof+0x4c/0x4a0
[   46.145076][ T4561]  bpf_prog_alloc_no_stats+0xc4/0x3b0
[   46.145167][ T4561]  bpf_prog_alloc+0x3c/0x150
[   46.145208][ T4561]  bpf_prog_load+0x506/0x1100
[   46.145335][ T4561]  ? security_bpf+0x2b/0x90
[   46.145359][ T4561]  __sys_bpf+0x469/0x7c0
[   46.145400][ T4561]  __x64_sys_bpf+0x41/0x50
[   46.145459][ T4561]  x64_sys_call+0x2aee/0x3000
[   46.145482][ T4561]  do_syscall_64+0xd2/0x200
[   46.145551][ T4561]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   46.145575][ T4561]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   46.145613][ T4561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.145638][ T4561] RIP: 0033:0x7f27ad97eec9
[   46.145654][ T4561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   46.145682][ T4561] RSP: 002b:00007f27ac3df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   46.145699][ T4561] RAX: ffffffffffffffda RBX: 00007f27adbd5fa0 RCX: 00007f27ad97eec9
[   46.145709][ T4561] RDX: 0000000000000094 RSI: 0000200000000900 RDI: 0000000000000005
[   46.145720][ T4561] RBP: 00007f27ac3df090 R08: 0000000000000000 R09: 0000000000000000
[   46.145730][ T4561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   46.145740][ T4561] R13: 00007f27adbd6038 R14: 00007f27adbd5fa0 R15: 00007ffeecec7c98
[   46.145755][ T4561]  </TASK>
[   46.207871][ T4555] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   46.293554][ T4571] pim6reg: entered allmulticast mode
[   46.392039][ T4555] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   46.418671][ T4555] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.254: lblock 2 mapped to illegal pblock 2 (length 1)
[   46.437088][ T4555] Quota error (device loop4): qtree_write_dquot: dquota write failed
[   46.469766][ T4555] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.254: lblock 0 mapped to illegal pblock 48 (length 1)
[   46.475482][ T4596] pim6reg: left allmulticast mode
[   46.495450][ T4555] Quota error (device loop4): v2_write_file_info: Can't write info structure
[   46.504328][ T4555] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.254: Failed to acquire dquot type 0
[   46.520511][ T4555] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   46.544865][ T4555] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.254: mark_inode_dirty error
[   46.556580][   T29] audit: type=1326 audit(1759472600.194:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4603 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff170cceec9 code=0x7ffc0000
[   46.580702][ T4555] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   46.601413][ T4555] EXT4-fs (loop4): 1 orphan inode deleted
[   46.609596][ T4555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.622722][ T3432] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[   46.645468][ T3432] EXT4-fs error (device loop4): ext4_release_dquot:6979: comm kworker/u8:7: Failed to release dquot type 0
[   46.675034][ T4555] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.254: lblock 0 mapped to illegal pblock 48 (length 1)
[   46.698303][ T4614] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[   46.704837][ T4614] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   46.712353][ T4614] vhci_hcd vhci_hcd.0: Device attached
[   46.727653][ T4614] netlink: 100 bytes leftover after parsing attributes in process `syz.2.263'.
[   46.738245][ T4615] vhci_hcd: connection closed
[   46.738460][ T3432] vhci_hcd: stop threads
[   46.747485][ T3432] vhci_hcd: release socket
[   46.751902][ T3432] vhci_hcd: disconnect device
[   46.758192][ T4618] loop0: detected capacity change from 0 to 512
[   46.776742][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.777501][ T4618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.798785][ T4618] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   46.862903][ T4618] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   46.874930][ T4623] loop4: detected capacity change from 0 to 8192
[   46.883241][ T4618] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   46.895858][ T4618] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   46.923500][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.943083][ T4631] loop0: detected capacity change from 0 to 512
[   46.952908][ T4631] EXT4-fs warning (device loop0): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   46.967854][ T4631] EXT4-fs (loop0): mount failed
[   47.474254][ T4705] loop3: detected capacity change from 0 to 2048
[   47.491907][ T4705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.628606][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.662617][ T4734] Zero length message leads to an empty skb
[   47.769374][ T4756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.279'.
[   47.822013][ T4762] FAULT_INJECTION: forcing a failure.
[   47.822013][ T4762] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   47.834520][ T4756] netlink: 16 bytes leftover after parsing attributes in process `syz.3.279'.
[   47.835185][ T4762] CPU: 0 UID: 0 PID: 4762 Comm: syz.4.282 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   47.835219][ T4762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   47.835271][ T4762] Call Trace:
[   47.835277][ T4762]  <TASK>
[   47.835286][ T4762]  __dump_stack+0x1d/0x30
[   47.835335][ T4762]  dump_stack_lvl+0xe8/0x140
[   47.835468][ T4762]  dump_stack+0x15/0x1b
[   47.835528][ T4762]  should_fail_ex+0x265/0x280
[   47.835578][ T4762]  should_fail+0xb/0x20
[   47.835644][ T4762]  should_fail_usercopy+0x1a/0x20
[   47.835682][ T4762]  _copy_from_iter+0xd2/0xe80
[   47.835731][ T4762]  ? __build_skb_around+0x1ab/0x200
[   47.835762][ T4762]  ? __alloc_skb+0x223/0x320
[   47.835793][ T4762]  netlink_sendmsg+0x471/0x6b0
[   47.835880][ T4762]  ? __pfx_netlink_sendmsg+0x10/0x10
[   47.835919][ T4762]  __sock_sendmsg+0x142/0x180
[   47.835943][ T4762]  ____sys_sendmsg+0x31e/0x4e0
[   47.836024][ T4762]  ___sys_sendmsg+0x17b/0x1d0
[   47.836074][ T4762]  __x64_sys_sendmsg+0xd4/0x160
[   47.836112][ T4762]  x64_sys_call+0x191e/0x3000
[   47.836169][ T4762]  do_syscall_64+0xd2/0x200
[   47.836194][ T4762]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   47.836226][ T4762]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   47.836267][ T4762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.836366][ T4762] RIP: 0033:0x7fec7f42eec9
[   47.836383][ T4762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   47.836405][ T4762] RSP: 002b:00007fec7de97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   47.836427][ T4762] RAX: ffffffffffffffda RBX: 00007fec7f685fa0 RCX: 00007fec7f42eec9
[   47.836443][ T4762] RDX: 0000000024000000 RSI: 0000200000000040 RDI: 0000000000000003
[   47.836518][ T4762] RBP: 00007fec7de97090 R08: 0000000000000000 R09: 0000000000000000
[   47.836533][ T4762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.836567][ T4762] R13: 00007fec7f686038 R14: 00007fec7f685fa0 R15: 00007ffe80f6eee8
[   47.836591][ T4762]  </TASK>
[   47.901977][ T4772] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[   48.049156][ T4772] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   48.056732][ T4772] vhci_hcd vhci_hcd.0: Device attached
[   48.118509][ T4763] netlink: 100 bytes leftover after parsing attributes in process `syz.1.281'.
[   48.158935][ T4773] vhci_hcd: connection closed
[   48.167086][ T3847] vhci_hcd: stop threads
[   48.168024][ T4792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.285'.
[   48.171802][ T3847] vhci_hcd: release socket
[   48.187811][ T4792] netlink: 16 bytes leftover after parsing attributes in process `syz.0.285'.
[   48.189388][ T3847] vhci_hcd: disconnect device
[   48.235652][    T9] vhci_hcd: vhci_device speed not set
[   48.299592][ T4800] loop2: detected capacity change from 0 to 256
[   48.507899][ T4808] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   48.515547][ T4808] batadv_slave_0: entered promiscuous mode
[   48.645741][ T4814] loop2: detected capacity change from 0 to 512
[   48.650267][ T4817] loop3: detected capacity change from 0 to 512
[   48.669358][ T4814] EXT4-fs warning (device loop2): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   48.684408][ T4814] EXT4-fs (loop2): mount failed
[   48.690368][ T4817] EXT4-fs warning (device loop3): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   48.705768][ T4817] EXT4-fs (loop3): mount failed
[   48.881991][ T4853] loop2: detected capacity change from 0 to 512
[   48.905170][ T4853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.918294][ T4853] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   48.986738][ T4876] loop0: detected capacity change from 0 to 256
[   48.990253][ T4853] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   49.022181][ T4853] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   49.034654][ T4853] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   49.060168][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.315181][ T4929] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.337790][ T4934] loop2: detected capacity change from 0 to 512
[   49.365927][ T4929] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.379920][ T4934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.393023][ T4934] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   49.429006][ T4934] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   49.444604][ T4929] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.448020][ T4934] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   49.467768][ T4952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.309'.
[   49.468087][ T4934] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   49.513526][ T4929] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.528807][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.597818][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.620794][  T113] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.641515][  T113] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.679054][  T113] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.719878][ T5000] loop2: detected capacity change from 0 to 256
[   49.871662][ T5011] loop3: detected capacity change from 0 to 512
[   49.887645][ T5011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.908532][ T5011] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   49.959351][ T5011] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   49.976365][ T5019] __nla_validate_parse: 1 callbacks suppressed
[   49.976377][ T5019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'.
[   49.996194][ T5021] FAULT_INJECTION: forcing a failure.
[   49.996194][ T5021] name failslab, interval 1, probability 0, space 0, times 0
[   49.997733][ T5011] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   50.008919][ T5021] CPU: 0 UID: 0 PID: 5021 Comm: syz.2.324 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   50.008964][ T5021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   50.008977][ T5021] Call Trace:
[   50.008985][ T5021]  <TASK>
[   50.008993][ T5021]  __dump_stack+0x1d/0x30
[   50.009079][ T5021]  dump_stack_lvl+0xe8/0x140
[   50.009192][ T5021]  dump_stack+0x15/0x1b
[   50.009229][ T5021]  should_fail_ex+0x265/0x280
[   50.009267][ T5021]  should_failslab+0x8c/0xb0
[   50.009299][ T5021]  __kmalloc_node_noprof+0xaa/0x580
[   50.009370][ T5021]  ? allocate_slab+0x15d/0x410
[   50.009396][ T5021]  allocate_slab+0x15d/0x410
[   50.009421][ T5021]  ___slab_alloc+0x4d2/0xb50
[   50.009495][ T5021]  ? __rcu_read_unlock+0x4f/0x70
[   50.009525][ T5021]  ? __d_alloc+0x3d/0x340
[   50.009563][ T5021]  __slab_alloc+0x25/0x50
[   50.009650][ T5021]  kmem_cache_alloc_lru_noprof+0x2a0/0x490
[   50.009682][ T5021]  ? __d_alloc+0x3d/0x340
[   50.009766][ T5021]  __d_alloc+0x3d/0x340
[   50.009804][ T5021]  d_alloc_pseudo+0x1e/0x80
[   50.009841][ T5021]  alloc_file_pseudo+0x71/0x160
[   50.009930][ T5021]  anon_inode_getfile+0xa0/0x120
[   50.010006][ T5021]  bpf_link_prime+0xfc/0x1d0
[   50.010052][ T5021]  tcx_link_attach+0xf9/0x5e0
[   50.010078][ T5021]  link_create+0x546/0x6e0
[   50.010105][ T5021]  __sys_bpf+0x628/0x7c0
[   50.010152][ T5021]  __x64_sys_bpf+0x41/0x50
[   50.010216][ T5021]  x64_sys_call+0x2aee/0x3000
[   50.010241][ T5021]  do_syscall_64+0xd2/0x200
[   50.010286][ T5021]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   50.010320][ T5021]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   50.010414][ T5021]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.010440][ T5021] RIP: 0033:0x7f552bf9eec9
[   50.010552][ T5021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.010572][ T5021] RSP: 002b:00007f552a9ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   50.010596][ T5021] RAX: ffffffffffffffda RBX: 00007f552c1f5fa0 RCX: 00007f552bf9eec9
[   50.010672][ T5021] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 000000000000001c
[   50.010687][ T5021] RBP: 00007f552a9ff090 R08: 0000000000000000 R09: 0000000000000000
[   50.010700][ T5021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.010715][ T5021] R13: 00007f552c1f6038 R14: 00007f552c1f5fa0 R15: 00007ffec7498608
[   50.010739][ T5021]  </TASK>
[   50.255961][ T5026] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.320: iget: bad i_size value: 2533274857506816
[   50.288157][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.313137][ T5037] loop3: detected capacity change from 0 to 512
[   50.569388][ T5052] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.614497][ T5052] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.673460][ T5052] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.722679][ T5052] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.776571][   T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.787436][   T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.799008][   T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.810605][ T3850] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.837446][ T5054] loop2: detected capacity change from 0 to 256
[   50.850063][   T29] kauditd_printk_skb: 1120 callbacks suppressed
[   50.850077][   T29] audit: type=1326 audit(1759472604.595:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552bf9eec9 code=0x7ffc0000
[   50.885443][   T29] audit: type=1326 audit(1759472604.626:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f552bf9eec9 code=0x7ffc0000
[   50.908918][   T29] audit: type=1326 audit(1759472604.626:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552bf9eec9 code=0x7ffc0000
[   50.932314][   T29] audit: type=1326 audit(1759472604.626:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f552bf9eec9 code=0x7ffc0000
[   50.955639][   T29] audit: type=1326 audit(1759472604.626:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552bf9eec9 code=0x7ffc0000
[   50.978977][   T29] audit: type=1326 audit(1759472604.626:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f552bf9eec9 code=0x7ffc0000
[   51.002225][   T29] audit: type=1326 audit(1759472604.626:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552bf9eec9 code=0x7ffc0000
[   51.025538][   T29] audit: type=1326 audit(1759472604.626:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f552bf9eec9 code=0x7ffc0000
[   51.048836][   T29] audit: type=1326 audit(1759472604.626:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552bf9eec9 code=0x7ffc0000
[   51.072170][   T29] audit: type=1326 audit(1759472604.626:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f552bf9eec9 code=0x7ffc0000
[   51.163293][ T5070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.335'.
[   51.173354][ T5070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.335'.
[   51.220608][ T5079] loop3: detected capacity change from 0 to 512
[   51.227491][ T5079] EXT4-fs: Ignoring removed bh option
[   51.232971][ T5079] EXT4-fs: Ignoring removed mblk_io_submit option
[   51.240076][ T5079] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   51.240682][ T5081] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[   51.250460][ T5079] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   51.256346][ T5081] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   51.264817][ T5079] EXT4-fs (loop3): orphan cleanup on readonly fs
[   51.271820][ T5081] vhci_hcd vhci_hcd.0: Device attached
[   51.278360][ T5079] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.340: Failed to acquire dquot type 1
[   51.297306][ T5079] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.340: Invalid block bitmap block 0 in block_group 0
[   51.310982][ T5079] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.340: Invalid block bitmap block 0 in block_group 0
[   51.324733][ T5079] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.340: Invalid block bitmap block 0 in block_group 0
[   51.338394][ T5079] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.340: Failed to acquire dquot type 1
[   51.349998][ T5079] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.340: Failed to acquire dquot type 1
[   51.361766][ T5079] EXT4-fs (loop3): 1 orphan inode deleted
[   51.362809][ T5088] netlink: 100 bytes leftover after parsing attributes in process `syz.0.342'.
[   51.371644][ T5079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   51.423977][ T5081] siw: device registration error -23
[   51.430015][ T5082] vhci_hcd: connection closed
[   51.430325][  T782] vhci_hcd: stop threads
[   51.439351][  T782] vhci_hcd: release socket
[   51.443974][  T782] vhci_hcd: disconnect device
[   51.479119][ T3385] vhci_hcd: vhci_device speed not set
[   51.497883][ T5091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'.
[   51.509603][ T5091] gretap0: entered promiscuous mode
[   51.514863][ T5091] macsec1: entered promiscuous mode
[   51.520163][ T5091] macsec1: entered allmulticast mode
[   51.525442][ T5091] gretap0: entered allmulticast mode
[   51.532436][ T5091] gretap0: left allmulticast mode
[   51.537530][ T5091] gretap0: left promiscuous mode
[   51.604952][ T5079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.613460][ T5079] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.624636][ T5096] loop4: detected capacity change from 0 to 256
[   51.881379][ T5103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'.
[   51.956661][ T5105] loop4: detected capacity change from 0 to 512
[   51.963398][ T5105] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   51.974858][ T5105] EXT4-fs (loop4): 1 orphan inode deleted
[   51.980600][ T5105] EXT4-fs (loop4): 1 truncate cleaned up
[   51.986913][ T5105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.028342][ T5114] loop1: detected capacity change from 0 to 512
[   52.031517][ T5118] loop0: detected capacity change from 0 to 512
[   52.040819][ T5105] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.348: iget: bad extra_isize 46 (inode size 256)
[   52.040967][ T5105] EXT4-fs (loop4): Remounting filesystem read-only
[   52.110164][ T5118] EXT4-fs warning (device loop0): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   52.126129][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.145652][ T5079] syz.3.340 (5079) used greatest stack depth: 9072 bytes left
[   52.158206][ T5118] EXT4-fs (loop0): mount failed
[   52.179029][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.238966][ T5129] loop3: detected capacity change from 0 to 256
[   52.284707][ T5134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'.
[   52.391562][ T5150] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[   52.398326][ T5150] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   52.405820][ T5150] vhci_hcd vhci_hcd.0: Device attached
[   52.412766][ T5153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.360'.
[   52.422643][ T5153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.360'.
[   52.471190][ T5150] netlink: 100 bytes leftover after parsing attributes in process `syz.4.364'.
[   52.482803][ T5150] siw: device registration error -23
[   52.497311][ T5151] vhci_hcd: connection closed
[   52.497472][   T31] vhci_hcd: stop threads
[   52.506542][   T31] vhci_hcd: release socket
[   52.511000][   T31] vhci_hcd: disconnect device
[   52.867608][ T5163] siw: device registration error -23
[   53.261049][ T5180] loop2: detected capacity change from 0 to 512
[   53.287412][ T5180] EXT4-fs warning (device loop2): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   53.304196][ T5180] EXT4-fs (loop2): mount failed
[   53.351144][ T5191] loop2: detected capacity change from 0 to 512
[   53.897454][ T5215] netlink: 'syz.4.383': attribute type 29 has an invalid length.
[   54.022488][ T5228] loop1: detected capacity change from 0 to 512
[   54.033828][ T5228] EXT4-fs warning (device loop1): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   54.048891][ T5228] EXT4-fs (loop1): mount failed
[   54.141134][ T5233] loop1: detected capacity change from 0 to 512
[   54.147890][ T5233] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   54.159216][ T5233] EXT4-fs (loop1): 1 orphan inode deleted
[   54.164977][ T5233] EXT4-fs (loop1): 1 truncate cleaned up
[   54.171030][ T5233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.190833][ T5233] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.389: iget: bad extra_isize 46 (inode size 256)
[   54.203610][ T5233] EXT4-fs (loop1): Remounting filesystem read-only
[   54.221624][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.233003][ T5237] FAULT_INJECTION: forcing a failure.
[   54.233003][ T5237] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   54.246204][ T5237] CPU: 1 UID: 0 PID: 5237 Comm: syz.2.391 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   54.246236][ T5237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   54.246248][ T5237] Call Trace:
[   54.246254][ T5237]  <TASK>
[   54.246261][ T5237]  __dump_stack+0x1d/0x30
[   54.246318][ T5237]  dump_stack_lvl+0xe8/0x140
[   54.246359][ T5237]  dump_stack+0x15/0x1b
[   54.246396][ T5237]  should_fail_ex+0x265/0x280
[   54.246520][ T5237]  should_fail+0xb/0x20
[   54.246574][ T5237]  should_fail_usercopy+0x1a/0x20
[   54.246613][ T5237]  _copy_to_iter+0x387/0xe70
[   54.246659][ T5237]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[   54.246705][ T5237]  ? __pfx_simple_copy_to_iter+0x10/0x10
[   54.246820][ T5237]  __skb_datagram_iter+0xc6/0x690
[   54.246858][ T5237]  ? __pfx_simple_copy_to_iter+0x10/0x10
[   54.246943][ T5237]  skb_copy_datagram_iter+0x3d/0x110
[   54.246981][ T5237]  netlink_recvmsg+0x1a8/0x550
[   54.247102][ T5237]  ? __pfx_netlink_recvmsg+0x10/0x10
[   54.247132][ T5237]  sock_recvmsg+0x139/0x170
[   54.247151][ T5237]  ____sys_recvmsg+0xf5/0x280
[   54.247191][ T5237]  ___sys_recvmsg+0x11f/0x370
[   54.247239][ T5237]  do_recvmmsg+0x1ef/0x540
[   54.247289][ T5237]  ? get_timespec64+0xc9/0x100
[   54.247319][ T5237]  __x64_sys_recvmmsg+0xfb/0x170
[   54.247358][ T5237]  x64_sys_call+0x27aa/0x3000
[   54.247392][ T5237]  do_syscall_64+0xd2/0x200
[   54.247416][ T5237]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   54.247449][ T5237]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   54.247490][ T5237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.247553][ T5237] RIP: 0033:0x7f552bf9eec9
[   54.247573][ T5237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   54.247605][ T5237] RSP: 002b:00007f552a9ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   54.247628][ T5237] RAX: ffffffffffffffda RBX: 00007f552c1f5fa0 RCX: 00007f552bf9eec9
[   54.247643][ T5237] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[   54.247659][ T5237] RBP: 00007f552a9ff090 R08: 0000200000003700 R09: 0000000000000000
[   54.247673][ T5237] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001
[   54.247711][ T5237] R13: 00007f552c1f6038 R14: 00007f552c1f5fa0 R15: 00007ffec7498608
[   54.247783][ T5237]  </TASK>
[   54.532635][ T5247] 9pnet_fd: Insufficient options for proto=fd
[   54.620598][ T5258] loop1: detected capacity change from 0 to 512
[   54.627348][ T5258] EXT4-fs: Ignoring removed bh option
[   54.632801][ T5258] EXT4-fs: Ignoring removed mblk_io_submit option
[   54.652194][ T5258] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   54.664410][ T5258] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   54.674012][ T5258] EXT4-fs (loop1): orphan cleanup on readonly fs
[   54.680635][ T5258] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.396: Failed to acquire dquot type 1
[   54.692430][ T5258] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.396: Invalid block bitmap block 0 in block_group 0
[   54.706233][ T5258] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.396: Invalid block bitmap block 0 in block_group 0
[   54.720087][ T5258] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.396: Invalid block bitmap block 0 in block_group 0
[   54.735959][ T5258] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.396: Failed to acquire dquot type 1
[   54.736062][ T5271] loop2: detected capacity change from 0 to 512
[   54.748428][ T5258] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.396: Failed to acquire dquot type 1
[   54.766123][ T5258] EXT4-fs (loop1): 1 orphan inode deleted
[   54.771997][ T5272] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[   54.778582][ T5272] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   54.786145][ T5272] vhci_hcd vhci_hcd.0: Device attached
[   54.793249][ T5258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   54.827491][ T5272] siw: device registration error -23
[   54.833904][ T5273] vhci_hcd: connection closed
[   54.834312][ T4151] vhci_hcd: stop threads
[   54.843377][ T4151] vhci_hcd: release socket
[   54.847819][ T4151] vhci_hcd: disconnect device
[   55.025048][ T5258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.033821][ T5258] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   55.347310][ T5288] loop3: detected capacity change from 0 to 1024
[   55.353986][ T5288] EXT4-fs: Ignoring removed bh option
[   55.359524][ T5288] EXT4-fs: inline encryption not supported
[   55.365743][ T5288] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   55.376558][ T5288] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   55.385835][ T5288] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.405: lblock 2 mapped to illegal pblock 2 (length 1)
[   55.399837][ T5288] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.405: lblock 0 mapped to illegal pblock 48 (length 1)
[   55.414119][ T5288] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.405: Failed to acquire dquot type 0
[   55.425693][ T5288] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   55.435180][ T5288] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.405: mark_inode_dirty error
[   55.446672][ T5288] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   55.457013][ T5288] EXT4-fs (loop3): 1 orphan inode deleted
[   55.463200][ T5288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.477778][  T782] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[   55.492502][  T782] EXT4-fs error (device loop3): ext4_release_dquot:6979: comm kworker/u8:5: Failed to release dquot type 0
[   55.509664][ T5288] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.405: lblock 0 mapped to illegal pblock 48 (length 1)
[   55.565458][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.583196][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.609970][ T5300] veth0: entered promiscuous mode
[   55.614451][ T5302] siw: device registration error -23
[   55.621746][ T5300] __nla_validate_parse: 12 callbacks suppressed
[   55.621763][ T5300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'.
[   55.797488][ T5330] loop1: detected capacity change from 0 to 512
[   55.806007][ T5331] netlink: 44 bytes leftover after parsing attributes in process `syz.4.416'.
[   55.829050][ T5330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.848478][ T5339] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[   55.849149][ T5330] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   55.855001][ T5339] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   55.855082][ T5339] vhci_hcd vhci_hcd.0: Device attached
[   55.905491][ T5346] netlink: 100 bytes leftover after parsing attributes in process `syz.0.417'.
[   55.906155][   T29] kauditd_printk_skb: 480 callbacks suppressed
[   55.906170][   T29] audit: type=1326 audit(1759472609.716:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966b69eec9 code=0x7ffc0000
[   55.920872][ T5330] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm ’: iget: bad i_size value: 2533274857506816
[   55.943381][   T29] audit: type=1326 audit(1759472609.736:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f966b69eec9 code=0x7ffc0000
[   55.943415][   T29] audit: type=1326 audit(1759472609.736:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966b69eec9 code=0x7ffc0000
[   56.000533][   T29] audit: type=1326 audit(1759472609.736:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f966b69eec9 code=0x7ffc0000
[   56.020055][ T5349] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.415: iget: bad i_size value: 2533274857506816
[   56.023366][   T29] audit: type=1326 audit(1759472609.736:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966b69eec9 code=0x7ffc0000
[   56.058404][   T29] audit: type=1326 audit(1759472609.736:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f966b69eec9 code=0x7ffc0000
[   56.058585][ T2951] vhci_hcd: vhci_device speed not set
[   56.081120][   T29] audit: type=1326 audit(1759472609.736:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966b69eec9 code=0x7ffc0000
[   56.109203][   T29] audit: type=1326 audit(1759472609.736:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f966b69eec9 code=0x7ffc0000
[   56.139510][ T5350] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.415: iget: bad i_size value: 2533274857506816
[   56.143049][   T29] audit: type=1326 audit(1759472609.918:5144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966b69eec9 code=0x7ffc0000
[   56.157988][ T5339] siw: device registration error -23
[   56.174873][   T29] audit: type=1326 audit(1759472609.918:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966b69eec9 code=0x7ffc0000
[   56.211259][ T2951] usb 1-1: new full-speed USB device number 3 using vhci_hcd
[   56.239257][ T5340] vhci_hcd: connection reset by peer
[   56.248817][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.261644][  T782] vhci_hcd: stop threads
[   56.262582][ T5356] loop4: detected capacity change from 0 to 512
[   56.265937][  T782] vhci_hcd: release socket
[   56.265951][  T782] vhci_hcd: disconnect device
[   56.296567][ T5362] loop1: detected capacity change from 0 to 512
[   56.303398][ T5362] EXT4-fs: Ignoring removed bh option
[   56.308870][ T5362] EXT4-fs: Ignoring removed mblk_io_submit option
[   56.315883][ T5362] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   56.326876][ T5362] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   56.335125][ T5362] EXT4-fs (loop1): orphan cleanup on readonly fs
[   56.341960][ T5362] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.420: Failed to acquire dquot type 1
[   56.361972][ T5362] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.420: Invalid block bitmap block 0 in block_group 0
[   56.375605][ T5362] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.420: Invalid block bitmap block 0 in block_group 0
[   56.389100][ T5362] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.420: Invalid block bitmap block 0 in block_group 0
[   56.402922][ T5362] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.420: Failed to acquire dquot type 1
[   56.422194][ T5362] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.420: Failed to acquire dquot type 1
[   56.517903][ T5362] EXT4-fs (loop1): 1 orphan inode deleted
[   56.529428][ T5362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   56.550932][ T5397] loop2: detected capacity change from 0 to 1024
[   56.561810][ T5397] EXT4-fs: Ignoring removed bh option
[   56.569247][ T5397] EXT4-fs: inline encryption not supported
[   56.579652][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.583653][ T5397] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   56.600466][ T5397] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   56.615194][ T5404] loop3: detected capacity change from 0 to 1024
[   56.624304][ T5404] EXT4-fs: Ignoring removed bh option
[   56.629717][ T5404] EXT4-fs: inline encryption not supported
[   56.636476][ T5404] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   56.647717][ T5397] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.422: lblock 2 mapped to illegal pblock 2 (length 1)
[   56.661963][ T5397] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.422: lblock 0 mapped to illegal pblock 48 (length 1)
[   56.676465][ T5404] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   56.685985][ T5404] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.425: lblock 2 mapped to illegal pblock 2 (length 1)
[   56.700401][ T5397] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.422: Failed to acquire dquot type 0
[   56.711692][ T5404] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.425: lblock 0 mapped to illegal pblock 48 (length 1)
[   56.745974][ T5397] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   56.755496][ T5404] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.425: Failed to acquire dquot type 0
[   56.782941][ T5397] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.422: mark_inode_dirty error
[   56.804590][ T5414] loop1: detected capacity change from 0 to 512
[   56.811005][ T5397] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   56.821339][ T5404] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   56.823546][ T5397] EXT4-fs (loop2): 1 orphan inode deleted
[   56.831210][ T5404] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.425: mark_inode_dirty error
[   56.848323][ T5397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.850555][ T5416] netlink: 44 bytes leftover after parsing attributes in process `syz.0.428'.
[   56.861848][ T3850] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1)
[   56.872453][ T5404] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   56.884609][ T5414] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   56.902140][ T5414] EXT4-fs (loop1): orphan cleanup on readonly fs
[   56.904031][ T5404] EXT4-fs (loop3): 1 orphan inode deleted
[   56.910679][ T5414] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.427: corrupted inode contents
[   56.914924][ T5404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.926534][ T5414] EXT4-fs (loop1): Remounting filesystem read-only
[   56.939384][ T3850] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:9: Failed to release dquot type 0
[   56.945290][ T5414] EXT4-fs (loop1): 1 truncate cleaned up
[   56.964656][ T3850] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1)
[   56.979053][ T3850] EXT4-fs error (device loop3): ext4_release_dquot:6979: comm kworker/u8:9: Failed to release dquot type 0
[   56.991054][ T3850] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   57.001663][ T3850] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   57.012314][ T3850] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[   57.022946][ T5397] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.422: lblock 0 mapped to illegal pblock 48 (length 1)
[   57.023025][ T5414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   57.037479][ T5404] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   57.060948][ T5414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.069481][ T5414] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.132382][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.166340][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.175988][ T5440] FAULT_INJECTION: forcing a failure.
[   57.175988][ T5440] name failslab, interval 1, probability 0, space 0, times 0
[   57.188798][ T5440] CPU: 1 UID: 0 PID: 5440 Comm: syz.3.431 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   57.188877][ T5440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   57.188892][ T5440] Call Trace:
[   57.188899][ T5440]  <TASK>
[   57.188908][ T5440]  __dump_stack+0x1d/0x30
[   57.188950][ T5440]  dump_stack_lvl+0xe8/0x140
[   57.189060][ T5440]  dump_stack+0x15/0x1b
[   57.189095][ T5440]  should_fail_ex+0x265/0x280
[   57.189208][ T5440]  should_failslab+0x8c/0xb0
[   57.189244][ T5440]  __kmalloc_noprof+0xa5/0x570
[   57.189279][ T5440]  ? security_sk_alloc+0x52/0x120
[   57.189391][ T5440]  ? should_failslab+0x8c/0xb0
[   57.189427][ T5440]  security_sk_alloc+0x52/0x120
[   57.189538][ T5440]  sk_prot_alloc+0xc2/0x190
[   57.189566][ T5440]  sk_alloc+0x34/0x360
[   57.189590][ T5440]  bpf_prog_test_run_skb+0x251/0xbf0
[   57.189618][ T5440]  ? __rcu_read_unlock+0x4f/0x70
[   57.189712][ T5440]  ? __fget_files+0x184/0x1c0
[   57.189749][ T5440]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[   57.189898][ T5440]  bpf_prog_test_run+0x227/0x390
[   57.189927][ T5440]  __sys_bpf+0x4c0/0x7c0
[   57.189977][ T5440]  __x64_sys_bpf+0x41/0x50
[   57.190014][ T5440]  x64_sys_call+0x2aee/0x3000
[   57.190069][ T5440]  do_syscall_64+0xd2/0x200
[   57.190095][ T5440]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   57.190121][ T5440]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   57.190154][ T5440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.190256][ T5440] RIP: 0033:0x7ff170cceec9
[   57.190275][ T5440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   57.190298][ T5440] RSP: 002b:00007ff16f737038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   57.190322][ T5440] RAX: ffffffffffffffda RBX: 00007ff170f25fa0 RCX: 00007ff170cceec9
[   57.190361][ T5440] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[   57.190378][ T5440] RBP: 00007ff16f737090 R08: 0000000000000000 R09: 0000000000000000
[   57.190393][ T5440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   57.190409][ T5440] R13: 00007ff170f26038 R14: 00007ff170f25fa0 R15: 00007ffcb3265988
[   57.190503][ T5440]  </TASK>
[   57.485259][ T5463] netlink: 44 bytes leftover after parsing attributes in process `syz.4.439'.
[   57.512298][ T5469] loop4: detected capacity change from 0 to 512
[   57.715333][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.738064][ T5504] FAULT_INJECTION: forcing a failure.
[   57.738064][ T5504] name failslab, interval 1, probability 0, space 0, times 0
[   57.750818][ T5504] CPU: 1 UID: 0 PID: 5504 Comm: syz.1.443 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   57.750848][ T5504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   57.750922][ T5504] Call Trace:
[   57.750930][ T5504]  <TASK>
[   57.750938][ T5504]  __dump_stack+0x1d/0x30
[   57.750979][ T5504]  dump_stack_lvl+0xe8/0x140
[   57.751017][ T5504]  dump_stack+0x15/0x1b
[   57.751125][ T5504]  should_fail_ex+0x265/0x280
[   57.751157][ T5504]  should_failslab+0x8c/0xb0
[   57.751181][ T5504]  kmem_cache_alloc_noprof+0x50/0x480
[   57.751203][ T5504]  ? skb_clone+0x151/0x1f0
[   57.751367][ T5504]  skb_clone+0x151/0x1f0
[   57.751399][ T5504]  __netlink_deliver_tap+0x2c9/0x500
[   57.751430][ T5504]  netlink_unicast+0x66b/0x690
[   57.751517][ T5504]  netlink_sendmsg+0x58b/0x6b0
[   57.751552][ T5504]  ? __pfx_netlink_sendmsg+0x10/0x10
[   57.751585][ T5504]  __sock_sendmsg+0x142/0x180
[   57.751607][ T5504]  ____sys_sendmsg+0x31e/0x4e0
[   57.751722][ T5504]  ___sys_sendmsg+0x17b/0x1d0
[   57.751763][ T5504]  __x64_sys_sendmsg+0xd4/0x160
[   57.751800][ T5504]  x64_sys_call+0x191e/0x3000
[   57.751864][ T5504]  do_syscall_64+0xd2/0x200
[   57.751884][ T5504]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   57.752003][ T5504]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   57.752107][ T5504]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.752175][ T5504] RIP: 0033:0x7f966b69eec9
[   57.752190][ T5504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   57.752207][ T5504] RSP: 002b:00007f966a107038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   57.752230][ T5504] RAX: ffffffffffffffda RBX: 00007f966b8f5fa0 RCX: 00007f966b69eec9
[   57.752295][ T5504] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[   57.752305][ T5504] RBP: 00007f966a107090 R08: 0000000000000000 R09: 0000000000000000
[   57.752316][ T5504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   57.752326][ T5504] R13: 00007f966b8f6038 R14: 00007f966b8f5fa0 R15: 00007ffea5728ac8
[   57.752347][ T5504]  </TASK>
[   57.752362][ T5504] netlink: 'syz.1.443': attribute type 10 has an invalid length.
[   57.964469][ T5504] netlink: 40 bytes leftover after parsing attributes in process `syz.1.443'.
[   58.010519][ T5504] dummy0: entered promiscuous mode
[   58.023015][ T5504] bridge0: port 3(dummy0) entered blocking state
[   58.029578][ T5504] bridge0: port 3(dummy0) entered disabled state
[   58.055695][ T5504] dummy0: entered allmulticast mode
[   58.061494][ T5504] bridge0: port 3(dummy0) entered blocking state
[   58.067939][ T5504] bridge0: port 3(dummy0) entered forwarding state
[   58.109071][ T5547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.446'.
[   58.123875][ T5547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.446'.
[   58.213232][ T5555] loop1: detected capacity change from 0 to 8192
[   58.265452][ T5561] loop4: detected capacity change from 0 to 512
[   58.284256][ T5561] EXT4-fs warning (device loop4): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   58.299228][ T5561] EXT4-fs (loop4): mount failed
[   58.354146][ T5571] ref_tracker: memory allocation failure, unreliable refcount tracker.
[   58.374349][ T5573] FAULT_INJECTION: forcing a failure.
[   58.374349][ T5573] name failslab, interval 1, probability 0, space 0, times 0
[   58.387039][ T5573] CPU: 1 UID: 0 PID: 5573 Comm: syz.2.456 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   58.387068][ T5573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   58.387141][ T5573] Call Trace:
[   58.387146][ T5573]  <TASK>
[   58.387151][ T5573]  __dump_stack+0x1d/0x30
[   58.387179][ T5573]  dump_stack_lvl+0xe8/0x140
[   58.387204][ T5573]  dump_stack+0x15/0x1b
[   58.387256][ T5573]  should_fail_ex+0x265/0x280
[   58.387315][ T5573]  should_failslab+0x8c/0xb0
[   58.387334][ T5573]  __kvmalloc_node_noprof+0x12e/0x670
[   58.387416][ T5573]  ? file_tty_write+0x1a3/0x690
[   58.387447][ T5573]  file_tty_write+0x1a3/0x690
[   58.387482][ T5573]  ? __pfx_tty_write+0x10/0x10
[   58.387500][ T5573]  tty_write+0x25/0x30
[   58.387517][ T5573]  vfs_write+0x527/0x960
[   58.387582][ T5573]  ksys_write+0xda/0x1a0
[   58.387602][ T5573]  __x64_sys_write+0x40/0x50
[   58.387621][ T5573]  x64_sys_call+0x2802/0x3000
[   58.387709][ T5573]  do_syscall_64+0xd2/0x200
[   58.387727][ T5573]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   58.387826][ T5573]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   58.387854][ T5573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.387872][ T5573] RIP: 0033:0x7f552bf9eec9
[   58.387884][ T5573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.387901][ T5573] RSP: 002b:00007f552a9ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   58.387989][ T5573] RAX: ffffffffffffffda RBX: 00007f552c1f5fa0 RCX: 00007f552bf9eec9
[   58.387999][ T5573] RDX: 000000000000ff2e RSI: 00002000000000c0 RDI: 0000000000000003
[   58.388009][ T5573] RBP: 00007f552a9ff090 R08: 0000000000000000 R09: 0000000000000000
[   58.388019][ T5573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.388095][ T5573] R13: 00007f552c1f6038 R14: 00007f552c1f5fa0 R15: 00007ffec7498608
[   58.388118][ T5573]  </TASK>
[   58.611899][ T5577] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.671277][ T5577] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.710117][ T5577] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.759790][ T5577] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.803793][ T3856] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.814594][ T3856] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.825640][ T3856] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.836240][ T3856] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.881557][ T5586] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[   58.888076][ T5586] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   58.895567][ T5586] vhci_hcd vhci_hcd.0: Device attached
[   58.902909][ T5586] netlink: 100 bytes leftover after parsing attributes in process `syz.3.460'.
[   58.914399][ T5586] siw: device registration error -23
[   58.919371][ T5590] loop4: detected capacity change from 0 to 256
[   58.929327][ T5587] vhci_hcd: connection closed
[   58.929626][ T4149] vhci_hcd: stop threads
[   58.938638][ T4149] vhci_hcd: release socket
[   58.943132][ T4149] vhci_hcd: disconnect device
[   59.032363][ T5600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.464'.
[   59.796361][ T5626] loop0: detected capacity change from 0 to 256
[   59.850279][ T5631] loop0: detected capacity change from 0 to 512
[   59.869411][ T5633] loop4: detected capacity change from 0 to 8192
[   59.878805][ T5631] EXT4-fs warning (device loop0): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   59.902443][ T5631] EXT4-fs (loop0): mount failed
[   59.980467][ T5644] netlink: 'syz.0.479': attribute type 6 has an invalid length.
[   60.602949][ T5664] loop3: detected capacity change from 0 to 256
[   60.826334][ T5677] __nla_validate_parse: 6 callbacks suppressed
[   60.826350][ T5677] netlink: 44 bytes leftover after parsing attributes in process `syz.4.491'.
[   60.861123][   T29] kauditd_printk_skb: 576 callbacks suppressed
[   60.861182][   T29] audit: type=1326 audit(1759472614.725:5699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f552bf95d67 code=0x7ffc0000
[   60.891533][   T29] audit: type=1326 audit(1759472614.725:5700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f552bf3af79 code=0x7ffc0000
[   60.914860][   T29] audit: type=1326 audit(1759472614.725:5701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f552bf9eec9 code=0x7ffc0000
[   60.938163][   T29] audit: type=1326 audit(1759472614.725:5702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f552bf95d67 code=0x7ffc0000
[   60.961518][   T29] audit: type=1326 audit(1759472614.725:5703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f552bf3af79 code=0x7ffc0000
[   60.967429][ T5683] lo speed is unknown, defaulting to 1000
[   60.984796][   T29] audit: type=1326 audit(1759472614.725:5704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f552bf9eec9 code=0x7ffc0000
[   61.013711][   T29] audit: type=1326 audit(1759472614.755:5705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f552bf95d67 code=0x7ffc0000
[   61.036999][   T29] audit: type=1326 audit(1759472614.755:5706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f552bf3af79 code=0x7ffc0000
[   61.060283][   T29] audit: type=1326 audit(1759472614.755:5707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f552bf9eec9 code=0x7ffc0000
[   61.084817][   T29] audit: type=1326 audit(1759472614.786:5708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f552bf95d67 code=0x7ffc0000
[   61.238000][ T5691] loop1: detected capacity change from 0 to 256
[   61.254552][ T5692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.496'.
[   61.263616][ T2951] usb 1-1: enqueue for inactive port 0
[   61.276927][ T5692] netlink: 16 bytes leftover after parsing attributes in process `syz.4.496'.
[   61.279859][ T2951] usb 1-1: enqueue for inactive port 0
[   61.331757][ T5695] loop2: detected capacity change from 0 to 8192
[   61.375142][ T2951] vhci_hcd: vhci_device speed not set
[   61.455928][ T5701] loop0: detected capacity change from 0 to 512
[   61.462796][ T5701] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   61.485477][ T5701] EXT4-fs (loop0): 1 orphan inode deleted
[   61.491212][ T5701] EXT4-fs (loop0): 1 truncate cleaned up
[   61.497318][ T5701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.656264][ T5717] 9pnet_fd: Insufficient options for proto=fd
[   62.143368][ T5731] loop2: detected capacity change from 0 to 256
[   62.186663][ T3297] ==================================================================
[   62.194792][ T3297] BUG: KCSAN: data-race in __wb_update_bandwidth / percpu_counter_add_batch
[   62.203480][ T3297] 
[   62.205812][ T3297] read-write to 0xffff888102418148 of 8 bytes by interrupt on cpu 0:
[   62.213861][ T3297]  percpu_counter_add_batch+0x110/0x130
[   62.219425][ T3297]  __wb_writeout_add+0x42/0x1b0
[   62.224293][ T3297]  __folio_end_writeback+0x1a0/0x410
[   62.229581][ T3297]  folio_end_writeback+0x71/0x3d0
[   62.234656][ T3297]  end_buffer_async_write+0x156/0x1f0
[   62.240030][ T3297]  end_bio_bh_io_sync+0x79/0xa0
[   62.244887][ T3297]  bio_endio+0x37b/0x420
[   62.249136][ T3297]  blk_update_request+0x336/0x730
[   62.254160][ T3297]  blk_mq_end_request+0x26/0x50
[   62.259012][ T3297]  lo_complete_rq+0x98/0x140
[   62.263647][ T3297]  blk_done_softirq+0x77/0xb0
[   62.268317][ T3297]  handle_softirqs+0xb7/0x290
[   62.273079][ T3297]  run_ksoftirqd+0x1c/0x30
[   62.277499][ T3297]  smpboot_thread_fn+0x32b/0x530
[   62.282431][ T3297]  kthread+0x486/0x510
[   62.286503][ T3297]  ret_from_fork+0x11f/0x1b0
[   62.291093][ T3297]  ret_from_fork_asm+0x1a/0x30
[   62.295854][ T3297] 
[   62.298172][ T3297] read to 0xffff888102418148 of 8 bytes by task 3297 on cpu 1:
[   62.305710][ T3297]  __wb_update_bandwidth+0x98/0x5d0
[   62.310902][ T3297]  do_writepages+0x2dd/0x310
[   62.315489][ T3297]  filemap_flush+0xe4/0x120
[   62.320001][ T3297]  sync_blockdev_nowait+0x29/0x40
[   62.325029][ T3297]  sync_filesystem+0xe2/0x190
[   62.329701][ T3297]  generic_shutdown_super+0x44/0x210
[   62.335067][ T3297]  kill_block_super+0x2a/0x70
[   62.339744][ T3297]  ext4_kill_sb+0x42/0x80
[   62.344069][ T3297]  deactivate_locked_super+0x75/0x1c0
[   62.349435][ T3297]  deactivate_super+0x97/0xa0
[   62.354108][ T3297]  cleanup_mnt+0x269/0x2e0
[   62.358529][ T3297]  __cleanup_mnt+0x19/0x20
[   62.362957][ T3297]  task_work_run+0x12e/0x1a0
[   62.367550][ T3297]  exit_to_user_mode_loop+0xed/0x110
[   62.372835][ T3297]  do_syscall_64+0x1d6/0x200
[   62.377423][ T3297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.383319][ T3297] 
[   62.385676][ T3297] value changed: 0x0000000000000030 -> 0x0000000000000040
[   62.392788][ T3297] 
[   62.395104][ T3297] Reported by Kernel Concurrency Sanitizer on:
[   62.401272][ T3297] CPU: 1 UID: 0 PID: 3297 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[   62.411161][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   62.421212][ T3297] ==================================================================
[   62.437345][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.