last executing test programs:

37.530461336s ago: executing program 2 (id=221):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1c00000000000000000000000000000085000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x2}}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffe7f, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x20000041}, 0x4000)
recvmsg$unix(r3, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r5}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20)
r7 = memfd_secret(0x80000)
process_mrelease(0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r9, 0x0, 0xfffffffffffffffd}, 0x18)
r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r10, 0xc0f85403, &(0x7f00000019c0)={{0x1, 0x0, 0x5, 0x0, 0x8}, 0x2, 0x85, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0xb9, 0x10001, 0xfc})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r11=>r3, {0xffffff73, 0xed}}, './file0\x00'})
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x80, 0xc8, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r11, 0x0)
syz_read_part_table(0x5e6, &(0x7f0000001100)="$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")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
close(r13)
recvmsg$unix(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r14=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r14, &(0x7f0000000780)=ANY=[@ANYBLOB="8f53bc61a7923fb7b15cdbe7a19bf9f0edcb79eaac4defcc862bcd86dd6317ce22e0ee00000000000000000000000000007fc5f603ff65ec5d"], 0xfdef)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20)
recvfrom$phonet(r11, &(0x7f0000000240)=""/40, 0x28, 0x1040, &(0x7f0000000280)={0x23, 0xbd, 0xc4, 0x3}, 0x10)
mknodat(r14, &(0x7f0000000580)='./file0\x00', 0x1, 0x1000)

37.224675662s ago: executing program 2 (id=226):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x4, 0x6}, 0x400, 0xfffffffd, 0x6, 0x3, 0x1, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r0 = io_uring_setup(0xdac, &(0x7f0000000180))
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1, 0x0, 0x60}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

37.082627344s ago: executing program 2 (id=229):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000100), 0x6, 0x504, &(0x7f0000019940)="$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")
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5)

36.913737956s ago: executing program 2 (id=234):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0x8000c62)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0)
getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000200), &(0x7f0000000300)=0x10)
write$binfmt_elf64(r0, 0x0, 0x478)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r0, 0x13, 0x1, 0x6, &(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0]}, 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0xffffffffffffffff)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r8}, 0x10)
close(r4)
r9 = getpgid(0x0)
io_uring_register$IORING_REGISTER_CLOCK(r3, 0x1d, &(0x7f0000000400)={0x8}, 0x0)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xb, 0x4e, 0x7f, 0x3, 0x0, 0x1, 0x20, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000340), 0x5}, 0x20, 0x2, 0x23f, 0x7, 0x8, 0x4, 0x80, 0x0, 0x0, 0x0, 0x7}, r9, 0xffffffffffffffff, r2, 0x0)

36.410574835s ago: executing program 2 (id=244):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00040000b02023417fe405969880aeae00ffff7f60de4db13728d945b9a63f630f2d127cdb1673a5057d464f46933002b9bd49"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$netlink(0x10, 0x3, 0x4)
write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r3)
sendmsg$inet(r3, &(0x7f0000000800)={&(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000780)=[{&(0x7f00000004c0)="b26600cb5fde8adde3766a9dba9f4c850c41289374965ead59d359923b6bf777d1b256b8f946df047c0ac576443f66c3c9936693214d08def0fac47b4f787fe458514c09b2dcbc93f3f2577a4680a696d0112e05ab0abf68353bb61f606d21", 0x5f}, {&(0x7f00000005c0)="8a59c4980d0d60ebd4b5e8154f1b353b21e0f44d44afc3f596348489396d1ee7bd27fbf0e8d487bbe39ea7a65c6f3eab2c1709d049845ba2f58c647b5d457fd0fc097c5f4b56d1a9b65b5605d8b86f488024c8c29c6291738430fc09de5cee50b21525a9df92e6721e01482d2f98d8e572c1d7014db8bc6c81b4c3a701e5ef5e5118f5b7a5f290479ae6277e5942898b27e192bc60a14052cbb3518fae87aa5283c43c9a1a2a1ee7f73af431a5583873e01ea23863c3b56b16c821e74132ea08179fee07fec642f0d4c00c6d8d518ddadb0312b2b72a75cc061bf6af84103fff6c1d7d8fa697ce049843ae68d303768a02", 0xf1}, {&(0x7f0000000180)}, {&(0x7f0000000c00)="f988bc4bd963e33766cfefc119ee5c3d61039f0c82275b5f9d6d9d33d37988bc77eea30de1b7534c1c69088020ac3d645ef640275b0abde109c9fe59e0b11225cb09c6ec9932a78e440262113aa58de49e3bd2b378ba266f80542df87e9728b3ca77c9fdbe8254602626109061e46959b032ca923c9138661983f41dc210c4cb10685d33add63d7391df416aa5cb705c22ab34d0f397c70e086ad9ca45a0b5e97966e9b60661de701df593a9589b87154c8c33c3ba5fde280c3a13f2e1bb06d975b87958719d5e9979b017941c9730d3093f7ef170a8d7b969fb81e0903ae2cd8413959816e8b386fb99875986026afa", 0xf0}, {&(0x7f0000000540)="e2c66e88", 0x4}, {&(0x7f00000006c0)="aa40b6b8e6aa66a48db725c7856a775661aa82de49c85b97435c975f70245ff943", 0x21}], 0x6, &(0x7f0000000700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x18}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18)
r4 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000900)=0x10)
sendmsg$inet(r4, &(0x7f0000000b80)={&(0x7f0000000940)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000b00)="46ba2dfa9a7c893da2164e2edb2160bcd274a279f77600a6870976430c3a8819e2d4539c54be0226f25598360b81f0398682cb2a676b3a14f159723faddc2b44ba2843bcc6c17d93904d18dbe40a5e455ae0d6cda2", 0x55}], 0x1, &(0x7f0000000a00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}, 0x8880)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r5}, 0x18)
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r5})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x88, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket(0x1a, 0x5, 0x200)
sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000200)="f9", 0x1}, {&(0x7f0000000280)="fa32d69d28fa46ab64b1f1655bcbf2e0c227148df9db8239f42a3b1c0313e815f80f6207277cf1d66d1c30b9bd5ee1330acb803590b9813417aff5ae22c6ba534e427d473a07d0971eccdc86dc55b06924fe1eb07b242f2a43ed4de1ae4cfd12e85d01c9e75aeb8f1edb658a33834e236f61b28c5889a76098fc3403f8a1627337bd20338710518a8ae3c9e2d35669e9dd0241e8298f43348668cc7f90c282", 0x9f}, {&(0x7f0000000340)="f7ae60681d4e799782471141cd2791485a8cf8657f1ec9c4d34b63ec86bd8d8a0947cf030c80bf7f4a3b74879557bad13e6eac42aecc0f247d36c04ea5f70a22aaf4b649030702eb9eb3689a731eb4f3b0b86be6caeff6e8dea685802e846ea845b29ee06122ac4e94cf5f72339fb1133a3f88cdbf48bd712cdf2aba44b9fdded12144e75eff287b0d6b8633a7153e3ef7f73bafcd49d8233a0f2ba5727a332d32753b28f13addca83e2d60e2071db951af8bfaf5272db0e886c94e8452f71ec95d0522d8e41ba86bfe9c82ed1be05757c5e73ed9f1b533ffd358a3a4e0a7438ed5d0fe1dc0a30a8e7b3e69128b379437a675d65b57daa", 0xf7}], 0x3, 0x0, 0x0, 0x80020}], 0x1, 0x40c0)
sendmmsg$inet_sctp(r7, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0)

36.0921165s ago: executing program 2 (id=248):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000004500"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

36.08851156s ago: executing program 32 (id=248):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000004500"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

7.818260391s ago: executing program 1 (id=759):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd5, 0xfffffff9, 0x5, 0x0, 0x8, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x103200, 0x1, 0x840000, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7, @void, @value}, 0x94)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x298, 0x5802, 0x294, 0x0, 0x294, 0x3b0, 0x325, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0x230, 0x298, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20e30e9ab14af5e8d982e899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x72bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0)

7.572736535s ago: executing program 1 (id=771):
lsm_get_self_attr(0x66, &(0x7f0000001300)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000000)=0x1020, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c080001", @ANYRES16=r7, @ANYBLOB="100026bd7000ffdbdf252800000006000400a1aa0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4004000)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r10, <r11=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r11}, 0x4)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r12}, 0x10)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)

7.506034216s ago: executing program 1 (id=772):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

7.390193358s ago: executing program 1 (id=773):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$eJzs3U1vG0UfAPD/bt7atE+TSs+Bl4sFSERCJE3aApVAIuLCoT3RA0es2C1RnQYlRqJVxItA3EAC8QHgAHwEjnDgO8AZOEClCOVAys1o7V3HxHbapA6ukt9PGnlmZ+2Z9XjW68nsJIBjqxQRL0fESESci4ipfHuah3i/FbL9trc2lv7e2lhKotF47c8kknxb8VpJ/ngqf4GZNCL9KInHe5S7fuv2jXKtVl3L03P1lbfm1m/dfnZ5pXy9er16c+G58xcuXnzh0sLzAzvWzZXkk6e+ufzbZx9XPv/pj++ns/qezvM6j2NQSlFqvye7XRp0YUN2oiOejA6xIgAA7CnNr/1Hm9f/UzESOxdvU/Hpj0OtHAAAADAQjUbxCAAAABxdid/+AAAAcMQV8wC2tzaWijDE6Qj8xzYXI2K61f5389DKGW3f0zu26/7eQSpFxKsnrixkIQ7pPmwAAACA4+yHxdbCf93jf2k80rHfyYiYLNb2G6DSrnT3+E96Z8BF0mFzMeLFiLjbNf6XFrtMj+Sp/zWHCseSa8u16rmIOBMRMzE2kaXn9yjj3SdufNsvr3P878tfX5/Pys8ed/ZI74xO/Ps5lXK9/CDHzI7NDyIeG+3V/kl7zLdzncyDeGN5+6V+eVn7Z+1dhO725zA1vop4umf/31m5NNl7fda55vlgLj8rTHSX8cvprz/sV35n/89CVn7xtwAOX9b/J/du/+Y6ue31etf3X8Z3f135uV/evdu/9/l/PLnarOB4vu2dcr2+Nh8xnlzu3u7T1Fa8H8X7lbX/zJO9v/+L678k/+4/07E+9H688t7Zq/3y9P/hytq/sq/+v//Im5OPzvQr//76/4VmZYoXcf13b/fbQMOuJwAAAAAAAACDkTbn9iXpbDueprOzrXm+/4/JtLa6Xn/m2urbNyutOYDTMZYW8z+nOuaDzrduI2+nF3alz0fE2Yj4YupkMz27tFqrDPvgAQAA4Jg41ef3f+b3g9zsAQAAADycpoddAQAAAODQ+f0PAAAAR9qDrOtfq64V/yLogE8XETlYZCT/4D0s9Tl6kSGelAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIfwIAAP//keS8Nw==")
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x44}}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_setup(0x43d4, &(0x7f0000000340), &(0x7f00000002c0)=<r5=>0x0, &(0x7f0000000140))
syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r3, 0x48e9, 0x0, 0x0, 0x0, 0x0)
truncate(&(0x7f0000000000)='./file1\x00', 0xfbb0)
socket$nl_route(0x10, 0x3, 0x0)

7.138331752s ago: executing program 1 (id=777):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
personality(0x400000d)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) (fail_nth: 8)

6.373599324s ago: executing program 1 (id=783):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe00181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4f72271c}, 0x18)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x1000}}}}}, 0x0)

6.360897655s ago: executing program 33 (id=783):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe00181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4f72271c}, 0x18)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x1000}}}}}, 0x0)

2.680190446s ago: executing program 4 (id=825):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000580)='sys_enter\x00', r0, 0x0, 0x3}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket(0x10, 0x803, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f0000000280)={0x0, 0xfb, 0x67, 0x6, 0x4, "03d9e58edcc38e31c45276430141e9ee", "c2b42d07e296f36ab63a9b9dfce0a77fcbf63130e9872689f838bd318e7440cc31f74cbdb584b6dcd6ee23cce499996a3926d1428508e4d9a0cf9feb4cd0c8cee8c5953d68585fd9362d4125271daeea5dd8"}, 0x67, 0x0)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b90402", 0x11}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x33fe0)
listen(0xffffffffffffffff, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x20000004)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000060000000800000009"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r10}, 0x10)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x45, &(0x7f0000000100)={[{@resuid}]}, 0x1, 0x51b, &(0x7f0000000840)="$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")

2.4453769s ago: executing program 5 (id=828):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x5, 0x10, 0x12, 0x0, 0xc})
r1 = openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000f80)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=")
bpf$MAP_CREATE(0x0, 0x0, 0x48)
utime(0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r4}, 0x10)
socket(0x10, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRESOCT=r3, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
setresgid(0x0, 0x0, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28)
write$binfmt_script(r5, &(0x7f0000000780)={'#! ', './file0'}, 0xb)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff02}, &(0x7f0000000180)=0x40)

2.370889021s ago: executing program 4 (id=830):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

2.273953033s ago: executing program 5 (id=834):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000002000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x9cb3ce4731392a25)

2.247852273s ago: executing program 4 (id=836):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x300, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1000000}, 0x21)

2.225322424s ago: executing program 4 (id=837):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe0}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRES64, @ANYRES64=r0, @ANYRESHEX, @ANYRESOCT=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffe87)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00&\x00'], 0xfe33)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='hybla\x00', 0x6)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x1f00, 0x28, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x3}, 0x18)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x49, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x270, 0xffffff7a, 0xffffffff, 0x270, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010100, @loopback, 0x0, 0x0, 'netpci0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x6, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x100000, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xffffffa4, 0xd0}, @unspec=@CT1={0x0, 'CT\x00', 0x1, {0x8, 0x7f, 0x6, 0xffffff5d, 'syz0\x00', 'syz1\x00', {0x8000000000000000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370)
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x101b, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1b, 0x53, &(0x7f0000000440)=ANY=[], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x40e8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1bc9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10)
poll(&(0x7f00000003c0)=[{r2, 0xf477a488b06243c4}], 0x1, 0x80000000)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil)

2.224715804s ago: executing program 3 (id=838):
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0xe, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000440)='kfree\x00', r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r2=>0x0})
socket$inet_dccp(0x2, 0x6, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x9}}}, 0x24}}, 0x0)

2.214597394s ago: executing program 5 (id=840):
ioperm(0x4, 0x0, 0x9)
io_uring_setup(0x192, &(0x7f0000000800)={0x0, 0x4178, 0x800, 0x3, 0x3d9}) (async)
r0 = io_uring_setup(0x192, &(0x7f0000000800)={0x0, 0x4178, 0x800, 0x3, 0x3d9})
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x1a220, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(r1, &(0x7f00000000c0)=""/207, 0xcf, 0x9)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x45, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@norecovery}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000c40)="$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") (async)
syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x45, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@norecovery}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000c40)="$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")

2.124463015s ago: executing program 3 (id=842):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (fail_nth: 3)

2.050642327s ago: executing program 5 (id=843):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000280)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@minixdf}, {@acl}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x84, 0x459, &(0x7f0000000900)="$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")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r1, 0x10001, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r2}, 0x18)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, &(0x7f0000000300), &(0x7f0000000580)=""/215}, 0x20)

1.268522569s ago: executing program 3 (id=847):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000200000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x9cb3ce4731392a25)

1.26809769s ago: executing program 3 (id=848):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_io_uring_setup(0xbc2, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)='d', 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="2800000000000000020100000d0006003c12c51188b1e93a5a3d15a42f4d951437107025ad4709ab34790505c98d"], 0x28}, 0x0, 0x4800, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0)

1.170266831s ago: executing program 4 (id=849):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x0) (fail_nth: 6)

893.565356ms ago: executing program 3 (id=852):
r0 = socket$inet6(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0})

831.872107ms ago: executing program 4 (id=854):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)}, 0x20)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = mq_open(&(0x7f00000005c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1aD\x05!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x1b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\x00\x80\x00\x00w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86t\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99M\'j\x03\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00I\xd2\xae\x7f\xaf\xf4\xd1LEz\xd5\v\xcf\x8e\xbbT\xae\xe7H\xb0\x10\xd6\x86\xbfz\x98a\xc7\x1dN\xefMM{\x82j\x02\xa8\xfd\xb3\xf72\x0e\x19\xcc\xf9\xce\\T\xa6\x911\xfb\x8b\xcfk\xc2\xd2\xf4\n\xa0\x89\x9dt5\x0f0\f\xd4\x05P\x1c\xa8\xd7b\xb8\t\xa4^\"\x95\xf4\xfe:\x91,\xc7\xfbP\x97w\xc7\x1a|\xe3\x911\xdd\v\xa1-\xc1\x1d\xba0:\x89\xcd\x11\xa8\x93L\x9c))\xfa\x16\xa3\xdeE;j\f\xd8Q\xf4\xf8Nt\x96\xdaphV\x84\xd1\x9b%\xf8\xb2\x01\xf3\xce4Z\xa4\x91\x87?\x0e\xfe\x9e\xe6\xc4G\xe8)\xf4\xb9\x8e\x99j\xcc\x10b\xe4\xf8\xec\x9b\x12\xb1M\xdf\t fI\x95\xbdu`(\x1b\xca\x00\x00\x00dd@\xfc\xe5w=H\xbdiV\xd6\x9c\x81\x05\xb1\xbc\x93\x9fu\x1cx4\xb3\xd8\xa9ZK?\xf1\'\xdf\xbb\xbfy\xcc\x81y\x01\xbe+\x86\xc7\xbd\xefF.\x8d\x97[C\xc4\xc2\xf63W\a\xb2\x89\x15}kw\xdepe)uY\xde\xb8\x16\xc0\x95\x91.\xe7-\xb4\x8aP', 0x40, 0x9, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
mq_open(&(0x7f0000000000)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85b\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O\xb3\x14\xf6<\x851}y\"\xec\x81\xa9\xba\xd0\x1b3\x9bH\xe3<\xf2`\xe0m3v\xc7\x81\x9dq\xe4\x17\xd97\xc8\xa4\x94y*\x94\x13>\xe2\x1f\xceoX_\xb7\x15\xc8\xf1[\xc8\xa3\xf0\x9e\x80?3\x10\r\xe1\xc2', 0x2, 0x100, 0x0)

831.548257ms ago: executing program 5 (id=855):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1, 0x0, 0x4f72271c}, 0x18)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x1000}}}}}, 0x0)

830.532507ms ago: executing program 3 (id=856):
syz_io_uring_setup(0x7da1, &(0x7f0000000180)={0x0, 0xfffffffd, 0x8000, 0xfffffffe, 0x10a}, &(0x7f0000000000), &(0x7f0000000000))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xf7}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000240)=0x1, 0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f00000000c0), 0x7f, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000380)="ff1d61752d53ecdad75c71d52f58a842b0096d1cec2a99b72116238d541b2c7ed0000000000000412eb2c84208bba919bffc71cb47e5c973c9a8ea931367b7e1eb482c77fcedb55032adb91f64aad2c605a3790cd9134137e57c2a9b09ffe6dfce619e1b7f0300000000000000db37d0cfe3ee83c402d1b25444c396be18", 0x7e}], 0x1, 0x5c12, 0x0, 0x0)
sendfile(r3, r3, 0x0, 0x7a680000)

777.490598ms ago: executing program 5 (id=859):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
fsopen(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xff}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xa74}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2c}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xff}]}, 0x44}, 0x1, 0x0, 0x0, 0x44055}, 0x4004c00)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x410c84, &(0x7f00000003c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0x1, 0x775, &(0x7f0000001180)="$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")
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1cd081, 0x0)
geteuid()
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r2], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000002b9c0893ac2938fa315a00da000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x3ffff)
sendfile(r4, r3, 0x0, 0x7ffff000)

555.865391ms ago: executing program 6 (id=862):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_io_uring_setup(0xbc2, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)='d', 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="2800000000000000020100000d0006003c12c51188b1e93a5a3d15a42f4d951437107025ad4709ab34790505c98d"], 0x28}, 0x0, 0x4800, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0)

420.605494ms ago: executing program 6 (id=865):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000240)="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"}, {&(0x7f0000001240)="4b0b04c2bbde2dbdf2fbacbb327c7b4e758cba31c0b4182baa1f62d87fbee1bfb48fa9576f706166acac5b75308dcfd5048cbc7282d216900510de7154e4332b75193495d5b28ac51a52f5da140ac8962803e3c96db77f9c4fdf7df3a6e7d54569b81bff90e53f6c7413d424a152d25f96d87f7e445decf5b87a5173a0a34b2161b65b9e711e0e0df424dc0ca7e08e544edf6fb4"}, {&(0x7f0000001300)="066a012ef9d7a5db3335f4f41e8efed389a26ab37bd41927087274c805c577e5d46583036724fe161e0cadc3652146fbd10ace9137bf9c3f9cd53e36ee3492cad2d6250672ad873706e6d525b10c53cd2acb1d65ff1d045e9e8b4c370fb97b68bb4ee4fea709"}, {&(0x7f0000001380)="cfd6ad358441c79626a2333686c9915a143c849d7fe45848084417f6b3e473246ed890d597ebc62772ccb886cab6d950bb1b5011629bb5f1"}, {&(0x7f00000013c0)="61549d55a1a9f60e173f235301c5fcf243c559eb0b0843b2d62a519560f0788484aa77e67d82c7c9ef10be8795e687e0042c01ad42c3b145c2b47a6c84e239ab839e806c36ae90616009d2e285a5b5c235020a65faacd63c99dc6c75695a87f2feb141c6b1959561d6b6724187c92fcddd1f66a0ca08eb0ce2af8b1ec2371b572dba1bd90286d920cf387b8754fa166f9f3ee8607ceeff5f90625adb8805e2a00868d085c7b0074712bf00dc0824423459e4da43f7687c44ecafe410ab73f84abba307388181d417e716ac004039e9da007214ceb3b4cc3f6c5e13ef99277bd0a87f9b6f3baf754f5b292a111607554bbc2a6c82"}, {&(0x7f00000014c0)="695e0cc14e98c0409a94f1dd7755366b2106b8a35fe43bb62def5f8cb54062979abd69ae4fd4ed8d7832a5cbee37170d066db5580f885b9d33b60125c55b0a3df88aa429e931b4485f5fc30dc161d26c08b53316e119313eafdc106e5571c26a03e3331f62e8968326161a3536db14e16b114b66318fbc506206087ad7efb4795ecf8e360e9167472273c4f5ab0a8224ea9dc8eef792d50c40f97f8c7b70da0557652d257040ce4b8a0f428909c132499ed1af7167d0ace1ee48e8f724d4a61fbbe48b25074709523b0cfec00d78ec5c9bd2eb826db21526731ed4cb0fabf649d9dd5ffc8065c43c50fe"}, {&(0x7f00000015c0)="db61773261b35ae5fa68b8b39044bf37447ae66483eef4fde73c0ec8f84362736945509c75b2daec19b5253fb798507b02a26e"}, {&(0x7f0000001600)="215eadc83a5e3604dfc4851610cc1eff3144767621c4fefc362503749cab85510ea018cc7393e69a744934349a1290766a515bfe6dce2a159c5d7c7c237e6b50e90779f1259f037a660fff67d0824307862027e588c7ec7006413f1ec6b89662e0c6220840d50c7deef75ab67e686f8d16cbf518474b4e7572386fbbc8e79f183473"}, {&(0x7f00000016c0)="90de79ecc22a003b66603710aa16f590818d1aa884b6986ee27a3d24dbc2579ee0a08aafa8ba6908f67257cdadd176d72f5b729f8a1663f93f4a5e0a44a5ce6d542d3aadcd968417191259e7507b7c33db8ee75e0521dac00795bb8ee2ebdc09c01c60ca86e74bc1f92384cafc22297167add28759dce6893d4b59c3866011ff"}]}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5008}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000240)="43edff8e1db4eb84863f7c69a91d355256db34877f7accb7f4ddc37de35a2efbb01a35cdf8d49e80f17e2cd0423cd7533f20bb237a0d42dedfb7d9c47c569c9e36b73f646a8e84129c59102508519c390f5d5ce2a1026e6fe8e33d41e2093ea3fb90c85530f6439935026be14b9c6053fa4f07639de5a01d5ff72df712469bae9ad97b89fddb7a787e9af534ca1661cbd88f5498da5488fe3e972636b0a8cb9f37f4050f4204aded5cb51d9893ed3f829f6762e45384161ec68fe37ac50126c6e4fcf666b50fea7f8d177276364f2f28d9fa29a72bb11f5a94203f32fb09d74c4c37973ba416bf8061b4d2ecb88d91b5d6ddbd765d61d6f8f01bc2b88551e257eabe0ed743d7a54d5b23609bb7b6285ae15b1d687dafc81e3018ef9874fc499e375c95ec2155045f528758148c93d64e90ad2cc46fe16a46e6d296f85e6c9959e76285246a681d3e6f734d1769ffc016ca1ebaf2de1fcd1ca2a3b5561cb1bbf4dd3908f4cf0317500ef6de69cb2393e71c3dda33b3c516855bd2e0b8fe62ed59788ec80b99af02bae63d071a77cde3a5a0d89768567ea05085359d7862b369aea9dbc72c0086c7be061f9f8da396f9c91ce3bca113920a84e775e6c60cf1c8068b0d0391a4e3959bc6ecf5c145bb88973bc5dc9e3e8f8a8690e2c1338fb0204bcd20f3f7acc5c961e0e23ceaec45dee97e574505f7b8b8e168f4e987f84353985faf917af4c222ce14d3db2e7f39899ef8fbce651991389475bd8d38d88f3745672587b56e1eeed18f6b6ed636a35e6f038ba09aa358ab7c10fde976794ac128ce62aaf2f2f11e607f3f07aea584aa6fc2f8f0c8301a3af9494ffdb45f2dcf0403c9add7a7c9a3545b1e0d5f73510412d012c0886f9bbb0c2ed173c1c3f91f4401510ad2085145070487a323f5d6b62d7934b24319db8ee271bf018470136c195cdf3d02f6da913ca9955aa6c9feed780b05bd682e6ff6b0a243608296e23af559e438ec97572b4087535632626d45c2569270a0774401f492f3e40707e16a2370b64eda7ab807082186168b4af07bf8da21b8cd4b34c308f90618ed93b7e515dd8466870aa5a51596868d7c7438c5f3ffc194e5ff0be0e95df84da12fa6006d9bef6284740310c6ace833c38807b8114090ccb3678e7882f1cf9e6adf0df0aba69ac645b162d80c31e3e9a1040bff98058cd90753c8e90e7c42f88d0088dc952dd1cf349fd568951caaebb56b8787b15f21312b866fe7d36c4bb6825bbdf03c6e65ffe2de73fb0d9487e500559a47aff12d1579b373982cd99b8002908f309e8fff581cab371afe56bed76b833129363816d21b21c4f733e05fec765885f3cbb214fa8d6c46c004a680ad2ba52ac957323418ecb2aedd8712670c559550c7bd511e9e0a5079fee7329a0d5bd5ea860afb071ea5581a088c3dbefe793fb39e25d3a24eb95313f3ca279894bc848c8101f899257a1a15298d8a7d4c9a6d3c3f5000035338c994a7a7d653b9935cb83d3b33778da113ff8aa1a86d1bc374a85385313387787830f058642eb98ab0bdf66e02eca0befd6a4440011a6ae2e558a35e479706cdca7697fde1577078c78926d490fc36e9c5d76add53aae3c345a3cdefd6e7d6a0497440773fdb21ec26b92cf3c70f00a23a89f00c0a7dfe5f4a16c215129c20086bd2d3176be14925863afef2967fc78937e630644d5373369853352c00e6ed79e4c4185252eebe5fc85c97c4dd729c6a292752efd61a427125c46ecaa83c06203df8b5e10fb58a022c4b7d40f20361b8e6df5b6fa7331e7e6f4204e3e93809157fea56b2229864c8782c2caa2b910b7c284ac3950e871b2a9fbe82dbe63186bdd14555b1e1e1afaf07b2ff95e371a4ca7cca89399aba5ac075c6dbaef1825108591a07ab27bff966b4f0a12da7ea00d3ad3c38e95f7d1b4c4295d3d3f26973aa63a37fdbc78e96df1baa4ba320dc7c05d9ab5ff4f52ff8a01ec7f7c1c3f380abecd59d17c6866e6ccbfdb40d80a39a3d2ec2f73246dd4601fa1664d38e8e54b105129621eff41f036a4aaec8a1eba473d054e04f5a646f49ad62cf2bc466b4665f9f7c4d0f3808dfbe2004954e311174e9cc98859e0970191db8990529dc557bde2435e677bc1a980b6d7460f8beb6ba93d5248f7c8fb81a915ce90c3f4a200def00ddb12e7e9ea2b099783cfabc542bd9761d36110e0fbc4d6bf7debe261e77c2e84e6a15bcb3c0556815b40ffe1d396baecd6818ed3744ffcf7050b4827bf5437bb1bbd4a81630aafcd0d7b51027aa2261a6456a2538381a521675cff5a354e7a0076082f3399fd9c497cb6d17e38dbf8d300a591329041c5afb4ca77314469a80523547afc355595c022a39519493aa77764585e24ae2151e83e641081b136e1e1a5b600068f6bef08467bf2e4d511b4a53983c5ad7045b0ea9f65fa8b96ee96752c2a7cbdc36d2d4376028fb4f793dca7dcff7f3fb4d828b10db7d24d25be82a44d761c0f696d349ac6015297f8f04ce304064751b65aece8287fc18c6218c67ed9070c5b53e558f4f7f8c06d457f31f652a05a2b437f5e6c67823e83639f0f2c97024cf6dd719e42fd5515b90489e15d82484582dd885c333bef1161f5b31218fdc1ea3ef63907c0f6254153a61d49fea59eff3278572aedfba10bf25a6947814c8decfeeb06546fd4106da72cc9eab3515e89d1ed85e5b9f7dfdf3d5b4d3153e11eb09c231b71cefdfbd4b3e911023baedefa26f391b340af4ac8b59eeadb2229d047f48fed3b64b2ad041dcc950a70779d97c4daa8c91c376d033d8b0f49b251a27d239f2afa7b2c9d2dcae931a495c48f2a06bfafdc995fb54a8a63c4fdae14356665fc74a3799917e1862011de05c8bb5a7c1f0ad381d3aef69db85a19bf02034847886b05d972472a08c97766cb648f4e00f62a025bb13e6406d33f7706c74630d827358fa7b14aa345d1f068878687995e98a90b2ea59b2a6d66e6cd4fc4fe19ff03945fa232c7ca8d0b33156b00c6cd6be80bf7a894fad74232961b15019d78d95d71eebebda7665eaff1db2af25d7ed8c3b1c5d25bc67255134b5ed154bd19b5e73417410ae7c1b2c4162a17d56ff224ec200286ca3613840810cc2de8f9606d21a35ec0cc004d3357c5054f88dc33db76250e92b1b207496c46957078a6d121c266e245d318eb3c1983d25a57e2d50d7564cabf4593de72248146c7ea3f7b6f5c45600f4cf4de83b51b3c6206625a04975e5cd1dda9a9a2bd01f373cbd8c1d9e7fe0319fdd683cbbf7cff5342c7a0c89d4955953f6cd2b0f75fec92f5e13d016e137d886e30e35baaafd743f64675f5b05ff69d6f8387d8f464a4b60d9286f2cbcd43c13ff833235db3c9d1460c4fc049f08c881204542ca5c1a1fe621d12114130f0ef9165681cb1749c6dc55bc8cc58bbde4630ec3ad9edaf2e723d4f444c4a6204c337617f76df0498d129aa3ff74e437753202c49c765e62f27e9bfaee86de3e108ac0b99c9a1420f71bcd82bd8b44c915a61d7f2a7acaf4641dd65cb1ee1da94e2b32f59241356f9f6cef278beb7a820ea25b25646795ad7c379188f0818e723c8ab1a57b78326ccf5a6e4667ef11f961f4a15aa7d7e803d66424e66e9e1c2c31f8ee1c77637b7727b1153ad9c82a11a4a8701041edb092f50f5bfeb4fe387c472326d37cbf29bf5b1222fe7eca14abcdd3da8bb5710985dfb895cac726a63c98fa54109a7eac26a6d71680e95fdaf5f27603695fb7d7772dbd49e43d83b5fc9fedf4c0d1d941c9d167da01e184b539ca22df57c3b5c387b63b3f633eff1e8639f90e4320cda5636a4f9c69ddcf54580ba5e51ced66dac545dcf3399438bade5ba1afaa944fa8b413feea71b86e4558c85f3835dcc5fbc67111f25b1895aa2fb5ef1d826a29987da489f4c4e8ed0a7bce0a925747c7f62285ea3e8b85fe2cee93bd1f7651a5ca362bd336b4d6b282b6dfdfeceae6fd84f54a5ef074188125fe0621f9749023273dfb6327629ed0ef06574c1863b23bcdd27fb11e275600374f6fd53723d2d92bd538743dabd50a4be470a1600df5c5d3963dff0ad8f4432114a09c20c3c70625d0a545de35143d0b74597295ef3c6b9ee4626463341e69400b95cfde40245686ccab5938556e12180e5096bb20cf47d80af82f7aaa18c3bb8dbfae3115116eb237c61aa39fbf43fe875c31318cd36617f0c443770c969aa4916c0a291752c9a278d9a6a1ef3e334183607be7f274f169c79a34d00c86cb7e5452deb6ba00f40fc2a2c7cd7f21a4528f93c3b2cb21451b7fa0787d39888e0e57ae44218ac538118334208e3e006935a2219581bbedb008bdb4c6cd253ab4f192419f998884fb1e7c1018e1ad005d4a3aa424a123ef5b188b5ad2bfd950bb793d318a42aba4e7ab6c3f6ed9a913d08346f1cafa9c8b6787a70dc9fc2e2d647d886e2246dc852831a2f0ac4571c8063d830941f7c79ab009fb34ca2c4cd430693d6d488f0c52b7e2c696779e3dfc497ae4b405e01f2dd4e97bdc0658ec54a78f5f32766938dff906341d1b2ef9752d6e8861993ae6871bf391f05ce56bc565809782b142cc0a808cbdc7dac3606b70909707707488ce2a40d036228bdf73f42fe071543cb8cbb5ba3a2e7536b1913c04497732357970c47bc5fee22b0c7f3f2a8c88a207d298c6a986ce3de25b09dde719fc93610ff0a0fd5660275a2277bb489044d03f160a95641bbb9f388593800db9f17ad4754e80c18f8d0373f942aa8dff29c2a60c4c87d8bc144e96a8c75a374748c3e18a729a0a30567efa5ea83fbf160310414c42569eb27a447dd2e1af1b5c675a0c2cd90a1e7b00e0215ef3ed0443a402b687ebc1ed055e5c2cca1cc337c08986ab41471f8a6178b59ff43e3498eab9ec29b2f959aa22f019b22ef7a08bff0092845ffdb28f443327f4223c97410f25815d01ecaceb99d7ce92faa8d1dad90a17a07e37a864ee222b0ee2c9ab7c2567e5b098de55f7eb296e78f9f18b0280772d740c00a4c0b36aa8204e744dc9c4f7a84847e823fc42e0a181ea507ec786beba2eda38afb66dc9464979f6ae6e542426abb4d99318d6fd01179955b83fa80b2bc2b407745dff4f8cacbf5111d56098a835d56a5d4364575a82959d953a21c3dc8dc8526806793592871f37d5b1e58c6a4ea7c2831d3e51e5bcfac8dde1e0ab85cc2efd4a1353794769b887d2415cfc00e29027f7862e94e18e21bb3e28a9684625a5e3034d47d81e357c859600684bcc314f29f28ccad0515fb2c5c17a8ab4b489b41a8100b8ebec48e0927528fa21476e0a882e547ff17898bc287a1a4a511c49f7b1f6a81f63031a662b110e47229924f2361a6efb66c1680b2b4490312b4705de6dc8d1d3f1815acda080eb35f7e165530507d8ddce98a2957ce3d52b5d318fcf62dbb4ec9fc60c4750d0154a370087395bc56d7e488da6b5ea874576c598ae7ade19634ef989e08a8d8599b0fc48e48e6ac2af8b74863d3dfb565b4c92cd22a59ae5234147826701d4c821c2c4cbae268efbefd5b617ee91fd1feeae79ed793e47c0da7e66ab0733b6106e25b1eb9bd7c46166cff2b2cdfd38948c33d7d1763011e987143108dbd0cc493d516b0e53722cbbbf61966ec7fdd7bcde492c2c56a4ea3323e248caaf07f284d87e9af601cb0bb9337bfc69be298fadd290552e744815a6aa556012d68caa2dbdbf4d07a434b99efc067c90ce372962d298cdcddb6b12c17ce6b006b6a640c42f4a1e54fafe3717eac1eda4af526e2c80ecc77b40"}, {&(0x7f0000001240)="4b0b04c2bbde2dbdf2fbacbb327c7b4e758cba31c0b4182baa1f62d87fbee1bfb48fa9576f706166acac5b75308dcfd5048cbc7282d216900510de7154e4332b75193495d5b28ac51a52f5da140ac8962803e3c96db77f9c4fdf7df3a6e7d54569b81bff90e53f6c7413d424a152d25f96d87f7e445decf5b87a5173a0a34b2161b65b9e711e0e0df424dc0ca7e08e544edf6fb4"}, {&(0x7f0000001300)="066a012ef9d7a5db3335f4f41e8efed389a26ab37bd41927087274c805c577e5d46583036724fe161e0cadc3652146fbd10ace9137bf9c3f9cd53e36ee3492cad2d6250672ad873706e6d525b10c53cd2acb1d65ff1d045e9e8b4c370fb97b68bb4ee4fea709"}, {&(0x7f0000001380)="cfd6ad358441c79626a2333686c9915a143c849d7fe45848084417f6b3e473246ed890d597ebc62772ccb886cab6d950bb1b5011629bb5f1"}, {&(0x7f00000013c0)="61549d55a1a9f60e173f235301c5fcf243c559eb0b0843b2d62a519560f0788484aa77e67d82c7c9ef10be8795e687e0042c01ad42c3b145c2b47a6c84e239ab839e806c36ae90616009d2e285a5b5c235020a65faacd63c99dc6c75695a87f2feb141c6b1959561d6b6724187c92fcddd1f66a0ca08eb0ce2af8b1ec2371b572dba1bd90286d920cf387b8754fa166f9f3ee8607ceeff5f90625adb8805e2a00868d085c7b0074712bf00dc0824423459e4da43f7687c44ecafe410ab73f84abba307388181d417e716ac004039e9da007214ceb3b4cc3f6c5e13ef99277bd0a87f9b6f3baf754f5b292a111607554bbc2a6c82"}, {&(0x7f00000014c0)="695e0cc14e98c0409a94f1dd7755366b2106b8a35fe43bb62def5f8cb54062979abd69ae4fd4ed8d7832a5cbee37170d066db5580f885b9d33b60125c55b0a3df88aa429e931b4485f5fc30dc161d26c08b53316e119313eafdc106e5571c26a03e3331f62e8968326161a3536db14e16b114b66318fbc506206087ad7efb4795ecf8e360e9167472273c4f5ab0a8224ea9dc8eef792d50c40f97f8c7b70da0557652d257040ce4b8a0f428909c132499ed1af7167d0ace1ee48e8f724d4a61fbbe48b25074709523b0cfec00d78ec5c9bd2eb826db21526731ed4cb0fabf649d9dd5ffc8065c43c50fe"}, {&(0x7f00000015c0)="db61773261b35ae5fa68b8b39044bf37447ae66483eef4fde73c0ec8f84362736945509c75b2daec19b5253fb798507b02a26e"}, {&(0x7f0000001600)="215eadc83a5e3604dfc4851610cc1eff3144767621c4fefc362503749cab85510ea018cc7393e69a744934349a1290766a515bfe6dce2a159c5d7c7c237e6b50e90779f1259f037a660fff67d0824307862027e588c7ec7006413f1ec6b89662e0c6220840d50c7deef75ab67e686f8d16cbf518474b4e7572386fbbc8e79f183473"}, {&(0x7f00000016c0)="90de79ecc22a003b66603710aa16f590818d1aa884b6986ee27a3d24dbc2579ee0a08aafa8ba6908f67257cdadd176d72f5b729f8a1663f93f4a5e0a44a5ce6d542d3aadcd968417191259e7507b7c33db8ee75e0521dac00795bb8ee2ebdc09c01c60ca86e74bc1f92384cafc22297167add28759dce6893d4b59c3866011ff"}]}, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5008}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) (async)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)

401.226834ms ago: executing program 6 (id=866):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0xfc}}, 0x0)

377.590574ms ago: executing program 6 (id=867):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x141099, &(0x7f0000000b80)={[{@usrjquota}, {@norecovery}, {@bh}, {@usrjquota}, {@data_journal}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x10000000000313}}, {@block_validity}, {@i_version}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}]}, 0x0, 0x5fd, &(0x7f00000004c0)="$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")
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x900, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="020a0600060000002abd7000ffdbdf250400"], 0x30}}, 0x44880)

326.794755ms ago: executing program 0 (id=868):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='fsi_master_gpio_in\x00', r1, 0x0, 0x180000}, 0x18)
r2 = socket$unix(0x1, 0x1, 0x0)
recvmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d80)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x41, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'rose0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x40)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xfffffdb9, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0xffffffffffffffff, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4048884)

326.436605ms ago: executing program 6 (id=869):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1, 0x0, 0x4f72271c}, 0x18)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x1000}}}}}, 0x0)

295.320056ms ago: executing program 6 (id=870):
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0xe, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r1=>0x0})
socket$inet_dccp(0x2, 0x6, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x9}}}, 0x24}}, 0x0)

242.162866ms ago: executing program 0 (id=871):
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

202.975037ms ago: executing program 0 (id=872):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000002600181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

124.507619ms ago: executing program 0 (id=873):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x2000000000000282, &(0x7f0000000280)=ANY=[@ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfc, 0x4, 0x7ffc1ffb}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
setgroups(0x0, 0x0)
r4 = getgid()
setgroups(0x1, &(0x7f0000000700)=[r4])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r1}, 0x18)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
syz_emit_ethernet(0x8a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500007c006500000021907800000000ffffffff050390780a0101004800000000000003ff0000007f0000014e141411891ba5e0000002ffffffffffffffffac1e0001ac14141cffffffff000e83dc61b1ce5707432dd0595d44205a400000000b00000003fffffff40000000000007fff0000000600000000000000"], 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0xd0, 0x0, 0x0, 0x300, 0x300, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [0x0, 0xffffffff], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0x0, 0xffffff00], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@ipv6={@mcast1, @remote, [0x0, 0x34c67f89a7e81950], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x0, 0x48}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001900)="$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")
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0x41009432, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20)

54.69135ms ago: executing program 0 (id=874):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
recvmmsg(r0, &(0x7f0000004940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e80)=""/19, 0x13}, 0x3}], 0x1, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4)
sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)

0s ago: executing program 0 (id=875):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_io_uring_setup(0xbc2, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)='d', 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="2800000000000000020100000d0006003c12c51188b1e93a5a3d15a42f4d951437107025ad4709ab34790505c98d"], 0x28}, 0x0, 0x4800, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.935003][ T4226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.945547][ T4226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.948517][ T4362] loop1: detected capacity change from 0 to 128
[   47.955533][ T4226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.972193][ T4226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.983596][ T4226] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.992305][ T4226] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.001051][ T4226] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.009833][ T4226] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.018687][ T4226] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.114414][ T4367] syzkaller0: entered promiscuous mode
[   48.116200][ T4370] loop4: detected capacity change from 0 to 128
[   48.119982][ T4367] syzkaller0: entered allmulticast mode
[   48.152993][ T4370] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   48.167149][ T4370] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.233502][ T4380] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[   48.240099][ T4380] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   48.247630][ T4380] vhci_hcd vhci_hcd.0: Device attached
[   48.373972][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   48.422168][ T4381] vhci_hcd: connection closed
[   48.422581][   T31] vhci_hcd: stop threads
[   48.431619][   T31] vhci_hcd: release socket
[   48.436064][   T31] vhci_hcd: disconnect device
[   48.440961][ T1054] vhci_hcd: vhci_device speed not set
[   48.518701][ T4387] loop0: detected capacity change from 0 to 8192
[   48.529455][ T4387] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   48.553157][ T4389] loop4: detected capacity change from 0 to 128
[   48.573322][ T4389] netlink: 24 bytes leftover after parsing attributes in process `syz.4.296'.
[   48.590602][ T4390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'.
[   48.600457][ T4389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'.
[   48.610555][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   48.624375][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1
[   48.724421][ T4397] xt_hashlimit: max too large, truncated to 1048576
[   48.851713][  T171] kworker/u8:5: attempt to access beyond end of device
[   48.851713][  T171] loop1: rw=1, sector=145, nr_sectors = 896 limit=128
[   48.916897][ T4409] loop1: detected capacity change from 0 to 1024
[   48.925897][ T4409] EXT4-fs: Ignoring removed nobh option
[   48.931500][ T4409] EXT4-fs: Ignoring removed bh option
[   48.946628][ T4409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.070897][ T4425] loop3: detected capacity change from 0 to 512
[   49.091912][ T4426] loop0: detected capacity change from 0 to 8192
[   49.145580][ T4426]  loop0: p1 p2 < > p3 p4 < p5 >
[   49.150570][ T4426] loop0: partition table partially beyond EOD, truncated
[   49.172034][ T4426] loop0: p1 size 100663296 extends beyond EOD, truncated
[   49.196791][ T4426] loop0: p2 start 591104 is beyond EOD, truncated
[   49.203273][ T4426] loop0: p3 start 33572980 is beyond EOD, truncated
[   49.210758][ T4426] loop0: p5 size 100663296 extends beyond EOD, truncated
[   49.334380][ T4445] Zero length message leads to an empty skb
[   49.340996][ T4463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.363790][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.373671][ T4463] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.390752][ T4464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.318'.
[   49.503211][ T4474] loop1: detected capacity change from 0 to 128
[   49.510346][ T4474] FAT-fs (loop1): bogus logical sector size 0
[   49.516557][ T4474] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   49.525944][ T4474] FAT-fs (loop1): Can't find a valid FAT filesystem
[   49.535265][ T4474] netlink: 96 bytes leftover after parsing attributes in process `syz.1.324'.
[   49.581362][ T4478] loop1: detected capacity change from 0 to 128
[   49.601260][ T4478] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   49.613954][ T4478] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   50.033971][ T4485] loop4: detected capacity change from 0 to 1764
[   50.043941][ T4485] 
@ÿ: renamed from bond_slave_0 (while UP)
[   50.148079][ T4505] xt_hashlimit: max too large, truncated to 1048576
[   50.242803][ T4511] FAULT_INJECTION: forcing a failure.
[   50.242803][ T4511] name failslab, interval 1, probability 0, space 0, times 0
[   50.255510][ T4511] CPU: 1 UID: 0 PID: 4511 Comm: syz.0.338 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   50.255542][ T4511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   50.255557][ T4511] Call Trace:
[   50.255564][ T4511]  <TASK>
[   50.255572][ T4511]  dump_stack_lvl+0xf6/0x150
[   50.255661][ T4511]  dump_stack+0x15/0x1a
[   50.255681][ T4511]  should_fail_ex+0x261/0x270
[   50.255709][ T4511]  should_failslab+0x8f/0xb0
[   50.255793][ T4511]  __kmalloc_node_track_caller_noprof+0xaa/0x410
[   50.255906][ T4511]  ? sidtab_sid2str_get+0xb8/0x140
[   50.255934][ T4511]  ? skb_put+0xba/0x100
[   50.255954][ T4511]  kmemdup_noprof+0x2b/0x70
[   50.256010][ T4511]  sidtab_sid2str_get+0xb8/0x140
[   50.256033][ T4511]  security_sid_to_context_core+0x1eb/0x2f0
[   50.256068][ T4511]  security_sid_to_context+0x27/0x30
[   50.256141][ T4511]  avc_audit_post_callback+0x9f/0x540
[   50.256166][ T4511]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   50.256189][ T4511]  common_lsm_audit+0x1c6/0x230
[   50.256226][ T4511]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   50.256319][ T4511]  slow_avc_audit+0xff/0x140
[   50.256345][ T4511]  avc_has_perm+0x124/0x150
[   50.256376][ T4511]  file_has_perm+0x334/0x380
[   50.256433][ T4511]  selinux_file_permission+0x32a/0x360
[   50.256455][ T4511]  security_file_permission+0x3d/0x80
[   50.256560][ T4511]  vfs_write+0x14e/0x950
[   50.256658][ T4511]  ? __rcu_read_unlock+0x4e/0x70
[   50.256685][ T4511]  ? __fget_files+0x186/0x1c0
[   50.256713][ T4511]  ksys_write+0xeb/0x1b0
[   50.256736][ T4511]  __x64_sys_write+0x42/0x50
[   50.256770][ T4511]  x64_sys_call+0x2a45/0x2e10
[   50.256796][ T4511]  do_syscall_64+0xc9/0x1a0
[   50.256826][ T4511]  ? clear_bhb_loop+0x25/0x80
[   50.256846][ T4511]  ? clear_bhb_loop+0x25/0x80
[   50.256871][ T4511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.256926][ T4511] RIP: 0033:0x7f0a2d7ae169
[   50.256940][ T4511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.256957][ T4511] RSP: 002b:00007f0a2be17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   50.256975][ T4511] RAX: ffffffffffffffda RBX: 00007f0a2d9d5fa0 RCX: 00007f0a2d7ae169
[   50.256987][ T4511] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000007
[   50.256998][ T4511] RBP: 00007f0a2be17090 R08: 0000000000000000 R09: 0000000000000000
[   50.257066][ T4511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.257083][ T4511] R13: 0000000000000000 R14: 00007f0a2d9d5fa0 R15: 00007ffee930b278
[   50.257101][ T4511]  </TASK>
[   50.525765][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'.
[   50.542102][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   50.677778][ T4528] FAULT_INJECTION: forcing a failure.
[   50.677778][ T4528] name failslab, interval 1, probability 0, space 0, times 0
[   50.690585][ T4528] CPU: 1 UID: 0 PID: 4528 Comm: syz.3.345 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   50.690676][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   50.690686][ T4528] Call Trace:
[   50.690691][ T4528]  <TASK>
[   50.690698][ T4528]  dump_stack_lvl+0xf6/0x150
[   50.690718][ T4528]  dump_stack+0x15/0x1a
[   50.690733][ T4528]  should_fail_ex+0x261/0x270
[   50.690786][ T4528]  should_failslab+0x8f/0xb0
[   50.690804][ T4528]  __kmalloc_cache_noprof+0x55/0x320
[   50.690829][ T4528]  ? nf_tables_newtable+0x3c5/0xf10
[   50.690889][ T4528]  nf_tables_newtable+0x3c5/0xf10
[   50.690929][ T4528]  nfnetlink_rcv+0xb6e/0x1610
[   50.690975][ T4528]  netlink_unicast+0x605/0x6c0
[   50.691018][ T4528]  netlink_sendmsg+0x609/0x720
[   50.691039][ T4528]  ? __pfx_netlink_sendmsg+0x10/0x10
[   50.691057][ T4528]  __sock_sendmsg+0x140/0x180
[   50.691083][ T4528]  ____sys_sendmsg+0x350/0x4e0
[   50.691181][ T4528]  __sys_sendmsg+0x1a0/0x240
[   50.691214][ T4528]  __x64_sys_sendmsg+0x46/0x50
[   50.691234][ T4528]  x64_sys_call+0x26f3/0x2e10
[   50.691325][ T4528]  do_syscall_64+0xc9/0x1a0
[   50.691347][ T4528]  ? clear_bhb_loop+0x25/0x80
[   50.691419][ T4528]  ? clear_bhb_loop+0x25/0x80
[   50.691436][ T4528]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.691507][ T4528] RIP: 0033:0x7f2cc04ee169
[   50.691521][ T4528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.691539][ T4528] RSP: 002b:00007f2cbeb57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   50.691560][ T4528] RAX: ffffffffffffffda RBX: 00007f2cc0715fa0 RCX: 00007f2cc04ee169
[   50.691643][ T4528] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003
[   50.691657][ T4528] RBP: 00007f2cbeb57090 R08: 0000000000000000 R09: 0000000000000000
[   50.691670][ T4528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.691684][ T4528] R13: 0000000000000000 R14: 00007f2cc0715fa0 R15: 00007ffe32d1fc78
[   50.691705][ T4528]  </TASK>
[   50.916163][ T4532] loop3: detected capacity change from 0 to 1024
[   50.999631][ T4535] loop3: detected capacity change from 0 to 2048
[   51.026794][ T4535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.375145][ T4539] loop0: detected capacity change from 0 to 128
[   51.836982][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.861849][ T4551] SET target dimension over the limit!
[   51.948739][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.357'.
[   51.957617][ T4559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.357'.
[   51.966533][ T4559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.357'.
[   51.994200][   T29] kauditd_printk_skb: 585 callbacks suppressed
[   51.994225][   T29] audit: type=1326 audit(1745258228.959:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.3.358" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2cc04ee169 code=0x0
[   52.051943][ T4563] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   52.069975][ T4565] loop1: detected capacity change from 0 to 1024
[   52.077047][ T4565] EXT4-fs: Ignoring removed nobh option
[   52.083153][ T4565] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   52.099521][ T4565] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.359: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[   52.119184][ T4565] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.359: couldn't read orphan inode 11 (err -117)
[   52.131629][ T4565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.147036][ T4565] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.359: Invalid block bitmap block 0 in block_group 0
[   52.161006][ T4565] Quota error (device loop1): write_blk: dquota write failed
[   52.168489][ T4565] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   52.179652][ T4565] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.359: Failed to acquire dquot type 0
[   52.192468][ T4565] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.359: Invalid inode bitmap blk 137438953472 in block_group 0
[   52.224920][   T29] audit: type=1326 audit(1745258229.179:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.1.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d087ce169 code=0x7ffc0000
[   52.248380][   T29] audit: type=1326 audit(1745258229.179:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.1.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1d087ce169 code=0x7ffc0000
[   52.271643][   T29] audit: type=1326 audit(1745258229.179:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.1.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d087ce169 code=0x7ffc0000
[   52.295110][   T29] audit: type=1326 audit(1745258229.179:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.1.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f1d087ce169 code=0x7ffc0000
[   52.318631][   T29] audit: type=1326 audit(1745258229.179:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.1.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d087ce169 code=0x7ffc0000
[   52.342073][   T38] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm kworker/u8:2: Invalid inode table block 8589934593 in block_group 0
[   52.404612][   T31] kworker/u8:1: attempt to access beyond end of device
[   52.404612][   T31] loop0: rw=1, sector=145, nr_sectors = 896 limit=128
[   52.421578][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.448520][   T29] audit: type=1326 audit(1745258229.419:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.5.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fccdde169 code=0x7ffc0000
[   52.472003][   T29] audit: type=1326 audit(1745258229.419:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.5.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fccdde169 code=0x7ffc0000
[   52.586444][ T4582] loop1: detected capacity change from 0 to 2048
[   52.614297][ T4582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.659554][ T4589] loop5: detected capacity change from 0 to 164
[   52.684223][ T4589] tipc: Can't bind to reserved service type 2
[   52.826235][ T4599] loop5: detected capacity change from 0 to 1024
[   52.833477][ T4599] EXT4-fs: inline encryption not supported
[   52.839504][ T4599] EXT4-fs: Ignoring removed bh option
[   52.847126][ T4599] EXT4-fs: Mount option(s) incompatible with ext3
[   52.908535][ T4609] FAULT_INJECTION: forcing a failure.
[   52.908535][ T4609] name failslab, interval 1, probability 0, space 0, times 0
[   52.921412][ T4609] CPU: 1 UID: 0 PID: 4609 Comm: syz.0.378 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   52.921443][ T4609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   52.921462][ T4609] Call Trace:
[   52.921469][ T4609]  <TASK>
[   52.921477][ T4609]  dump_stack_lvl+0xf6/0x150
[   52.921539][ T4609]  dump_stack+0x15/0x1a
[   52.921559][ T4609]  should_fail_ex+0x261/0x270
[   52.921587][ T4609]  should_failslab+0x8f/0xb0
[   52.921611][ T4609]  kmem_cache_alloc_noprof+0x59/0x340
[   52.921636][ T4609]  ? radix_tree_node_alloc+0x8b/0x1e0
[   52.921728][ T4609]  radix_tree_node_alloc+0x8b/0x1e0
[   52.921757][ T4609]  idr_get_free+0x1f5/0x560
[   52.921783][ T4609]  idr_alloc_u32+0xcd/0x180
[   52.921814][ T4609]  tcf_idr_check_alloc+0x171/0x270
[   52.921922][ T4609]  tcf_police_init+0x1d6/0xc80
[   52.921987][ T4609]  ? should_fail_ex+0xd7/0x270
[   52.922077][ T4609]  tcf_action_init_1+0x34b/0x4c0
[   52.922154][ T4609]  tcf_action_init+0x1ce/0x620
[   52.922218][ T4609]  tc_ctl_action+0x2be/0x880
[   52.922252][ T4609]  ? __rcu_read_unlock+0x34/0x70
[   52.922353][ T4609]  ? __pfx_tc_ctl_action+0x10/0x10
[   52.922384][ T4609]  rtnetlink_rcv_msg+0x6b7/0x740
[   52.922418][ T4609]  ? ref_tracker_free+0x3b8/0x420
[   52.922487][ T4609]  netlink_rcv_skb+0x12f/0x230
[   52.922511][ T4609]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   52.922546][ T4609]  rtnetlink_rcv+0x1c/0x30
[   52.922569][ T4609]  netlink_unicast+0x605/0x6c0
[   52.922623][ T4609]  netlink_sendmsg+0x609/0x720
[   52.922646][ T4609]  ? __pfx_netlink_sendmsg+0x10/0x10
[   52.922670][ T4609]  __sock_sendmsg+0x140/0x180
[   52.922707][ T4609]  ____sys_sendmsg+0x350/0x4e0
[   52.922758][ T4609]  __sys_sendmsg+0x1a0/0x240
[   52.922884][ T4609]  __x64_sys_sendmsg+0x46/0x50
[   52.922913][ T4609]  x64_sys_call+0x26f3/0x2e10
[   52.922938][ T4609]  do_syscall_64+0xc9/0x1a0
[   52.922962][ T4609]  ? clear_bhb_loop+0x25/0x80
[   52.923042][ T4609]  ? clear_bhb_loop+0x25/0x80
[   52.923108][ T4609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.923127][ T4609] RIP: 0033:0x7f0a2d7ae169
[   52.923144][ T4609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   52.923165][ T4609] RSP: 002b:00007f0a2be17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   52.923188][ T4609] RAX: ffffffffffffffda RBX: 00007f0a2d9d5fa0 RCX: 00007f0a2d7ae169
[   52.923257][ T4609] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[   52.923270][ T4609] RBP: 00007f0a2be17090 R08: 0000000000000000 R09: 0000000000000000
[   52.923281][ T4609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   52.923291][ T4609] R13: 0000000000000000 R14: 00007f0a2d9d5fa0 R15: 00007ffee930b278
[   52.923313][ T4609]  </TASK>
[   53.243197][ T4613] netlink: 116 bytes leftover after parsing attributes in process `syz.5.379'.
[   53.272170][ T4615] loop0: detected capacity change from 0 to 1024
[   53.304201][ T4620] xt_hashlimit: max too large, truncated to 1048576
[   53.356290][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.396499][ T4624] loop3: detected capacity change from 0 to 256
[   53.508066][ T4638] loop3: detected capacity change from 0 to 1024
[   53.538786][ T4640] xt_time: invalid argument - start or stop time greater than 23:59:59
[   53.539843][ T4638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.581023][ T4638] 9pnet_fd: Insufficient options for proto=fd
[   53.636180][ T4628] netlink: 40 bytes leftover after parsing attributes in process `syz.4.384'.
[   53.658626][ T4628] netlink: 'syz.4.384': attribute type 1 has an invalid length.
[   53.681874][ T4628] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   53.720439][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.746591][ T4654] FAULT_INJECTION: forcing a failure.
[   53.746591][ T4654] name failslab, interval 1, probability 0, space 0, times 0
[   53.759367][ T4654] CPU: 1 UID: 0 PID: 4654 Comm: syz.0.393 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   53.759471][ T4654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   53.759482][ T4654] Call Trace:
[   53.759488][ T4654]  <TASK>
[   53.759495][ T4654]  dump_stack_lvl+0xf6/0x150
[   53.759554][ T4654]  dump_stack+0x15/0x1a
[   53.759574][ T4654]  should_fail_ex+0x261/0x270
[   53.759764][ T4654]  should_failslab+0x8f/0xb0
[   53.759787][ T4654]  __kvmalloc_node_noprof+0x12c/0x520
[   53.759820][ T4654]  ? xt_alloc_entry_offsets+0x47/0x50
[   53.759857][ T4654]  ? mntput_no_expire+0x73/0x3e0
[   53.759896][ T4654]  xt_alloc_entry_offsets+0x47/0x50
[   53.759924][ T4654]  translate_table+0xa2/0xfe0
[   53.760011][ T4654]  ? __memcg_slab_post_alloc_hook+0x473/0x5a0
[   53.760069][ T4654]  ? _copy_from_user+0x89/0xa0
[   53.760105][ T4654]  do_ipt_set_ctl+0x65a/0x830
[   53.760184][ T4654]  ? _raw_spin_unlock_bh+0x36/0x40
[   53.760219][ T4654]  nf_setsockopt+0x195/0x1b0
[   53.760245][ T4654]  ip_setsockopt+0xea/0x100
[   53.760275][ T4654]  udp_setsockopt+0x95/0xb0
[   53.760301][ T4654]  sock_common_setsockopt+0x64/0x80
[   53.760388][ T4654]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   53.760419][ T4654]  __sys_setsockopt+0x187/0x200
[   53.760452][ T4654]  __x64_sys_setsockopt+0x66/0x80
[   53.760479][ T4654]  x64_sys_call+0x2a09/0x2e10
[   53.760519][ T4654]  do_syscall_64+0xc9/0x1a0
[   53.760549][ T4654]  ? clear_bhb_loop+0x25/0x80
[   53.760574][ T4654]  ? clear_bhb_loop+0x25/0x80
[   53.760599][ T4654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.760651][ T4654] RIP: 0033:0x7f0a2d7ae169
[   53.760666][ T4654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   53.760681][ T4654] RSP: 002b:00007f0a2be17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   53.760742][ T4654] RAX: ffffffffffffffda RBX: 00007f0a2d9d5fa0 RCX: 00007f0a2d7ae169
[   53.760755][ T4654] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006
[   53.760765][ T4654] RBP: 00007f0a2be17090 R08: 0000000000000310 R09: 0000000000000000
[   53.760776][ T4654] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[   53.760786][ T4654] R13: 0000000000000000 R14: 00007f0a2d9d5fa0 R15: 00007ffee930b278
[   53.760876][ T4654]  </TASK>
[   53.762474][ T4645] netlink: 36 bytes leftover after parsing attributes in process `syz.1.391'.
[   53.835667][ T4658] loop4: detected capacity change from 0 to 512
[   54.007103][ T4656] FAULT_INJECTION: forcing a failure.
[   54.007103][ T4656] name failslab, interval 1, probability 0, space 0, times 0
[   54.019754][ T4656] CPU: 1 UID: 0 PID: 4656 Comm: syz.0.395 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   54.019784][ T4656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   54.019798][ T4656] Call Trace:
[   54.019805][ T4656]  <TASK>
[   54.019813][ T4656]  dump_stack_lvl+0xf6/0x150
[   54.019840][ T4656]  dump_stack+0x15/0x1a
[   54.019857][ T4656]  should_fail_ex+0x261/0x270
[   54.019880][ T4656]  should_failslab+0x8f/0xb0
[   54.019900][ T4656]  kmem_cache_alloc_noprof+0x59/0x340
[   54.019926][ T4656]  ? mas_alloc_nodes+0x1f4/0x4a0
[   54.019952][ T4656]  mas_alloc_nodes+0x1f4/0x4a0
[   54.019978][ T4656]  mas_preallocate+0x48d/0x6b0
[   54.020006][ T4656]  mmap_region+0x983/0x1490
[   54.020054][ T4656]  do_mmap+0x9ef/0xc80
[   54.020076][ T4656]  vm_mmap_pgoff+0x16d/0x2d0
[   54.020112][ T4656]  ksys_mmap_pgoff+0xd0/0x340
[   54.020130][ T4656]  ? fpregs_assert_state_consistent+0x83/0xa0
[   54.020159][ T4656]  x64_sys_call+0x1945/0x2e10
[   54.020179][ T4656]  do_syscall_64+0xc9/0x1a0
[   54.020201][ T4656]  ? clear_bhb_loop+0x25/0x80
[   54.020221][ T4656]  ? clear_bhb_loop+0x25/0x80
[   54.020240][ T4656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.020259][ T4656] RIP: 0033:0x7f0a2d7ae1a3
[   54.020272][ T4656] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7
[   54.020288][ T4656] RSP: 002b:00007f0a2be16e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   54.020305][ T4656] RAX: ffffffffffffffda RBX: 00000000000007da RCX: 00007f0a2d7ae1a3
[   54.020316][ T4656] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
[   54.020327][ T4656] RBP: 0000200000000d82 R08: 00000000ffffffff R09: 0000000000000000
[   54.020338][ T4656] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000008
[   54.020348][ T4656] R13: 00007f0a2be16ef0 R14: 00007f0a2be16eb0 R15: 0000200000000900
[   54.020366][ T4656]  </TASK>
[   54.023321][ T4658] EXT4-fs (loop4): orphan cleanup on readonly fs
[   54.219761][ T4658] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.396: bad orphan inode 13
[   54.230159][ T4658] ext4_test_bit(bit=12, block=18) = 1
[   54.235591][ T4658] is_bad_inode(inode)=0
[   54.239761][ T4658] NEXT_ORPHAN(inode)=2130706432
[   54.244617][ T4658] max_ino=32
[   54.247878][ T4658] i_nlink=1
[   54.251388][ T4658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   54.368469][ T4678] xt_hashlimit: max too large, truncated to 1048576
[   54.379692][ T4681] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[   54.436153][ T4690] loop5: detected capacity change from 0 to 1024
[   54.438792][ T4681] EXT4-fs warning (device loop4): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop4.
[   54.479060][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.518979][ T4703] loop5: detected capacity change from 0 to 2048
[   54.557006][ T4703]  loop5: p1 < > p4
[   54.562539][ T4703] loop5: p4 size 8388608 extends beyond EOD, truncated
[   54.574790][ T4703] netlink: 332 bytes leftover after parsing attributes in process `syz.5.416'.
[   54.580217][ T4712] xt_hashlimit: max too large, truncated to 1048576
[   54.713093][ T4736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.414'.
[   54.786023][ T4743] loop1: detected capacity change from 0 to 2048
[   54.815214][ T4743]  loop1: p1 < > p4
[   54.819450][ T4743] loop1: p4 size 8388608 extends beyond EOD, truncated
[   54.829645][ T4743] netlink: 332 bytes leftover after parsing attributes in process `syz.1.430'.
[   54.902658][ T4758] loop1: detected capacity change from 0 to 2048
[   54.927281][ T4758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.381584][ T4780] pim6reg1: entered promiscuous mode
[   55.387091][ T4780] pim6reg1: entered allmulticast mode
[   55.464935][ T4783] 9pnet_fd: Insufficient options for proto=fd
[   55.791845][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.823208][ T4789] loop3: detected capacity change from 0 to 2048
[   55.850773][ T4789]  loop3: p1 < > p4
[   55.855460][ T4789] loop3: p4 size 8388608 extends beyond EOD, truncated
[   55.867780][ T4789] netlink: 332 bytes leftover after parsing attributes in process `syz.3.445'.
[   55.906033][ T4800] loop5: detected capacity change from 0 to 2048
[   55.928118][ T4798] loop0: detected capacity change from 0 to 2048
[   55.967227][ T4800]  loop5: p1 < > p4
[   55.977439][ T4798]  loop0: p1 < > p4
[   55.992289][ T4800] loop5: p4 size 8388608 extends beyond EOD, truncated
[   56.002302][ T4798] loop0: p4 size 8388608 extends beyond EOD, truncated
[   56.019605][ T4800] Falling back ldisc for ptm0.
[   56.040534][ T4798] netlink: 332 bytes leftover after parsing attributes in process `syz.0.444'.
[   56.076332][ T4810] loop3: detected capacity change from 0 to 1024
[   56.253014][ T4813] loop3: detected capacity change from 0 to 2048
[   56.305596][ T4813]  loop3: p1 < > p4
[   56.310104][ T4813] loop3: p4 size 8388608 extends beyond EOD, truncated
[   56.324087][ T4813] netlink: 332 bytes leftover after parsing attributes in process `syz.3.452'.
[   56.386878][ T4827] netlink: 40 bytes leftover after parsing attributes in process `syz.5.455'.
[   56.433800][ T4829] loop5: detected capacity change from 0 to 512
[   56.483920][ T4834] FAULT_INJECTION: forcing a failure.
[   56.483920][ T4834] name failslab, interval 1, probability 0, space 0, times 0
[   56.496654][ T4834] CPU: 1 UID: 0 PID: 4834 Comm: syz.3.456 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   56.496698][ T4834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   56.496713][ T4834] Call Trace:
[   56.496720][ T4834]  <TASK>
[   56.496729][ T4834]  dump_stack_lvl+0xf6/0x150
[   56.496780][ T4834]  dump_stack+0x15/0x1a
[   56.496800][ T4834]  should_fail_ex+0x261/0x270
[   56.496899][ T4834]  should_failslab+0x8f/0xb0
[   56.496993][ T4834]  __kmalloc_cache_noprof+0x55/0x320
[   56.497026][ T4834]  ? tcf_action_init_1+0x118/0x4c0
[   56.497058][ T4834]  tcf_action_init_1+0x118/0x4c0
[   56.497090][ T4834]  ? strcmp+0x21/0x50
[   56.497186][ T4834]  tcf_action_init+0x1ce/0x620
[   56.497330][ T4834]  tc_ctl_action+0x2be/0x880
[   56.497490][ T4834]  ? __pfx_tc_ctl_action+0x10/0x10
[   56.497571][ T4834]  rtnetlink_rcv_msg+0x6b7/0x740
[   56.497599][ T4834]  ? avc_has_perm_noaudit+0x1cc/0x210
[   56.497625][ T4834]  netlink_rcv_skb+0x12f/0x230
[   56.497711][ T4834]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   56.497745][ T4834]  rtnetlink_rcv+0x1c/0x30
[   56.497769][ T4834]  netlink_unicast+0x605/0x6c0
[   56.497802][ T4834]  netlink_sendmsg+0x609/0x720
[   56.497826][ T4834]  ? __pfx_netlink_sendmsg+0x10/0x10
[   56.497879][ T4834]  __sock_sendmsg+0x140/0x180
[   56.497908][ T4834]  ____sys_sendmsg+0x350/0x4e0
[   56.497967][ T4834]  __sys_sendmsg+0x1a0/0x240
[   56.498005][ T4834]  __x64_sys_sendmsg+0x46/0x50
[   56.498105][ T4834]  x64_sys_call+0x26f3/0x2e10
[   56.498125][ T4834]  do_syscall_64+0xc9/0x1a0
[   56.498149][ T4834]  ? clear_bhb_loop+0x25/0x80
[   56.498180][ T4834]  ? clear_bhb_loop+0x25/0x80
[   56.498208][ T4834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.498302][ T4834] RIP: 0033:0x7f2cc04ee169
[   56.498315][ T4834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   56.498388][ T4834] RSP: 002b:00007f2cbeb57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   56.498405][ T4834] RAX: ffffffffffffffda RBX: 00007f2cc0715fa0 RCX: 00007f2cc04ee169
[   56.498417][ T4834] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[   56.498428][ T4834] RBP: 00007f2cbeb57090 R08: 0000000000000000 R09: 0000000000000000
[   56.498439][ T4834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.498456][ T4834] R13: 0000000000000000 R14: 00007f2cc0715fa0 R15: 00007ffe32d1fc78
[   56.498474][ T4834]  </TASK>
[   56.751667][ T4829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   56.775630][ T4829] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.799626][ T4226] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   56.868356][ T4849] loop5: detected capacity change from 0 to 764
[   56.887994][ T4849] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   56.897866][ T4854] xt_hashlimit: max too large, truncated to 1048576
[   57.006931][ T4872] serio: Serial port ptm0
[   57.069818][   T29] kauditd_printk_skb: 355 callbacks suppressed
[   57.069835][   T29] audit: type=1400 audit(1745258234.039:2773): avc:  denied  { module_request } for  pid=4878 comm="syz.5.473" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   57.105290][   T29] audit: type=1400 audit(1745258234.079:2774): avc:  denied  { sys_module } for  pid=4878 comm="syz.5.473" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   57.114134][ T4879] process 'syz.5.473' launched './file0' with NULL argv: empty string added
[   57.126460][   T29] audit: type=1400 audit(1745258234.079:2775): avc:  denied  { execute } for  pid=4878 comm="syz.5.473" name="file0" dev="tmpfs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   57.159492][ T4879] $Hÿ: renamed from bond0 (while UP)
[   57.165328][   T29] audit: type=1400 audit(1745258234.119:2776): avc:  denied  { create } for  pid=4866 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   57.184843][   T29] audit: type=1400 audit(1745258234.129:2777): avc:  denied  { execute_no_trans } for  pid=4878 comm="syz.5.473" path="/37/file0" dev="tmpfs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   57.209774][ T4879] $Hÿ: entered promiscuous mode
[   57.214942][ T4879] bond_slave_0: entered promiscuous mode
[   57.220815][ T4879] bond_slave_1: entered promiscuous mode
[   57.311074][ T4891] netlink: 40 bytes leftover after parsing attributes in process `syz.5.478'.
[   57.312160][   T29] audit: type=1326 audit(1745258234.229:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.5.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fccdde169 code=0x7ffc0000
[   57.343526][   T29] audit: type=1400 audit(1745258234.259:2779): avc:  denied  { read write } for  pid=4888 comm="syz.5.477" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   57.352960][ T4894] xt_hashlimit: max too large, truncated to 1048576
[   57.366939][   T29] audit: type=1400 audit(1745258234.259:2780): avc:  denied  { open } for  pid=4888 comm="syz.5.477" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   57.402142][ T4896] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[   57.409951][ T4896] audit: out of memory in audit_log_start
[   57.458497][ T4892] loop3: detected capacity change from 0 to 2048
[   57.495150][ T4892]  loop3: p1 < > p4
[   57.499511][ T4892] loop3: p4 size 8388608 extends beyond EOD, truncated
[   57.529491][ T4905] loop5: detected capacity change from 0 to 128
[   58.021045][ T4923] capability: warning: `syz.0.490' uses deprecated v2 capabilities in a way that may be insecure
[   58.081862][ T4923] loop0: detected capacity change from 0 to 512
[   58.109637][ T4923] EXT4-fs: Ignoring removed nomblk_io_submit option
[   58.162161][ T4923] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   58.209383][ T4923] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   58.224398][ T4929] ref_ctr_offset mismatch. inode: 0x23e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000100
[   58.236378][ T4929] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1
[   58.244137][ T4923] EXT4-fs (loop0): 1 truncate cleaned up
[   58.244747][ T4929] ref_ctr decrement failed for inode: 0x23e offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888107eda100
[   58.256372][ T4929] uprobe: syz.1.493:4929 failed to unregister, leaking uprobe
[   58.262701][ T4923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.309818][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.427804][ T4954] FAULT_INJECTION: forcing a failure.
[   58.427804][ T4954] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   58.441078][ T4954] CPU: 0 UID: 0 PID: 4954 Comm: syz.3.501 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   58.441101][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   58.441137][ T4954] Call Trace:
[   58.441141][ T4954]  <TASK>
[   58.441148][ T4954]  dump_stack_lvl+0xf6/0x150
[   58.441173][ T4954]  dump_stack+0x15/0x1a
[   58.441190][ T4954]  should_fail_ex+0x261/0x270
[   58.441215][ T4954]  should_fail+0xb/0x10
[   58.441322][ T4954]  should_fail_usercopy+0x1a/0x20
[   58.441350][ T4954]  _copy_from_user+0x1c/0xa0
[   58.441424][ T4954]  perf_copy_attr+0x150/0x5d0
[   58.441460][ T4954]  ? __rcu_read_unlock+0x4e/0x70
[   58.441484][ T4954]  __se_sys_perf_event_open+0x70/0x2220
[   58.441507][ T4954]  ? proc_fail_nth_write+0x12d/0x160
[   58.441560][ T4954]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   58.441598][ T4954]  ? vfs_write+0x669/0x950
[   58.441685][ T4954]  __x64_sys_perf_event_open+0x67/0x80
[   58.441709][ T4954]  x64_sys_call+0x27bb/0x2e10
[   58.441729][ T4954]  do_syscall_64+0xc9/0x1a0
[   58.441751][ T4954]  ? clear_bhb_loop+0x25/0x80
[   58.441805][ T4954]  ? clear_bhb_loop+0x25/0x80
[   58.441883][ T4954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.441908][ T4954] RIP: 0033:0x7f2cc04ee169
[   58.441924][ T4954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.441985][ T4954] RSP: 002b:00007f2cbeb57038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[   58.442008][ T4954] RAX: ffffffffffffffda RBX: 00007f2cc0715fa0 RCX: 00007f2cc04ee169
[   58.442022][ T4954] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000200000000000
[   58.442033][ T4954] RBP: 00007f2cbeb57090 R08: 0000000000000000 R09: 0000000000000000
[   58.442054][ T4954] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[   58.442069][ T4954] R13: 0000000000000000 R14: 00007f2cc0715fa0 R15: 00007ffe32d1fc78
[   58.442138][ T4954]  </TASK>
[   58.444525][ T1676] kworker/u8:6: attempt to access beyond end of device
[   58.444525][ T1676] loop5: rw=1, sector=145, nr_sectors = 896 limit=128
[   58.651876][ T4961] loop0: detected capacity change from 0 to 2048
[   58.658973][ T4960] FAULT_INJECTION: forcing a failure.
[   58.658973][ T4960] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   58.672320][ T4960] CPU: 0 UID: 0 PID: 4960 Comm: syz.3.505 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   58.672350][ T4960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   58.672363][ T4960] Call Trace:
[   58.672368][ T4960]  <TASK>
[   58.672374][ T4960]  dump_stack_lvl+0xf6/0x150
[   58.672395][ T4960]  dump_stack+0x15/0x1a
[   58.672470][ T4960]  should_fail_ex+0x261/0x270
[   58.672498][ T4960]  should_fail+0xb/0x10
[   58.672520][ T4960]  should_fail_usercopy+0x1a/0x20
[   58.672584][ T4960]  _copy_from_user+0x1c/0xa0
[   58.672618][ T4960]  copy_msghdr_from_user+0x54/0x2b0
[   58.672653][ T4960]  ? __fget_files+0x186/0x1c0
[   58.672702][ T4960]  __sys_sendmsg+0x141/0x240
[   58.672734][ T4961] ext4: Unknown parameter 'noacl'
[   58.672743][ T4960]  __x64_sys_sendmsg+0x46/0x50
[   58.672770][ T4960]  x64_sys_call+0x26f3/0x2e10
[   58.672795][ T4960]  do_syscall_64+0xc9/0x1a0
[   58.672828][ T4960]  ? clear_bhb_loop+0x25/0x80
[   58.672892][ T4960]  ? clear_bhb_loop+0x25/0x80
[   58.672918][ T4960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.673011][ T4960] RIP: 0033:0x7f2cc04ee169
[   58.673037][ T4960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.673058][ T4960] RSP: 002b:00007f2cbeb57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   58.673098][ T4960] RAX: ffffffffffffffda RBX: 00007f2cc0715fa0 RCX: 00007f2cc04ee169
[   58.673112][ T4960] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[   58.673127][ T4960] RBP: 00007f2cbeb57090 R08: 0000000000000000 R09: 0000000000000000
[   58.673187][ T4960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.673201][ T4960] R13: 0000000000000000 R14: 00007f2cc0715fa0 R15: 00007ffe32d1fc78
[   58.673224][ T4960]  </TASK>
[   58.795838][ T4965] loop5: detected capacity change from 0 to 1024
[   58.819315][ T4967] loop1: detected capacity change from 0 to 2048
[   58.896338][ T4967]  loop1: p1 < > p4
[   58.916176][ T4967] loop1: p4 size 8388608 extends beyond EOD, truncated
[   58.992906][ T4961] loop0: detected capacity change from 0 to 8192
[   59.020369][ T4961] SELinux: failed to load policy
[   59.026885][ T4967] __nla_validate_parse: 2 callbacks suppressed
[   59.026898][ T4967] netlink: 332 bytes leftover after parsing attributes in process `syz.1.504'.
[   59.042825][ T4977] xt_hashlimit: max too large, truncated to 1048576
[   59.107453][ T4987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'.
[   59.117644][ T4981] veth0_vlan: entered allmulticast mode
[   59.143304][ T4987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'.
[   59.196326][ T4988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'.
[   59.206577][ T4988] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   59.299416][ T4988] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   59.318279][ T5000] netlink: 36 bytes leftover after parsing attributes in process `syz.0.515'.
[   59.332346][ T4997] loop5: detected capacity change from 0 to 1024
[   59.339483][ T4987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'.
[   59.389827][ T4987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'.
[   59.404426][ T5002] loop0: detected capacity change from 0 to 1024
[   59.452825][ T5009] loop5: detected capacity change from 0 to 512
[   59.463407][ T4987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'.
[   59.472456][ T4987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'.
[   59.477716][ T5009] EXT4-fs: Ignoring removed mblk_io_submit option
[   59.503286][ T5009] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   59.526134][ T5009] EXT4-fs (loop5): 1 truncate cleaned up
[   59.532166][ T5009] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.595914][ T5003] bridge_slave_1 (unregistering): left allmulticast mode
[   59.603167][ T5003] bridge_slave_1 (unregistering): left promiscuous mode
[   59.610476][ T5003] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.746618][ T4226] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.783900][ T5029] loop5: detected capacity change from 0 to 512
[   59.802075][ T5032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.832695][ T5029] EXT4-fs (loop5): too many log groups per flexible block group
[   59.840516][ T5029] EXT4-fs (loop5): failed to initialize mballoc (-12)
[   59.873722][ T5032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.876274][ T5029] EXT4-fs (loop5): mount failed
[   59.907240][ T5032] FAULT_INJECTION: forcing a failure.
[   59.907240][ T5032] name failslab, interval 1, probability 0, space 0, times 0
[   59.921581][ T5032] CPU: 1 UID: 0 PID: 5032 Comm: syz.0.527 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   59.921653][ T5032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   59.921668][ T5032] Call Trace:
[   59.921673][ T5032]  <TASK>
[   59.921679][ T5032]  dump_stack_lvl+0xf6/0x150
[   59.921707][ T5032]  dump_stack+0x15/0x1a
[   59.921727][ T5032]  should_fail_ex+0x261/0x270
[   59.921769][ T5032]  should_failslab+0x8f/0xb0
[   59.921814][ T5032]  __kvmalloc_node_noprof+0x12c/0x520
[   59.921867][ T5032]  ? io_alloc_cache_init+0x33/0xa0
[   59.921889][ T5032]  io_alloc_cache_init+0x33/0xa0
[   59.921912][ T5032]  io_ring_ctx_alloc+0x338/0x690
[   59.921944][ T5032]  io_uring_create+0x10a/0x610
[   59.921987][ T5032]  __se_sys_io_uring_setup+0x1f7/0x210
[   59.922041][ T5032]  __x64_sys_io_uring_setup+0x31/0x40
[   59.922075][ T5032]  x64_sys_call+0x1741/0x2e10
[   59.922095][ T5032]  do_syscall_64+0xc9/0x1a0
[   59.922120][ T5032]  ? clear_bhb_loop+0x25/0x80
[   59.922139][ T5032]  ? clear_bhb_loop+0x25/0x80
[   59.922165][ T5032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.922257][ T5032] RIP: 0033:0x7f0a2d7ae169
[   59.922271][ T5032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.922290][ T5032] RSP: 002b:00007f0a2be16fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[   59.922312][ T5032] RAX: ffffffffffffffda RBX: 00007f0a2d9d5fa0 RCX: 00007f0a2d7ae169
[   59.922326][ T5032] RDX: 00002000000005c0 RSI: 0000200000000400 RDI: 00000000000031c7
[   59.922340][ T5032] RBP: 0000200000000400 R08: 0000000000000000 R09: 00002000000005c0
[   59.922354][ T5032] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[   59.922368][ T5032] R13: 00002000000001c0 R14: 00000000000031c7 R15: 00002000000005c0
[   59.922467][ T5032]  </TASK>
[   60.144895][ T5032] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.527'.
[   60.255221][ T5055] loop1: detected capacity change from 0 to 1024
[   60.304305][ T5065] loop1: detected capacity change from 0 to 512
[   60.317032][ T5065] EXT4-fs (loop1): orphan cleanup on readonly fs
[   60.323811][ T5065] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   60.340837][ T5065] EXT4-fs (loop1): Cannot turn on quotas: error -117
[   60.348461][ T5065] EXT4-fs (loop1): 1 truncate cleaned up
[   60.354650][ T5065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   60.399053][ T5076] loop5: detected capacity change from 0 to 512
[   60.429397][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.439286][ T5076] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.454492][ T5076] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.484721][ T5085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5085 comm=syz.4.539
[   60.497182][ T5085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5085 comm=syz.4.539
[   60.509623][ T5085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5085 comm=syz.4.539
[   60.523259][ T5085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5085 comm=syz.4.539
[   60.537405][ T5085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5085 comm=syz.4.539
[   60.549873][ T5085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5085 comm=syz.4.539
[   60.562455][ T5085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5085 comm=syz.4.539
[   60.574958][ T5085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5085 comm=syz.4.539
[   60.626922][ T4226] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.672638][ T5104] loop4: detected capacity change from 0 to 128
[   60.731603][ T5100] netlink: 'syz.1.544': attribute type 21 has an invalid length.
[   60.739623][ T5100] netlink: 'syz.1.544': attribute type 20 has an invalid length.
[   60.747366][ T5100] IPv6: NLM_F_CREATE should be specified when creating new route
[   61.004354][ T5121] loop4: detected capacity change from 0 to 1024
[   61.367093][ T5140] loop3: detected capacity change from 0 to 512
[   61.373820][ T5140] EXT4-fs: Ignoring removed orlov option
[   61.382149][ T5140] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.563: corrupted in-inode xattr: invalid ea_ino
[   61.396886][ T5140] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.563: couldn't read orphan inode 15 (err -117)
[   61.409569][ T5140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.468509][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.511691][ T5147] netlink: 'syz.5.565': attribute type 13 has an invalid length.
[   61.588857][ T5147] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.596102][ T5147] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.676541][ T5147] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.687814][ T5147] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.742889][ T5147] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.751895][ T5147] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.760816][ T5147] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.769921][ T5147] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.116691][ T5207] FAULT_INJECTION: forcing a failure.
[   62.116691][ T5207] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   62.129946][ T5207] CPU: 1 UID: 0 PID: 5207 Comm: syz.1.574 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   62.129986][ T5207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   62.129998][ T5207] Call Trace:
[   62.130003][ T5207]  <TASK>
[   62.130009][ T5207]  dump_stack_lvl+0xf6/0x150
[   62.130031][ T5207]  dump_stack+0x15/0x1a
[   62.130052][ T5207]  should_fail_ex+0x261/0x270
[   62.130075][ T5207]  should_fail+0xb/0x10
[   62.130143][ T5207]  should_fail_usercopy+0x1a/0x20
[   62.130167][ T5207]  _copy_to_user+0x20/0xa0
[   62.130195][ T5207]  simple_read_from_buffer+0xb2/0x130
[   62.130226][ T5207]  proc_fail_nth_read+0x103/0x140
[   62.130331][ T5207]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   62.130362][ T5207]  vfs_read+0x1b2/0x710
[   62.130377][ T5207]  ? __rcu_read_unlock+0x4e/0x70
[   62.130458][ T5207]  ? __fget_files+0x186/0x1c0
[   62.130480][ T5207]  ksys_read+0xeb/0x1b0
[   62.130498][ T5207]  __x64_sys_read+0x42/0x50
[   62.130514][ T5207]  x64_sys_call+0x2a3b/0x2e10
[   62.130535][ T5207]  do_syscall_64+0xc9/0x1a0
[   62.130577][ T5207]  ? clear_bhb_loop+0x25/0x80
[   62.130598][ T5207]  ? clear_bhb_loop+0x25/0x80
[   62.130618][ T5207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.130638][ T5207] RIP: 0033:0x7f1d087ccb7c
[   62.130651][ T5207] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   62.130667][ T5207] RSP: 002b:00007f1d06e37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   62.130725][ T5207] RAX: ffffffffffffffda RBX: 00007f1d089f5fa0 RCX: 00007f1d087ccb7c
[   62.130736][ T5207] RDX: 000000000000000f RSI: 00007f1d06e370a0 RDI: 0000000000000005
[   62.130747][ T5207] RBP: 00007f1d06e37090 R08: 0000000000000000 R09: 0000000000000000
[   62.130758][ T5207] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001
[   62.130816][ T5207] R13: 0000000000000000 R14: 00007f1d089f5fa0 R15: 00007fff16d18eb8
[   62.130833][ T5207]  </TASK>
[   62.474215][ T5215] loop1: detected capacity change from 0 to 1764
[   62.528088][ T5221] loop3: detected capacity change from 0 to 1024
[   62.555628][ T5226] loop4: detected capacity change from 0 to 128
[   62.562869][ T5226] vfat: Unknown parameter 'ÿÿÿÿ'
[   62.571152][   T29] kauditd_printk_skb: 442 callbacks suppressed
[   62.571168][   T29] audit: type=1400 audit(1745258239.539:3222): avc:  denied  { create } for  pid=5217 comm="syz.4.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   62.596983][   T29] audit: type=1400 audit(1745258239.539:3223): avc:  denied  { connect } for  pid=5217 comm="syz.4.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   62.751748][ T5235] netlink: 'syz.5.583': attribute type 21 has an invalid length.
[   62.759539][ T5235] netlink: 'syz.5.583': attribute type 20 has an invalid length.
[   62.767341][ T5235] IPv6: NLM_F_CREATE should be specified when creating new route
[   62.802571][ T5237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.821690][ T5237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.973526][ T5234] FAULT_INJECTION: forcing a failure.
[   62.973526][ T5234] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   62.986780][ T5234] CPU: 1 UID: 0 PID: 5234 Comm: syz.1.584 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   62.986811][ T5234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   62.986825][ T5234] Call Trace:
[   62.986833][ T5234]  <TASK>
[   62.986842][ T5234]  dump_stack_lvl+0xf6/0x150
[   62.986864][ T5234]  dump_stack+0x15/0x1a
[   62.986879][ T5234]  should_fail_ex+0x261/0x270
[   62.986958][ T5234]  should_fail+0xb/0x10
[   62.987010][ T5234]  should_fail_usercopy+0x1a/0x20
[   62.987039][ T5234]  _copy_to_user+0x20/0xa0
[   62.987072][ T5234]  simple_read_from_buffer+0xb2/0x130
[   62.987110][ T5234]  proc_fail_nth_read+0x103/0x140
[   62.987149][ T5234]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   62.987242][ T5234]  vfs_read+0x1b2/0x710
[   62.987260][ T5234]  ? __rcu_read_unlock+0x4e/0x70
[   62.987279][ T5234]  ? __fget_files+0x186/0x1c0
[   62.987316][ T5234]  ksys_read+0xeb/0x1b0
[   62.987333][ T5234]  __x64_sys_read+0x42/0x50
[   62.987349][ T5234]  x64_sys_call+0x2a3b/0x2e10
[   62.987368][ T5234]  do_syscall_64+0xc9/0x1a0
[   62.987396][ T5234]  ? clear_bhb_loop+0x25/0x80
[   62.987421][ T5234]  ? clear_bhb_loop+0x25/0x80
[   62.987484][ T5234]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.987505][ T5234] RIP: 0033:0x7f1d087ccb7c
[   62.987518][ T5234] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   62.987533][ T5234] RSP: 002b:00007f1d06e37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   62.987549][ T5234] RAX: ffffffffffffffda RBX: 00007f1d089f5fa0 RCX: 00007f1d087ccb7c
[   62.987563][ T5234] RDX: 000000000000000f RSI: 00007f1d06e370a0 RDI: 0000000000000004
[   62.987576][ T5234] RBP: 00007f1d06e37090 R08: 0000000000000000 R09: 0000000000000000
[   62.987634][ T5234] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000001
[   62.987647][ T5234] R13: 0000000000000000 R14: 00007f1d089f5fa0 R15: 00007fff16d18eb8
[   62.987665][ T5234]  </TASK>
[   63.284783][ T5240] loop5: detected capacity change from 0 to 1024
[   63.308534][ T5240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.359716][   T29] audit: type=1400 audit(1745258240.329:3224): avc:  denied  { watch } for  pid=5239 comm="syz.5.586" path="/63/file0" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   63.382203][   T29] audit: type=1400 audit(1745258240.329:3225): avc:  denied  { shutdown } for  pid=5239 comm="syz.5.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   63.410234][   T29] audit: type=1400 audit(1745258240.329:3226): avc:  denied  { read } for  pid=5239 comm="syz.5.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   63.415799][ T5240] EXT4-fs error (device loop5): __ext4_new_inode:1072: comm syz.5.586: reserved inode found cleared - inode=18
[   63.429940][   T29] audit: type=1326 audit(1745258240.379:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5599e169 code=0x7ffc0000
[   63.465075][   T29] audit: type=1326 audit(1745258240.379:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5599e169 code=0x7ffc0000
[   63.488412][   T29] audit: type=1326 audit(1745258240.379:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a5599e169 code=0x7ffc0000
[   63.511351][ T5240] EXT4-fs (loop5): Remounting filesystem read-only
[   63.511716][   T29] audit: type=1326 audit(1745258240.379:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5599e169 code=0x7ffc0000
[   63.511742][   T29] audit: type=1326 audit(1745258240.379:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a5599e169 code=0x7ffc0000
[   63.566168][ T5256] program syz.4.590 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   63.602777][ T4226] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.174529][ T5296] loop3: detected capacity change from 0 to 512
[   64.193062][ T5296] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   64.239923][ T5296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.274886][ T5296] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.302799][ T5302] __nla_validate_parse: 12 callbacks suppressed
[   64.302817][ T5302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.607'.
[   64.324576][ T5302] loop1: detected capacity change from 0 to 512
[   64.332636][ T5302] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   64.366096][ T5302] EXT4-fs (loop1): 1 truncate cleaned up
[   64.372206][ T5302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.418648][ T5305] FAULT_INJECTION: forcing a failure.
[   64.418648][ T5305] name failslab, interval 1, probability 0, space 0, times 0
[   64.431416][ T5305] CPU: 1 UID: 0 PID: 5305 Comm: syz.0.606 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   64.431471][ T5305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   64.431485][ T5305] Call Trace:
[   64.431493][ T5305]  <TASK>
[   64.431501][ T5305]  dump_stack_lvl+0xf6/0x150
[   64.431529][ T5305]  dump_stack+0x15/0x1a
[   64.431587][ T5305]  should_fail_ex+0x261/0x270
[   64.431610][ T5305]  should_failslab+0x8f/0xb0
[   64.431635][ T5305]  kmem_cache_alloc_noprof+0x59/0x340
[   64.431675][ T5305]  ? vm_area_alloc+0x2c/0xb0
[   64.431700][ T5305]  vm_area_alloc+0x2c/0xb0
[   64.431725][ T5305]  alloc_bprm+0x2b5/0x680
[   64.431764][ T5305]  do_execveat_common+0x12b/0x7e0
[   64.431787][ T5305]  ? getname_flags+0x15a/0x3b0
[   64.431813][ T5305]  __x64_sys_execveat+0x75/0x90
[   64.431854][ T5305]  x64_sys_call+0x2ac7/0x2e10
[   64.431914][ T5305]  do_syscall_64+0xc9/0x1a0
[   64.431956][ T5305]  ? clear_bhb_loop+0x25/0x80
[   64.432062][ T5305]  ? clear_bhb_loop+0x25/0x80
[   64.432086][ T5305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.432111][ T5305] RIP: 0033:0x7f0a2d7ae169
[   64.432127][ T5305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   64.432225][ T5305] RSP: 002b:00007f0a2be17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[   64.432245][ T5305] RAX: ffffffffffffffda RBX: 00007f0a2d9d5fa0 RCX: 00007f0a2d7ae169
[   64.432259][ T5305] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[   64.432272][ T5305] RBP: 00007f0a2be17090 R08: 0000000000001000 R09: 0000000000000000
[   64.432283][ T5305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   64.432293][ T5305] R13: 0000000000000000 R14: 00007f0a2d9d5fa0 R15: 00007ffee930b278
[   64.432309][ T5305]  </TASK>
[   65.271755][ T5342] loop1: detected capacity change from 0 to 128
[   65.282993][ T5344] loop3: detected capacity change from 0 to 1024
[   65.348379][ T5347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.621'.
[   65.408750][ T5351] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[   65.415301][ T5351] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   65.422763][ T5351] vhci_hcd vhci_hcd.0: Device attached
[   65.434541][ T5351] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10)
[   65.441366][ T5351] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   65.448943][ T5351] vhci_hcd vhci_hcd.0: Device attached
[   65.468628][ T5359] loop3: detected capacity change from 0 to 128
[   65.481561][ T5351] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   65.577521][ T5351] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(14)
[   65.584195][ T5351] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   65.591658][ T5351] vhci_hcd vhci_hcd.0: Device attached
[   65.614785][ T5362] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18)
[   65.621561][ T5362] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   65.629182][ T5362] vhci_hcd vhci_hcd.0: Device attached
[   65.630486][   T10] vhci_hcd: vhci_device speed not set
[   65.658822][ T5366] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(21)
[   65.665447][ T5366] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   65.673096][ T5366] vhci_hcd vhci_hcd.0: Device attached
[   65.710586][ T5351] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   65.736291][ T5351] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   65.776062][ T5351] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   65.974244][ T5375] loop4: detected capacity change from 0 to 128
[   66.011650][ T5367] vhci_hcd: connection closed
[   66.012068][ T5363] vhci_hcd: connection closed
[   66.017173][   T31] vhci_hcd: stop threads
[   66.026265][   T31] vhci_hcd: release socket
[   66.030761][   T31] vhci_hcd: disconnect device
[   66.047241][   T10] usb 3-1: new full-speed USB device number 2 using vhci_hcd
[   66.054723][ T5353] vhci_hcd: sendmsg failed!, ret=-32 for 48
[   66.061340][ T5360] vhci_hcd: connection closed
[   66.061454][ T5356] vhci_hcd: connection closed
[   66.066289][ T5352] vhci_hcd: connection closed
[   66.078485][   T31] vhci_hcd: stop threads
[   66.087486][   T31] vhci_hcd: release socket
[   66.092000][   T31] vhci_hcd: disconnect device
[   66.104461][   T31] vhci_hcd: stop threads
[   66.108771][   T31] vhci_hcd: release socket
[   66.113204][   T31] vhci_hcd: disconnect device
[   66.131258][   T31] vhci_hcd: stop threads
[   66.135727][   T31] vhci_hcd: release socket
[   66.140351][   T31] vhci_hcd: disconnect device
[   66.160954][   T31] vhci_hcd: stop threads
[   66.165302][   T31] vhci_hcd: release socket
[   66.169786][   T31] vhci_hcd: disconnect device
[   66.191996][ T5381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.630'.
[   66.409812][ T5398] loop3: detected capacity change from 0 to 1024
[   66.444197][ T5406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.640'.
[   66.453359][ T5406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.640'.
[   66.471681][ T5406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.640'.
[   66.480913][ T5406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.640'.
[   66.490426][ T5409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'.
[   66.503148][ T5409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'.
[   66.516616][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.640'.
[   66.527324][ T5411] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   66.577782][ T5417] loop3: detected capacity change from 0 to 1024
[   66.633625][ T5421] loop1: detected capacity change from 0 to 128
[   66.659651][ T5427] FAULT_INJECTION: forcing a failure.
[   66.659651][ T5427] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   66.672902][ T5427] CPU: 0 UID: 0 PID: 5427 Comm: syz.3.645 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   66.672928][ T5427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   66.673011][ T5427] Call Trace:
[   66.673018][ T5427]  <TASK>
[   66.673026][ T5427]  dump_stack_lvl+0xf6/0x150
[   66.673077][ T5427]  dump_stack+0x15/0x1a
[   66.673092][ T5427]  should_fail_ex+0x261/0x270
[   66.673115][ T5427]  should_fail+0xb/0x10
[   66.673137][ T5427]  should_fail_usercopy+0x1a/0x20
[   66.673160][ T5427]  _copy_from_user+0x1c/0xa0
[   66.673196][ T5427]  copy_from_sockptr+0x65/0xb0
[   66.673235][ T5427]  raw_setsockopt+0x5f4/0xcf0
[   66.673334][ T5427]  ? __pfx_raw_setsockopt+0x10/0x10
[   66.673366][ T5427]  __sys_setsockopt+0x187/0x200
[   66.673387][ T5427]  __x64_sys_setsockopt+0x66/0x80
[   66.673460][ T5427]  x64_sys_call+0x2a09/0x2e10
[   66.673479][ T5427]  do_syscall_64+0xc9/0x1a0
[   66.673504][ T5427]  ? clear_bhb_loop+0x25/0x80
[   66.673544][ T5427]  ? clear_bhb_loop+0x25/0x80
[   66.673573][ T5427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.673592][ T5427] RIP: 0033:0x7f2cc04ee169
[   66.673607][ T5427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   66.673628][ T5427] RSP: 002b:00007f2cbeb57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   66.673650][ T5427] RAX: ffffffffffffffda RBX: 00007f2cc0715fa0 RCX: 00007f2cc04ee169
[   66.673664][ T5427] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000003
[   66.673694][ T5427] RBP: 00007f2cbeb57090 R08: 0000000000000008 R09: 0000000000000000
[   66.673708][ T5427] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[   66.673721][ T5427] R13: 0000000000000000 R14: 00007f2cc0715fa0 R15: 00007ffe32d1fc78
[   66.673743][ T5427]  </TASK>
[   66.925063][ T5433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   66.934014][ T5433] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.168368][ T5441] loop5: detected capacity change from 0 to 2048
[   67.417084][ T5441]  loop5: p1 < > p4
[   67.437984][ T5441] loop5: p4 size 8388608 extends beyond EOD, truncated
[   67.643010][   T29] kauditd_printk_skb: 507 callbacks suppressed
[   67.643024][   T29] audit: type=1400 audit(1745258244.609:3739): avc:  denied  { sqpoll } for  pid=5446 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   67.680642][   T29] audit: type=1400 audit(1745258244.649:3740): avc:  denied  { create } for  pid=5451 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   67.700059][   T29] audit: type=1400 audit(1745258244.649:3741): avc:  denied  { bind } for  pid=5451 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   67.781372][ T5460] loop4: detected capacity change from 0 to 2048
[   67.794074][ T5464] tipc: Started in network mode
[   67.799038][ T5464] tipc: Node identity 725b1c0e6f88, cluster identity 4711
[   67.806260][ T5464] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.815798][   T29] audit: type=1400 audit(1745258244.759:3742): avc:  denied  { create } for  pid=5462 comm="syz.1.657" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   67.837981][ T5463] loop1: detected capacity change from 0 to 2048
[   67.880828][   T29] audit: type=1400 audit(1745258244.819:3743): avc:  denied  { mounton } for  pid=5462 comm="syz.1.657" path="/141/file0" dev="tmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   67.917357][ T5463] EXT4-fs mount: 2 callbacks suppressed
[   67.917375][ T5463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.937074][   T29] audit: type=1400 audit(1745258244.909:3744): avc:  denied  { unmount } for  pid=4226 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   67.938129][ T5460]  loop4: p1 < > p4
[   67.961146][ T5463] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.999251][ T5463] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.027215][ T5460] loop4: p4 size 8388608 extends beyond EOD, truncated
[   68.051999][ T5473] loop3: detected capacity change from 0 to 1024
[   68.066277][   T29] audit: type=1400 audit(1745258244.929:3745): avc:  denied  { mount } for  pid=5462 comm="syz.1.657" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   68.088131][   T29] audit: type=1400 audit(1745258245.009:3746): avc:  denied  { read write } for  pid=5476 comm="syz.0.660" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   68.111460][   T29] audit: type=1400 audit(1745258245.009:3747): avc:  denied  { open } for  pid=5476 comm="syz.0.660" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   68.143927][ T5463] loop1: detected capacity change from 0 to 2060
[   68.174706][ T5463] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 64
[   68.194782][   T29] audit: type=1400 audit(1745258245.129:3748): avc:  denied  { create } for  pid=5481 comm="syz.5.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   68.290659][ T5463] loop1: detected capacity change from 0 to 2060
[   68.307147][ T5463] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 64
[   68.358659][ T5495] loop3: detected capacity change from 0 to 128
[   68.378392][ T5463] loop1: detected capacity change from 0 to 2060
[   68.401754][ T5463] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 64
[   68.453739][ T5463] loop1: detected capacity change from 0 to 2060
[   68.479992][ T5497] 9pnet_fd: Insufficient options for proto=fd
[   68.502528][ T5463] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 64
[   68.548291][ T5463] loop1: detected capacity change from 0 to 2060
[   68.557265][ T5507] FAULT_INJECTION: forcing a failure.
[   68.557265][ T5507] name failslab, interval 1, probability 0, space 0, times 0
[   68.570050][ T5507] CPU: 0 UID: 0 PID: 5507 Comm: syz.5.668 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   68.570076][ T5507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   68.570155][ T5507] Call Trace:
[   68.570163][ T5507]  <TASK>
[   68.570172][ T5507]  dump_stack_lvl+0xf6/0x150
[   68.570199][ T5507]  dump_stack+0x15/0x1a
[   68.570217][ T5507]  should_fail_ex+0x261/0x270
[   68.570240][ T5507]  should_failslab+0x8f/0xb0
[   68.570324][ T5507]  kmem_cache_alloc_noprof+0x59/0x340
[   68.570363][ T5507]  ? audit_log_start+0x37f/0x6e0
[   68.570483][ T5507]  audit_log_start+0x37f/0x6e0
[   68.570517][ T5507]  ? kstrtouint+0x7b/0xc0
[   68.570538][ T5507]  audit_seccomp+0x49/0x100
[   68.570565][ T5507]  __seccomp_filter+0x694/0x10e0
[   68.570616][ T5507]  ? vfs_write+0x669/0x950
[   68.570644][ T5507]  __secure_computing+0x7e/0x150
[   68.570739][ T5507]  syscall_trace_enter+0xcf/0x1f0
[   68.570762][ T5507]  do_syscall_64+0xaa/0x1a0
[   68.570785][ T5507]  ? clear_bhb_loop+0x25/0x80
[   68.570806][ T5507]  ? clear_bhb_loop+0x25/0x80
[   68.570831][ T5507]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.570861][ T5507] RIP: 0033:0x7f3fccdde169
[   68.570875][ T5507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.570944][ T5507] RSP: 002b:00007f3fcb447038 EFLAGS: 00000246 ORIG_RAX: 000000000000014d
[   68.571014][ T5507] RAX: ffffffffffffffda RBX: 00007f3fcd005fa0 RCX: 00007f3fccdde169
[   68.571105][ T5507] RDX: 0000000000000000 RSI: 00000000000000dd RDI: 0000000000000000
[   68.571120][ T5507] RBP: 00007f3fcb447090 R08: 0000000000000000 R09: 0000000000000000
[   68.571134][ T5507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   68.571147][ T5507] R13: 0000000000000000 R14: 00007f3fcd005fa0 R15: 00007ffccef47e18
[   68.571169][ T5507]  </TASK>
[   68.571856][ T5463] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 64
[   68.772416][ T5462] tipc: Disabling bearer <eth:syzkaller0>
[   68.792340][ T5463] loop1: detected capacity change from 0 to 2060
[   68.801658][ T5463] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 64
[   68.883654][ T5522] xt_hashlimit: max too large, truncated to 1048576
[   68.968458][ T5528] loop4: detected capacity change from 0 to 2048
[   68.982551][ T5530] loop3: detected capacity change from 0 to 2048
[   68.997903][ T5530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.012778][ T5528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.061346][ T5541] ªªªªª»: renamed from veth0_vlan (while UP)
[   69.080146][ T5543] FAULT_INJECTION: forcing a failure.
[   69.080146][ T5543] name failslab, interval 1, probability 0, space 0, times 0
[   69.092926][ T5543] CPU: 0 UID: 0 PID: 5543 Comm: syz.0.680 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   69.092959][ T5543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   69.092991][ T5543] Call Trace:
[   69.092998][ T5543]  <TASK>
[   69.093006][ T5543]  dump_stack_lvl+0xf6/0x150
[   69.093034][ T5543]  dump_stack+0x15/0x1a
[   69.093091][ T5543]  should_fail_ex+0x261/0x270
[   69.093121][ T5543]  should_failslab+0x8f/0xb0
[   69.093146][ T5543]  __kvmalloc_node_noprof+0x12c/0x520
[   69.093280][ T5543]  ? vmemdup_user+0x26/0xd0
[   69.093319][ T5543]  vmemdup_user+0x26/0xd0
[   69.093356][ T5543]  path_setxattrat+0x1cd/0x320
[   69.093407][ T5543]  __x64_sys_setxattr+0x6e/0x90
[   69.093477][ T5543]  x64_sys_call+0x28e7/0x2e10
[   69.093502][ T5543]  do_syscall_64+0xc9/0x1a0
[   69.093530][ T5543]  ? clear_bhb_loop+0x25/0x80
[   69.093555][ T5543]  ? clear_bhb_loop+0x25/0x80
[   69.093639][ T5543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.093662][ T5543] RIP: 0033:0x7f0a2d7ae169
[   69.093679][ T5543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.093743][ T5543] RSP: 002b:00007f0a2be17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[   69.093766][ T5543] RAX: ffffffffffffffda RBX: 00007f0a2d9d5fa0 RCX: 00007f0a2d7ae169
[   69.093780][ T5543] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000000
[   69.093794][ T5543] RBP: 00007f0a2be17090 R08: 0000000000000000 R09: 0000000000000000
[   69.093808][ T5543] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000001
[   69.093820][ T5543] R13: 0000000000000000 R14: 00007f0a2d9d5fa0 R15: 00007ffee930b278
[   69.093842][ T5543]  </TASK>
[   69.301834][ T5546] FAULT_INJECTION: forcing a failure.
[   69.301834][ T5546] name failslab, interval 1, probability 0, space 0, times 0
[   69.314608][ T5546] CPU: 0 UID: 0 PID: 5546 Comm: syz.0.682 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   69.314640][ T5546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   69.314718][ T5546] Call Trace:
[   69.314725][ T5546]  <TASK>
[   69.314734][ T5546]  dump_stack_lvl+0xf6/0x150
[   69.314762][ T5546]  dump_stack+0x15/0x1a
[   69.314777][ T5546]  should_fail_ex+0x261/0x270
[   69.314875][ T5546]  should_failslab+0x8f/0xb0
[   69.314902][ T5546]  __kmalloc_node_track_caller_noprof+0xaa/0x410
[   69.314985][ T5546]  ? sidtab_sid2str_get+0xb8/0x140
[   69.315005][ T5546]  kmemdup_noprof+0x2b/0x70
[   69.315038][ T5546]  sidtab_sid2str_get+0xb8/0x140
[   69.315080][ T5546]  security_sid_to_context_core+0x1eb/0x2f0
[   69.315124][ T5546]  security_sid_to_context+0x27/0x30
[   69.315244][ T5546]  avc_audit_post_callback+0x10f/0x540
[   69.315336][ T5546]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   69.315360][ T5546]  common_lsm_audit+0x1c6/0x230
[   69.315396][ T5546]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   69.315428][ T5546]  slow_avc_audit+0xff/0x140
[   69.315502][ T5546]  avc_has_perm+0x124/0x150
[   69.315553][ T5546]  selinux_socket_sendmsg+0x18a/0x1c0
[   69.315602][ T5546]  security_socket_sendmsg+0x47/0x80
[   69.315638][ T5546]  __sock_sendmsg+0x2d/0x180
[   69.315682][ T5546]  __sys_sendto+0x1aa/0x230
[   69.315717][ T5546]  __x64_sys_sendto+0x78/0x90
[   69.315740][ T5546]  x64_sys_call+0x2bcb/0x2e10
[   69.315765][ T5546]  do_syscall_64+0xc9/0x1a0
[   69.315795][ T5546]  ? clear_bhb_loop+0x25/0x80
[   69.315859][ T5546]  ? clear_bhb_loop+0x25/0x80
[   69.315886][ T5546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.315912][ T5546] RIP: 0033:0x7f0a2d7ae169
[   69.315952][ T5546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.315970][ T5546] RSP: 002b:00007f0a2be17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   69.315992][ T5546] RAX: ffffffffffffffda RBX: 00007f0a2d9d5fa0 RCX: 00007f0a2d7ae169
[   69.316005][ T5546] RDX: 000000000000fef2 RSI: 0000200000000340 RDI: 0000000000000003
[   69.316019][ T5546] RBP: 00007f0a2be17090 R08: 0000200000000a80 R09: 0000000000000014
[   69.316032][ T5546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   69.316113][ T5546] R13: 0000000000000000 R14: 00007f0a2d9d5fa0 R15: 00007ffee930b278
[   69.316136][ T5546]  </TASK>
[   69.636371][ T5552] xt_hashlimit: size too large, truncated to 1048576
[   69.643162][ T5552] xt_hashlimit: Unknown mode mask 80FF, kernel too old?
[   69.740075][ T5556] loop5: detected capacity change from 0 to 2048
[   69.786796][ T5556] Alternate GPT is invalid, using primary GPT.
[   69.793167][ T5556]  loop5: p1 p2 p3
[   69.862922][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.876010][ T5564] loop1: detected capacity change from 0 to 256
[   69.883658][ T5564] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   69.915633][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.957485][ T5570] loop1: detected capacity change from 0 to 1024
[   69.981046][ T5575] loop4: detected capacity change from 0 to 1024
[   70.025588][ T5581] __nla_validate_parse: 23 callbacks suppressed
[   70.025607][ T5581] netlink: 80 bytes leftover after parsing attributes in process `syz.1.694'.
[   70.065127][ T5586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.696'.
[   70.076648][ T5584] loop4: detected capacity change from 0 to 164
[   70.098546][ T5584] loop4: detected capacity change from 0 to 128
[   70.221961][ T5592] loop1: detected capacity change from 0 to 2048
[   70.250941][ T5592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.472728][ T5616] loop4: detected capacity change from 0 to 1024
[   70.637664][ T5623] xt_nat: multiple ranges no longer supported
[   70.723769][ T5626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.710'.
[   70.738738][ T5626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.710'.
[   70.760513][ T5626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.710'.
[   70.783595][ T5626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.710'.
[   70.801621][ T5627] netlink: 80 bytes leftover after parsing attributes in process `syz.4.709'.
[   70.829137][ T5626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.710'.
[   70.838148][ T5626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.710'.
[   71.000128][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.084797][   T10] usb 3-1: enqueue for inactive port 0
[   71.099270][   T10] usb 3-1: enqueue for inactive port 0
[   71.174786][   T10] vhci_hcd: vhci_device speed not set
[   71.176310][ T5643] netlink: 'syz.5.715': attribute type 7 has an invalid length.
[   71.187970][ T5643] netlink: 8 bytes leftover after parsing attributes in process `syz.5.715'.
[   71.289717][ T5645] loop5: detected capacity change from 0 to 1024
[   71.359617][ T5649] FAULT_INJECTION: forcing a failure.
[   71.359617][ T5649] name failslab, interval 1, probability 0, space 0, times 0
[   71.372319][ T5649] CPU: 1 UID: 0 PID: 5649 Comm: syz.0.718 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   71.372412][ T5649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   71.372426][ T5649] Call Trace:
[   71.372432][ T5649]  <TASK>
[   71.372439][ T5649]  dump_stack_lvl+0xf6/0x150
[   71.372471][ T5649]  dump_stack+0x15/0x1a
[   71.372491][ T5649]  should_fail_ex+0x261/0x270
[   71.372518][ T5649]  should_failslab+0x8f/0xb0
[   71.372660][ T5649]  kmem_cache_alloc_noprof+0x59/0x340
[   71.372692][ T5649]  ? security_file_alloc+0x32/0x100
[   71.372732][ T5649]  security_file_alloc+0x32/0x100
[   71.372820][ T5649]  init_file+0x5e/0x1e0
[   71.372848][ T5649]  alloc_empty_file+0x8e/0x200
[   71.372882][ T5649]  alloc_file_pseudo+0xcb/0x160
[   71.372907][ T5649]  __shmem_file_setup+0x1bb/0x1f0
[   71.372947][ T5649]  shmem_file_setup+0x3b/0x50
[   71.372970][ T5649]  __se_sys_memfd_create+0x2e1/0x5a0
[   71.373027][ T5649]  __x64_sys_memfd_create+0x31/0x40
[   71.373063][ T5649]  x64_sys_call+0x1163/0x2e10
[   71.373084][ T5649]  do_syscall_64+0xc9/0x1a0
[   71.373113][ T5649]  ? clear_bhb_loop+0x25/0x80
[   71.373152][ T5649]  ? clear_bhb_loop+0x25/0x80
[   71.373171][ T5649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.373190][ T5649] RIP: 0033:0x7f0a2d7ae169
[   71.373275][ T5649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   71.373295][ T5649] RSP: 002b:00007f0a2be16e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   71.373312][ T5649] RAX: ffffffffffffffda RBX: 000000000000020e RCX: 00007f0a2d7ae169
[   71.373322][ T5649] RDX: 00007f0a2be16ef0 RSI: 0000000000000000 RDI: 00007f0a2d831404
[   71.373333][ T5649] RBP: 0000200000000d00 R08: 00007f0a2be16bb7 R09: 00007f0a2be16e40
[   71.373343][ T5649] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000200
[   71.373353][ T5649] R13: 00007f0a2be16ef0 R14: 00007f0a2be16eb0 R15: 0000200000000640
[   71.373391][ T5649]  </TASK>
[   71.394958][ T5647] loop5: detected capacity change from 0 to 1024
[   71.400648][ T5649] bridge_slave_1: left allmulticast mode
[   71.583845][ T5649] bridge_slave_1: left promiscuous mode
[   71.589701][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.624511][ T5649] bridge_slave_0: left allmulticast mode
[   71.630212][ T5649] bridge_slave_0: left promiscuous mode
[   71.635949][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.657183][ T5654] loop5: detected capacity change from 0 to 256
[   71.806419][ T5669] loop5: detected capacity change from 0 to 1024
[   71.851462][ T5675] mmap: syz.5.729 (5675) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   71.883179][ T5673] loop4: detected capacity change from 0 to 1024
[   71.900168][ T5675] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11)
[   71.906917][ T5675] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   71.914417][ T5675] vhci_hcd vhci_hcd.0: Device attached
[   71.929290][ T5677] loop3: detected capacity change from 0 to 128
[   71.961942][ T5678] vhci_hcd: connection closed
[   71.962069][   T31] vhci_hcd: stop threads
[   71.971164][   T31] vhci_hcd: release socket
[   71.975680][   T31] vhci_hcd: disconnect device
[   72.535065][ T5711] loop1: detected capacity change from 0 to 2048
[   72.578809][ T5711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.628940][ T5717] loop5: detected capacity change from 0 to 128
[   72.655865][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.896727][ T5725] FAULT_INJECTION: forcing a failure.
[   72.896727][ T5725] name failslab, interval 1, probability 0, space 0, times 0
[   72.909548][ T5725] CPU: 1 UID: 0 PID: 5725 Comm: syz.5.746 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   72.909579][ T5725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   72.909594][ T5725] Call Trace:
[   72.909601][ T5725]  <TASK>
[   72.909607][ T5725]  dump_stack_lvl+0xf6/0x150
[   72.909681][ T5725]  dump_stack+0x15/0x1a
[   72.909759][ T5725]  should_fail_ex+0x261/0x270
[   72.909781][ T5725]  should_failslab+0x8f/0xb0
[   72.909806][ T5725]  __kmalloc_cache_noprof+0x55/0x320
[   72.909912][ T5725]  ? virtual_ncidev_open+0x32/0x140
[   72.909929][ T5725]  ? __pfx_virtual_ncidev_open+0x10/0x10
[   72.909946][ T5725]  virtual_ncidev_open+0x32/0x140
[   72.909962][ T5725]  ? __pfx_virtual_ncidev_open+0x10/0x10
[   72.909981][ T5725]  misc_open+0x1d5/0x200
[   72.910086][ T5725]  chrdev_open+0x2fc/0x380
[   72.910111][ T5725]  ? __pfx_chrdev_open+0x10/0x10
[   72.910137][ T5725]  do_dentry_open+0x621/0xa20
[   72.910194][ T5725]  vfs_open+0x38/0x1e0
[   72.910225][ T5725]  path_openat+0x1b1c/0x2000
[   72.910326][ T5725]  ? _parse_integer_limit+0x167/0x180
[   72.910356][ T5725]  do_filp_open+0x115/0x240
[   72.910460][ T5725]  do_sys_openat2+0xaa/0x110
[   72.910490][ T5725]  __x64_sys_openat+0xf8/0x120
[   72.910518][ T5725]  x64_sys_call+0x1ac/0x2e10
[   72.910602][ T5725]  do_syscall_64+0xc9/0x1a0
[   72.910627][ T5725]  ? clear_bhb_loop+0x25/0x80
[   72.910646][ T5725]  ? clear_bhb_loop+0x25/0x80
[   72.910672][ T5725]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.910739][ T5725] RIP: 0033:0x7f3fccdde169
[   72.910753][ T5725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   72.910769][ T5725] RSP: 002b:00007f3fcb405038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   72.910786][ T5725] RAX: ffffffffffffffda RBX: 00007f3fcd006160 RCX: 00007f3fccdde169
[   72.910798][ T5725] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c
[   72.910812][ T5725] RBP: 00007f3fcb405090 R08: 0000000000000000 R09: 0000000000000000
[   72.910826][ T5725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   72.910882][ T5725] R13: 0000000000000000 R14: 00007f3fcd006160 R15: 00007ffccef47e18
[   72.910900][ T5725]  </TASK>
[   73.361349][ T5742] loop3: detected capacity change from 0 to 8192
[   73.369779][ T5742] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   73.396142][   T29] kauditd_printk_skb: 924 callbacks suppressed
[   73.396201][   T29] audit: type=1400 audit(1745258250.369:4671): avc:  denied  { map } for  pid=5741 comm="syz.3.754" path="/171/file1/file0" dev="loop3" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[   73.460097][   T29] audit: type=1326 audit(1745258250.419:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc04ee169 code=0x7ffc0000
[   73.483593][   T29] audit: type=1326 audit(1745258250.419:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc04ee169 code=0x7ffc0000
[   73.494336][ T5745] loop3: detected capacity change from 0 to 2048
[   73.506990][   T29] audit: type=1326 audit(1745258250.419:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cc04ee169 code=0x7ffc0000
[   73.536852][   T29] audit: type=1326 audit(1745258250.419:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc04ee169 code=0x7ffc0000
[   73.560164][   T29] audit: type=1326 audit(1745258250.419:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc04ee169 code=0x7ffc0000
[   73.583609][   T29] audit: type=1326 audit(1745258250.419:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cc04ee169 code=0x7ffc0000
[   73.606992][   T29] audit: type=1326 audit(1745258250.419:4678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc04ee169 code=0x7ffc0000
[   73.630388][   T29] audit: type=1326 audit(1745258250.419:4679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cc04ee169 code=0x7ffc0000
[   73.653726][   T29] audit: type=1326 audit(1745258250.419:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc04ee169 code=0x7ffc0000
[   73.710429][ T5740] loop1: detected capacity change from 0 to 2048
[   73.756249][ T5740]  loop1: p1 < > p4
[   73.761379][ T5740] loop1: p4 size 8388608 extends beyond EOD, truncated
[   73.798254][ T5745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.935045][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.973479][ T5769] netlink: 'syz.1.759': attribute type 2 has an invalid length.
[   73.981329][ T5769] netlink: 'syz.1.759': attribute type 1 has an invalid length.
[   74.198096][ T5792] loop3: detected capacity change from 0 to 512
[   74.224843][ T5788] Falling back ldisc for ttyS3.
[   74.231011][ T5792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.246834][ T5792] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   74.266692][ T5798] loop1: detected capacity change from 0 to 512
[   74.283548][ T5798] EXT4-fs: Ignoring removed i_version option
[   74.311882][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.337798][ T5798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.481023][ T5805] loop5: detected capacity change from 0 to 2048
[   74.557444][ T5805]  loop5: p1 < > p4
[   74.616788][ T5805] loop5: p4 size 8388608 extends beyond EOD, truncated
[   74.998840][ T5821] loop3: detected capacity change from 0 to 2048
[   75.080167][ T5824] loop4: detected capacity change from 0 to 512
[   75.106243][ T5824] EXT4-fs: Ignoring removed nomblk_io_submit option
[   75.223115][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.232648][ T5824] EXT4-fs (loop4): filesystem is read-only
[   75.239562][ T5824] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   75.251991][ T5821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.262062][ T5824] EXT4-fs (loop4): filesystem is read-only
[   75.269972][ T5824] EXT4-fs (loop4): orphan cleanup on readonly fs
[   75.279428][ T5824] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.781: bg 0: block 64: padding at end of block bitmap is not set
[   75.281947][   T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.308469][ T5824] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   75.319264][ T5824] EXT4-fs (loop4): 1 orphan inode deleted
[   75.325553][ T5821] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   75.345120][ T5824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   75.378449][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.400580][   T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.409750][ T5821] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 11 with max blocks 1 with error 28
[   75.423257][ T5821] EXT4-fs (loop3): This should not happen!! Data will be lost
[   75.423257][ T5821] 
[   75.432955][ T5821] EXT4-fs (loop3): Total free blocks count 0
[   75.439024][ T5821] EXT4-fs (loop3): Free/Dirty block details
[   75.444964][ T5821] EXT4-fs (loop3): free_blocks=2415919104
[   75.450692][ T5821] EXT4-fs (loop3): dirty_blocks=16
[   75.455804][ T5821] EXT4-fs (loop3): Block reservation details
[   75.461775][ T5821] EXT4-fs (loop3): i_reserved_data_blocks=1
[   75.468455][ T5839] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 12 with error 28
[   75.551853][   T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.589283][   T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.652575][ T5850] FAULT_INJECTION: forcing a failure.
[   75.652575][ T5850] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   75.665870][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: +}[@ Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   75.665945][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   75.666012][ T5850] Call Trace:
[   75.666017][ T5850]  <TASK>
[   75.666024][ T5850]  dump_stack_lvl+0xf6/0x150
[   75.666047][ T5850]  dump_stack+0x15/0x1a
[   75.666063][ T5850]  should_fail_ex+0x261/0x270
[   75.666085][ T5850]  should_fail+0xb/0x10
[   75.666152][ T5850]  should_fail_usercopy+0x1a/0x20
[   75.666195][ T5850]  _copy_to_user+0x20/0xa0
[   75.666222][ T5850]  simple_read_from_buffer+0xb2/0x130
[   75.666302][ T5850]  proc_fail_nth_read+0x103/0x140
[   75.666405][ T5850]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   75.666435][ T5850]  vfs_read+0x1b2/0x710
[   75.666479][ T5850]  ? putname+0xe1/0x100
[   75.666502][ T5850]  ? __rcu_read_unlock+0x4e/0x70
[   75.666538][ T5850]  ? __fget_files+0x186/0x1c0
[   75.666585][ T5850]  ksys_read+0xeb/0x1b0
[   75.666608][ T5850]  __x64_sys_read+0x42/0x50
[   75.666628][ T5850]  x64_sys_call+0x2a3b/0x2e10
[   75.666653][ T5850]  do_syscall_64+0xc9/0x1a0
[   75.666682][ T5850]  ? clear_bhb_loop+0x25/0x80
[   75.666705][ T5850]  ? clear_bhb_loop+0x25/0x80
[   75.666804][ T5850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.666846][ T5850] RIP: 0033:0x7f0a2d7acb7c
[   75.666860][ T5850] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   75.666904][ T5850] RSP: 002b:00007f0a2be17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   75.666924][ T5850] RAX: ffffffffffffffda RBX: 00007f0a2d9d5fa0 RCX: 00007f0a2d7acb7c
[   75.666938][ T5850] RDX: 000000000000000f RSI: 00007f0a2be170a0 RDI: 0000000000000003
[   75.666951][ T5850] RBP: 00007f0a2be17090 R08: 0000000000000000 R09: 0000000000000000
[   75.666977][ T5850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   75.666989][ T5850] R13: 0000000000000000 R14: 00007f0a2d9d5fa0 R15: 00007ffee930b278
[   75.667010][ T5850]  </TASK>
[   75.708383][ T5856] SELinux: syz.3.789 (5856) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   75.908174][   T51] bridge_slave_1: left allmulticast mode
[   75.913862][   T51] bridge_slave_1: left promiscuous mode
[   75.919553][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.947928][   T51] bridge_slave_0: left allmulticast mode
[   75.953628][   T51] bridge_slave_0: left promiscuous mode
[   75.959311][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.974575][ T5868] FAULT_INJECTION: forcing a failure.
[   75.974575][ T5868] name failslab, interval 1, probability 0, space 0, times 0
[   75.977241][ T5866] loop5: detected capacity change from 0 to 1024
[   75.987440][ T5868] CPU: 0 UID: 0 PID: 5868 Comm: syz.0.793 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   75.987476][ T5868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   75.987492][ T5868] Call Trace:
[   75.987500][ T5868]  <TASK>
[   75.987510][ T5868]  dump_stack_lvl+0xf6/0x150
[   75.987539][ T5868]  dump_stack+0x15/0x1a
[   75.987560][ T5868]  should_fail_ex+0x261/0x270
[   75.987599][ T5868]  should_failslab+0x8f/0xb0
[   75.987626][ T5868]  kmem_cache_alloc_noprof+0x59/0x340
[   75.987660][ T5868]  ? security_file_alloc+0x32/0x100
[   75.987700][ T5868]  security_file_alloc+0x32/0x100
[   75.987765][ T5868]  init_file+0x5e/0x1e0
[   75.987796][ T5868]  alloc_empty_file+0x8e/0x200
[   75.987829][ T5868]  alloc_file_pseudo+0xcb/0x160
[   75.987919][ T5868]  anon_inode_getfile+0xa3/0x120
[   75.988018][ T5868]  bpf_link_prime+0x10a/0x1e0
[   75.988049][ T5868]  bpf_uprobe_multi_link_attach+0x82e/0x890
[   75.988089][ T5868]  link_create+0x64b/0x680
[   75.988127][ T5868]  ? selinux_bpf+0xab/0xc0
[   75.988232][ T5868]  __sys_bpf+0x4fe/0x800
[   75.988275][ T5868]  __x64_sys_bpf+0x43/0x50
[   75.988306][ T5868]  x64_sys_call+0x23da/0x2e10
[   75.988333][ T5868]  do_syscall_64+0xc9/0x1a0
[   75.988379][ T5868]  ? clear_bhb_loop+0x25/0x80
[   75.988406][ T5868]  ? clear_bhb_loop+0x25/0x80
[   75.988432][ T5868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.988519][ T5868] RIP: 0033:0x7f0a2d7ae169
[   75.988537][ T5868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.988559][ T5868] RSP: 002b:00007f0a2be17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   75.988583][ T5868] RAX: ffffffffffffffda RBX: 00007f0a2d9d5fa0 RCX: 00007f0a2d7ae169
[   75.988600][ T5868] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c
[   75.988614][ T5868] RBP: 00007f0a2be17090 R08: 0000000000000000 R09: 0000000000000000
[   75.988670][ T5868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   75.988680][ T5868] R13: 0000000000000000 R14: 00007f0a2d9d5fa0 R15: 00007ffee930b278
[   75.988697][ T5868]  </TASK>
[   76.244181][ T5874] loop5: detected capacity change from 0 to 128
[   76.374936][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   76.389866][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   76.404256][   T51] bond0 (unregistering): Released all slaves
[   76.775166][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   76.815898][   T51] tipc: Left network mode
[   76.852586][   T51] hsr_slave_0: left promiscuous mode
[   76.858428][   T51] hsr_slave_1: left promiscuous mode
[   76.875357][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.882924][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.912841][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.920446][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.934833][   T51] veth1_macvtap: left promiscuous mode
[   76.940452][   T51] veth0_macvtap: left promiscuous mode
[   76.947227][   T51] veth1_vlan: left promiscuous mode
[   76.952773][   T51] ªªªªª»: left promiscuous mode
[   77.095795][   T51] team0 (unregistering): Port device team_slave_1 removed
[   77.120240][   T51] team0 (unregistering): Port device team_slave_0 removed
[   77.131471][ T1676] kworker/u8:6: attempt to access beyond end of device
[   77.131471][ T1676] loop5: rw=1, sector=145, nr_sectors = 896 limit=128
[   77.164226][  T171] smc: removing ib device syz!
[   77.231345][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.238468][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.284831][ T5834] bridge_slave_0: entered allmulticast mode
[   77.311869][ T5834] bridge_slave_0: entered promiscuous mode
[   77.335825][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.342927][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.365096][ T5902] loop5: detected capacity change from 0 to 256
[   77.384858][ T5834] bridge_slave_1: entered allmulticast mode
[   77.405429][ T5834] bridge_slave_1: entered promiscuous mode
[   77.463109][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.503930][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.581936][ T5834] team0: Port device team_slave_0 added
[   77.613958][ T5834] team0: Port device team_slave_1 added
[   77.638386][   T51] IPVS: stop unused estimator thread 0...
[   77.646949][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.654031][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.680020][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.695683][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.702775][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.728749][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.766623][ T5834] hsr_slave_0: entered promiscuous mode
[   77.829095][ T5834] hsr_slave_1: entered promiscuous mode
[   77.844994][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.853704][ T5834] Cannot create hsr debugfs directory
[   77.991583][ T5834] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   78.002865][ T5834] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   78.032014][ T5834] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   78.051720][ T5926] loop3: detected capacity change from 0 to 1024
[   78.062075][ T5834] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   78.064944][ T5926] EXT4-fs: Ignoring removed oldalloc option
[   78.094840][ T5926] EXT4-fs: Ignoring removed orlov option
[   78.116258][ T5926] EXT4-fs (loop3): stripe (1570) is not aligned with cluster size (16), stripe is disabled
[   78.160727][ T5926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.199101][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.250647][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.275696][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   78.283380][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.285144][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.290820][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.297905][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.305284][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.319931][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.327418][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.334910][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.342381][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.349796][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.357221][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.364613][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.372088][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.379714][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.387208][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.394615][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.402180][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.409655][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.417150][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.424548][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.431978][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.439412][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.446858][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.454256][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.461692][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.469232][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.476671][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.484057][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   78.492185][    T9] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   78.512904][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.520106][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.539374][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   78.549849][   T29] kauditd_printk_skb: 261 callbacks suppressed
[   78.549862][   T29] audit: type=1326 audit(1745258255.509:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.3.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc04ee169 code=0x7ffc0000
[   78.579480][   T29] audit: type=1326 audit(1745258255.509:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.3.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc04ee169 code=0x7ffc0000
[   78.602948][   T29] audit: type=1326 audit(1745258255.509:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.3.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cc04ee169 code=0x7ffc0000
[   78.627074][   T29] audit: type=1326 audit(1745258255.509:4945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.3.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc04ee169 code=0x7ffc0000
[   78.650508][   T29] audit: type=1326 audit(1745258255.509:4946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.3.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc04ee169 code=0x7ffc0000
[   78.674032][   T29] audit: type=1326 audit(1745258255.509:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.3.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cc04ee169 code=0x7ffc0000
[   78.697531][   T29] audit: type=1326 audit(1745258255.509:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.3.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc04ee169 code=0x7ffc0000
[   78.720899][   T29] audit: type=1326 audit(1745258255.509:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.3.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cc04ee169 code=0x7ffc0000
[   78.744296][   T29] audit: type=1326 audit(1745258255.509:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.3.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc04ee169 code=0x7ffc0000
[   78.767698][   T29] audit: type=1326 audit(1745258255.509:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.3.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2cc04ee169 code=0x7ffc0000
[   78.778111][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.970923][ T5971] loop4: detected capacity change from 0 to 128
[   79.002554][ T5834] veth0_vlan: entered promiscuous mode
[   79.010988][ T5834] veth1_vlan: entered promiscuous mode
[   79.033094][ T5834] veth0_macvtap: entered promiscuous mode
[   79.040950][ T5834] veth1_macvtap: entered promiscuous mode
[   79.045641][ T5977] __nla_validate_parse: 14 callbacks suppressed
[   79.045658][ T5977] netlink: 188 bytes leftover after parsing attributes in process `syz.4.825'.
[   79.051418][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.072557][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.082502][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.092961][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.104420][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.117760][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.128386][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.139129][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.150220][ T5834] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.159004][ T5834] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.167751][ T5834] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.176571][ T5834] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.190011][ T5977] loop4: detected capacity change from 0 to 512
[   79.201258][ T5977] EXT4-fs (loop4): orphan cleanup on readonly fs
[   79.211843][ T5977] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.825: bg 0: block 248: padding at end of block bitmap is not set
[   79.226692][ T5977] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.825: Failed to acquire dquot type 1
[   79.242574][ T5977] EXT4-fs (loop4): 1 truncate cleaned up
[   79.250880][ T5977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   79.273086][ T5987] loop5: detected capacity change from 0 to 128
[   79.320447][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.406517][ T6002] xt_hashlimit: max too large, truncated to 1048576
[   79.436339][ T6004] xt_hashlimit: max too large, truncated to 1048576
[   79.480418][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'.
[   79.513714][ T6020] openvswitch: netlink: Message has 6 unknown bytes.
[   79.525345][ T6017] loop5: detected capacity change from 0 to 512
[   79.532652][ T6017] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   79.543052][ T6017] EXT4-fs (loop5): orphan cleanup on readonly fs
[   79.551589][ T6017] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.840: Failed to acquire dquot type 1
[   79.566767][ T6017] EXT4-fs (loop5): 1 truncate cleaned up
[   79.573057][ T6017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   79.585924][ T6023] FAULT_INJECTION: forcing a failure.
[   79.585924][ T6023] name failslab, interval 1, probability 0, space 0, times 0
[   79.598667][ T6023] CPU: 0 UID: 0 PID: 6023 Comm: syz.3.842 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   79.598751][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   79.598765][ T6023] Call Trace:
[   79.598772][ T6023]  <TASK>
[   79.598781][ T6023]  dump_stack_lvl+0xf6/0x150
[   79.598807][ T6023]  dump_stack+0x15/0x1a
[   79.598886][ T6023]  should_fail_ex+0x261/0x270
[   79.598914][ T6023]  should_failslab+0x8f/0xb0
[   79.598939][ T6023]  kmem_cache_alloc_node_noprof+0x5c/0x340
[   79.598971][ T6023]  ? alloc_vmap_area+0x1d5/0x1800
[   79.599024][ T6023]  alloc_vmap_area+0x1d5/0x1800
[   79.599054][ T6023]  ? __rcu_read_unlock+0x4e/0x70
[   79.599071][ T6023]  ? should_fail_ex+0xd7/0x270
[   79.599110][ T6023]  ? should_failslab+0x8f/0xb0
[   79.599131][ T6023]  ? __kmalloc_cache_node_noprof+0x194/0x340
[   79.599186][ T6023]  __get_vm_area_node+0x162/0x1c0
[   79.599223][ T6023]  __vmalloc_node_range_noprof+0x285/0xe80
[   79.599299][ T6023]  ? bpf_prog_alloc_no_stats+0x49/0x390
[   79.599332][ T6023]  ? avc_has_perm_noaudit+0x1cc/0x210
[   79.599361][ T6023]  ? selinux_capable+0x1f9/0x260
[   79.599426][ T6023]  ? bpf_prog_alloc_no_stats+0x49/0x390
[   79.599456][ T6023]  __vmalloc_noprof+0x5e/0x70
[   79.599475][ T6023]  ? bpf_prog_alloc_no_stats+0x49/0x390
[   79.599505][ T6023]  bpf_prog_alloc_no_stats+0x49/0x390
[   79.599574][ T6023]  ? bpf_prog_alloc+0x28/0x150
[   79.599597][ T6023]  bpf_prog_alloc+0x3a/0x150
[   79.599621][ T6023]  bpf_prog_load+0x532/0x10e0
[   79.599739][ T6023]  __sys_bpf+0x533/0x800
[   79.599776][ T6023]  __x64_sys_bpf+0x43/0x50
[   79.599804][ T6023]  x64_sys_call+0x23da/0x2e10
[   79.599878][ T6023]  do_syscall_64+0xc9/0x1a0
[   79.599959][ T6023]  ? clear_bhb_loop+0x25/0x80
[   79.599995][ T6023]  ? clear_bhb_loop+0x25/0x80
[   79.600011][ T6023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.600027][ T6023] RIP: 0033:0x7f2cc04ee169
[   79.600038][ T6023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   79.600052][ T6023] RSP: 002b:00007f2cbeb57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   79.600140][ T6023] RAX: ffffffffffffffda RBX: 00007f2cc0715fa0 RCX: 00007f2cc04ee169
[   79.600229][ T6023] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005
[   79.600243][ T6023] RBP: 00007f2cbeb57090 R08: 0000000000000000 R09: 0000000000000000
[   79.600256][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   79.600268][ T6023] R13: 0000000000000000 R14: 00007f2cc0715fa0 R15: 00007ffe32d1fc78
[   79.600339][ T6023]  </TASK>
[   79.600359][ T6023] syz.3.842: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[   79.600938][ T4226] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.612917][ T6023] ,cpuset=/,mems_allowed=0
[   79.881861][ T6023] CPU: 0 UID: 0 PID: 6023 Comm: syz.3.842 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   79.881953][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   79.881965][ T6023] Call Trace:
[   79.881970][ T6023]  <TASK>
[   79.881977][ T6023]  dump_stack_lvl+0xf6/0x150
[   79.881998][ T6023]  dump_stack+0x15/0x1a
[   79.882012][ T6023]  warn_alloc+0x145/0x1b0
[   79.882072][ T6023]  __vmalloc_node_range_noprof+0x2aa/0xe80
[   79.882176][ T6023]  ? avc_has_perm_noaudit+0x1cc/0x210
[   79.882198][ T6023]  ? selinux_capable+0x1f9/0x260
[   79.882222][ T6023]  ? bpf_prog_alloc_no_stats+0x49/0x390
[   79.882267][ T6023]  __vmalloc_noprof+0x5e/0x70
[   79.882282][ T6023]  ? bpf_prog_alloc_no_stats+0x49/0x390
[   79.882304][ T6023]  bpf_prog_alloc_no_stats+0x49/0x390
[   79.882371][ T6023]  ? bpf_prog_alloc+0x28/0x150
[   79.882412][ T6023]  bpf_prog_alloc+0x3a/0x150
[   79.882445][ T6023]  bpf_prog_load+0x532/0x10e0
[   79.882525][ T6023]  __sys_bpf+0x533/0x800
[   79.882576][ T6023]  __x64_sys_bpf+0x43/0x50
[   79.882598][ T6023]  x64_sys_call+0x23da/0x2e10
[   79.882643][ T6023]  do_syscall_64+0xc9/0x1a0
[   79.882665][ T6023]  ? clear_bhb_loop+0x25/0x80
[   79.882690][ T6023]  ? clear_bhb_loop+0x25/0x80
[   79.882722][ T6023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.882747][ T6023] RIP: 0033:0x7f2cc04ee169
[   79.882797][ T6023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   79.882812][ T6023] RSP: 002b:00007f2cbeb57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   79.882828][ T6023] RAX: ffffffffffffffda RBX: 00007f2cc0715fa0 RCX: 00007f2cc04ee169
[   79.882839][ T6023] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005
[   79.882849][ T6023] RBP: 00007f2cbeb57090 R08: 0000000000000000 R09: 0000000000000000
[   79.882860][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   79.882870][ T6023] R13: 0000000000000000 R14: 00007f2cc0715fa0 R15: 00007ffe32d1fc78
[   79.882907][ T6023]  </TASK>
[   79.882913][ T6023] Mem-Info:
[   79.989420][ T6026] netlink: 'syz.0.844': attribute type 3 has an invalid length.
[   79.990085][ T6023] active_anon:19927 inactive_anon:2 isolated_anon:0
[   79.990085][ T6023]  active_file:14634 inactive_file:2348 isolated_file:0
[   79.990085][ T6023]  unevictable:0 dirty:270 writeback:0
[   79.990085][ T6023]  slab_reclaimable:2968 slab_unreclaimable:46775
[   79.990085][ T6023]  mapped:28430 shmem:16807 pagetables:793
[   79.990085][ T6023]  sec_pagetables:0 bounce:0
[   79.990085][ T6023]  kernel_misc_reclaimable:0
[   79.990085][ T6023]  free:1815586 free_pcp:7254 free_cma:0
[   79.994603][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.844'.
[   79.999278][ T6023] Node 0 active_anon:79708kB inactive_anon:8kB active_file:58536kB inactive_file:9392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113720kB dirty:1080kB writeback:0kB shmem:67228kB writeback_tmp:0kB kernel_stack:2784kB pagetables:3172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   79.999336][ T6023] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   80.206065][ T6023] lowmem_reserve[]: 0 2882 7860 7860
[   80.211456][ T6023] Node 0 DMA32 free:2947780kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951308kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB
[   80.240051][ T6023] lowmem_reserve[]: 0 0 4978 4978
[   80.245131][ T6023] Node 0 Normal free:4299204kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB active_anon:79824kB inactive_anon:8kB active_file:58536kB inactive_file:9392kB unevictable:0kB writepending:1080kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:25216kB local_pcp:10508kB free_cma:0kB
[   80.275478][ T6023] lowmem_reserve[]: 0 0 0 0
[   80.280052][ T6023] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   80.292819][ T6023] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 2*16kB (M) 4*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947780kB
[   80.309121][ T6023] Node 0 Normal: 69*4kB (ME) 48*8kB (UME) 123*16kB (ME) 144*32kB (UME) 436*64kB (UME) 289*128kB (UME) 224*256kB (UME) 98*512kB (UM) 45*1024kB (UME) 17*2048kB (UME) 986*4096kB (UM) = 4299204kB
[   80.328308][ T6023] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[   80.337651][ T6023] 33786 total pagecache pages
[   80.342332][ T6023] 2 pages in swap cache
[   80.346551][ T6023] Free swap  = 124988kB
[   80.350724][ T6023] Total swap = 124996kB
[   80.354970][ T6023] 2097051 pages RAM
[   80.358839][ T6023] 0 pages HighMem/MovableOnly
[   80.363530][ T6023] 80823 pages reserved
[   80.390580][ T6033] loop5: detected capacity change from 0 to 512
[   80.397309][ T6033] EXT4-fs: Ignoring removed nobh option
[   80.401355][ T6035] xt_hashlimit: max too large, truncated to 1048576
[   80.435936][ T6033] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[   80.454436][ T6033] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.843: invalid indirect mapped block 2683928664 (level 1)
[   80.471726][ T6033] EXT4-fs (loop5): 1 truncate cleaned up
[   80.480343][ T6033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.497810][ T6041] FAULT_INJECTION: forcing a failure.
[   80.497810][ T6041] name failslab, interval 1, probability 0, space 0, times 0
[   80.510610][ T6041] CPU: 0 UID: 0 PID: 6041 Comm: syz.4.849 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   80.510747][ T6041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   80.510763][ T6041] Call Trace:
[   80.510770][ T6041]  <TASK>
[   80.510847][ T6041]  dump_stack_lvl+0xf6/0x150
[   80.510875][ T6041]  dump_stack+0x15/0x1a
[   80.510896][ T6041]  should_fail_ex+0x261/0x270
[   80.510926][ T6041]  should_failslab+0x8f/0xb0
[   80.511027][ T6041]  __kmalloc_noprof+0xad/0x410
[   80.511062][ T6041]  ? ethnl_default_doit+0xd8/0x9b0
[   80.511087][ T6041]  ethnl_default_doit+0xd8/0x9b0
[   80.511107][ T6041]  ? genl_family_rcv_msg_attrs_parse+0x14b/0x1a0
[   80.511209][ T6041]  ? genl_family_rcv_msg_attrs_parse+0x185/0x1a0
[   80.511298][ T6041]  genl_rcv_msg+0x69b/0x6f0
[   80.511330][ T6041]  ? __pfx_ethnl_default_doit+0x10/0x10
[   80.511368][ T6041]  ? should_fail_ex+0x31/0x270
[   80.511388][ T6041]  ? __rcu_read_unlock+0x4e/0x70
[   80.511413][ T6041]  netlink_rcv_skb+0x12f/0x230
[   80.511497][ T6041]  ? __pfx_genl_rcv_msg+0x10/0x10
[   80.511545][ T6041]  genl_rcv+0x28/0x40
[   80.511575][ T6041]  netlink_unicast+0x605/0x6c0
[   80.511613][ T6041]  netlink_sendmsg+0x609/0x720
[   80.511650][ T6041]  ? __pfx_netlink_sendmsg+0x10/0x10
[   80.511676][ T6041]  __sock_sendmsg+0x140/0x180
[   80.511719][ T6041]  ____sys_sendmsg+0x350/0x4e0
[   80.511744][ T6041]  __sys_sendmsg+0x1a0/0x240
[   80.511854][ T6041]  __x64_sys_sendmsg+0x46/0x50
[   80.511927][ T6041]  x64_sys_call+0x26f3/0x2e10
[   80.511954][ T6041]  do_syscall_64+0xc9/0x1a0
[   80.511979][ T6041]  ? clear_bhb_loop+0x25/0x80
[   80.511999][ T6041]  ? clear_bhb_loop+0x25/0x80
[   80.512018][ T6041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.512042][ T6041] RIP: 0033:0x7f3a5599e169
[   80.512067][ T6041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   80.512089][ T6041] RSP: 002b:00007f3a54007038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   80.512111][ T6041] RAX: ffffffffffffffda RBX: 00007f3a55bc5fa0 RCX: 00007f3a5599e169
[   80.512124][ T6041] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004
[   80.512135][ T6041] RBP: 00007f3a54007090 R08: 0000000000000000 R09: 0000000000000000
[   80.512145][ T6041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   80.512156][ T6041] R13: 0000000000000000 R14: 00007f3a55bc5fa0 R15: 00007ffcccb826f8
[   80.512234][ T6041]  </TASK>
[   80.831395][ T4226] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.865141][ T6046] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[   80.930300][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.857'.
[   80.939431][ T6064] loop5: detected capacity change from 0 to 2048
[   80.955442][ T6066] loop3: detected capacity change from 0 to 2048
[   80.963952][ T6064] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.993959][ T6066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.022540][ T6066] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   81.049351][ T6066] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 11 with max blocks 1 with error 28
[   81.061692][ T6066] EXT4-fs (loop3): This should not happen!! Data will be lost
[   81.061692][ T6066] 
[   81.071432][ T6066] EXT4-fs (loop3): Total free blocks count 0
[   81.077478][ T6066] EXT4-fs (loop3): Free/Dirty block details
[   81.083513][ T6066] EXT4-fs (loop3): free_blocks=2415919104
[   81.089308][ T6066] EXT4-fs (loop3): dirty_blocks=16
[   81.094445][ T6066] EXT4-fs (loop3): Block reservation details
[   81.100571][ T6066] EXT4-fs (loop3): i_reserved_data_blocks=1
[   81.107888][ T6077] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 12 with error 28
[   81.331825][ T6092] loop6: detected capacity change from 0 to 1024
[   81.377921][ T6094] netlink: 80 bytes leftover after parsing attributes in process `syz.0.868'.
[   81.406924][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.6.870'.
[   81.701612][ T6064] ==================================================================
[   81.709804][ T6064] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark
[   81.718078][ T6064] 
[   81.720404][ T6064] write to 0xffff8881065df374 of 4 bytes by task 6075 on cpu 0:
[   81.728128][ T6064]  xas_set_mark+0x13d/0x150
[   81.732671][ T6064]  __folio_start_writeback+0x1ea/0x440
[   81.738149][ T6064]  ext4_bio_write_folio+0x591/0x9d0
[   81.743382][ T6064]  mpage_process_page_bufs+0x488/0x5d0
[   81.748858][ T6064]  mpage_prepare_extent_to_map+0x791/0xb80
[   81.754699][ T6064]  ext4_do_writepages+0xa3b/0x21d0
[   81.759821][ T6064]  ext4_writepages+0x183/0x320
[   81.764614][ T6064]  do_writepages+0x1d8/0x480
[   81.769219][ T6064]  file_write_and_wait_range+0x16e/0x2f0
[   81.774864][ T6064]  generic_buffers_fsync_noflush+0x46/0x120
[   81.780783][ T6064]  ext4_sync_file+0x1c3/0x6c0
[   81.785475][ T6064]  vfs_fsync_range+0x116/0x130
[   81.790269][ T6064]  ext4_buffered_write_iter+0x358/0x3c0
[   81.795827][ T6064]  ext4_file_write_iter+0xe49/0xf80
[   81.801036][ T6064]  iter_file_splice_write+0x5f2/0x980
[   81.806431][ T6064]  direct_splice_actor+0x160/0x2c0
[   81.811558][ T6064]  splice_direct_to_actor+0x305/0x680
[   81.816943][ T6064]  do_splice_direct+0xd9/0x150
[   81.821748][ T6064]  do_sendfile+0x40a/0x690
[   81.826177][ T6064]  __x64_sys_sendfile64+0x113/0x160
[   81.831386][ T6064]  x64_sys_call+0xfc3/0x2e10
[   81.835984][ T6064]  do_syscall_64+0xc9/0x1a0
[   81.840497][ T6064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.846398][ T6064] 
[   81.848723][ T6064] read to 0xffff8881065df374 of 4 bytes by task 6064 on cpu 1:
[   81.856266][ T6064]  filemap_write_and_wait_range+0x105/0x370
[   81.862166][ T6064]  filemap_invalidate_pages+0xa8/0x1a0
[   81.867634][ T6064]  kiocb_invalidate_pages+0x6c/0x80
[   81.872837][ T6064]  __iomap_dio_rw+0x5d4/0x12a0
[   81.877613][ T6064]  iomap_dio_rw+0x40/0x90
[   81.881957][ T6064]  ext4_file_write_iter+0xba9/0xf80
[   81.887160][ T6064]  iter_file_splice_write+0x5f2/0x980
[   81.892550][ T6064]  direct_splice_actor+0x160/0x2c0
[   81.897677][ T6064]  splice_direct_to_actor+0x305/0x680
[   81.903063][ T6064]  do_splice_direct+0xd9/0x150
[   81.907857][ T6064]  do_sendfile+0x40a/0x690
[   81.912281][ T6064]  __x64_sys_sendfile64+0x113/0x160
[   81.917500][ T6064]  x64_sys_call+0xfc3/0x2e10
[   81.922095][ T6064]  do_syscall_64+0xc9/0x1a0
[   81.926607][ T6064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.932510][ T6064] 
[   81.934833][ T6064] value changed: 0x0a000021 -> 0x04000021
[   81.940545][ T6064] 
[   81.942867][ T6064] Reported by Kernel Concurrency Sanitizer on:
[   81.949016][ T6064] CPU: 1 UID: 0 PID: 6064 Comm: syz.5.859 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   81.961433][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   81.971490][ T6064] ==================================================================
[   82.023211][ T4226] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.