last executing test programs:

5.277227738s ago: executing program 0 (id=1631):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180100000000000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x6, 0x8, 0x2}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206010200000000000000000000000005000100070000000900020073797a30000000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e657400000014000780080008400000009008000640"], 0x64}}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg2\x00', <r3=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x200800, '\x00', r3, r0, 0x1, 0x5, 0x3}, 0x48)
dup(r1)
socket$caif_stream(0x25, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000300)={'team0\x00', <r5=>0x0})
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000304000000000000000000000c00", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0)
write(r6, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_GETFSLABEL(r7, 0x6611, 0x0)
pipe(&(0x7f0000000100))
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))

4.840470344s ago: executing program 0 (id=1639):
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000005000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000a704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_es_lookup_extent_enter\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x9)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$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")

4.415401879s ago: executing program 0 (id=1651):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x48)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', r0}, 0x18)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket(0xa, 0x2, 0x3a)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0)
ftruncate(r3, 0xc17a)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x12, 0xbc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000040)="91", 0x1}], 0x1}], 0x1, 0x0)

4.011472992s ago: executing program 0 (id=1660):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="237a00120000000000001000000008000100", @ANYRES32=0x0, @ANYBLOB="050010"], 0x2c}}, 0x0)

3.518538302s ago: executing program 4 (id=1671):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000020a000000000000000000000850000001700000095"], 0x0}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001900), 0x1, 0x762, &(0x7f0000001180)="$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")
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
getpeername$unix(r5, 0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r4, 0x40086610, &(0x7f0000000100))
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e00000001000000002400000008002f000000000005003600000000000c0005000000000000000000050037000300000008000200", @ANYRES32=r6, @ANYBLOB="0600060000000000060004"], 0x50}, 0x4, 0x700000000000000}, 0x0)

3.245400075s ago: executing program 4 (id=1673):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004680)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x65580000}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x27}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0x3}]}, 0x74}}, 0x0)

3.046885391s ago: executing program 4 (id=1677):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updsa={0xf8, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3f}, @in=@empty}, {@in=@empty, 0x8000000, 0x3c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xfffff000}]}, 0xf8}}, 0x0)

2.991563075s ago: executing program 4 (id=1678):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0xc0, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000}, [@IFLA_LINKINFO={0x90, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x80, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4, 0x3}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xa}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_NUM_TX_QUEUES]}, 0xc0}, 0x1, 0xba01}, 0x0)

2.935775409s ago: executing program 4 (id=1681):
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x0, @broadcast=0xac141436}})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x5, 0x764, &(0x7f0000000f80)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x0, 0x6})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x5865, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0)

2.586697848s ago: executing program 4 (id=1688):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x80000) (async)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000200)) (async)
r1 = inotify_init1(0x0)
r2 = syz_io_uring_setup(0x1f89, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x3}, &(0x7f0000000500)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000140)=[{0xffffffffffffffff}], 0x1})
io_uring_enter(r2, 0x50, 0x0, 0x0, 0x0, 0xfffffffffffffff4) (async)
fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async)
fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, <r5=>0x0})
ptrace$setopts(0x4206, r5, 0x0, 0x200001) (async)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
timer_create(0x1, &(0x7f0000000840)={0x0, 0x13}, &(0x7f0000000100)=<r6=>0x0)
timer_settime(r6, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
setreuid(0x0, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001300)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b00)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRESHEX=r6, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r8, @ANYBLOB="4400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004ff8eae5684b1a87b00", @ANYRES32=0x0, @ANYBLOB="ab3a7575cae200c225afcfa6f3ddc648dda184afc98e97bb56acbdc1da681af36ccc983860de97ad3ce809e60651b6ae9e0e45792c196400bdee2648444193225565d5d28214416cb67e35894f1fbfe16242cd17fc845a1a21a409c30660359f461267d67230c900357006148a47f47a8514ec5dae2d5508d79a0b9daa9f031227f6deb18d03cb1bdfdaae639f6f3c8e85797422c00a4c5f86fdc771b543b47e5e01bdbe1a108e2467421e07f968cbfc87fad216c207851bc73096c8c395b6e7000000000000000000050000000000"], 0x60}}, 0x0) (async)
socket$inet6(0xa, 0x0, 0x0) (async)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f0000001980)=ANY=[@ANYBLOB='uni_xlate=1,shortname=lower,utf8=0,utf8=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0xfe, 0x267, &(0x7f0000000740)="$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") (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r9, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) (async)
creat(&(0x7f00000001c0)='./file0\x00', 0x0) (async)
bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_aout(r10, &(0x7f00000002c0)=ANY=[], 0xc1)
r11 = epoll_create1(0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r11, 0x842f6000)

2.507857095s ago: executing program 1 (id=1692):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000800)={'syztnl2\x00', <r1=>0x0, 0x7, 0x8, 0x7, 0xc000000, {{0x14, 0x4, 0x3, 0x31, 0x50, 0x0, 0x0, 0x3, 0x0, 0x0, @multicast1, @multicast1, {[@timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0x6, [{@remote}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xfffffff0}, {@remote}, {@remote, 0x10}, {@dev={0xac, 0x14, 0x14, 0x39}, 0xffffffe0}, {@multicast2, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x45}]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='percpu_free_percpu\x00', r0}, 0x10)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
r6 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r7 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r6, 0x1)
r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$SG_IO(r9, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_CTL_ADD(r9, 0xc1086201, &(0x7f00000006c0)={'custom1\x00'})
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r7, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r11, r10, 0x26}, 0x10)
write$binfmt_misc(r4, &(0x7f00000003c0)={'syz0', "d57657d812521f867f78e61889ec5bc5f9097b46595a6d2e9e937e4b23711349a52e91a8981d5c9b65379f8c49e77a638718928c80e23b0ff500183036402ed38634bd2719ea8c8779ac05cf505d3479c45d093f646372ec4ad3e28c7ee8ca010e04341698ada4454b184ed36185b4ca7ab74b8d4df68d949ff87f790e5cf41d3aee48ce10698ae95067c3ee5538fca3d8c58aad35680d3960c0eb171f749a5cf755583deaa62fad995c1d26f5fb906011182cc7398c9e9deda74c4650dd347c77d4"}, 0xc6)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000940)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x7, 0x8001, 0x1, 0x7, 0x7a8, 0x401}, {0x20000, 0x4, 0x48, 0x6, 0x6, 0x3}], ['\x00', '\x00', '\x00', '\x00']})
recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0)
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000300)="3e66350e64772e72af49b1bfe2cdf63567699dae4faf", 0x16}], 0x1}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0xd001, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x3f00}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0)

2.047587532s ago: executing program 1 (id=1697):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0xa, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90)
io_setup(0x2, &(0x7f0000000080))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0xa, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) (async)
io_setup(0x2, &(0x7f0000000080)) (async)

1.963373779s ago: executing program 1 (id=1702):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0))
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="580000001005dad0d1baac47000104000000070000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800e00010069703665727370616e000000240002801400050000000000000000000000000000000001040012000500160001000000"], 0x58}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0x8940)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="ebd53447b56a01c92e4c6a81a9402b73155062676ffd811ad50b682c3b368a09212cf327833dabbe7fa3431d6db67ffdb0da5938538b145e17d66a912aa0325531e76fadd57cede73d3490b669b318c6cb20bc858e681409f5566d9f9707744af612a7eba7e11e0d91141295f4a3a0c19bd940ce8881cf4bc31806c488d9575888a56b7582161ce4217a91280a4e04b616b971364c4c455c3ec0b044e2605172c2b0b9f432e1f0412e03ae3567304e2fcfb0ba545c79517f82830edc34d53bc9ece4c3f077ff3e51d98bd2da0b0255fe62311f1f4a9c30fd424ce1130def474d7e30b30ee07d069ce6ecc15e6cf8791621ca05d7d78b50", 0xf7}, {&(0x7f00000002c0)="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", 0x670}], 0x2)
r2 = gettid()
tkill(r2, 0x7)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, r2, 0xe, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=@framed={{}, [@jmp={0x6, 0x0, 0x7}, @alu={0x7, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r3}, 0x10)
r4 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x109401)
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socket$unix(0x1, 0x0, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ppoll(&(0x7f0000000000)=[{}, {r6, 0x9086}], 0x2, 0x0, 0x0, 0x0)
close(r5)
io_setup(0x6, &(0x7f0000001380)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x3c, 0x0})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r9, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r8, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x31}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004)

1.703208511s ago: executing program 1 (id=1708):
pipe(0x0)
unshare(0x42000000)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44f000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000e6ff230012800e000100697036677265746170"], 0x44}, 0x1, 0xba01}, 0x0)

1.547638953s ago: executing program 2 (id=1711):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100000000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0)

1.547385033s ago: executing program 2 (id=1712):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)=@mpls_delroute={0x80, 0x19, 0x4, 0x70bd29, 0x25dfdbff, {0x1c, 0x10, 0x20, 0x2, 0xfd, 0x4, 0xff, 0xb}, [@RTA_VIA={0x14, 0x12, {0x29, "6fdf46b19d31eb193e000000802b"}}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x8, 0x6}}, @RTA_DST={0x8, 0x1, {0x7, 0x0, 0x1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xe1}, @RTA_DST={0x8, 0x1, {0x85, 0x0, 0x1}}, @RTA_VIA={0x14, 0x12, {0x11, "f656ddc662bb64e3e328e42ccaf4"}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x2a}, @RTA_OIF={0x8}, @RTA_DST={0x8, 0x1, {0x6, 0x0, 0x1}}]}, 0x80}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0xfffff03b}, {0x80000006, 0x1, 0x0, 0x8}]}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f00000001c0)=0x4, 0x2)
r4 = socket$inet6(0xa, 0x3, 0x3c)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='dots,errors=continue,nodots,dmask=00000000000000000077777,nodots,dots,nodots,showexec,dots,sys_immutable,discard,dots,nodots,nodots,dots,nodots,dots,nfs,dots,dots,dots,dots,nodots,nodots,nodots,quiet,dots,nodots,gid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000O00000,erroRs=coe,uid<\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB=',\x00'], 0xfd, 0x1bf, &(0x7f0000000640)="$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")
msgget$private(0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x1, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02"], 0x92, 0x0)
r5 = socket(0xa, 0x2, 0x3)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xa)
lchown(&(0x7f0000000f40)='./file0\x00', 0x0, r6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}, 0xd}, 0x1c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00'})
setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0x4)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="84", 0xffdf}], 0x1)
open(&(0x7f0000000000)='./bus\x00', 0x1c5c7e, 0x99)

1.547202743s ago: executing program 1 (id=1713):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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")
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xc0000000}, 0x9c)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x0, &(0x7f0000000000)=""/152, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xc1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x32, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0)
getpid()
process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{0x0}], 0x1, 0x0)
set_mempolicy(0x4005, &(0x7f0000000280)=0x103, 0x4)
socket$kcm(0x2, 0x0, 0x2)
write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfdef)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

926.072974ms ago: executing program 0 (id=1664):
socket$l2tp(0x2, 0x2, 0x73)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@data_err_abort}, {@grpquota}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@i_version}, {@acl}]}, 0xff, 0x451, &(0x7f0000000d00)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x74)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', &(0x7f0000000240), 0x0)
ioctl$SG_IO(r0, 0x2285, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x6cc, 0x6b9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80, 0x5}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$inet(0x2, 0x0, 0x8d)
setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYRES64=r3], 0x1)
creat(&(0x7f0000000280)='./file0\x00', 0x2)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)

714.913402ms ago: executing program 2 (id=1720):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64f2e9c50000006d150000260000000006000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ffdd18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5000000}, 0xa3)

463.535682ms ago: executing program 2 (id=1721):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000140)="8198", 0x2}], 0x1)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

462.599332ms ago: executing program 2 (id=1722):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002780)=@delchain={0x6a8, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_flow={{0x9}, {0x648, 0x2, [@TCA_FLOW_KEYS={0x8}, @TCA_FLOW_ACT={0x2c8, 0x9, 0x0, 0x1, [@m_tunnel_key={0x258, 0x0, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x21d, 0x6, "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"}, {0xc}, {0xc}}}, @m_skbedit={0x6c, 0x0, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}]}, {0x35, 0x6, "95dcc74d4393affe2ea7d03dde2ad7cdbb3ce93cf19573a4bd0ca7fc52668cfc303fdb063837788180f6420bfa78e12144"}, {0xc}, {0xc}}}]}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_EMATCHES={0x364, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x0, 0x0, 0x0, {{}, {0x0, 0x1, 0x0, 'q'}}}, @TCF_EM_CANID={0x14}]}, @TCA_EMATCH_TREE_LIST={0x32c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18}, @TCF_EM_NBYTE={0x14, 0x0, 0x0, 0x0, {{}, {0x0, 0x1, 0x0, "bd"}}}, @TCF_EM_IPSET={0x10}, @TCF_EM_IPT={0xec, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_DATA={0x45, 0x5, "e93960abc8e8b9b1c81a41853875755a9770e081d310740b960c37033ba39d472cc4af7b9bb85a9b13424a78440f5f73db6d47b8a6d86b99ee42a383110af408f1"}, @TCA_EM_IPT_MATCH_DATA={0x81, 0x5, "a76be08d91c8b97ef380ae3db16a20b3132c296f57657e232f80868d017fb69afa39f98c1606993a10b0391407bfaa93840b27d3c07b16d0667b6e8fdd5ee8b3e823d5466a3dae5c0ba3ee56080486af6ee09566fd175540c2121f77d41daed1a0b492ff4668296a5da5250d99b714834ed2c840ab44e5b464cf9f01c7"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_IPT={0x118, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_DATA={0x91, 0x5, "90c7adf778a4d9cf5d4b18fffd1012e51256f3cf177dbd19ef4d6b0f5b8c24468833ef68ef1560d1e3ef2ac0684862192e1b74ac5eb3882d4d63aadb44e088f9b81e9a5c24d475b98eb55aa89e7473f34bef10af73035ced81d6cb3c9e940ca704e0c35f5211864c56766c65040a101709ba7a4c5fc7d55164e20f1759bbeeb21bfe1766d25748ae8747c57b01"}, @TCA_EM_IPT_MATCH_DATA={0x3d, 0x5, "559e0413491203c8d168d3f5b0b51ff6fa2209bfe93462b145f2295018c110d11bdd02ffa8a4b7db01b54b0c3d1f589c93891acf044adedb11"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CMP={0x18}, @TCF_EM_IPT={0xd0, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0x8d, 0x5, "d3ef4b5f0c02ddcee507cd158d1b495344bf07ac19644066441a023f304622f6f71d748435492c54444d2762f2653aaa21dbcce8f3084e75645a452f61d81e8867c854c93ebf0a8c9cbd810fbbb5632c16a0d0061120ef79baf0cffb4723d7aa427d62e8aea951750310311608cb05d7ddad5eb30d7c689f17a5983885bb12b6b9fc19042f3a3646e7"}]}}]}]}, @TCA_FLOW_RSHIFT={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @dev}]}}]}, 0x6a8}}, 0x0) (async)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000000}, 0x0, 0x7, 0xffffffffffffffff, 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40500000000000071107500000000004600000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd52}, 0x90) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) (async)
socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12)
openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64)
socketpair(0x0, 0x1, 0x0, 0x0) (rerun: 64)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x100340, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000db00000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socket(0x10, 0x803, 0x0)

310.292895ms ago: executing program 1 (id=1723):
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200))
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x0, 0x11, 0x148, 0x200, 0x0, 0x200, 0x2a8, 0x2a8, 0x200, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {0xffffffffffffffff}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ttl={{0x28}}, @common=@unspec=@statistic={{0x38}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1a1)
syz_open_dev$tty20(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00'}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
dup(0xffffffffffffffff)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b31, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000002080)={0x8, {"a2e3ad214fc752f91b5d33f70b06d038e7ff7fc6e5539b325d098b089b3b08381a090890e0878f0e1a9be7049b3344959b5d9a240c872adb988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08c4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e800ba9abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40d4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889632b3570243f989cce3803f465e41e610c2021d653a5520094ec79553299388b0000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c2d88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b19bb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0545359bafffa452370000000010403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae2d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e709000000000000004fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83000000000000010058b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff7544130700000000000000f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc6c71737b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b93903000000000000001c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f9354b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c558069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae0000000000000007eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c73144f8e4a737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c10613d17ca51075f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb401000000608d6f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655bff4801784c416b22f73d32d678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d7000bdbfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d6245939241a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f4820000000000000900a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78cd7d79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2e0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77900b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15f2dbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af500ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000eeffffffffffffff00000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)
write$selinux_context(0xffffffffffffffff, &(0x7f00000003c0)='system_u:object_r:restorecond_exec_t:s0\x00', 0x28)

215.770162ms ago: executing program 2 (id=1725):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f0000000100)) (async)
pipe(&(0x7f0000000100))
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r1)
close(r1) (async)
close(r1)
r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_setup(0x24fe, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000000)) (async)
r4 = syz_io_uring_setup(0x24fe, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @empty}})
io_uring_enter(r4, 0x3ce5, 0x0, 0x2, 0x0, 0x0) (async)
io_uring_enter(r4, 0x3ce5, 0x0, 0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0) (async)
listen(0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xb}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0x4, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0) (async)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xb}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0x4, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x5}, {0x5}, {0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)

214.659402ms ago: executing program 3 (id=1726):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x2, 0x9, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000380)}, 0x20)
set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{}, {0xe}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

185.305374ms ago: executing program 3 (id=1727):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
shutdown(r0, 0x1)
mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',w\"dno=', @ANYRESHEX=r0])

133.915819ms ago: executing program 3 (id=1728):
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x8, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0) (async)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000010000104000000000008000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000038001280110001006272696467655f736c6176650000000020000580060002000000000005001900000000000800030008"], 0x58}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000010000104000000000008000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000038001280110001006272696467655f736c6176650000000020000580060002000000000005001900000000000800030008"], 0x58}}, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000380)='./file0\x00', 0x42000a01)
r6 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
write(r0, &(0x7f0000000600)="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", 0x200)
r7 = open(&(0x7f0000000140)='./file1\x00', 0x10b0c2, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
copy_file_range(r6, 0x0, r7, 0x0, 0x200, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') (async)
r9 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r9, 0x0, 0x4) (async)
lseek(r9, 0x0, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000008004c0000440000000000069078ac141400b557b8e4515d67d8000002ac1414bbe00000028907d70000000089000056aa0000000000b7c793ad49212a9c8b8116ce0d29507660a4cc9c178fd93ccf77b65c7d4475cb9771a71c441bc09e67bfdf97273a94df9f6234026de669615702b9e36c7a198ad3ce581939c9ff2c6255ab6b762f69e75215be0812d692f9a231310de791da8f1b13d927b61cbdcf97ad2978af2850e1f63c70b7", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0)

867.13µs ago: executing program 0 (id=1729):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x70, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @private1}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r5}}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f00000000c0)}, 0x20)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$sock_int(r6, 0x6, 0x9, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000940)={0x74, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x880)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x1a000)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, 0x0)
sendmmsg$inet(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)="56a2f8fac12fe62412557d0b93fc068856edc93245b17f26836f3a849ac0bc787d12f69f827ada300c49140da769dbceb28e7084b0ce5189570095c98f76d297fe789cbf1cd1153469e8b01ab14fedbe", 0x50}], 0x1}}], 0x2, 0x0)
sendto$inet(r1, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, <r10=>0x0}, &(0x7f0000000280)=0x5)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r12, @ANYBLOB="010000000000000000000100000008000100", @ANYRESHEX], 0x8c}}, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000008}, 0xc, &(0x7f0000000200)={&(0x7f0000000b00)={0x154, 0x1d, 0x800, 0x70bd25, 0x25dfdbfb, {0xb}, [@generic="f8327b44433a44798fb9fc60f3942c66f6010eb1a459fc9acba929e037318a675d17df7788c073db4cc5ba223b9b0f26ea29", @nested={0x10c, 0x146, 0x0, 0x1, [@typed={0x8, 0xbe, 0x0, 0x0, @fd=r2}, @generic="d4d0401e9b076ee985b722819b91", @generic="65a2dd4aa4f3fac0510eb07f0083c6932666321cdff89c1aa070cd157bcd255988d8956aa1ae264f30b719d508f1a29890ee63496ded5f7a75fb97c18c785f6b9f9608e2591e02cb0b36bb2522b0e80f7e16dd68c2106399e292372c23a6484e42acecdd948b47a8f273f0a7d4dbf21e7e53b93a0409186087ffc34f2b4d17b7eab861395abc1bf6441a37cdca510b62f1e15c0f665a8ce17bb7ae906cdb4dd19d5b804ca0936d5bfc11530a245bf569f130ab920cc35cfc64bcbe47226313ba2664545ca508216e83689a4dfc03c8a4a405484a486a257363dcaf530b1dca31895caed318ec", @typed={0x4, 0x29}, @typed={0x8, 0x34, 0x0, 0x0, @fd=r11}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4}, 0x6040800)
setuid(r10)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x4e22, 0x4, 0x4e21, 0xa, 0x2, 0xa0, 0xc0, 0x89, r8, r10}, {0x9, 0x10, 0xffff, 0x8, 0x67080000000, 0x4, 0xa4, 0x7fffffff}, {0x1, 0x7, 0x80000001, 0x5}, 0x1, 0x0, 0x1, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x2b}, 0xa, @in6=@remote, 0x3502, 0x2, 0x2, 0xf9, 0x401, 0x2, 0x9}}, 0xe8)

651.63µs ago: executing program 3 (id=1730):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x330, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_virt_wifi\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x28c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x274, 0x6, [@m_ife={0x1a8, 0x0, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c}]}, {0x11d, 0x6, "21b2caeba32a6f7c5900697624a17b85a9db3a31b129a4976a84cfb4f5d651fd8aa24a645c8f63c025fcca463a6b79a3d7e6c9a8b89a140805ef63939ac2e37b49004b0dc3b8446aa7038eceef52fe7bdca153fe865c65015a3b208b282c16472e451aa10a8631235c49cae271f5fc8ce5e34d9938e3d5f43ac7a0e31b0acfc73199ca90e81246819f4c740a4fa3247a2af88d6569da09be7179b89f9f024c9f465098a5a52058a431206bee68089bddc13ffe76ff0f000053fa1517700a54d423c13fb6732a5d39c87101b0882ccd8e86eb437849e249675c60d8a9cf9430b6aa206e8116810b35151fce1e1bf48c2b9cbf0728c53ba121a82f52d6365ff203b02c074528c59a49843dd5cd36ce48d9ed8513e383a84e4367"}, {0xc}, {0xc}}}, @m_nat={0x44, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x19, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba"}, {0xc}, {0xc}}}, @m_csum={0x48, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x19, 0x6, "e9ff252f83b1f3f6b426a360538af449f620cbff2a"}, {0xc}, {0xc}}}, @m_bpf={0x3c, 0x0, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x330}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x38}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x844}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

211.42µs ago: executing program 3 (id=1731):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="8b"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
unshare(0x600)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1)
r1 = open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xb}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4f}, [@call]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
fadvise64(r1, 0x0, 0x0, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000000), 0x4)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x76, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000200)='./file1\x00', 0x48740, 0x0)
r5 = syz_open_procfs(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(0x0)
io_setup(0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0}, 0x90)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3, 0x1c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'})
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000080)="11000000190025000307f4f9002304000a", 0x11)

0s ago: executing program 3 (id=1732):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x5, 0x7, 0x2520, r0, 0x10000, '\x00', 0x0, r0, 0x1, 0x2, 0x5, 0x9}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0)
r6 = socket(0x28, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005ff00", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r7, @ANYRESHEX=r6], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xb3ff, 0x162c60cb], 0x0, 0x0, &(0x7f00000007c0)=ANY=[]}, 0x78)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0xd8}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCGETS(r0, 0x5401, &(0x7f00000001c0))
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x0, 0x4, 0x8}, 0x48)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a)
socket$inet_udp(0x2, 0x2, 0x0)

kernel console output (not intermixed with test programs):

an_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.543367][   T29] audit: type=1400 audit(1720113899.332:798): avc:  denied  { write } for  pid=6907 comm="syz.2.1104" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0"
[   81.547629][ T6478] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.590160][ T6597] veth0_vlan: entered promiscuous mode
[   81.617008][ T6908] syzkaller0: entered promiscuous mode
[   81.622579][ T6908] syzkaller0: entered allmulticast mode
[   81.644073][ T6597] veth1_vlan: entered promiscuous mode
[   81.661827][   T29] audit: type=1400 audit(1720113899.452:799): avc:  denied  { read } for  pid=6924 comm="syz.0.1108" name="file5" dev="tmpfs" ino=401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   81.684137][   T29] audit: type=1400 audit(1720113899.452:800): avc:  denied  { ioctl } for  pid=6924 comm="syz.0.1108" path="/72/file5" dev="tmpfs" ino=401 ioctlcmd=0x70cc scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   81.717903][ T6478] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.726805][ T6478] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.735760][ T6478] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.744549][ T6478] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.768994][   T29] audit: type=1400 audit(1720113899.552:801): avc:  denied  { relabelfrom } for  pid=6907 comm="syz.2.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   81.788810][   T29] audit: type=1400 audit(1720113899.552:802): avc:  denied  { relabelto } for  pid=6907 comm="syz.2.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   81.839655][ T6944] loop0: detected capacity change from 0 to 512
[   81.860670][ T6944] EXT4-fs (loop0): 1 truncate cleaned up
[   81.867165][ T6944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.872092][ T6597] veth0_macvtap: entered promiscuous mode
[   81.903368][ T6597] veth1_macvtap: entered promiscuous mode
[   81.918316][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.919881][ T5537] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.928850][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.948010][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.958549][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.968465][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.979047][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.988987][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.999567][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.011261][ T6597] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.022134][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.032826][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.043107][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.053647][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.063604][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.074288][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.084150][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.094770][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.107542][ T6597] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.139572][ T6951] 9pnet_virtio: no channels available for device 
[   82.147044][ T6597] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.156069][ T6597] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.164796][ T6597] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.173617][ T6597] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.200832][ T6960] loop3: detected capacity change from 0 to 2048
[   82.226073][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'.
[   82.229682][ T6960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.254764][ T6967] loop1: detected capacity change from 0 to 1024
[   82.261875][ T6967] EXT4-fs: Ignoring removed orlov option
[   82.267694][ T6967] EXT4-fs: Ignoring removed nomblk_io_submit option
[   82.278643][ T6967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.295723][ T6390] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.335950][ T6967] loop1: detected capacity change from 1024 to 0
[   82.355691][ T6967] bio_check_eod: 173 callbacks suppressed
[   82.355711][ T6967] syz.1.1058: attempt to access beyond end of device
[   82.355711][ T6967] loop1: rw=524288, sector=10, nr_sectors = 2 limit=0
[   82.378400][ T6967] syz.1.1058: attempt to access beyond end of device
[   82.378400][ T6967] loop1: rw=524288, sector=12, nr_sectors = 2 limit=0
[   82.392257][ T6967] syz.1.1058: attempt to access beyond end of device
[   82.392257][ T6967] loop1: rw=524288, sector=14, nr_sectors = 2 limit=0
[   82.405847][ T6967] syz.1.1058: attempt to access beyond end of device
[   82.405847][ T6967] loop1: rw=524288, sector=18, nr_sectors = 2 limit=0
[   82.420025][ T6967] syz.1.1058: attempt to access beyond end of device
[   82.420025][ T6967] loop1: rw=524288, sector=20, nr_sectors = 2 limit=0
[   82.434081][ T6967] syz.1.1058: attempt to access beyond end of device
[   82.434081][ T6967] loop1: rw=524288, sector=22, nr_sectors = 2 limit=0
[   82.448864][ T6967] syz.1.1058: attempt to access beyond end of device
[   82.448864][ T6967] loop1: rw=524288, sector=24, nr_sectors = 2 limit=0
[   82.460282][ T6980] loop0: detected capacity change from 0 to 512
[   82.462964][ T6967] syz.1.1058: attempt to access beyond end of device
[   82.462964][ T6967] loop1: rw=524288, sector=26, nr_sectors = 2 limit=0
[   82.482367][ T6967] syz.1.1058: attempt to access beyond end of device
[   82.482367][ T6967] loop1: rw=12288, sector=16, nr_sectors = 2 limit=0
[   82.495730][ T6967] EXT4-fs error (device loop1): ext4_get_inode_loc:4495: inode #15: block 8: comm syz.1.1058: unable to read itable block
[   82.508572][ T6967] syz.1.1058: attempt to access beyond end of device
[   82.508572][ T6967] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0
[   82.509455][ T6980] EXT4-fs (loop0): 1 truncate cleaned up
[   82.522022][ T6967] buffer_io_error: 26 callbacks suppressed
[   82.522040][ T6967] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[   82.522084][ T6967] EXT4-fs (loop1): I/O error while writing superblock
[   82.534107][ T6980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.541954][ T6967] EXT4-fs error (device loop1): ext4_get_inode_loc:4495: inode #15: block 8: comm syz.1.1058: unable to read itable block
[   82.542055][ T6967] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[   82.582766][ T6967] EXT4-fs (loop1): I/O error while writing superblock
[   82.589734][ T6967] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: IO failure
[   82.600465][ T5537] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.608593][ T6967] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[   82.618100][ T6967] EXT4-fs (loop1): I/O error while writing superblock
[   82.625016][ T6967] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #15: comm syz.1.1058: mark_inode_dirty error
[   82.636827][ T6967] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[   82.645999][ T6967] EXT4-fs (loop1): I/O error while writing superblock
[   82.646155][ T6967] EXT4-fs error (device loop1): ext4_get_inode_loc:4495: inode #15: block 8: comm syz.1.1058: unable to read itable block
[   82.646250][ T6967] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[   82.646269][ T6967] EXT4-fs (loop1): I/O error while writing superblock
[   82.646282][ T6967] EXT4-fs error (device loop1): ext4_get_max_inline_size:116: inode #15: comm syz.1.1058: can't get inode location 15
[   82.646333][ T6967] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[   82.646364][ T6967] EXT4-fs (loop1): I/O error while writing superblock
[   82.646435][ T6967] EXT4-fs error (device loop1): ext4_get_inode_loc:4495: inode #15: block 8: comm syz.1.1058: unable to read itable block
[   82.646471][ T6967] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[   82.646526][ T6967] EXT4-fs (loop1): I/O error while writing superblock
[   82.667888][ T6597] EXT4-fs error (device loop1): ext4_get_inode_loc:4495: inode #2: block 5: comm syz-executor: unable to read itable block
[   82.750801][ T6597] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[   82.759124][ T6597] EXT4-fs (loop1): I/O error while writing superblock
[   82.765958][ T6597] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: IO failure
[   82.768823][ T6990] loop3: detected capacity change from 0 to 512
[   82.776649][ T6597] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[   82.783609][ T6990] ext4: Unknown parameter 'euid<00000000000000000000'
[   82.796102][ T6597] EXT4-fs (loop1): I/O error while writing superblock
[   82.803151][ T6597] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz-executor: mark_inode_dirty error
[   82.814741][ T6597] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[   82.862041][ T6994] loop0: detected capacity change from 0 to 512
[   82.872042][ T6996] FAULT_INJECTION: forcing a failure.
[   82.872042][ T6996] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   82.885203][ T6996] CPU: 1 PID: 6996 Comm: syz.3.1135 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0
[   82.888632][ T6994] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   82.895305][ T6996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   82.895325][ T6996] Call Trace:
[   82.895334][ T6996]  <TASK>
[   82.895343][ T6996]  dump_stack_lvl+0xf2/0x150
[   82.911555][ T6994] EXT4-fs (loop0): mount failed
[   82.920030][ T6996]  dump_stack+0x15/0x20
[   82.920069][ T6996]  should_fail_ex+0x229/0x230
[   82.944666][ T6996]  should_fail+0xb/0x10
[   82.948846][ T6996]  should_fail_usercopy+0x1a/0x20
[   82.953901][ T6996]  _copy_from_user+0x1e/0xd0
[   82.958680][ T6996]  ____sys_sendmsg+0x1a4/0x410
[   82.963462][ T6996]  __sys_sendmmsg+0x269/0x500
[   82.968165][ T6996]  __x64_sys_sendmmsg+0x57/0x70
[   82.973032][ T6996]  x64_sys_call+0xa87/0x2d70
[   82.977689][ T6996]  do_syscall_64+0xc9/0x1c0
[   82.982204][ T6996]  ? clear_bhb_loop+0x55/0xb0
[   82.986921][ T6996]  ? clear_bhb_loop+0x55/0xb0
[   82.991774][ T6996]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.997797][ T6996] RIP: 0033:0x7feae0ebdbd9
[   83.002219][ T6996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.021953][ T6996] RSP: 002b:00007feae013f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   83.030373][ T6996] RAX: ffffffffffffffda RBX: 00007feae104bf60 RCX: 00007feae0ebdbd9
[   83.038361][ T6996] RDX: 0000000000000001 RSI: 00000000200032c0 RDI: 0000000000000003
[   83.046342][ T6996] RBP: 00007feae013f0a0 R08: 0000000000000000 R09: 0000000000000000
[   83.054345][ T6996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   83.062361][ T6996] R13: 000000000000000b R14: 00007feae104bf60 R15: 00007ffcbc465328
[   83.070346][ T6996]  </TASK>
[   83.109187][ T7004] loop3: detected capacity change from 0 to 512
[   83.121306][ T7004] EXT4-fs (loop3): 1 truncate cleaned up
[   83.127676][ T7004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.153463][ T6390] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.212533][ T7019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1143'.
[   83.229433][ T7025] loop3: detected capacity change from 0 to 512
[   83.236472][ T7025] journal_path: Lookup failure for './file1'
[   83.242581][ T7025] EXT4-fs: error: could not find journal device path
[   83.284730][ T7030] netlink: 'syz.4.1147': attribute type 13 has an invalid length.
[   83.382102][ T7046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1152'.
[   83.481741][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1156'.
[   83.684909][ T7067] loop4: detected capacity change from 0 to 512
[   83.692614][ T7067] EXT4-fs (loop4): corrupt root inode, run e2fsck
[   83.699501][ T7067] EXT4-fs (loop4): mount failed
[   83.791707][ T7078] loop3: detected capacity change from 0 to 512
[   83.798607][ T7078] EXT4-fs (loop3): Unsupported encryption level 9
[   83.811568][ T6359] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.823084][ T7079] FAULT_INJECTION: forcing a failure.
[   83.823084][ T7079] name failslab, interval 1, probability 0, space 0, times 0
[   83.835779][ T7079] CPU: 1 PID: 7079 Comm: syz.4.1162 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0
[   83.845875][ T7079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   83.856021][ T7079] Call Trace:
[   83.859438][ T7079]  <TASK>
[   83.862398][ T7079]  dump_stack_lvl+0xf2/0x150
[   83.867065][ T7079]  dump_stack+0x15/0x20
[   83.871259][ T7079]  should_fail_ex+0x229/0x230
[   83.876132][ T7079]  ? io_alloc_async_data+0x4a/0xb0
[   83.881353][ T7079]  __should_failslab+0x92/0xa0
[   83.886197][ T7079]  should_failslab+0x9/0x20
[   83.890755][ T7079]  __kmalloc_noprof+0xa5/0x370
[   83.895556][ T7079]  io_alloc_async_data+0x4a/0xb0
[   83.900533][ T7079]  io_connect_prep+0x1f6/0x290
[   83.905373][ T7079]  ? io_submit_sqes+0x627/0x1080
[   83.910321][ T7079]  io_submit_sqes+0x64c/0x1080
[   83.915225][ T7079]  ? __rcu_read_unlock+0x4e/0x70
[   83.920218][ T7079]  ? xa_load+0xb9/0xe0
[   83.924369][ T7079]  __se_sys_io_uring_enter+0x1c6/0x15a0
[   83.929957][ T7079]  ? __fget_files+0x1da/0x210
[   83.934690][ T7079]  ? fput+0x13b/0x180
[   83.938686][ T7079]  ? ksys_write+0x178/0x1b0
[   83.943288][ T7079]  __x64_sys_io_uring_enter+0x78/0x90
[   83.948801][ T7079]  x64_sys_call+0x25ab/0x2d70
[   83.953495][ T7079]  do_syscall_64+0xc9/0x1c0
[   83.958234][ T7079]  ? clear_bhb_loop+0x55/0xb0
[   83.962921][ T7079]  ? clear_bhb_loop+0x55/0xb0
[   83.967625][ T7079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.973617][ T7079] RIP: 0033:0x7f8d9aecfbd9
[   83.978062][ T7079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.997794][ T7079] RSP: 002b:00007f8d9a130048 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[   84.006239][ T7079] RAX: ffffffffffffffda RBX: 00007f8d9b05e038 RCX: 00007f8d9aecfbd9
[   84.014348][ T7079] RDX: 0000000000000000 RSI: 00000000000047f9 RDI: 0000000000000000
[   84.022368][ T7079] RBP: 00007f8d9a1300a0 R08: 0000000000000000 R09: 0000000000000000
[   84.030395][ T7079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   84.038504][ T7079] R13: 000000000000006e R14: 00007f8d9b05e038 R15: 00007ffc30bba108
[   84.046577][ T7079]  </TASK>
[   84.108891][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1170'.
[   84.143237][ T7095] loop3: detected capacity change from 0 to 256
[   84.174622][ T7095] FAT-fs (loop3): Directory bread(block 64) failed
[   84.185652][ T7095] FAT-fs (loop3): Directory bread(block 65) failed
[   84.201857][ T7095] FAT-fs (loop3): Directory bread(block 66) failed
[   84.220113][ T7095] FAT-fs (loop3): Directory bread(block 67) failed
[   84.235466][ T7095] FAT-fs (loop3): Directory bread(block 68) failed
[   84.258574][ T7103] loop4: detected capacity change from 0 to 512
[   84.274932][ T7101] loop0: detected capacity change from 0 to 2048
[   84.284712][ T7103] ext4: Unknown parameter 'fsname'
[   84.290274][ T7095] FAT-fs (loop3): Directory bread(block 69) failed
[   84.297484][ T7095] FAT-fs (loop3): Directory bread(block 70) failed
[   84.304116][ T7095] FAT-fs (loop3): Directory bread(block 71) failed
[   84.310767][ T7095] FAT-fs (loop3): Directory bread(block 72) failed
[   84.317422][ T7095] FAT-fs (loop3): Directory bread(block 73) failed
[   84.353244][ T7101]  loop0: p1 < > p2 < > p3 p4 < >
[   84.358343][ T7101] loop0: partition table partially beyond EOD, truncated
[   84.366976][ T7101] loop0: p1 start 2305 is beyond EOD, truncated
[   84.373371][ T7101] loop0: p2 start 4294902784 is beyond EOD, truncated
[   84.380537][ T7101] loop0: p3 start 4278191616 is beyond EOD, truncated
[   84.404545][ T7108] dummy0: entered promiscuous mode
[   84.409948][ T7108] vlan2: entered promiscuous mode
[   84.417916][ T7108] dummy0: left promiscuous mode
[   84.488870][ T7114] tracefs: Unknown parameter 'uidXDyÆ›?
[   84.488870][ T7114] Çûòt’ìrÎ܈c€lp¥²•|Fˆº/.¸ôW�ØÛÒ„Ž‘["<²X[šòÆ�¼Ò#@¯+лª00F äCJ‡Ñý|7G
ïÖ”ãAw;ÎfÿÙ¿Sg0'
[   84.506755][ T7114] netlink: 'syz.4.1176': attribute type 32 has an invalid length.
[   84.514671][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'.
[   84.553651][ T7120] loop2: detected capacity change from 0 to 512
[   84.560477][ T7120] journal_path: Lookup failure for './file1'
[   84.566506][ T7120] EXT4-fs: error: could not find journal device path
[   84.661544][   T29] kauditd_printk_skb: 3 callbacks suppressed
[   84.661561][   T29] audit: type=1400 audit(1720114414.445:805): avc:  denied  { mount } for  pid=7125 comm="syz.2.1181" name="/" dev="ramfs" ino=18268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   84.717364][ T7134] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1183'.
[   84.729318][ T7134] loop4: detected capacity change from 0 to 256
[   84.829729][ T7139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49936 sclass=netlink_route_socket pid=7139 comm=syz.0.1185
[   85.020333][ T7145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1188'.
[   85.039427][ T7147] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1187'.
[   85.076107][ T7151] netlink: 'syz.3.1189': attribute type 4 has an invalid length.
[   85.107503][ T7151] loop3: detected capacity change from 0 to 1024
[   85.114767][ T7151] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   85.132981][ T7151] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   85.143772][ T7151] EXT4-fs error (device loop3): ext4_get_journal_inode:5752: comm syz.3.1189: inode #1: comm syz.3.1189: iget: illegal inode #
[   85.158250][ T7151] EXT4-fs (loop3): no journal found
[   85.163474][ T7151] EXT4-fs (loop3): can't get journal size
[   85.171478][ T7151] EXT4-fs (loop3): failed to initialize system zone (-22)
[   85.181646][ T7151] EXT4-fs (loop3): mount failed
[   85.264903][ T7180] loop4: detected capacity change from 0 to 512
[   85.276376][ T7180] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #17: comm syz.4.1201: iget: bogus i_mode (0)
[   85.288711][ T7180] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1201: couldn't read orphan inode 17 (err -117)
[   85.302937][ T7180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.321438][ T7188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1204'.
[   85.331213][ T6478] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.489575][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1205'.
[   85.526919][ T7212] loop0: detected capacity change from 0 to 136
[   85.541046][   T29] audit: type=1400 audit(1720114415.325:806): avc:  denied  { bind } for  pid=7211 comm="syz.0.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   85.560744][   T29] audit: type=1400 audit(1720114415.325:807): avc:  denied  { mount } for  pid=7211 comm="syz.0.1212" name="/" dev="loop0" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   85.617503][   T29] audit: type=1400 audit(1720114415.405:808): avc:  denied  { accept } for  pid=7227 comm="syz.3.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   85.638274][   T29] audit: type=1400 audit(1720114415.405:809): avc:  denied  { name_bind } for  pid=7227 comm="syz.3.1218" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   85.671800][   T29] audit: type=1400 audit(1720114415.455:810): avc:  denied  { unmount } for  pid=5537 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   85.692912][ T7233] loop2: detected capacity change from 0 to 2048
[   85.708680][ T7233] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   85.718524][ T7233] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   85.748621][ T7238] loop0: detected capacity change from 0 to 2048
[   85.767772][ T5511] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.788501][ T7233] EXT4-fs (loop2): failed to initialize system zone (-117)
[   85.796964][ T7233] EXT4-fs (loop2): mount failed
[   85.802723][ T7238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.828436][ T7238] EXT4-fs error (device loop0): __ext4_new_inode:1070: comm syz.0.1220: reserved inode found cleared - inode=1
[   85.853715][ T5537] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.007154][ T7269] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   86.043913][ T7245] chnl_net:caif_netlink_parms(): no params data found
[   86.071204][ T7276] tipc: Enabling of bearer <eth:macvlan0> rejected, already enabled
[   86.080574][ T7276] FAULT_INJECTION: forcing a failure.
[   86.080574][ T7276] name failslab, interval 1, probability 0, space 0, times 0
[   86.093332][ T7276] CPU: 1 PID: 7276 Comm: syz.0.1228 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0
[   86.103468][ T7276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   86.113569][ T7276] Call Trace:
[   86.116868][ T7276]  <TASK>
[   86.119804][ T7276]  dump_stack_lvl+0xf2/0x150
[   86.124690][ T7276]  dump_stack+0x15/0x20
[   86.128921][ T7276]  should_fail_ex+0x229/0x230
[   86.133616][ T7276]  ? skb_clone+0x154/0x1f0
[   86.138945][ T7276]  __should_failslab+0x92/0xa0
[   86.143735][ T7276]  should_failslab+0x9/0x20
[   86.148253][ T7276]  kmem_cache_alloc_noprof+0x4c/0x290
[   86.153729][ T7276]  skb_clone+0x154/0x1f0
[   86.158192][ T7276]  dev_queue_xmit_nit+0x149/0x620
[   86.163486][ T7276]  dev_hard_start_xmit+0xcc/0x3f0
[   86.168536][ T7276]  ? validate_xmit_skb+0x658/0x8c0
[   86.173836][ T7276]  __dev_queue_xmit+0xf83/0x1e50
[   86.178796][ T7276]  ? should_fail_ex+0xd7/0x230
[   86.183579][ T7276]  ? __dev_queue_xmit+0x161/0x1e50
[   86.188792][ T7276]  ? __skb_clone+0x2d0/0x2f0
[   86.193410][ T7276]  __netlink_deliver_tap+0x39f/0x4c0
[   86.198770][ T7276]  netlink_sendskb+0x123/0x140
[   86.203566][ T7276]  netlink_unicast+0x291/0x660
[   86.208368][ T7276]  tipc_nl_compat_recv+0x237/0x850
[   86.213577][ T7276]  ? __pfx___tipc_nl_bearer_enable+0x10/0x10
[   86.219609][ T7276]  ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10
[   86.226077][ T7276]  genl_rcv_msg+0x61b/0x6c0
[   86.230599][ T7276]  ? __pfx_tipc_nl_compat_recv+0x10/0x10
[   86.236367][ T7276]  netlink_rcv_skb+0x12c/0x230
[   86.241674][ T7276]  ? __pfx_genl_rcv_msg+0x10/0x10
[   86.246766][ T7276]  genl_rcv+0x28/0x40
[   86.250864][ T7276]  netlink_unicast+0x58d/0x660
[   86.255655][ T7276]  netlink_sendmsg+0x5ca/0x6e0
[   86.260497][ T7276]  ? __pfx_netlink_sendmsg+0x10/0x10
[   86.265848][ T7276]  __sock_sendmsg+0x140/0x180
[   86.270542][ T7276]  ____sys_sendmsg+0x312/0x410
[   86.275452][ T7276]  __sys_sendmsg+0x1e9/0x280
[   86.280219][ T7276]  __x64_sys_sendmsg+0x46/0x50
[   86.285104][ T7276]  x64_sys_call+0xb25/0x2d70
[   86.289723][ T7276]  do_syscall_64+0xc9/0x1c0
[   86.294291][ T7276]  ? clear_bhb_loop+0x55/0xb0
[   86.299003][ T7276]  ? clear_bhb_loop+0x55/0xb0
[   86.303742][ T7276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.309644][ T7276] RIP: 0033:0x7f29cdd55bd9
[   86.314054][ T7276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   86.333815][ T7276] RSP: 002b:00007f29ccfd7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   86.342430][ T7276] RAX: ffffffffffffffda RBX: 00007f29cdee3f60 RCX: 00007f29cdd55bd9
[   86.350472][ T7276] RDX: 0000000000000000 RSI: 0000000020001c40 RDI: 0000000000000003
[   86.358842][ T7276] RBP: 00007f29ccfd70a0 R08: 0000000000000000 R09: 0000000000000000
[   86.367006][ T7276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   86.375024][ T7276] R13: 000000000000000b R14: 00007f29cdee3f60 R15: 00007ffc4267ad68
[   86.383049][ T7276]  </TASK>
[   86.407080][ T7239] chnl_net:caif_netlink_parms(): no params data found
[   86.447980][ T7285] loop2: detected capacity change from 0 to 2048
[   86.467517][ T7245] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.474654][ T7245] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.482355][ T7245] bridge_slave_0: entered allmulticast mode
[   86.490332][ T7245] bridge_slave_0: entered promiscuous mode
[   86.503714][ T7245] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.510977][ T7245] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.519800][ T7245] bridge_slave_1: entered allmulticast mode
[   86.527650][ T7245] bridge_slave_1: entered promiscuous mode
[   86.551929][ T7285]  loop2: unable to read partition table
[   86.557911][ T7285] loop2: partition table beyond EOD, truncated
[   86.564462][ T7285] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[   86.581776][ T7245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.591373][ T7239] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.598827][ T7239] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.607214][ T7239] bridge_slave_0: entered allmulticast mode
[   86.613787][ T7239] bridge_slave_0: entered promiscuous mode
[   86.624348][ T7245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.645506][ T7239] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.652642][ T7239] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.659407][ T7297] loop4: detected capacity change from 0 to 1024
[   86.659813][   T29] audit: type=1400 audit(1720114416.435:811): avc:  denied  { read } for  pid=7293 comm="syz.0.1232" name="qrtr-tun" dev="devtmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   86.668387][ T7297] EXT4-fs: Ignoring removed orlov option
[   86.688808][   T29] audit: type=1400 audit(1720114416.435:812): avc:  denied  { open } for  pid=7293 comm="syz.0.1232" path="/dev/qrtr-tun" dev="devtmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   86.688914][   T29] audit: type=1400 audit(1720114416.435:813): avc:  denied  { write } for  pid=7293 comm="syz.0.1232" name="qrtr-tun" dev="devtmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   86.694518][ T7297] EXT4-fs: Ignoring removed nomblk_io_submit option
[   86.720976][   T29] audit: type=1400 audit(1720114416.515:814): avc:  denied  { write } for  pid=7293 comm="syz.0.1232" path="socket:[19223]" dev="sockfs" ino=19223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   86.741419][ T7239] bridge_slave_1: entered allmulticast mode
[   86.779822][ T7239] bridge_slave_1: entered promiscuous mode
[   86.780859][ T7297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.838540][ T7245] team0: Port device team_slave_0 added
[   86.845363][ T7245] team0: Port device team_slave_1 added
[   86.867803][ T7239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.878905][ T6478] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.897866][ T7239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.922192][ T7305] vlan2: entered promiscuous mode
[   86.956418][ T7245] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.963425][ T7245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.989462][ T7245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.002576][ T7239] team0: Port device team_slave_0 added
[   87.009612][ T7239] team0: Port device team_slave_1 added
[   87.033059][ T7245] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.040098][ T7245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.066987][ T7245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.078106][ T7239] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.085110][ T7239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.111649][ T7239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.128472][ T7239] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.135542][ T7239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.161524][ T7239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.200690][ T7239] hsr_slave_0: entered promiscuous mode
[   87.207088][ T7239] hsr_slave_1: entered promiscuous mode
[   87.213229][ T7239] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.222366][ T7239] Cannot create hsr debugfs directory
[   87.231179][ T7245] hsr_slave_0: entered promiscuous mode
[   87.237815][ T7245] hsr_slave_1: entered promiscuous mode
[   87.243833][ T7245] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.251509][ T7245] Cannot create hsr debugfs directory
[   87.307669][ T7336] FAULT_INJECTION: forcing a failure.
[   87.307669][ T7336] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   87.320972][ T7336] CPU: 1 PID: 7336 Comm: syz.0.1245 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0
[   87.331158][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   87.341365][ T7336] Call Trace:
[   87.344660][ T7336]  <TASK>
[   87.347619][ T7336]  dump_stack_lvl+0xf2/0x150
[   87.352229][ T7336]  dump_stack+0x15/0x20
[   87.356426][ T7336]  should_fail_ex+0x229/0x230
[   87.361200][ T7336]  __should_fail_alloc_page+0xfd/0x110
[   87.366706][ T7336]  __alloc_pages_noprof+0x109/0x360
[   87.371980][ T7336]  alloc_pages_mpol_noprof+0xb1/0x1e0
[   87.377366][ T7336]  alloc_pages_noprof+0xe1/0x100
[   87.382329][ T7336]  get_zeroed_page_noprof+0x17/0x40
[   87.387545][ T7336]  uart_startup+0x189/0x720
[   87.392083][ T7336]  uart_ioctl+0x903/0x9b0
[   87.396437][ T7336]  ? do_vfs_ioctl+0x99e/0x1560
[   87.401251][ T7336]  ? tty_jobctrl_ioctl+0x2ab/0x810
[   87.406379][ T7336]  tty_ioctl+0x821/0xbe0
[   87.410638][ T7336]  ? __pfx_tty_ioctl+0x10/0x10
[   87.415464][ T7336]  __se_sys_ioctl+0xd3/0x150
[   87.420224][ T7336]  __x64_sys_ioctl+0x43/0x50
[   87.424854][ T7336]  x64_sys_call+0x1581/0x2d70
[   87.429586][ T7336]  do_syscall_64+0xc9/0x1c0
[   87.434197][ T7336]  ? clear_bhb_loop+0x55/0xb0
[   87.438885][ T7336]  ? clear_bhb_loop+0x55/0xb0
[   87.443645][ T7336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.449567][ T7336] RIP: 0033:0x7f29cdd55bd9
[   87.454020][ T7336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   87.473659][ T7336] RSP: 002b:00007f29ccfd7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   87.482091][ T7336] RAX: ffffffffffffffda RBX: 00007f29cdee3f60 RCX: 00007f29cdd55bd9
[   87.490071][ T7336] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000003
[   87.498057][ T7336] RBP: 00007f29ccfd70a0 R08: 0000000000000000 R09: 0000000000000000
[   87.506037][ T7336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   87.514009][ T7336] R13: 000000000000000b R14: 00007f29cdee3f60 R15: 00007ffc4267ad68
[   87.522014][ T7336]  </TASK>
[   87.536662][ T5511] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.570551][ T7239] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.586986][ T5511] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.650496][ T7239] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.699094][ T5511] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.713877][ T7239] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.760096][ T5511] bridge_slave_1: left allmulticast mode
[   87.765850][ T5511] bridge_slave_1: left promiscuous mode
[   87.771528][ T5511] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.779451][ T5511] bridge_slave_0: left allmulticast mode
[   87.785211][ T5511] bridge_slave_0: left promiscuous mode
[   87.790972][ T5511] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.888760][ T5511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   87.892757][ T7347] program syz.2.1250 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   87.908887][ T5511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   87.921301][ T5511] bond0 (unregistering): Released all slaves
[   87.926186][ T7349] loop2: detected capacity change from 0 to 512
[   87.934729][ T7349] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   87.943918][ T7349] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   87.952782][ T7349] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[   87.955386][ T7239] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.963470][ T7349] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   87.980793][ T7349] System zones: 0-2, 18-18, 34-34
[   87.986474][ T7349] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   88.001405][ T7349] EXT4-fs (loop2): 1 truncate cleaned up
[   88.007850][ T7349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.030575][ T6359] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.080132][ T5511] hsr_slave_0: left promiscuous mode
[   88.086313][ T5511] hsr_slave_1: left promiscuous mode
[   88.092364][ T5511] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.099992][ T5511] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.108009][ T5511] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.115504][ T5511] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.124874][ T5511] veth1_macvtap: left promiscuous mode
[   88.130565][ T5511] veth0_macvtap: left promiscuous mode
[   88.136288][ T5511] veth1_vlan: left promiscuous mode
[   88.141633][ T5511] veth0_vlan: left promiscuous mode
[   88.233205][ T5511] team0 (unregistering): Port device team_slave_1 removed
[   88.243850][ T5511] team0 (unregistering): Port device team_slave_0 removed
[   88.426131][ T7365] __nla_validate_parse: 4 callbacks suppressed
[   88.426202][ T7365] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1254'.
[   88.441438][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'.
[   88.515038][ T7379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1259'.
[   88.524049][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1259'.
[   88.554661][ T7245] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.568183][ T7245] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.579270][ T7245] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.592190][ T7245] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.606930][ T7239] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   88.615755][ T7239] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   88.624830][ T7239] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   88.636064][ T7239] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   88.703274][ T7245] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.724306][ T7245] 8021q: adding VLAN 0 to HW filter on device team0
[   88.742256][ T5511] bridge_slave_1: left allmulticast mode
[   88.748194][ T5511] bridge_slave_1: left promiscuous mode
[   88.754141][ T5511] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.762478][ T5511] bridge_slave_0: left allmulticast mode
[   88.762499][ T5511] bridge_slave_0: left promiscuous mode
[   88.762671][ T5511] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.773966][ T7399] loop4: detected capacity change from 0 to 512
[   88.820428][ T7399] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6
[   88.844481][ T7404] loop0: detected capacity change from 0 to 2048
[   88.885739][ T7404]  loop0: p1 p2 p4
[   88.890721][ T7404] loop0: p4 start 4294967040 is beyond EOD, truncated
[   88.927811][ T5511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   88.939164][ T5511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   88.950955][ T5511] bond0 (unregistering): Released all slaves
[   88.968402][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.975578][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.984852][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.992052][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.014390][ T7239] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.039450][ T7239] 8021q: adding VLAN 0 to HW filter on device team0
[   89.052210][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.052252][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.053584][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.053623][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.091098][ T5511] hsr_slave_0: left promiscuous mode
[   89.096508][ T5511] hsr_slave_1: left promiscuous mode
[   89.102324][ T5511] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.102372][ T5511] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.102916][ T5511] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.124520][ T5511] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.134010][ T5511] veth1_macvtap: left promiscuous mode
[   89.134037][ T5511] veth0_macvtap: left promiscuous mode
[   89.134227][ T5511] veth1_vlan: left promiscuous mode
[   89.150965][ T5511] veth0_vlan: left promiscuous mode
[   89.238938][ T5511] team0 (unregistering): Port device team_slave_1 removed
[   89.250423][ T5511] team0 (unregistering): Port device team_slave_0 removed
[   89.362707][ T7245] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.391688][ T7239] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.432531][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'.
[   89.475768][ T7453] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1279'.
[   89.484980][ T7453] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1279'.
[   89.527033][ T7245] veth0_vlan: entered promiscuous mode
[   89.539022][ T7245] veth1_vlan: entered promiscuous mode
[   89.560892][ T7239] veth0_vlan: entered promiscuous mode
[   89.572912][ T7239] veth1_vlan: entered promiscuous mode
[   89.582033][ T7245] veth0_macvtap: entered promiscuous mode
[   89.590887][ T7245] veth1_macvtap: entered promiscuous mode
[   89.602043][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.611033][ T7465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1282'.
[   89.612593][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.623356][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'.
[   89.631426][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.650825][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.650846][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.671241][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.682115][ T7245] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.692537][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.703107][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.713154][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.723792][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.733767][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.744370][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.755249][ T7245] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.765135][ T7245] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.773933][ T7245] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.782784][ T7245] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.791529][ T7245] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.814819][ T7239] veth0_macvtap: entered promiscuous mode
[   89.823440][ T7239] veth1_macvtap: entered promiscuous mode
[   89.842339][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.852917][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.862902][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.873445][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.883331][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.893922][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.903980][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.914475][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.925995][ T7239] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.940618][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.951195][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.961146][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.971948][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.982106][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.992719][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.002623][ T7239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.013156][ T7239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.024036][ T7239] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.042469][ T7239] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.045298][ T7469] loop4: detected capacity change from 0 to 1024
[   90.051445][ T7239] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.058578][ T7469] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   90.066448][ T7239] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.083978][ T7239] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.144416][   T29] kauditd_printk_skb: 10 callbacks suppressed
[   90.144434][   T29] audit: type=1400 audit(1720114419.925:825): avc:  denied  { ioctl } for  pid=7470 comm="syz.1.1223" path="socket:[20351]" dev="sockfs" ino=20351 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   90.230225][ T7487] sctp: [Deprecated]: syz.4.1287 (pid 7487) Use of int in maxseg socket option.
[   90.230225][ T7487] Use struct sctp_assoc_value instead
[   90.236898][ T7488] loop3: detected capacity change from 0 to 512
[   90.279027][ T7488] loop3: detected capacity change from 0 to 512
[   90.312194][ T7489] 9pnet: Could not find request transport: f
[   90.397251][   T29] audit: type=1400 audit(1720114420.185:826): avc:  denied  { execute } for  pid=7496 comm="syz.0.1290" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B64202097F5479741C2D8F05571E62BA56C940BB607175CFB0421E4C4B1A21CFF433B94510DB67D9CEC430BCFEBE49A52E52C8203202864656C6574656429 dev="hugetlbfs" ino=20887 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   90.461981][ T7502] netlink: 'syz.2.1292': attribute type 21 has an invalid length.
[   90.469977][ T7502] netlink: 'syz.2.1292': attribute type 6 has an invalid length.
[   90.519816][ T7506] vxcan1: tx address claim with different name
[   90.526843][   T29] audit: type=1400 audit(1720114420.315:827): avc:  denied  { wake_alarm } for  pid=7505 comm="syz.0.1294" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   90.586641][ T7504] loop2: detected capacity change from 0 to 512
[   90.594990][ T7504] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.1293: casefold flag without casefold feature
[   90.597922][ T7508] syzkaller0: entered promiscuous mode
[   90.609799][ T7504] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1293: couldn't read orphan inode 15 (err -117)
[   90.613183][ T7508] syzkaller0: entered allmulticast mode
[   90.631396][ T7504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.695725][ T7504] support for cryptoloop has been removed.  Use dm-crypt instead.
[   90.893674][ T7524] xt_bpf: check failed: parse error
[   91.096127][ T7531] xt_hashlimit: overflow, try lower: 0/0
[   91.113428][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1304'.
[   91.200816][   T29] audit: type=1400 audit(1720114420.985:828): avc:  denied  { connect } for  pid=7541 comm="syz.3.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   91.371342][ T6359] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.976579][ T7561] loop2: detected capacity change from 0 to 512
[   91.983525][ T7561] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   92.171919][ T7593] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[   92.180246][ T7593] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[   92.189771][   T29] audit: type=1326 audit(1720114421.985:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.4.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9aecfbd9 code=0x7ffc0000
[   92.213227][   T29] audit: type=1326 audit(1720114421.985:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.4.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9aecfbd9 code=0x7ffc0000
[   92.237542][   T29] audit: type=1326 audit(1720114421.985:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.4.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d9aecfbd9 code=0x7ffc0000
[   92.262585][   T29] audit: type=1326 audit(1720114421.985:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.4.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9aecfbd9 code=0x7ffc0000
[   92.286208][   T29] audit: type=1326 audit(1720114421.985:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.4.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8d9aecfbd9 code=0x7ffc0000
[   92.309701][   T29] audit: type=1326 audit(1720114421.985:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.4.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9aecfbd9 code=0x7ffc0000
[   92.928353][ T7597] netlink: 'syz.3.1327': attribute type 27 has an invalid length.
[   92.940320][ T7597] loop3: detected capacity change from 0 to 256
[   93.000597][ T7607] loop4: detected capacity change from 0 to 2048
[   93.017686][ T7607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.068291][ T7617] program syz.3.1335 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   93.092275][ T7618] netlink: 'syz.4.1333': attribute type 2 has an invalid length.
[   93.101998][ T7618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=7618 comm=syz.4.1333
[   93.229762][ T7635] sctp: [Deprecated]: syz.3.1341 (pid 7635) Use of struct sctp_assoc_value in delayed_ack socket option.
[   93.229762][ T7635] Use struct sctp_sack_info instead
[   93.325854][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[   93.403976][ T7653] FAULT_INJECTION: forcing a failure.
[   93.403976][ T7653] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   93.417159][ T7653] CPU: 0 PID: 7653 Comm: syz.3.1348 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0
[   93.427263][ T7653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   93.437844][ T7653] Call Trace:
[   93.441220][ T7653]  <TASK>
[   93.444233][ T7653]  dump_stack_lvl+0xf2/0x150
[   93.448882][ T7653]  dump_stack+0x15/0x20
[   93.453047][ T7653]  should_fail_ex+0x229/0x230
[   93.458216][ T7653]  should_fail+0xb/0x10
[   93.462491][ T7653]  should_fail_usercopy+0x1a/0x20
[   93.467528][ T7653]  _copy_from_user+0x1e/0xd0
[   93.472212][ T7653]  ____sys_sendmsg+0x1a4/0x410
[   93.477013][ T7653]  __sys_sendmmsg+0x269/0x500
[   93.481847][ T7653]  __x64_sys_sendmmsg+0x57/0x70
[   93.486782][ T7653]  x64_sys_call+0xa87/0x2d70
[   93.491508][ T7653]  do_syscall_64+0xc9/0x1c0
[   93.496052][ T7653]  ? clear_bhb_loop+0x55/0xb0
[   93.500954][ T7653]  ? clear_bhb_loop+0x55/0xb0
[   93.505892][ T7653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.511920][ T7653] RIP: 0033:0x7ff12b8efbd9
[   93.516370][ T7653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.536071][ T7653] RSP: 002b:00007ff12ab71048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   93.544508][ T7653] RAX: ffffffffffffffda RBX: 00007ff12ba7df60 RCX: 00007ff12b8efbd9
[   93.552524][ T7653] RDX: 0000000000000001 RSI: 00000000200032c0 RDI: 0000000000000004
[   93.560508][ T7653] RBP: 00007ff12ab710a0 R08: 0000000000000000 R09: 0000000000000000
[   93.568534][ T7653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   93.576549][ T7653] R13: 000000000000000b R14: 00007ff12ba7df60 R15: 00007fffd60e3898
[   93.584715][ T7653]  </TASK>
[   93.608791][ T7655] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'uid'
[   93.608791][ T7655] 
[   93.622531][ T7657] FAULT_INJECTION: forcing a failure.
[   93.622531][ T7657] name failslab, interval 1, probability 0, space 0, times 0
[   93.635460][ T7657] CPU: 0 PID: 7657 Comm: syz.3.1350 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0
[   93.645581][ T7657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   93.656014][ T7657] Call Trace:
[   93.659294][ T7657]  <TASK>
[   93.662283][ T7657]  dump_stack_lvl+0xf2/0x150
[   93.666908][ T7657]  dump_stack+0x15/0x20
[   93.671135][ T7657]  should_fail_ex+0x229/0x230
[   93.675828][ T7657]  ? __kernfs_new_node+0x6a/0x380
[   93.680907][ T7657]  __should_failslab+0x92/0xa0
[   93.685689][ T7657]  should_failslab+0x9/0x20
[   93.690202][ T7657]  kmem_cache_alloc_noprof+0x4c/0x290
[   93.695623][ T7657]  __kernfs_new_node+0x6a/0x380
[   93.700519][ T7657]  ? rb_insert_color+0x263/0x290
[   93.705484][ T7657]  ? up_write+0x30/0xf0
[   93.709652][ T7657]  ? kernfs_activate+0x256/0x270
[   93.714655][ T7657]  kernfs_new_node+0xc8/0x140
[   93.719439][ T7657]  __kernfs_create_file+0x49/0x180
[   93.724622][ T7657]  ? __pfx_dev_attr_store+0x10/0x10
[   93.729833][ T7657]  sysfs_add_file_mode_ns+0x136/0x1c0
[   93.735314][ T7657]  internal_create_group+0x464/0x9b0
[   93.740724][ T7657]  sysfs_create_groups+0x3c/0xe0
[   93.745761][ T7657]  device_add_attrs+0x69/0x400
[   93.750643][ T7657]  ? kobject_put+0x107/0x180
[   93.755276][ T7657]  device_add+0x38d/0x790
[   93.759613][ T7657]  netdev_register_kobject+0x100/0x230
[   93.765077][ T7657]  register_netdevice+0x8b9/0xdd0
[   93.770159][ T7657]  bond_newlink+0x3b/0x90
[   93.774617][ T7657]  ? __pfx_bond_newlink+0x10/0x10
[   93.779715][ T7657]  rtnl_newlink+0xefd/0x1690
[   93.784313][ T7657]  ? __list_del_entry_valid_or_report+0x5f/0xf0
[   93.790602][ T7657]  ? _raw_spin_unlock+0x26/0x50
[   93.795640][ T7657]  ? __mutex_lock+0x221/0x8e0
[   93.800401][ T7657]  ? __pfx_rtnl_newlink+0x10/0x10
[   93.805484][ T7657]  rtnetlink_rcv_msg+0x85e/0x910
[   93.810430][ T7657]  ? memcg_list_lru_alloc+0xd2/0x740
[   93.815800][ T7657]  ? mod_objcg_state+0x2e2/0x4e0
[   93.820771][ T7657]  ? __memcg_slab_post_alloc_hook+0x4d1/0x650
[   93.826861][ T7657]  ? xas_load+0x3ae/0x3d0
[   93.831271][ T7657]  ? skb_release_data+0x583/0x5a0
[   93.836313][ T7657]  ? kmem_cache_free+0xd8/0x280
[   93.841195][ T7657]  ? nlmon_xmit+0x51/0x60
[   93.845593][ T7657]  ? __kfree_skb+0x102/0x150
[   93.850395][ T7657]  ? consume_skb+0x57/0x180
[   93.854903][ T7657]  ? nlmon_xmit+0x51/0x60
[   93.859271][ T7657]  ? dev_hard_start_xmit+0x3c1/0x3f0
[   93.864565][ T7657]  ? __dev_queue_xmit+0xb21/0x1e50
[   93.869841][ T7657]  ? ref_tracker_free+0x3a5/0x410
[   93.874967][ T7657]  netlink_rcv_skb+0x12c/0x230
[   93.879763][ T7657]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   93.885291][ T7657]  rtnetlink_rcv+0x1c/0x30
[   93.889736][ T7657]  netlink_unicast+0x58d/0x660
[   93.894533][ T7657]  netlink_sendmsg+0x5ca/0x6e0
[   93.899367][ T7657]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.904758][ T7657]  __sock_sendmsg+0x140/0x180
[   93.909476][ T7657]  ____sys_sendmsg+0x312/0x410
[   93.914280][ T7657]  __sys_sendmsg+0x1e9/0x280
[   93.918974][ T7657]  __x64_sys_sendmsg+0x46/0x50
[   93.923775][ T7657]  x64_sys_call+0xb25/0x2d70
[   93.928433][ T7657]  do_syscall_64+0xc9/0x1c0
[   93.932955][ T7657]  ? clear_bhb_loop+0x55/0xb0
[   93.937720][ T7657]  ? clear_bhb_loop+0x55/0xb0
[   93.942459][ T7657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.948470][ T7657] RIP: 0033:0x7ff12b8efbd9
[   93.952963][ T7657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.972589][ T7657] RSP: 002b:00007ff12ab71048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   93.981029][ T7657] RAX: ffffffffffffffda RBX: 00007ff12ba7df60 RCX: 00007ff12b8efbd9
[   93.989066][ T7657] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000006
[   93.997308][ T7657] RBP: 00007ff12ab710a0 R08: 0000000000000000 R09: 0000000000000000
[   94.005353][ T7657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   94.013649][ T7657] R13: 000000000000000b R14: 00007ff12ba7df60 R15: 00007fffd60e3898
[   94.021748][ T7657]  </TASK>
[   94.026494][ T7657] bond1 (unregistered): Released all slaves
[   94.045641][ T6478] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.107767][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[   94.125689][ T7681] __nla_validate_parse: 8 callbacks suppressed
[   94.125787][ T7681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1354'.
[   94.133959][ T7675] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1356'.
[   94.166102][ T7684] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1357'.
[   94.170688][ T7675] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1356'.
[   94.186238][ T7675] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1356'.
[   94.197791][ T7665] veth3: entered allmulticast mode
[   94.224786][ T7684] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1357'.
[   94.317604][ T7712] bridge: RTM_NEWNEIGH with invalid state 0x0
[   94.383272][ T7723] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1360'.
[   94.489524][ T7741] loop4: detected capacity change from 0 to 4096
[   94.503389][ T7741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.522611][ T7749] loop0: detected capacity change from 0 to 512
[   94.545822][ T6478] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.547885][ T7749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.568038][ T7749] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   94.604094][ T5537] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.629241][ T7758] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551359)
[   94.639715][ T7758] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[   94.670268][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1381'.
[   94.688494][ T7764] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1380'.
[   94.698298][ T7764] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1380'.
[   94.731561][ T7766] program syz.1.1382 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   94.827344][ T7791] netlink: 'syz.0.1388': attribute type 8 has an invalid length.
[   95.082702][ T7822] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[   95.090886][ T7822] macsec1: entered promiscuous mode
[   95.098988][ T7822] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[   95.119181][ T7820] FAULT_INJECTION: forcing a failure.
[   95.119181][ T7820] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   95.132371][ T7820] CPU: 1 PID: 7820 Comm: syz.4.1399 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0
[   95.141949][ T7829] FAULT_INJECTION: forcing a failure.
[   95.141949][ T7829] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   95.142514][ T7820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   95.165850][ T7820] Call Trace:
[   95.169194][ T7820]  <TASK>
[   95.172137][ T7820]  dump_stack_lvl+0xf2/0x150
[   95.176848][ T7820]  dump_stack+0x15/0x20
[   95.181016][ T7820]  should_fail_ex+0x229/0x230
[   95.185739][ T7820]  should_fail+0xb/0x10
[   95.189929][ T7820]  should_fail_usercopy+0x1a/0x20
[   95.195001][ T7820]  _copy_to_user+0x1e/0xa0
[   95.199622][ T7820]  simple_read_from_buffer+0xa0/0x110
[   95.205024][ T7820]  proc_fail_nth_read+0xfc/0x140
[   95.209987][ T7820]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   95.215626][ T7820]  vfs_read+0x1a2/0x6e0
[   95.219791][ T7820]  ? __rcu_read_unlock+0x4e/0x70
[   95.224755][ T7820]  ? __fget_files+0x1da/0x210
[   95.229636][ T7820]  ksys_read+0xeb/0x1b0
[   95.234019][ T7820]  __x64_sys_read+0x42/0x50
[   95.238541][ T7820]  x64_sys_call+0x27e5/0x2d70
[   95.243233][ T7820]  do_syscall_64+0xc9/0x1c0
[   95.247908][ T7820]  ? clear_bhb_loop+0x55/0xb0
[   95.252700][ T7820]  ? clear_bhb_loop+0x55/0xb0
[   95.257532][ T7820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.263695][ T7820] RIP: 0033:0x7f8d9aece6bc
[   95.268196][ T7820] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48
[   95.287918][ T7820] RSP: 002b:00007f8d9a151040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   95.296381][ T7820] RAX: ffffffffffffffda RBX: 00007f8d9b05df60 RCX: 00007f8d9aece6bc
[   95.304416][ T7820] RDX: 000000000000000f RSI: 00007f8d9a1510b0 RDI: 000000000000000d
[   95.312398][ T7820] RBP: 00007f8d9a1510a0 R08: 0000000000000000 R09: 0000000000000000
[   95.320379][ T7820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   95.328463][ T7820] R13: 000000000000000b R14: 00007f8d9b05df60 R15: 00007ffc30bba108
[   95.336446][ T7820]  </TASK>
[   95.339469][ T7829] CPU: 0 PID: 7829 Comm: syz.0.1401 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0
[   95.349591][ T7829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   95.359752][ T7829] Call Trace:
[   95.363098][ T7829]  <TASK>
[   95.366040][ T7829]  dump_stack_lvl+0xf2/0x150
[   95.370670][ T7829]  dump_stack+0x15/0x20
[   95.371909][ T7832] loop2: detected capacity change from 0 to 2048
[   95.374841][ T7829]  should_fail_ex+0x229/0x230
[   95.385889][ T7829]  should_fail+0xb/0x10
[   95.390190][ T7829]  should_fail_usercopy+0x1a/0x20
[   95.395333][ T7829]  _copy_from_user+0x1e/0xd0
[   95.399982][ T7829]  input_event_from_user+0x126/0x1e0
[   95.405296][ T7829]  ? input_inject_event+0xe1/0x100
[   95.410506][ T7829]  evdev_write+0x288/0x420
[   95.415032][ T7829]  ? __pfx_evdev_write+0x10/0x10
[   95.420009][ T7829]  vfs_write+0x28b/0x900
[   95.424302][ T7829]  ? __fget_files+0x1da/0x210
[   95.429057][ T7829]  ksys_write+0xeb/0x1b0
[   95.433348][ T7829]  __x64_sys_write+0x42/0x50
[   95.437981][ T7829]  x64_sys_call+0x27ef/0x2d70
[   95.442673][ T7829]  do_syscall_64+0xc9/0x1c0
[   95.447312][ T7829]  ? clear_bhb_loop+0x55/0xb0
[   95.452118][ T7829]  ? clear_bhb_loop+0x55/0xb0
[   95.456830][ T7829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.462754][ T7829] RIP: 0033:0x7f29cdd55bd9
[   95.467208][ T7829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.486835][ T7829] RSP: 002b:00007f29ccfb6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   95.495374][ T7829] RAX: ffffffffffffffda RBX: 00007f29cdee4038 RCX: 00007f29cdd55bd9
[   95.503403][ T7829] RDX: 0000000000001068 RSI: 0000000020000040 RDI: 0000000000000005
[   95.511418][ T7829] RBP: 00007f29ccfb60a0 R08: 0000000000000000 R09: 0000000000000000
[   95.519511][ T7829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   95.527487][ T7829] R13: 000000000000006e R14: 00007f29cdee4038 R15: 00007ffc4267ad68
[   95.535475][ T7829]  </TASK>
[   95.549095][ T7832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.577975][ T6359] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.604594][ T7845] netlink: 'syz.3.1407': attribute type 7 has an invalid length.
[   95.624225][ T7845] veth3: entered allmulticast mode
[   95.640277][ T7849] loop2: detected capacity change from 0 to 512
[   95.657869][ T7847] loop4: detected capacity change from 0 to 512
[   95.666124][ T7847] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   95.678723][ T7851] loop1: detected capacity change from 0 to 128
[   95.680156][ T7847] EXT4-fs (loop4): 1 truncate cleaned up
[   95.692033][ T7851] FAT-fs (loop1): bogus logical sector size 0
[   95.698252][ T7851] FAT-fs (loop1): Can't find a valid FAT filesystem
[   95.763714][ T7862] loop4: detected capacity change from 0 to 512
[   95.777305][ T7862] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   95.785287][ T7862] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[   95.793734][ T7862] System zones: 0-1, 15-15, 18-18, 34-34
[   95.800804][ T7862] EXT4-fs (loop4): orphan cleanup on readonly fs
[   95.807414][ T7862] __quota_error: 10 callbacks suppressed
[   95.807430][ T7862] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0
[   95.823864][ T7862] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   95.838580][ T7862] EXT4-fs (loop4): Cannot turn on quotas: error -22
[   95.850603][ T7862] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz.4.1413: bad orphan inode 16
[   95.863237][   T29] audit: type=1400 audit(1720114425.645:845): avc:  denied  { name_bind } for  pid=7866 comm="syz.1.1415" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   95.886857][ T7862] ext4_test_bit(bit=15, block=18) = 1
[   95.886879][ T7862] is_bad_inode(inode)=0
[   95.886887][ T7862] NEXT_ORPHAN(inode)=0
[   95.886893][ T7862] max_ino=32
[   95.886899][ T7862] i_nlink=2
[   95.896973][ T7862] tipc: Started in network mode
[   95.896988][ T7862] tipc: Node identity f0, cluster identity 4711
[   95.897000][ T7862] tipc: Node number set to 240
[   95.935497][   T29] audit: type=1400 audit(1720114425.715:846): avc:  denied  { watch_reads } for  pid=7872 comm="syz.2.1418" path="/71" dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   96.031902][ T7886] tc_dump_action: action bad kind
[   96.035724][ T7890] loop4: detected capacity change from 0 to 512
[   96.063673][ T7890] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.1420: casefold flag without casefold feature
[   96.102358][ T7890] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1420: couldn't read orphan inode 15 (err -117)
[   96.115962][ T7898] FAULT_INJECTION: forcing a failure.
[   96.115962][ T7898] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   96.129235][ T7898] CPU: 1 PID: 7898 Comm: syz.0.1427 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0
[   96.139359][ T7898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   96.149487][ T7898] Call Trace:
[   96.152926][ T7898]  <TASK>
[   96.156087][ T7898]  dump_stack_lvl+0xf2/0x150
[   96.160792][ T7898]  dump_stack+0x15/0x20
[   96.164996][ T7898]  should_fail_ex+0x229/0x230
[   96.169709][ T7898]  should_fail+0xb/0x10
[   96.173885][ T7898]  should_fail_usercopy+0x1a/0x20
[   96.178949][ T7898]  _copy_from_user+0x1e/0xd0
[   96.183624][ T7898]  copy_msghdr_from_user+0x54/0x2a0
[   96.188937][ T7898]  __sys_sendmsg+0x17d/0x280
[   96.193554][ T7898]  __x64_sys_sendmsg+0x46/0x50
[   96.198334][ T7898]  x64_sys_call+0xb25/0x2d70
[   96.203057][ T7898]  do_syscall_64+0xc9/0x1c0
[   96.208966][ T7898]  ? clear_bhb_loop+0x55/0xb0
[   96.213668][ T7898]  ? clear_bhb_loop+0x55/0xb0
[   96.218461][ T7898]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.224550][ T7898] RIP: 0033:0x7f29cdd55bd9
[   96.228972][ T7898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   96.248756][ T7898] RSP: 002b:00007f29ccfd7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   96.257359][ T7898] RAX: ffffffffffffffda RBX: 00007f29cdee3f60 RCX: 00007f29cdd55bd9
[   96.265403][ T7898] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004
[   96.273449][ T7898] RBP: 00007f29ccfd70a0 R08: 0000000000000000 R09: 0000000000000000
[   96.281436][ T7898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   96.289432][ T7898] R13: 000000000000000b R14: 00007f29cdee3f60 R15: 00007ffc4267ad68
[   96.297539][ T7898]  </TASK>
[   96.316619][   T29] audit: type=1400 audit(1720114426.105:847): avc:  denied  { create } for  pid=7888 comm="syz.4.1420" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   96.352133][   T29] audit: type=1400 audit(1720114426.135:848): avc:  denied  { setattr } for  pid=7888 comm="syz.4.1420" name="unix" dev="proc" ino=4026532446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   96.375265][   T29] audit: type=1400 audit(1720114426.135:849): avc:  denied  { read } for  pid=7888 comm="syz.4.1420" name="file0" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   96.397838][ T7912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7912 comm=syz.0.1430
[   96.594453][ T7927] wireguard0: entered promiscuous mode
[   96.600117][ T7927] wireguard0: entered allmulticast mode
[   96.643383][   T29] audit: type=1400 audit(1720114426.425:850): avc:  denied  { write } for  pid=7936 comm="syz.4.1441" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   96.668870][   T29] audit: type=1400 audit(1720114426.425:851): avc:  denied  { open } for  pid=7936 comm="syz.4.1441" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   96.744620][ T7956] macvlan2: entered promiscuous mode
[   96.750058][ T7956] macvlan2: entered allmulticast mode
[   96.801056][ T7971] loop2: detected capacity change from 0 to 2048
[   96.863646][ T7976] syzkaller0: entered promiscuous mode
[   96.869551][ T7976] syzkaller0: entered allmulticast mode
[   96.952935][ T7984] wg0: entered promiscuous mode
[   96.959369][ T7984] vlan2: entered promiscuous mode
[   96.972953][ T7984] wg0: left promiscuous mode
[   96.990500][ T7990] geneve2: entered promiscuous mode
[   96.995791][ T7990] geneve2: entered allmulticast mode
[   97.022459][ T7994] loop0: detected capacity change from 0 to 512
[   97.029895][ T7994] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   97.041756][ T7994] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[   97.050348][ T7994] System zones: 1-12
[   97.056435][ T7994] EXT4-fs (loop0): 1 truncate cleaned up
[   97.072527][   T29] audit: type=1400 audit(1720114426.855:852): avc:  denied  { setattr } for  pid=7993 comm="syz.0.1462" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   97.106878][ T7994] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #14: comm syz.0.1462: attempt to clear invalid blocks 1886221359 len 1
[   97.179564][ T8012] loop3: detected capacity change from 0 to 2048
[   97.237076][ T8024] IPVS: Error connecting to the multicast addr
[   97.244942][ T8009] loop4: detected capacity change from 0 to 8192
[   97.255870][ T8025] IPVS: Error connecting to the multicast addr
[   97.268007][ T8028] loop0: detected capacity change from 0 to 2048
[   97.282154][ T8030] loop2: detected capacity change from 0 to 512
[   97.286110][ T8009]  loop4: p1 p2 p3 p4
[   97.292485][ T8009] loop4: p1 start 17760256 is beyond EOD, truncated
[   97.299279][ T8009] loop4: p2 size 64053 extends beyond EOD, truncated
[   97.299400][ T8030] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   97.318282][ T8009] loop4: p3 start 458496 is beyond EOD, truncated
[   97.324940][ T8009] loop4: p4 size 50331648 extends beyond EOD, truncated
[   97.333092][ T8030] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[   97.341432][ T8030] System zones: 0-2, 18-18, 34-34
[   97.350016][ T8030] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   97.365107][ T8030] EXT4-fs (loop2): 1 truncate cleaned up
[   97.395937][ T8036] loop3: detected capacity change from 0 to 256
[   97.407300][ T8039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64536 sclass=netlink_route_socket pid=8039 comm=syz.0.1478
[   97.434560][ T8036] FAT-fs (loop3): Directory bread(block 64) failed
[   97.441514][ T8036] FAT-fs (loop3): Directory bread(block 65) failed
[   97.448538][ T8036] FAT-fs (loop3): Directory bread(block 66) failed
[   97.455461][ T8036] FAT-fs (loop3): Directory bread(block 67) failed
[   97.462139][ T8036] FAT-fs (loop3): Directory bread(block 68) failed
[   97.474619][ T8036] FAT-fs (loop3): Directory bread(block 69) failed
[   97.484889][ T8036] FAT-fs (loop3): Directory bread(block 70) failed
[   97.484924][ T8036] FAT-fs (loop3): Directory bread(block 71) failed
[   97.485002][ T8036] FAT-fs (loop3): Directory bread(block 72) failed
[   97.485024][ T8036] FAT-fs (loop3): Directory bread(block 73) failed
[   97.515693][ T8053] veth1_macvtap: left promiscuous mode
[   97.551723][ T8053] veth1_macvtap: entered promiscuous mode
[   97.557677][ T8053] macsec0: entered promiscuous mode
[   97.562985][ T8053] macsec0: entered allmulticast mode
[   97.568411][ T8053] veth1_macvtap: entered allmulticast mode
[   97.584018][ T8058] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=8058 comm=syz.2.1482
[   97.608859][ T5511] bio_check_eod: 78 callbacks suppressed
[   97.608875][ T5511] kworker/u8:13: attempt to access beyond end of device
[   97.608875][ T5511] loop3: rw=1, sector=1224, nr_sectors = 4 limit=256
[   97.613476][ T8063] loop4: detected capacity change from 0 to 512
[   97.638014][ T8063] EXT4-fs (loop4): unsupported inode size: 140
[   97.644262][ T8063] EXT4-fs (loop4): blocksize: 1024
[   97.664560][ T8071] FAULT_INJECTION: forcing a failure.
[   97.664560][ T8071] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   97.678188][ T8071] CPU: 1 PID: 8071 Comm: syz.3.1487 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0
[   97.690107][ T8071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   97.700463][ T8071] Call Trace:
[   97.703954][ T8071]  <TASK>
[   97.706901][ T8071]  dump_stack_lvl+0xf2/0x150
[   97.711599][ T8071]  dump_stack+0x15/0x20
[   97.715786][ T8071]  should_fail_ex+0x229/0x230
[   97.720618][ T8071]  should_fail+0xb/0x10
[   97.725454][ T8071]  should_fail_usercopy+0x1a/0x20
[   97.730579][ T8071]  _copy_from_user+0x1e/0xd0
[   97.735263][ T8071]  ____sys_sendmsg+0x1a4/0x410
[   97.740658][ T8071]  __sys_sendmsg+0x1e9/0x280
[   97.745316][ T8071]  __x64_sys_sendmsg+0x46/0x50
[   97.750165][ T8071]  x64_sys_call+0xb25/0x2d70
[   97.754853][ T8071]  do_syscall_64+0xc9/0x1c0
[   97.759416][ T8071]  ? clear_bhb_loop+0x55/0xb0
[   97.764595][ T8071]  ? clear_bhb_loop+0x55/0xb0
[   97.769292][ T8071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.775202][ T8071] RIP: 0033:0x7ff12b8efbd9
[   97.779794][ T8071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.799914][ T8071] RSP: 002b:00007ff12ab71048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   97.808344][ T8071] RAX: ffffffffffffffda RBX: 00007ff12ba7df60 RCX: 00007ff12b8efbd9
[   97.816386][ T8071] RDX: 0000000000000000 RSI: 0000000020007940 RDI: 0000000000000007
[   97.824369][ T8071] RBP: 00007ff12ab710a0 R08: 0000000000000000 R09: 0000000000000000
[   97.832438][ T8071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   97.840438][ T8071] R13: 000000000000000b R14: 00007ff12ba7df60 R15: 00007fffd60e3898
[   97.848455][ T8071]  </TASK>
[   97.857321][ T8072] all: renamed from lo (while UP)
[   97.879864][ T8074] loop4: detected capacity change from 0 to 2048
[   97.884288][ T8076] loop3: detected capacity change from 0 to 512
[   97.944913][ T8074]  loop4: unable to read partition table
[   97.951082][ T8074] loop4: partition table beyond EOD, truncated
[   97.957392][ T8074] loop_reread_partitions: partition scan of loop4 () failed (rc=-5)
[   97.989146][ T8096] netlink: 'syz.1.1498': attribute type 5 has an invalid length.
[   98.076313][ T8110] loop1: detected capacity change from 0 to 512
[   98.083012][ T8110] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   98.092197][ T8110] EXT4-fs (loop1): invalid journal inode
[   98.109382][ T8112] loop4: detected capacity change from 0 to 1024
[   98.116317][ T8112] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   98.154427][ T8115] loop1: detected capacity change from 0 to 512
[   98.161388][ T8115] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   98.173228][ T8115] EXT4-fs (loop1): 1 truncate cleaned up
[   98.179315][ T8115] EXT4-fs mount: 14 callbacks suppressed
[   98.179333][ T8115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.199942][ T8115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8115 comm=syz.1.1505
[   98.213386][ T8115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=8115 comm=syz.1.1505
[   98.238300][ T7245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.307014][   T29] audit: type=1326 audit(1720114428.095:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8130 comm="syz.1.1511" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55e43e8bd9 code=0x0
[   98.344590][ T8135] FAULT_INJECTION: forcing a failure.
[   98.344590][ T8135] name failslab, interval 1, probability 0, space 0, times 0
[   98.357303][ T8135] CPU: 1 PID: 8135 Comm: syz.4.1513 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0
[   98.367413][ T8135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   98.377535][ T8135] Call Trace:
[   98.380832][ T8135]  <TASK>
[   98.384337][ T8135]  dump_stack_lvl+0xf2/0x150
[   98.389035][ T8135]  dump_stack+0x15/0x20
[   98.393292][ T8135]  should_fail_ex+0x229/0x230
[   98.398006][ T8135]  ? hugetlb_vm_op_open+0x238/0x3b0
[   98.403258][ T8135]  __should_failslab+0x92/0xa0
[   98.408026][ T8135]  should_failslab+0x9/0x20
[   98.412577][ T8135]  kmalloc_trace_noprof+0x4b/0x2a0
[   98.417754][ T8135]  hugetlb_vm_op_open+0x238/0x3b0
[   98.422797][ T8135]  ? __pfx_hugetlb_vm_op_open+0x10/0x10
[   98.428373][ T8135]  __split_vma+0x374/0x690
[   98.432815][ T8135]  vma_modify+0x198/0x1f0
[   98.437162][ T8135]  mprotect_fixup+0x335/0x610
[   98.441847][ T8135]  do_mprotect_pkey+0x673/0x9a0
[   98.446819][ T8135]  __x64_sys_mprotect+0x48/0x60
[   98.451678][ T8135]  x64_sys_call+0x26f5/0x2d70
[   98.456386][ T8135]  do_syscall_64+0xc9/0x1c0
[   98.460901][ T8135]  ? clear_bhb_loop+0x55/0xb0
[   98.465639][ T8135]  ? clear_bhb_loop+0x55/0xb0
[   98.470327][ T8135]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.476265][ T8135] RIP: 0033:0x7f8d9aecfbd9
[   98.480825][ T8135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   98.500455][ T8135] RSP: 002b:00007f8d9a151048 EFLAGS: 00000246 ORIG_RAX: 000000000000000a
[   98.508878][ T8135] RAX: ffffffffffffffda RBX: 00007f8d9b05df60 RCX: 00007f8d9aecfbd9
[   98.516962][ T8135] RDX: 0000000000000006 RSI: 0000000000800000 RDI: 0000000020000000
[   98.524960][ T8135] RBP: 00007f8d9a1510a0 R08: 0000000000000000 R09: 0000000000000000
[   98.532945][ T8135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   98.540946][ T8135] R13: 000000000000000b R14: 00007f8d9b05df60 R15: 00007ffc30bba108
[   98.548976][ T8135]  </TASK>
[   98.552063][ T8135] HugeTLB: unable to allocate vma specific lock
[   98.679819][ T8158] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=8158 comm=syz.4.1522
[   98.723367][ T8165] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   98.747382][ T8172] netem: change failed
[   98.754654][ T8171] loop0: detected capacity change from 0 to 2048
[   98.765716][ T8169] tipc: Started in network mode
[   98.770683][ T8169] tipc: Node identity aaaaaaaaaa34, cluster identity 4711
[   98.778136][ T8169] tipc: Enabled bearer <eth:macvlan0>, priority 10
[   98.796448][ T8171]  loop0: p1 < > p4
[   98.800834][ T8171] loop0: p4 size 8388608 extends beyond EOD, truncated
[   98.929914][ T8207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8207 comm=syz.0.1535
[   99.021577][ T8218] netlink: 'syz.2.1542': attribute type 10 has an invalid length.
[   99.031984][ T8218] team0: Port device netdevsim1 added
[   99.039544][ T8218] netlink: 'syz.2.1542': attribute type 10 has an invalid length.
[   99.060185][ T8218] team0: Port device netdevsim1 removed
[   99.068737][ T8218] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[   99.102249][ T8227] loop4: detected capacity change from 0 to 256
[   99.128357][ T8227] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[   99.155119][ T8232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=8232 comm=syz.2.1546
[   99.176383][ T8227] FAT-fs (loop4): codepage cp855 not found
[   99.208654][ T8232] loop2: detected capacity change from 0 to 164
[   99.235621][ T8232] iso9660: Unknown parameter 'overroderockperm'
[   99.269487][ T8246] loop0: detected capacity change from 0 to 512
[   99.275942][ T8227] loop4: detected capacity change from 0 to 164
[   99.293325][ T8227] iso9660: Unknown parameter 'GPL'
[   99.304576][ T8246] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   99.314554][ T8246] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size
[   99.356547][ T8251] loop2: detected capacity change from 0 to 2048
[   99.394927][ T8256] __nla_validate_parse: 17 callbacks suppressed
[   99.394948][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'.
[   99.432586][ T8251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.451839][ T8263] FAULT_INJECTION: forcing a failure.
[   99.451839][ T8263] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   99.464965][ T8263] CPU: 1 PID: 8263 Comm: syz.0.1555 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0
[   99.475049][ T8263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   99.485129][ T8263] Call Trace:
[   99.488439][ T8263]  <TASK>
[   99.491387][ T8263]  dump_stack_lvl+0xf2/0x150
[   99.496009][ T8263]  dump_stack+0x15/0x20
[   99.500191][ T8263]  should_fail_ex+0x229/0x230
[   99.504918][ T8263]  should_fail+0xb/0x10
[   99.509104][ T8263]  should_fail_usercopy+0x1a/0x20
[   99.514209][ T8263]  copy_page_from_iter_atomic+0x22a/0xda0
[   99.520000][ T8263]  ? shmem_write_begin+0xa0/0x1c0
[   99.525122][ T8263]  ? shmem_write_begin+0x10c/0x1c0
[   99.530269][ T8263]  generic_perform_write+0x21a/0x410
[   99.535595][ T8263]  ? __pfx_shmem_write_end+0x10/0x10
[   99.540991][ T8263]  shmem_file_write_iter+0xc8/0xf0
[   99.546242][ T8263]  vfs_write+0x78f/0x900
[   99.550605][ T8263]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   99.556440][ T8263]  ksys_write+0xeb/0x1b0
[   99.560754][ T8263]  __x64_sys_write+0x42/0x50
[   99.565388][ T8263]  x64_sys_call+0x27ef/0x2d70
[   99.570262][ T8263]  do_syscall_64+0xc9/0x1c0
[   99.574814][ T8263]  ? clear_bhb_loop+0x55/0xb0
[   99.579606][ T8263]  ? clear_bhb_loop+0x55/0xb0
[   99.584336][ T8263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.590304][ T8263] RIP: 0033:0x7f29cdd5475f
[   99.594750][ T8263] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48
[   99.614536][ T8263] RSP: 002b:00007f29ccfd6e00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   99.622972][ T8263] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f29cdd5475f
[   99.630968][ T8263] RDX: 0000000000040000 RSI: 00007f29c4bb7000 RDI: 0000000000000004
[   99.637541][ T8251] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1552: bg 0: block 234: padding at end of block bitmap is not set
[   99.639052][ T8263] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000443
[   99.661259][ T8263] R10: 00000000200006c2 R11: 0000000000000293 R12: 0000000000000004
[   99.669374][ T8263] R13: 00007f29ccfd6f00 R14: 00007f29ccfd6ec0 R15: 00007f29c4bb7000
[   99.677456][ T8263]  </TASK>
[   99.724175][ T8251] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1140 with error 117
[   99.737082][ T8251] EXT4-fs (loop2): This should not happen!! Data will be lost
[   99.737082][ T8251] 
[   99.738263][ T8263] loop0: detected capacity change from 0 to 512
[   99.784464][ T8263] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   99.786483][ T8256] loop1: detected capacity change from 0 to 8192
[   99.801725][ T8256] FAT-fs (loop1): Unrecognized mount option "" or missing value
[   99.815475][ T2960] tipc: Node number set to 10398378
[   99.827192][ T8263] EXT4-fs error (device loop0): ext4_init_orphan_info:586: comm syz.0.1555: inode #0: comm syz.0.1555: iget: illegal inode #
[   99.907903][ T6359] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.929508][ T8263] EXT4-fs (loop0): Remounting filesystem read-only
[   99.936192][ T8263] EXT4-fs (loop0): get orphan inode failed
[   99.974133][ T8263] EXT4-fs (loop0): mount failed
[   99.986520][ T8273] loop4: detected capacity change from 0 to 2048
[  100.065819][ T8273]  loop4: p1 < > p4
[  100.074905][ T8273] loop4: p4 size 8388608 extends beyond EOD, truncated
[  100.089396][ T8283] bond0: entered promiscuous mode
[  100.092234][ T8285] loop0: detected capacity change from 0 to 512
[  100.094495][ T8283] bond0: entered allmulticast mode
[  100.149020][ T8285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.184484][ T8287] loop3: detected capacity change from 0 to 128
[  100.203519][ T8287] FAT-fs (loop3): Unrecognized mount option "/dev/ptmx" or missing value
[  100.217139][ T8285] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.285358][ T5537] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.295862][ T8287] loop3: detected capacity change from 0 to 1024
[  100.307772][ T8294] loop1: detected capacity change from 0 to 2048
[  100.325080][ T8287] EXT4-fs: Mount option(s) incompatible with ext3
[  100.356520][ T8294]  loop1: p1 < > p4
[  100.361386][ T8294] loop1: p4 size 8388608 extends beyond EOD, truncated
[  100.374984][ T8294] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1564'.
[  100.418377][ T8299] loop3: detected capacity change from 0 to 512
[  100.429590][ T8299] EXT4-fs: Ignoring removed i_version option
[  100.435813][ T8299] EXT4-fs: Ignoring removed nobh option
[  100.443332][ T8299] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  100.460544][ T8299] EXT4-fs (loop3): 1 truncate cleaned up
[  100.464912][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1568'.
[  100.467220][ T8299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.551373][ T7239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.558799][ T8310] loop2: detected capacity change from 0 to 1024
[  100.569205][ T8310] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  100.577142][ T8312] loop1: detected capacity change from 0 to 512
[  100.581347][ T8310] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1572: Invalid block bitmap block 0 in block_group 0
[  100.599858][ T8312] EXT4-fs: Ignoring removed i_version option
[  100.600013][ T8310] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.1572: Failed to acquire dquot type 0
[  100.606037][ T8312] EXT4-fs: Ignoring removed nobh option
[  100.625255][ T8310] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz.2.1572: Freeing blocks not in datazone - block = 0, count = 4096
[  100.647371][ T8310] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1572: Invalid inode bitmap blk 0 in block_group 0
[  100.665319][ T8312] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal
[  100.670974][ T8302] loop0: detected capacity change from 0 to 8192
[  100.679968][ T5512] EXT4-fs error (device loop2): ext4_release_dquot:6883: comm kworker/u8:14: Failed to release dquot type 0
[  100.682099][ T8302] FAT-fs (loop0): Unrecognized mount option "" or missing value
[  100.697310][ T8317] vlan2: entered allmulticast mode
[  100.700246][ T8310] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem
[  100.713482][ T8310] EXT4-fs (loop2): 1 orphan inode deleted
[  100.723263][ T8310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.740651][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1575'.
[  100.766664][ T6359] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.784526][ T5511] EXT4-fs error (device loop2): ext4_release_dquot:6883: comm kworker/u8:13: Failed to release dquot type 0
[  100.873127][ T8326] loop0: detected capacity change from 0 to 256
[  100.892608][ T8326] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  100.931885][ T8340] syzkaller0: entered promiscuous mode
[  100.971484][ T8342] TCP: Unexpected MD5 Hash found for [fe80:0:0:d::bb].0->[ff02::1].20002 [FR.]
[  101.021184][   T29] kauditd_printk_skb: 10 callbacks suppressed
[  101.021200][   T29] audit: type=1400 audit(1720114430.805:860): avc:  denied  { getopt } for  pid=8353 comm="syz.1.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  101.023871][ T8358] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  101.072844][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1589'.
[  101.075368][ T8365] FAULT_INJECTION: forcing a failure.
[  101.075368][ T8365] name failslab, interval 1, probability 0, space 0, times 0
[  101.094640][ T8365] CPU: 0 PID: 8365 Comm: syz.1.1590 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0
[  101.104735][ T8365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  101.114866][ T8365] Call Trace:
[  101.118169][ T8365]  <TASK>
[  101.121205][ T8365]  dump_stack_lvl+0xf2/0x150
[  101.125840][ T8365]  dump_stack+0x15/0x20
[  101.130083][ T8365]  should_fail_ex+0x229/0x230
[  101.134817][ T8365]  ? __kernfs_new_node+0x6a/0x380
[  101.139728][ T8363] loop4: detected capacity change from 0 to 8192
[  101.139869][ T8365]  __should_failslab+0x92/0xa0
[  101.139898][ T8365]  should_failslab+0x9/0x20
[  101.155579][ T8365]  kmem_cache_alloc_noprof+0x4c/0x290
[  101.156707][ T8326] loop0: detected capacity change from 0 to 1024
[  101.160980][ T8365]  __kernfs_new_node+0x6a/0x380
[  101.171993][ T8363] FAT-fs (loop4): Unrecognized mount option "" or missing value
[  101.172265][ T8365]  ? rb_insert_color+0x6a/0x290
[  101.184942][ T8365]  ? up_write+0x30/0xf0
[  101.189145][ T8365]  ? kernfs_activate+0x256/0x270
[  101.194099][ T8365]  kernfs_new_node+0xc8/0x140
[  101.198900][ T8365]  __kernfs_create_file+0x49/0x180
[  101.204118][ T8365]  ? __pfx_slab_attr_store+0x10/0x10
[  101.209430][ T8365]  sysfs_add_file_mode_ns+0x136/0x1c0
[  101.214812][ T8365]  internal_create_group+0x464/0x9b0
[  101.220362][ T8365]  sysfs_create_group+0x1f/0x30
[  101.225309][ T8365]  sysfs_slab_add+0x157/0x290
[  101.230081][ T8365]  __kmem_cache_create+0x45d/0x5f0
[  101.235250][ T8365]  ? kmem_cache_alloc_noprof+0x10c/0x290
[  101.241039][ T8365]  kmem_cache_create_usercopy+0x150/0x2c0
[  101.246794][ T8365]  p9_client_create+0x81c/0xa80
[  101.251693][ T8365]  v9fs_session_init+0xf9/0xda0
[  101.256583][ T8365]  ? __rcu_read_unlock+0x4e/0x70
[  101.261619][ T8365]  ? __rcu_read_unlock+0x4e/0x70
[  101.266648][ T8365]  ? v9fs_mount+0x53/0x560
[  101.271167][ T8365]  ? kmalloc_trace_noprof+0x20c/0x2a0
[  101.276581][ T8365]  v9fs_mount+0x69/0x560
[  101.280844][ T8365]  ? __pfx_v9fs_mount+0x10/0x10
[  101.285725][ T8365]  legacy_get_tree+0x77/0xd0
[  101.290329][ T8365]  vfs_get_tree+0x56/0x1d0
[  101.294803][ T8365]  do_new_mount+0x227/0x690
[  101.299476][ T8365]  path_mount+0x49b/0xb30
[  101.303909][ T8365]  __se_sys_mount+0x27f/0x2d0
[  101.308596][ T8365]  __x64_sys_mount+0x67/0x80
[  101.313202][ T8365]  x64_sys_call+0x25c9/0x2d70
[  101.318055][ T8365]  do_syscall_64+0xc9/0x1c0
[  101.322568][ T8365]  ? clear_bhb_loop+0x55/0xb0
[  101.327255][ T8365]  ? clear_bhb_loop+0x55/0xb0
[  101.331937][ T8365]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.338025][ T8365] RIP: 0033:0x7f55e43e8bd9
[  101.342437][ T8365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.362161][ T8365] RSP: 002b:00007f55e366a048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  101.371939][ T8365] RAX: ffffffffffffffda RBX: 00007f55e4576f60 RCX: 00007f55e43e8bd9
[  101.379914][ T8365] RDX: 0000000020000180 RSI: 0000000020000000 RDI: 0000000000000000
[  101.387930][ T8365] RBP: 00007f55e366a0a0 R08: 0000000020000080 R09: 0000000000000000
[  101.395910][ T8365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  101.403986][ T8365] R13: 000000000000000b R14: 00007f55e4576f60 R15: 00007ffdb39d4028
[  101.411988][ T8365]  </TASK>
[  101.417248][ T8365] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12
[  101.425239][ T8365] CPU: 0 PID: 8365 Comm: syz.1.1590 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0
[  101.435399][ T8365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  101.445474][ T8365] Call Trace:
[  101.448755][ T8365]  <TASK>
[  101.451810][ T8365]  dump_stack_lvl+0xf2/0x150
[  101.456497][ T8365]  dump_stack+0x15/0x20
[  101.460707][ T8365]  kmem_cache_create_usercopy+0x239/0x2c0
[  101.466792][ T8365]  p9_client_create+0x81c/0xa80
[  101.471684][ T8365]  v9fs_session_init+0xf9/0xda0
[  101.476590][ T8365]  ? __rcu_read_unlock+0x4e/0x70
[  101.481553][ T8365]  ? __rcu_read_unlock+0x4e/0x70
[  101.486602][ T8365]  ? v9fs_mount+0x53/0x560
[  101.491035][ T8365]  ? kmalloc_trace_noprof+0x20c/0x2a0
[  101.496555][ T8365]  v9fs_mount+0x69/0x560
[  101.500870][ T8365]  ? __pfx_v9fs_mount+0x10/0x10
[  101.505741][ T8365]  legacy_get_tree+0x77/0xd0
[  101.510405][ T8365]  vfs_get_tree+0x56/0x1d0
[  101.514854][ T8365]  do_new_mount+0x227/0x690
[  101.519461][ T8365]  path_mount+0x49b/0xb30
[  101.523943][ T8365]  __se_sys_mount+0x27f/0x2d0
[  101.528688][ T8365]  __x64_sys_mount+0x67/0x80
[  101.533307][ T8365]  x64_sys_call+0x25c9/0x2d70
[  101.538071][ T8365]  do_syscall_64+0xc9/0x1c0
[  101.542689][ T8365]  ? clear_bhb_loop+0x55/0xb0
[  101.547491][ T8365]  ? clear_bhb_loop+0x55/0xb0
[  101.552200][ T8365]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.558143][ T8365] RIP: 0033:0x7f55e43e8bd9
[  101.562640][ T8365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.582598][ T8365] RSP: 002b:00007f55e366a048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  101.591092][ T8365] RAX: ffffffffffffffda RBX: 00007f55e4576f60 RCX: 00007f55e43e8bd9
[  101.599102][ T8365] RDX: 0000000020000180 RSI: 0000000020000000 RDI: 0000000000000000
[  101.607149][ T8365] RBP: 00007f55e366a0a0 R08: 0000000020000080 R09: 0000000000000000
[  101.615145][ T8365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  101.623174][ T8365] R13: 000000000000000b R14: 00007f55e4576f60 R15: 00007ffdb39d4028
[  101.631238][ T8365]  </TASK>
[  101.634637][ T8365] 9pnet: p9_errstr2errno: server reported unknown error Í0177777777777777777777718446744073709551615
[  101.734072][ T8388] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1597'.
[  101.841892][ T8402] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1603'.
[  101.879234][   T29] audit: type=1400 audit(1720114431.665:861): avc:  denied  { shutdown } for  pid=8407 comm="syz.3.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  101.936156][ T8413] loop2: detected capacity change from 0 to 512
[  101.980034][ T8413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.996327][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1609'.
[  102.005932][ T8413] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  102.139122][ T6359] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.177153][ T8421] loop3: detected capacity change from 0 to 8192
[  102.184305][ T8421] FAT-fs (loop3): Unrecognized mount option "" or missing value
[  102.231504][ T8444] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1617'.
[  102.281029][ T8444] loop4: detected capacity change from 0 to 164
[  102.298407][ T8450] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1619'.
[  102.346807][ T8446] loop2: detected capacity change from 0 to 8192
[  102.385781][ T8457] loop3: detected capacity change from 0 to 2048
[  102.416453][ T8463] loop1: detected capacity change from 0 to 512
[  102.431740][ T8463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.448605][ T8463] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  102.520039][ T7245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.680767][ T8498] loop0: detected capacity change from 0 to 512
[  102.688255][ T8498] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  102.702016][ T8498] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  102.710260][ T8498] System zones: 1-12
[  102.715327][ T8498] EXT4-fs (loop0): 1 truncate cleaned up
[  102.722913][ T8498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.927455][ T5537] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.939343][ T8510] loop2: detected capacity change from 0 to 512
[  102.952053][ T8508] xt_bpf: check failed: parse error
[  102.960696][ T8510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.979546][ T8510] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  103.024845][ T8516] loop0: detected capacity change from 0 to 512
[  103.047448][ T6359] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.068336][ T8516] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  103.078793][ T8516] System zones: 0-2, 18-18, 34-34
[  103.087838][ T8516] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz.0.1639: bad orphan inode 24
[  103.106136][ T8532] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.111423][ T8516] ext4_test_bit(bit=23, block=18) = 0
[  103.120874][ T8516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.133870][ T8516] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.135142][ T8532] bridge_slave_0 (unregistering): left allmulticast mode
[  103.151620][ T8532] bridge_slave_0 (unregistering): left promiscuous mode
[  103.158678][ T8532] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.228705][ T8539] loop4: detected capacity change from 0 to 128
[  103.248483][ T8541] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.320051][   T29] audit: type=1400 audit(1720114433.105:862): avc:  denied  { setopt } for  pid=8540 comm="syz.2.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  103.367226][ T8541] bridge_slave_0 (unregistering): left allmulticast mode
[  103.374348][ T8541] bridge_slave_0 (unregistering): left promiscuous mode
[  103.381754][ T8541] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.411220][ T5537] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.461915][   T29] audit: type=1400 audit(1720114433.245:863): avc:  denied  { bind } for  pid=8548 comm="syz.3.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  103.559729][ T8560] loop4: detected capacity change from 0 to 512
[  103.578675][ T8560] EXT4-fs: Ignoring removed i_version option
[  103.582776][ T8558] loop2: detected capacity change from 0 to 512
[  103.584707][ T8560] EXT4-fs: Ignoring removed nobh option
[  103.621171][ T8560] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  103.641639][ T8558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.657803][ T8558] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  103.669273][   T29] audit: type=1400 audit(1720114433.445:864): avc:  denied  { connect } for  pid=8552 comm="syz.0.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  103.702956][ T8560] EXT4-fs (loop4): 1 truncate cleaned up
[  103.721873][ T8560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.769318][ T6478] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.794467][ T8582] FAULT_INJECTION: forcing a failure.
[  103.794467][ T8582] name failslab, interval 1, probability 0, space 0, times 0
[  103.807216][ T8582] CPU: 0 PID: 8582 Comm: syz.3.1662 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0
[  103.817352][ T8582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  103.827528][ T8582] Call Trace:
[  103.830819][ T8582]  <TASK>
[  103.833773][ T8582]  dump_stack_lvl+0xf2/0x150
[  103.838392][ T8582]  dump_stack+0x15/0x20
[  103.842565][ T8582]  should_fail_ex+0x229/0x230
[  103.847267][ T8582]  ? offload_action_alloc+0x2b/0x190
[  103.852569][ T8582]  __should_failslab+0x92/0xa0
[  103.857343][ T8582]  should_failslab+0x9/0x20
[  103.861901][ T8582]  __kmalloc_noprof+0xa5/0x370
[  103.866685][ T8582]  offload_action_alloc+0x2b/0x190
[  103.871813][ T8582]  tcf_action_offload_add_ex+0x11d/0x3c0
[  103.877565][ T8582]  tcf_action_init+0x262/0x530
[  103.882359][ T8582]  tc_ctl_action+0x292/0x840
[  103.887247][ T8582]  ? __pfx_tc_ctl_action+0x10/0x10
[  103.892374][ T8582]  rtnetlink_rcv_msg+0x85e/0x910
[  103.897331][ T8582]  ? memcg_list_lru_alloc+0xd2/0x740
[  103.902878][ T8582]  ? mod_objcg_state+0x2e2/0x4e0
[  103.907892][ T8582]  ? __memcg_slab_free_hook+0xc9/0x1e0
[  103.913376][ T8582]  ? xas_load+0x3ae/0x3d0
[  103.917870][ T8582]  ? kmem_cache_free+0xd8/0x280
[  103.922747][ T8582]  ? nlmon_xmit+0x51/0x60
[  103.927096][ T8582]  ? __kfree_skb+0x102/0x150
[  103.931730][ T8582]  ? consume_skb+0x57/0x180
[  103.936326][ T8582]  ? nlmon_xmit+0x51/0x60
[  103.940685][ T8582]  ? dev_hard_start_xmit+0x3c1/0x3f0
[  103.946089][ T8582]  ? __dev_queue_xmit+0xb21/0x1e50
[  103.951210][ T8582]  ? ref_tracker_free+0x3a5/0x410
[  103.956343][ T8582]  netlink_rcv_skb+0x12c/0x230
[  103.961155][ T8582]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  103.966636][ T8582]  rtnetlink_rcv+0x1c/0x30
[  103.971088][ T8582]  netlink_unicast+0x58d/0x660
[  103.976085][ T8582]  netlink_sendmsg+0x5ca/0x6e0
[  103.980910][ T8582]  ? __pfx_netlink_sendmsg+0x10/0x10
[  103.986288][ T8582]  __sock_sendmsg+0x140/0x180
[  103.990993][ T8582]  ____sys_sendmsg+0x312/0x410
[  103.995840][ T8582]  __sys_sendmsg+0x1e9/0x280
[  104.000471][ T8582]  __x64_sys_sendmsg+0x46/0x50
[  104.005248][ T8582]  x64_sys_call+0xb25/0x2d70
[  104.009967][ T8582]  do_syscall_64+0xc9/0x1c0
[  104.014491][ T8582]  ? clear_bhb_loop+0x55/0xb0
[  104.019187][ T8582]  ? clear_bhb_loop+0x55/0xb0
[  104.023990][ T8582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.029933][ T8582] RIP: 0033:0x7ff12b8efbd9
[  104.034364][ T8582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.054017][ T8582] RSP: 002b:00007ff12ab71048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  104.062444][ T8582] RAX: ffffffffffffffda RBX: 00007ff12ba7df60 RCX: 00007ff12b8efbd9
[  104.070532][ T8582] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000005
[  104.078534][ T8582] RBP: 00007ff12ab710a0 R08: 0000000000000000 R09: 0000000000000000
[  104.086529][ T8582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  104.094635][ T8582] R13: 000000000000000b R14: 00007ff12ba7df60 R15: 00007fffd60e3898
[  104.102648][ T8582]  </TASK>
[  104.118312][   T29] audit: type=1326 audit(1720114433.905:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8583 comm="syz.1.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e43e8bd9 code=0x7ffc0000
[  104.141739][   T29] audit: type=1326 audit(1720114433.905:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8583 comm="syz.1.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e43e8bd9 code=0x7ffc0000
[  104.167217][ T6359] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.282206][ T8605] loop1: detected capacity change from 0 to 512
[  104.291079][ T8603] netlink: 'syz.3.1669': attribute type 4 has an invalid length.
[  104.335633][ T8603] netlink: 'syz.3.1669': attribute type 17 has an invalid length.
[  104.356468][ T8605] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  104.356933][ T8609] loop4: detected capacity change from 0 to 2048
[  104.364497][ T8605] System zones: 0-2, 18-18, 34-34
[  104.392442][ T8609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.408672][ T8605] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1670: bg 0: block 248: padding at end of block bitmap is not set
[  104.428424][ T5514] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.434163][ T8605] Quota error (device loop1): write_blk: dquota write failed
[  104.446313][ T8605] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  104.447095][ T8605] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.1670: Failed to acquire dquot type 1
[  104.470167][ T8609] grow_buffers: requested out-of-range block 7308335460986288498 for device loop4
[  104.479660][ T8609] EXT4-fs warning (device loop4): ext4_resize_fs:2018: can't read last block, resize aborted
[  104.490381][ T8605] EXT4-fs (loop1): 1 truncate cleaned up
[  104.498044][ T8605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.529537][ T8605] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.541524][ T5514] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.571026][ T6478] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.589913][ T5514] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.590881][ T7245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.608342][ T8624] loop2: detected capacity change from 0 to 512
[  104.611493][ T8622] loop3: detected capacity change from 0 to 1024
[  104.637344][ T8624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.647265][ T8622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.662733][ T8594] chnl_net:caif_netlink_parms(): no params data found
[  104.667238][ T8622] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  104.678504][ T8624] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  104.692373][ T5514] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.723995][ T6359] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.784588][ T8594] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.791826][ T8594] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.800887][ T8594] bridge_slave_0: entered allmulticast mode
[  104.807768][ T8594] bridge_slave_0: entered promiscuous mode
[  104.814622][ T8645] __nla_validate_parse: 4 callbacks suppressed
[  104.814640][ T8645] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1676'.
[  104.830615][ T8645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8645 comm=syz.2.1676
[  104.836096][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1678'.
[  104.852477][ T5514] bridge_slave_1: left allmulticast mode
[  104.858420][ T5514] bridge_slave_1: left promiscuous mode
[  104.864352][ T5514] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.872348][ T5514] bridge_slave_0: left allmulticast mode
[  104.878331][ T5514] bridge_slave_0: left promiscuous mode
[  104.884317][ T5514] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.909427][ T8653] loop4: detected capacity change from 0 to 2048
[  104.917622][ T7239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.947447][ T8653] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz.4.1681: bad orphan inode 8192
[  104.958861][ T8653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.992685][ T8662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1682'.
[  105.016102][ T8662] 9pnet_fd: Insufficient options for proto=fd
[  105.022633][ T8662] 9pnet_fd: Insufficient options for proto=fd
[  105.071409][ T8668] loop3: detected capacity change from 0 to 512
[  105.087455][ T8668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.100701][ T8668] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  105.115626][ T5514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.127429][ T5514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.137270][ T7239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.138258][ T5514] bond0 (unregistering): Released all slaves
[  105.154857][ T8594] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.162080][ T8594] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.169566][ T8594] bridge_slave_1: entered allmulticast mode
[  105.176211][ T8594] bridge_slave_1: entered promiscuous mode
[  105.206440][ T5514] tipc: Disabling bearer <eth:macvlan0>
[  105.218142][ T5514] tipc: Left network mode
[  105.224570][ T8594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.237540][ T6478] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.251421][ T8594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.280886][ T8594] team0: Port device team_slave_0 added
[  105.289104][ T8594] team0: Port device team_slave_1 added
[  105.294765][ T8683] loop3: detected capacity change from 0 to 512
[  105.314177][ T8683] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1691: bg 0: block 393: padding at end of block bitmap is not set
[  105.331038][ T8683] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem
[  105.340481][ T8683] EXT4-fs (loop3): 2 truncates cleaned up
[  105.341389][ T5514] hsr_slave_0: left promiscuous mode
[  105.348014][ T8683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.367913][ T5514] hsr_slave_1: left promiscuous mode
[  105.383395][ T7239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.392608][ T5514] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.400858][ T5514] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.410287][ T5514] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.417780][ T5514] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.428198][ T5514] veth1_macvtap: left allmulticast mode
[  105.433890][ T5514] veth1_macvtap: left promiscuous mode
[  105.439458][ T5514] veth0_macvtap: left promiscuous mode
[  105.445068][ T5514] veth1_vlan: left promiscuous mode
[  105.450421][ T5514] veth0_vlan: left promiscuous mode
[  105.568108][ T8594] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.575136][ T8594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.601194][ T8594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.613131][ T8694] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1694'.
[  105.623280][ T8594] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.630424][ T8594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.639134][ T8697] loop3: detected capacity change from 0 to 512
[  105.656617][ T8594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.679717][ T8697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.692323][ T8697] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  105.714088][ T8594] hsr_slave_0: entered promiscuous mode
[  105.715239][ T7239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.731336][ T8594] hsr_slave_1: entered promiscuous mode
[  105.819125][ T8716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1296 sclass=netlink_route_socket pid=8716 comm=syz.1.1702
[  105.832454][ T8718] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 48881 - 0
[  105.841424][ T8718] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 48881 - 0
[  105.850512][ T8718] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 48881 - 0
[  105.859469][ T8718] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 48881 - 0
[  105.869012][ T8718] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 46862 - 0
[  105.877947][ T8718] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 46862 - 0
[  105.886811][ T8718] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 46862 - 0
[  105.895835][ T8718] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 46862 - 0
[  105.905933][ T8718] geneve2: entered promiscuous mode
[  105.916078][   T29] audit: type=1400 audit(1720114435.695:867): avc:  denied  { append } for  pid=8715 comm="syz.1.1702" name="usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  105.944609][ T8721] loop2: detected capacity change from 0 to 512
[  105.958503][ T8721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.972177][ T8721] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  105.993314][ T6359] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.077963][ T8732] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  106.115512][ T8594] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  106.127568][ T8594] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  106.149617][ T8594] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  106.157051][ T8738] netlink: zone id is out of range
[  106.162231][ T8738] netlink: zone id is out of range
[  106.167402][ T8738] netlink: zone id is out of range
[  106.172523][ T8738] netlink: zone id is out of range
[  106.177735][ T8738] netlink: zone id is out of range
[  106.182864][ T8738] netlink: zone id is out of range
[  106.188112][ T8738] netlink: zone id is out of range
[  106.193218][ T8738] netlink: zone id is out of range
[  106.198400][ T8738] netlink: zone id is out of range
[  106.203508][ T8738] netlink: zone id is out of range
[  106.211027][ T8594] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  106.262105][ T8743] loop2: detected capacity change from 0 to 256
[  106.278143][ T8745] loop1: detected capacity change from 0 to 1024
[  106.284811][ T8745] EXT4-fs: Ignoring removed oldalloc option
[  106.290655][ T8594] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.298704][ T8745] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  106.304746][ T8594] 8021q: adding VLAN 0 to HW filter on device team0
[  106.318876][   T24] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.326022][   T24] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.326749][ T8745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.348677][ T3166] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.355847][ T3166] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.453951][ T8594] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.545100][ T8594] veth0_vlan: entered promiscuous mode
[  106.557205][ T8594] veth1_vlan: entered promiscuous mode
[  106.572760][ T8594] veth0_macvtap: entered promiscuous mode
[  106.583690][ T8594] veth1_macvtap: entered promiscuous mode
[  106.597087][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.607673][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.617910][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.628474][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.638382][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.648876][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.658768][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.669311][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.681641][ T8594] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.693890][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.704487][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.714650][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.725138][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.735103][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.745850][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.755735][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.766227][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.791481][ T8594] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.803349][ T8594] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.808933][ T8767] loop3: detected capacity change from 0 to 256
[  106.812182][ T8594] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.827266][ T8594] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.836106][ T8594] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.898470][ T8770] loop0: detected capacity change from 0 to 512
[  106.905280][ T8770] EXT4-fs: Ignoring removed i_version option
[  106.917342][ T8770] EXT4-fs error (device loop0): __ext4_iget:4906: inode #11: block 1: comm syz.0.1664: invalid block
[  106.929273][ T8770] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.1664: couldn't read orphan inode 11 (err -117)
[  106.942231][ T8770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.958190][   T29] audit: type=1400 audit(1720114436.745:868): avc:  denied  { setattr } for  pid=8769 comm="syz.0.1664" path="/0/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  107.492605][ T8745] syz.1.1713 (8745) used greatest stack depth: 7112 bytes left
[  107.507436][ T7245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.540694][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1724'.
[  107.571659][ T8806] netlink: 'syz.2.1725': attribute type 3 has an invalid length.
[  107.579521][ T8806] netlink: 'syz.2.1725': attribute type 3 has an invalid length.
[  107.588686][ T8806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1725'.
[  107.598295][ T8808] netlink: 'syz.2.1725': attribute type 3 has an invalid length.
[  107.606263][ T8808] netlink: 'syz.2.1725': attribute type 3 has an invalid length.
[  107.614804][ T8813] SET target dimension over the limit!
[  107.629564][ T8808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1725'.
[  107.636071][ T8815] 9pnet_fd: Insufficient options for proto=fd
[  107.651330][   T29] audit: type=1326 audit(1720114437.435:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.2.1725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f535c824bd9 code=0x0
[  107.684493][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1728'.
[  107.694429][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1728'.
[  107.705283][   T29] audit: type=1400 audit(1720114437.495:870): avc:  denied  { watch watch_reads } for  pid=8817 comm="syz.3.1728" path="/97/file0" dev="tmpfs" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  107.779766][ T8594] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.816714][ T3771] ==================================================================
[  107.824857][ T3771] BUG: KCSAN: data-race in wg_socket_send_skb_to_peer / wg_socket_send_skb_to_peer
[  107.832054][ T8826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1732'.
[  107.834273][ T3771] 
[  107.834281][ T3771] read-write to 0xffff888112aa0358 of 8 bytes by task 5514 on cpu 1:
[  107.834301][ T3771]  wg_socket_send_skb_to_peer+0xe4/0x130
[  107.859299][ T3771]  wg_socket_send_buffer_to_peer+0xd6/0x100
[  107.865235][ T3771]  wg_packet_handshake_send_worker+0x10c/0x150
[  107.871459][ T3771]  process_scheduled_works+0x483/0x9a0
[  107.877020][ T3771]  worker_thread+0x526/0x720
[  107.881618][ T3771]  kthread+0x1d1/0x210
[  107.885770][ T3771]  ret_from_fork+0x4b/0x60
[  107.890285][ T3771]  ret_from_fork_asm+0x1a/0x30
[  107.895063][ T3771] 
[  107.897382][ T3771] read-write to 0xffff888112aa0358 of 8 bytes by task 3771 on cpu 0:
[  107.905548][ T3771]  wg_socket_send_skb_to_peer+0xe4/0x130
[  107.911388][ T3771]  wg_packet_tx_worker+0x127/0x360
[  107.917164][ T3771]  process_scheduled_works+0x483/0x9a0
[  107.922663][ T3771]  worker_thread+0x526/0x720
[  107.927274][ T3771]  kthread+0x1d1/0x210
[  107.931359][ T3771]  ret_from_fork+0x4b/0x60
[  107.935781][ T3771]  ret_from_fork_asm+0x1a/0x30
[  107.940741][ T3771] 
[  107.943171][ T3771] value changed: 0x0000000000000300 -> 0x0000000000000394
[  107.950276][ T3771] 
[  107.952689][ T3771] Reported by Kernel Concurrency Sanitizer on:
[  107.958948][ T3771] CPU: 0 PID: 3771 Comm: kworker/0:7 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0
[  107.969146][ T3771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  107.979227][ T3771] Workqueue: wg-crypt-wg0 wg_packet_tx_worker
[  107.985344][ T3771] ==================================================================