last executing test programs:

2.289382677s ago: executing program 1 (id=1121):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
mq_notify(0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
socket$caif_seqpacket(0x25, 0x5, 0x5)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r5, 0xfffffffc)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, 0x0, 0x0)
r7 = accept(r4, 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfc, 0x7ffc1ffb}]})
getgroups(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)

1.471021017s ago: executing program 3 (id=1128):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
unshare(0x8000000)
r1 = semget$private(0x0, 0x4000, 0x0)
semctl$GETALL(r1, 0x0, 0xd, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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")
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x800200a0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000300100000102000028"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x6, 0x0, 0x7ffc1ffb}]})
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r6, 0x0)
connect$unix(r5, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept(r6, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x200)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r8, 0x40045402, &(0x7f0000000140)=0x1)
read(r8, 0x0, 0x0)
r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x44000, 0x0)
ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000340)={0x0, 0x0, 0x7})
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0)

1.414763413s ago: executing program 1 (id=1130):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18)
r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xd50}, 0x8500, 0x0, 0x4, 0x7, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu<=0||!')

1.33670913s ago: executing program 1 (id=1133):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
getdents64(r0, 0x0, 0x0)
getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@loopback, @broadcast, @multicast2}, &(0x7f0000000040)=0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x1170, 0x1170, 0x118, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'vcan0\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@hl={{0x28}, {0x3, 0x65}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, [0xff, 0xff000000, 0xffffff00], [0xffffffff], 'rose0\x00', 'bond0\x00', {}, {0xff}, 0x2, 0x2, 0x5, 0x68}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x6, 'snmp_trap\x00', {0x8001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
preadv2(r2, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000100)=""/32, 0x20}, {&(0x7f0000000240)=""/57, 0x39}, {&(0x7f0000000280)=""/235, 0xeb}], 0x4, 0xffff, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18)
socket(0x1e, 0x2, 0x0)
fsync(0xffffffffffffffff)
clock_getres(0x2, &(0x7f0000000080))
socket$kcm(0x29, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xc, 0x101101)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0xffffffff})
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
statfs(&(0x7f00000000c0)='./cgroup/../file0\x00', &(0x7f0000000100)=""/5)

1.23745458s ago: executing program 3 (id=1134):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x40000000)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0)

1.199668654s ago: executing program 2 (id=1137):
r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
dup2(r0, r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="7472616e7305080000000000006f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',version=9p2000.u,\x00'])

1.152964238s ago: executing program 4 (id=1139):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x500, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x4048000)

1.150494068s ago: executing program 2 (id=1140):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x9)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a0)
r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001600)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})

1.145470149s ago: executing program 1 (id=1141):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000692600000000000007002000000000000000000000006e4bc5ba43414bdabef5bd8a9a490e13c9c93c4332104ff9ea4c497feebe4fa97191b86d376dcf232244e476ff31503bf77b9398bca1bc09036d6bf85545f6b4f175e3539c3d75b7067c88024ae33d8c60180f072bfe91980315cf00"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)
recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r4, 0x0, 0x2}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x14008080)
socket$kcm(0x2a, 0x2, 0x0)
getpeername(r2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800)

1.057073027s ago: executing program 4 (id=1142):
r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000001c00), 0x2, 0x0)
write$selinux_access(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB='system_u:object_r:dhcpc_state_t:s0 unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 0'], 0x66)

1.046645358s ago: executing program 2 (id=1143):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18)
r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xd50}, 0x8500, 0x0, 0x4, 0x7, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu<=0||!')

1.03656371s ago: executing program 4 (id=1144):
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x0, 0x0})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
pipe(0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x200002e6)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000, 0x0, 0x1}, 0x20)
r1 = perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x10, 0x3, 0x0)
write(r3, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
gettid()
listen(0xffffffffffffffff, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES16=0x0, @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0x48)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x8, 0x14, 0xe, 0xf3, 0x0, 0x8000000000000001, 0x60003, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0xf4ea818aa2a0fdf0, @perf_config_ext={0x8, 0x8}, 0x10810c, 0x8, 0x650, 0x0, 0x4, 0x8, 0xfff, 0x0, 0x200, 0x0, 0x4}, r5, 0xc, r1, 0x9)
set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r6, 0x0)
r7 = gettid()
process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

947.726248ms ago: executing program 2 (id=1145):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000b40)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x659f}}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@resuid}, {@noacl}, {@errors_remount}]}, 0x11, 0x565, &(0x7f0000000440)="$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")
restart_syscall()
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095", @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r5=>0x0})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r5, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="38000000480011012abd7000fedbdf250a006000", @ANYRES32=0x0, @ANYBLOB="02000000080002000b00000014000100000000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x10)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r10=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000011000500000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000002000007fd3e480c113a03e1bc72c15b51968b437d415fd9a94351614baac826191558827ab40", @ANYRESHEX=r0, @ANYRES16=r0], 0x20}}, 0x60040050)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r11, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r12, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000d80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000c40)={0x104, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x104}}, 0x4000010)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r11, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'})
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x17, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r15}, 0x10)
r16 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb)
r17 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0)
ioctl$LOOP_CONFIGURE(r17, 0x4c0a, &(0x7f0000001600)={r16, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r13, 0x0, 0x2}, 0x18)
ioctl$EXT4_IOC_GET_ES_CACHE(r11, 0xc020662a, &(0x7f0000000380)={0x3fffffffbfb, 0x5, 0x5, 0x7f})

812.740591ms ago: executing program 2 (id=1146):
r0 = getpid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
sendfile(r3, r3, 0x0, 0x1000000201005)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000000abc1c829fa3d1e93848050e42c2457dbdcc5371a7ca466c0dfdae4d0d21e946617f8b19daf701c2a202ae39d031ffa46dcaa92ba736401a5b66e0c12fb9e809bfbae9dd5d0058873affe5f8e55a2fc58a4540eae260132deaee36d2d1233d8aa9667ec772f7953280e5a077c4a17e634f8873124b134799fa67aff9e2826d86903f4b70", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000000))
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
syz_pidfd_open(r0, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000300), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000002200000000000000", @ANYRES32, @ANYBLOB="000000020f"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100006b6c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r8}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r1)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)={0xf98, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0xf50, 0x8, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8001}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x630, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x23c, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0xfffffe01}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x3a4, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @empty, 0x3}}]}, {0xf8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xb4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @empty, 0x6}}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x10000, @mcast2, 0x9}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xd7b5, @local, 0x5}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x420, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ALLOWEDIPS={0x3d4, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xffff7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8001, @remote, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x1c0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x16c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1b04}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a1b0058d35c41d5e0cea0c5d625cc2ba7ab124b3ca208ee5a121724628678f9"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010101}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0xf98}, 0x1, 0x0, 0x0, 0x8}, 0x4000040)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)

498.586452ms ago: executing program 0 (id=1155):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18)
r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xd50}, 0x8500, 0x0, 0x4, 0x7, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu<=0||!')

473.912955ms ago: executing program 2 (id=1156):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000692600000000000007002000000000000000000000006e4bc5ba43414bdabef5bd8a9a490e13c9c93c4332104ff9ea4c497feebe4fa97191b86d376dcf232244e476ff31503bf77b9398bca1bc09036d6bf85545f6b4f175e3539c3d75b7067c88024ae33d8c60180f072bfe91980315cf00"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)
recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r4, 0x0, 0x2}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x14008080)
socket$kcm(0x2a, 0x2, 0x0)
getpeername(r2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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")
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800)

468.976935ms ago: executing program 0 (id=1157):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newnexthop={0x28, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x503, 0x1, 0x703, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

410.376311ms ago: executing program 0 (id=1158):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

345.479127ms ago: executing program 3 (id=1159):
unshare(0x62000000)
r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
acct(&(0x7f00000001c0)='./file0\x00')
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000480)=0x74d, 0x4)
sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r5 = io_uring_setup(0x1020, 0x0)
io_uring_register$IORING_REGISTER_RESIZE_RINGS(r5, 0x21, &(0x7f0000000340)={0x0, 0x2fc3f, 0x10, 0x2, 0x377, 0x0, r5}, 0x1)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000080)=<r7=>0x0)
quotactl_fd$Q_GETINFO(r5, 0xffffffff80000502, r7, &(0x7f0000000140))
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xd76}, 0x18)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', <r9=>0x0})
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x18, r10}, 0x18)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000680))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x80005, 0x0, 0x0, 0x4, 0x4, 0x0, 0x100000, 0x0, 0x43, 0x0, 0x974, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x3, 0x3, 0x6, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x7, 0x2, 0x9, 0xfffffffe, 0x3, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d3, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x8, 0xe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x1, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd, 0x1, 0x1, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x20000041, 0xffffffff, 0x400, 0x0, 0x0, 0xca, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x1ff, 0x23, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r11 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000400)=ANY=[@ANYBLOB="2b63707573657420a685410d381edfeba9b2340497f3d9b2ba6b7a57dad1f3b6a4f42b9f97c5d8a92e3869174270c143287137d6b24393364bdb8e0844f7d90d0338e0bac229409007530fc4ffffc88cd6a638892a"], 0x8)

282.409513ms ago: executing program 1 (id=1160):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=r0, 0xe, 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000480)}, 0x40)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000001000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@struct={0x4, 0x0, 0x0, 0x4, 0x0, 0x1}, @enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x100}, {0x6}]}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x2e]}}, 0x0, 0x49}, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x1}, 0x18)
prctl$PR_GET_TIMERSLACK(0x1e)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="b074458891236a501a52cb964125a636dc768fef8ad8529eb4706af50400a1133fb6f35a7a0bf039ab0716af7efffe44bf24f45ed26e8733457bb0d1d2e409f78b8bb40ec5e2178d"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

252.251646ms ago: executing program 3 (id=1161):
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x804)

182.998273ms ago: executing program 3 (id=1162):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2518"], 0x60}}, 0x4024000)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file2\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES16, @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x6, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000000c0)={'wg1\x00', <r6=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40)

153.835146ms ago: executing program 0 (id=1163):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r3 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000009c0)={r3})

142.775177ms ago: executing program 4 (id=1164):
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x4ba, &(0x7f0000000a40)="$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")
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xba, 0x2, 0x6, 0x0, 0x0, 0x4, 0xfc, 0xfd, 0x0, 0x0, 0xff}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x9}, 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kmem_cache_free\x00', r2, 0x0, 0x1}, 0x18)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa6c3, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
setxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x0, 0x0, 0x2)

106.94682ms ago: executing program 0 (id=1165):
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="7472616e7305080000000000006f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',version=9p2000.u,\x00'])

88.128322ms ago: executing program 0 (id=1166):
r0 = getpid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
sendfile(r3, r3, 0x0, 0x1000000201005)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000000abc1c829fa3d1e93848050e42c2457dbdcc5371a7ca466c0dfdae4d0d21e946617f8b19daf701c2a202ae39d031ffa46dcaa92ba736401a5b66e0c12fb9e809bfbae9dd5d0058873affe5f8e55a2fc58a4540eae260132deaee36d2d1233d8aa9667ec772f7953280e5a077c4a17e634f8873124b134799fa67aff9e2826d86903f4b70", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000000))
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
syz_pidfd_open(r0, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000300), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000002200000000000000", @ANYRES32, @ANYBLOB="000000020f"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100006b6c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r8}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r1)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)={0xf98, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0xf50, 0x8, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8001}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x630, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x23c, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0xfffffe01}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x3a4, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @empty, 0x3}}]}, {0xf8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xb4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @empty, 0x6}}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x10000, @mcast2, 0x9}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xd7b5, @local, 0x5}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x420, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ALLOWEDIPS={0x3d4, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xffff7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8001, @remote, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x1c0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x16c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1b04}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a1b0058d35c41d5e0cea0c5d625cc2ba7ab124b3ca208ee5a121724628678f9"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010101}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0xf98}, 0x1, 0x0, 0x0, 0x8}, 0x4000040)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)

82.663263ms ago: executing program 4 (id=1167):
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)

61.381405ms ago: executing program 1 (id=1168):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000003000000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000fee20b15ac24118aa33cc52ca7844bfe9ecea2b6d1f9bfeba6aef0b00c20c6025ba0"], &(0x7f0000000100)='syzkaller\x00', 0xb1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xa, 0x8, 0xfffffffb}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000440)=[{0x4, 0x1, 0xd, 0x9}, {0x1, 0x5, 0x10, 0xc}, {0x5, 0x3, 0xd, 0x6}, {0x3, 0x2, 0xc, 0xa}, {0x1, 0x4, 0xb, 0x4}, {0x3, 0x2, 0x7, 0xc}, {0x0, 0x2, 0x5, 0x2}], 0x10, 0x6}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='kfree\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000000000000000804dbc1258afbf026fc7c49c3fddc60a7465a67dcf3b0d158c4602b5928b09286995e01b9ab06be66c6597952636c350f008e34de3d4db65ec6e9ef071811c76b9fbbadc27cf42aa71cb4d3fe7096929cfc1013df84ef3fc65fb3303d145b82658ef8de5d12bb578f66ca8f860a8a7a0925d7aadd4a49da976d81b8fcfb46488768f038c9f54ec4d5b7666a0c6111646b71bd5b7cd7e327f6ad338e28f8276dca9639bfd8a85f949e9ec3dd455cfdc06f7b442b45e00bbbde4b765f3ebf9e2"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)=r4}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
ustat(0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r5, 0x0, 0x3ffff)
sendfile(r6, r5, 0x0, 0x7ffff000)

43.412717ms ago: executing program 4 (id=1169):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x40000000)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0)

0s ago: executing program 3 (id=1170):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000692600000000000007002000000000000000000000006e4bc5ba43414bdabef5bd8a9a490e13c9c93c4332104ff9ea4c497feebe4fa97191b86d376dcf232244e476ff31503bf77b9398bca1bc09036d6bf85545f6b4f175e3539c3d75b7067c88024ae33d8c60180f072bfe91980315cf00"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)
recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r4, 0x0, 0x2}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x14008080)
socket$kcm(0x2a, 0x2, 0x0)
getpeername(r2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800)

kernel console output (not intermixed with test programs):

265/0x280
[   90.252701][ T5670]  should_failslab+0x8c/0xb0
[   90.252778][ T5670]  kmem_cache_alloc_noprof+0x50/0x480
[   90.252818][ T5670]  ? fcntl_setlk+0x53/0x950
[   90.252851][ T5670]  fcntl_setlk+0x53/0x950
[   90.252951][ T5670]  ? should_fail_ex+0xdb/0x280
[   90.253005][ T5670]  do_fcntl+0x5dd/0xdf0
[   90.253101][ T5670]  ? selinux_file_fcntl+0x1cb/0x1e0
[   90.253138][ T5670]  __se_sys_fcntl+0xb1/0x120
[   90.253178][ T5670]  __x64_sys_fcntl+0x43/0x50
[   90.253212][ T5670]  x64_sys_call+0x29a4/0x3000
[   90.253254][ T5670]  do_syscall_64+0xd2/0x200
[   90.253301][ T5670]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   90.253401][ T5670]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   90.253515][ T5670]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.253565][ T5670] RIP: 0033:0x7fcdd502efc9
[   90.253585][ T5670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.253610][ T5670] RSP: 002b:00007fcdd3a97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[   90.253695][ T5670] RAX: ffffffffffffffda RBX: 00007fcdd5285fa0 RCX: 00007fcdd502efc9
[   90.253728][ T5670] RDX: 0000200000001140 RSI: 0000000000000007 RDI: 0000000000000003
[   90.253748][ T5670] RBP: 00007fcdd3a97090 R08: 0000000000000000 R09: 0000000000000000
[   90.253765][ T5670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   90.253782][ T5670] R13: 00007fcdd5286038 R14: 00007fcdd5285fa0 R15: 00007fff92455428
[   90.253809][ T5670]  </TASK>
[   90.297367][ T5673] netlink: 20 bytes leftover after parsing attributes in process `syz.0.707'.
[   90.317949][ T5665] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   90.337930][ T5675] loop3: detected capacity change from 0 to 1024
[   90.342650][ T5665] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   90.351945][ T5675] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   90.389397][ T5673] loop0: detected capacity change from 0 to 2048
[   90.394370][ T5675] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   90.406531][ T5673] EXT4-fs: Ignoring removed bh option
[   90.410444][ T5675] JBD2: no valid journal superblock found
[   90.420774][ T5665] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[   90.423276][ T5675] EXT4-fs (loop3): Could not load journal inode
[   90.426401][ T5665] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[   90.684030][ T5665] System zones: 0-2, 18-18, 34-35
[   90.690437][ T5675] bridge_slave_0: left allmulticast mode
[   90.696232][ T5675] bridge_slave_0: left promiscuous mode
[   90.702013][ T5675] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.710327][ T5675] bridge_slave_1: left allmulticast mode
[   90.716055][ T5675] bridge_slave_1: left promiscuous mode
[   90.721771][ T5675] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.730323][ T5665] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   90.730627][ T5675] bond0: (slave bond_slave_0): Releasing backup interface
[   90.750030][ T5675] bond0: (slave bond_slave_1): Releasing backup interface
[   90.781888][ T5675] team0: Port device team_slave_0 removed
[   90.792162][ T5675] team0: Port device team_slave_1 removed
[   90.798965][ T5675] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.821762][ T5675] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.839019][ T5675] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   90.895707][ T5695] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.987234][ T5695] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.044460][ T5695] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.114641][ T5695] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.150443][ T5707] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[   91.163639][ T5707] SELinux: failed to load policy
[   91.200157][   T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.212459][   T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.224433][   T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.238003][   T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.629267][ T5715] hsr0 speed is unknown, defaulting to 1000
[   91.635655][ T5715] lo speed is unknown, defaulting to 1000
[   91.783780][   T29] kauditd_printk_skb: 940 callbacks suppressed
[   91.783798][   T29] audit: type=1326 audit(1761122757.596:9149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.0.732" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa32365efc9 code=0x0
[   91.899295][   T29] audit: type=1326 audit(1761122757.706:9150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[   91.922679][   T29] audit: type=1326 audit(1761122757.706:9151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[   91.949163][   T29] audit: type=1326 audit(1761122757.756:9152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[   91.972720][   T29] audit: type=1326 audit(1761122757.756:9153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[   91.996118][   T29] audit: type=1326 audit(1761122757.756:9154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[   92.020058][   T29] audit: type=1326 audit(1761122757.756:9155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[   92.043422][   T29] audit: type=1326 audit(1761122757.756:9156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[   92.066835][   T29] audit: type=1326 audit(1761122757.756:9157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[   92.090235][   T29] audit: type=1326 audit(1761122757.756:9158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[   92.137839][ T5724] loop4: detected capacity change from 0 to 512
[   92.146303][ T5722] loop3: detected capacity change from 0 to 1024
[   92.153454][ T5722] EXT4-fs: Ignoring removed orlov option
[   92.160179][ T5724] EXT4-fs: Ignoring removed bh option
[   92.170108][ T5724] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   92.179255][ T5724] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   92.189965][ T5724] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[   92.199329][ T5724] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[   92.207425][ T5724] System zones: 0-2, 18-18, 34-35
[   92.214356][ T5724] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   92.245953][ T5728] loop2: detected capacity change from 0 to 1024
[   92.262116][ T5728] EXT4-fs: Ignoring removed orlov option
[   92.269752][ T5733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.728'.
[   92.286790][ T5733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.728'.
[   92.315227][ T5736] loop4: detected capacity change from 0 to 1024
[   92.324641][ T5736] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   92.477393][ T5739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.729'.
[   92.577461][ T5746] random: crng reseeded on system resumption
[   92.645016][ T5748] loop3: detected capacity change from 0 to 512
[   92.657278][ T5748] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   92.668440][ T5748] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 9: comm syz.3.733: lblock 0 mapped to illegal pblock 9 (length 1)
[   92.668685][ T5750] random: crng reseeded on system resumption
[   92.695390][ T5748] EXT4-fs (loop3): mount failed
[   92.722023][ T5755] loop3: detected capacity change from 0 to 512
[   92.728604][ T5755] EXT4-fs: Ignoring removed bh option
[   92.734779][ T5755] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   92.743945][ T5755] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   92.753976][ T5755] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   92.772022][ T5759] netlink: 20 bytes leftover after parsing attributes in process `syz.2.737'.
[   92.790183][ T5755] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[   92.803927][ T5755] System zones: 0-2, 18-18, 34-35
[   92.821555][ T5759] loop2: detected capacity change from 0 to 2048
[   92.828268][ T5759] EXT4-fs: Ignoring removed bh option
[   92.839049][ T5760] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[   92.852397][ T5760] SELinux: failed to load policy
[   92.868340][ T5755] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   92.878030][ T5755] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.736: path /133/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0
[   92.926507][ T5767] loop2: detected capacity change from 0 to 512
[   92.933244][ T5767] EXT4-fs: Ignoring removed bh option
[   92.939584][ T5767] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   92.948770][ T5767] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   92.958050][ T5767] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[   92.969077][ T5767] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[   92.977147][ T5767] System zones: 0-2, 18-18, 34-35
[   92.985266][ T5767] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   92.995272][ T5770] loop3: detected capacity change from 0 to 1024
[   93.003163][ T5770] EXT4-fs: inline encryption not supported
[   93.009028][ T5770] EXT4-fs: Ignoring removed i_version option
[   93.015624][ T5770] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   93.028073][ T5770] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.740: lblock 2 mapped to illegal pblock 2 (length 1)
[   93.042198][ T5770] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.740: lblock 0 mapped to illegal pblock 48 (length 1)
[   93.064647][ T5770] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.740: Failed to acquire dquot type 0
[   93.077235][ T5770] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem
[   93.087017][ T5770] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.740: mark_inode_dirty error
[   93.111551][ T5770] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   93.122200][ T5770] EXT4-fs (loop3): 1 orphan inode deleted
[   93.128645][ T1623] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[   93.144570][ T5777] netlink: 'syz.0.743': attribute type 10 has an invalid length.
[   93.158764][ T1623] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0
[   93.189381][ T5770] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.740: Invalid inode table block 1 in block_group 0
[   93.197145][ T5781] hsr0 speed is unknown, defaulting to 1000
[   93.202569][ T5770] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem
[   93.210115][ T5781] lo speed is unknown, defaulting to 1000
[   93.224262][ T5770] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz.3.740: mark_inode_dirty error
[   93.257094][ T5786] loop1: detected capacity change from 0 to 128
[   93.321875][ T5793] loop1: detected capacity change from 0 to 512
[   93.328627][ T5793] EXT4-fs: Ignoring removed bh option
[   93.334555][ T5793] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   93.343705][ T5793] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   93.371208][ T5793] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[   93.380789][ T5793] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[   93.388967][ T5793] System zones: 0-2, 18-18, 34-35
[   93.401529][ T5793] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   93.410891][ T5793] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.750: path /141/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0
[   93.495448][ T5800] loop1: detected capacity change from 0 to 512
[   93.521730][ T5800] EXT4-fs: Ignoring removed bh option
[   93.527620][ T5800] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   93.536729][ T5800] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   93.551819][ T5800] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[   93.575298][ T5800] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[   93.589254][ T5800] System zones: 0-2, 18-18, 34-35
[   93.599545][ T5800] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   93.831701][ T5815] loop1: detected capacity change from 0 to 1024
[   93.838615][ T5815] EXT4-fs: Ignoring removed orlov option
[   93.884481][ T5818] hsr0 speed is unknown, defaulting to 1000
[   93.891038][ T5818] lo speed is unknown, defaulting to 1000
[   93.982327][ T5823] hsr0 speed is unknown, defaulting to 1000
[   94.000093][ T5823] lo speed is unknown, defaulting to 1000
[   94.298539][ T5837] loop1: detected capacity change from 0 to 1024
[   94.305841][ T5837] EXT4-fs: Ignoring removed orlov option
[   94.400060][ T5843] __nla_validate_parse: 1 callbacks suppressed
[   94.400078][ T5843] netlink: 44 bytes leftover after parsing attributes in process `syz.0.766'.
[   94.560936][ T5847] loop0: detected capacity change from 0 to 512
[   94.579567][ T5840] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[   94.639367][ T5847] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.767: error while reading EA inode 32 err=-116
[   94.669679][ T5847] EXT4-fs (loop0): Remounting filesystem read-only
[   94.676911][ T5840] SELinux: failed to load policy
[   94.694238][ T5847] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[   94.724771][ T5847] EXT4-fs (loop0): 1 orphan inode deleted
[   94.764027][ T5847] FAULT_INJECTION: forcing a failure.
[   94.764027][ T5847] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   94.777180][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz.0.767 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   94.777283][ T5847] Tainted: [W]=WARN
[   94.777289][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   94.777301][ T5847] Call Trace:
[   94.777310][ T5847]  <TASK>
[   94.777320][ T5847]  __dump_stack+0x1d/0x30
[   94.777399][ T5847]  dump_stack_lvl+0xe8/0x140
[   94.777436][ T5847]  dump_stack+0x15/0x1b
[   94.777469][ T5847]  should_fail_ex+0x265/0x280
[   94.777508][ T5847]  should_fail+0xb/0x20
[   94.777618][ T5847]  should_fail_usercopy+0x1a/0x20
[   94.777651][ T5847]  strncpy_from_user+0x25/0x230
[   94.777737][ T5847]  ? kmem_cache_alloc_noprof+0x242/0x480
[   94.777787][ T5847]  ? getname_flags+0x80/0x3b0
[   94.777819][ T5847]  getname_flags+0xae/0x3b0
[   94.777879][ T5847]  __x64_sys_renameat2+0x6c/0x90
[   94.777907][ T5847]  x64_sys_call+0x3f9/0x3000
[   94.777946][ T5847]  do_syscall_64+0xd2/0x200
[   94.777998][ T5847]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   94.778025][ T5847]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   94.778092][ T5847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.778130][ T5847] RIP: 0033:0x7fa32365efc9
[   94.778178][ T5847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.778202][ T5847] RSP: 002b:00007fa3220bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[   94.778325][ T5847] RAX: ffffffffffffffda RBX: 00007fa3238b5fa0 RCX: 00007fa32365efc9
[   94.778341][ T5847] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000004
[   94.778357][ T5847] RBP: 00007fa3220bf090 R08: 0000000000000004 R09: 0000000000000000
[   94.778380][ T5847] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[   94.778392][ T5847] R13: 00007fa3238b6038 R14: 00007fa3238b5fa0 R15: 00007ffca9255ce8
[   94.778475][ T5847]  </TASK>
[   95.107478][ T5857] netlink: 20 bytes leftover after parsing attributes in process `syz.2.771'.
[   95.201555][ T5864] loop0: detected capacity change from 0 to 128
[   95.266948][ T5870] hsr0 speed is unknown, defaulting to 1000
[   95.283498][ T5870] lo speed is unknown, defaulting to 1000
[   95.416980][ T5875] netlink: 24 bytes leftover after parsing attributes in process `syz.0.777'.
[   95.426301][ T5875] netlink: 24 bytes leftover after parsing attributes in process `syz.0.777'.
[   95.447212][ T5875] 9pnet_fd: Insufficient options for proto=fd
[   95.781159][ T5888] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[   95.791893][ T5888] SELinux: failed to load policy
[   95.944242][ T5890] loop1: detected capacity change from 0 to 1024
[   95.951241][ T5890] EXT4-fs: Ignoring removed orlov option
[   96.113544][ T5897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.784'.
[   96.170670][ T5899] hsr0 speed is unknown, defaulting to 1000
[   96.177436][ T5899] lo speed is unknown, defaulting to 1000
[   96.240791][ T5903] loop2: detected capacity change from 0 to 1024
[   96.248415][ T5903] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   96.275020][ T5903] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.787: Invalid block bitmap block 0 in block_group 0
[   96.298818][ T5903] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.787: Failed to acquire dquot type 0
[   96.310919][ T5903] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.787: Freeing blocks not in datazone - block = 0, count = 4096
[   96.325792][ T5903] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.787: Invalid inode bitmap blk 0 in block_group 0
[   96.338684][   T31] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0
[   96.338894][ T5903] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[   96.358892][ T5903] EXT4-fs (loop2): 1 orphan inode deleted
[   96.369318][ T5907] netlink: 348 bytes leftover after parsing attributes in process `syz.1.788'.
[   96.378423][ T5907] netlink: 348 bytes leftover after parsing attributes in process `syz.1.788'.
[   96.430913][ T5909] FAULT_INJECTION: forcing a failure.
[   96.430913][ T5909] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   96.444097][ T5909] CPU: 0 UID: 0 PID: 5909 Comm: syz.1.789 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   96.444176][ T5909] Tainted: [W]=WARN
[   96.444185][ T5909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   96.444201][ T5909] Call Trace:
[   96.444207][ T5909]  <TASK>
[   96.444215][ T5909]  __dump_stack+0x1d/0x30
[   96.444248][ T5909]  dump_stack_lvl+0xe8/0x140
[   96.444337][ T5909]  dump_stack+0x15/0x1b
[   96.444372][ T5909]  should_fail_ex+0x265/0x280
[   96.444411][ T5909]  should_fail+0xb/0x20
[   96.444490][ T5909]  should_fail_usercopy+0x1a/0x20
[   96.444523][ T5909]  _copy_from_user+0x1c/0xb0
[   96.444550][ T5909]  ___sys_sendmsg+0xc1/0x1d0
[   96.444642][ T5909]  __x64_sys_sendmsg+0xd4/0x160
[   96.444731][ T5909]  x64_sys_call+0x191e/0x3000
[   96.444770][ T5909]  do_syscall_64+0xd2/0x200
[   96.444808][ T5909]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   96.444835][ T5909]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   96.444897][ T5909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.445038][ T5909] RIP: 0033:0x7f38ee84efc9
[   96.445057][ T5909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   96.445074][ T5909] RSP: 002b:00007f38ed2b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   96.445097][ T5909] RAX: ffffffffffffffda RBX: 00007f38eeaa5fa0 RCX: 00007f38ee84efc9
[   96.445113][ T5909] RDX: 0000000020000000 RSI: 0000200000000280 RDI: 0000000000000006
[   96.445135][ T5909] RBP: 00007f38ed2b7090 R08: 0000000000000000 R09: 0000000000000000
[   96.445150][ T5909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   96.445166][ T5909] R13: 00007f38eeaa6038 R14: 00007f38eeaa5fa0 R15: 00007fff31f942a8
[   96.445190][ T5909]  </TASK>
[   96.725966][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.790'.
[   96.864756][ T5920] hsr0 speed is unknown, defaulting to 1000
[   96.871829][ T5920] lo speed is unknown, defaulting to 1000
[   96.913987][ T5922] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.986400][ T5922] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.044386][ T5925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.795'.
[   97.046139][ T5922] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.081840][ T5903] syz.2.787 (5903) used greatest stack depth: 9504 bytes left
[   97.110768][ T5922] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.130822][   T29] kauditd_printk_skb: 1445 callbacks suppressed
[   97.130859][   T29] audit: type=1326 audit(1761122762.936:10598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5926 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[   97.160710][   T29] audit: type=1326 audit(1761122762.936:10599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5926 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[   97.184532][   T29] audit: type=1326 audit(1761122762.936:10600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5926 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[   97.208194][   T29] audit: type=1326 audit(1761122762.936:10601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5926 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[   97.231974][   T29] audit: type=1326 audit(1761122762.936:10602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5926 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[   97.232510][ T5929] loop3: detected capacity change from 0 to 1024
[   97.255583][   T29] audit: type=1326 audit(1761122762.936:10603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5926 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[   97.263063][ T5929] EXT4-fs: Ignoring removed orlov option
[   97.285378][   T29] audit: type=1326 audit(1761122762.936:10604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5926 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[   97.285415][   T29] audit: type=1326 audit(1761122762.936:10605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5926 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[   97.338102][   T29] audit: type=1326 audit(1761122762.936:10606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5926 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[   97.361640][   T29] audit: type=1326 audit(1761122762.936:10607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5926 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[   97.467138][   T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.503390][ T2879] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.511947][ T2879] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.520433][ T2879] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.674145][ T5939] FAULT_INJECTION: forcing a failure.
[   97.674145][ T5939] name failslab, interval 1, probability 0, space 0, times 0
[   97.687005][ T5939] CPU: 0 UID: 0 PID: 5939 Comm: syz.2.798 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   97.687072][ T5939] Tainted: [W]=WARN
[   97.687080][ T5939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   97.687096][ T5939] Call Trace:
[   97.687105][ T5939]  <TASK>
[   97.687114][ T5939]  __dump_stack+0x1d/0x30
[   97.687147][ T5939]  dump_stack_lvl+0xe8/0x140
[   97.687228][ T5939]  dump_stack+0x15/0x1b
[   97.687314][ T5939]  should_fail_ex+0x265/0x280
[   97.687352][ T5939]  should_failslab+0x8c/0xb0
[   97.687379][ T5939]  __kmalloc_node_track_caller_noprof+0xa5/0x580
[   97.687412][ T5939]  ? key_alloc+0x2b8/0x9a0
[   97.687460][ T5939]  kmemdup_noprof+0x2b/0x70
[   97.687486][ T5939]  key_alloc+0x2b8/0x9a0
[   97.687527][ T5939]  keyring_alloc+0x45/0xb0
[   97.687567][ T5939]  lookup_user_key+0x2ea/0xd10
[   97.687605][ T5939]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[   97.687651][ T5939]  __se_sys_add_key+0x268/0x350
[   97.687682][ T5939]  __x64_sys_add_key+0x67/0x80
[   97.687785][ T5939]  x64_sys_call+0x28c8/0x3000
[   97.687847][ T5939]  do_syscall_64+0xd2/0x200
[   97.687879][ T5939]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   97.687906][ T5939]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   97.687935][ T5939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.687981][ T5939] RIP: 0033:0x7fda16e2efc9
[   97.687999][ T5939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.688097][ T5939] RSP: 002b:00007fda1584d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   97.688121][ T5939] RAX: ffffffffffffffda RBX: 00007fda17086180 RCX: 00007fda16e2efc9
[   97.688137][ T5939] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000280
[   97.688153][ T5939] RBP: 00007fda1584d090 R08: ffffffffffffffff R09: 0000000000000000
[   97.688168][ T5939] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001
[   97.688184][ T5939] R13: 00007fda17086218 R14: 00007fda17086180 R15: 00007ffdda407158
[   97.688271][ T5939]  </TASK>
[   97.688595][ T5939] IPVS: length: 111 != 24
[   98.061270][ T5938] hsr0 speed is unknown, defaulting to 1000
[   98.072485][ T5938] lo speed is unknown, defaulting to 1000
[   98.134614][ T5947] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[   98.175731][ T5947] SELinux: failed to load policy
[   98.398979][ T5956] hsr0 speed is unknown, defaulting to 1000
[   98.405631][ T5956] lo speed is unknown, defaulting to 1000
[   98.421335][ T5958] loop4: detected capacity change from 0 to 512
[   98.436584][ T5958] EXT4-fs: Ignoring removed bh option
[   98.447065][ T5958] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   98.456227][ T5958] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   98.474543][ T5958] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[   98.485764][ T5958] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[   98.503626][ T5958] System zones: 0-2, 18-18, 34-35
[   98.512379][ T5962] netlink: 348 bytes leftover after parsing attributes in process `syz.2.808'.
[   98.548239][ T5966] loop2: detected capacity change from 0 to 512
[   98.554832][ T5958] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   98.554959][ T5966] EXT4-fs: Ignoring removed bh option
[   98.569425][ T5966] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   98.578680][ T5966] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   98.590313][ T5966] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[   98.599908][ T5966] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[   98.608151][ T5966] System zones: 0-2, 18-18, 34-35
[   98.629453][ T5966] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   98.642915][ T5973] loop4: detected capacity change from 0 to 512
[   98.649713][ T5973] EXT4-fs: Ignoring removed bh option
[   98.656106][ T5973] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   98.665294][ T5973] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   98.676166][ T5973] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[   98.685661][ T5973] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[   98.693832][ T5973] System zones: 0-2, 18-18, 34-35
[   98.706327][ T5973] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   98.755299][ T5973] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.813: path /159/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0
[   98.800247][ T5984] FAULT_INJECTION: forcing a failure.
[   98.800247][ T5984] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   98.813587][ T5984] CPU: 1 UID: 0 PID: 5984 Comm: syz.4.817 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   98.813622][ T5984] Tainted: [W]=WARN
[   98.813629][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   98.813642][ T5984] Call Trace:
[   98.813650][ T5984]  <TASK>
[   98.813657][ T5984]  __dump_stack+0x1d/0x30
[   98.813745][ T5984]  dump_stack_lvl+0xe8/0x140
[   98.813804][ T5984]  dump_stack+0x15/0x1b
[   98.813830][ T5984]  should_fail_ex+0x265/0x280
[   98.813861][ T5984]  should_fail_alloc_page+0xf2/0x100
[   98.813922][ T5984]  __alloc_frozen_pages_noprof+0xff/0x360
[   98.813954][ T5984]  alloc_pages_mpol+0xb3/0x260
[   98.813984][ T5984]  alloc_pages_noprof+0x90/0x130
[   98.814014][ T5984]  pte_alloc_one+0x1e/0xd0
[   98.814075][ T5984]  __pte_alloc+0x32/0x290
[   98.814100][ T5984]  handle_mm_fault+0x1c18/0x2be0
[   98.814134][ T5984]  ? vma_start_read+0x141/0x1f0
[   98.814213][ T5984]  do_user_addr_fault+0x630/0x1080
[   98.814242][ T5984]  ? __x64_sys_openat+0xf2/0x120
[   98.814326][ T5984]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   98.814439][ T5984]  exc_page_fault+0x62/0xa0
[   98.814464][ T5984]  asm_exc_page_fault+0x26/0x30
[   98.814484][ T5984] RIP: 0033:0x7fcd613f0580
[   98.814499][ T5984] Code: d1 12 00 89 c3 85 c0 0f 88 f5 07 00 00 83 f8 1d 0f 8f 4d 09 00 00 48 8d 3d ed ec 18 00 31 c0 e8 c6 dc fe ff 41 ba 01 00 00 00 <f0> 44 0f c1 15 77 fd 4a 00 41 83 fa 05 7f 06 49 83 fd 1a 77 1b 48
[   98.814517][ T5984] RSP: 002b:00007fcd5ff84f70 EFLAGS: 00010206
[   98.814569][ T5984] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000
[   98.814581][ T5984] RDX: 0000000000000000 RSI: 00007fcd615a1c6c RDI: 00007fcd6157f260
[   98.814593][ T5984] RBP: 00007fcd5ff87090 R08: 0000000000000000 R09: 0000000000000000
[   98.814605][ T5984] R10: 0000000000000001 R11: 0000000000000293 R12: 0000000000000003
[   98.814617][ T5984] R13: 000000000000005a R14: 0000200000000300 R15: 00007ffe186de9d8
[   98.814635][ T5984]  </TASK>
[   98.814659][ T5984] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   99.011622][ T5984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.020189][ T5984] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.039707][ T5986] loop1: detected capacity change from 0 to 1024
[   99.046689][ T5987] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.077451][ T5986] EXT4-fs: Ignoring removed orlov option
[   99.147025][ T5987] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.248457][ T5987] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.305038][ T5987] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.505434][ T5998] loop2: detected capacity change from 0 to 512
[   99.534933][ T6002] FAULT_INJECTION: forcing a failure.
[   99.534933][ T6002] name failslab, interval 1, probability 0, space 0, times 0
[   99.547892][ T6002] CPU: 1 UID: 0 PID: 6002 Comm: syz.1.823 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   99.547932][ T6002] Tainted: [W]=WARN
[   99.547976][ T6002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   99.547992][ T6002] Call Trace:
[   99.547999][ T6002]  <TASK>
[   99.548008][ T6002]  __dump_stack+0x1d/0x30
[   99.548046][ T6002]  dump_stack_lvl+0xe8/0x140
[   99.548081][ T6002]  dump_stack+0x15/0x1b
[   99.548162][ T6002]  should_fail_ex+0x265/0x280
[   99.548194][ T6002]  ? qdisc_get_rtab+0x1a5/0x2d0
[   99.548227][ T6002]  should_failslab+0x8c/0xb0
[   99.548249][ T6002]  __kmalloc_cache_noprof+0x4c/0x4a0
[   99.548292][ T6002]  qdisc_get_rtab+0x1a5/0x2d0
[   99.548326][ T6002]  tbf_change+0x125/0xcd0
[   99.548382][ T6002]  ? stack_trace_save+0x5e/0x90
[   99.548485][ T6002]  ? __list_add_valid_or_report+0x38/0xe0
[   99.548583][ T6002]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[   99.548607][ T6002]  ? rtnetlink_rcv+0x1c/0x30
[   99.548639][ T6002]  ? netlink_unicast+0x5c0/0x690
[   99.548664][ T6002]  ? netlink_sendmsg+0x58b/0x6b0
[   99.548749][ T6002]  ? __sock_sendmsg+0x145/0x180
[   99.548773][ T6002]  ? read_tsc+0x9/0x20
[   99.548854][ T6002]  ? __pfx_tbf_init+0x10/0x10
[   99.548878][ T6002]  tbf_init+0x72/0x90
[   99.548906][ T6002]  qdisc_create+0x591/0x9e0
[   99.548933][ T6002]  tc_modify_qdisc+0xf2e/0x1420
[   99.549037][ T6002]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   99.549062][ T6002]  rtnetlink_rcv_msg+0x65a/0x6d0
[   99.549110][ T6002]  netlink_rcv_skb+0x123/0x220
[   99.549177][ T6002]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   99.549218][ T6002]  rtnetlink_rcv+0x1c/0x30
[   99.549251][ T6002]  netlink_unicast+0x5c0/0x690
[   99.549359][ T6002]  netlink_sendmsg+0x58b/0x6b0
[   99.549442][ T6002]  ? __pfx_netlink_sendmsg+0x10/0x10
[   99.549477][ T6002]  __sock_sendmsg+0x145/0x180
[   99.549573][ T6002]  ____sys_sendmsg+0x31e/0x4e0
[   99.549610][ T6002]  ___sys_sendmsg+0x17b/0x1d0
[   99.549663][ T6002]  __x64_sys_sendmsg+0xd4/0x160
[   99.549754][ T6002]  x64_sys_call+0x191e/0x3000
[   99.549785][ T6002]  do_syscall_64+0xd2/0x200
[   99.549857][ T6002]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   99.549882][ T6002]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   99.549915][ T6002]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.549941][ T6002] RIP: 0033:0x7f38ee84efc9
[   99.549959][ T6002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.550050][ T6002] RSP: 002b:00007f38ed2b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   99.550072][ T6002] RAX: ffffffffffffffda RBX: 00007f38eeaa5fa0 RCX: 00007f38ee84efc9
[   99.550093][ T6002] RDX: 00000000000000c0 RSI: 0000200000001200 RDI: 0000000000000004
[   99.550109][ T6002] RBP: 00007f38ed2b7090 R08: 0000000000000000 R09: 0000000000000000
[   99.550124][ T6002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   99.550139][ T6002] R13: 00007f38eeaa6038 R14: 00007f38eeaa5fa0 R15: 00007fff31f942a8
[   99.550199][ T6002]  </TASK>
[   99.550211][ T6002] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) !
[   99.601105][ T5998] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.886126][ T6016] loop1: detected capacity change from 0 to 512
[   99.892692][ T6016] EXT4-fs: Ignoring removed bh option
[   99.898852][ T6016] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   99.908095][ T6016] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   99.917166][ T6016] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[   99.926560][ T6016] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[   99.934998][ T6016] System zones: 0-2, 18-18, 34-35
[   99.941886][ T6016] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   99.951340][ T6016] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.828: path /160/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0
[   99.992816][ T6020] __nla_validate_parse: 1 callbacks suppressed
[   99.992833][ T6020] netlink: 40 bytes leftover after parsing attributes in process `syz.4.829'.
[  100.029308][ T6023] loop4: detected capacity change from 0 to 1024
[  100.045050][ T6023] ext4 filesystem being mounted at /syzcgroup/unified/syz4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.093072][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  100.094052][ T6023] vhci_hcd: invalid port number 96
[  100.104428][ T6023] vhci_hcd: default hub control req: 2000 vfffc i0060 l7
[  100.243320][ T6030] FAULT_INJECTION: forcing a failure.
[  100.243320][ T6030] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  100.256584][ T6030] CPU: 0 UID: 0 PID: 6030 Comm: syz.3.832 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  100.256620][ T6030] Tainted: [W]=WARN
[  100.256627][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  100.256640][ T6030] Call Trace:
[  100.256645][ T6030]  <TASK>
[  100.256653][ T6030]  __dump_stack+0x1d/0x30
[  100.256717][ T6030]  dump_stack_lvl+0xe8/0x140
[  100.256753][ T6030]  dump_stack+0x15/0x1b
[  100.256779][ T6030]  should_fail_ex+0x265/0x280
[  100.256811][ T6030]  should_fail+0xb/0x20
[  100.256887][ T6030]  should_fail_usercopy+0x1a/0x20
[  100.256920][ T6030]  _copy_from_user+0x1c/0xb0
[  100.256942][ T6030]  ___sys_recvmsg+0xaa/0x370
[  100.257055][ T6030]  do_recvmmsg+0x1ef/0x540
[  100.257092][ T6030]  ? fput+0x8f/0xc0
[  100.257126][ T6030]  __x64_sys_recvmmsg+0xe5/0x170
[  100.257160][ T6030]  x64_sys_call+0x27aa/0x3000
[  100.257191][ T6030]  do_syscall_64+0xd2/0x200
[  100.257234][ T6030]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  100.257256][ T6030]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  100.257284][ T6030]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.257373][ T6030] RIP: 0033:0x7fcdd502efc9
[  100.257388][ T6030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.257407][ T6030] RSP: 002b:00007fcdd3a97038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  100.257426][ T6030] RAX: ffffffffffffffda RBX: 00007fcdd5285fa0 RCX: 00007fcdd502efc9
[  100.257512][ T6030] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[  100.257524][ T6030] RBP: 00007fcdd3a97090 R08: 0000000000000000 R09: 0000000000000000
[  100.257536][ T6030] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[  100.257548][ T6030] R13: 00007fcdd5286038 R14: 00007fcdd5285fa0 R15: 00007fff92455428
[  100.257566][ T6030]  </TASK>
[  100.490174][ T6038] xt_CT: You must specify a L4 protocol and not use inversions on it
[  100.574057][ T6046] loop3: detected capacity change from 0 to 128
[  100.608114][ T6046] bio_check_eod: 37 callbacks suppressed
[  100.608166][ T6046] syz.3.837: attempt to access beyond end of device
[  100.608166][ T6046] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128
[  100.627988][ T6046] syz.3.837: attempt to access beyond end of device
[  100.627988][ T6046] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128
[  100.641385][ T6046] buffer_io_error: 22 callbacks suppressed
[  100.641399][ T6046] Buffer I/O error on dev loop3, logical block 79, lost async page write
[  100.655795][ T6046] syz.3.837: attempt to access beyond end of device
[  100.655795][ T6046] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128
[  100.669125][ T6046] Buffer I/O error on dev loop3, logical block 80, lost async page write
[  100.690991][ T6051] syz.3.837: attempt to access beyond end of device
[  100.690991][ T6051] loop3: rw=2049, sector=154, nr_sectors = 2 limit=128
[  100.704555][ T6051] Buffer I/O error on dev loop3, logical block 77, lost async page write
[  100.713073][ T6051] syz.3.837: attempt to access beyond end of device
[  100.713073][ T6051] loop3: rw=2049, sector=156, nr_sectors = 2 limit=128
[  100.726494][ T6051] Buffer I/O error on dev loop3, logical block 78, lost async page write
[  100.734982][ T6051] syz.3.837: attempt to access beyond end of device
[  100.734982][ T6051] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128
[  100.748373][ T6051] Buffer I/O error on dev loop3, logical block 79, lost async page write
[  100.756883][ T6051] syz.3.837: attempt to access beyond end of device
[  100.756883][ T6051] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128
[  100.770331][ T6051] Buffer I/O error on dev loop3, logical block 80, lost async page write
[  100.830917][ T6054] loop2: detected capacity change from 0 to 512
[  100.837542][ T6054] EXT4-fs: Ignoring removed bh option
[  100.843502][ T6054] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  100.852604][ T6054] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  100.861486][ T6054] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  100.870998][ T6054] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[  100.879062][ T6054] System zones: 0-2, 18-18, 34-35
[  100.889431][ T6054] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  100.892192][ T6057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.841'.
[  100.909610][ T6054] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.840: path /193/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0
[  100.944123][ T6059] loop1: detected capacity change from 0 to 512
[  100.951339][ T6059] EXT4-fs (loop1): blocks per group (256) and clusters per group (16384) inconsistent
[  100.963743][ T6059] netlink: 'syz.1.842': attribute type 11 has an invalid length.
[  100.971487][ T6059] netlink: 44 bytes leftover after parsing attributes in process `syz.1.842'.
[  100.984989][ T6061] xt_CT: You must specify a L4 protocol and not use inversions on it
[  100.991315][ T6063] loop3: detected capacity change from 0 to 512
[  101.001494][ T6063] EXT4-fs: Ignoring removed bh option
[  101.019847][ T6063] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  101.029064][ T6063] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  101.041080][ T6065] hsr0 speed is unknown, defaulting to 1000
[  101.049302][ T6065] lo speed is unknown, defaulting to 1000
[  101.049427][ T6063] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  101.064834][ T6063] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[  101.072865][ T6063] System zones: 0-2, 18-18, 34-35
[  101.098398][ T6063] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  101.140551][ T6070] hsr0 speed is unknown, defaulting to 1000
[  101.147211][ T6070] lo speed is unknown, defaulting to 1000
[  101.361271][ T6067] loop1: detected capacity change from 0 to 32768
[  101.404723][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.849'.
[  101.501575][ T6083] loop1: detected capacity change from 0 to 8192
[  101.509321][ T6083] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  101.554933][ T6088] loop1: detected capacity change from 0 to 1024
[  101.561936][ T6088] EXT4-fs: Ignoring removed orlov option
[  101.567754][ T6088] EXT4-fs: Ignoring removed nomblk_io_submit option
[  101.594467][ T6088] EXT4-fs mount: 98 callbacks suppressed
[  101.594483][ T6088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.620706][ T6088] ext4: Unknown parameter 'ext4'
[  101.695330][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.724485][ T6094] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.784645][ T6094] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.845018][ T6094] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.885007][ T6094] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.913215][ T5892] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  101.949069][ T3463] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.960413][ T3463] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.971773][ T3463] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.983373][ T3463] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.017163][ T6097] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  102.029513][ T6097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.855'.
[  102.043139][ T6097] bridge0: entered promiscuous mode
[  102.048474][ T6097] macsec1: entered promiscuous mode
[  102.051328][ T6101] netlink: '+}[@': attribute type 10 has an invalid length.
[  102.055137][ T6097] bridge0: port 3(macsec1) entered blocking state
[  102.067744][ T6097] bridge0: port 3(macsec1) entered disabled state
[  102.074544][ T6097] macsec1: entered allmulticast mode
[  102.079903][ T6097] bridge0: entered allmulticast mode
[  102.085844][ T6097] macsec1: left allmulticast mode
[  102.091076][ T6097] bridge0: left allmulticast mode
[  102.096913][ T6097] bridge0: left promiscuous mode
[  102.115139][ T3463] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.126893][ T3463] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.138668][ T3463] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.151232][ T3463] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.194040][ T6104] SELinux: failed to load policy
[  102.199621][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.858'.
[  102.229018][   T29] kauditd_printk_skb: 2661 callbacks suppressed
[  102.229077][   T29] audit: type=1326 audit(1761122768.036:13269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ee84efc9 code=0x7ffc0000
[  102.269504][ T6106] loop1: detected capacity change from 0 to 1024
[  102.277770][ T6106] EXT4-fs: Ignoring removed orlov option
[  102.284030][   T29] audit: type=1326 audit(1761122768.036:13270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38ee84efc9 code=0x7ffc0000
[  102.307664][   T29] audit: type=1326 audit(1761122768.036:13271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ee84efc9 code=0x7ffc0000
[  102.331121][   T29] audit: type=1326 audit(1761122768.036:13272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38ee84efc9 code=0x7ffc0000
[  102.354695][   T29] audit: type=1326 audit(1761122768.036:13273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ee84efc9 code=0x7ffc0000
[  102.378263][   T29] audit: type=1326 audit(1761122768.036:13274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38ee84efc9 code=0x7ffc0000
[  102.401706][   T29] audit: type=1326 audit(1761122768.036:13275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ee84efc9 code=0x7ffc0000
[  102.425160][   T29] audit: type=1326 audit(1761122768.036:13276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38ee84efc9 code=0x7ffc0000
[  102.448912][   T29] audit: type=1326 audit(1761122768.066:13277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ee84efc9 code=0x7ffc0000
[  102.472397][   T29] audit: type=1326 audit(1761122768.066:13278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ee84efc9 code=0x7ffc0000
[  102.505707][ T6106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.552499][ T6121] loop2: detected capacity change from 0 to 4096
[  102.563436][ T6121] EXT4-fs: Ignoring removed nomblk_io_submit option
[  102.584505][ T6113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.862'.
[  102.594485][ T6124] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.678407][ T6113] IPVS: Unknown mcast interface: ipvlan1�+
[  102.691713][ T6121] EXT4-fs: Mount option(s) incompatible with ext2
[  102.724714][ T6124] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.774766][ T6124] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.827677][ T6124] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.848443][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.125464][ T6152] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.175239][ T6152] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.198468][ T6155] hsr0 speed is unknown, defaulting to 1000
[  103.204796][ T6155] lo speed is unknown, defaulting to 1000
[  103.236866][ T6152] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.274121][ T6158] FAULT_INJECTION: forcing a failure.
[  103.274121][ T6158] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  103.287374][ T6158] CPU: 0 UID: 0 PID: 6158 Comm: syz.4.875 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  103.287442][ T6158] Tainted: [W]=WARN
[  103.287450][ T6158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  103.287466][ T6158] Call Trace:
[  103.287479][ T6158]  <TASK>
[  103.287488][ T6158]  __dump_stack+0x1d/0x30
[  103.287523][ T6158]  dump_stack_lvl+0xe8/0x140
[  103.287598][ T6158]  dump_stack+0x15/0x1b
[  103.287677][ T6158]  should_fail_ex+0x265/0x280
[  103.287780][ T6158]  should_fail+0xb/0x20
[  103.287815][ T6158]  should_fail_usercopy+0x1a/0x20
[  103.287855][ T6158]  _copy_to_user+0x20/0xa0
[  103.287878][ T6158]  simple_read_from_buffer+0xb5/0x130
[  103.287999][ T6158]  proc_fail_nth_read+0x10e/0x150
[  103.288025][ T6158]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  103.288050][ T6158]  vfs_read+0x1a8/0x770
[  103.288089][ T6158]  ? do_mq_open+0xe9/0x4f0
[  103.288132][ T6158]  ? __rcu_read_unlock+0x4f/0x70
[  103.288187][ T6158]  ? __fget_files+0x184/0x1c0
[  103.288212][ T6158]  ksys_read+0xda/0x1a0
[  103.288233][ T6158]  __x64_sys_read+0x40/0x50
[  103.288255][ T6158]  x64_sys_call+0x27c0/0x3000
[  103.288288][ T6158]  do_syscall_64+0xd2/0x200
[  103.288333][ T6158]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  103.288438][ T6158]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  103.288479][ T6158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.288524][ T6158] RIP: 0033:0x7fcd6151d9dc
[  103.288541][ T6158] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  103.288559][ T6158] RSP: 002b:00007fcd5ff87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  103.288577][ T6158] RAX: ffffffffffffffda RBX: 00007fcd61775fa0 RCX: 00007fcd6151d9dc
[  103.288589][ T6158] RDX: 000000000000000f RSI: 00007fcd5ff870a0 RDI: 0000000000000006
[  103.288606][ T6158] RBP: 00007fcd5ff87090 R08: 0000000000000000 R09: 0000000000000000
[  103.288622][ T6158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  103.288636][ T6158] R13: 00007fcd61776038 R14: 00007fcd61775fa0 R15: 00007ffe186de9d8
[  103.288661][ T6158]  </TASK>
[  103.513889][ T6152] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.533389][ T6160] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  103.593658][ T6164] netlink: 20 bytes leftover after parsing attributes in process `'.
[  103.629387][ T6166] macsec1: entered promiscuous mode
[  103.634720][ T6166] bridge0: entered promiscuous mode
[  103.641918][ T6166] bridge0: port 3(macsec1) entered blocking state
[  103.648879][ T6166] bridge0: port 3(macsec1) entered disabled state
[  103.672616][ T6166] macsec1: entered allmulticast mode
[  103.678064][ T6166] bridge0: entered allmulticast mode
[  103.685436][ T6166] macsec1: left allmulticast mode
[  103.690541][ T6166] bridge0: left allmulticast mode
[  103.710730][ T6166] bridge0: left promiscuous mode
[  103.856543][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.882'.
[  103.868347][ T6176] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  104.066818][ T6182] loop9: detected capacity change from 0 to 7
[  104.073349][ T6182] Buffer I/O error on dev loop9, logical block 0, async page read
[  104.081289][ T6182] Buffer I/O error on dev loop9, logical block 0, async page read
[  104.089224][ T6182]  loop9: unable to read partition table
[  104.095462][ T6182] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  104.095462][ T6182] 
) failed (rc=-5)
[  104.234376][ T6186] loop3: detected capacity change from 0 to 1024
[  104.243736][ T6186] EXT4-fs: inline encryption not supported
[  104.249612][ T6186] EXT4-fs: Ignoring removed i_version option
[  104.256322][ T6186] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  104.284292][ T6186] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.887: lblock 2 mapped to illegal pblock 2 (length 1)
[  104.307440][ T6186] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.887: lblock 0 mapped to illegal pblock 48 (length 1)
[  104.328196][ T6186] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.887: Failed to acquire dquot type 0
[  104.349381][ T6186] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  104.362700][ T6186] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.887: mark_inode_dirty error
[  104.382111][ T6186] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  104.403065][ T6186] EXT4-fs (loop3): 1 orphan inode deleted
[  104.409330][ T6186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.421984][   T52] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  104.438915][   T52] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0
[  104.452002][ T6186] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.466084][ T6186] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.887: Invalid inode table block 1 in block_group 0
[  104.480362][ T6186] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  104.492027][ T6186] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz.3.887: mark_inode_dirty error
[  104.628532][ T6198] macsec1: entered promiscuous mode
[  104.633880][ T6198] bridge0: entered promiscuous mode
[  104.639564][ T6198] bridge0: port 1(macsec1) entered blocking state
[  104.646138][ T6198] bridge0: port 1(macsec1) entered disabled state
[  104.652854][ T6198] macsec1: entered allmulticast mode
[  104.658229][ T6198] bridge0: entered allmulticast mode
[  104.664279][ T6198] macsec1: left allmulticast mode
[  104.669329][ T6198] bridge0: left allmulticast mode
[  104.674905][ T6198] bridge0: left promiscuous mode
[  104.725720][ T6207] loop2: detected capacity change from 0 to 512
[  104.732310][ T6207] EXT4-fs: Ignoring removed bh option
[  104.738615][ T6207] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  104.747741][ T6207] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  104.756590][ T6207] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  104.766494][ T6207] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[  104.774822][ T6207] System zones: 0-2, 18-18, 34-35
[  104.781043][ T6207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.795783][ T6207] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  104.805292][ T6207] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.894: path /203/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0
[  104.838494][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.856851][ T6213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.896'.
[  104.973193][ T6218] loop2: detected capacity change from 0 to 512
[  104.979885][ T6218] EXT4-fs: Ignoring removed bh option
[  104.985794][ T6218] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  104.994897][ T6218] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  105.007294][ T6218] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  105.018615][ T6218] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[  105.026854][ T6218] System zones: 0-2, 18-18, 34-35
[  105.032409][ T6218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.047902][ T6218] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  105.070782][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.152410][ T6222] loop2: detected capacity change from 0 to 1024
[  105.159320][ T6222] EXT4-fs: Ignoring removed orlov option
[  105.167426][ T6222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.392969][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.412060][ T6227] xt_CT: You must specify a L4 protocol and not use inversions on it
[  105.491978][ T6233] xt_l2tp: missing protocol rule (udp|l2tpip)
[  105.566494][ T6237] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  105.578926][ T6237] __nla_validate_parse: 1 callbacks suppressed
[  105.578945][ T6237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.905'.
[  105.718436][ T6243] loop2: detected capacity change from 0 to 1024
[  105.725516][ T6243] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  105.736398][ T6243] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  105.746671][ T6243] JBD2: no valid journal superblock found
[  105.752398][ T6243] EXT4-fs (loop2): Could not load journal inode
[  106.028125][ T6252] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[  106.038514][ T6252] SELinux: failed to load policy
[  106.129092][   T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.140724][   T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.155462][   T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.173105][   T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.228353][   T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.243175][   T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.251373][   T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.262221][   T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.290966][ T6262] loop0: detected capacity change from 0 to 512
[  106.297564][ T6262] EXT4-fs: Ignoring removed bh option
[  106.303622][ T6262] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  106.312750][ T6262] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  106.321740][ T6262] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  106.331168][ T6262] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[  106.339527][ T6262] System zones: 0-2, 18-18, 34-35
[  106.345141][ T6262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.369606][ T6265] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[  106.379954][ T6265] SELinux: failed to load policy
[  106.415987][ T6266] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.913: path /175/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0
[  106.439452][ T6262] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  106.454541][ T6268] loop9: detected capacity change from 0 to 7
[  106.460998][ T6268] Buffer I/O error on dev loop9, logical block 0, async page read
[  106.468946][ T6268] Buffer I/O error on dev loop9, logical block 0, async page read
[  106.476888][ T6268]  loop9: unable to read partition table
[  106.482739][ T6268] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  106.482739][ T6268] 
) failed (rc=-5)
[  106.508372][ T3329] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.536089][ T6273] netlink: 20 bytes leftover after parsing attributes in process `syz.2.916'.
[  106.547644][   T31] Bluetooth: hci0: Frame reassembly failed (-84)
[  106.572707][ T6278] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  106.584991][ T6278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.917'.
[  106.688806][ T6282] loop2: detected capacity change from 0 to 1024
[  106.696047][ T6282] EXT4-fs: Ignoring removed orlov option
[  106.704042][ T6282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.777903][ T6286] sctp: [Deprecated]: syz.3.920 (pid 6286) Use of int in max_burst socket option deprecated.
[  106.777903][ T6286] Use struct sctp_assoc_value instead
[  106.943758][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.980711][ T6293] loop2: detected capacity change from 0 to 1024
[  107.005006][ T6293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.019660][ T6293] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  107.054873][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.132293][ T6307] loop1: detected capacity change from 0 to 512
[  107.139161][ T6307] EXT4-fs: Ignoring removed bh option
[  107.145183][ T6307] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  107.154322][ T6307] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  107.163620][ T6307] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  107.172952][ T6307] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[  107.181168][ T6307] System zones: 0-2, 18-18, 34-35
[  107.186782][ T6307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.201632][ T6307] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  107.210823][ T6307] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.926: path /172/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0
[  107.241229][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.286560][   T29] kauditd_printk_skb: 639 callbacks suppressed
[  107.286577][   T29] audit: type=1400 audit(1761122773.096:13915): avc:  denied  { mounton } for  pid=6312 comm="syz.4.928" path="/190/file0" dev="tmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  107.349526][ T6318] hsr0 speed is unknown, defaulting to 1000
[  107.358984][ T6318] lo speed is unknown, defaulting to 1000
[  107.397469][ T6319] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[  107.408421][ T6319] SELinux: failed to load policy
[  107.449179][   T29] audit: type=1326 audit(1761122773.256:13916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda16e2efc9 code=0x7ffc0000
[  107.483363][ T6324] loop2: detected capacity change from 0 to 1024
[  107.489446][   T29] audit: type=1326 audit(1761122773.286:13917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda16e2efc9 code=0x7ffc0000
[  107.503765][ T6324] EXT4-fs: Ignoring removed orlov option
[  107.513169][   T29] audit: type=1326 audit(1761122773.286:13918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda16e2efc9 code=0x7ffc0000
[  107.531691][ T6324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.542299][   T29] audit: type=1326 audit(1761122773.286:13919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda16e2efc9 code=0x7ffc0000
[  107.578043][   T29] audit: type=1326 audit(1761122773.286:13920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda16e2efc9 code=0x7ffc0000
[  107.601533][   T29] audit: type=1326 audit(1761122773.286:13921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda16e2efc9 code=0x7ffc0000
[  107.625033][   T29] audit: type=1326 audit(1761122773.286:13922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda16e2efc9 code=0x7ffc0000
[  107.648514][   T29] audit: type=1326 audit(1761122773.286:13923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda16e2efc9 code=0x7ffc0000
[  107.671919][   T29] audit: type=1326 audit(1761122773.286:13924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda16e2efc9 code=0x7ffc0000
[  107.718758][ T6330] loop3: detected capacity change from 0 to 1024
[  107.735887][ T6332] loop1: detected capacity change from 0 to 1024
[  107.742760][ T6332] EXT4-fs: Ignoring removed orlov option
[  107.748578][ T6332] EXT4-fs: Ignoring removed nomblk_io_submit option
[  107.757513][ T6330] EXT4-fs: Ignoring removed orlov option
[  107.763263][ T6330] EXT4-fs: Ignoring removed nomblk_io_submit option
[  107.813869][ T6332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.833666][ T6330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.870080][ T6339] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[  107.895614][ T6339] SELinux: failed to load policy
[  107.929303][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.008895][ T6348] loop2: detected capacity change from 0 to 512
[  108.015448][ T6348] EXT4-fs: Ignoring removed bh option
[  108.021276][ T6348] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  108.030396][ T6348] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  108.039269][ T6348] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  108.048814][ T6348] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[  108.056933][ T6348] System zones: 0-2, 18-18, 34-35
[  108.062709][ T6348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.063315][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.084354][ T6348] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  108.093497][ T6348] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.938: path /223/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0
[  108.114471][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.133600][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.317138][ T6358] FAULT_INJECTION: forcing a failure.
[  108.317138][ T6358] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  108.327206][ T6360] loop1: detected capacity change from 0 to 512
[  108.330275][ T6358] CPU: 1 UID: 0 PID: 6358 Comm: syz.2.943 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  108.330320][ T6358] Tainted: [W]=WARN
[  108.330336][ T6358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  108.330353][ T6358] Call Trace:
[  108.330361][ T6358]  <TASK>
[  108.330372][ T6358]  __dump_stack+0x1d/0x30
[  108.330497][ T6358]  dump_stack_lvl+0xe8/0x140
[  108.330537][ T6358]  dump_stack+0x15/0x1b
[  108.330570][ T6358]  should_fail_ex+0x265/0x280
[  108.330613][ T6358]  should_fail+0xb/0x20
[  108.330665][ T6358]  should_fail_usercopy+0x1a/0x20
[  108.330708][ T6358]  _copy_to_user+0x20/0xa0
[  108.330793][ T6358]  simple_read_from_buffer+0xb5/0x130
[  108.330838][ T6358]  proc_fail_nth_read+0x10e/0x150
[  108.330872][ T6358]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  108.330928][ T6358]  vfs_read+0x1a8/0x770
[  108.330971][ T6358]  ? __rcu_read_unlock+0x4f/0x70
[  108.331016][ T6358]  ? __fget_files+0x184/0x1c0
[  108.331046][ T6358]  ksys_read+0xda/0x1a0
[  108.331071][ T6358]  __x64_sys_read+0x40/0x50
[  108.331150][ T6358]  x64_sys_call+0x27c0/0x3000
[  108.331191][ T6358]  do_syscall_64+0xd2/0x200
[  108.331235][ T6358]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  108.331263][ T6358]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  108.331300][ T6358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.331383][ T6358] RIP: 0033:0x7fda16e2d9dc
[  108.331403][ T6358] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  108.331507][ T6358] RSP: 002b:00007fda1588f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  108.331533][ T6358] RAX: ffffffffffffffda RBX: 00007fda17085fa0 RCX: 00007fda16e2d9dc
[  108.331551][ T6358] RDX: 000000000000000f RSI: 00007fda1588f0a0 RDI: 0000000000000005
[  108.331566][ T6358] RBP: 00007fda1588f090 R08: 0000000000000000 R09: 0000000000000000
[  108.331583][ T6358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  108.331599][ T6358] R13: 00007fda17086038 R14: 00007fda17085fa0 R15: 00007ffdda407158
[  108.331654][ T6358]  </TASK>
[  108.458463][ T6362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.944'.
[  108.462741][ T6360] EXT4-fs: test_dummy_encryption option not supported
[  108.501422][ T6364] sctp: [Deprecated]: syz.4.945 (pid 6364) Use of int in max_burst socket option deprecated.
[  108.501422][ T6364] Use struct sctp_assoc_value instead
[  108.573100][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  108.579267][ T5946] Bluetooth: hci0: command 0x1003 tx timeout
[  108.606707][ T6370] netlink: 20 bytes leftover after parsing attributes in process `syz.0.946'.
[  108.676324][ T6375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.958'.
[  108.679679][ T6376] loop2: detected capacity change from 0 to 512
[  108.695184][ T6376] EXT4-fs: Ignoring removed bh option
[  108.703582][ T6376] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  108.712659][ T6376] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  108.725280][ T6372] loop3: detected capacity change from 0 to 1024
[  108.732415][ T6372] EXT4-fs: Ignoring removed orlov option
[  108.734870][ T6376] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  108.748796][ T6376] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[  108.758527][ T6376] System zones: 0-2, 18-18, 34-35
[  108.764268][ T6376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.768970][ T6372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.793611][ T6376] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  108.811152][ T6380] loop0: detected capacity change from 0 to 1024
[  108.818105][ T6380] EXT4-fs: Ignoring removed orlov option
[  108.820666][ T6376] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.948: path /227/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0
[  108.823884][ T6380] EXT4-fs: Ignoring removed nomblk_io_submit option
[  108.860933][ T6380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.941416][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.023881][ T3329] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.067976][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.090885][ T6393] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  109.106065][ T6393] netlink: 24 bytes leftover after parsing attributes in process `syz.3.953'.
[  109.147744][ T6397] loop9: detected capacity change from 0 to 7
[  109.154428][ T6397] Buffer I/O error on dev loop9, logical block 0, async page read
[  109.162696][ T6397] Buffer I/O error on dev loop9, logical block 0, async page read
[  109.170687][ T6397]  loop9: unable to read partition table
[  109.177813][ T6397] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  109.177813][ T6397] 
) failed (rc=-5)
[  109.209800][ T6399] xt_CT: You must specify a L4 protocol and not use inversions on it
[  109.309975][ T6405] netlink: 20 bytes leftover after parsing attributes in process `syz.3.959'.
[  109.322927][ T6407] hsr0 speed is unknown, defaulting to 1000
[  109.329394][ T6407] lo speed is unknown, defaulting to 1000
[  109.374421][ T6409] macsec0: entered promiscuous mode
[  109.412215][ T6416] FAULT_INJECTION: forcing a failure.
[  109.412215][ T6416] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  109.425575][ T6416] CPU: 0 UID: 0 PID: 6416 Comm: syz.0.963 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  109.425618][ T6416] Tainted: [W]=WARN
[  109.425627][ T6416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  109.425641][ T6416] Call Trace:
[  109.425649][ T6416]  <TASK>
[  109.425659][ T6416]  __dump_stack+0x1d/0x30
[  109.425690][ T6416]  dump_stack_lvl+0xe8/0x140
[  109.425724][ T6416]  dump_stack+0x15/0x1b
[  109.425756][ T6416]  should_fail_ex+0x265/0x280
[  109.425795][ T6416]  should_fail+0xb/0x20
[  109.425894][ T6416]  should_fail_usercopy+0x1a/0x20
[  109.425935][ T6416]  _copy_from_user+0x1c/0xb0
[  109.425970][ T6416]  ___sys_sendmsg+0xc1/0x1d0
[  109.426070][ T6416]  __x64_sys_sendmsg+0xd4/0x160
[  109.426112][ T6416]  x64_sys_call+0x191e/0x3000
[  109.426213][ T6416]  do_syscall_64+0xd2/0x200
[  109.426248][ T6416]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  109.426271][ T6416]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  109.426306][ T6416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.426401][ T6416] RIP: 0033:0x7fa32365efc9
[  109.426421][ T6416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.426443][ T6416] RSP: 002b:00007fa3220bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  109.426466][ T6416] RAX: ffffffffffffffda RBX: 00007fa3238b5fa0 RCX: 00007fa32365efc9
[  109.426482][ T6416] RDX: 0000000000000060 RSI: 0000200000000680 RDI: 0000000000000003
[  109.426497][ T6416] RBP: 00007fa3220bf090 R08: 0000000000000000 R09: 0000000000000000
[  109.426513][ T6416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  109.426527][ T6416] R13: 00007fa3238b6038 R14: 00007fa3238b5fa0 R15: 00007ffca9255ce8
[  109.426605][ T6416]  </TASK>
[  109.451730][ T6420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.965'.
[  109.622487][ T6422] hsr0 speed is unknown, defaulting to 1000
[  109.647828][ T6422] lo speed is unknown, defaulting to 1000
[  109.682617][ T6427] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  109.715585][ T6427] netlink: 24 bytes leftover after parsing attributes in process `syz.4.967'.
[  109.736358][ T6430] loop2: detected capacity change from 0 to 1024
[  109.750758][ T6430] EXT4-fs: inline encryption not supported
[  109.756679][ T6430] EXT4-fs: Ignoring removed i_version option
[  109.800046][ T6430] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  109.867761][ T6434] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.930960][ T6430] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.968: lblock 2 mapped to illegal pblock 2 (length 1)
[  109.954804][ T6434] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.965308][ T6430] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.968: lblock 0 mapped to illegal pblock 48 (length 1)
[  109.993396][ T6430] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.968: Failed to acquire dquot type 0
[  110.014883][ T6440] sctp: [Deprecated]: syz.0.972 (pid 6440) Use of int in max_burst socket option deprecated.
[  110.014883][ T6440] Use struct sctp_assoc_value instead
[  110.020843][ T6430] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  110.043945][ T6430] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.968: mark_inode_dirty error
[  110.063466][ T6430] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  110.075662][ T6434] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.083584][ T6430] EXT4-fs (loop2): 1 orphan inode deleted
[  110.092402][ T6430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.105200][   T31] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  110.119835][   T31] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0
[  110.157496][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.167257][ T3322] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0
[  110.180595][ T3322] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  110.191944][ T6434] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.203881][ T3322] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error
[  110.230014][ T6446] loop2: detected capacity change from 0 to 1024
[  110.255457][ T6446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.272343][ T6446] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 16: comm syz.2.973: bad entry in directory: inode out of bounds - offset=108, inode=131, rec_len=916, size=1024 fake=0
[  110.317156][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.354079][ T6452] hsr0 speed is unknown, defaulting to 1000
[  110.360292][ T6452] lo speed is unknown, defaulting to 1000
[  110.429323][   T52] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.453424][ T1623] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.465247][ T3463] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.475677][ T6465] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  110.480655][ T1623] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.652461][ T6474] bridge0: port 1(gretap0) entered blocking state
[  110.659047][ T6474] bridge0: port 1(gretap0) entered disabled state
[  110.676516][ T6476] rdma_op ffff88811a35bd80 conn xmit_rdma 0000000000000000
[  110.693093][ T6474] gretap0: entered allmulticast mode
[  110.709452][ T6474] gretap0: entered promiscuous mode
[  110.725336][ T6476] netlink: 'syz.1.985': attribute type 4 has an invalid length.
[  110.754508][ T6482] loop1: detected capacity change from 0 to 1024
[  110.761205][ T6482] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  110.770357][ T6474] loop3: detected capacity change from 0 to 164
[  110.786792][ T6474] Unable to read rock-ridge attributes
[  110.797480][ T6482] FAULT_INJECTION: forcing a failure.
[  110.797480][ T6482] name failslab, interval 1, probability 0, space 0, times 0
[  110.810159][ T6482] CPU: 0 UID: 0 PID: 6482 Comm: syz.1.986 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  110.810198][ T6482] Tainted: [W]=WARN
[  110.810207][ T6482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  110.810223][ T6482] Call Trace:
[  110.810231][ T6482]  <TASK>
[  110.810240][ T6482]  __dump_stack+0x1d/0x30
[  110.810305][ T6482]  dump_stack_lvl+0xe8/0x140
[  110.810405][ T6482]  dump_stack+0x15/0x1b
[  110.810437][ T6482]  should_fail_ex+0x265/0x280
[  110.810475][ T6482]  should_failslab+0x8c/0xb0
[  110.810557][ T6482]  kmem_cache_alloc_noprof+0x50/0x480
[  110.810662][ T6482]  ? prepare_creds+0x37/0x4c0
[  110.810689][ T6482]  prepare_creds+0x37/0x4c0
[  110.810713][ T6482]  __sys_setgid+0x6a/0x1d0
[  110.810747][ T6482]  __x64_sys_setgid+0x1e/0x30
[  110.810892][ T6482]  x64_sys_call+0x2dfb/0x3000
[  110.810926][ T6482]  do_syscall_64+0xd2/0x200
[  110.810963][ T6482]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  110.811070][ T6482]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  110.811100][ T6482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.811124][ T6482] RIP: 0033:0x7f38ee84efc9
[  110.811143][ T6482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.811204][ T6482] RSP: 002b:00007f38ed2b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000006a
[  110.811225][ T6482] RAX: ffffffffffffffda RBX: 00007f38eeaa5fa0 RCX: 00007f38ee84efc9
[  110.811238][ T6482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  110.811276][ T6482] RBP: 00007f38ed2b7090 R08: 0000000000000000 R09: 0000000000000000
[  110.811288][ T6482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  110.811369][ T6482] R13: 00007f38eeaa6038 R14: 00007f38eeaa5fa0 R15: 00007fff31f942a8
[  110.811392][ T6482]  </TASK>
[  110.812113][ T6474] Unable to read rock-ridge attributes
[  110.849623][ T6484] __nla_validate_parse: 2 callbacks suppressed
[  110.849643][ T6484] netlink: 20 bytes leftover after parsing attributes in process `syz.1.987'.
[  111.013238][ T6469] gretap0: left allmulticast mode
[  111.018303][ T6469] gretap0: left promiscuous mode
[  111.023465][ T6469] bridge0: port 1(gretap0) entered disabled state
[  111.081179][ T6490] hsr0 speed is unknown, defaulting to 1000
[  111.088051][ T6490] lo speed is unknown, defaulting to 1000
[  111.237680][ T6505] loop0: detected capacity change from 0 to 1024
[  111.240699][ T6507] loop3: detected capacity change from 0 to 1024
[  111.245211][ T6505] EXT4-fs: Ignoring removed orlov option
[  111.251311][ T6507] EXT4-fs: Ignoring removed orlov option
[  111.262480][ T6507] EXT4-fs: Ignoring removed nomblk_io_submit option
[  111.270648][ T6505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.297925][ T6507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.490016][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.511501][ T3329] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.524801][ T6520] macsec0: entered promiscuous mode
[  111.541612][ T6522] hsr0 speed is unknown, defaulting to 1000
[  111.548778][ T6522] lo speed is unknown, defaulting to 1000
[  111.669989][ T6535] syzkaller0: entered promiscuous mode
[  111.675694][ T6535] syzkaller0: entered allmulticast mode
[  111.702621][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'.
[  111.717217][ T6542] FAULT_INJECTION: forcing a failure.
[  111.717217][ T6542] name failslab, interval 1, probability 0, space 0, times 0
[  111.730004][ T6542] CPU: 1 UID: 0 PID: 6542 Comm: syz.2.1009 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  111.730044][ T6542] Tainted: [W]=WARN
[  111.730052][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  111.730068][ T6542] Call Trace:
[  111.730143][ T6542]  <TASK>
[  111.730153][ T6542]  __dump_stack+0x1d/0x30
[  111.730183][ T6542]  dump_stack_lvl+0xe8/0x140
[  111.730206][ T6540] loop3: detected capacity change from 0 to 2048
[  111.730240][ T6542]  dump_stack+0x15/0x1b
[  111.730276][ T6542]  should_fail_ex+0x265/0x280
[  111.730400][ T6542]  should_failslab+0x8c/0xb0
[  111.730429][ T6542]  __kmalloc_noprof+0xa5/0x570
[  111.730465][ T6542]  ? iovec_from_user+0x84/0x210
[  111.730499][ T6542]  iovec_from_user+0x84/0x210
[  111.730574][ T6542]  __import_iovec+0xf3/0x540
[  111.730605][ T6542]  ? should_fail_ex+0xdb/0x280
[  111.730774][ T6542]  import_iovec+0x61/0x80
[  111.730815][ T6542]  ___sys_sendmsg+0x146/0x1d0
[  111.730905][ T6542]  __x64_sys_sendmsg+0xd4/0x160
[  111.730949][ T6542]  x64_sys_call+0x191e/0x3000
[  111.731050][ T6542]  do_syscall_64+0xd2/0x200
[  111.731091][ T6542]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  111.731193][ T6542]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  111.731230][ T6542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.731259][ T6542] RIP: 0033:0x7fda16e2efc9
[  111.731280][ T6542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.731304][ T6542] RSP: 002b:00007fda1588f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  111.731395][ T6542] RAX: ffffffffffffffda RBX: 00007fda17085fa0 RCX: 00007fda16e2efc9
[  111.731413][ T6542] RDX: 0000000000000064 RSI: 00002000000002c0 RDI: 0000000000000006
[  111.731430][ T6542] RBP: 00007fda1588f090 R08: 0000000000000000 R09: 0000000000000000
[  111.731447][ T6542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  111.731534][ T6542] R13: 00007fda17086038 R14: 00007fda17085fa0 R15: 00007ffdda407158
[  111.731561][ T6542]  </TASK>
[  111.765969][ T6544] xt_CT: You must specify a L4 protocol and not use inversions on it
[  111.965783][ T6531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1004'.
[  112.010671][ T6553] hsr0 speed is unknown, defaulting to 1000
[  112.017157][ T6553] lo speed is unknown, defaulting to 1000
[  112.035795][ T6540]  loop3: p2 p3 p7
[  112.208932][ T6572] veth0_to_bridge: entered promiscuous mode
[  112.234262][ T6574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1021'.
[  112.252842][ T6572] ALSA: seq fatal error: cannot create timer (-19)
[  112.289287][ T6579] loop2: detected capacity change from 0 to 512
[  112.295901][ T6571] veth0_to_bridge: left promiscuous mode
[  112.296939][ T6577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1022'.
[  112.302068][ T6579] EXT4-fs: Ignoring removed bh option
[  112.333075][ T6579] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  112.342237][ T6579] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  112.351328][ T6581] loop0: detected capacity change from 0 to 4096
[  112.374414][ T6581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.389612][   T29] kauditd_printk_skb: 554 callbacks suppressed
[  112.389631][   T29] audit: type=1326 audit(1761122778.196:14476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[  112.399003][ T6586] loop3: detected capacity change from 0 to 1024
[  112.419937][   T29] audit: type=1326 audit(1761122778.196:14477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[  112.449318][   T29] audit: type=1326 audit(1761122778.196:14478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[  112.472955][   T29] audit: type=1326 audit(1761122778.196:14479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[  112.473426][ T6579] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  112.496558][   T29] audit: type=1326 audit(1761122778.196:14480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcdd502efc9 code=0x7ffc0000
[  112.507024][ T6586] EXT4-fs: Ignoring removed bh option
[  112.529185][   T29] audit: type=1326 audit(1761122778.196:14481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcdd502f003 code=0x7ffc0000
[  112.534927][ T6586] EXT4-fs: inline encryption not supported
[  112.557961][   T29] audit: type=1326 audit(1761122778.196:14482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcdd502da7f code=0x7ffc0000
[  112.587174][   T29] audit: type=1326 audit(1761122778.206:14483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcdd502f057 code=0x7ffc0000
[  112.610743][   T29] audit: type=1326 audit(1761122778.206:14484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdd502d810 code=0x7ffc0000
[  112.613770][ T6586] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  112.634278][   T29] audit: type=1326 audit(1761122778.206:14485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcdd502ebcb code=0x7ffc0000
[  112.671906][ T6579] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[  112.680033][ T6579] System zones: 0-2, 18-18, 34-35
[  112.685755][ T6579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.707473][ T6586] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  112.713231][ T6590] xt_CT: You must specify a L4 protocol and not use inversions on it
[  112.733736][ T6579] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  112.742793][ T6579] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.1024: path /241/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0
[  112.765855][ T6594] hsr0 speed is unknown, defaulting to 1000
[  112.785759][ T6594] lo speed is unknown, defaulting to 1000
[  112.791905][ T6586] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1026: lblock 2 mapped to illegal pblock 2 (length 1)
[  112.807098][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.895339][ T6586] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1026: lblock 0 mapped to illegal pblock 48 (length 1)
[  112.910997][ T6602] loop1: detected capacity change from 0 to 1024
[  112.918150][ T6602] EXT4-fs: Ignoring removed orlov option
[  112.919726][ T6586] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1026: Failed to acquire dquot type 0
[  112.935370][ T6602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.949972][ T6606] FAULT_INJECTION: forcing a failure.
[  112.949972][ T6606] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  112.963135][ T6606] CPU: 0 UID: 0 PID: 6606 Comm: syz.4.1033 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  112.963206][ T6606] Tainted: [W]=WARN
[  112.963235][ T6606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  112.963253][ T6606] Call Trace:
[  112.963260][ T6606]  <TASK>
[  112.963270][ T6606]  __dump_stack+0x1d/0x30
[  112.963307][ T6606]  dump_stack_lvl+0xe8/0x140
[  112.963341][ T6606]  dump_stack+0x15/0x1b
[  112.963374][ T6606]  should_fail_ex+0x265/0x280
[  112.963463][ T6606]  should_fail+0xb/0x20
[  112.963496][ T6606]  should_fail_usercopy+0x1a/0x20
[  112.963552][ T6606]  _copy_from_iter+0xd2/0xe80
[  112.963576][ T6606]  ? __build_skb_around+0x1ab/0x200
[  112.963616][ T6606]  ? __alloc_skb+0x223/0x320
[  112.963718][ T6606]  netlink_sendmsg+0x471/0x6b0
[  112.963760][ T6606]  ? __pfx_netlink_sendmsg+0x10/0x10
[  112.963792][ T6606]  __sock_sendmsg+0x145/0x180
[  112.963818][ T6606]  ____sys_sendmsg+0x31e/0x4e0
[  112.963885][ T6606]  ___sys_sendmsg+0x17b/0x1d0
[  112.963964][ T6606]  __x64_sys_sendmsg+0xd4/0x160
[  112.964068][ T6606]  x64_sys_call+0x191e/0x3000
[  112.964099][ T6606]  do_syscall_64+0xd2/0x200
[  112.964129][ T6606]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  112.964149][ T6606]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  112.964232][ T6606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.964259][ T6606] RIP: 0033:0x7fcd6151efc9
[  112.964295][ T6606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.964318][ T6606] RSP: 002b:00007fcd5ff87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  112.964340][ T6606] RAX: ffffffffffffffda RBX: 00007fcd61775fa0 RCX: 00007fcd6151efc9
[  112.964355][ T6606] RDX: 0000000000004004 RSI: 0000200000000040 RDI: 0000000000000008
[  112.964370][ T6606] RBP: 00007fcd5ff87090 R08: 0000000000000000 R09: 0000000000000000
[  112.964383][ T6606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.964430][ T6606] R13: 00007fcd61776038 R14: 00007fcd61775fa0 R15: 00007ffe186de9d8
[  112.964454][ T6606]  </TASK>
[  113.177992][ T6586] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  113.195203][ T3329] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.204591][ T6586] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1026: mark_inode_dirty error
[  113.218920][ T6586] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  113.249085][ T6586] EXT4-fs (loop3): 1 orphan inode deleted
[  113.257043][ T6586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.269733][ T1623] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  113.284679][ T1623] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0
[  113.312235][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.337284][ T6586] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.1026: Invalid inode table block 1 in block_group 0
[  113.353070][ T6586] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  113.377558][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.387181][ T2879] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  113.401693][ T2879] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0
[  113.413963][ T3324] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0
[  113.429959][ T3324] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  113.442355][ T3324] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error
[  113.453823][ T6621] loop2: detected capacity change from 0 to 512
[  113.461940][ T6627] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.473920][ T6621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.486741][ T6621] ext4 filesystem being mounted at /244/control supports timestamps until 2038-01-19 (0x7fffffff)
[  113.494153][ T6634] loop3: detected capacity change from 0 to 512
[  113.504351][ T6634] EXT4-fs: Ignoring removed bh option
[  113.510275][ T6634] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  113.519507][ T6634] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  113.528434][ T6634] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  113.529469][ T6627] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.543453][ T6634] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[  113.555654][ T6634] System zones: 0-2, 18-18, 34-35
[  113.561629][ T6634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.576305][ T6634] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  113.586411][ T6634] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.1040: path /190/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0
[  113.587725][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.618471][ T6627] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.630574][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.643498][ T6637] xt_CT: You must specify a L4 protocol and not use inversions on it
[  113.664944][ T6627] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.680347][ T6641] loop3: detected capacity change from 0 to 512
[  113.687007][ T6641] EXT4-fs: Ignoring removed bh option
[  113.693791][ T6641] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  113.702952][ T6641] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  113.711773][ T6641] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  113.721305][ T6641] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[  113.729440][ T6641] System zones: 0-2, 18-18, 34-35
[  113.735110][ T6641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.741018][ T1623] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.756561][ T6641] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  113.766866][ T1623] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.775371][ T1623] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.783889][ T1623] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.804883][ T6644] rdma_op ffff88811ba0c180 conn xmit_rdma 0000000000000000
[  113.805198][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.826614][ T6644] netlink: 'syz.2.1044': attribute type 4 has an invalid length.
[  113.862439][ T6649] hsr0 speed is unknown, defaulting to 1000
[  113.868977][ T6649] lo speed is unknown, defaulting to 1000
[  114.234577][ T6663] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  114.286893][ T6664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1059'.
[  114.300416][ T6664] bridge0: entered promiscuous mode
[  114.305767][ T6664] macsec1: entered promiscuous mode
[  114.312125][ T6664] bridge0: port 3(macsec1) entered blocking state
[  114.318651][ T6664] bridge0: port 3(macsec1) entered disabled state
[  114.360023][ T6664] macsec1: entered allmulticast mode
[  114.365413][ T6664] bridge0: entered allmulticast mode
[  114.409518][ T6664] macsec1: left allmulticast mode
[  114.414710][ T6664] bridge0: left allmulticast mode
[  114.447974][ T6664] bridge0: left promiscuous mode
[  114.726021][ T6670] loop0: detected capacity change from 0 to 512
[  114.753356][ T6670] EXT4-fs: Ignoring removed bh option
[  114.798643][ T6670] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  114.807752][ T6670] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  114.841903][ T6670] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  114.881585][ T6670] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[  114.902902][ T6670] System zones: 0-2, 18-18, 34-35
[  114.919631][ T6670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.985101][ T6670] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  115.000907][ T6670] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.1051: path /203/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0
[  115.090126][ T3329] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.198285][ T6678] hsr0 speed is unknown, defaulting to 1000
[  115.204588][ T6678] lo speed is unknown, defaulting to 1000
[  115.398136][ T6692] serio: Serial port ttyS3
[  115.450002][ T6696] siw: device registration error -23
[  115.522440][ T6698] loop0: detected capacity change from 0 to 512
[  115.568427][ T6698] EXT4-fs (loop0): 1 orphan inode deleted
[  115.576321][ T6698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.756624][ T6707] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[  115.767393][ T6707] SELinux: failed to load policy
[  116.019252][ T6711] hsr0 speed is unknown, defaulting to 1000
[  116.026211][ T6711] lo speed is unknown, defaulting to 1000
[  116.994153][ T6717] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  117.020228][ T3329] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.057585][ T6723] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  117.075741][ T6717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1066'.
[  117.089888][ T6717] macsec1: entered promiscuous mode
[  117.095351][ T6717] bridge0: entered promiscuous mode
[  117.101087][ T6717] bridge0: port 3(macsec1) entered blocking state
[  117.107673][ T6717] bridge0: port 3(macsec1) entered disabled state
[  117.117162][ T6717] macsec1: entered allmulticast mode
[  117.122477][ T6717] bridge0: entered allmulticast mode
[  117.193383][ T6717] macsec1: left allmulticast mode
[  117.198475][ T6717] bridge0: left allmulticast mode
[  117.204524][ T6717] bridge0: left promiscuous mode
[  117.211747][ T6725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1078'.
[  117.224239][ T6723] bridge0: entered promiscuous mode
[  117.229650][ T6723] macsec1: entered promiscuous mode
[  117.236525][ T6723] bridge0: port 3(macsec1) entered blocking state
[  117.243036][ T6723] bridge0: port 3(macsec1) entered disabled state
[  117.250071][ T6723] macsec1: entered allmulticast mode
[  117.255459][ T6723] bridge0: entered allmulticast mode
[  117.314562][ T6731] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1068'.
[  117.315113][ T6723] macsec1: left allmulticast mode
[  117.328786][ T6723] bridge0: left allmulticast mode
[  117.373603][ T6723] bridge0: left promiscuous mode
[  117.380883][ T6733] loop2: detected capacity change from 0 to 128
[  117.415866][ T6728] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.455368][   T29] kauditd_printk_skb: 466 callbacks suppressed
[  117.455383][   T29] audit: type=1326 audit(1761122783.266:14948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32365efc9 code=0x7ffc0000
[  117.584620][ T6728] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.619934][   T29] audit: type=1326 audit(1761122783.296:14949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa32365efc9 code=0x7ffc0000
[  117.643582][   T29] audit: type=1326 audit(1761122783.296:14950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32365efc9 code=0x7ffc0000
[  117.667154][   T29] audit: type=1326 audit(1761122783.296:14951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32365efc9 code=0x7ffc0000
[  117.690863][   T29] audit: type=1326 audit(1761122783.296:14952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa32365efc9 code=0x7ffc0000
[  117.715052][   T29] audit: type=1326 audit(1761122783.296:14953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32365efc9 code=0x7ffc0000
[  117.738630][   T29] audit: type=1326 audit(1761122783.296:14954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa32365efc9 code=0x7ffc0000
[  117.762210][   T29] audit: type=1326 audit(1761122783.296:14955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32365efc9 code=0x7ffc0000
[  117.785981][   T29] audit: type=1326 audit(1761122783.296:14956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fa32365efc9 code=0x7ffc0000
[  117.809539][   T29] audit: type=1326 audit(1761122783.296:14957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32365efc9 code=0x7ffc0000
[  117.906081][ T6728] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.937975][ T6744] hsr0 speed is unknown, defaulting to 1000
[  117.944396][ T6744] lo speed is unknown, defaulting to 1000
[  117.966168][ T6728] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.032721][   T52] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.047835][ T2879] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.063927][ T2879] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.076212][ T2879] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.111303][ T2879] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x1b
[  118.148489][ T6760] loop1: detected capacity change from 0 to 1024
[  118.155506][ T6760] EXT4-fs: Ignoring removed orlov option
[  118.161327][ T6760] EXT4-fs: Ignoring removed nomblk_io_submit option
[  118.174906][ T6760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.291250][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.322008][ T6769] loop9: detected capacity change from 0 to 7
[  118.330723][ T6769] Buffer I/O error on dev loop9, logical block 0, async page read
[  118.339661][ T6769] Buffer I/O error on dev loop9, logical block 0, async page read
[  118.347555][ T6769]  loop9: unable to read partition table
[  118.354845][ T6769] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  118.354845][ T6769] 
) failed (rc=-5)
[  118.368911][ T6773] loop1: detected capacity change from 0 to 512
[  118.392419][ T6773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.405701][ T6777] loop0: detected capacity change from 0 to 1024
[  118.413211][ T6773] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.417879][ T6777] EXT4-fs: Ignoring removed orlov option
[  118.429427][ T6777] EXT4-fs: Ignoring removed nomblk_io_submit option
[  118.451997][ T6773] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1081: corrupted xattr block 32: overlapping e_value 
[  118.454348][ T6777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.466189][ T6773] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  118.488389][ T6773] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1081: corrupted xattr block 32: overlapping e_value 
[  118.505045][ T6784] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1081: corrupted xattr block 32: overlapping e_value 
[  118.518883][ T6773] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  118.528437][ T6773] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1081: corrupted xattr block 32: overlapping e_value 
[  118.542197][ T6784] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  118.552650][ T6773] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  118.569974][ T6784] EXT4-fs error (device loop1): ext4_xattr_block_find:1874: inode #15: comm syz.1.1081: corrupted xattr block 32: overlapping e_value 
[  118.571508][ T6781] tmpfs: Cannot disable swap on remount
[  118.614384][ T6773] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1081: corrupted xattr block 32: overlapping e_value 
[  118.630009][ T6773] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1081: corrupted xattr block 32: overlapping e_value 
[  118.644686][ T6773] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  118.654030][ T6773] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 197 vs 206 free clusters
[  118.869358][   T31] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x1b
[  118.882700][ T6808] loop0: detected capacity change from 0 to 512
[  118.908734][ T6816] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  118.921299][ T6808] ext4 filesystem being mounted at /213/control supports timestamps until 2038-01-19 (0x7fffffff)
[  118.942712][ T6816] macsec1: entered promiscuous mode
[  118.948134][ T6816] bridge0: entered promiscuous mode
[  118.963678][ T6816] bridge0: port 3(macsec1) entered blocking state
[  118.970203][ T6816] bridge0: port 3(macsec1) entered disabled state
[  118.977984][ T6816] macsec1: entered allmulticast mode
[  118.983353][ T6816] bridge0: entered allmulticast mode
[  118.993429][ T6816] macsec1: left allmulticast mode
[  118.998528][ T6816] bridge0: left allmulticast mode
[  119.004721][ T6816] bridge0: left promiscuous mode
[  119.135342][ T6824] hsr0 speed is unknown, defaulting to 1000
[  119.141702][ T6824] lo speed is unknown, defaulting to 1000
[  119.504750][ T6831] tmpfs: Cannot disable swap on remount
[  119.643753][ T6833] loop1: detected capacity change from 0 to 1024
[  119.650894][ T6833] EXT4-fs: Ignoring removed orlov option
[  119.842252][ T6847] xt_CT: You must specify a L4 protocol and not use inversions on it
[  119.844290][ T6843] loop2: detected capacity change from 0 to 1024
[  119.883427][ T6843] EXT4-fs: Ignoring removed orlov option
[  119.889255][ T6843] EXT4-fs: Ignoring removed nomblk_io_submit option
[  119.905962][ T6851] siw: device registration error -23
[  120.049535][ T6859] loop1: detected capacity change from 0 to 764
[  120.064836][ T6859] rock: directory entry would overflow storage
[  120.071036][ T6859] rock: sig=0x4f50, size=4, remaining=3
[  120.076695][ T6859] iso9660: Corrupted directory entry in block 6 of inode 1792
[  120.144245][ T6859] Symlink component flag not implemented
[  120.151735][ T6859] Symlink component flag not implemented (129)
[  120.164846][ T6859] rock: directory entry would overflow storage
[  120.171220][ T6859] rock: sig=0x4f50, size=4, remaining=3
[  120.176999][ T6859] iso9660: Corrupted directory entry in block 6 of inode 1792
[  120.410436][ T6888] loop2: detected capacity change from 0 to 512
[  120.420294][ T6888] EXT4-fs (loop2): 1 orphan inode deleted
[  120.880972][ T6891] siw: device registration error -23
[  121.005769][ T6899] loop0: detected capacity change from 0 to 512
[  121.012360][ T6899] EXT4-fs: Ignoring removed bh option
[  121.018756][ T6899] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  121.027847][ T6899] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  121.037117][ T6899] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  121.046780][ T6899] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[  121.055813][ T6899] System zones: 0-2, 18-18, 34-35
[  121.063024][ T6899] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  121.072438][ T6899] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.1126: path /224/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0
[  121.114447][ T6904] loop3: detected capacity change from 0 to 764
[  121.135816][ T6904] rock: directory entry would overflow storage
[  121.142020][ T6904] rock: sig=0x4f50, size=4, remaining=3
[  121.147901][ T6904] iso9660: Corrupted directory entry in block 6 of inode 1792
[  121.181266][ T6904] Symlink component flag not implemented
[  121.187388][ T6904] Symlink component flag not implemented (129)
[  121.210889][ T6906] loop0: detected capacity change from 0 to 1024
[  121.220879][ T6916] xt_CT: You must specify a L4 protocol and not use inversions on it
[  121.229830][ T6906] EXT4-fs: Ignoring removed orlov option
[  121.233807][ T6914] hsr0 speed is unknown, defaulting to 1000
[  121.243327][ T6904] rock: directory entry would overflow storage
[  121.249522][ T6904] rock: sig=0x4f50, size=4, remaining=3
[  121.253183][ T6914] lo speed is unknown, defaulting to 1000
[  121.255122][ T6904] iso9660: Corrupted directory entry in block 6 of inode 1792
[  121.357673][ T6922] siw: device registration error -23
[  121.411697][ T6931] loop9: detected capacity change from 0 to 7
[  121.419160][ T6936] netlink: 'syz.4.1139': attribute type 10 has an invalid length.
[  121.427104][ T6936] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1139'.
[  121.436925][ T6931] Buffer I/O error on dev loop9, logical block 0, async page read
[  121.444922][ T6931] Buffer I/O error on dev loop9, logical block 0, async page read
[  121.452824][ T6931]  loop9: unable to read partition table
[  121.460885][ T6931] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  121.460885][ T6931] 
) failed (rc=-5)
[  121.564960][ T6945] loop1: detected capacity change from 0 to 512
[  121.574980][ T6945] EXT4-fs (loop1): 1 orphan inode deleted
[  121.605786][ T6949] loop2: detected capacity change from 0 to 1024
[  121.612669][ T6949] EXT4-fs: inline encryption not supported
[  121.618835][ T6949] EXT4-fs: Invalid want_extra_isize 26015
[  121.652336][ T6949] loop9: detected capacity change from 0 to 7
[  121.658777][ T6949] Buffer I/O error on dev loop9, logical block 0, async page read
[  121.666863][ T6949] Buffer I/O error on dev loop9, logical block 0, async page read
[  121.674813][ T6949]  loop9: unable to read partition table
[  121.680699][ T6949] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  121.680699][ T6949] 
) failed (rc=-5)
[  121.767521][ T6958] hsr0 speed is unknown, defaulting to 1000
[  121.776836][ T6958] lo speed is unknown, defaulting to 1000
[  121.838258][ T6960] siw: device registration error -23
[  121.918504][ T6967] loop0: detected capacity change from 0 to 1024
[  121.925515][ T6967] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  121.987727][ T6972] loop9: detected capacity change from 0 to 7
[  121.994152][ T6972] Buffer I/O error on dev loop9, logical block 0, async page read
[  122.002141][ T6972] Buffer I/O error on dev loop9, logical block 0, async page read
[  122.010083][ T6972]  loop9: unable to read partition table
[  122.016115][ T6972] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  122.016115][ T6972] 
) failed (rc=-5)
[  122.098562][ T6980] loop0: detected capacity change from 0 to 1024
[  122.105582][ T6980] EXT4-fs: Ignoring removed orlov option
[  122.211793][ T6986] hsr0 speed is unknown, defaulting to 1000
[  122.218474][ T6986] lo speed is unknown, defaulting to 1000
[  122.253407][ T6987] loop2: detected capacity change from 0 to 512
[  122.270722][ T6987] EXT4-fs (loop2): 1 orphan inode deleted
[  122.307111][ T6992] siw: device registration error -23
[  122.314172][ T6990] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  122.335769][ T6990] bridge0: entered promiscuous mode
[  122.341070][ T6990] macsec1: entered promiscuous mode
[  122.349141][ T6990] bridge0: port 3(macsec1) entered blocking state
[  122.355670][ T6990] bridge0: port 3(macsec1) entered disabled state
[  122.367402][ T6994] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1162'.
[  122.376761][ T6990] macsec1: entered allmulticast mode
[  122.382149][ T6990] bridge0: entered allmulticast mode
[  122.389347][ T6990] macsec1: left allmulticast mode
[  122.394525][ T6990] bridge0: left allmulticast mode
[  122.408206][ T6990] bridge0: left promiscuous mode
[  122.418755][ T6994] loop3: detected capacity change from 0 to 128
[  122.467341][ T7004] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.514830][ T7004] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.537740][   T29] kauditd_printk_skb: 774 callbacks suppressed
[  122.537755][   T29] audit: type=1326 audit(1761122788.346:15732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ee84efc9 code=0x7ffc0000
[  122.567548][   T29] audit: type=1326 audit(1761122788.346:15733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ee84efc9 code=0x7ffc0000
[  122.591167][   T29] audit: type=1326 audit(1761122788.346:15734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38ee84efc9 code=0x7ffc0000
[  122.614801][   T29] audit: type=1326 audit(1761122788.346:15735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ee84efc9 code=0x7ffc0000
[  122.615291][ T7008] loop1: detected capacity change from 0 to 1024
[  122.638437][   T29] audit: type=1326 audit(1761122788.346:15736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ee84efc9 code=0x7ffc0000
[  122.638480][   T29] audit: type=1326 audit(1761122788.346:15737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38ee84efc9 code=0x7ffc0000
[  122.645812][ T7008] EXT4-fs: Ignoring removed orlov option
[  122.668447][   T29] audit: type=1326 audit(1761122788.346:15738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ee84efc9 code=0x7ffc0000
[  122.721143][   T29] audit: type=1326 audit(1761122788.346:15739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ee84efc9 code=0x7ffc0000
[  122.745191][   T29] audit: type=1326 audit(1761122788.346:15740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38ee84efc9 code=0x7ffc0000
[  122.768738][   T29] audit: type=1326 audit(1761122788.346:15741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ee84efc9 code=0x7ffc0000
[  122.805147][ T7004] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.858959][ T7008] ==================================================================
[  122.867080][ T7008] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode
[  122.875083][ T7008] 
[  122.877429][ T7008] write to 0xffff88811b09a460 of 4 bytes by task 7013 on cpu 1:
[  122.885075][ T7008]  writeback_single_inode+0x150/0x3f0
[  122.890478][ T7008]  sync_inode_metadata+0x5b/0x90
[  122.895469][ T7008]  generic_buffers_fsync_noflush+0xd9/0x120
[  122.901402][ T7008]  ext4_sync_file+0x1ab/0x690
[  122.906121][ T7008]  vfs_fsync_range+0x10d/0x130
[  122.910993][ T7008]  ext4_buffered_write_iter+0x34f/0x3c0
[  122.916572][ T7008]  ext4_file_write_iter+0x387/0xf60
[  122.921810][ T7008]  iter_file_splice_write+0x666/0xa60
[  122.927230][ T7008]  direct_splice_actor+0x156/0x2a0
[  122.932365][ T7008]  splice_direct_to_actor+0x312/0x680
[  122.937751][ T7008]  do_splice_direct+0xda/0x150
[  122.942533][ T7008]  do_sendfile+0x380/0x650
[  122.946974][ T7008]  __x64_sys_sendfile64+0x105/0x150
[  122.952192][ T7008]  x64_sys_call+0x2bb4/0x3000
[  122.956881][ T7008]  do_syscall_64+0xd2/0x200
[  122.961405][ T7008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.967311][ T7008] 
[  122.969629][ T7008] read to 0xffff88811b09a460 of 4 bytes by task 7008 on cpu 0:
[  122.977171][ T7008]  vfs_fsync_range+0x9b/0x130
[  122.981853][ T7008]  ext4_buffered_write_iter+0x34f/0x3c0
[  122.987408][ T7008]  ext4_file_write_iter+0x387/0xf60
[  122.992618][ T7008]  iter_file_splice_write+0x666/0xa60
[  122.998001][ T7008]  direct_splice_actor+0x156/0x2a0
[  123.003126][ T7008]  splice_direct_to_actor+0x312/0x680
[  123.008513][ T7008]  do_splice_direct+0xda/0x150
[  123.013319][ T7008]  do_sendfile+0x380/0x650
[  123.017744][ T7008]  __x64_sys_sendfile64+0x105/0x150
[  123.022964][ T7008]  x64_sys_call+0x2bb4/0x3000
[  123.027666][ T7008]  do_syscall_64+0xd2/0x200
[  123.032184][ T7008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.038096][ T7008] 
[  123.040416][ T7008] value changed: 0x00000070 -> 0x00000002
[  123.046126][ T7008] 
[  123.048442][ T7008] Reported by Kernel Concurrency Sanitizer on:
[  123.054588][ T7008] CPU: 0 UID: 0 PID: 7008 Comm: syz.1.1168 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  123.065886][ T7008] Tainted: [W]=WARN
[  123.069691][ T7008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  123.079746][ T7008] ==================================================================
[  123.088921][ T7004] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.151036][ T1623] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.162825][ T1623] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.174819][ T1623] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.186594][ T2879] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.199437][ T7018] loop3: detected capacity change from 0 to 512
[  123.210058][ T7018] EXT4-fs (loop3): 1 orphan inode deleted