last executing test programs:

3.754614411s ago: executing program 1 (id=3950):
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000d00000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002110001180090001006c61737400000000480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xdc}}, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18)
syz_emit_ethernet(0x2416, &(0x7f0000000580)=ANY=[@ANYBLOB="e727dc07001f391e7dd7a2d786dd609907a623e02c03cb697a653e336f000000500000000000ff02000000000000000000000000000132"], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/19, 0x13}}], 0x1, 0x2000, 0x0)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r7, 0x0)

3.565139059s ago: executing program 4 (id=3952):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1d, 0x5, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="001d3f9099d8", 0x2, 0x44004, &(0x7f0000000100)={0xa, 0x4e21, 0xb, @loopback, 0xc5f}, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095", @ANYRES64=r4, @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000280)={0x8, 'veth0_to_hsr\x00', {'veth1_virt_wifi\x00'}, 0x7})
r6 = socket$tipc(0x1e, 0x5, 0x0)
listen(r6, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
accept4(r6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x1ffffffffffffdf4, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pipe2$9p(&(0x7f0000001900), 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x2000, 0x303, 0x300}})

3.498580585s ago: executing program 1 (id=3954):
r0 = socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018000000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001180)={0x4, [0x0, 0x1, 0x6, 0x1]}, &(0x7f00000011c0)=0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0})

2.810069141s ago: executing program 0 (id=3962):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xe7a06077b9aabc62}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20044080)

2.71164795s ago: executing program 4 (id=3964):
r0 = socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080200ffd00000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x24)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001180)={0x4, [0x0, 0x1, 0x6, 0x1]}, &(0x7f00000011c0)=0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x3, 0xfffffffe, 0x3}})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100})
syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

2.698957802s ago: executing program 0 (id=3966):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b)
preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
statx(0xffffffffffffff9c, &(0x7f0000000140)='./file5\x00', 0x1000, 0x169397c458a634f0, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
lchown(0x0, r2, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==")
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3)

2.590546952s ago: executing program 1 (id=3967):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='page_pool_state_hold\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

2.573380754s ago: executing program 1 (id=3968):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000180)={0x8, 'veth0_vlan\x00', {'ip6gre0\x00'}, 0x8})
r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3)
r5 = io_uring_setup(0x1b7f, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xbc, '\x00', 0x0, r5, 0x1, 0x2, 0x4}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000200)={0x0, 0x1, 0x8, 0x5})

2.389292132s ago: executing program 0 (id=3970):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000040)=ANY=[], 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

2.159750613s ago: executing program 2 (id=3973):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000400)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@resgid}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x81)
ioctl$FITRIM(r3, 0xc0185879, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379753200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0)
close(r1)
perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1)
r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f00000003c0)='./file0\x00', 0x5)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = io_uring_setup(0x491, &(0x7f0000000300)={0x0, 0x3a2b, 0x800, 0x2, 0x4000157})
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x4)
ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
read(r6, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000180)=0x4000000)
ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000080)=0x6100204)

1.834997735s ago: executing program 4 (id=3974):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000400)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@resgid}]}, 0xfe, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x81)
ioctl$FITRIM(r3, 0xc0185879, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0)
close(r1)
perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1)
r4 = open(0x0, 0x60840, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f00000003c0)='./file0\x00', 0x5)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = io_uring_setup(0x491, &(0x7f0000000300)={0x0, 0x3a2b, 0x800, 0x2, 0x4000157})
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x4)
ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
read(r6, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000180)=0x4000000)
ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000080)=0x6100204)

1.834276465s ago: executing program 0 (id=3975):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4090, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000010c0)=[{&(0x7f0000000080)=""/4089, 0xff9}], 0x1, 0x833, 0xffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wg1\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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")
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
r6 = inotify_init()
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x800482, &(0x7f0000000240)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000", @ANYBLOB="28448e5dde9b2c4778f494f15437", @ANYRESDEC], 0x3, 0x191, &(0x7f0000000640)="$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")
inotify_add_watch(r6, &(0x7f0000000340)='.\x00', 0xa50003d1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffa}]})
prlimit64(0x0, 0xe, 0x0, 0x0)
r8 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10)
faccessat2(0xffffffffffffffff, 0x0, 0x197, 0x1000)
getpeername$l2tp6(r0, &(0x7f0000001100)={0xa, 0x0, 0x0, @private0}, &(0x7f0000001140)=0x20)
getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8)

1.763674601s ago: executing program 3 (id=3976):
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000d00000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002110001180090001006c61737400000000480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xdc}}, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18)
syz_emit_ethernet(0x2416, &(0x7f0000000580)=ANY=[@ANYBLOB="e727dc07001f391e7dd7a2d786dd609907a623e02c03cb697a653e336f000000500000000000ff02000000000000000000000000000132"], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/19, 0x13}}], 0x1, 0x2000, 0x0)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r7, 0x0)

1.729885105s ago: executing program 1 (id=3977):
r0 = socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018000000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001180)={0x4, [0x0, 0x1, 0x6, 0x1]}, &(0x7f00000011c0)=0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0})

1.721470745s ago: executing program 3 (id=3978):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xe7a06077b9aabc62}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20044080)

1.696640928s ago: executing program 3 (id=3979):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='page_pool_state_hold\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

1.685553759s ago: executing program 0 (id=3980):
syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40)
syz_usb_disconnect(r0)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000500), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2007, &(0x7f0000000980)=<r6=>0x0)
r7 = eventfd2(0x6, 0x800)
io_getevents(r6, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0)
io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x7, 0x0, r5, 0x0, 0x0, 0x40, 0x0, 0x3, r7}])
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
kexec_load(0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x390, &(0x7f0000000c40)={{0x12, 0x1, 0x201, 0x1c, 0xff, 0x78, 0x40, 0x419, 0xaaf6, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37e, 0x3, 0x7f, 0x2, 0xe0, 0x7, [{{0x9, 0x4, 0x8f, 0x5, 0x2, 0xda, 0xa1, 0x9c, 0xc7, [@uac_control={{0xa, 0x24, 0x1, 0xe9ba, 0x80}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x329106197dfce77e, 0x2, 0x43, 0x3, 0x1}]}, @uac_control={{0xa, 0x24, 0x1, 0x3, 0x3}}], [{{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x1, 0x2, 0x5}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0xb5, 0x7b, 0xd, [@generic={0x102, 0x8, "8c0654945eca6998388f0d92d89616d994ab53230b0264686b898b4aeec808a928287685fd8f16a38c39123ee5a4f53b2bc11f88a6a5ef7c3f44004c758e762a8b32f732a8c46c4627ee3daf80786fde1db9ea257a59c49cdd5a2fdb8f379cdaccfda768e11edd51e0b9b970e46a788f7099387574eb32cb9b745ca00faa2a8eb557a9d518186acaac57cd8cacf87d1445816e66fc8bed6061be2a0de44be0335e960f4fdee3e3c5ccaa120af0af9a714775be60c1219b00544887571f7383cd26df8dfe0b25b3e960feaa95e7b4b3657357b3c1c58463d4a3eb29fac2e2ee5c7f542dac186a6f8e9b23cae2b77c36e9e1abf220575f9624f700a45ed438c653"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x4}]}}]}}, {{0x9, 0x4, 0x88, 0x3, 0x3, 0x74, 0x68, 0xba, 0x5, [@hid_hid={0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0x6b5}}, @hid_hid={0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0xeb6}}], [{{0x9, 0x5, 0x8, 0x10, 0x0, 0x7, 0xe3, 0x7}}, {{0x9, 0x5, 0xd, 0x1c, 0x3ff, 0x5, 0x0, 0x4, [@generic={0x97, 0x4, "577957cbafb7ef65d168efc9e39a6a3623ee6abee907efcf08118a5eec97452d4bdc007fda86249b0535a2218cf5226d3cbb398a89196898e4fa263adf001d7f21bf28bfe4f47331211939c648f36cf2b75224284dd9144d31dbc19687e904f293957c2a8d57925b5c1b549d77ef08618bb368b8fcc93fb20cc2220162eff4da5de3fc08e9a35efa7bfc4677643ba7c25db7ceaf94"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x4}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xe, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf5, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x3}]}}]}}, {{0x9, 0x4, 0x8c, 0x7, 0x4, 0x51, 0xe2, 0xd6, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x73}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x304, 0x4, 0x6, 0x5}, @extension_unit={0x9, 0x24, 0x8, 0x5, 0x2, 0x2, "99c4"}]}], [{{0x9, 0x5, 0xd, 0xe00ca21144884fc0, 0x20, 0x5, 0x6a, 0x9}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x11, 0x9d, 0x8, [@generic={0x102, 0x3, "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"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x3ff, 0xfe, 0x40, 0x72, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xbc}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x8, 0x4}}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0x1, 0x6, 0x9, 0x20, 0x9}, 0x5c, &(0x7f0000000340)={0x5, 0xf, 0x5c, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x8, 0xd, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "9cf6f473c3b3c9ef50e138835cfb1d07"}, @generic={0x1e, 0x10, 0x4, "c64da49056707295b2a903153eb62b1e4e12455a73cfd806f64381"}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x1000, 0xf000, 0x3ff, [0x5f50, 0xf]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x2, 0x5, 0x359d}]}})

1.675039819s ago: executing program 3 (id=3981):
syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000001580)="$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")

1.650668112s ago: executing program 3 (id=3982):
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0xfffffffffffffecf}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000080000000000000003000000180600000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)

1.509151975s ago: executing program 4 (id=3983):
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0xfffffffffffffecf}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000080000000000000003000000180600000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)

1.088579486s ago: executing program 2 (id=3984):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
getpgrp(0xffffffffffffffff)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff})
r4 = syz_io_uring_setup(0x3d96, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
fremovexattr(r2, &(0x7f0000000200)=@random={'btrfs.', '-\x00'})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x20080)
syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x20000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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")
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x95c5}, @in={0x2, 0x4e20, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)
ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ee, &(0x7f0000000180)=0x5)
truncate(&(0x7f0000000080)='./file1\x00', 0x400000000000001)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee00, 0x1000)
setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100020062b2d8ab0400000000000000100006000000000020"], 0x24, 0x3)

484.964714ms ago: executing program 2 (id=3985):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0xf0, 0xffffffff, 0x310, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x33, @ipv4=@empty, @ipv4=@rand_addr=0x64010102}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x379)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.events\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x0, 0x0, 0x7f})
fcntl$lock(r3, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x4})
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r7=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
write$cgroup_int(r3, &(0x7f0000000140)=0x6, 0x12)
r8 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000200)='.log\x00', 0x40, 0x8)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={<r9=>0xffffffffffffffff}, 0x2, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000740)={0x15, 0x110, 0xfa00, {r9, 0x9, 0x0, 0x0, 0x0, @ib={0x1b, 0x8001, 0x9, {"c30ef4039d847fadc16454f4a635d4c4"}, 0x5, 0x8000, 0xc1f5}, @in6={0xa, 0x4e21, 0x10, @private1, 0x4}}}, 0x118)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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")
r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1)
r11 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r10, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r11}, './file1\x00'})
ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f00000005c0))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MIGRATE(r10, 0x6609)

299.727821ms ago: executing program 0 (id=3986):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

299.069891ms ago: executing program 1 (id=3987):
r0 = socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080200ffd00000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x24)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001180)={0x4, [0x0, 0x1, 0x6, 0x1]}, &(0x7f00000011c0)=0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x3, 0xfffffffe, 0x3}})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$TIOCL_BLANKSCREEN(r5, 0x4b67, &(0x7f0000000180))

215.880659ms ago: executing program 3 (id=3988):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000180)={0x8, 'veth0_vlan\x00', {'ip6gre0\x00'}, 0x8})
r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3)
r5 = io_uring_setup(0x1b7f, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xbc, '\x00', 0x0, r5, 0x1, 0x2, 0x4}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000200)={0x0, 0x1, 0x8, 0x5})

215.379749ms ago: executing program 2 (id=3989):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000001c80)={[{@barrier_val}, {@resuid}, {@errors_remount}, {@usrjquota}]}, 0x1, 0x7b8, &(0x7f0000000980)="$eJzs3c1rXFUbAPDnTj6b9m3zwgtv66bBhRZKJ22NrYJgxIUIFgq6tg2TaYiZZEpmUpqQhUUEQQQtLgTduPaj7tyKrv0b3IhIS9W0WHEhI3c+kkkmH5M2H23z+8FNzpl775zz3DNz7rlzDzMB7FkD6Z9MxJGI+DCJOFR/PImIrmqqM2K4tt29hflcuiRRqbz+e1Ld5u7CfC6a9kntr2cOR8T370Ycz7SWW5qdmxgpFLoa+cHy5OXB0uzcifHJkbH8WH7qzKmhodNnnz17Zuti/fPHuQO3Pnrl6a+H/37n/zc++CGJ4ThQX9ccx1YZiIH6MelKD+EyL291Ybss2WB95w7Vg81J35od9fY5EoeiQ0sBwGMvPf9XAIA9JnH+B4A9pvE5wN2F+Vxjaf58YN+ufCqxc26/FBG9tfgb9zdrazrr9+x6q/dB++4m0RmLtys3vN/VroGI+OzbN79Ml9im+5AAq3n7WkRc7B9o7f+TljkLm3WyjW0GVuT1f7BzvkvHP8+tNv7LLI5/YnH8k3YLtfkhPau8d+/HQER3c771/Z+5ueqOL25B4fXx3wu1uW1poE3jv8VJa/0d9dx/0szRiBgv5NO+7WBEHIuunkvjhfypdco4duefO2utax7//XH9rS/S8tP/S1tkbnb2LN9ndKQ88iAxN7t9LeKJzqW5ffda+v/e6lh3sf2jsTbifPMT3VrxxEeXkq8+/96na5Wfxp/G21ha499elc8jnorV429I1p2fOJg2/8na39XL+ObnT/rWKr+5/dMlLb9xLbCG7vuPtlXa/n3rx9+fLM3XzE+XtrL0duJf/fXfnbxRTTcOxtWRcnn6VER38lrr46eX9m3kG9un8dciXRl/Zt3Xf3oleLHNGDtv/fZVxJMH7y/+RVt1yblMGv/optp/84kb9yY61iq/vfYfqqaO1R9pp/9rt4IPcuwAAAAAAAAAAAAAAAAAAAAAAAAAoF2ZiDgQSSa7mM5kstnab3j/L/oyhWKpfPxScWZqNKq/ld0fXZnGV10equWTxvef9jflT6/IPxMR/42Ij3v2VfPZXLEwutvBAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/jV+/z/1a89u1w4A2Da9G25xJ78sW6lUKttYHwBg+218/gcAHjfrnP/37WQ9AICd4/ofAPYe538A2Huc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhm58+dS5fKXwvzuTQ/emV2ZqJ45cRovjSRnZzJZXPF6cvZsWJxrJDP5oqTGz1foVi8PBRTM1cHy/lSebA0O3dhsjgzVb4wPjkylr+Q79qRqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgc0qzcxMjhUJ++rFIvB8RD0E1tiORxENRjV1J/HLip8PrbXN9g5fx8EMRxSOW2O2eCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODR8G8AAAD//21CJgc=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1dc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000480)={0x8, 0xf5, 0x5, 0x2})

186.178602ms ago: executing program 4 (id=3990):
socket$inet6(0xa, 0x1, 0x8010000000000084)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x11)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7c, 0xe)
connect$inet(0xffffffffffffffff, &(0x7f0000001bc0)={0x2, 0x4e22, @rand_addr=0x1000}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000380)="c7", 0x1)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200088d2, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r3, 0x0, 0x0)

160.047894ms ago: executing program 4 (id=3991):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4090, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000010c0)=[{&(0x7f0000000080)=""/4089, 0xff9}], 0x1, 0x833, 0xffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x64)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wg1\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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")
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
r6 = inotify_init()
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x800482, &(0x7f0000000240)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000", @ANYBLOB="28448e5dde9b2c4778f494f15437", @ANYRESDEC], 0x3, 0x191, &(0x7f0000000640)="$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")
inotify_add_watch(r6, &(0x7f0000000340)='.\x00', 0xa50003d1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffa}]})
prlimit64(0x0, 0xe, 0x0, 0x0)
r8 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10)
faccessat2(0xffffffffffffffff, 0x0, 0x197, 0x1000)
getpeername$l2tp6(r0, &(0x7f0000001100)={0xa, 0x0, 0x0, @private0}, &(0x7f0000001140)=0x20)
getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8)

111.902959ms ago: executing program 2 (id=3992):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='page_pool_state_hold\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

0s ago: executing program 2 (id=3993):
open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f2e)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="02000000020001000003be8c5ee17688", 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = syz_clone(0x20040200, 0x0, 0x5, 0x0, 0x0, 0x0)
r6 = syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=<r7=>0x0, &(0x7f0000000280))
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4)
io_uring_enter(r6, 0x1e76, 0xf728, 0x4, 0x0, 0x0)
ptrace(0x4206, r5)
ptrace(0x8, r5)
ptrace$setsig(0x4207, r5, 0x200000000000005, 0x0)
dup(r4)
r8 = getegid()
semget$private(0x0, 0x1, 0x180)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r10 = dup(r9)
openat$cgroup_ro(r10, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x275a, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r10, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r8}}, '\x00'})

kernel console output (not intermixed with test programs):

ode=0x7ffc0000
[  280.010686][   T29] audit: type=1326 audit(1766644014.103:7617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13180 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  280.034332][   T29] audit: type=1326 audit(1766644014.103:7618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13180 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  280.057948][   T29] audit: type=1326 audit(1766644014.103:7619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13180 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  280.129370][   T29] audit: type=1326 audit(1766644014.153:7620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13180 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  280.152941][   T29] audit: type=1326 audit(1766644014.153:7621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13180 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  280.176540][   T29] audit: type=1326 audit(1766644014.153:7622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13180 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  280.200193][   T29] audit: type=1326 audit(1766644014.153:7623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13180 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  280.223820][   T29] audit: type=1326 audit(1766644014.173:7624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13180 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  280.288375][T13192] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  280.567791][T13206] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3265'.
[  280.659774][T13196] loop4: detected capacity change from 0 to 512
[  280.717413][T13196] journal_path: Non-blockdev passed as './file1'
[  280.723892][T13196] EXT4-fs: error: could not find journal device path
[  280.734431][T13206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=13206 comm=syz.2.3265
[  280.819711][T13196] loop4: detected capacity change from 0 to 2048
[  280.899173][T13207] lo speed is unknown, defaulting to 1000
[  280.938582][T13196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.092907][T13207] chnl_net:caif_netlink_parms(): no params data found
[  281.109104][T12975] hid_parser_main: 218 callbacks suppressed
[  281.109125][T12975] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  281.147014][T13220] lo speed is unknown, defaulting to 1000
[  281.157455][T12975] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  281.208101][T13207] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.215206][T13207] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.237320][T13207] bridge_slave_0: entered allmulticast mode
[  281.244218][T13207] bridge_slave_0: entered promiscuous mode
[  281.259160][T13207] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.266433][T13207] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.291766][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.314706][T13207] bridge_slave_1: entered allmulticast mode
[  281.328619][T13207] bridge_slave_1: entered promiscuous mode
[  281.359281][T13207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  281.373088][T13207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  281.543093][T13241] netlink: 'syz.4.3270': attribute type 29 has an invalid length.
[  282.001609][T13207] team0: Port device team_slave_0 added
[  282.021415][T13207] team0: Port device team_slave_1 added
[  282.070383][T13207] batman_adv: batadv0: Adding interface: batadv_slave_0
[  282.077409][T13207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  282.103429][T13207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  282.147950][T13207] batman_adv: batadv0: Adding interface: batadv_slave_1
[  282.155006][T13207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  282.181024][T13207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  282.221082][T13247] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  282.250428][T13207] hsr_slave_0: entered promiscuous mode
[  282.268296][T13207] hsr_slave_1: entered promiscuous mode
[  282.274396][T13207] debugfs: 'hsr0' already exists in 'hsr'
[  282.280224][T13207] Cannot create hsr debugfs directory
[  282.397415][T13207] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.463843][T13207] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.503105][T13253] loop4: detected capacity change from 0 to 2048
[  282.511801][T13207] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.548203][T13253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.571820][T13207] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.726732][T13267] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.3278'.
[  282.747301][T13267] net_ratelimit: 96 callbacks suppressed
[  282.747321][T13267] netlink: zone id is out of range
[  282.758276][T13267] netlink: zone id is out of range
[  282.777269][T13267] netlink: zone id is out of range
[  282.782527][T13267] netlink: zone id is out of range
[  282.787690][T13267] netlink: zone id is out of range
[  282.792850][T13267] netlink: zone id is out of range
[  282.794449][T13207] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  282.798016][T13267] netlink: zone id is out of range
[  282.811863][T13207] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  282.835283][T13207] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  282.874508][T13207] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  282.915847][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.927248][T13267] netlink: zone id is out of range
[  282.932478][T13267] netlink: zone id is out of range
[  282.937860][T13267] netlink: zone id is out of range
[  282.966246][T13277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=13277 comm=syz.0.3278
[  282.989526][T13207] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.023064][T13207] 8021q: adding VLAN 0 to HW filter on device team0
[  283.077226][T13207] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  283.087823][T13207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  283.145476][T12335] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.152636][T12335] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.163453][T13276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.175705][T13276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.212359][T12335] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.219581][T12335] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.290851][T13279] can0: slcan on ttyS3.
[  283.347345][T13278] can0 (unregistered): slcan off ttyS3.
[  283.483283][T13207] 8021q: adding VLAN 0 to HW filter on device batadv0
[  283.515757][T13291] can0: slcan on ttyS3.
[  283.567220][T13290] can0 (unregistered): slcan off ttyS3.
[  283.614347][T13207] veth0_vlan: entered promiscuous mode
[  283.632787][T13207] veth1_vlan: entered promiscuous mode
[  283.730214][T13207] veth0_macvtap: entered promiscuous mode
[  283.757522][T13207] veth1_macvtap: entered promiscuous mode
[  283.798967][T13207] batman_adv: batadv0: Interface activated: batadv_slave_0
[  283.824393][T13207] batman_adv: batadv0: Interface activated: batadv_slave_1
[  283.852316][T12331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.863626][T12331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.907255][T12331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.918823][T13310] can0: slcan on ttyS3.
[  283.947299][T13308] can0 (unregistered): slcan off ttyS3.
[  283.972791][T12331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.999477][T13317] Cannot find set identified by id 0 to match
[  284.024183][T13317] loop4: detected capacity change from 0 to 512
[  284.049482][T13320] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3264'.
[  284.076094][T13320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3264'.
[  284.126196][T13319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.144565][T13319] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.177663][T13317] EXT4-fs (loop4): orphan cleanup on readonly fs
[  284.227447][T13317] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  284.247914][T13317] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  284.251909][T13323] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3291'.
[  284.255009][T13317] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #13: comm syz.4.3289: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  284.287420][T13317] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3289: couldn't read orphan inode 13 (err -117)
[  284.319495][T13317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  284.379325][T13323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=13323 comm=syz.3.3291
[  284.485962][T13326] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  284.519701][T13326] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  284.634793][T13332] can0: slcan on ttyS3.
[  284.708804][T13330] can0 (unregistered): slcan off ttyS3.
[  284.729012][T13334] can0: slcan on ttyS3.
[  284.754238][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.796003][T13339] loop4: detected capacity change from 0 to 2048
[  284.812356][T13339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.827182][T13334] can0 (unregistered): slcan off ttyS3.
[  284.975191][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.990971][   T29] kauditd_printk_skb: 123 callbacks suppressed
[  284.990987][   T29] audit: type=1326 audit(1766644019.103:7748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13349 comm="syz.2.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  285.022843][   T29] audit: type=1326 audit(1766644019.133:7749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13349 comm="syz.2.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  285.046576][   T29] audit: type=1326 audit(1766644019.133:7750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13349 comm="syz.2.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  285.070460][   T29] audit: type=1326 audit(1766644019.133:7751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13349 comm="syz.2.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  285.094087][   T29] audit: type=1326 audit(1766644019.133:7752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13349 comm="syz.2.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  285.117602][   T29] audit: type=1326 audit(1766644019.133:7753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13349 comm="syz.2.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  285.141124][   T29] audit: type=1326 audit(1766644019.133:7754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13349 comm="syz.2.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  285.164648][   T29] audit: type=1326 audit(1766644019.133:7755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13349 comm="syz.2.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  285.188354][   T29] audit: type=1326 audit(1766644019.133:7756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13349 comm="syz.2.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  285.211894][   T29] audit: type=1326 audit(1766644019.133:7757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13349 comm="syz.2.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  285.265741][T13358] loop4: detected capacity change from 0 to 512
[  285.287801][T13358] EXT4-fs (loop4): too many log groups per flexible block group
[  285.387517][T13358] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  285.395003][T13358] EXT4-fs (loop4): mount failed
[  285.504945][T13358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3301'.
[  285.571377][T13366] loop4: detected capacity change from 0 to 256
[  285.740724][T13368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.771768][T13368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.844280][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3304'.
[  285.973433][T13375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13375 comm=syz.0.3306
[  286.024640][T13379] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  286.072805][T13383] can0: slcan on ttyS3.
[  286.107278][T13381] can0 (unregistered): slcan off ttyS3.
[  286.134999][T13384] can0: slcan on ttyS3.
[  286.187427][T13384] can0 (unregistered): slcan off ttyS3.
[  286.216449][T13391] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  286.244056][T13394] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3314'.
[  286.275847][T13398] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  286.321065][T13401] SELinux:  Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped).
[  286.402357][T13406] netlink: 'syz.4.3327': attribute type 29 has an invalid length.
[  286.487110][T13408] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.3317'.
[  286.587697][T13409] veth0_to_team: entered promiscuous mode
[  286.901473][T13414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=13414 comm=syz.0.3317
[  287.053072][T13416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3319'.
[  287.067652][T13418] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3320'.
[  287.108910][T13420] can0: slcan on ttyS3.
[  287.185295][T13424] netlink: 'syz.4.3322': attribute type 29 has an invalid length.
[  287.247396][T13429] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.3324'.
[  287.262560][T13431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.277230][T13427] can0 (unregistered): slcan off ttyS3.
[  287.343016][T13435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=13435 comm=syz.0.3324
[  287.357732][T13431] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.377402][T13434] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  287.378809][T13437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.424002][T13437] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.811057][T13451] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3332'.
[  287.820459][T13451] net_ratelimit: 202 callbacks suppressed
[  287.820478][T13451] netlink: zone id is out of range
[  287.831387][T13451] netlink: zone id is out of range
[  287.836689][T13451] netlink: zone id is out of range
[  287.841861][T13451] netlink: zone id is out of range
[  287.847002][T13451] netlink: zone id is out of range
[  287.852181][T13451] netlink: zone id is out of range
[  287.857403][T13451] netlink: zone id is out of range
[  287.862859][T13451] netlink: zone id is out of range
[  287.868027][T13451] netlink: zone id is out of range
[  287.873168][T13451] netlink: zone id is out of range
[  287.930560][T13451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=13451 comm=syz.1.3332
[  287.992511][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3333'.
[  288.101990][T13465] can0: slcan on ttyS3.
[  288.267135][T13465] can0 (unregistered): slcan off ttyS3.
[  288.579952][T13481] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  288.910378][T13491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.935995][T13491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.952186][T13495] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.3346'.
[  289.028968][T13497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=13497 comm=syz.0.3346
[  289.092761][T13502] netlink: 'syz.3.3347': attribute type 22 has an invalid length.
[  289.101161][T13502] binfmt_misc: register: failed to install interpreter file ./file2
[  289.122540][T13499] loop4: detected capacity change from 0 to 512
[  289.151624][T13499] EXT4-fs (loop4): too many log groups per flexible block group
[  289.159604][T13499] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  289.166429][T13499] EXT4-fs (loop4): mount failed
[  289.178545][T13499] loop4: detected capacity change from 0 to 256
[  289.241123][T13514] FAULT_INJECTION: forcing a failure.
[  289.241123][T13514] name failslab, interval 1, probability 0, space 0, times 0
[  289.253880][T13514] CPU: 0 UID: 0 PID: 13514 Comm: syz.3.3351 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  289.253913][T13514] Tainted: [W]=WARN
[  289.253921][T13514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  289.253964][T13514] Call Trace:
[  289.253971][T13514]  <TASK>
[  289.253981][T13514]  __dump_stack+0x1d/0x30
[  289.254008][T13514]  dump_stack_lvl+0x95/0xd0
[  289.254030][T13514]  dump_stack+0x15/0x1b
[  289.254049][T13514]  should_fail_ex+0x265/0x280
[  289.254152][T13514]  should_failslab+0x8c/0xb0
[  289.254179][T13514]  kmem_cache_alloc_noprof+0x69/0x4b0
[  289.254283][T13514]  ? audit_log_start+0x342/0x720
[  289.254322][T13514]  audit_log_start+0x342/0x720
[  289.254346][T13514]  ? filename_lookup+0x25d/0x340
[  289.254398][T13514]  audit_seccomp+0x48/0x100
[  289.254433][T13514]  ? __seccomp_filter+0x832/0x1260
[  289.254468][T13514]  __seccomp_filter+0x843/0x1260
[  289.254584][T13514]  ? kmem_cache_free+0xe3/0x3a0
[  289.254611][T13514]  ? user_path_at+0xbf/0x130
[  289.254647][T13514]  __secure_computing+0x82/0x150
[  289.254753][T13514]  syscall_trace_enter+0xcf/0x1e0
[  289.254787][T13514]  do_syscall_64+0xa4/0x2b0
[  289.254880][T13514]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.254908][T13514] RIP: 0033:0x7ff92486e15c
[  289.254924][T13514] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  289.254943][T13514] RSP: 002b:00007ff9232ae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  289.254967][T13514] RAX: ffffffffffffffda RBX: 00007ff924ac6090 RCX: 00007ff92486e15c
[  289.255050][T13514] RDX: 000000000000000f RSI: 00007ff9232ae0a0 RDI: 0000000000000005
[  289.255065][T13514] RBP: 00007ff9232ae090 R08: 0000000000000000 R09: 0000000000000000
[  289.255082][T13514] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  289.255155][T13514] R13: 00007ff924ac6128 R14: 00007ff924ac6090 R15: 00007ffd04d399f8
[  289.255220][T13514]  </TASK>
[  289.484851][T13518] can0: slcan on ttyS3.
[  289.530154][T13508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.538719][T13508] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.539894][T13517] can0 (unregistered): slcan off ttyS3.
[  289.805743][T13519] loop4: detected capacity change from 0 to 512
[  289.834652][T13519] journal_path: Non-blockdev passed as './file1'
[  289.841073][T13519] EXT4-fs: error: could not find journal device path
[  289.998476][   T29] kauditd_printk_skb: 557 callbacks suppressed
[  289.998489][   T29] audit: type=1326 audit(1766644024.113:8313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13507 comm="syz.3.3351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff9248a2005 code=0x7ffc0000
[  290.053375][T13519] loop4: detected capacity change from 0 to 2048
[  290.064802][   T29] audit: type=1326 audit(1766644024.143:8315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13507 comm="syz.3.3351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff92486f749 code=0x7ffc0000
[  290.088506][   T29] audit: type=1326 audit(1766644024.143:8314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13507 comm="syz.3.3351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9248665e7 code=0x7ffc0000
[  290.112101][   T29] audit: type=1326 audit(1766644024.143:8316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13507 comm="syz.3.3351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff92480b829 code=0x7ffc0000
[  290.135535][   T29] audit: type=1326 audit(1766644024.143:8317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13507 comm="syz.3.3351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9248665e7 code=0x7ffc0000
[  290.158978][   T29] audit: type=1326 audit(1766644024.143:8318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13507 comm="syz.3.3351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff92480b829 code=0x7ffc0000
[  290.182441][   T29] audit: type=1326 audit(1766644024.143:8319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13507 comm="syz.3.3351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92486f749 code=0x7ffc0000
[  290.205929][   T29] audit: type=1326 audit(1766644024.143:8320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13507 comm="syz.3.3351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff92486f749 code=0x7ffc0000
[  290.379169][T13531] netlink: 'syz.3.3356': attribute type 29 has an invalid length.
[  290.540593][T13519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.672196][T13547] __nla_validate_parse: 3 callbacks suppressed
[  290.672218][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3362'.
[  290.698502][   T29] audit: type=1326 audit(1766644024.813:8321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13546 comm="syz.2.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  290.736213][   T29] audit: type=1326 audit(1766644024.843:8322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13546 comm="syz.2.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  290.761167][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.871156][T13556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3365'.
[  290.940656][T13560] can0: slcan on ttyS3.
[  290.979460][T13563] netlink: 'syz.0.3368': attribute type 29 has an invalid length.
[  291.037168][T13559] can0 (unregistered): slcan off ttyS3.
[  291.076263][T13568] loop4: detected capacity change from 0 to 512
[  291.177660][T13568] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  291.490779][T13572] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  291.713662][T13568] EXT4-fs (loop4): 1 truncate cleaned up
[  291.727496][T13568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.932028][T13581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.064816][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.114817][T13581] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  292.521926][T13602] loop4: detected capacity change from 0 to 512
[  292.538551][T13602] EXT4-fs (loop4): too many log groups per flexible block group
[  292.546298][T13602] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  292.553262][T13602] EXT4-fs (loop4): mount failed
[  292.560753][T13602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3376'.
[  292.571919][T13602] loop4: detected capacity change from 0 to 256
[  292.644025][T13611] loop4: detected capacity change from 0 to 512
[  292.651617][T13611] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  292.665277][T13611] EXT4-fs (loop4): 1 truncate cleaned up
[  292.671840][T13611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.691154][T13611] can0: slcan on ttyS3.
[  292.721764][T13616] 9p: Bad value for 'source'
[  292.737174][T13610] can0 (unregistered): slcan off ttyS3.
[  292.757418][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.808418][T13625] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  292.955958][T13634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3385'.
[  292.965008][T13634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3385'.
[  293.489339][T13647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.541092][T13647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.575534][T13636] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3387'.
[  293.798439][T13663] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  293.811990][T13649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.827185][T13649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.451882][T13696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.488282][T13700] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  295.526032][T13696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.562207][T13702] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  296.176030][T13715] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3412'.
[  296.215850][T13715] net_ratelimit: 96 callbacks suppressed
[  296.215888][T13715] netlink: zone id is out of range
[  296.226801][T13715] netlink: zone id is out of range
[  296.279918][T13715] netlink: zone id is out of range
[  296.285168][T13715] netlink: zone id is out of range
[  296.290431][T13715] netlink: zone id is out of range
[  296.295564][T13715] netlink: zone id is out of range
[  296.300715][T13715] netlink: zone id is out of range
[  296.391816][T13719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=13719 comm=syz.3.3412
[  296.405686][   T29] kauditd_printk_skb: 825 callbacks suppressed
[  296.405701][   T29] audit: type=1326 audit(1766644030.523:9148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13720 comm="syz.2.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  296.426054][T13715] netlink: zone id is out of range
[  296.440705][T13715] netlink: zone id is out of range
[  296.445841][T13715] netlink: zone id is out of range
[  296.465539][T13712] loop4: detected capacity change from 0 to 512
[  296.501765][   T29] audit: type=1326 audit(1766644030.553:9149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13720 comm="syz.2.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  296.525620][   T29] audit: type=1326 audit(1766644030.563:9150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13720 comm="syz.2.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  296.549225][   T29] audit: type=1326 audit(1766644030.563:9151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13720 comm="syz.2.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  296.573348][   T29] audit: type=1326 audit(1766644030.563:9152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13720 comm="syz.2.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  296.597253][   T29] audit: type=1326 audit(1766644030.563:9153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13720 comm="syz.2.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  296.620892][   T29] audit: type=1326 audit(1766644030.563:9154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13720 comm="syz.2.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  296.644510][   T29] audit: type=1326 audit(1766644030.563:9155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13720 comm="syz.2.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  296.668073][   T29] audit: type=1326 audit(1766644030.563:9156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13720 comm="syz.2.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  296.675923][T13712] journal_path: Non-blockdev passed as './file1'
[  296.691618][   T29] audit: type=1326 audit(1766644030.563:9157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13720 comm="syz.2.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  296.698011][T13712] EXT4-fs: error: could not find journal device path
[  296.788551][T13728] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3415'.
[  296.815161][T13734] FAULT_INJECTION: forcing a failure.
[  296.815161][T13734] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  296.828325][T13734] CPU: 0 UID: 0 PID: 13734 Comm: syz.2.3417 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  296.828377][T13734] Tainted: [W]=WARN
[  296.828385][T13734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  296.828458][T13734] Call Trace:
[  296.828466][T13734]  <TASK>
[  296.828474][T13734]  __dump_stack+0x1d/0x30
[  296.828503][T13734]  dump_stack_lvl+0x95/0xd0
[  296.828548][T13734]  dump_stack+0x15/0x1b
[  296.828573][T13734]  should_fail_ex+0x265/0x280
[  296.828599][T13734]  should_fail+0xb/0x20
[  296.828692][T13734]  should_fail_usercopy+0x1a/0x20
[  296.828723][T13734]  _copy_from_user+0x1c/0xb0
[  296.828752][T13734]  kstrtouint_from_user+0x69/0xf0
[  296.828826][T13734]  ? 0xffffffff81000000
[  296.828840][T13734]  ? selinux_file_permission+0x1e2/0x320
[  296.828872][T13734]  proc_fail_nth_write+0x50/0x160
[  296.828908][T13734]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  296.829069][T13734]  vfs_write+0x269/0x960
[  296.829107][T13734]  ? vfs_read+0x4e6/0x770
[  296.829128][T13734]  ? __rcu_read_unlock+0x4f/0x70
[  296.829153][T13734]  ? __fget_files+0x184/0x1c0
[  296.829180][T13734]  ? mutex_lock+0x58/0x90
[  296.829287][T13734]  ksys_write+0xda/0x1a0
[  296.829308][T13734]  __x64_sys_write+0x40/0x50
[  296.829378][T13734]  x64_sys_call+0x2847/0x3000
[  296.829408][T13734]  do_syscall_64+0xca/0x2b0
[  296.829473][T13734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.829495][T13734] RIP: 0033:0x7ff585e4e1ff
[  296.829509][T13734] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  296.829531][T13734] RSP: 002b:00007ff5848b7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  296.829599][T13734] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff585e4e1ff
[  296.829687][T13734] RDX: 0000000000000001 RSI: 00007ff5848b70a0 RDI: 0000000000000003
[  296.829699][T13734] RBP: 00007ff5848b7090 R08: 0000000000000000 R09: 0000000000000000
[  296.829717][T13734] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  296.829733][T13734] R13: 00007ff5860a6038 R14: 00007ff5860a5fa0 R15: 00007ffdfece5288
[  296.829757][T13734]  </TASK>
[  297.075604][T13712] loop4: detected capacity change from 0 to 2048
[  297.110047][T13712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.493356][T13744] FAULT_INJECTION: forcing a failure.
[  297.493356][T13744] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  297.506520][T13744] CPU: 1 UID: 0 PID: 13744 Comm: syz.2.3419 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  297.506554][T13744] Tainted: [W]=WARN
[  297.506561][T13744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  297.506575][T13744] Call Trace:
[  297.506581][T13744]  <TASK>
[  297.506589][T13744]  __dump_stack+0x1d/0x30
[  297.506676][T13744]  dump_stack_lvl+0x95/0xd0
[  297.506701][T13744]  dump_stack+0x15/0x1b
[  297.506734][T13744]  should_fail_ex+0x265/0x280
[  297.506758][T13744]  should_fail+0xb/0x20
[  297.506781][T13744]  should_fail_usercopy+0x1a/0x20
[  297.506816][T13744]  _copy_to_iter+0xd2/0xe70
[  297.506847][T13744]  ? chacha_block_generic+0x218/0x240
[  297.506905][T13744]  get_random_bytes_user+0x12d/0x290
[  297.507021][T13744]  ? import_ubuf+0xe8/0x120
[  297.507113][T13744]  __x64_sys_getrandom+0xcf/0x1a0
[  297.507156][T13744]  x64_sys_call+0x1beb/0x3000
[  297.507251][T13744]  do_syscall_64+0xca/0x2b0
[  297.507284][T13744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.507304][T13744] RIP: 0033:0x7ff585e4f749
[  297.507363][T13744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  297.507384][T13744] RSP: 002b:00007ff584896038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e
[  297.507404][T13744] RAX: ffffffffffffffda RBX: 00007ff5860a6090 RCX: 00007ff585e4f749
[  297.507415][T13744] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240
[  297.507427][T13744] RBP: 00007ff584896090 R08: 0000000000000000 R09: 0000000000000000
[  297.507439][T13744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  297.507516][T13744] R13: 00007ff5860a6128 R14: 00007ff5860a6090 R15: 00007ffdfece5288
[  297.507539][T13744]  </TASK>
[  298.006527][T13749] can0: slcan on ttyS3.
[  298.044838][T13746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.063549][T13746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.108381][T13750] can0 (unregistered): slcan off ttyS3.
[  298.307824][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.522910][T13758] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3424'.
[  298.627767][T13759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=13759 comm=syz.3.3424
[  299.285683][T13771] loop4: detected capacity change from 0 to 2048
[  299.317957][T13771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  299.703175][T13803] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.710532][T13803] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.918800][T13803] bridge0: entered allmulticast mode
[  300.019156][T13806] bridge_slave_1: left allmulticast mode
[  300.024951][T13806] bridge_slave_1: left promiscuous mode
[  300.030702][T13806] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.052069][T13806] bridge_slave_0: left allmulticast mode
[  300.057825][T13806] bridge_slave_0: left promiscuous mode
[  300.063603][T13806] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.079619][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.129541][T13799] lo speed is unknown, defaulting to 1000
[  300.141391][T13814] 9pnet_fd: Insufficient options for proto=fd
[  300.308807][T13810] loop4: detected capacity change from 0 to 512
[  300.324829][T13832] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  300.357568][T13810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.430977][T13833] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3446'.
[  300.451383][T13842] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3451'.
[  300.476973][T13810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.485508][T13810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.670790][T13851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=13851 comm=syz.2.3451
[  301.211527][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.279754][T13872] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  301.558794][T13888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3464'.
[  301.979187][T13896] can0: slcan on ttyS3.
[  302.077137][T13896] can0 (unregistered): slcan off ttyS3.
[  302.132798][   T29] kauditd_printk_skb: 203 callbacks suppressed
[  302.132815][   T29] audit: type=1326 audit(1766644036.243:9361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13900 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  302.166227][T13905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3470'.
[  302.201796][T13904] netlink: 4 bytes leftover after parsing attributes in process `kmem_cache_free'.
[  302.215907][T13904] veth2: entered promiscuous mode
[  302.221037][T13904] veth2: entered allmulticast mode
[  302.231498][   T29] audit: type=1400 audit(1766644036.273:9362): avc:  denied  { watch watch_reads } for  pid=13903 comm="syz.3.3470" path="/145/file0" dev="tmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  302.255576][   T29] audit: type=1326 audit(1766644036.303:9363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13900 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  302.279138][   T29] audit: type=1326 audit(1766644036.303:9364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13900 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  302.302661][   T29] audit: type=1326 audit(1766644036.303:9365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13900 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  302.326109][   T29] audit: type=1326 audit(1766644036.303:9366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13900 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  302.326926][T13911] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  302.349651][   T29] audit: type=1326 audit(1766644036.303:9367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13900 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  302.379690][   T29] audit: type=1326 audit(1766644036.303:9368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13900 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  302.403184][   T29] audit: type=1326 audit(1766644036.303:9369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13900 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff585e51667 code=0x7ffc0000
[  302.426629][   T29] audit: type=1326 audit(1766644036.303:9370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13900 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff585e515dc code=0x7ffc0000
[  302.453887][T13902] loop4: detected capacity change from 0 to 512
[  302.460222][T13912] veth0_to_bridge: entered promiscuous mode
[  302.509075][T13910] lo speed is unknown, defaulting to 1000
[  302.594085][T13902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  302.774681][T13925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  302.783515][T13925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  302.853542][T13900] veth0_to_bridge: left promiscuous mode
[  303.013586][T13930] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3477'.
[  303.090298][T13930] net_ratelimit: 149 callbacks suppressed
[  303.090320][T13930] netlink: zone id is out of range
[  303.101470][T13930] netlink: zone id is out of range
[  303.150639][T13934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=13934 comm=syz.2.3477
[  303.174228][T13930] netlink: zone id is out of range
[  303.179432][T13930] netlink: zone id is out of range
[  303.184562][T13930] netlink: zone id is out of range
[  303.189717][T13930] netlink: zone id is out of range
[  303.194857][T13930] netlink: zone id is out of range
[  303.208660][T13930] netlink: zone id is out of range
[  303.213818][T13930] netlink: zone id is out of range
[  303.218988][T13930] netlink: zone id is out of range
[  303.592732][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.623850][T13941] can0: slcan on ttyS3.
[  303.714266][T13943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3481'.
[  303.723312][T13943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3481'.
[  303.761294][T13944] can0 (unregistered): slcan off ttyS3.
[  303.864348][T13949] can0: slcan on ttyS3.
[  303.879802][T13951] loop4: detected capacity change from 0 to 2048
[  303.900510][T13951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  303.924146][T13951] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #2: comm syz.4.3483: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  303.941904][T13949] can0 (unregistered): slcan off ttyS3.
[  304.035678][T13951] EXT4-fs (loop4): Remounting filesystem read-only
[  304.736337][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.176060][T13987] loop4: detected capacity change from 0 to 512
[  305.208312][T13987] EXT4-fs (loop4): too many log groups per flexible block group
[  305.216091][T13987] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  305.233185][T13987] EXT4-fs (loop4): mount failed
[  305.285489][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3491'.
[  305.327970][T13987] loop4: detected capacity change from 0 to 256
[  305.338922][T14001] FAULT_INJECTION: forcing a failure.
[  305.338922][T14001] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  305.352112][T14001] CPU: 0 UID: 0 PID: 14001 Comm: syz.3.3499 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  305.352144][T14001] Tainted: [W]=WARN
[  305.352151][T14001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  305.352164][T14001] Call Trace:
[  305.352170][T14001]  <TASK>
[  305.352179][T14001]  __dump_stack+0x1d/0x30
[  305.352247][T14001]  dump_stack_lvl+0x95/0xd0
[  305.352271][T14001]  dump_stack+0x15/0x1b
[  305.352291][T14001]  should_fail_ex+0x265/0x280
[  305.352315][T14001]  should_fail+0xb/0x20
[  305.352409][T14001]  should_fail_usercopy+0x1a/0x20
[  305.352503][T14001]  _copy_to_user+0x20/0xa0
[  305.352535][T14001]  simple_read_from_buffer+0xb5/0x130
[  305.352560][T14001]  proc_fail_nth_read+0x10e/0x150
[  305.352601][T14001]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  305.352687][T14001]  vfs_read+0x1a8/0x770
[  305.352711][T14001]  ? __rcu_read_unlock+0x4f/0x70
[  305.352732][T14001]  ? __fget_files+0x184/0x1c0
[  305.352802][T14001]  ? mutex_lock+0x58/0x90
[  305.352838][T14001]  ksys_read+0xda/0x1a0
[  305.352858][T14001]  __x64_sys_read+0x40/0x50
[  305.352877][T14001]  x64_sys_call+0x2889/0x3000
[  305.352914][T14001]  do_syscall_64+0xca/0x2b0
[  305.352960][T14001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.353000][T14001] RIP: 0033:0x7ff92486e15c
[  305.353027][T14001] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  305.353051][T14001] RSP: 002b:00007ff9232cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  305.353073][T14001] RAX: ffffffffffffffda RBX: 00007ff924ac5fa0 RCX: 00007ff92486e15c
[  305.353089][T14001] RDX: 000000000000000f RSI: 00007ff9232cf0a0 RDI: 0000000000000006
[  305.353159][T14001] RBP: 00007ff9232cf090 R08: 0000000000000000 R09: 0000000000000000
[  305.353172][T14001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  305.353189][T14001] R13: 00007ff924ac6038 R14: 00007ff924ac5fa0 R15: 00007ffd04d399f8
[  305.353214][T14001]  </TASK>
[  305.757214][T14005] veth0_to_team: entered promiscuous mode
[  305.805110][T14009] loop4: detected capacity change from 0 to 128
[  305.816659][T14009] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.3500'.
[  305.875488][T14011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=14011 comm=syz.4.3500
[  306.190706][T14017] can0: slcan on ttyS3.
[  306.227326][T14017] can0 (unregistered): slcan off ttyS3.
[  306.240046][T14020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3505'.
[  306.344778][T14034] 9p: Bad value for 'source'
[  306.450502][T14046] netlink: 'syz.2.3513': attribute type 4 has an invalid length.
[  306.605222][T14037] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3510'.
[  306.945596][T14060] can0: slcan on ttyS3.
[  307.038119][T14060] can0 (unregistered): slcan off ttyS3.
[  307.241639][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3518'.
[  307.304299][   T29] kauditd_printk_skb: 194 callbacks suppressed
[  307.304317][   T29] audit: type=1326 audit(1766644041.413:9565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14067 comm="syz.0.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c516f749 code=0x7ffc0000
[  307.334322][   T29] audit: type=1326 audit(1766644041.413:9566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14067 comm="syz.0.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f54c516f749 code=0x7ffc0000
[  307.357841][   T29] audit: type=1326 audit(1766644041.413:9567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14067 comm="syz.0.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c516f749 code=0x7ffc0000
[  307.381442][   T29] audit: type=1326 audit(1766644041.413:9568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14067 comm="syz.0.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f54c516f749 code=0x7ffc0000
[  307.404910][   T29] audit: type=1326 audit(1766644041.413:9569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14067 comm="syz.0.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c516f749 code=0x7ffc0000
[  307.428421][   T29] audit: type=1326 audit(1766644041.413:9570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14067 comm="syz.0.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54c516f749 code=0x7ffc0000
[  307.452129][   T29] audit: type=1326 audit(1766644041.413:9571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14067 comm="syz.0.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c516f749 code=0x7ffc0000
[  307.475648][   T29] audit: type=1326 audit(1766644041.413:9572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14067 comm="syz.0.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54c516f749 code=0x7ffc0000
[  307.499292][   T29] audit: type=1326 audit(1766644041.413:9573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14067 comm="syz.0.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c516f749 code=0x7ffc0000
[  307.522915][   T29] audit: type=1326 audit(1766644041.413:9574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14067 comm="syz.0.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f54c516f749 code=0x7ffc0000
[  307.609572][T14082] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  307.622756][T14082] vhci_hcd vhci_hcd.2: invalid port number 96
[  307.628953][T14082] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0
[  307.645898][T14084] 9p: Bad value for 'source'
[  307.680111][T14088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3524'.
[  307.689131][T14088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3524'.
[  307.793379][T14093] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3525'.
[  307.802451][T14093] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3525'.
[  307.819443][T14095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3527'.
[  308.163444][T14100] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3529'.
[  308.395546][T14110] can0: slcan on ttyS3.
[  308.474072][T14116] FAULT_INJECTION: forcing a failure.
[  308.474072][T14116] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  308.487247][T14116] CPU: 0 UID: 0 PID: 14116 Comm: syz.4.3532 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  308.487282][T14116] Tainted: [W]=WARN
[  308.487289][T14116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  308.487303][T14116] Call Trace:
[  308.487310][T14116]  <TASK>
[  308.487389][T14116]  __dump_stack+0x1d/0x30
[  308.487470][T14116]  dump_stack_lvl+0x95/0xd0
[  308.487499][T14116]  dump_stack+0x15/0x1b
[  308.487588][T14116]  should_fail_ex+0x265/0x280
[  308.487614][T14116]  should_fail+0xb/0x20
[  308.487635][T14116]  should_fail_usercopy+0x1a/0x20
[  308.487661][T14116]  _copy_from_user+0x1c/0xb0
[  308.487733][T14116]  memdup_user_nul+0x5f/0xe0
[  308.487758][T14116]  sel_write_validatetrans+0x19c/0x370
[  308.487789][T14116]  ? __pfx_sel_write_validatetrans+0x10/0x10
[  308.487819][T14116]  vfs_write+0x269/0x960
[  308.487857][T14116]  ? __rcu_read_unlock+0x4f/0x70
[  308.487883][T14116]  ? __fget_files+0x184/0x1c0
[  308.487912][T14116]  ? mutex_lock+0x58/0x90
[  308.487947][T14116]  ksys_write+0xda/0x1a0
[  308.487994][T14116]  __x64_sys_write+0x40/0x50
[  308.488150][T14116]  x64_sys_call+0x2847/0x3000
[  308.488182][T14116]  do_syscall_64+0xca/0x2b0
[  308.488270][T14116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.488298][T14116] RIP: 0033:0x7fc468c9f749
[  308.488368][T14116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.488391][T14116] RSP: 002b:00007fc467707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  308.488414][T14116] RAX: ffffffffffffffda RBX: 00007fc468ef5fa0 RCX: 00007fc468c9f749
[  308.488430][T14116] RDX: 0000000000000079 RSI: 0000000000000000 RDI: 0000000000000006
[  308.488550][T14116] RBP: 00007fc467707090 R08: 0000000000000000 R09: 0000000000000000
[  308.488565][T14116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  308.488580][T14116] R13: 00007fc468ef6038 R14: 00007fc468ef5fa0 R15: 00007ffc07f50d38
[  308.488603][T14116]  </TASK>
[  308.767138][T14109] can0 (unregistered): slcan off ttyS3.
[  308.871415][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3535'.
[  309.061551][T14133] 9p: Bad value for 'source'
[  309.107601][T14136] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  309.693554][T14151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.778018][T14151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.927285][T14154] can0: slcan on ttyS3.
[  310.007411][T14153] can0 (unregistered): slcan off ttyS3.
[  310.288393][T14157] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3547'.
[  310.433805][T14165] loop4: detected capacity change from 0 to 512
[  310.478530][T14165] EXT4-fs (loop4): too many log groups per flexible block group
[  310.505465][T14165] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  310.521881][T14165] EXT4-fs (loop4): mount failed
[  310.543350][T14165] loop4: detected capacity change from 0 to 256
[  310.839191][T14196] net_ratelimit: 97 callbacks suppressed
[  310.839206][T14196] netlink: zone id is out of range
[  310.850305][T14196] netlink: zone id is out of range
[  310.867381][T14189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  310.878384][T14189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.899165][T14196] netlink: zone id is out of range
[  310.904320][T14196] netlink: zone id is out of range
[  310.909572][T14196] netlink: zone id is out of range
[  310.914872][T14196] netlink: zone id is out of range
[  310.920068][T14196] netlink: zone id is out of range
[  310.926234][T14196] netlink: zone id is out of range
[  310.931457][T14196] netlink: zone id is out of range
[  310.936613][T14196] netlink: zone id is out of range
[  310.948254][T14199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  310.977020][T14199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.006019][T14197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=14197 comm=syz.0.3558
[  311.112476][T14207] 9p: Bad value for 'source'
[  311.230369][T14214] can0: slcan on ttyS3.
[  311.257286][T14214] can0 (unregistered): slcan off ttyS3.
[  311.333838][T14205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.342699][T14205] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.913738][T14228] loop4: detected capacity change from 0 to 2048
[  312.021170][T14239] __nla_validate_parse: 6 callbacks suppressed
[  312.021188][T14239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3575'.
[  312.045569][T14228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  312.269920][T14263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3583'.
[  312.302921][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.461269][T14257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  312.470223][T14257] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  312.500691][T14274] loop4: detected capacity change from 0 to 512
[  312.507716][T14274] EXT4-fs: Ignoring removed bh option
[  312.513861][T14274] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  312.527447][T14274] EXT4-fs (loop4): 1 truncate cleaned up
[  312.534393][T14274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  312.625787][T14266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  312.642532][T14266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  312.650360][   T29] kauditd_printk_skb: 264 callbacks suppressed
[  312.650377][   T29] audit: type=1326 audit(1766644046.733:9839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14265 comm="syz.2.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  312.680445][   T29] audit: type=1326 audit(1766644046.733:9840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14265 comm="syz.2.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  312.814731][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.843974][T14280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3586'.
[  312.966459][T14283] loop4: detected capacity change from 0 to 512
[  312.978390][T14283] EXT4-fs (loop4): too many log groups per flexible block group
[  312.986284][T14283] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  312.993368][T14283] EXT4-fs (loop4): mount failed
[  313.000245][T14283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3587'.
[  313.011336][T14283] loop4: detected capacity change from 0 to 256
[  313.021250][   T29] audit: type=1326 audit(1766644047.133:9841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14282 comm="syz.4.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc468c9f749 code=0x7ffc0000
[  313.047715][   T29] audit: type=1326 audit(1766644047.133:9842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14282 comm="syz.4.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc468c9f749 code=0x7ffc0000
[  313.071287][   T29] audit: type=1326 audit(1766644047.133:9843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14282 comm="syz.4.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc468c9f749 code=0x7ffc0000
[  313.094883][   T29] audit: type=1326 audit(1766644047.133:9844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14282 comm="syz.4.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc468c9f749 code=0x7ffc0000
[  313.118229][   T29] audit: type=1326 audit(1766644047.133:9845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14282 comm="syz.4.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc468c9f749 code=0x7ffc0000
[  313.141706][   T29] audit: type=1326 audit(1766644047.133:9846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14282 comm="syz.4.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc468c9f749 code=0x7ffc0000
[  313.165192][   T29] audit: type=1326 audit(1766644047.133:9847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14282 comm="syz.4.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc468c9f749 code=0x7ffc0000
[  313.188968][   T29] audit: type=1326 audit(1766644047.133:9848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14282 comm="syz.4.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc468c9f749 code=0x7ffc0000
[  313.362327][T14295] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  313.941435][T14311] can0: slcan on ttyS3.
[  314.007591][T14311] can0 (unregistered): slcan off ttyS3.
[  314.047637][T14319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.066679][T14324] loop4: detected capacity change from 0 to 2048
[  314.074851][T14319] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.079316][T14310] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3596'.
[  314.094144][T14324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.254650][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.289297][T14340] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.3604'.
[  314.310586][T14340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=14340 comm=syz.0.3604
[  314.487916][T14339] loop4: detected capacity change from 0 to 512
[  314.500328][T14339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  314.575539][T14339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.584289][T14339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.733478][T14364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3612'.
[  314.991853][T14376] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3613'.
[  315.321265][T14382] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3615'.
[  315.345339][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.424094][T14383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=14383 comm=syz.2.3615
[  315.727395][T14396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.735946][T14396] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  315.763363][T14378] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  315.763363][T14378] The task syz.1.3614 (14378) triggered the difference, watch for misbehavior.
[  316.166198][T14412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3623'.
[  316.216979][T14415] loop4: detected capacity change from 0 to 2048
[  316.320016][T14415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  317.437610][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.752065][T14446] loop4: detected capacity change from 0 to 512
[  317.843460][T14446] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.3633: corrupted in-inode xattr: e_value size too large
[  317.899135][T14446] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3633: couldn't read orphan inode 15 (err -117)
[  317.911830][T14446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  317.923947][T14452] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3635'.
[  317.998645][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.022261][T14455] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  318.205152][T14469] 9p: Bad value for 'source'
[  318.503393][   T29] kauditd_printk_skb: 110 callbacks suppressed
[  318.503412][   T29] audit: type=1326 audit(1766644052.613:9959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14473 comm="syz.2.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  318.712688][   T29] audit: type=1326 audit(1766644052.653:9960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14473 comm="syz.2.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  318.736241][   T29] audit: type=1326 audit(1766644052.653:9961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14473 comm="syz.2.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  318.759807][   T29] audit: type=1326 audit(1766644052.653:9962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14473 comm="syz.2.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  318.783312][   T29] audit: type=1326 audit(1766644052.653:9963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14473 comm="syz.2.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  318.806834][   T29] audit: type=1326 audit(1766644052.653:9964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14473 comm="syz.2.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  318.830281][   T29] audit: type=1326 audit(1766644052.653:9965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14473 comm="syz.2.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  318.853893][   T29] audit: type=1326 audit(1766644052.653:9966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14473 comm="syz.2.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  318.877402][   T29] audit: type=1326 audit(1766644052.653:9967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14473 comm="syz.2.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  318.900903][   T29] audit: type=1326 audit(1766644052.653:9968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14473 comm="syz.2.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  318.914346][T14481] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  318.940690][T14479] random: crng reseeded on system resumption
[  319.176684][T14490] can0: slcan on ttyS3.
[  319.277327][T14488] can0 (unregistered): slcan off ttyS3.
[  319.334587][T14492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.402966][T14492] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.523517][T14497] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3650'.
[  319.553469][T14497] net_ratelimit: 149 callbacks suppressed
[  319.553485][T14497] netlink: zone id is out of range
[  319.564417][T14497] netlink: zone id is out of range
[  319.587591][T14497] netlink: zone id is out of range
[  319.592844][T14497] netlink: zone id is out of range
[  319.598108][T14497] netlink: zone id is out of range
[  319.603326][T14497] netlink: zone id is out of range
[  319.608467][T14497] netlink: zone id is out of range
[  319.613640][T14497] netlink: zone id is out of range
[  319.618818][T14497] netlink: zone id is out of range
[  319.623940][T14497] netlink: zone id is out of range
[  319.631506][T14500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=14500 comm=syz.3.3650
[  319.656895][T14501] 9p: Bad value for 'source'
[  319.781484][T14513] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  319.916560][T14529] FAULT_INJECTION: forcing a failure.
[  319.916560][T14529] name failslab, interval 1, probability 0, space 0, times 0
[  319.929376][T14529] CPU: 0 UID: 0 PID: 14529 Comm: syz.2.3657 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  319.929406][T14529] Tainted: [W]=WARN
[  319.929412][T14529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  319.929424][T14529] Call Trace:
[  319.929430][T14529]  <TASK>
[  319.929437][T14529]  __dump_stack+0x1d/0x30
[  319.929494][T14529]  dump_stack_lvl+0x95/0xd0
[  319.929632][T14529]  dump_stack+0x15/0x1b
[  319.929723][T14529]  should_fail_ex+0x265/0x280
[  319.929748][T14529]  should_failslab+0x8c/0xb0
[  319.929815][T14529]  __kmalloc_noprof+0xb9/0x5a0
[  319.929888][T14529]  ? bcm_tx_setup+0x363/0xde0
[  319.929959][T14529]  ? bcm_tx_setup+0x232/0xde0
[  319.929981][T14529]  bcm_tx_setup+0x363/0xde0
[  319.930068][T14529]  bcm_sendmsg+0x34e/0x480
[  319.930093][T14529]  ? __pfx_bcm_sendmsg+0x10/0x10
[  319.930114][T14529]  __sock_sendmsg+0x145/0x180
[  319.930132][T14529]  ____sys_sendmsg+0x31e/0x4a0
[  319.930174][T14529]  ___sys_sendmsg+0x17b/0x1d0
[  319.930202][T14529]  ? __bpf_get_stackid+0x6f6/0x7d0
[  319.930256][T14529]  __x64_sys_sendmsg+0xd4/0x160
[  319.930304][T14529]  x64_sys_call+0x17ba/0x3000
[  319.930333][T14529]  do_syscall_64+0xca/0x2b0
[  319.930386][T14529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.930406][T14529] RIP: 0033:0x7ff585e4f749
[  319.930421][T14529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  319.930448][T14529] RSP: 002b:00007ff5848b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  319.930534][T14529] RAX: ffffffffffffffda RBX: 00007ff5860a5fa0 RCX: 00007ff585e4f749
[  319.930546][T14529] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004
[  319.930559][T14529] RBP: 00007ff5848b7090 R08: 0000000000000000 R09: 0000000000000000
[  319.930607][T14529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  319.930622][T14529] R13: 00007ff5860a6038 R14: 00007ff5860a5fa0 R15: 00007ffdfece5288
[  319.930644][T14529]  </TASK>
[  320.299710][T14540] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3664'.
[  320.346622][T14540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=14540 comm=syz.3.3664
[  320.375067][T14535] loop4: detected capacity change from 0 to 512
[  320.392128][T14535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  320.457743][T14538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.475129][T14538] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.500877][T14545] FAULT_INJECTION: forcing a failure.
[  320.500877][T14545] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  320.514036][T14545] CPU: 1 UID: 0 PID: 14545 Comm: syz.3.3665 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  320.514075][T14545] Tainted: [W]=WARN
[  320.514163][T14545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  320.514179][T14545] Call Trace:
[  320.514188][T14545]  <TASK>
[  320.514197][T14545]  __dump_stack+0x1d/0x30
[  320.514276][T14545]  dump_stack_lvl+0x95/0xd0
[  320.514303][T14545]  dump_stack+0x15/0x1b
[  320.514366][T14545]  should_fail_ex+0x265/0x280
[  320.514392][T14545]  should_fail+0xb/0x20
[  320.514418][T14545]  should_fail_usercopy+0x1a/0x20
[  320.514486][T14545]  _copy_from_user+0x1c/0xb0
[  320.514568][T14545]  ___sys_sendmsg+0xc1/0x1d0
[  320.514595][T14545]  ? __bpf_get_stackid+0x6f6/0x7d0
[  320.514655][T14545]  __x64_sys_sendmsg+0xd4/0x160
[  320.514727][T14545]  x64_sys_call+0x17ba/0x3000
[  320.514829][T14545]  do_syscall_64+0xca/0x2b0
[  320.514873][T14545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.514899][T14545] RIP: 0033:0x7ff92486f749
[  320.514997][T14545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  320.515015][T14545] RSP: 002b:00007ff9232cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  320.515040][T14545] RAX: ffffffffffffffda RBX: 00007ff924ac5fa0 RCX: 00007ff92486f749
[  320.515082][T14545] RDX: 0000000000048810 RSI: 0000200000000140 RDI: 0000000000000003
[  320.515099][T14545] RBP: 00007ff9232cf090 R08: 0000000000000000 R09: 0000000000000000
[  320.515191][T14545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  320.515203][T14545] R13: 00007ff924ac6038 R14: 00007ff924ac5fa0 R15: 00007ffd04d399f8
[  320.515223][T14545]  </TASK>
[  320.695088][T14535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.705928][T14535] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.839293][T14559] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  320.848711][T14548] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3666'.
[  321.063764][T14566] lo speed is unknown, defaulting to 1000
[  321.076237][T14565] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3671'.
[  321.085771][T14565] unsupported nlmsg_type 40
[  321.317761][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.400600][T14586] loop4: detected capacity change from 0 to 512
[  321.407979][T14586] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  321.421730][T14586] EXT4-fs (loop4): 1 truncate cleaned up
[  321.433438][T14586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  322.247668][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.370852][T14616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  322.387830][T14616] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.617982][T14625] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3692'.
[  322.639851][T14625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=14625 comm=syz.1.3692
[  322.680527][T14629] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  322.743058][T14638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3697'.
[  322.782430][T14643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3700'.
[  323.305307][T14661] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3706'.
[  323.345086][T14661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=14661 comm=syz.1.3706
[  323.432416][T14663] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  323.603256][T14665] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3708'.
[  323.983380][T14683] can0: slcan on ttyS3.
[  324.058151][T14682] can0 (unregistered): slcan off ttyS3.
[  324.127708][T14693] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3718'.
[  324.159623][T14689] can0: slcan on ttyS3.
[  324.169700][T14693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=14693 comm=syz.1.3718
[  324.206279][   T29] kauditd_printk_skb: 90 callbacks suppressed
[  324.206299][   T29] audit: type=1400 audit(1766644058.313:10059): avc:  denied  { setcheckreqprot } for  pid=14695 comm="syz.1.3719" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  324.233314][T14688] can0 (unregistered): slcan off ttyS3.
[  324.287699][T14700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3721'.
[  324.349536][T14704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.362782][T14706] netlink: 67 bytes leftover after parsing attributes in process `syz.1.3723'.
[  324.367488][T14704] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.626306][   T29] audit: type=1326 audit(1766644058.733:10060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14713 comm="syz.1.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4d12f749 code=0x7ffc0000
[  324.677339][   T29] audit: type=1326 audit(1766644058.763:10061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14713 comm="syz.1.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fba4d12f749 code=0x7ffc0000
[  324.701160][   T29] audit: type=1326 audit(1766644058.763:10062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14713 comm="syz.1.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4d12f749 code=0x7ffc0000
[  324.724941][   T29] audit: type=1326 audit(1766644058.763:10063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14713 comm="syz.1.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fba4d12f749 code=0x7ffc0000
[  324.748562][   T29] audit: type=1326 audit(1766644058.763:10064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14713 comm="syz.1.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4d12f749 code=0x7ffc0000
[  324.772275][   T29] audit: type=1326 audit(1766644058.763:10065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14713 comm="syz.1.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fba4d12f749 code=0x7ffc0000
[  324.795931][   T29] audit: type=1326 audit(1766644058.763:10066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14713 comm="syz.1.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4d12f749 code=0x7ffc0000
[  324.819529][   T29] audit: type=1326 audit(1766644058.763:10067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14713 comm="syz.1.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fba4d12f749 code=0x7ffc0000
[  324.843033][   T29] audit: type=1326 audit(1766644058.763:10068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14713 comm="syz.1.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4d12f749 code=0x7ffc0000
[  324.918240][T14724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3732'.
[  324.932762][T14726] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  325.027842][T14734] loop4: detected capacity change from 0 to 2048
[  325.042128][T14734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.090149][T14734] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #2: comm syz.4.3736: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  325.116785][T14734] EXT4-fs (loop4): Remounting filesystem read-only
[  325.158004][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.283182][T14742] loop4: detected capacity change from 0 to 512
[  325.291267][T14744] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3739'.
[  325.328129][T14744] net_ratelimit: 255 callbacks suppressed
[  325.328142][T14744] netlink: zone id is out of range
[  325.339140][T14744] netlink: zone id is out of range
[  325.345571][T14722] syz.3.3730 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  325.349180][T14742] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.3737: corrupted in-inode xattr: e_value size too large
[  325.359926][T14722] CPU: 1 UID: 0 PID: 14722 Comm: syz.3.3730 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  325.360047][T14722] Tainted: [W]=WARN
[  325.360070][T14722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  325.360114][T14722] Call Trace:
[  325.360176][T14722]  <TASK>
[  325.360198][T14722]  __dump_stack+0x1d/0x30
[  325.360292][T14722]  dump_stack_lvl+0x95/0xd0
[  325.360355][T14722]  dump_stack+0x15/0x1b
[  325.360420][T14722]  dump_header+0x81/0x240
[  325.360532][T14722]  oom_kill_process+0x295/0x350
[  325.360613][T14722]  out_of_memory+0x97b/0xb80
[  325.360673][T14722]  try_charge_memcg+0x610/0xa10
[  325.360796][T14722]  obj_cgroup_charge_pages+0xa6/0x150
[  325.360903][T14722]  __memcg_kmem_charge_page+0x9f/0x170
[  325.361072][T14722]  __alloc_frozen_pages_noprof+0x18f/0x360
[  325.361208][T14722]  alloc_pages_bulk_noprof+0x4b9/0x540
[  325.361303][T14722]  ? policy_nodemask+0x2a5/0x420
[  325.361433][T14722]  alloc_pages_bulk_mempolicy_noprof+0x2e3/0xb00
[  325.361555][T14722]  ? alloc_pages_mpol+0x217/0x260
[  325.361668][T14722]  __vmalloc_node_range_noprof+0x899/0x1310
[  325.361847][T14722]  __kvmalloc_node_noprof+0x492/0x6b0
[  325.361931][T14722]  ? ip_set_alloc+0x24/0x30
[  325.362057][T14722]  ? ip_set_alloc+0x24/0x30
[  325.362163][T14722]  ip_set_alloc+0x24/0x30
[  325.362258][T14722]  hash_netiface_create+0x282/0x740
[  325.362405][T14722]  ? __pfx_hash_netiface_create+0x10/0x10
[  325.362526][T14722]  ip_set_create+0x3cc/0x970
[  325.362632][T14722]  ? __nla_parse+0x40/0x60
[  325.362743][T14722]  nfnetlink_rcv_msg+0x4c6/0x590
[  325.362919][T14722]  netlink_rcv_skb+0x123/0x220
[  325.363024][T14722]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  325.363148][T14722]  nfnetlink_rcv+0x167/0x16c0
[  325.363225][T14722]  ? kmem_cache_free+0xe3/0x3a0
[  325.363310][T14722]  ? __kfree_skb+0x109/0x150
[  325.363415][T14722]  ? nlmon_xmit+0x4f/0x60
[  325.363476][T14722]  ? consume_skb+0x49/0x150
[  325.363548][T14722]  ? nlmon_xmit+0x4f/0x60
[  325.363647][T14722]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  325.363737][T14722]  ? __dev_queue_xmit+0x138d/0x1ec0
[  325.363818][T14722]  ? __dev_queue_xmit+0x148/0x1ec0
[  325.363900][T14722]  ? kernelmode_fixup_or_oops+0x59/0xb0
[  325.364067][T14722]  ? ref_tracker_free+0x37d/0x3e0
[  325.364169][T14722]  ? __netlink_deliver_tap+0x4dc/0x500
[  325.364294][T14722]  netlink_unicast+0x5c0/0x690
[  325.364395][T14722]  netlink_sendmsg+0x58b/0x6b0
[  325.364535][T14722]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.364643][T14722]  __sock_sendmsg+0x145/0x180
[  325.364710][T14722]  ____sys_sendmsg+0x31e/0x4a0
[  325.364817][T14722]  ___sys_sendmsg+0x17b/0x1d0
[  325.364971][T14722]  __x64_sys_sendmsg+0xd4/0x160
[  325.365158][T14722]  x64_sys_call+0x17ba/0x3000
[  325.365275][T14722]  do_syscall_64+0xca/0x2b0
[  325.365437][T14722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.365459][T14722] RIP: 0033:0x7ff92486f749
[  325.365474][T14722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  325.365548][T14722] RSP: 002b:00007ff9232cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  325.365629][T14722] RAX: ffffffffffffffda RBX: 00007ff924ac5fa0 RCX: 00007ff92486f749
[  325.365680][T14722] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005
[  325.365713][T14722] RBP: 00007ff9248f3f91 R08: 0000000000000000 R09: 0000000000000000
[  325.365757][T14722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  325.365793][T14722] R13: 00007ff924ac6038 R14: 00007ff924ac5fa0 R15: 00007ffd04d399f8
[  325.365850][T14722]  </TASK>
[  325.365899][T14722] memory: usage 307200kB, limit 307200kB, failcnt 2753
[  325.374146][T14742] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3737: couldn't read orphan inode 15 (err -117)
[  325.385515][T14722] memory+swap: usage 307364kB, limit 9007199254740988kB, failcnt 0
[  325.451705][T14748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=14748 comm=syz.1.3739
[  325.454178][T14722] kmem: usage 303896kB, limit 9007199254740988kB, failcnt 0
[  325.462149][T14744] netlink: zone id is out of range
[  325.464634][T14722] Memory cgroup stats for /syz3
[  325.471148][T14744] netlink: zone id is out of range
[  325.476196][T14722] :
[  325.482060][T14744] netlink: zone id is out of range
[  325.482071][T14744] netlink: zone id is out of range
[  325.539080][T14722] cache 176128
[  325.541090][T14744] netlink: zone id is out of range
[  325.545924][T14722] rss 3203072
[  325.569507][T14744] netlink: zone id is out of range
[  325.574440][T14722] shmem 0
[  325.574452][T14722] mapped_file 0
[  325.579577][T14744] netlink: zone id is out of range
[  325.579592][T14744] netlink: zone id is out of range
[  325.711533][T14742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.718584][T14722] dirty 0
[  325.718593][T14722] writeback 0
[  325.718602][T14722] workingset_refault_anon 1462
[  325.718613][T14722] workingset_refault_file 4913
[  325.718622][T14722] swap 167936
[  325.718631][T14722] swapcached 28672
[  325.748354][T14750] can0: slcan on ttyS3.
[  325.870218][T14722] pgpgin 514407
[  325.873755][T14722] pgpgout 513581
[  325.877361][T14722] pgfault 462544
[  325.880901][T14722] pgmajfault 405
[  325.884470][T14722] inactive_anon 0
[  325.888181][T14722] active_anon 28672
[  325.892023][T14722] inactive_file 3174400
[  325.896183][T14722] active_file 0
[  325.899654][T14722] unevictable 0
[  325.903127][T14722] hierarchical_memory_limit 314572800
[  325.908590][T14722] hierarchical_memsw_limit 9223372036854771712
[  325.914733][T14722] total_cache 176128
[  325.918655][T14722] total_rss 3203072
[  325.922539][T14722] total_shmem 0
[  325.926025][T14722] total_mapped_file 0
[  325.930126][T14722] total_dirty 0
[  325.933579][T14722] total_writeback 0
[  325.937452][T14722] total_workingset_refault_anon 1462
[  325.942744][T14722] total_workingset_refault_file 4913
[  325.948042][T14722] total_swap 167936
[  325.951850][T14722] total_swapcached 28672
[  325.956122][T14722] total_pgpgin 514407
[  325.960139][T14722] total_pgpgout 513581
[  325.964207][T14722] total_pgfault 462544
[  325.968335][T14722] total_pgmajfault 405
[  325.972404][T14722] total_inactive_anon 0
[  325.976678][T14722] total_active_anon 28672
[  325.981055][T14722] total_inactive_file 3174400
[  325.985738][T14722] total_active_file 0
[  325.989892][T14722] total_unevictable 0
[  325.993969][T14722] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3730,pid=14721,uid=0
[  326.008742][T14722] Memory cgroup out of memory: Killed process 14722 (syz.3.3730) total-vm:93968kB, anon-rss:10992kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000
[  326.137582][T14749] can0 (unregistered): slcan off ttyS3.
[  326.180557][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.190208][T14759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.218672][T14759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.225016][T14763] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  326.277799][T14767] loop4: detected capacity change from 0 to 512
[  326.286155][T14767] EXT4-fs: Ignoring removed bh option
[  326.304779][T14767] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  326.358264][T14767] EXT4-fs (loop4): 1 truncate cleaned up
[  326.361484][T14775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3750'.
[  326.369449][T14767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  326.594998][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.849723][T14791] serio: Serial port ttyS3
[  327.108045][T14803] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  327.332931][T14814] 9p: Bad value for 'source'
[  327.388802][T14796] loop4: detected capacity change from 0 to 512
[  327.395816][T14819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.405062][T14796] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  327.414034][T14819] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.476193][T14796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  327.543076][T14796] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  327.612102][T14826] can0: slcan on ttyS3.
[  327.747200][T14788] can0 (unregistered): slcan off ttyS3.
[  327.765175][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  327.883180][T14836] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3770'.
[  327.904594][T14836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=14836 comm=syz.3.3770
[  328.308506][T14855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  328.340604][T14855] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  328.348630][T14869] loop4: detected capacity change from 0 to 512
[  328.366091][T14869] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.3781: corrupted in-inode xattr: e_value size too large
[  328.380517][T14869] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3781: couldn't read orphan inode 15 (err -117)
[  328.393488][T14869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.448999][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.544011][T14876] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3785'.
[  328.582807][T14876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=14876 comm=syz.1.3785
[  328.603000][T14879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  328.617628][T14879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  328.768407][T14887] syz.1.3788 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  328.858473][T14877] loop4: detected capacity change from 0 to 2048
[  328.868800][T14877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.930957][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.972153][T14900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3792'.
[  329.200393][T14921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3798'.
[  329.217272][   T29] kauditd_printk_skb: 163 callbacks suppressed
[  329.217289][   T29] audit: type=1326 audit(1766644063.323:10232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14920 comm="syz.2.3798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  329.247163][   T29] audit: type=1326 audit(1766644063.323:10233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14920 comm="syz.2.3798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  329.270929][   T29] audit: type=1326 audit(1766644063.323:10234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14920 comm="syz.2.3798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  329.294606][   T29] audit: type=1326 audit(1766644063.323:10235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14920 comm="syz.2.3798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  329.318109][   T29] audit: type=1326 audit(1766644063.323:10236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14920 comm="syz.2.3798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  329.341818][   T29] audit: type=1326 audit(1766644063.323:10237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14920 comm="syz.2.3798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  329.365553][   T29] audit: type=1326 audit(1766644063.323:10238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14920 comm="syz.2.3798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  329.389215][   T29] audit: type=1326 audit(1766644063.323:10239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14920 comm="syz.2.3798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  329.413112][   T29] audit: type=1326 audit(1766644063.333:10240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14920 comm="syz.2.3798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  329.436894][   T29] audit: type=1326 audit(1766644063.333:10241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14920 comm="syz.2.3798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  329.461052][T14915] loop4: detected capacity change from 0 to 512
[  329.482297][T14915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  329.560267][T14915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.568856][T14915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.730788][T14943] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  329.935797][T14962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3812'.
[  330.019189][T14941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  330.041002][T14941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  330.168202][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.219428][T14975] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  330.490978][T14992] loop4: detected capacity change from 0 to 512
[  330.499718][T14992] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.3821: corrupted in-inode xattr: e_value size too large
[  330.514331][T14992] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3821: couldn't read orphan inode 15 (err -117)
[  330.527314][T14992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  330.555717][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.648837][T14998] lo speed is unknown, defaulting to 1000
[  330.667998][T14999] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.675282][T14999] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.717152][T14999] bridge0: entered allmulticast mode
[  330.741839][T15004] bridge_slave_1: left allmulticast mode
[  330.747615][T15004] bridge_slave_1: left promiscuous mode
[  330.753421][T15004] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.788875][T15004] bridge_slave_0: left allmulticast mode
[  330.794567][T15004] bridge_slave_0: left promiscuous mode
[  330.800381][T15004] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.005677][T15001] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3824'.
[  331.024322][T14958] syz.3.3811 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  331.035395][T14958] CPU: 1 UID: 0 PID: 14958 Comm: syz.3.3811 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  331.035525][T14958] Tainted: [W]=WARN
[  331.035534][T14958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  331.035551][T14958] Call Trace:
[  331.035560][T14958]  <TASK>
[  331.035569][T14958]  __dump_stack+0x1d/0x30
[  331.035607][T14958]  dump_stack_lvl+0x95/0xd0
[  331.035658][T14958]  dump_stack+0x15/0x1b
[  331.035684][T14958]  dump_header+0x81/0x240
[  331.035760][T14958]  oom_kill_process+0x295/0x350
[  331.035783][T14958]  out_of_memory+0x97b/0xb80
[  331.035808][T14958]  try_charge_memcg+0x610/0xa10
[  331.035909][T14958]  charge_memcg+0x51/0xc0
[  331.035950][T14958]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  331.036055][T14958]  __read_swap_cache_async+0x17b/0x2d0
[  331.036093][T14958]  swap_cluster_readahead+0x262/0x3c0
[  331.036141][T14958]  swapin_readahead+0xde/0x820
[  331.036245][T14958]  ? bpf_prog_53f0063d4d7f65ce+0x2a/0x32
[  331.036268][T14958]  ? __rcu_read_unlock+0x4f/0x70
[  331.036291][T14958]  ? __rcu_read_unlock+0x4f/0x70
[  331.036316][T14958]  ? swap_cache_get_folio+0x277/0x280
[  331.036354][T14958]  do_swap_page+0x2b4/0x21e0
[  331.036398][T14958]  ? _raw_spin_unlock+0x26/0x50
[  331.036423][T14958]  ? __schedule+0x85f/0xcd0
[  331.036446][T14958]  ? __pfx_default_wake_function+0x10/0x10
[  331.036522][T14958]  handle_mm_fault+0x9d8/0x2c60
[  331.036566][T14958]  do_user_addr_fault+0x630/0x1080
[  331.036606][T14958]  exc_page_fault+0x62/0xa0
[  331.036719][T14958]  asm_exc_page_fault+0x26/0x30
[  331.036813][T14958] RIP: 0033:0x7ff9247412be
[  331.036839][T14958] Code: e9 17 cf 12 00 0f 1f 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 <80> 3d 3b 0d 38 00 00 89 7c 24 0c 88 54 24 10 48 89 74 24 28 0f 85
[  331.036857][T14958] RSP: 002b:00007ffd04d39af0 EFLAGS: 00010206
[  331.036872][T14958] RAX: 00007ff924ac5fa0 RBX: 00007ff924ac5fa0 RCX: 0000000000000026
[  331.036885][T14958] RDX: 0000000000000001 RSI: 00007ff924ac6038 RDI: 0000000000000006
[  331.036900][T14958] RBP: 00007ff924ac7da0 R08: 0000000000000001 R09: 0000000000000026
[  331.036915][T14958] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000050ba8
[  331.036929][T14958] R13: 00007ffd04d39c50 R14: ffffffffffffffff R15: 00007ffd04d39c70
[  331.036981][T14958]  </TASK>
[  331.036987][T14958] memory: usage 307200kB, limit 307200kB, failcnt 4202
[  331.267408][T14958] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0
[  331.275395][T14958] kmem: usage 303504kB, limit 9007199254740988kB, failcnt 0
[  331.282747][T14958] Memory cgroup stats for /syz3:
[  331.283742][T14958] cache 0
[  331.291693][T14958] rss 3780608
[  331.295000][T14958] shmem 0
[  331.298309][T14958] mapped_file 0
[  331.301855][T14958] dirty 0
[  331.304816][T14958] writeback 0
[  331.308385][T14958] workingset_refault_anon 1652
[  331.313163][T14958] workingset_refault_file 5574
[  331.318057][T14958] swap 196608
[  331.321375][T14958] swapcached 0
[  331.324771][T14958] pgpgin 532165
[  331.328286][T14958] pgpgout 531241
[  331.331906][T14958] pgfault 474020
[  331.335561][T14958] pgmajfault 529
[  331.339176][T14958] inactive_anon 0
[  331.342828][T14958] active_anon 0
[  331.346304][T14958] inactive_file 3780608
[  331.350515][T14958] active_file 4096
[  331.354362][T14958] unevictable 0
[  331.357862][T14958] hierarchical_memory_limit 314572800
[  331.363256][T14958] hierarchical_memsw_limit 9223372036854771712
[  331.369542][T14958] total_cache 0
[  331.373103][T14958] total_rss 3780608
[  331.376937][T14958] total_shmem 0
[  331.380505][T14958] total_mapped_file 0
[  331.384558][T14958] total_dirty 0
[  331.388120][T14958] total_writeback 0
[  331.391985][T14958] total_workingset_refault_anon 1652
[  331.397325][T14958] total_workingset_refault_file 5574
[  331.402731][T14958] total_swap 196608
[  331.406622][T14958] total_swapcached 0
[  331.410572][T14958] total_pgpgin 532165
[  331.414571][T14958] total_pgpgout 531241
[  331.418759][T14958] total_pgfault 474020
[  331.423268][T14958] total_pgmajfault 529
[  331.427421][T14958] total_inactive_anon 0
[  331.431692][T14958] total_active_anon 0
[  331.435142][T15011] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3825'.
[  331.436114][T14958] total_inactive_file 3780608
[  331.449694][T14958] total_active_file 4096
[  331.454133][T14958] total_unevictable 0
[  331.458336][T14958] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3811,pid=14958,uid=0
[  331.473163][T14958] Memory cgroup out of memory: Killed process 14958 (syz.3.3811) total-vm:96016kB, anon-rss:4844kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000
[  331.483436][T15011] net_ratelimit: 149 callbacks suppressed
[  331.483479][T15011] netlink: zone id is out of range
[  331.501636][T15011] netlink: zone id is out of range
[  331.526975][T15015] 9p: Bad value for 'source'
[  331.539611][T15016] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  331.539937][T15011] netlink: zone id is out of range
[  331.552298][T15011] netlink: zone id is out of range
[  331.552821][T15010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=15010 comm=syz.2.3825
[  331.557559][T15011] netlink: zone id is out of range
[  331.575452][T15011] netlink: zone id is out of range
[  331.580700][T15011] netlink: zone id is out of range
[  331.630520][T15011] netlink: zone id is out of range
[  331.635737][T15011] netlink: zone id is out of range
[  331.640947][T15011] netlink: zone id is out of range
[  331.784409][T15029] can0: slcan on ttyS3.
[  331.847362][T15028] can0 (unregistered): slcan off ttyS3.
[  331.900160][T15025] loop4: detected capacity change from 0 to 512
[  331.935986][T15025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  331.964468][T15022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  332.036779][T15022] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  332.114139][T15025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  332.129642][T15025] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  332.134916][T15046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3836'.
[  332.146402][T15046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3836'.
[  332.199179][T15049] 9p: Bad value for 'source'
[  332.267311][T15051] lo speed is unknown, defaulting to 1000
[  332.300245][T15052] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.307566][T15052] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.316999][T15052] bridge0: entered allmulticast mode
[  332.350803][T15052] bridge_slave_1: left allmulticast mode
[  332.356510][T15052] bridge_slave_1: left promiscuous mode
[  332.362209][T15052] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.370810][T15052] bridge_slave_0: left allmulticast mode
[  332.376490][T15052] bridge_slave_0: left promiscuous mode
[  332.382231][T15052] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.738174][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.816606][T15074] can0: slcan on ttyS3.
[  332.920860][T15073] can0 (unregistered): slcan off ttyS3.
[  333.125813][T15085] 9p: Bad value for 'source'
[  333.375948][T15101] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3857'.
[  333.439981][T15101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=15101 comm=syz.1.3857
[  333.483433][T15105] lo speed is unknown, defaulting to 1000
[  333.569769][T15099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.593120][T15099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.894729][T15118] can0: slcan on ttyS3.
[  333.947165][T15117] can0 (unregistered): slcan off ttyS3.
[  334.003933][T15124] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3874'.
[  334.037822][T15122] can0: slcan on ttyS3.
[  334.117278][T15122] can0 (unregistered): slcan off ttyS3.
[  334.133823][T15124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=15124 comm=syz.1.3874
[  334.337831][T15132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3866'.
[  334.370059][T15133] loop4: detected capacity change from 0 to 512
[  334.381665][   T29] kauditd_printk_skb: 248 callbacks suppressed
[  334.381679][   T29] audit: type=1326 audit(1766644068.493:10490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.2.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  334.419852][T15133] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  334.431751][   T29] audit: type=1326 audit(1766644068.543:10491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.2.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  334.455477][   T29] audit: type=1326 audit(1766644068.543:10492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.2.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  334.479266][   T29] audit: type=1326 audit(1766644068.543:10493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.2.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  334.503269][   T29] audit: type=1326 audit(1766644068.543:10494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.2.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  334.528348][   T29] audit: type=1326 audit(1766644068.623:10495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.2.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  334.552039][   T29] audit: type=1326 audit(1766644068.643:10496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.2.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  334.575745][   T29] audit: type=1326 audit(1766644068.643:10497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.2.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  334.575775][   T29] audit: type=1326 audit(1766644068.643:10498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.2.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  334.599537][   T29] audit: type=1326 audit(1766644068.713:10499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.2.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff585e4f749 code=0x7ffc0000
[  334.600963][T15133] EXT4-fs (loop4): 1 truncate cleaned up
[  334.601488][T15133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  334.972522][T15161] can0: slcan on ttyS3.
[  335.013598][T15156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.025496][T15156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.067269][T15160] can0 (unregistered): slcan off ttyS3.
[  335.197640][T15163] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  335.279672][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.489016][T15175] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3881'.
[  335.587562][T15170] loop4: detected capacity change from 0 to 512
[  335.608902][T15170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  335.683086][T15170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.691670][T15170] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.992141][T15202] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  336.124970][T15204] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3887'.
[  336.287980][T15204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=15204 comm=syz.2.3887
[  336.417098][    C1] ip6_tunnel: ip6gre14 xmit: Local address not yet configured!
[  336.468591][T15213] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3890'.
[  336.471146][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.547785][T15218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  336.585229][T15221] loop4: detected capacity change from 0 to 512
[  336.598095][T15218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  336.619299][T15221] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.3894: corrupted in-inode xattr: e_value size too large
[  336.657468][T15221] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3894: couldn't read orphan inode 15 (err -117)
[  336.700650][T15226] can0: slcan on ttyS3.
[  336.815297][T15221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  336.857129][T15226] can0 (unregistered): slcan off ttyS3.
[  337.027591][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.690831][T15240] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3900'.
[  337.766343][T15251] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  338.795325][T15273] 9p: Bad value for 'source'
[  338.959761][T15265] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3907'.
[  339.095293][T15290] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.3919'.
[  339.104621][T15290] net_ratelimit: 160 callbacks suppressed
[  339.104638][T15290] netlink: zone id is out of range
[  339.115531][T15290] netlink: zone id is out of range
[  339.147925][T15290] netlink: zone id is out of range
[  339.153096][T15290] netlink: zone id is out of range
[  339.158344][T15290] netlink: zone id is out of range
[  339.163469][T15290] netlink: zone id is out of range
[  339.168651][T15290] netlink: zone id is out of range
[  339.189813][T15294] can0: slcan on ttyS3.
[  339.245922][T15296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=15296 comm=syz.0.3919
[  339.267451][T15294] can0 (unregistered): slcan off ttyS3.
[  339.295706][T15290] netlink: zone id is out of range
[  339.300899][T15290] netlink: zone id is out of range
[  339.306057][T15290] netlink: zone id is out of range
[  339.422710][T15285] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3916'.
[  340.324174][T15321] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  340.650711][T15336] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  340.819417][   T29] kauditd_printk_skb: 10 callbacks suppressed
[  340.819433][   T29] audit: type=1326 audit(1766644074.923:10510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4d12f749 code=0x7ffc0000
[  340.819855][T15326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.825587][   T29] audit: type=1326 audit(1766644074.923:10511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4d12f749 code=0x7ffc0000
[  340.881309][   T29] audit: type=1326 audit(1766644074.933:10512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba4d12f749 code=0x7ffc0000
[  340.905133][   T29] audit: type=1326 audit(1766644074.933:10513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4d12f749 code=0x7ffc0000
[  340.926013][T15348] loop4: detected capacity change from 0 to 2048
[  340.928825][   T29] audit: type=1326 audit(1766644074.933:10514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fba4d12f749 code=0x7ffc0000
[  340.958752][   T29] audit: type=1326 audit(1766644074.933:10515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4d12f749 code=0x7ffc0000
[  340.958765][T15326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.982697][   T29] audit: type=1326 audit(1766644074.933:10516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4d12f749 code=0x7ffc0000
[  341.013799][   T29] audit: type=1326 audit(1766644074.933:10517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fba4d12f749 code=0x7ffc0000
[  341.037599][   T29] audit: type=1326 audit(1766644074.933:10518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4d12f749 code=0x7ffc0000
[  341.039253][T15348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  341.061692][   T29] audit: type=1326 audit(1766644074.933:10519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4d12f749 code=0x7ffc0000
[  341.132238][T15348] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #2: comm syz.4.3935: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  341.238458][T15348] EXT4-fs (loop4): Remounting filesystem read-only
[  341.269093][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.338252][T15356] 9p: Bad value for 'source'
[  341.373482][T15338] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3934'.
[  341.593646][T15358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.602778][T15358] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.613323][T15362] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3939'.
[  341.677900][T15365] 9p: Bad value for 'source'
[  341.765642][T15371] can0: slcan on ttyS3.
[  341.827199][T15370] can0 (unregistered): slcan off ttyS3.
[  341.882625][T12791] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  341.893599][T12791] CPU: 1 UID: 0 PID: 12791 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  341.893633][T12791] Tainted: [W]=WARN
[  341.893640][T12791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  341.893656][T12791] Call Trace:
[  341.893664][T12791]  <TASK>
[  341.893673][T12791]  __dump_stack+0x1d/0x30
[  341.893708][T12791]  dump_stack_lvl+0x95/0xd0
[  341.893734][T12791]  dump_stack+0x15/0x1b
[  341.893759][T12791]  dump_header+0x81/0x240
[  341.893828][T12791]  oom_kill_process+0x295/0x350
[  341.893856][T12791]  out_of_memory+0x97b/0xb80
[  341.893907][T12791]  try_charge_memcg+0x610/0xa10
[  341.893936][T12791]  charge_memcg+0x51/0xc0
[  341.894024][T12791]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  341.894138][T12791]  __read_swap_cache_async+0x17b/0x2d0
[  341.894258][T12791]  swap_cluster_readahead+0x362/0x3c0
[  341.894302][T12791]  swapin_readahead+0xde/0x820
[  341.894419][T12791]  ? __rcu_read_unlock+0x4f/0x70
[  341.894442][T12791]  ? __rcu_read_unlock+0x4f/0x70
[  341.894465][T12791]  ? swap_cache_get_folio+0x277/0x280
[  341.894500][T12791]  do_swap_page+0x2b4/0x21e0
[  341.894570][T12791]  ? _raw_spin_unlock+0x26/0x50
[  341.894659][T12791]  ? __schedule+0x85f/0xcd0
[  341.894691][T12791]  ? __pfx_default_wake_function+0x10/0x10
[  341.894744][T12791]  handle_mm_fault+0x9d8/0x2c60
[  341.894858][T12791]  do_user_addr_fault+0x630/0x1080
[  341.894906][T12791]  exc_page_fault+0x62/0xa0
[  341.894955][T12791]  asm_exc_page_fault+0x26/0x30
[  341.894977][T12791] RIP: 0033:0x7f54c51a1fc5
[  341.895003][T12791] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[  341.895023][T12791] RSP: 002b:00007fff0f39fd88 EFLAGS: 00010246
[  341.895042][T12791] RAX: 0000000000000000 RBX: 00000000000001c6 RCX: 00007f54c51a1fc3
[  341.895056][T12791] RDX: 00007fff0f39fda0 RSI: 0000000000000000 RDI: 0000000000000000
[  341.895069][T12791] RBP: 00007fff0f39fe0c R08: 000000002cfe233b R09: 0000000000000000
[  341.895083][T12791] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  341.895097][T12791] R13: 00000000000927c0 R14: 00000000000534f8 R15: 00007fff0f39fe60
[  341.895149][T12791]  </TASK>
[  341.895158][T12791] memory: usage 307200kB, limit 307200kB, failcnt 3679
[  342.070663][T15387] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3949'.
[  342.078271][T12791] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0
[  342.137315][T12791] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[  342.144678][T12791] Memory cgroup stats for /syz0:
[  342.145143][T12791] cache 0
[  342.153067][T12791] rss 0
[  342.155847][T12791] shmem 0
[  342.158845][T12791] mapped_file 0
[  342.162484][T12791] dirty 0
[  342.165578][T12791] writeback 0
[  342.168903][T12791] workingset_refault_anon 1947
[  342.173695][T12791] workingset_refault_file 3280
[  342.178671][T12791] swap 188416
[  342.181974][T12791] swapcached 4096
[  342.185626][T12791] pgpgin 699191
[  342.189305][T12791] pgpgout 699190
[  342.192866][T12791] pgfault 521217
[  342.196533][T12791] pgmajfault 510
[  342.200155][T12791] inactive_anon 0
[  342.203826][T12791] active_anon 4096
[  342.207694][T12791] inactive_file 0
[  342.211350][T12791] active_file 0
[  342.214850][T12791] unevictable 0
[  342.218420][T12791] hierarchical_memory_limit 314572800
[  342.223885][T12791] hierarchical_memsw_limit 9223372036854771712
[  342.230089][T12791] total_cache 0
[  342.233583][T12791] total_rss 0
[  342.236888][T12791] total_shmem 0
[  342.240464][T12791] total_mapped_file 0
[  342.244460][T12791] total_dirty 0
[  342.247966][T12791] total_writeback 0
[  342.251788][T12791] total_workingset_refault_anon 1947
[  342.257116][T12791] total_workingset_refault_file 3280
[  342.260981][T15387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=15387 comm=syz.2.3949
[  342.262490][T12791] total_swap 188416
[  342.262503][T12791] total_swapcached 4096
[  342.283279][T12791] total_pgpgin 699191
[  342.287301][T12791] total_pgpgout 699190
[  342.291565][T12791] total_pgfault 521217
[  342.295649][T12791] total_pgmajfault 510
[  342.299763][T12791] total_inactive_anon 0
[  342.303927][T12791] total_active_anon 4096
[  342.308234][T12791] total_inactive_file 0
[  342.312413][T12791] total_active_file 0
[  342.316471][T12791] total_unevictable 0
[  342.320500][T12791] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3936,pid=15352,uid=0
[  342.335227][T12791] Memory cgroup out of memory: Killed process 15352 (syz.0.3936) total-vm:93836kB, anon-rss:1136kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0
[  342.360587][T15395] can: request_module (can-proto-0) failed.
[  342.564621][T15409] 9p: Bad value for 'source'
[  342.964779][T15423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3960'.
[  343.123894][T15421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  343.132666][T15421] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  343.190412][T15432] can0: slcan on ttyS3.
[  343.287320][T15432] can0 (unregistered): slcan off ttyS3.
[  343.495382][T15442] 9p: Bad value for 'source'
[  344.094296][T15464] loop4: detected capacity change from 0 to 512
[  344.102188][T15464] EXT4-fs: Ignoring removed bh option
[  344.108267][T15464] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  344.120951][T15464] EXT4-fs (loop4): 1 truncate cleaned up
[  344.127105][T15464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  344.166950][T15469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3975'.
[  344.408647][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.062743][T15484] syz.3.3982 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  345.073869][T15484] CPU: 1 UID: 0 PID: 15484 Comm: syz.3.3982 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  345.073901][T15484] Tainted: [W]=WARN
[  345.073909][T15484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  345.073962][T15484] Call Trace:
[  345.073969][T15484]  <TASK>
[  345.073977][T15484]  __dump_stack+0x1d/0x30
[  345.074007][T15484]  dump_stack_lvl+0x95/0xd0
[  345.074071][T15484]  dump_stack+0x15/0x1b
[  345.074139][T15484]  dump_header+0x81/0x240
[  345.074160][T15484]  oom_kill_process+0x295/0x350
[  345.074183][T15484]  out_of_memory+0x97b/0xb80
[  345.074213][T15484]  try_charge_memcg+0x610/0xa10
[  345.074260][T15484]  charge_memcg+0x51/0xc0
[  345.074410][T15484]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  345.074455][T15484]  __read_swap_cache_async+0x17b/0x2d0
[  345.074532][T15484]  swap_cluster_readahead+0x362/0x3c0
[  345.074635][T15484]  swapin_readahead+0xde/0x820
[  345.074668][T15484]  ? mod_memcg_lruvec_state+0x1a1/0x280
[  345.074698][T15484]  ? __rcu_read_unlock+0x34/0x70
[  345.074723][T15484]  ? __rcu_read_unlock+0x4f/0x70
[  345.074746][T15484]  ? swap_cache_get_folio+0x277/0x280
[  345.074867][T15484]  do_swap_page+0x2b4/0x21e0
[  345.074967][T15484]  ? __pfx_default_wake_function+0x10/0x10
[  345.075099][T15484]  handle_mm_fault+0x9d8/0x2c60
[  345.075257][T15484]  do_user_addr_fault+0x630/0x1080
[  345.075289][T15484]  exc_page_fault+0x62/0xa0
[  345.075391][T15484]  asm_exc_page_fault+0x26/0x30
[  345.075415][T15484] RIP: 0033:0x7ff92482cf84
[  345.075434][T15484] Code: 48 c1 e8 04 64 48 83 3c 25 c8 ff ff ff 00 49 89 c3 74 0b 48 3b 05 14 dd 26 00 4c 0f 42 fb 48 c7 04 24 00 00 00 00 4c 8d 75 60 <48> 8b 55 78 4c 39 f2 0f 84 89 04 00 00 44 89 6c 24 08 31 ff 45 31
[  345.075478][T15484] RSP: 002b:00007ffd04d398f0 EFLAGS: 00010283
[  345.075498][T15484] RAX: 0000000000000010 RBX: 0000000000000120 RCX: 00007ff924a9ae30
[  345.075513][T15484] RDX: 0000000000000001 RSI: 00007ff924a9ae30 RDI: 00007ff924a9acc0
[  345.075529][T15484] RBP: 00007ff924a9acc0 R08: 00000000ffffffff R09: 0000000000000000
[  345.075542][T15484] R10: 0000000000021000 R11: 0000000000000010 R12: 0000000000000110
[  345.075585][T15484] R13: 0000000000000012 R14: 00007ff924a9ad20 R15: 0000000000000120
[  345.075608][T15484]  </TASK>
[  345.075616][T15484] memory: usage 303940kB, limit 307200kB, failcnt 4523
[  345.296410][T15484] memory+swap: usage 220896kB, limit 9007199254740988kB, failcnt 0
[  345.304371][T15484] kmem: usage 221628kB, limit 9007199254740988kB, failcnt 0
[  345.311704][T15484] Memory cgroup stats for /syz3:
[  345.312137][T15484] cache 524288
[  345.320603][T15484] rss 4096
[  345.323647][T15484] shmem 0
[  345.326599][T15484] mapped_file 65536
[  345.330456][T15484] dirty 0
[  345.333484][T15484] writeback 0
[  345.336877][T15484] workingset_refault_anon 1703
[  345.341756][T15484] workingset_refault_file 6167
[  345.346576][T15484] swap 192512
[  345.349908][T15484] swapcached 4096
[  345.353561][T15484] pgpgin 569076
[  345.357069][T15484] pgpgout 568946
[  345.360669][T15484] pgfault 495781
[  345.364234][T15484] pgmajfault 580
[  345.367823][T15484] inactive_anon 4096
[  345.371786][T15484] active_anon 0
[  345.375262][T15484] inactive_file 4096
[  345.379403][T15484] active_file 507904
[  345.383389][T15484] unevictable 0
[  345.386870][T15484] hierarchical_memory_limit 314572800
[  345.392565][T15484] hierarchical_memsw_limit 9223372036854771712
[  345.398781][T15484] total_cache 524288
[  345.402688][T15484] total_rss 4096
[  345.406250][T15484] total_shmem 0
[  345.409786][T15484] total_mapped_file 65536
[  345.414129][T15484] total_dirty 0
[  345.417658][T15484] total_writeback 0
[  345.421545][T15484] total_workingset_refault_anon 1703
[  345.426857][T15484] total_workingset_refault_file 6167
[  345.432345][T15484] total_swap 192512
[  345.436410][T15484] total_swapcached 4096
[  345.440675][T15484] total_pgpgin 569076
[  345.444668][T15484] total_pgpgout 568946
[  345.448851][T15484] total_pgfault 495781
[  345.452939][T15484] total_pgmajfault 580
[  345.457154][T15484] total_inactive_anon 4096
[  345.461630][T15484] total_active_anon 0
[  345.465635][T15484] total_inactive_file 4096
[  345.470124][T15484] total_active_file 507904
[  345.474558][T15484] total_unevictable 0
[  345.478593][T15484] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3982,pid=15484,uid=0
[  345.493638][T15484] Memory cgroup out of memory: Killed process 15484 (syz.3.3982) total-vm:93968kB, anon-rss:1136kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  345.848538][T15514] loop4: detected capacity change from 0 to 512
[  345.859409][T15514] EXT4-fs (loop4): too many log groups per flexible block group
[  345.867575][T15514] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  345.929051][T15514] EXT4-fs (loop4): mount failed
[  346.252535][ T4913] ==================================================================
[  346.260773][ T4913] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages
[  346.269024][ T4913] 
[  346.271377][ T4913] read-write to 0xffff8881005f1e78 of 8 bytes by task 15514 on cpu 1:
[  346.276456][T15511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3991'.
[  346.279546][ T4913]  __filemap_remove_folio+0x1bc/0x2a0
[  346.279592][ T4913]  __remove_mapping+0x390/0x4c0
[  346.279621][ T4913]  remove_mapping+0x22/0x90
[  346.303232][ T4913]  mapping_try_invalidate+0x26a/0x3f0
[  346.308665][ T4913]  invalidate_mapping_pages+0x27/0x40
[  346.314076][ T4913]  invalidate_bdev+0x58/0x70
[  346.318719][ T4913]  ext4_fill_super+0x2ced/0x37a0
[  346.323781][ T4913]  get_tree_bdev_flags+0x291/0x300
[  346.328938][ T4913]  get_tree_bdev+0x1f/0x30
[  346.333386][ T4913]  ext4_get_tree+0x1c/0x30
[  346.337842][ T4913]  vfs_get_tree+0x57/0x1d0
[  346.337868][ T4913]  do_new_mount+0x24d/0x6a0
[  346.337892][ T4913]  path_mount+0x4ab/0xb80
[  346.337915][ T4913]  __se_sys_mount+0x28c/0x2e0
[  346.337940][ T4913]  __x64_sys_mount+0x67/0x80
[  346.337961][ T4913]  x64_sys_call+0x2cca/0x3000
[  346.337990][ T4913]  do_syscall_64+0xca/0x2b0
[  346.338031][ T4913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.338052][ T4913] 
[  346.338059][ T4913] read to 0xffff8881005f1e78 of 8 bytes by task 4913 on cpu 0:
[  346.338079][ T4913]  nr_blockdev_pages+0x7e/0xd0
[  346.338106][ T4913]  si_meminfo+0x87/0xd0
[  346.338132][ T4913]  update_defense_level+0x47/0x5c0
[  346.338165][ T4913]  defense_work_handler+0x1f/0x80
[  346.338195][ T4913]  process_scheduled_works+0x4ce/0x9d0
[  346.338223][ T4913]  worker_thread+0x582/0x770
[  346.338251][ T4913]  kthread+0x489/0x510
[  346.338291][ T4913]  ret_from_fork+0x149/0x290
[  346.338320][ T4913]  ret_from_fork_asm+0x1a/0x30
[  346.338353][ T4913] 
[  346.338371][ T4913] value changed: 0x0000000000000004 -> 0x0000000000000002
[  346.338384][ T4913] 
[  346.338389][ T4913] Reported by Kernel Concurrency Sanitizer on:
[  346.338406][ T4913] CPU: 0 UID: 0 PID: 4913 Comm: kworker/0:12 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  346.338442][ T4913] Tainted: [W]=WARN
[  346.338451][ T4913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  346.338467][ T4913] Workqueue: events_long defense_work_handler
[  346.338502][ T4913] ==================================================================
[  346.351876][T15511] loop4: detected capacity change from 0 to 256
[  346.359846][   T29] kauditd_printk_skb: 52 callbacks suppressed
[  346.359861][   T29] audit: type=1326 audit(1766644080.473:10572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15510 comm="syz.4.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc468c9f749 code=0x7ffc0000
[  346.360112][   T29] audit: type=1326 audit(1766644080.473:10573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15510 comm="syz.4.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc468c9f749 code=0x7ffc0000
[  346.362862][   T29] audit: type=1326 audit(1766644080.473:10574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15510 comm="syz.4.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc468c9f749 code=0x7ffc0000
[  346.369836][   T29] audit: type=1326 audit(1766644080.473:10575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15510 comm="syz.4.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc468c9f749 code=0x7ffc0000
[  346.369965][   T29] audit: type=1326 audit(1766644080.473:10576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15510 comm="syz.4.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc468c9f749 code=0x7ffc0000
[  346.370014][   T29] audit: type=1326 audit(1766644080.473:10577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15510 comm="syz.4.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc468c9f749 code=0x7ffc0000
[  346.370200][   T29] audit: type=1326 audit(1766644080.483:10578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15510 comm="syz.4.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc468c9f749 code=0x7ffc0000
[  346.370579][   T29] audit: type=1326 audit(1766644080.483:10579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15510 comm="syz.4.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc468c9f749 code=0x7ffc0000
[  346.371009][   T29] audit: type=1326 audit(1766644080.483:10580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15510 comm="syz.4.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc468c9f749 code=0x7ffc0000
[  346.372007][   T29] audit: type=1326 audit(1766644080.483:10581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15510 comm="syz.4.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fc468c9f749 code=0x7ffc0000