last executing test programs:

2m36.189240761s ago: executing program 2 (id=623):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x7f, 0x0, &(0x7f0000001180)=0x59)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000580)=ANY=[@ANYRESDEC=r0], &(0x7f00000003c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2a}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)={{}, {}, [{}]}, 0x2c, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814)
sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x8a33}}, ["", "", ""]}, 0x24}}, 0x24008840)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
r7 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x3, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0xf573}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x18)

2m35.898528171s ago: executing program 2 (id=629):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000260005"], 0x2c}}, 0x800)
recvmmsg(r2, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0)

2m35.842270546s ago: executing program 2 (id=632):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
r2 = socket$pptp(0x18, 0x1, 0x2)
r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x10007, 0x0)
io_uring_setup(0x5b54, &(0x7f0000000040)={0x0, 0x2df4, 0x40, 0x0, 0x132})
ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72})
close_range(r2, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x0, &(0x7f0000000640), 0x2, 0xbdf, &(0x7f0000000c00)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0xb)
quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000801, 0x0, &(0x7f0000000200)={0x2, 0x7, 0x11, 0x5, 0xcd17, 0x2, 0x38, 0x8001, 0x9})

2m35.687171262s ago: executing program 2 (id=640):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="646973636172642c6e66732c646f74732c636865636b3d72656c617865642c6e6f646f74732c002fa989222e89891ac69104ee5eee75b223975528", @ANYBLOB="c9aa133bf046cdfd889ad86cfae5e992a87bc65a4ccfb269a869f50b21de4f3667f1ef6a912bd81d0f5240984beea90ed0faec4e49b4b1d2363a1936de228f97b31fa5cb094a9cb554a281e13ad312fc08ddef1c707900f01d65e1578dbb93db17903ce71fca61dffb94c5c15f718e40f0e686b40b5b06e91102de35d277358fc968522682459262da2a6de59b06a44317d5d2e5dc78c4fb45fa9b0a897e945184f4124ef3fa2e26b7852bb898cf35d8741e3542"], 0x41, 0x22d, &(0x7f0000000300)="$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")
r1 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x8f)
fchdir(r2)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000100)='.\x00', 0x41000800)
r4 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0)
r5 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x1000848, &(0x7f0000000080)=ANY=[], 0x3, 0x357, &(0x7f0000000140)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r4, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES64=r5, @ANYRES16=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
socket$packet(0x11, 0x3, 0x300)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x9)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x300)
ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0)
syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
socket$nl_route(0x10, 0x3, 0x0)

2m35.022360748s ago: executing program 2 (id=653):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setgid(0xee00)

2m34.418206039s ago: executing program 2 (id=674):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
r2 = socket$pptp(0x18, 0x1, 0x2)
r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x10007, 0x0)
io_uring_setup(0x5b54, &(0x7f0000000040)={0x0, 0x2df4, 0x40, 0x0, 0x132})
ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72})
close_range(r2, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x0, &(0x7f0000000640), 0x2, 0xbdf, &(0x7f0000000c00)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0xb)
quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000801, 0x0, &(0x7f0000000200)={0x2, 0x7, 0x11, 0x5, 0xcd17, 0x2, 0x38, 0x8001, 0x9})

2m34.418029079s ago: executing program 32 (id=674):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
r2 = socket$pptp(0x18, 0x1, 0x2)
r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x10007, 0x0)
io_uring_setup(0x5b54, &(0x7f0000000040)={0x0, 0x2df4, 0x40, 0x0, 0x132})
ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72})
close_range(r2, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x0, &(0x7f0000000640), 0x2, 0xbdf, &(0x7f0000000c00)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0xb)
quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000801, 0x0, &(0x7f0000000200)={0x2, 0x7, 0x11, 0x5, 0xcd17, 0x2, 0x38, 0x8001, 0x9})

4.210518026s ago: executing program 4 (id=2919):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x13732000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040)
writev(r3, &(0x7f0000000100)=[{&(0x7f0000000500)="87", 0x1}], 0x1)
recvmmsg(r2, &(0x7f0000000d40), 0x40000000000038f, 0x10020, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb)
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000bb3000/0x1000)=nil)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x2}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYRES16=r1], 0xa8}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="5c00000014006b0402313dfc0b2154972c29389fc4a03e20aebba6080c000acc28d2280000f800250f02000f00e5aa000017d34460bc241e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d45b3b7a04dbdb57", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x51, &(0x7f0000000100)={[{@nombcache}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x40}}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xb760}}]}, 0x8, 0x5fe, &(0x7f0000000ac0)="$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")

3.503156857s ago: executing program 1 (id=2925):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0, 0x880b}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0)

3.319327476s ago: executing program 1 (id=2927):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004880)={0x20, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88G'}]}]}, 0x20}}, 0x0)

3.284732469s ago: executing program 4 (id=2928):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
fadvise64(0xffffffffffffffff, 0x36a9, 0x9, 0x1)

3.28082263s ago: executing program 1 (id=2929):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x1001) (async, rerun: 64)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (rerun: 64)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-010d \x00'}, 0x20)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000600)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@grpquota}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@grpquota}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r2}, 0x4) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r3}, 0x10)
getresgid(&(0x7f0000000540), &(0x7f00000005c0), &(0x7f0000000780))
openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) (async, rerun: 64)
r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') (rerun: 64)
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async)
r5 = syz_clone(0x8820000, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r5, &(0x7f0000000240)='attr/current\x00')
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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")

3.07918971s ago: executing program 4 (id=2931):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x57c, &(0x7f000000c480)={0x0, 0xc46e, 0x400, 0x2, 0x3})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x24, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091)
close_range(r0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = memfd_create(0x0, 0x0)
sendfile(r3, r3, 0x0, 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)

2.907887537s ago: executing program 1 (id=2932):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0x1, 0x4)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x2)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0x192}, {&(0x7f0000000e80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0)

2.873222411s ago: executing program 4 (id=2933):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup2(r0, r1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES8, @ANYRES8, @ANYBLOB="48c6ab86e3b1e45ea768cd54026741cb08844eeced7fbbfc6d05b323d76a89e77f4bd73d024b7eec7f5e4f3bb67aa275719ce55bb0cee19f9ad2d9ee34800c090b46e9855d7208e72a514a35ada9582d17cd265a7e19e37c16720908b67b7ea5736671058d934e33a72462d5980f35f8c2391d6410083ca57aafa1d28a42c29194891a50606d2549faa9", @ANYRES16=r1, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRES16=r1, @ANYRES8=0x0], 0xd)

2.814562106s ago: executing program 1 (id=2934):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbfe0900"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
readlink(&(0x7f0000000540)='./cgroup\x00', &(0x7f0000000ac0)=""/157, 0x9d)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000000), 0x4)
move_pages(0x0, 0x1, &(0x7f00000021c0)=[&(0x7f0000001000/0x1000)=nil], &(0x7f0000001180), 0x0, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0)
preadv2(r5, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000000)=""/205, 0xcd}, {&(0x7f0000000100)=""/98, 0x62}], 0x3, 0x7ffffffe, 0x100, 0xa)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48)
setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, "8a940f02a4eda3d57e17548ba2f404eb45618940950000000000000000008000", 0x1000, 0x7, 0x6, 0xffffffff}, 0x3c)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x7, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10)
setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0)

2.814190986s ago: executing program 4 (id=2935):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = pidfd_getfd(r1, r1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
setns(r2, 0x66020000)
syz_clone(0x498144ee5f60e149, 0x0, 0x0, 0x0, 0x0, 0x0)

2.607979897s ago: executing program 1 (id=2937):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000040)={[{@grpid}, {@grpquota}, {@nodioread_nolock}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x2, 0x7})
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x7})
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53048d6)
io_setup(0x2, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x800)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000300)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES16=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf)
fcntl$dupfd(r2, 0x0, r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0x1, 0x0)
vmsplice(r4, &(0x7f0000001280), 0x0, 0x2)

1.580313421s ago: executing program 5 (id=2959):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004880)={0x20, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88G'}]}]}, 0x20}}, 0x0)

1.561163993s ago: executing program 5 (id=2960):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000000900010073797a300000000009000200737991320000000014000480100001800b0001006c6f51b3310c4cfcea6f6b7570000006000740e55c0000140000001100010000000000000000000300000a"], 0x70}}, 0x8810)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000380)={@multicast2, @loopback, @remote}, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x14}, 0x18)
syz_usbip_server_init(0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x29c33dcca1e31b6a)
r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0)
recvmsg(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000780)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000ff26af252500000005002200ff0000000a0001007770616e3000000005002b0003000000fe4ae42ab6d4100efb87d93ee884a5853c0b193d645a778a833c4fc0ef80a3eee201"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4004)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r8=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000940)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYBLOB="000226bd7000fddbdf2501000000340007800c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018022000100", @ANYRES32, @ANYBLOB="0c000180ff000100", @ANYRESOCT=r4, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0a000a006b667265650000000c00030001010000000000000c000800110d00000000000009000a007379"], 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x4000850)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r9 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r9, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0)

588.049301ms ago: executing program 0 (id=2970):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/notes', 0x800, 0x0)
io_setup(0x3, &(0x7f0000000400)=<r1=>0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000800"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xe11, r0, 0x0, 0x0, 0x4, 0x0, 0x0, r0}])

563.483483ms ago: executing program 0 (id=2974):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbfe0900"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
readlink(&(0x7f0000000540)='./cgroup\x00', &(0x7f0000000ac0)=""/157, 0x9d)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000000), 0x4)
move_pages(0x0, 0x1, &(0x7f00000021c0)=[&(0x7f0000001000/0x1000)=nil], &(0x7f0000001180), 0x0, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0)
preadv2(r5, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000000)=""/205, 0xcd}, {&(0x7f0000000100)=""/98, 0x62}], 0x3, 0x7ffffffe, 0x100, 0xa)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48)
setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, "8a940f02a4eda3d57e17548ba2f404eb45618940950000000000000000008000", 0x1000, 0x7, 0x6, 0xffffffff}, 0x3c)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0)

510.638718ms ago: executing program 5 (id=2975):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503afffe8000000000000000000000000000bbfe8000000000000000000000001000aa08029078000000006000081000001100fc0100000000000000000a0000000000000000000000000000000000000000000000000000000000052f00000000000087000000000000000100000000000000"], 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x6, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x5, &(0x7f0000000180)=[{0x9, 0x6a, 0x1}, {0x3, 0xe, 0x64, 0x4}, {0x4962, 0xb4, 0x6, 0x5}, {0x6b, 0x5, 0x5, 0x7381d21b}, {0x8, 0xf8, 0x8, 0xff}]})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
socket$nl_route(0x10, 0x3, 0x0)
close(0x3)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'wg1\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r4, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000000000000000181a857ff07f6b120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0x1}, 0x48)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800"], 0xa8}}, 0x4)
sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x3, 0x136, [0x0, 0x200000001040, 0x200000001254, 0x200000001612], 0x0, 0x0, &(0x7f0000001040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x0, 0x12, 0x8917, 'sit0\x00', 'syzkaller1\x00', 'veth0_to_hsr\x00', 'veth1_macvtap\x00', @link_local, [0x0, 0xff, 0xff, 0x0, 0xff], @random="cc45f55aabb4", [0xff, 0xff, 0x0, 0x0, 0x0, 0x80], 0x6e, 0x6e, 0xa6, [], [], @common=@dnat={'dnat\x00', 0x10, {{@random="c9039515e7d0", 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x1ae)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r10}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280))
syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x1, 0x288}, &(0x7f0000000100)=<r11=>0x0, &(0x7f0000000000))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)

456.671944ms ago: executing program 3 (id=2977):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) (async)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x38, r1, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, 'N\x85\x18\xbb\x88\xf8\xfd\xdf\xf6\xfa\xe3<h'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)={0x70, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'syzkaller\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x200008c0)
bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)="f4aa90b0676979e44e9aeefc1c13e8011a731e48cd7b6cb017c3848a7e7c585dc5edd34437a9ed92f7a6351a83188f7f8ada603a9db4ba570ae16b557e3fa5e5642c3f37b22e5b5562280f283405620b1b7bf9b97445d38a9c549913e37662578b708fad90744d5db0e0be68008ccffebb003d8dd3e0acae3d5c2f4bc8955478c8610ab68327cc4ef51983b205c6650f82ccaff7e3828356f2e6ae0567364ba958e8034ed745b654ff20d306a6040ab889d2d5e24a81d1bab1ed0202609b1dc6b4421a1754e4ea0a454ae95ed005918f1bc067859c", &(0x7f00000000c0)="cdbba9c330bb243846d5fff7ba00008ab2c8d59c64c400d73dc83944ce0e8baedb3baf2708734a16c152935a5253468716451adeedaa0cdef12af4a0ae0041ce7eca8095ecb6b27bbcb22333366ec92754545e75f7829a7154d1b7527a08d82ccc5f380c71b0b230f5f6fd4bd1cc9ab2a7213575b108491795098ef2914c7528e3e43ec0ddd25900"/146, 0x100, r4, 0x4}, 0x38)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc)
setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4)

374.184852ms ago: executing program 0 (id=2978):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014640000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000003800038034000080040001800c000540000000000000004914000b80f90001800b0001006f626a72656600000c00044000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

344.458055ms ago: executing program 3 (id=2979):
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_NAME(0xf, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0)
getrandom(0x0, 0x0, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f00000008c0), &(0x7f0000000880)=r5}, 0x20)
r6 = syz_io_uring_setup(0xb43, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=<r7=>0x0, &(0x7f0000000900))
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x208, 0x20a, 0x278, 0x208, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'syzkaller1\x00', 'geneve0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x7a, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x7, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r9, 0x10c, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
io_uring_enter(r6, 0x47f8, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='kfree\x00', r10, 0x0, 0xffffffffffffffff}, 0x18)
kexec_load(0x4, 0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='console\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

343.759306ms ago: executing program 0 (id=2980):
r0 = dup(0xffffffffffffffff)
ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x40}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000640)='kfree\x00', r5}, 0x18)
sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)

300.85733ms ago: executing program 0 (id=2981):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004880)={0x20, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88G'}]}]}, 0x20}}, 0x0)

281.017582ms ago: executing program 5 (id=2982):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbfe0900"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
readlink(&(0x7f0000000540)='./cgroup\x00', &(0x7f0000000ac0)=""/157, 0x9d)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000000), 0x4)
move_pages(0x0, 0x1, &(0x7f00000021c0)=[&(0x7f0000001000/0x1000)=nil], &(0x7f0000001180), 0x0, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0)
preadv2(r5, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000000)=""/205, 0xcd}, {&(0x7f0000000100)=""/98, 0x62}], 0x3, 0x7ffffffe, 0x100, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0))
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0)

280.366342ms ago: executing program 3 (id=2983):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/notes', 0x800, 0x0)
io_setup(0x3, &(0x7f0000000400)=<r1=>0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000800"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xe11, r0, 0x0, 0x0, 0x4, 0x0, 0x0, r0}])

267.099483ms ago: executing program 0 (id=2984):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000000900010073797a300000000009000200737991320000000014000480100001800b0001006c6f51b3310c4cfcea6f6b7570000006000740e55c0000140000001100010000000000000000000300000a"], 0x70}}, 0x8810)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000380)={@multicast2, @loopback, @remote}, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x14}, 0x18)
syz_usbip_server_init(0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x29c33dcca1e31b6a)
r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0)
recvmsg(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000780)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000ff26af252500000005002200ff0000000a0001007770616e3000000005002b0003000000fe4ae42ab6d4100efb87d93ee884a5853c0b193d645a778a833c4fc0ef80a3eee201"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4004)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r8=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000940)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYBLOB="000226bd7000fddbdf2501000000340007800c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018022000100", @ANYRES32, @ANYBLOB="0c000180ff000100", @ANYRESOCT=r4, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0a000a006b667265650000000c00030001010000000000000c000800110d00000000000009000a007379"], 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x4000850)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r9 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r9, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0)

167.703053ms ago: executing program 3 (id=2985):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00', 0x6)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup2(r0, r1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES8, @ANYRES8, @ANYBLOB="48c6ab86e3b1e45ea768cd54026741cb08844eeced7fbbfc6d05b323d76a89e77f4bd73d024b7eec7f5e4f3bb67aa275719ce55bb0cee19f9ad2d9ee34800c090b46e9855d7208e72a514a35ada9582d17cd265a7e19e37c16720908b67b7ea5736671058d934e33a72462d5980f35f8c2391d6410083ca57aafa1d28a42c29194891a50606d2549faa9", @ANYRES16=r1, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRES16=r1, @ANYRES8=0x0], 0xd)

65.635004ms ago: executing program 5 (id=2986):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000d40000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18)
r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x45a5, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000640)=<r4=>0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4)
syz_io_uring_setup(0x4d84, &(0x7f0000000680)={0x0, 0x8b11, 0x1, 0x0, 0xfffffffe, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0))
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r2, 0x0, 0x0, 0x1, 0x1})
io_uring_enter(r2, 0x22d0, 0x20, 0x0, 0x0, 0x0)

65.119064ms ago: executing program 3 (id=2987):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x40}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r2}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)

33.618347ms ago: executing program 3 (id=2988):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbfe0900"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
readlink(&(0x7f0000000540)='./cgroup\x00', &(0x7f0000000ac0)=""/157, 0x9d)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000000), 0x4)
move_pages(0x0, 0x1, &(0x7f00000021c0)=[&(0x7f0000001000/0x1000)=nil], &(0x7f0000001180), 0x0, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0)
preadv2(r5, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000000)=""/205, 0xcd}, {&(0x7f0000000100)=""/98, 0x62}], 0x3, 0x7ffffffe, 0x100, 0xa)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0)

11.792999ms ago: executing program 4 (id=2941):
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000200)=0x3, 0x4)
sendto$inet(r1, &(0x7f0000000040)="0804", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)

0s ago: executing program 5 (id=2989):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f000000c340)={0xa000000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x453, 0x4, 0x70bd2d, 0x25dfdbfe, 'P'}, 0x14}, 0x1, 0x0, 0x0, 0x20000094}, 0x40880)
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x505, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000008000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6)
setsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f00000000c0)="0b87268dd6ffa30001000000000012ff2ba2b92656d0017242ba93000000", 0x1e)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)

kernel console output (not intermixed with test programs):

riteback.
[  174.381389][T10642] FAULT_INJECTION: forcing a failure.
[  174.381389][T10642] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  174.386288][T10622] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.421660][T10642] CPU: 0 UID: 0 PID: 10642 Comm: syz.3.2334 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  174.421758][T10642] Tainted: [W]=WARN
[  174.421763][T10642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  174.421773][T10642] Call Trace:
[  174.421778][T10642]  <TASK>
[  174.421803][T10642]  __dump_stack+0x1d/0x30
[  174.421831][T10642]  dump_stack_lvl+0x95/0xd0
[  174.421872][T10642]  dump_stack+0x15/0x1b
[  174.421921][T10642]  should_fail_ex+0x265/0x280
[  174.421941][T10642]  should_fail+0xb/0x20
[  174.421957][T10642]  should_fail_usercopy+0x1a/0x20
[  174.422019][T10642]  strncpy_from_user+0x27/0x260
[  174.422099][T10642]  getname_flags+0xae/0x3b0
[  174.422131][T10642]  __x64_sys_renameat2+0x6c/0x90
[  174.422159][T10642]  x64_sys_call+0x35f/0x3000
[  174.422221][T10642]  do_syscall_64+0xca/0x2b0
[  174.422362][T10642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.422380][T10642] RIP: 0033:0x7fd9b886f749
[  174.422466][T10642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.422495][T10642] RSP: 002b:00007fd9b72d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  174.422614][T10642] RAX: ffffffffffffffda RBX: 00007fd9b8ac5fa0 RCX: 00007fd9b886f749
[  174.422698][T10642] RDX: 0000000000000007 RSI: 0000200000000140 RDI: 0000000000000007
[  174.422709][T10642] RBP: 00007fd9b72d7090 R08: 0000000000000004 R09: 0000000000000000
[  174.422719][T10642] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  174.422729][T10642] R13: 00007fd9b8ac6038 R14: 00007fd9b8ac5fa0 R15: 00007ffffeb0d0b8
[  174.422747][T10642]  </TASK>
[  174.424616][T10622] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.619950][T10622] batman_adv: batadv0: Removing interface: batadv_slave_1
[  174.631333][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.650027][T10628] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up
[  174.664650][T10645] loop3: detected capacity change from 0 to 1024
[  174.674798][T10629] batman_adv: batadv0: Adding interface: veth1_vlan
[  174.681518][T10629] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  174.710242][T10645] EXT4-fs: inline encryption not supported
[  174.710512][T10629] batman_adv: batadv0: Interface activated: veth1_vlan
[  174.746057][T10645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.770176][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2336'.
[  174.783037][T10651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2338'.
[  174.800716][T10645] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2335: Allocating blocks 385-513 which overlap fs metadata
[  174.816521][ T5527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.830923][T10653] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  174.836346][T10651] netlink: 'syz.0.2338': attribute type 10 has an invalid length.
[  174.846439][T10651] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2338'.
[  174.857402][T10645] FAULT_INJECTION: forcing a failure.
[  174.857402][T10645] name failslab, interval 1, probability 0, space 0, times 0
[  174.861569][T10651] batman_adv: batadv0: Adding interface: veth1_vlan
[  174.872301][T10645] CPU: 1 UID: 0 PID: 10645 Comm: syz.3.2335 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  174.872393][T10645] Tainted: [W]=WARN
[  174.872439][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  174.872476][T10645] Call Trace:
[  174.872494][T10645]  <TASK>
[  174.872596][T10645]  __dump_stack+0x1d/0x30
[  174.872671][T10645]  dump_stack_lvl+0x95/0xd0
[  174.872732][T10645]  dump_stack+0x15/0x1b
[  174.872774][T10645]  should_fail_ex+0x265/0x280
[  174.872909][T10645]  should_failslab+0x8c/0xb0
[  174.872997][T10645]  kmem_cache_alloc_noprof+0x69/0x4b0
[  174.873058][T10645]  ? __es_insert_extent+0x508/0xee0
[  174.873162][T10645]  __es_insert_extent+0x508/0xee0
[  174.873253][T10645]  __es_remove_extent+0x6a1/0xda0
[  174.873429][T10645]  ext4_es_insert_extent+0x3ba/0x1c30
[  174.873541][T10645]  ext4_map_blocks+0x8fa/0xd20
[  174.873645][T10645]  _ext4_get_block+0x10a/0x350
[  174.873795][T10645]  ext4_get_block_unwritten+0x2a/0xb0
[  174.873886][T10645]  ext4_block_write_begin+0x650/0xcf0
[  174.874045][T10645]  ? __pfx_ext4_get_block_unwritten+0x10/0x10
[  174.874261][T10645]  ? folio_mapping+0xb9/0xe0
[  174.874292][T10645]  ext4_write_begin+0x636/0xe90
[  174.874386][T10645]  ext4_da_write_begin+0x1f0/0x6b0
[  174.874481][T10645]  ? inode_to_bdi+0x47/0xa0
[  174.874537][T10645]  ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0
[  174.874696][T10645]  generic_perform_write+0x184/0x490
[  174.874790][T10645]  ext4_buffered_write_iter+0x1ee/0x3c0
[  174.874872][T10645]  ? ext4_file_write_iter+0xfe/0xf60
[  174.875006][T10645]  ext4_file_write_iter+0x387/0xf60
[  174.875092][T10645]  ? kstrtouint_from_user+0x9f/0xf0
[  174.875225][T10645]  ? 0xffffffff81000000
[  174.875262][T10645]  ? __rcu_read_unlock+0x4f/0x70
[  174.875316][T10645]  ? avc_policy_seqno+0x15/0x30
[  174.875459][T10645]  ? selinux_file_permission+0x1e2/0x320
[  174.875563][T10645]  ? __pfx_ext4_file_write_iter+0x10/0x10
[  174.875652][T10645]  vfs_write+0x52a/0x960
[  174.875781][T10645]  __x64_sys_pwrite64+0xfd/0x150
[  174.875839][T10645]  x64_sys_call+0x9f7/0x3000
[  174.875927][T10645]  do_syscall_64+0xca/0x2b0
[  174.876047][T10645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.876169][T10645] RIP: 0033:0x7fd9b886f749
[  174.876215][T10645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.876270][T10645] RSP: 002b:00007fd9b72d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  174.876326][T10645] RAX: ffffffffffffffda RBX: 00007fd9b8ac5fa0 RCX: 00007fd9b886f749
[  174.876381][T10645] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000008
[  174.876419][T10645] RBP: 00007fd9b72d7090 R08: 0000000000000000 R09: 0000000000000000
[  174.876536][T10645] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000002
[  174.876631][T10645] R13: 00007fd9b8ac6038 R14: 00007fd9b8ac5fa0 R15: 00007ffffeb0d0b8
[  174.876697][T10645]  </TASK>
[  174.885571][T10645] EXT4-fs (loop3): pa ffff88810769f7e0: logic 16, phys. 129, len 24
[  174.891346][T10651] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  174.894206][T10645] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, 
[  174.935904][T10651] batman_adv: batadv0: Interface activated: veth1_vlan
[  174.937300][T10645] free 0, pa_free 8
[  175.254848][T10645] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[  175.268132][T10645] EXT4-fs (loop3): This should not happen!! Data will be lost
[  175.268132][T10645] 
[  175.278700][T10645] EXT4-fs (loop3): Total free blocks count 0
[  175.284707][T10645] EXT4-fs (loop3): Free/Dirty block details
[  175.291478][T10645] EXT4-fs (loop3): free_blocks=128
[  175.296646][T10645] EXT4-fs (loop3): dirty_blocks=0
[  175.302570][T10645] EXT4-fs (loop3): Block reservation details
[  175.308562][T10645] EXT4-fs (loop3): i_reserved_data_blocks=0
[  176.428725][ T3486] usb 7-1: enqueue for inactive port 0
[  176.434209][ T3486] usb 7-1: enqueue for inactive port 0
[  176.510071][ T3486] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  193.290746][   T29] kauditd_printk_skb: 152 callbacks suppressed
[  193.290831][   T29] audit: type=1400 audit(1768081276.660:17645): avc:  denied  { setopt } for  pid=10656 comm="syz.1.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  193.338777][   T29] audit: type=1400 audit(1768081276.680:17646): avc:  denied  { bind } for  pid=10656 comm="syz.1.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  193.358354][   T29] audit: type=1400 audit(1768081276.690:17647): avc:  denied  { create } for  pid=10655 comm="syz.5.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  193.379751][   T29] audit: type=1400 audit(1768081276.690:17648): avc:  denied  { sys_admin } for  pid=10655 comm="syz.5.2341" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  193.418352][T10664] tipc: Started in network mode
[  193.424553][T10664] tipc: Node identity ac14140f, cluster identity 4711
[  193.440624][T10664] tipc: New replicast peer: 255.255.255.83
[  193.446543][T10664] tipc: Enabled bearer <udp:�>, priority 10
[  193.463217][   T29] audit: type=1400 audit(1768081276.820:17649): avc:  denied  { ioctl } for  pid=10654 comm="syz.0.2339" path="socket:[29678]" dev="sockfs" ino=29678 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  193.514112][   T29] audit: type=1400 audit(1768081276.880:17650): avc:  denied  { read write } for  pid=10671 comm=FF name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  193.536784][T10658] lo speed is unknown, defaulting to 1000
[  193.546925][   T29] audit: type=1400 audit(1768081276.880:17651): avc:  denied  { ioctl open } for  pid=10671 comm=FF path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  193.620397][   T29] audit: type=1400 audit(1768081276.980:17652): avc:  denied  { create } for  pid=10674 comm="syz.4.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  193.646699][   T29] audit: type=1400 audit(1768081276.990:17653): avc:  denied  { setopt } for  pid=10674 comm="syz.4.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  193.675063][   T29] audit: type=1400 audit(1768081277.040:17654): avc:  denied  { watch watch_reads } for  pid=10677 comm="syz.0.2348" path="/517" dev="tmpfs" ino=2722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  193.872231][T10673] cgroup2: Unknown parameter 'favordynmodq'
[  194.005485][T10692] lo speed is unknown, defaulting to 1000
[  194.096907][T10698] tipc: Started in network mode
[  194.101905][T10698] tipc: Node identity 4, cluster identity 4711
[  194.108101][T10698] tipc: Node number set to 4
[  194.386877][T10704] wg2: entered promiscuous mode
[  194.391860][T10704] wg2: entered allmulticast mode
[  194.464753][T10704] lo speed is unknown, defaulting to 1000
[  194.590371][ T4248] tipc: Node number set to 2886997007
[  194.596114][ T4248] IPVS: starting estimator thread 0...
[  194.701405][T10705] IPVS: using max 2448 ests per chain, 122400 per kthread
[  195.167094][T10726] random: crng reseeded on system resumption
[  195.250414][T10726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2359'.
[  195.295448][T10734] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  195.494468][ T5964] IPVS: stop unused estimator thread 0...
[  195.862129][T10763] loop5: detected capacity change from 0 to 1024
[  195.869222][T10763] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  195.881783][T10763] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  195.892219][T10763] JBD2: no valid journal superblock found
[  195.897942][T10763] EXT4-fs (loop5): Could not load journal inode
[  195.908503][T10763] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  196.131900][T10766] loop0: detected capacity change from 0 to 512
[  196.138588][T10766] EXT4-fs: Ignoring removed orlov option
[  196.146256][T10766] EXT4-fs: Ignoring removed mblk_io_submit option
[  196.153298][T10766] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  196.182508][T10766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.195274][T10766] ext4 filesystem being mounted at /521/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.210231][T10766] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.2375: path /521/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0
[  196.231946][T10766] EXT4-fs (loop0): Remounting filesystem read-only
[  196.251643][T10766] binfmt_misc: register: failed to install interpreter file ./file2
[  196.276772][T10766] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  196.295459][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.496140][T10789] netlink: 'syz.4.2384': attribute type 4 has an invalid length.
[  196.521261][T10789] netlink: 'syz.4.2384': attribute type 4 has an invalid length.
[  196.550218][T10789] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  196.556768][T10789] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  196.565113][T10789] vhci_hcd vhci_hcd.0: Device attached
[  196.583303][T10792] vhci_hcd: connection closed
[  196.583492][ T3835] vhci_hcd vhci_hcd.4: stop threads
[  196.593497][ T3835] vhci_hcd vhci_hcd.4: release socket
[  196.600194][ T3835] vhci_hcd vhci_hcd.4: disconnect device
[  196.937092][T10832] FAULT_INJECTION: forcing a failure.
[  196.937092][T10832] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  196.951600][T10832] CPU: 1 UID: 0 PID: 10832 Comm: syz.1.2408 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  196.951751][T10832] Tainted: [W]=WARN
[  196.951757][T10832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  196.951768][T10832] Call Trace:
[  196.951773][T10832]  <TASK>
[  196.951778][T10832]  __dump_stack+0x1d/0x30
[  196.951807][T10832]  dump_stack_lvl+0x95/0xd0
[  196.951828][T10832]  dump_stack+0x15/0x1b
[  196.951844][T10832]  should_fail_ex+0x265/0x280
[  196.951862][T10832]  should_fail+0xb/0x20
[  196.951877][T10832]  should_fail_usercopy+0x1a/0x20
[  196.951926][T10832]  _copy_from_user+0x1c/0xb0
[  196.951964][T10832]  ___sys_sendmsg+0xc1/0x1d0
[  196.952014][T10832]  __x64_sys_sendmsg+0xd4/0x160
[  196.952110][T10832]  x64_sys_call+0x17ba/0x3000
[  196.952205][T10832]  do_syscall_64+0xca/0x2b0
[  196.952267][T10832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.952284][T10832] RIP: 0033:0x7f37aa90f749
[  196.952299][T10832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  196.952313][T10832] RSP: 002b:00007f37a9377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  196.952329][T10832] RAX: ffffffffffffffda RBX: 00007f37aab65fa0 RCX: 00007f37aa90f749
[  196.952403][T10832] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 0000000000000004
[  196.952418][T10832] RBP: 00007f37a9377090 R08: 0000000000000000 R09: 0000000000000000
[  196.952491][T10832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  196.952568][T10832] R13: 00007f37aab66038 R14: 00007f37aab65fa0 R15: 00007ffd681763a8
[  196.952584][T10832]  </TASK>
[  197.569778][T10855] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  197.581369][T10855] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.612000][T10857] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12)
[  197.618627][T10857] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  197.627792][T10857] vhci_hcd vhci_hcd.0: Device attached
[  197.635271][T10855] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  197.645887][T10855] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.658224][T10857] netlink: 'syz.3.2410': attribute type 13 has an invalid length.
[  197.726681][ T1040] lo speed is unknown, defaulting to 1000
[  197.734406][ T1040] syz2: Port: 1 Link DOWN
[  197.741759][T10855] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  197.752464][T10855] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.755066][T10858] vhci_hcd: connection closed
[  197.792844][T10302] vhci_hcd vhci_hcd.3: stop threads
[  197.804334][T10302] vhci_hcd vhci_hcd.3: release socket
[  197.811362][T10302] vhci_hcd vhci_hcd.3: disconnect device
[  197.820693][T10855] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  197.831902][T10855] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.890606][ T4248] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  197.941182][T10302] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  197.950406][T10302] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.967075][T10302] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  197.975399][T10302] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.993362][T10302] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  198.003028][T10302] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.020392][T10302] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  198.030258][T10302] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.065941][T10879] syzkaller0: entered allmulticast mode
[  198.073156][T10883] FAULT_INJECTION: forcing a failure.
[  198.073156][T10883] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  198.086968][T10883] CPU: 0 UID: 0 PID: 10883 Comm: **&.( Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  198.087042][T10883] Tainted: [W]=WARN
[  198.087048][T10883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  198.087059][T10883] Call Trace:
[  198.087064][T10883]  <TASK>
[  198.087069][T10883]  __dump_stack+0x1d/0x30
[  198.087089][T10883]  dump_stack_lvl+0x95/0xd0
[  198.087123][T10883]  dump_stack+0x15/0x1b
[  198.087138][T10883]  should_fail_ex+0x265/0x280
[  198.087156][T10883]  should_fail+0xb/0x20
[  198.087225][T10883]  should_fail_usercopy+0x1a/0x20
[  198.087305][T10883]  copy_to_user_nofault+0x7f/0x120
[  198.087377][T10883]  bpf_probe_write_user+0x83/0xc0
[  198.087397][T10883]  bpf_prog_8f5dadf009f59a0a+0x44/0x4c
[  198.087411][T10883]  bpf_trace_run2+0x107/0x1d0
[  198.087448][T10883]  ? mutex_unlock+0x4f/0x90
[  198.087534][T10883]  __bpf_trace_sys_enter+0x10/0x30
[  198.087551][T10883]  trace_sys_enter+0x86/0xf0
[  198.087569][T10883]  syscall_trace_enter+0x13e/0x1e0
[  198.087588][T10883]  do_syscall_64+0xa4/0x2b0
[  198.087716][T10883]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.087733][T10883] RIP: 0033:0x7f37aa90f749
[  198.087745][T10883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  198.087759][T10883] RSP: 002b:00007f37a9356038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030
[  198.087773][T10883] RAX: ffffffffffffffda RBX: 00007f37aab66090 RCX: 00007f37aa90f749
[  198.087794][T10883] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003
[  198.087803][T10883] RBP: 00007f37a9356090 R08: 0000000000000000 R09: 0000000000000000
[  198.087813][T10883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  198.087822][T10883] R13: 00007f37aab66128 R14: 00007f37aab66090 R15: 00007ffd681763a8
[  198.087914][T10883]  </TASK>
[  198.092736][T10880] syzkaller0 (unregistering): left allmulticast mode
[  198.159389][T10885] netlink: 'syz.5.2422': attribute type 4 has an invalid length.
[  198.271919][T10888] netlink: 'syz.5.2422': attribute type 4 has an invalid length.
[  198.344228][T10888] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  198.350783][T10888] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  198.359992][T10888] vhci_hcd vhci_hcd.0: Device attached
[  198.427779][T10894] vhci_hcd: connection closed
[  198.427947][T10302] vhci_hcd vhci_hcd.5: stop threads
[  198.440973][T10302] vhci_hcd vhci_hcd.5: release socket
[  198.446593][T10302] vhci_hcd vhci_hcd.5: disconnect device
[  198.636830][T10917] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  198.707148][T10923] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  198.717197][T10922] netlink: 'syz.1.2431': attribute type 4 has an invalid length.
[  198.748561][   T29] kauditd_printk_skb: 145 callbacks suppressed
[  198.748573][   T29] audit: type=1400 audit(1768081282.110:17800): avc:  denied  { setopt } for  pid=10920 comm="syz.4.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  198.777415][T10923] syz.4.2432: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  198.792913][T10923] CPU: 0 UID: 0 PID: 10923 Comm: syz.4.2432 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  198.792996][T10923] Tainted: [W]=WARN
[  198.793007][T10923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  198.793025][T10923] Call Trace:
[  198.793033][T10923]  <TASK>
[  198.793044][T10923]  __dump_stack+0x1d/0x30
[  198.793074][T10923]  dump_stack_lvl+0x95/0xd0
[  198.793145][T10923]  dump_stack+0x15/0x1b
[  198.793173][T10923]  warn_alloc+0x12b/0x1a0
[  198.793201][T10923]  ? _raw_spin_lock_irqsave+0x57/0xb0
[  198.793242][T10923]  __vmalloc_node_range_noprof+0xa0/0x1310
[  198.793278][T10923]  ? __perf_event_task_sched_in+0xa5b/0xac0
[  198.793310][T10923]  ? perf_cgroup_switch+0x10c/0x480
[  198.793345][T10923]  ? __set_next_task_fair+0x5b/0x150
[  198.793380][T10923]  ? _raw_spin_unlock+0x26/0x50
[  198.793401][T10923]  ? finish_task_switch+0x7a/0x2a0
[  198.793489][T10923]  vmalloc_user_noprof+0x7d/0xb0
[  198.793521][T10923]  ? xskq_create+0x80/0xe0
[  198.793541][T10923]  xskq_create+0x80/0xe0
[  198.793623][T10923]  xsk_init_queue+0x95/0xf0
[  198.793736][T10923]  xsk_setsockopt+0x3f5/0x640
[  198.793765][T10923]  ? __pfx_xsk_setsockopt+0x10/0x10
[  198.793793][T10923]  __sys_setsockopt+0x184/0x200
[  198.793912][T10923]  __x64_sys_setsockopt+0x64/0x80
[  198.793948][T10923]  x64_sys_call+0x21d5/0x3000
[  198.793971][T10923]  do_syscall_64+0xca/0x2b0
[  198.794004][T10923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.794041][T10923] RIP: 0033:0x7f5bc3f9f749
[  198.794058][T10923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  198.794081][T10923] RSP: 002b:00007f5bc29ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  198.794104][T10923] RAX: ffffffffffffffda RBX: 00007f5bc41f5fa0 RCX: 00007f5bc3f9f749
[  198.794118][T10923] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[  198.794133][T10923] RBP: 00007f5bc4023f91 R08: 0000000000000004 R09: 0000000000000000
[  198.794215][T10923] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  198.794226][T10923] R13: 00007f5bc41f6038 R14: 00007f5bc41f5fa0 R15: 00007fff3d0273b8
[  198.794247][T10923]  </TASK>
[  198.794254][T10923] Mem-Info:
[  199.030874][T10923] active_anon:38149 inactive_anon:4640 isolated_anon:0
[  199.030874][T10923]  active_file:25275 inactive_file:2543 isolated_file:0
[  199.030874][T10923]  unevictable:0 dirty:360 writeback:0
[  199.030874][T10923]  slab_reclaimable:3521 slab_unreclaimable:112443
[  199.030874][T10923]  mapped:30958 shmem:38168 pagetables:1050
[  199.030874][T10923]  sec_pagetables:0 bounce:0
[  199.030874][T10923]  kernel_misc_reclaimable:0
[  199.030874][T10923]  free:1722937 free_pcp:1217 free_cma:0
[  199.078263][T10923] Node 0 active_anon:152596kB inactive_anon:18560kB active_file:101100kB inactive_file:10172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123832kB dirty:1440kB writeback:0kB shmem:152672kB kernel_stack:5168kB pagetables:4200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  199.108291][T10923] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  199.139767][T10923] lowmem_reserve[]: 0 2880 7859 7859
[  199.141142][T10924] netlink: 'syz.1.2431': attribute type 4 has an invalid length.
[  199.145133][T10923] Node 0 DMA32 free:2945888kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB
[  199.186009][T10923] lowmem_reserve[]: 0 0 4978 4978
[  199.191122][T10923] Node 0 Normal free:3927008kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:152596kB inactive_anon:18560kB active_file:101100kB inactive_file:10172kB unevictable:0kB writepending:1440kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:5456kB local_pcp:556kB free_cma:0kB
[  199.226362][T10923] lowmem_reserve[]: 0 0 0 0
[  199.230943][T10923] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  199.244557][T10923] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945888kB
[  199.262626][T10923] Node 0 Normal: 813*4kB (UME) 964*8kB (UME) 421*16kB (ME) 196*32kB (ME) 165*64kB (UME) 68*128kB (ME) 21*256kB (UME) 66*512kB (UM) 50*1024kB (UME) 34*2048kB (UM) 909*4096kB (UM) = 3926500kB
[  199.282703][T10923] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  199.292247][T10923] 65985 total pagecache pages
[  199.296946][T10923] 9 pages in swap cache
[  199.303089][T10923] Free swap  = 75804kB
[  199.307207][T10923] Total swap = 124996kB
[  199.311465][T10923] 2097051 pages RAM
[  199.314414][T10928] FAULT_INJECTION: forcing a failure.
[  199.314414][T10928] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  199.315289][T10923] 0 pages HighMem/MovableOnly
[  199.315300][T10923] 81271 pages reserved
[  199.338785][T10922] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  199.338873][T10922] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  199.338900][T10922] vhci_hcd vhci_hcd.0: Device attached
[  199.362875][T10928] CPU: 1 UID: 0 PID: 10928 Comm: syz.5.2433 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  199.362981][T10928] Tainted: [W]=WARN
[  199.362990][T10928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  199.363007][T10928] Call Trace:
[  199.363015][T10928]  <TASK>
[  199.363040][T10928]  __dump_stack+0x1d/0x30
[  199.363073][T10928]  dump_stack_lvl+0x95/0xd0
[  199.363098][T10928]  dump_stack+0x15/0x1b
[  199.363125][T10928]  should_fail_ex+0x265/0x280
[  199.363193][T10928]  should_fail+0xb/0x20
[  199.363212][T10928]  should_fail_usercopy+0x1a/0x20
[  199.363284][T10928]  _copy_from_user+0x1c/0xb0
[  199.363365][T10928]  lo_ioctl+0x386/0x12a0
[  199.363391][T10928]  ? __rcu_read_unlock+0x4f/0x70
[  199.363416][T10928]  ? avc_has_extended_perms+0x609/0x800
[  199.363522][T10928]  ? blkdev_common_ioctl+0xbf0/0x1f90
[  199.363607][T10928]  ? do_vfs_ioctl+0x866/0xe10
[  199.363679][T10928]  ? selinux_file_ioctl+0x308/0x3a0
[  199.363715][T10928]  ? __pfx_lo_ioctl+0x10/0x10
[  199.363736][T10928]  ? __pfx_blkdev_ioctl+0x10/0x10
[  199.363761][T10928]  blkdev_ioctl+0x37d/0x460
[  199.363851][T10928]  ? __pfx_blkdev_ioctl+0x10/0x10
[  199.363871][T10928]  __se_sys_ioctl+0xce/0x140
[  199.363980][T10928]  __x64_sys_ioctl+0x43/0x50
[  199.364018][T10928]  x64_sys_call+0x14b0/0x3000
[  199.364053][T10928]  do_syscall_64+0xca/0x2b0
[  199.364095][T10928]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.364165][T10928] RIP: 0033:0x7f64fbfff749
[  199.364184][T10928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.364244][T10928] RSP: 002b:00007f64faa5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  199.364264][T10928] RAX: ffffffffffffffda RBX: 00007f64fc255fa0 RCX: 00007f64fbfff749
[  199.364282][T10928] RDX: 0000200000000080 RSI: 0000000000004c0a RDI: 0000000000000003
[  199.364298][T10928] RBP: 00007f64faa5f090 R08: 0000000000000000 R09: 0000000000000000
[  199.364312][T10928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.364329][T10928] R13: 00007f64fc256038 R14: 00007f64fc255fa0 R15: 00007ffc157155a8
[  199.364422][T10928]  </TASK>
[  199.609135][T10925] vhci_hcd: connection closed
[  199.614921][  T814] vhci_hcd vhci_hcd.1: stop threads
[  199.624907][  T814] vhci_hcd vhci_hcd.1: release socket
[  199.631316][  T814] vhci_hcd vhci_hcd.1: disconnect device
[  199.680742][ T3488] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  199.732230][T10945] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2440'.
[  199.743215][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2440'.
[  199.753715][T10945] syz_tun: entered promiscuous mode
[  199.840206][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2445'.
[  199.851968][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2444'.
[  199.854750][T10955] macvlan2: entered promiscuous mode
[  199.866244][T10955] bond0: entered promiscuous mode
[  199.875808][T10955] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  199.956976][T10955] lo speed is unknown, defaulting to 1000
[  200.000792][T10963] 9p: Bad value for 'rfdno'
[  200.011870][   T29] audit: type=1326 audit(1768081283.370:17801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b886f749 code=0x7ffc0000
[  200.036990][   T29] audit: type=1326 audit(1768081283.370:17802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd9b886f749 code=0x7ffc0000
[  200.062209][   T29] audit: type=1326 audit(1768081283.370:17803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd9b886f783 code=0x7ffc0000
[  200.085681][   T29] audit: type=1326 audit(1768081283.370:17804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd9b886f783 code=0x7ffc0000
[  200.112040][   T29] audit: type=1326 audit(1768081283.370:17805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b886f749 code=0x7ffc0000
[  200.137069][   T29] audit: type=1326 audit(1768081283.380:17806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b886f749 code=0x7ffc0000
[  200.162174][   T29] audit: type=1326 audit(1768081283.380:17807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fd9b886f749 code=0x7ffc0000
[  200.187066][   T29] audit: type=1326 audit(1768081283.380:17808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b886f749 code=0x7ffc0000
[  200.211953][   T29] audit: type=1326 audit(1768081283.380:17809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b886f749 code=0x7ffc0000
[  200.416980][T10996] FAULT_INJECTION: forcing a failure.
[  200.416980][T10996] name failslab, interval 1, probability 0, space 0, times 0
[  200.430630][T10996] CPU: 0 UID: 0 PID: 10996 Comm: syz.1.2457 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  200.430727][T10996] Tainted: [W]=WARN
[  200.430772][T10996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  200.430799][T10996] Call Trace:
[  200.430806][T10996]  <TASK>
[  200.430813][T10996]  __dump_stack+0x1d/0x30
[  200.430853][T10996]  dump_stack_lvl+0x95/0xd0
[  200.430879][T10996]  dump_stack+0x15/0x1b
[  200.430897][T10996]  should_fail_ex+0x265/0x280
[  200.430975][T10996]  should_failslab+0x8c/0xb0
[  200.431001][T10996]  kmem_cache_alloc_noprof+0x69/0x4b0
[  200.431035][T10996]  ? __nf_conntrack_alloc+0xba/0x2b0
[  200.431060][T10996]  ? __siphash_unaligned+0x157/0x2d0
[  200.431130][T10996]  __nf_conntrack_alloc+0xba/0x2b0
[  200.431153][T10996]  nf_conntrack_alloc+0x38/0x50
[  200.431179][T10996]  ctnetlink_new_conntrack+0x3a2/0x1280
[  200.431201][T10996]  ? __nla_validate_parse+0x1652/0x1d00
[  200.431290][T10996]  ? __nla_parse+0x40/0x60
[  200.431320][T10996]  nfnetlink_rcv_msg+0x4c6/0x590
[  200.431367][T10996]  netlink_rcv_skb+0x123/0x220
[  200.431396][T10996]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  200.431470][T10996]  nfnetlink_rcv+0x167/0x16c0
[  200.431494][T10996]  ? kmem_cache_free+0xe3/0x3a0
[  200.431518][T10996]  ? __kfree_skb+0x109/0x150
[  200.431549][T10996]  ? nlmon_xmit+0x4f/0x60
[  200.431585][T10996]  ? consume_skb+0x49/0x150
[  200.431616][T10996]  ? nlmon_xmit+0x4f/0x60
[  200.431672][T10996]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  200.431732][T10996]  ? __dev_queue_xmit+0x13a6/0x1ee0
[  200.431770][T10996]  ? __dev_queue_xmit+0x148/0x1ee0
[  200.431808][T10996]  ? ref_tracker_free+0x37d/0x3e0
[  200.431946][T10996]  ? __netlink_deliver_tap+0x4dc/0x500
[  200.432038][T10996]  netlink_unicast+0x5c0/0x690
[  200.432070][T10996]  netlink_sendmsg+0x58b/0x6b0
[  200.432102][T10996]  ? __pfx_netlink_sendmsg+0x10/0x10
[  200.432147][T10996]  __sock_sendmsg+0x145/0x180
[  200.432171][T10996]  ____sys_sendmsg+0x31e/0x4a0
[  200.432275][T10996]  ___sys_sendmsg+0x17b/0x1d0
[  200.432328][T10996]  __x64_sys_sendmsg+0xd4/0x160
[  200.432365][T10996]  x64_sys_call+0x17ba/0x3000
[  200.432397][T10996]  do_syscall_64+0xca/0x2b0
[  200.432456][T10996]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.432543][T10996] RIP: 0033:0x7f37aa90f749
[  200.432558][T10996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.432610][T10996] RSP: 002b:00007f37a9377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  200.432641][T10996] RAX: ffffffffffffffda RBX: 00007f37aab65fa0 RCX: 00007f37aa90f749
[  200.432654][T10996] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  200.432666][T10996] RBP: 00007f37a9377090 R08: 0000000000000000 R09: 0000000000000000
[  200.432677][T10996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.432690][T10996] R13: 00007f37aab66038 R14: 00007f37aab65fa0 R15: 00007ffd681763a8
[  200.432786][T10996]  </TASK>
[  200.844357][T10992] lo speed is unknown, defaulting to 1000
[  200.967740][T11014] FAULT_INJECTION: forcing a failure.
[  200.967740][T11014] name failslab, interval 1, probability 0, space 0, times 0
[  200.981909][T11014] CPU: 1 UID: 0 PID: 11014 Comm: syz.3.2461 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  200.981946][T11014] Tainted: [W]=WARN
[  200.981952][T11014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  200.981965][T11014] Call Trace:
[  200.981971][T11014]  <TASK>
[  200.981979][T11014]  __dump_stack+0x1d/0x30
[  200.982010][T11014]  dump_stack_lvl+0x95/0xd0
[  200.982036][T11014]  dump_stack+0x15/0x1b
[  200.982059][T11014]  should_fail_ex+0x265/0x280
[  200.982085][T11014]  should_failslab+0x8c/0xb0
[  200.982178][T11014]  __kmalloc_node_track_caller_noprof+0xb9/0x5b0
[  200.982234][T11014]  ? sidtab_sid2str_get+0xa0/0x130
[  200.982264][T11014]  kmemdup_noprof+0x2b/0x70
[  200.982294][T11014]  sidtab_sid2str_get+0xa0/0x130
[  200.982368][T11014]  security_sid_to_context_core+0x1eb/0x2e0
[  200.982403][T11014]  security_sid_to_context+0x27/0x40
[  200.982428][T11014]  avc_audit_post_callback+0x10f/0x520
[  200.982519][T11014]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  200.982593][T11014]  common_lsm_audit+0x1bb/0x230
[  200.982616][T11014]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  200.982650][T11014]  slow_avc_audit+0x104/0x140
[  200.982745][T11014]  avc_has_perm+0x13a/0x180
[  200.982813][T11014]  selinux_socket_sendmsg+0x175/0x1b0
[  200.982872][T11014]  security_socket_sendmsg+0x48/0x80
[  200.982893][T11014]  __sock_sendmsg+0x30/0x180
[  200.982912][T11014]  ____sys_sendmsg+0x345/0x4a0
[  200.982941][T11014]  ___sys_sendmsg+0x17b/0x1d0
[  200.983045][T11014]  __sys_sendmmsg+0x178/0x300
[  200.983082][T11014]  __x64_sys_sendmmsg+0x57/0x70
[  200.983108][T11014]  x64_sys_call+0x1e28/0x3000
[  200.983131][T11014]  do_syscall_64+0xca/0x2b0
[  200.983240][T11014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.983320][T11014] RIP: 0033:0x7fd9b886f749
[  200.983334][T11014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.983350][T11014] RSP: 002b:00007fd9b72d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  200.983367][T11014] RAX: ffffffffffffffda RBX: 00007fd9b8ac5fa0 RCX: 00007fd9b886f749
[  200.983388][T11014] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004
[  200.983405][T11014] RBP: 00007fd9b72d7090 R08: 0000000000000000 R09: 0000000000000000
[  200.983416][T11014] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000001
[  200.983475][T11014] R13: 00007fd9b8ac6038 R14: 00007fd9b8ac5fa0 R15: 00007ffffeb0d0b8
[  200.983493][T11014]  </TASK>
[  201.380100][T11024] geneve2: entered promiscuous mode
[  201.385426][T11024] geneve2: entered allmulticast mode
[  201.432311][T11031] loop0: detected capacity change from 0 to 512
[  201.440735][T11031] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  201.484463][T11028] loop3: detected capacity change from 0 to 1024
[  201.494732][T11028] EXT4-fs: Ignoring removed nobh option
[  201.506463][T11031] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2468: Allocating blocks 41-42 which overlap fs metadata
[  201.521619][T11031] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2468: Allocating blocks 41-42 which overlap fs metadata
[  201.537407][T11031] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2468: Failed to acquire dquot type 1
[  201.550144][T11031] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  201.563217][T11028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.567209][T11031] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2468: corrupted inode contents
[  201.591923][T11031] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.2468: mark_inode_dirty error
[  201.650764][T11031] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2468: corrupted inode contents
[  201.670276][T11031] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.2468: mark_inode_dirty error
[  201.690884][T11031] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2468: corrupted inode contents
[  201.717569][T11031] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  201.741702][T11031] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2468: corrupted inode contents
[  201.768901][T11031] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.2468: mark_inode_dirty error
[  201.845187][T11031] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  201.870483][T11031] EXT4-fs (loop0): 1 truncate cleaned up
[  201.884117][T11031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.920101][T11058] loop5: detected capacity change from 0 to 1024
[  201.942927][T11058] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2476: bad orphan inode 134217728
[  201.956222][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.038270][T11058] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.054455][T11068] loop0: detected capacity change from 0 to 512
[  202.071023][T11068] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  202.091837][T11068] EXT4-fs (loop0): orphan cleanup on readonly fs
[  202.120464][T11058] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.135403][T11068] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2479: Allocating blocks 41-42 which overlap fs metadata
[  202.291734][T11068] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2479: Failed to acquire dquot type 1
[  202.313799][T11071] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  202.315038][T11068] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  202.367771][T11068] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2479: corrupted inode contents
[  202.400630][T11068] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.2479: mark_inode_dirty error
[  202.445936][T11027] EXT4-fs (loop3): pa ffff88810769f8c0: logic 1, phys. 129, len 4
[  202.455292][T11027] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 2, pa_free 3
[  202.580073][T11068] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2479: corrupted inode contents
[  202.599758][T11027] EXT4-fs (loop3): Remounting filesystem read-only
[  202.613978][T11068] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.2479: mark_inode_dirty error
[  202.646741][T11068] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2479: corrupted inode contents
[  202.733525][T11068] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  202.765497][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2483'.
[  202.784965][T11068] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2479: corrupted inode contents
[  202.794496][T11077] bond_slave_0: entered promiscuous mode
[  202.802477][T11077] bond_slave_1: entered promiscuous mode
[  202.815805][T11077] macvlan2: entered promiscuous mode
[  202.815883][T11068] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.2479: mark_inode_dirty error
[  202.821203][T11077] bond0: entered promiscuous mode
[  202.830412][T11077] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  202.848141][T11068] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  202.865280][T11068] EXT4-fs (loop0): 1 truncate cleaned up
[  202.873144][T11068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  202.915903][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.964053][T11077] lo speed is unknown, defaulting to 1000
[  202.995825][T11080] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  203.205741][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.473596][T11118] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  203.485871][T11116] lo speed is unknown, defaulting to 1000
[  203.493837][T11114] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  203.558340][T11120] netlink: 'syz.4.2500': attribute type 4 has an invalid length.
[  203.595739][T11120] netlink: 'syz.4.2500': attribute type 4 has an invalid length.
[  203.767361][T11144] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  203.835196][   T29] kauditd_printk_skb: 146 callbacks suppressed
[  203.835212][   T29] audit: type=1400 audit(1768081287.200:17949): avc:  denied  { create } for  pid=11147 comm="syz.3.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  203.866356][T11148] loop3: detected capacity change from 0 to 512
[  203.891686][T11148] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  203.902290][T11148] EXT4-fs (loop3): group descriptors corrupted!
[  203.917957][T11151] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  203.936173][T11148] netlink: 'syz.3.2511': attribute type 29 has an invalid length.
[  203.998242][   T29] audit: type=1400 audit(1768081287.350:17950): avc:  denied  { remount } for  pid=11156 comm="syz.4.2516" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  204.083726][T11170] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  204.162149][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2526'.
[  204.196714][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2526'.
[  204.366349][T11203] loop5: detected capacity change from 0 to 1024
[  204.373125][T11203] EXT4-fs: inline encryption not supported
[  204.392811][T11203] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.496027][T11216] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2541'.
[  204.506476][T11216] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2541'.
[  204.517055][T11216] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2541'.
[  204.528427][   T29] audit: type=1400 audit(1768081287.900:17951): avc:  denied  { read write open } for  pid=11202 comm="syz.5.2536" path="/375/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/ext4" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  204.586276][   T29] audit: type=1400 audit(1768081287.940:17952): avc:  denied  { ioctl } for  pid=11202 comm="syz.5.2536" path="/375/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/ext4" dev="loop5" ino=18 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  204.708070][T11226] loop0: detected capacity change from 0 to 8192
[  204.716186][   T29] audit: type=1400 audit(1768081288.090:17953): avc:  denied  { mount } for  pid=11225 comm="syz.0.2543" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  204.911602][T11231] FAULT_INJECTION: forcing a failure.
[  204.911602][T11231] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  204.926282][T11231] CPU: 1 UID: 0 PID: 11231 Comm: syz.3.2545 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  204.926320][T11231] Tainted: [W]=WARN
[  204.926327][T11231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  204.926341][T11231] Call Trace:
[  204.926349][T11231]  <TASK>
[  204.926358][T11231]  __dump_stack+0x1d/0x30
[  204.926390][T11231]  dump_stack_lvl+0x95/0xd0
[  204.926449][T11231]  dump_stack+0x15/0x1b
[  204.926472][T11231]  should_fail_ex+0x265/0x280
[  204.926501][T11231]  should_fail_alloc_page+0xf2/0x100
[  204.926607][T11231]  __alloc_frozen_pages_noprof+0x109/0x360
[  204.926693][T11231]  alloc_pages_mpol+0xb3/0x260
[  204.926732][T11231]  vma_alloc_folio_noprof+0x1aa/0x300
[  204.926830][T11231]  do_wp_page+0xf60/0x2510
[  204.926872][T11231]  ? css_rstat_updated+0xbb/0x280
[  204.926916][T11231]  ? __rcu_read_lock+0x37/0x50
[  204.927011][T11231]  handle_mm_fault+0x7b0/0x2c60
[  204.927065][T11231]  do_user_addr_fault+0x630/0x1080
[  204.927102][T11231]  ? ksys_mmap_pgoff+0xc2/0x310
[  204.927172][T11231]  exc_page_fault+0x62/0xa0
[  204.927205][T11231]  asm_exc_page_fault+0x26/0x30
[  204.927231][T11231] RIP: 0033:0x7fd9b87309f0
[  204.927251][T11231] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41
[  204.927352][T11231] RSP: 002b:00007fd9b72d64a0 EFLAGS: 00010202
[  204.927438][T11231] RAX: 0000000000005005 RBX: 00007fd9b72d6540 RCX: 0000000000000013
[  204.927450][T11231] RDX: 0000000000003fff RSI: 0000000000000800 RDI: 00007fd9b72d65e0
[  204.927462][T11231] RBP: 0000000000000014 R08: 00007fd9aeeb7000 R09: 0000000000000004
[  204.927478][T11231] R10: 0000200000000982 R11: 0000000000000438 R12: 0000000000000601
[  204.927495][T11231] R13: 00007fd9b890fc40 R14: 0000000000000015 R15: 00007fd9b72d65e0
[  204.927561][T11231]  </TASK>
[  204.927571][T11231] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  205.015692][   T29] audit: type=1400 audit(1768081288.380:17954): avc:  denied  { unmount } for  pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  205.023394][T11231] loop3: detected capacity change from 0 to 512
[  205.023983][T11231] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  205.034138][T11231] EXT4-fs (loop3): 1 truncate cleaned up
[  205.190077][T11231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.216502][ T5527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.233133][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.310251][   T29] audit: type=1400 audit(1768081288.670:17955): avc:  denied  { connect } for  pid=11247 comm="syz.4.2553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  205.331807][   T29] audit: type=1400 audit(1768081288.670:17956): avc:  denied  { write } for  pid=11247 comm="syz.4.2553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  205.353322][   T29] audit: type=1326 audit(1768081288.670:17957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11247 comm="syz.4.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bc3f9f749 code=0x7ffc0000
[  205.377184][   T29] audit: type=1326 audit(1768081288.670:17958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11247 comm="syz.4.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5bc3f9f749 code=0x7ffc0000
[  205.430568][T11259] loop3: detected capacity change from 0 to 1024
[  205.437404][T11259] EXT4-fs: inline encryption not supported
[  205.452644][T11259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.499220][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.541686][T11265] loop0: detected capacity change from 0 to 8192
[  205.561022][T11271] FAULT_INJECTION: forcing a failure.
[  205.561022][T11271] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  205.575701][T11271] CPU: 1 UID: 0 PID: 11271 Comm: syz.4.2562 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  205.575738][T11271] Tainted: [W]=WARN
[  205.575747][T11271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  205.575763][T11271] Call Trace:
[  205.575771][T11271]  <TASK>
[  205.575779][T11271]  __dump_stack+0x1d/0x30
[  205.575824][T11271]  dump_stack_lvl+0x95/0xd0
[  205.575849][T11271]  dump_stack+0x15/0x1b
[  205.575873][T11271]  should_fail_ex+0x265/0x280
[  205.575952][T11271]  should_fail+0xb/0x20
[  205.575973][T11271]  should_fail_usercopy+0x1a/0x20
[  205.576002][T11271]  _copy_from_user+0x1c/0xb0
[  205.576069][T11271]  perf_copy_attr+0x145/0x610
[  205.576180][T11271]  ? get_pid_task+0x96/0xd0
[  205.576215][T11271]  __se_sys_perf_event_open+0x67/0x1210
[  205.576247][T11271]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  205.576337][T11271]  ? vfs_write+0x7e8/0x960
[  205.576357][T11271]  ? __rcu_read_unlock+0x4f/0x70
[  205.576392][T11271]  __x64_sys_perf_event_open+0x67/0x80
[  205.576421][T11271]  x64_sys_call+0x78c/0x3000
[  205.576447][T11271]  do_syscall_64+0xca/0x2b0
[  205.576484][T11271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.576510][T11271] RIP: 0033:0x7f5bc3f9f749
[  205.576524][T11271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.576612][T11271] RSP: 002b:00007f5bc29ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  205.576630][T11271] RAX: ffffffffffffffda RBX: 00007f5bc41f5fa0 RCX: 00007f5bc3f9f749
[  205.576641][T11271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  205.576652][T11271] RBP: 00007f5bc29ff090 R08: 0000000000000000 R09: 0000000000000000
[  205.576663][T11271] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  205.576675][T11271] R13: 00007f5bc41f6038 R14: 00007f5bc41f5fa0 R15: 00007fff3d0273b8
[  205.576693][T11271]  </TASK>
[  205.590059][T11265]  loop0: p1 < > p3 p4 < >
[  205.592650][T11265] loop0: p3 size 33554432 extends beyond EOD, truncated
[  205.815715][T11269] lo speed is unknown, defaulting to 1000
[  205.906175][T11289] netlink: 'syz.4.2571': attribute type 4 has an invalid length.
[  205.952520][T11289] netlink: 'syz.4.2571': attribute type 4 has an invalid length.
[  205.976953][T11289] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  205.983588][T11289] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  205.992240][T11289] vhci_hcd vhci_hcd.0: Device attached
[  206.038091][T11295] vhci_hcd: connection closed
[  206.038541][ T3845] vhci_hcd vhci_hcd.4: stop threads
[  206.051359][ T3845] vhci_hcd vhci_hcd.4: release socket
[  206.056808][ T3845] vhci_hcd vhci_hcd.4: disconnect device
[  206.101369][T11303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.115853][T11303] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.117131][T11301] lo speed is unknown, defaulting to 1000
[  206.151462][T11307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.180710][T11307] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.241503][ T5527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.420630][T11328] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  206.521127][T11333] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2588'.
[  206.565002][T11338] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  206.565013][T11337] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2589'.
[  206.672228][T11346] netlink: 28 bytes leftover after parsing attributes in process `+}[@'.
[  206.764049][T11352] FAULT_INJECTION: forcing a failure.
[  206.764049][T11352] name failslab, interval 1, probability 0, space 0, times 0
[  206.777825][T11352] CPU: 0 UID: 0 PID: 11352 Comm: syz.1.2597 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  206.777876][T11352] Tainted: [W]=WARN
[  206.777884][T11352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  206.777895][T11352] Call Trace:
[  206.777902][T11352]  <TASK>
[  206.777911][T11352]  __dump_stack+0x1d/0x30
[  206.777938][T11352]  dump_stack_lvl+0x95/0xd0
[  206.777966][T11352]  dump_stack+0x15/0x1b
[  206.778085][T11352]  should_fail_ex+0x265/0x280
[  206.778108][T11352]  should_failslab+0x8c/0xb0
[  206.778130][T11352]  __kmalloc_cache_noprof+0x65/0x4c0
[  206.778197][T11352]  ? p9_fd_create+0xa5/0x230
[  206.778217][T11352]  p9_fd_create+0xa5/0x230
[  206.778254][T11352]  p9_client_create+0x232/0x780
[  206.778285][T11352]  ? should_fail_ex+0xdb/0x280
[  206.778397][T11352]  v9fs_session_init+0x3c/0x4a0
[  206.778434][T11352]  ? v9fs_get_tree+0x49/0x5f0
[  206.778463][T11352]  v9fs_get_tree+0x5c/0x5f0
[  206.778486][T11352]  ? security_capable+0x83/0x90
[  206.778581][T11352]  vfs_get_tree+0x57/0x1d0
[  206.778599][T11352]  do_new_mount+0x24d/0x6a0
[  206.778654][T11352]  ? security_capable+0x83/0x90
[  206.778705][T11352]  path_mount+0x4ab/0xb80
[  206.778729][T11352]  ? user_path_at+0xbf/0x130
[  206.778766][T11352]  __se_sys_mount+0x28c/0x2e0
[  206.778791][T11352]  ? fput+0x8f/0xc0
[  206.778864][T11352]  __x64_sys_mount+0x67/0x80
[  206.778961][T11352]  x64_sys_call+0x2cca/0x3000
[  206.778993][T11352]  do_syscall_64+0xca/0x2b0
[  206.779114][T11352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.779139][T11352] RIP: 0033:0x7f37aa90f749
[  206.779157][T11352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  206.779184][T11352] RSP: 002b:00007f37a9377038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  206.779241][T11352] RAX: ffffffffffffffda RBX: 00007f37aab65fa0 RCX: 00007f37aa90f749
[  206.779256][T11352] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000
[  206.779271][T11352] RBP: 00007f37a9377090 R08: 0000200000000600 R09: 0000000000000000
[  206.779286][T11352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  206.779332][T11352] R13: 00007f37aab66038 R14: 00007f37aab65fa0 R15: 00007ffd681763a8
[  206.779354][T11352]  </TASK>
[  207.028590][T11354] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  207.052354][T11363] netlink: 'syz.3.2601': attribute type 4 has an invalid length.
[  207.100521][T11363] netlink: 'syz.3.2601': attribute type 4 has an invalid length.
[  207.128486][ T3488] lo speed is unknown, defaulting to 1000
[  207.136043][ T3488] syz2: Port: 1 Link ACTIVE
[  207.183024][T11363] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  207.189647][T11363] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  207.198253][T11363] vhci_hcd vhci_hcd.0: Device attached
[  207.256908][T11371] vhci_hcd: connection closed
[  207.257334][ T3845] vhci_hcd vhci_hcd.3: stop threads
[  207.270253][ T3845] vhci_hcd vhci_hcd.3: release socket
[  207.275717][ T3845] vhci_hcd vhci_hcd.3: disconnect device
[  207.295350][T11370] lo speed is unknown, defaulting to 1000
[  207.318381][T11375] set_capacity_and_notify: 1 callbacks suppressed
[  207.318393][T11375] loop0: detected capacity change from 0 to 512
[  207.351638][T11375] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  207.370571][T11375] EXT4-fs (loop0): 1 truncate cleaned up
[  207.376731][T11375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.392600][T11375] random: crng reseeded on system resumption
[  207.405065][T11375] Restarting kernel threads ...
[  207.412006][T11375] Done restarting kernel threads.
[  207.432522][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.520219][T11388] xt_CT: No such helper "pptp"
[  207.554435][T11395] xt_hashlimit: size too large, truncated to 1048576
[  207.757898][T11405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2616'.
[  207.809708][T11408] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  207.830478][T11408] bond4: (slave lo): Enslaving as a backup interface with an up link
[  207.838644][ T3488] lo speed is unknown, defaulting to 1000
[  207.844505][ T3426] lo speed is unknown, defaulting to 1000
[  207.851143][ T4248] lo speed is unknown, defaulting to 1000
[  207.922002][T11415] Cannot find del_set index 3 as target
[  208.162299][T11425] lo speed is unknown, defaulting to 1000
[  208.163705][T11432] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  208.177001][T11432] SELinux: failed to load policy
[  208.315878][ T3426] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4
[  208.324679][ T3426] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2
[  208.365335][ T3426] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3
[  208.385599][ T3426] hid-generic 0000:3000000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  208.493617][T11446] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  208.610160][T11460] loop3: detected capacity change from 0 to 512
[  208.618140][T11460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.618224][T11460] ext4 filesystem being mounted at /511/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  208.730660][T11450] lo speed is unknown, defaulting to 1000
[  208.740323][T11471] serio: Serial port ttyS3
[  208.842174][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.892176][   T29] kauditd_printk_skb: 408 callbacks suppressed
[  208.892193][   T29] audit: type=1400 audit(1768081292.260:18367): avc:  denied  { ioctl } for  pid=11470 comm="syz.1.2641" path="socket:[33266]" dev="sockfs" ino=33266 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  208.927215][T11471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2641'.
[  209.015211][T11471] IPVS: Error connecting to the multicast addr
[  209.042536][T11489] nfs: Unknown parameter ''}-'
[  209.066681][T11490] netlink: 'syz.3.2649': attribute type 4 has an invalid length.
[  209.078457][T11493] warn_alloc: 3 callbacks suppressed
[  209.078470][T11493] syz.4.2647: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[  209.082070][   T29] audit: type=1400 audit(1768081292.370:18368): avc:  denied  { connect } for  pid=11488 comm="syz.0.2648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  209.096349][   T29] audit: type=1400 audit(1768081292.370:18369): avc:  denied  { read write } for  pid=11488 comm="syz.0.2648" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  209.096420][   T29] audit: type=1400 audit(1768081292.370:18370): avc:  denied  { open } for  pid=11488 comm="syz.0.2648" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  209.096457][   T29] audit: type=1400 audit(1768081292.370:18371): avc:  denied  { ioctl } for  pid=11488 comm="syz.0.2648" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  209.096519][   T29] audit: type=1400 audit(1768081292.410:18372): avc:  denied  { ioctl } for  pid=11488 comm="syz.0.2648" path="socket:[33295]" dev="sockfs" ino=33295 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  209.096587][   T29] audit: type=1400 audit(1768081292.410:18373): avc:  denied  { mounton } for  pid=11488 comm="syz.0.2648" path="/574/file0" dev="tmpfs" ino=3025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  209.117982][T11494] netlink: 'syz.3.2649': attribute type 4 has an invalid length.
[  209.142786][   T29] audit: type=1400 audit(1768081292.470:18374): avc:  denied  { map } for  pid=11488 comm="syz.0.2648" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  209.278081][T11493] ,cpuset=/,mems_allowed=0
[  209.282827][T11493] CPU: 1 UID: 0 PID: 11493 Comm: syz.4.2647 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  209.282864][T11493] Tainted: [W]=WARN
[  209.282872][T11493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  209.282888][T11493] Call Trace:
[  209.282895][T11493]  <TASK>
[  209.282902][T11493]  __dump_stack+0x1d/0x30
[  209.282962][T11493]  dump_stack_lvl+0x95/0xd0
[  209.282989][T11493]  dump_stack+0x15/0x1b
[  209.283014][T11493]  warn_alloc+0x12b/0x1a0
[  209.283104][T11493]  ? __schedule+0x85f/0xcd0
[  209.283127][T11493]  ? __rcu_read_unlock+0x4f/0x70
[  209.283150][T11493]  __vmalloc_node_range_noprof+0xa0/0x1310
[  209.283201][T11493]  ? __futex_wait+0x1fa/0x260
[  209.283270][T11493]  ? __pfx_futex_wake_mark+0x10/0x10
[  209.283301][T11493]  ? __rcu_read_unlock+0x4f/0x70
[  209.283322][T11493]  ? avc_has_perm_noaudit+0xab/0x130
[  209.283442][T11493]  ? should_fail_ex+0x30/0x280
[  209.283468][T11493]  ? should_failslab+0x8c/0xb0
[  209.283494][T11493]  vmalloc_user_noprof+0x7d/0xb0
[  209.283561][T11493]  ? xskq_create+0x80/0xe0
[  209.283583][T11493]  xskq_create+0x80/0xe0
[  209.283605][T11493]  xsk_init_queue+0x95/0xf0
[  209.283674][T11493]  xsk_setsockopt+0x3f5/0x640
[  209.283720][T11493]  ? __pfx_xsk_setsockopt+0x10/0x10
[  209.283756][T11493]  __sys_setsockopt+0x184/0x200
[  209.283792][T11493]  __x64_sys_setsockopt+0x64/0x80
[  209.283843][T11493]  x64_sys_call+0x21d5/0x3000
[  209.283875][T11493]  do_syscall_64+0xca/0x2b0
[  209.283929][T11493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.284031][T11493] RIP: 0033:0x7f5bc3f9f749
[  209.284046][T11493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  209.284064][T11493] RSP: 002b:00007f5bc29bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  209.284083][T11493] RAX: ffffffffffffffda RBX: 00007f5bc41f6180 RCX: 00007f5bc3f9f749
[  209.284095][T11493] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000010
[  209.284119][T11493] RBP: 00007f5bc4023f91 R08: 0000000000000004 R09: 0000000000000000
[  209.284131][T11493] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  209.284145][T11493] R13: 00007f5bc41f6218 R14: 00007f5bc41f6180 R15: 00007fff3d0273b8
[  209.284172][T11493]  </TASK>
[  209.284181][T11493] Mem-Info:
[  209.542309][T11493] active_anon:48341 inactive_anon:4640 isolated_anon:0
[  209.542309][T11493]  active_file:25340 inactive_file:2548 isolated_file:0
[  209.542309][T11493]  unevictable:0 dirty:231 writeback:0
[  209.542309][T11493]  slab_reclaimable:3530 slab_unreclaimable:112344
[  209.542309][T11493]  mapped:40806 shmem:48208 pagetables:1198
[  209.542309][T11493]  sec_pagetables:0 bounce:0
[  209.542309][T11493]  kernel_misc_reclaimable:0
[  209.542309][T11493]  free:1721504 free_pcp:5192 free_cma:0
[  209.589219][T11493] Node 0 active_anon:194408kB inactive_anon:18560kB active_file:101360kB inactive_file:10192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164152kB dirty:924kB writeback:0kB shmem:193760kB kernel_stack:5328kB pagetables:4792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  209.589308][T11493] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  209.589386][T11493] lowmem_reserve[]: 0 2880 7859 7859
[  209.589489][T11493] Node 0 DMA32 free:2945888kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB
[  209.589594][T11493] lowmem_reserve[]: 0 0 4978 4978
[  209.589626][T11493] Node 0 Normal free:3924096kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:194408kB inactive_anon:18560kB active_file:101360kB inactive_file:10192kB unevictable:0kB writepending:924kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:16372kB local_pcp:12824kB free_cma:0kB
[  209.589786][T11493] lowmem_reserve[]: 0 0 0 0
[  209.589866][T11493] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  209.590113][T11493] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945888kB
[  209.590386][T11493] Node 0 Normal: 3*4kB (UME) 2*8kB (UM) 1*16kB (M) 316*32kB (UE) 250*64kB (UM) 114*128kB (UE) 83*256kB (U) 69*512kB (UM) 45*1024kB (UME) 28*2048kB (UM) 909*4096kB (UM) = 3924012kB
[  209.590714][T11493] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  209.590734][T11493] 76360 total pagecache pages
[  209.590740][T11493] 9 pages in swap cache
[  209.590747][T11493] Free swap  = 75804kB
[  209.590753][T11493] Total swap = 124996kB
[  209.590760][T11493] 2097051 pages RAM
[  209.590766][T11493] 0 pages HighMem/MovableOnly
[  209.590773][T11493] 81271 pages reserved
[  209.684969][   T29] audit: type=1400 audit(1768081293.050:18375): avc:  denied  { create } for  pid=11501 comm="syz.4.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  209.685036][   T29] audit: type=1400 audit(1768081293.050:18376): avc:  denied  { write } for  pid=11501 comm="syz.4.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  209.774301][T11506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.774377][T11506] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.795029][T11505] lo speed is unknown, defaulting to 1000
[  210.071832][T11513] lo speed is unknown, defaulting to 1000
[  210.346691][T11522] netlink: 4 bytes leftover after parsing attributes in process `gtp'.
[  210.406975][T11524] macsec1: entered promiscuous mode
[  210.412287][T11524] bridge0: entered promiscuous mode
[  210.441213][T11524] bridge0: port 1(macsec1) entered blocking state
[  210.447696][T11524] bridge0: port 1(macsec1) entered disabled state
[  210.455619][T11524] macsec1: entered allmulticast mode
[  210.461963][T11524] bridge0: entered allmulticast mode
[  210.476318][T11524] macsec1: left allmulticast mode
[  210.482905][T11524] bridge0: left allmulticast mode
[  210.508051][T11524] bridge0: left promiscuous mode
[  210.545021][T11531] netlink: 'syz.4.2662': attribute type 4 has an invalid length.
[  210.577148][T11531] netlink: 'syz.4.2662': attribute type 4 has an invalid length.
[  210.601327][T11537] netlink: 12 bytes leftover after parsing attributes in process `wޣ�'.
[  210.795614][T11557] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2673'.
[  210.866039][T11557] netlink: 32648 bytes leftover after parsing attributes in process `syz.5.2673'.
[  210.877486][   T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  210.886933][   T23] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  210.981021][T11569] loop5: detected capacity change from 0 to 764
[  210.988215][T11569] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  211.004121][T11569] sd 0:0:1:0: device reset
[  211.139954][T11577] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2678'.
[  211.149979][T11577] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2678'.
[  211.260907][T11581] loop0: detected capacity change from 0 to 512
[  211.271503][T11581] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  211.286828][T11581] EXT4-fs (loop0): mount failed
[  211.293371][T11583] netlink: 'syz.5.2681': attribute type 4 has an invalid length.
[  211.293803][T11583] netlink: 'syz.5.2681': attribute type 4 has an invalid length.
[  211.393312][T11589] lo speed is unknown, defaulting to 1000
[  211.408338][T11592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.424113][T11593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.434395][T11593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  211.445595][T11592] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  211.465269][T11591] lo speed is unknown, defaulting to 1000
[  211.752088][T11600] loop3: detected capacity change from 0 to 8192
[  211.771514][T11600] FAT-fs (loop3): error, clusters badly computed (2 != 1)
[  211.780015][T11600] FAT-fs (loop3): Filesystem has been set read-only
[  211.786707][T11600] FAULT_INJECTION: forcing a failure.
[  211.786707][T11600] name failslab, interval 1, probability 0, space 0, times 0
[  211.800830][T11600] CPU: 1 UID: 0 PID: 11600 Comm: syz.3.2687 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  211.800867][T11600] Tainted: [W]=WARN
[  211.800875][T11600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  211.800961][T11600] Call Trace:
[  211.800967][T11600]  <TASK>
[  211.800974][T11600]  __dump_stack+0x1d/0x30
[  211.801002][T11600]  dump_stack_lvl+0x95/0xd0
[  211.801099][T11600]  dump_stack+0x15/0x1b
[  211.801144][T11600]  should_fail_ex+0x265/0x280
[  211.801164][T11600]  should_failslab+0x8c/0xb0
[  211.801184][T11600]  kmem_cache_alloc_noprof+0x69/0x4b0
[  211.801259][T11600]  ? security_inode_alloc+0x37/0x100
[  211.801296][T11600]  security_inode_alloc+0x37/0x100
[  211.801314][T11600]  inode_init_always_gfp+0x4b7/0x500
[  211.801340][T11600]  ? __pfx_fat_alloc_inode+0x10/0x10
[  211.801415][T11600]  alloc_inode+0x58/0x170
[  211.801435][T11600]  new_inode+0x1d/0xe0
[  211.801454][T11600]  fat_build_inode+0x169/0x290
[  211.801483][T11600]  vfat_create+0xef/0x190
[  211.801616][T11600]  ? __pfx_vfat_create+0x10/0x10
[  211.801647][T11600]  path_openat+0x1115/0x23b0
[  211.801735][T11600]  do_filp_open+0x109/0x230
[  211.801771][T11600]  do_sys_openat2+0xa6/0x150
[  211.801797][T11600]  __x64_sys_openat+0xf2/0x120
[  211.801875][T11600]  x64_sys_call+0x2b07/0x3000
[  211.801922][T11600]  do_syscall_64+0xca/0x2b0
[  211.801953][T11600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.801993][T11600] RIP: 0033:0x7fd9b886f749
[  211.802011][T11600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  211.802033][T11600] RSP: 002b:00007fd9b72d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  211.802054][T11600] RAX: ffffffffffffffda RBX: 00007fd9b8ac5fa0 RCX: 00007fd9b886f749
[  211.802065][T11600] RDX: 00000000000400c0 RSI: 0000200000000480 RDI: ffffffffffffff9c
[  211.802157][T11600] RBP: 00007fd9b72d7090 R08: 0000000000000000 R09: 0000000000000000
[  211.802173][T11600] R10: 0000000000000190 R11: 0000000000000246 R12: 0000000000000002
[  211.802188][T11600] R13: 00007fd9b8ac6038 R14: 00007fd9b8ac5fa0 R15: 00007ffffeb0d0b8
[  211.802211][T11600]  </TASK>
[  211.933625][T11603] pimreg: entered allmulticast mode
[  212.036808][T11601] pimreg: left allmulticast mode
[  212.122388][T11611] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  212.239004][T11621] loop7: detected capacity change from 0 to 7
[  212.248454][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  212.258055][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  212.267444][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  212.271195][T11614] loop5: detected capacity change from 0 to 8192
[  212.277030][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  212.281295][T11621]  loop7: unable to read partition table
[  212.301357][T11621] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  212.341538][T11615] netlink: 'syz.5.2691': attribute type 13 has an invalid length.
[  212.356289][T11614] netlink: 'syz.5.2691': attribute type 13 has an invalid length.
[  212.392440][T11615] gretap0: refused to change device tx_queue_len
[  212.425496][T11615] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  212.468246][T11614] gretap0: refused to change device tx_queue_len
[  212.494273][T11636] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  212.543714][T11614] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  212.752530][T11651] netlink: 'syz.0.2707': attribute type 4 has an invalid length.
[  212.795154][T11651] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  212.801707][T11651] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  212.810865][T11651] vhci_hcd vhci_hcd.0: Device attached
[  212.946358][T11668] netlink: 'syz.4.2713': attribute type 4 has an invalid length.
[  212.955000][T11656] vhci_hcd: connection closed
[  212.960349][ T1708] vhci_hcd vhci_hcd.0: stop threads
[  212.971435][ T1708] vhci_hcd vhci_hcd.0: release socket
[  212.976903][ T1708] vhci_hcd vhci_hcd.0: disconnect device
[  213.019514][T11668] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  213.026070][T11668] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  213.035054][T11668] vhci_hcd vhci_hcd.0: Device attached
[  213.183856][T11677] lo speed is unknown, defaulting to 1000
[  213.460716][T11671] vhci_hcd: connection closed
[  213.460887][T10296] vhci_hcd vhci_hcd.4: stop threads
[  213.471950][T10296] vhci_hcd vhci_hcd.4: release socket
[  213.477342][T10296] vhci_hcd vhci_hcd.4: disconnect device
[  213.528315][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2717'.
[  213.541325][T11684] gretap0: left allmulticast mode
[  213.546392][T11684] gretap0: left promiscuous mode
[  213.552795][T11684] bridge0: port 1(gretap0) entered disabled state
[  213.934439][   T29] kauditd_printk_skb: 1357 callbacks suppressed
[  213.934456][   T29] audit: type=1326 audit(1768081297.300:19731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.0.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3e3cf749 code=0x7ffc0000
[  214.002386][T11692] audit: audit_backlog=65 > audit_backlog_limit=64
[  214.010433][T11692] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64
[  214.018290][T11692] audit: backlog limit exceeded
[  214.025424][   T29] audit: type=1326 audit(1768081297.340:19732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.0.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3e3cf749 code=0x7ffc0000
[  214.050309][   T29] audit: type=1326 audit(1768081297.340:19733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.0.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3e3cf749 code=0x7ffc0000
[  214.075203][   T29] audit: type=1326 audit(1768081297.340:19734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.0.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3e3cf749 code=0x7ffc0000
[  214.100095][   T29] audit: type=1326 audit(1768081297.340:19735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.0.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f3e3cf749 code=0x7ffc0000
[  214.125031][   T29] audit: type=1326 audit(1768081297.340:19736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.0.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3e3cf749 code=0x7ffc0000
[  214.149913][   T29] audit: type=1326 audit(1768081297.340:19737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.0.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3e3cf749 code=0x7ffc0000
[  214.243583][T11694] validate_nla: 1 callbacks suppressed
[  214.243612][T11694] netlink: 'syz.4.2722': attribute type 4 has an invalid length.
[  214.277337][T11694] netlink: 'syz.4.2722': attribute type 4 has an invalid length.
[  214.300347][T11690] Cannot find add_set index 0 as target
[  214.450997][T11705] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  214.462350][T11705] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  214.473533][T11705] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  214.651081][T11705] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  214.662488][T11705] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  214.673702][T11705] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  214.757346][T11719] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  214.773790][T11721] netlink: 'syz.1.2732': attribute type 4 has an invalid length.
[  214.830661][T11723] netlink: 'syz.1.2732': attribute type 4 has an invalid length.
[  214.871521][T11705] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  214.882899][T11705] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  214.894161][T11705] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  214.987313][T11727] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  214.993858][T11727] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  215.002691][T11727] vhci_hcd vhci_hcd.0: Device attached
[  215.085716][T11705] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  215.096939][T11705] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  215.108207][T11705] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  215.128321][T11729] vhci_hcd: connection closed
[  215.130105][T10297] vhci_hcd vhci_hcd.1: stop threads
[  215.141417][T10297] vhci_hcd vhci_hcd.1: release socket
[  215.146797][T10297] vhci_hcd vhci_hcd.1: disconnect device
[  215.210180][T11739] team0: Caught tx_queue_len zero misconfig
[  215.236873][ T3866] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  215.246470][ T3866] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  215.256191][ T3866] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  215.278448][ T3866] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  215.287837][ T3866] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  215.297525][ T3866] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  215.313023][ T3866] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  215.321407][ T3866] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  215.329855][ T3866] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  215.343693][ T3866] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  215.353487][ T3866] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  215.363555][ T3866] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  215.391366][T11754] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  215.575836][T11777] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  215.650468][T11789] FAULT_INJECTION: forcing a failure.
[  215.650468][T11789] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  215.665015][T11789] CPU: 1 UID: 0 PID: 11789 Comm: syz.5.2752 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  215.665066][T11789] Tainted: [W]=WARN
[  215.665072][T11789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  215.665083][T11789] Call Trace:
[  215.665089][T11789]  <TASK>
[  215.665097][T11789]  __dump_stack+0x1d/0x30
[  215.665126][T11789]  dump_stack_lvl+0x95/0xd0
[  215.665160][T11789]  dump_stack+0x15/0x1b
[  215.665188][T11789]  should_fail_ex+0x265/0x280
[  215.665213][T11789]  should_fail+0xb/0x20
[  215.665299][T11789]  should_fail_usercopy+0x1a/0x20
[  215.665327][T11789]  _copy_from_user+0x1c/0xb0
[  215.665352][T11789]  __sys_connect+0xd0/0x2b0
[  215.665379][T11789]  __x64_sys_connect+0x3f/0x50
[  215.665482][T11789]  x64_sys_call+0x2e09/0x3000
[  215.665504][T11789]  do_syscall_64+0xca/0x2b0
[  215.665598][T11789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.665681][T11789] RIP: 0033:0x7f64fbfff749
[  215.665699][T11789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  215.665717][T11789] RSP: 002b:00007f64faa5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  215.665735][T11789] RAX: ffffffffffffffda RBX: 00007f64fc255fa0 RCX: 00007f64fbfff749
[  215.665747][T11789] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000008
[  215.665760][T11789] RBP: 00007f64faa5f090 R08: 0000000000000000 R09: 0000000000000000
[  215.665775][T11789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  215.665790][T11789] R13: 00007f64fc256038 R14: 00007f64fc255fa0 R15: 00007ffc157155a8
[  215.665859][T11789]  </TASK>
[  215.724172][T11760] lo speed is unknown, defaulting to 1000
[  216.011911][T11807] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  216.126421][T11815] Falling back ldisc for ptm0.
[  216.247223][T11818] lo speed is unknown, defaulting to 1000
[  216.335028][T11823] FAULT_INJECTION: forcing a failure.
[  216.335028][T11823] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  216.349387][T11823] CPU: 0 UID: 0 PID: 11823 Comm: syz.3.2769 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  216.349424][T11823] Tainted: [W]=WARN
[  216.349433][T11823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  216.349448][T11823] Call Trace:
[  216.349456][T11823]  <TASK>
[  216.349465][T11823]  __dump_stack+0x1d/0x30
[  216.349536][T11823]  dump_stack_lvl+0x95/0xd0
[  216.349571][T11823]  dump_stack+0x15/0x1b
[  216.349595][T11823]  should_fail_ex+0x265/0x280
[  216.349617][T11823]  should_fail+0xb/0x20
[  216.349640][T11823]  should_fail_usercopy+0x1a/0x20
[  216.349722][T11823]  _copy_from_iter+0xcf/0xe70
[  216.349749][T11823]  ? __alloc_skb+0x396/0x4b0
[  216.349777][T11823]  ? __alloc_skb+0x228/0x4b0
[  216.349897][T11823]  netlink_sendmsg+0x471/0x6b0
[  216.349935][T11823]  ? __pfx_netlink_sendmsg+0x10/0x10
[  216.350105][T11823]  __sock_sendmsg+0x145/0x180
[  216.350131][T11823]  ____sys_sendmsg+0x345/0x4a0
[  216.350180][T11823]  ___sys_sendmsg+0x17b/0x1d0
[  216.350281][T11823]  __sys_sendmmsg+0x178/0x300
[  216.350315][T11823]  __x64_sys_sendmmsg+0x57/0x70
[  216.350421][T11823]  x64_sys_call+0x1e28/0x3000
[  216.350518][T11823]  do_syscall_64+0xca/0x2b0
[  216.350557][T11823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.350577][T11823] RIP: 0033:0x7fd9b886f749
[  216.350590][T11823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  216.350607][T11823] RSP: 002b:00007fd9b72d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  216.350675][T11823] RAX: ffffffffffffffda RBX: 00007fd9b8ac5fa0 RCX: 00007fd9b886f749
[  216.350691][T11823] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[  216.350703][T11823] RBP: 00007fd9b72d7090 R08: 0000000000000000 R09: 0000000000000000
[  216.350714][T11823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  216.350782][T11823] R13: 00007fd9b8ac6038 R14: 00007fd9b8ac5fa0 R15: 00007ffffeb0d0b8
[  216.350801][T11823]  </TASK>
[  216.642314][T11822] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  216.668211][T11827] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  216.777076][T11760] chnl_net:caif_netlink_parms(): no params data found
[  216.916109][T11841] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2774'.
[  216.958116][T11760] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.965402][T11760] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.978469][T11760] bridge_slave_0: entered allmulticast mode
[  216.986384][T11760] bridge_slave_0: entered promiscuous mode
[  216.994783][T11760] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.003206][T11760] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.011949][T11760] bridge_slave_1: entered allmulticast mode
[  217.018390][T11760] bridge_slave_1: entered promiscuous mode
[  217.062354][T11760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.074475][T11760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.141367][T11760] team0: Port device team_slave_0 added
[  217.148328][T11760] team0: Port device team_slave_1 added
[  217.164582][T11847] Cannot find add_set index 0 as target
[  217.174356][ T1018] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  217.184982][ T1018] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.205340][T11865] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  217.271511][ T1018] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  217.282680][ T1018] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.331680][T11760] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.340178][T11760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  217.367402][T11760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.432933][T11873] bridge0: port 3(macsec1) entered blocking state
[  217.441439][T11873] bridge0: port 3(macsec1) entered disabled state
[  217.448502][T11873] macsec1: entered allmulticast mode
[  217.454637][T11873] macsec1: left allmulticast mode
[  217.466162][T11760] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.473999][T11760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  217.501844][T11760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.524839][ T1018] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  217.536442][ T1018] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.597004][ T1018] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  217.608811][ T1018] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.629422][T11760] hsr_slave_0: entered promiscuous mode
[  217.636530][T11760] hsr_slave_1: entered promiscuous mode
[  217.649150][T11760] debugfs: 'hsr0' already exists in 'hsr'
[  217.654999][T11760] Cannot create hsr debugfs directory
[  217.661783][T11883] lo speed is unknown, defaulting to 1000
[  217.700997][ T1018] batadv1: left allmulticast mode
[  217.706087][ T1018] batadv1: left promiscuous mode
[  217.711325][ T1018] bridge0: port 4(batadv1) entered disabled state
[  217.720351][ T1018] dummy0: left allmulticast mode
[  217.725519][ T1018] bridge0: port 3(dummy0) entered disabled state
[  217.741309][ T1018] bridge_slave_1: left allmulticast mode
[  217.746994][ T1018] bridge_slave_1: left promiscuous mode
[  217.753879][ T1018] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.762894][ T1018] bridge_slave_0: left allmulticast mode
[  217.768528][ T1018] bridge_slave_0: left promiscuous mode
[  217.775380][ T1018] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.861621][ T1018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  217.876602][ T1018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.886166][ T1018] bond0 (unregistering): Released all slaves
[  217.897327][ T1018] bond1 (unregistering): Released all slaves
[  217.907118][ T1018] bond2 (unregistering): (slave wireguard0): Releasing backup interface
[  217.916962][ T1018] wireguard0: left promiscuous mode
[  217.924615][ T1018] bond2 (unregistering): (slave wireguard1): Releasing backup interface
[  217.934691][T11901] netlink: 'syz.3.2797': attribute type 4 has an invalid length.
[  217.934863][ T1018] bond2 (unregistering): Released all slaves
[  217.968425][T11896] netlink: 'syz.3.2797': attribute type 4 has an invalid length.
[  217.999033][ T1018] tipc: Disabling bearer <udp:s>
[  218.004028][ T1018] tipc: Left network mode
[  218.075788][ T1018] hsr_slave_0: left promiscuous mode
[  218.085341][ T1018] hsr_slave_1: left promiscuous mode
[  218.092520][ T1018] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  218.101361][ T1018] batman_adv: batadv0: Removing interface: batadv_slave_0
[  218.110742][ T1018] batman_adv: batadv0: Interface deactivated: veth1_vlan
[  218.117783][ T1018] batman_adv: batadv0: Removing interface: veth1_vlan
[  218.130042][ T1018] veth1_macvtap: left promiscuous mode
[  218.135655][ T1018] veth0_macvtap: left promiscuous mode
[  218.140834][ T3816] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1
[  218.141348][ T1018] veth1_vlan: left promiscuous mode
[  218.156354][ T1018] veth0_vlan: left promiscuous mode
[  218.247996][ T1018] team0 (unregistering): Port device team_slave_1 removed
[  218.260321][ T1018] team0 (unregistering): Port device team_slave_0 removed
[  218.396517][T11920] loop3: detected capacity change from 0 to 512
[  218.449678][T11926] netlink: 'syz.1.2809': attribute type 4 has an invalid length.
[  218.459084][T11920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.474059][T11920] ext4 filesystem being mounted at /552/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.503603][T11927] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  218.527421][T11926] netlink: 'syz.1.2809': attribute type 4 has an invalid length.
[  218.542442][T11926] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  218.549092][T11926] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  218.558070][T11926] vhci_hcd vhci_hcd.0: Device attached
[  218.636482][T11932] vhci_hcd: connection closed
[  218.636659][ T3823] vhci_hcd vhci_hcd.1: stop threads
[  218.648192][ T3823] vhci_hcd vhci_hcd.1: release socket
[  218.653725][ T3823] vhci_hcd vhci_hcd.1: disconnect device
[  218.683226][T11941] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2812'.
[  218.797522][T11760] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  218.813069][T11760] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  218.831898][T11760] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  218.845129][T11760] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  218.893692][T11760] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.906674][T11760] 8021q: adding VLAN 0 to HW filter on device team0
[  218.921562][ T3823] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.928753][ T3823] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.942518][ T3823] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.949615][ T3823] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.952516][   T29] kauditd_printk_skb: 579 callbacks suppressed
[  218.952579][   T29] audit: type=1326 audit(1768081302.320:20317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11919 comm="syz.3.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9b88a2005 code=0x7ffc0000
[  218.991319][   T29] audit: type=1400 audit(1768081302.360:20318): avc:  denied  { egress } for  pid=4248 comm="kworker/0:9" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  219.014928][   T29] audit: type=1400 audit(1768081302.360:20319): avc:  denied  { sendto } for  pid=4248 comm="kworker/0:9" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  219.016220][T11760] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  219.039855][   T29] audit: type=1326 audit(1768081302.360:20320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11919 comm="syz.3.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9b88a2005 code=0x7ffc0000
[  219.052659][T11760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  219.092046][   T29] audit: type=1326 audit(1768081302.460:20321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11919 comm="syz.3.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9b88a2005 code=0x7ffc0000
[  219.117590][   T29] audit: type=1326 audit(1768081302.460:20322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11919 comm="syz.3.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9b88a2005 code=0x7ffc0000
[  219.143551][   T29] audit: type=1326 audit(1768081302.460:20323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11919 comm="syz.3.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9b88a2005 code=0x7ffc0000
[  219.168046][   T29] audit: type=1326 audit(1768081302.480:20324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11919 comm="syz.3.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9b88a2005 code=0x7ffc0000
[  219.193499][   T29] audit: type=1326 audit(1768081302.480:20325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11919 comm="syz.3.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9b88a2005 code=0x7ffc0000
[  219.218204][   T29] audit: type=1326 audit(1768081302.480:20326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11919 comm="syz.3.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9b88a2005 code=0x7ffc0000
[  219.256693][ T1018] IPVS: stop unused estimator thread 0...
[  219.283799][T11964] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2816'.
[  219.317353][T11760] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.430263][T11760] veth0_vlan: entered promiscuous mode
[  219.445963][T11760] veth1_vlan: entered promiscuous mode
[  219.458117][T11986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2822'.
[  219.475356][T11986] xfrm1: entered promiscuous mode
[  219.481994][T11986] xfrm1: entered allmulticast mode
[  219.488379][T11986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2822'.
[  219.492583][T11988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  219.504608][T11988] IPv6: NLM_F_CREATE should be set when creating new route
[  219.507673][T11989] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  219.519107][T11989] IPv6: NLM_F_CREATE should be set when creating new route
[  219.533537][T11760] veth0_macvtap: entered promiscuous mode
[  219.542719][T11760] veth1_macvtap: entered promiscuous mode
[  219.574282][T11760] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.587334][T11760] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.610187][ T3873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.641684][ T3873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.656493][ T3866] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.677657][T11997] loop5: detected capacity change from 0 to 1024
[  219.685933][ T3866] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.711598][T11997] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  219.735907][T11997] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.814753][T12002] lo speed is unknown, defaulting to 1000
[  219.822821][T12005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  219.863255][T12005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  219.895370][T12012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2831'.
[  219.921797][ T5527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  220.011286][T12019] loop5: detected capacity change from 0 to 128
[  220.065929][T12018] lo speed is unknown, defaulting to 1000
[  220.073197][T12024] Falling back ldisc for ptm1.
[  220.125333][T12031] warn_alloc: 6 callbacks suppressed
[  220.125344][T12031] syz.5.2839: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  220.147978][T12031] CPU: 1 UID: 0 PID: 12031 Comm: syz.5.2839 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  220.148101][T12031] Tainted: [W]=WARN
[  220.148107][T12031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  220.148118][T12031] Call Trace:
[  220.148123][T12031]  <TASK>
[  220.148129][T12031]  __dump_stack+0x1d/0x30
[  220.148152][T12031]  dump_stack_lvl+0x95/0xd0
[  220.148177][T12031]  dump_stack+0x15/0x1b
[  220.148199][T12031]  warn_alloc+0x12b/0x1a0
[  220.148304][T12031]  __vmalloc_node_range_noprof+0xa0/0x1310
[  220.148369][T12031]  ? tracing_record_taskinfo_sched_switch+0x71/0x260
[  220.148411][T12031]  ? probe_sched_wakeup+0x85/0xa0
[  220.148448][T12031]  ? ttwu_do_activate+0x1d3/0x210
[  220.148501][T12031]  ? __rcu_read_unlock+0x4f/0x70
[  220.148523][T12031]  ? avc_has_perm_noaudit+0xab/0x130
[  220.148581][T12031]  ? should_fail_ex+0x30/0x280
[  220.148611][T12031]  ? should_failslab+0x8c/0xb0
[  220.148636][T12031]  vmalloc_user_noprof+0x7d/0xb0
[  220.148681][T12031]  ? xskq_create+0x80/0xe0
[  220.148698][T12031]  xskq_create+0x80/0xe0
[  220.148764][T12031]  xsk_init_queue+0x95/0xf0
[  220.148813][T12031]  xsk_setsockopt+0x3f5/0x640
[  220.148923][T12031]  ? __pfx_xsk_setsockopt+0x10/0x10
[  220.149040][T12031]  __sys_setsockopt+0x184/0x200
[  220.149075][T12031]  __x64_sys_setsockopt+0x64/0x80
[  220.149115][T12031]  x64_sys_call+0x21d5/0x3000
[  220.149145][T12031]  do_syscall_64+0xca/0x2b0
[  220.149205][T12031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.149231][T12031] RIP: 0033:0x7f64fbfff749
[  220.149249][T12031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.149269][T12031] RSP: 002b:00007f64faa5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  220.149307][T12031] RAX: ffffffffffffffda RBX: 00007f64fc255fa0 RCX: 00007f64fbfff749
[  220.149322][T12031] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d
[  220.149334][T12031] RBP: 00007f64fc083f91 R08: 0000000000000004 R09: 0000000000000000
[  220.149361][T12031] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  220.149376][T12031] R13: 00007f64fc256038 R14: 00007f64fc255fa0 R15: 00007ffc157155a8
[  220.149400][T12031]  </TASK>
[  220.155563][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2840'.
[  220.164236][T12031] Mem-Info:
[  220.412358][T12031] active_anon:21323 inactive_anon:4640 isolated_anon:0
[  220.412358][T12031]  active_file:27117 inactive_file:2560 isolated_file:0
[  220.412358][T12031]  unevictable:0 dirty:436 writeback:0
[  220.412358][T12031]  slab_reclaimable:3531 slab_unreclaimable:99709
[  220.412358][T12031]  mapped:30064 shmem:21345 pagetables:1252
[  220.412358][T12031]  sec_pagetables:0 bounce:0
[  220.412358][T12031]  kernel_misc_reclaimable:0
[  220.412358][T12031]  free:1751438 free_pcp:5852 free_cma:0
[  220.459127][T12031] Node 0 active_anon:85292kB inactive_anon:18560kB active_file:108468kB inactive_file:10240kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120256kB dirty:1744kB writeback:0kB shmem:85380kB kernel_stack:5216kB pagetables:5008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  220.488279][T12031] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  220.519500][T12031] lowmem_reserve[]: 0 2880 7859 7859
[  220.524862][T12031] Node 0 DMA32 free:2945888kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB
[  220.557960][T12031] lowmem_reserve[]: 0 0 4978 4978
[  220.564596][T12031] Node 0 Normal free:4023960kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:85084kB inactive_anon:18560kB active_file:108468kB inactive_file:10264kB unevictable:0kB writepending:1744kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:19536kB local_pcp:9508kB free_cma:0kB
[  220.599771][T12031] lowmem_reserve[]: 0 0 0 0
[  220.604449][T12031] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  220.618576][T12031] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945888kB
[  220.636244][T12031] Node 0 Normal: 1632*4kB (UM) 883*8kB (UM) 461*16kB (M) 263*32kB (ME) 232*64kB (UME) 130*128kB (ME) 122*256kB (UME) 92*512kB (UM) 58*1024kB (UME) 27*2048kB (UM) 918*4096kB (UM) = 4014024kB
[  220.656703][T12031] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  220.667347][T12031] 51001 total pagecache pages
[  220.673368][T12031] 9 pages in swap cache
[  220.677536][T12031] Free swap  = 75804kB
[  220.682933][T12031] Total swap = 124996kB
[  220.687097][T12031] 2097051 pages RAM
[  220.692128][T12031] 0 pages HighMem/MovableOnly
[  220.696819][T12031] 81271 pages reserved
[  220.797020][T12051] IPv6: Can't replace route, no match found
[  220.861164][T12045] netlink: 'syz.0.2843': attribute type 4 has an invalid length.
[  220.887845][T12061] ip6tnl0: Caught tx_queue_len zero misconfig
[  220.891152][T12045] netlink: 'syz.0.2843': attribute type 4 has an invalid length.
[  221.053418][T12072] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  221.190564][T12083] loop0: detected capacity change from 0 to 512
[  221.197498][T12083] EXT4-fs: dax option not supported
[  221.530463][T12097] netlink: 'syz.4.2863': attribute type 4 has an invalid length.
[  221.616988][T12100] netlink: 'syz.4.2863': attribute type 4 has an invalid length.
[  221.626438][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.873048][T12123] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  221.902704][T12123] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2871'.
[  222.052020][T12135] pimreg: entered allmulticast mode
[  222.072219][T12135] pimreg: left allmulticast mode
[  222.280939][T12148] pimreg: entered allmulticast mode
[  222.302232][T12146] lo speed is unknown, defaulting to 1000
[  222.313186][T12148] pimreg: left allmulticast mode
[  222.671305][T12152] lo speed is unknown, defaulting to 1000
[  223.136648][T12171] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  223.275607][T12178] netlink: 'syz.3.2891': attribute type 4 has an invalid length.
[  223.326009][T12183] netlink: 'syz.3.2891': attribute type 4 has an invalid length.
[  223.394247][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2895'.
[  223.478333][T12187] team0 (unregistering): Port device team_slave_0 removed
[  223.511059][T12187] team0 (unregistering): Port device team_slave_1 removed
[  223.573863][T12193] ip6gre0: Caught tx_queue_len zero misconfig
[  223.628203][T12191] lo speed is unknown, defaulting to 1000
[  223.677933][ T3486] syz!: Port: 1 Link DOWN
[  223.755326][T12211] netlink: 'syz.4.2902': attribute type 3 has an invalid length.
[  223.764645][T12211] netlink: 'syz.4.2902': attribute type 1 has an invalid length.
[  223.773805][T12211] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2902'.
[  223.792199][T12203] loop3: detected capacity change from 0 to 128
[  223.862152][T12203] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  223.883058][T12216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2904'.
[  223.910412][T12203] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  223.937127][T12216] netlink: 'syz.5.2904': attribute type 41 has an invalid length.
[  224.005588][T12223] loop0: detected capacity change from 0 to 512
[  224.022462][T12223] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  224.044171][T12223] EXT4-fs (loop0): 1 orphan inode deleted
[  224.051169][T12223] EXT4-fs (loop0): 1 truncate cleaned up
[  224.057418][T12223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.073298][T12228] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  224.104217][   T29] kauditd_printk_skb: 1056 callbacks suppressed
[  224.104230][   T29] audit: type=1400 audit(1768081307.470:21383): avc:  denied  { read } for  pid=12222 comm="syz.0.2905" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  224.144912][T12232] loop5: detected capacity change from 0 to 512
[  224.154696][T12233] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  224.156463][   T29] audit: type=1400 audit(1768081307.530:21384): avc:  denied  { write open } for  pid=12233 comm="syz.0.2905" path="/14/file0/core" dev="loop0" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  224.193458][T12233] EXT4-fs (loop0): Remounting filesystem read-only
[  224.201694][T12232] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6).
[  224.213504][T12232] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  224.230456][T12232] EXT4-fs (loop5): mount failed
[  224.269712][T11760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.296703][T12246] netlink: 'syz.1.2915': attribute type 4 has an invalid length.
[  224.630269][T12270] lo speed is unknown, defaulting to 1000
[  224.753807][   T29] audit: type=1326 audit(1768081308.060:21385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.5.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fbfff749 code=0x7ffc0000
[  224.778827][   T29] audit: type=1326 audit(1768081308.060:21386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.5.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fbfff749 code=0x7ffc0000
[  224.803639][   T29] audit: type=1326 audit(1768081308.060:21387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.5.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fbfff749 code=0x7ffc0000
[  224.828400][   T29] audit: type=1326 audit(1768081308.060:21388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.5.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fbfff749 code=0x7ffc0000
[  224.856223][   T29] audit: type=1326 audit(1768081308.060:21389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.5.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f64fbfff749 code=0x7ffc0000
[  224.881182][   T29] audit: type=1326 audit(1768081308.060:21390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.5.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fbfff749 code=0x7ffc0000
[  224.906025][   T29] audit: type=1326 audit(1768081308.060:21391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.5.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fbfff749 code=0x7ffc0000
[  225.084778][T12275] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  225.491269][T12290] loop0: detected capacity change from 0 to 1024
[  225.530163][T12290] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  225.540443][T12290] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  225.552861][T12290] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  225.602372][T12290] EXT4-fs (loop0): orphan cleanup on readonly fs
[  225.610858][T12290] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm +}[@: Inode bitmap for bg 0 marked uninitialized
[  225.626249][T12290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  225.757076][T12290] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (32298!=35945)
[  225.814318][T12299] pimreg: entered allmulticast mode
[  225.841083][T12299] pimreg: left allmulticast mode
[  225.867503][T11760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.888198][T12301] lo speed is unknown, defaulting to 1000
[  226.297028][T12329] loop5: detected capacity change from 0 to 512
[  226.305048][T12329] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  226.317939][T12329] EXT4-fs (loop5): 1 truncate cleaned up
[  226.325849][T12329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.438312][T12321] lo speed is unknown, defaulting to 1000
[  226.510805][T12321] chnl_net:caif_netlink_parms(): no params data found
[  226.551628][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  226.561302][T12354] loop0: detected capacity change from 0 to 1024
[  226.582389][T12321] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.591031][T12321] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.598449][T12321] bridge_slave_0: entered allmulticast mode
[  226.606544][T12321] bridge_slave_0: entered promiscuous mode
[  226.614952][T12321] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.623431][T12321] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.632203][T12321] bridge_slave_1: entered allmulticast mode
[  226.640379][T12321] bridge_slave_1: entered promiscuous mode
[  226.676117][T12321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.687986][T12321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.715195][T12367] validate_nla: 1 callbacks suppressed
[  226.715211][T12367] netlink: 'syz.3.2955': attribute type 4 has an invalid length.
[  226.729217][T12321] team0: Port device team_slave_0 added
[  226.736093][T12321] team0: Port device team_slave_1 added
[  226.760833][T12367] netlink: 'syz.3.2955': attribute type 4 has an invalid length.
[  226.776832][T12321] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.783888][T12321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  226.810715][T12321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.822149][T12321] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.829132][T12321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  226.856144][T12321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.881289][ T5527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.910740][T12321] hsr_slave_0: entered promiscuous mode
[  226.916971][T12321] hsr_slave_1: entered promiscuous mode
[  226.928903][T12321] debugfs: 'hsr0' already exists in 'hsr'
[  226.934650][T12321] Cannot create hsr debugfs directory
[  226.999358][T12382] netlink: 'syz.5.2960': attribute type 4 has an invalid length.
[  227.030451][T12384] FAULT_INJECTION: forcing a failure.
[  227.030451][T12384] name failslab, interval 1, probability 0, space 0, times 0
[  227.043174][T12384] CPU: 0 UID: 0 PID: 12384 Comm: syz.3.2961 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  227.043208][T12384] Tainted: [W]=WARN
[  227.043216][T12384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  227.043277][T12384] Call Trace:
[  227.043283][T12384]  <TASK>
[  227.043290][T12384]  __dump_stack+0x1d/0x30
[  227.043397][T12384]  dump_stack_lvl+0x95/0xd0
[  227.043429][T12384]  dump_stack+0x15/0x1b
[  227.043454][T12384]  should_fail_ex+0x265/0x280
[  227.043483][T12384]  should_failslab+0x8c/0xb0
[  227.043582][T12384]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[  227.043614][T12384]  ? __alloc_skb+0x2ff/0x4b0
[  227.043649][T12384]  __alloc_skb+0x2ff/0x4b0
[  227.043738][T12384]  ? __alloc_skb+0x228/0x4b0
[  227.043770][T12384]  audit_log_start+0x3a0/0x720
[  227.043798][T12384]  ? kstrtouint+0x76/0xc0
[  227.043824][T12384]  audit_seccomp+0x48/0x100
[  227.043871][T12384]  ? __seccomp_filter+0x832/0x1260
[  227.043908][T12384]  __seccomp_filter+0x843/0x1260
[  227.043945][T12384]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  227.044051][T12384]  ? vfs_write+0x7e8/0x960
[  227.044084][T12384]  __secure_computing+0x82/0x150
[  227.044117][T12384]  syscall_trace_enter+0xcf/0x1e0
[  227.044200][T12384]  do_syscall_64+0xa4/0x2b0
[  227.044245][T12384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.044320][T12384] RIP: 0033:0x7fd9b886f749
[  227.044340][T12384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  227.044364][T12384] RSP: 002b:00007fd9b72d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7
[  227.044388][T12384] RAX: ffffffffffffffda RBX: 00007fd9b8ac5fa0 RCX: 00007fd9b886f749
[  227.044409][T12384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0300000000000000
[  227.044422][T12384] RBP: 00007fd9b72d7090 R08: 0000000000000000 R09: 0000000000000000
[  227.044435][T12384] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[  227.044465][T12384] R13: 00007fd9b8ac6038 R14: 00007fd9b8ac5fa0 R15: 00007ffffeb0d0b8
[  227.044500][T12384]  </TASK>
[  227.044755][T12382] netlink: 'syz.5.2960': attribute type 4 has an invalid length.
[  227.287307][T12386] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  227.293845][T12386] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  227.302384][T12386] vhci_hcd vhci_hcd.0: Device attached
[  227.361033][T12388] vhci_hcd: connection closed
[  227.361656][T12321] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.377107][T12321] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  227.386975][T12321] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  227.396831][ T3864] vhci_hcd vhci_hcd.5: stop threads
[  227.403017][ T3864] vhci_hcd vhci_hcd.5: release socket
[  227.408488][ T3864] vhci_hcd vhci_hcd.5: disconnect device
[  227.445392][T12395] pimreg: entered allmulticast mode
[  227.457103][T12321] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.467829][T12321] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  227.477781][T12321] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  227.494816][T12393] pimreg: left allmulticast mode
[  227.531647][T12321] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.541539][T12321] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  227.551496][T12321] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  227.610556][T12321] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.621282][T12321] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  227.631209][T12321] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  227.728469][T12401] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  227.741521][T12321] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  227.763883][T12321] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  227.774629][T12403] syz_tun: refused to change device tx_queue_len
[  227.787796][T12321] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  227.801094][T12321] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  227.812311][T12405] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  227.888208][T12321] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.902466][T12321] 8021q: adding VLAN 0 to HW filter on device team0
[  227.913582][ T3856] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.920679][ T3856] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.932321][ T3856] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.939482][ T3856] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.961259][T12321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  227.971645][T12321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  228.027690][T12430] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2975'.
[  228.081517][T12321] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.122963][T12439] pim6reg: entered allmulticast mode
[  228.130874][T12439] pim6reg: left allmulticast mode
[  228.215892][T12451] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  228.292743][T12464] netlink: 'syz.0.2984': attribute type 4 has an invalid length.
[  228.305667][T12464] netlink: 'syz.0.2984': attribute type 4 has an invalid length.
[  228.324986][T12464] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  228.331523][T12464] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  228.340649][T12464] vhci_hcd vhci_hcd.0: Device attached
[  228.362566][T12321] veth0_vlan: entered promiscuous mode
[  228.373379][T12321] veth1_vlan: entered promiscuous mode
[  228.397881][T12321] veth0_macvtap: entered promiscuous mode
[  228.406952][T12321] veth1_macvtap: entered promiscuous mode
[  228.420689][T12321] batman_adv: batadv0: Interface activated: batadv_slave_0
[  228.430885][T12466] vhci_hcd: connection closed
[  228.431214][ T9250] vhci_hcd vhci_hcd.0: stop threads
[  228.433305][T12321] batman_adv: batadv0: Interface activated: batadv_slave_1
[  228.435921][ T9250] vhci_hcd vhci_hcd.0: release socket
[  228.454645][ T9250] vhci_hcd vhci_hcd.0: disconnect device
[  228.463006][ T3830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.476382][ T3830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.496041][ T3830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.506028][ T3830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.587400][T12484] ==================================================================
[  228.595515][T12484] BUG: KCSAN: data-race in folios_put_refs / need_mlock_drain
[  228.602999][T12484] 
[  228.605328][T12484] write to 0xffff888237d27010 of 1 bytes by task 12483 on cpu 1:
[  228.613048][T12484]  folios_put_refs+0x285/0x2d0
[  228.617831][T12484]  mlock_folio_batch+0x1b5a/0x1b90
[  228.622946][T12484]  mlock_new_folio+0x1d6/0x240
[  228.627713][T12484]  folio_add_lru_vma+0x5f/0x70
[  228.632491][T12484]  handle_mm_fault+0x2858/0x2c60
[  228.637442][T12484]  __get_user_pages+0x1024/0x1ed0
[  228.642482][T12484]  __mm_populate+0x243/0x3a0
[  228.647090][T12484]  do_mlock+0x471/0x520
[  228.651261][T12484]  __x64_sys_mlock+0x36/0x50
[  228.655864][T12484]  x64_sys_call+0x1794/0x3000
[  228.660591][T12484]  do_syscall_64+0xca/0x2b0
[  228.665119][T12484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.671020][T12484] 
[  228.673351][T12484] read to 0xffff888237d27010 of 1 bytes by task 12484 on cpu 0:
[  228.680984][T12484]  need_mlock_drain+0x30/0x50
[  228.685679][T12484]  __lru_add_drain_all+0x273/0x450
[  228.690809][T12484]  lru_cache_disable+0x1f/0x30
[  228.695597][T12484]  __se_sys_move_pages+0x2b2/0x1360
[  228.700809][T12484]  __x64_sys_move_pages+0x78/0x90
[  228.705854][T12484]  x64_sys_call+0x27c3/0x3000
[  228.710550][T12484]  do_syscall_64+0xca/0x2b0
[  228.715093][T12484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.721003][T12484] 
[  228.723340][T12484] value changed: 0x01 -> 0x00
[  228.728017][T12484] 
[  228.730344][T12484] Reported by Kernel Concurrency Sanitizer on:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  228.736510][T12484] CPU: 0 UID: 0 PID: 12484 Comm: syz.3.2988 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  228.747889][T12484] Tainted: [W]=WARN
[  228.751702][T12484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  228.761781][T12484] ==================================================================
[  229.087167][ T9250] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.171604][ T9250] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.262023][ T9250] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.360553][ T9250] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.444215][ T9250] bridge_slave_1: left allmulticast mode
[  229.449931][ T9250] bridge_slave_1: left promiscuous mode
[  229.455843][ T9250] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.463890][ T9250] bridge_slave_0: left allmulticast mode
[  229.470489][ T9250] bridge_slave_0: left promiscuous mode
[  229.476357][ T9250] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.542398][ T9250] bond2 (unregistering): (slave geneve2): Releasing active interface
[  229.601834][ T9250] bond0 (unregistering): left promiscuous mode
[  229.608088][ T9250] bond_slave_0: left promiscuous mode
[  229.615115][ T9250] bond_slave_1: left promiscuous mode
[  229.625307][ T9250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  229.636585][ T9250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.646181][ T9250] bond0 (unregistering): Released all slaves
[  229.655731][ T9250] bond1 (unregistering): (slave batadv1): Releasing active interface
[  229.664902][ T9250] bond1 (unregistering): Released all slaves
[  229.673256][ T9250] bond2 (unregistering): Released all slaves
[  229.780857][ T9250] hsr_slave_0: left promiscuous mode
[  229.786713][ T9250] hsr_slave_1: left promiscuous mode
[  229.794073][ T9250] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.801589][ T9250] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.813188][ T9250] veth1_macvtap: left promiscuous mode
[  229.820210][ T9250] veth0_macvtap: left promiscuous mode
[  229.825783][ T9250] veth1_vlan: left promiscuous mode
[  229.831118][ T9250] veth0_vlan: left promiscuous mode
[  229.890687][ T3856] smc: removing ib device syz!
[  230.365660][ T9250] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.412015][ T9250] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.462740][ T9250] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.522271][ T9250] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.584290][ T9250] bridge_slave_1: left allmulticast mode
[  230.591137][ T9250] bridge_slave_1: left promiscuous mode
[  230.596740][ T9250] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.604422][ T9250] bridge_slave_0: left allmulticast mode
[  230.610090][ T9250] bridge_slave_0: left promiscuous mode
[  230.615787][ T9250] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.664764][ T9250] dvmrp0 (unregistering): left allmulticast mode
[  230.676268][ T9250] bond0 (unregistering): Released all slaves
[  230.684808][ T9250] bond1 (unregistering): Released all slaves
[  230.693439][ T9250] bond2 (unregistering): Released all slaves
[  230.702183][ T9250] bond3 (unregistering): Released all slaves
[  230.711162][ T9250] bond4 (unregistering): (slave lo): Releasing backup interface
[  230.720378][ T9250] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  230.732234][ T9250] bond4 (unregistering): Released all slaves
[  230.792424][ T9250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.802400][ T9250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.812459][ T9250] bond0 (unregistering): Released all slaves
[  230.820436][ T3735] lo speed is unknown, defaulting to 1000
[  230.826272][ T3735] syz2: Port: 1 Link DOWN
[  230.830709][ T1040] lo speed is unknown, defaulting to 1000
[  230.902104][ T9250] hsr_slave_1: left promiscuous mode
[  230.910047][ T9250] hsr_slave_0: left promiscuous mode
[  230.915742][ T9250] hsr_slave_1: left promiscuous mode
[  230.921591][ T9250] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.929084][ T9250] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.936572][ T9250] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.944076][ T9250] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.954522][ T9250] veth1_macvtap: left promiscuous mode
[  230.960059][ T9250] veth0_macvtap: left promiscuous mode
[  230.965594][ T9250] veth1_vlan: left promiscuous mode
[  230.970880][ T9250] veth0_vlan: left promiscuous mode
[  231.086588][ T9250] team0 (unregistering): Port device team_slave_1 removed
[  231.098101][ T9250] team0 (unregistering): Port device team_slave_0 removed
[  231.623326][ T9250] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.143082][ T9250] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.182673][ T9250] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.242711][ T9250] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.315442][ T9250] bridge_slave_1: left allmulticast mode
[  232.322449][ T9250] bridge_slave_1: left promiscuous mode
[  232.328085][ T9250] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.337309][ T9250] bridge_slave_0: left allmulticast mode
[  232.344257][ T9250] bridge_slave_0: left promiscuous mode
[  232.351302][ T9250] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.422784][ T9250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  232.432935][ T9250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  232.442520][ T9250] bond0 (unregistering): Released all slaves
[  232.483040][ T9250] hsr_slave_0: left promiscuous mode
[  232.489983][ T9250] hsr_slave_1: left promiscuous mode
[  232.495488][ T9250] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.504104][ T9250] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.512914][ T9250] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.521560][ T9250] batman_adv: batadv0: Removing interface: batadv_slave_1
[  232.532822][ T9250] veth1_macvtap: left promiscuous mode
[  232.538306][ T9250] veth0_macvtap: left promiscuous mode
[  232.544064][ T9250] veth1_vlan: left promiscuous mode
[  232.549351][ T9250] veth0_vlan: left promiscuous mode
[  232.623773][ T9250] team0 (unregistering): Port device team_slave_1 removed
[  232.633267][ T9250] team0 (unregistering): Port device team_slave_0 removed