last executing test programs:

4.691016615s ago: executing program 0 (id=1047):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000c00009616009d000000000000000040000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800)
lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0)
lsm_get_self_attr(0x64, 0x0, &(0x7f0000000180), 0x1)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r3}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="0b00000007000000010001004900000081000500", @ANYRES32, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES16=r1, @ANYRESHEX, @ANYRES64=r2, @ANYRESDEC=r4, @ANYBLOB="6e816bbbe6b767cb37dbeb49c580f7eb17021baa420e663aabcaedcfa70ed46b6a4ff71d7b52c3281e24d17b4342116295983d954ae60c01921361e553ab9227c8c36c5d7afe46f5ea1f7c2e5d31bbc277e5f061b6a8cc030a3654fc24d6b6c58d4ed4314345209d776102fb9fafb65c4e2eadd3c551e88e04f8f6f2a296b7c2a6ffd34f40a453"], 0x50)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r5, &(0x7f0000006500)=[{{&(0x7f0000000480)={0xa, 0x4e22, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="120000000000000029000000040000000800000000000000180000000000000029000000040000005e00000000000000be6e47906bde5da88744f2da956546d82e433e27cb9d6fd23ecb63f38fd6107830bc015e11af02ab96f87946c0aa8c1d6f65ff76bf5ad708492051e4b28816e5003ac92d479506feeb99727df75301eee3472389f3613f21b280c3485c272dd49949baee4c045ecda499a9aed35318b57a409ded19557f2b8021883e559ac8ae19d47b1c298a5b261b38ddd4b94e57dc9a26d938aec7d51ed6c2c179c0ccdf58f7dfe5"], 0x30}}], 0x1, 0x68004)
getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="6f7332e7b9aca2229e32d1892e73656375726974793e73656c696e757800"], 0x0, 0x0)

3.801955629s ago: executing program 0 (id=1061):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x9], 0x0, 0x0, 0x1, 0x1, r2}}, 0x40)

3.552965753s ago: executing program 0 (id=1062):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&')
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = socket(0x10, 0x3, 0x6)
r6 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000880)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0xffff, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd8}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9}, {0x7, 0x1, 0xcab5, 0x6}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044841}, 0x20000000)

3.043006801s ago: executing program 0 (id=1066):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301)
ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = getpid()
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000000c0)=r6, 0x12)

2.931050353s ago: executing program 1 (id=1068):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x9], 0x0, 0x0, 0x1, 0x1, r2}}, 0x40)

2.865142024s ago: executing program 1 (id=1069):
ioperm(0x4, 0x1, 0x4000000000000020)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
ioctl$FITRIM(r3, 0x40086604, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000190a01", @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0xc4000}, 0x40000040)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=r2], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
r4 = open(&(0x7f0000000480)='.\x00', 0x0, 0x1c0)
lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x2)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000840)=ANY=[@ANYBLOB="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"])
close(0xffffffffffffffff)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})

2.593163658s ago: executing program 4 (id=1073):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
futex(&(0x7f0000000000), 0x5, 0x0, 0x0, 0x0, 0xc3000000)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x100, 0x1403, 0x2, 0x70bd26, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x40800}, 0x400c0b0)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
writev(r3, 0x0, 0x0)
r4 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RNDADDENTROPY(r4, 0x541b, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x3], [0x6, 0x8, 0x63c, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x5}]}}]}, 0xac}}, 0x0)
lseek(r5, 0x2b, 0x1)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000280)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cca", 0x10, 0x3c, 0x0, @dev, @mcast2, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x10000, 0x0, 0xfffffff9, 0xe0, r3, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0xb, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018e878c78689a5e3a67dafbdfae7b2d7f1", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'vcan0\x00', {}, {0xff}, 0x5c, 0x2, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8)

2.4827705s ago: executing program 1 (id=1075):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1014}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4000000) (fail_nth: 4)

2.46925887s ago: executing program 4 (id=1076):
open(0x0, 0x1011c2, 0x101)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18)
ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6)
unshare(0x40000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000000000000000000000a20000000000a0300000000000000000007000004090001007379"], 0xd0}}, 0x20050800)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='ext4_ext_show_extent\x00'}, 0x18)
socket$inet6_udplite(0xa, 0x2, 0x88)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

2.325939832s ago: executing program 3 (id=1078):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x20200, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYRESHEX=r0], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @rand_addr=0x64010100}, 0xc)
r2 = socket(0x2, 0x2, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x3000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r3, &(0x7f0000001300)=""/4118, 0x1016, 0x0)
bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e)
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00e1ff", 0x8, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x24, 0xf801}}}}}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = epoll_create(0x20000000)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000180)={0x80000020})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000004c0)='rpcgss_bad_seqno\x00', r4, 0x0, 0x20000003}, 0x18)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={<r7=>0x0, @multicast2, @loopback}, &(0x7f00000001c0)=0xc)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xf959, 0x0, r0, 0xc, '\x00', r7, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r8 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x18)
io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
syz_clone3(&(0x7f0000000280)={0x2104080, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58)

1.923936149s ago: executing program 1 (id=1079):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x3, &(0x7f00000001c0)=[{0x7, 0x26, 0x3f, 0x8}, {0xf20f, 0x4, 0x5, 0x9}, {0x5, 0xfc, 0x9, 0x6}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0x3, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e8000", 0x7}], 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0)
r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x201080, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x566, &(0x7f00000015c0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0)
lsetxattr$security_ima(&(0x7f00000008c0)='./cgroup/../file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000980)=ANY=[@ANYRES8=r0, @ANYBLOB="01e2889df0c88fda451b737cd9c7a40ee63a8d9e71c872882fecd5c0741b66c85aa0fac055bb7e78b78e5a672c04893ae927b25815c6f32ff2565b428847957c23", @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="087dee486077472a354d7c7e000200", @ANYRES64=r1, @ANYBLOB="7293f208", @ANYRES32=0x0, @ANYBLOB="10000000000000da8328b5d4b8611d761144e300582173d749284509b182d3d25a49a266064db0fad8f66c241bf200a9e8961349a0caccab202fab7b08b63ab34bcaee2a0be11f51a6779297996b6d62dbfdf737743e69355e006ddf368bb44d60b54e2f1bbc1cd3eec41913236b7d8bfebef4b35afba58f383dc427baaf675d055fad9fbc61b17d0eb49abbcd389200cbe6"], 0x44, 0x3)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a0b040000000000000000020000004b0004802c0001800b0001006e756d67656e00001c00028008000240000056af080003400000000008000140000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ac5b8b76cf4aae63cdaca69f8a69b562435fe"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c000000030601010000000000000000020000050900020073797a300000000005000100010000000900020073797a3100000000050001000700000005000100070000000500010007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4880)
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r7 = mq_open(&(0x7f0000000740)='\x00', 0x2, 0x40, &(0x7f0000000780)={0x101, 0x7, 0x81, 0x8})
mq_timedreceive(r7, &(0x7f00000007c0)=""/21, 0x15, 0x25e, 0x0)

1.547511955s ago: executing program 4 (id=1081):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000000)=""/81, 0x2b)
getdents(r0, 0xfffffffffffffffd, 0x58)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x5b, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000015006b", 0x7}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
rt_tgsigqueueinfo(0x0, 0x0, 0x1c, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r8, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "0000004a650600", "af193cff4810ba5ac120d096eb00000052095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38)
close(r8)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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")
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
listen(r9, 0x9)

1.327677848s ago: executing program 4 (id=1082):
creat(&(0x7f0000000200)='./file0\x00', 0x2c)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xd)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x4a7, &(0x7f0000003080)="$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")
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8d, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
syz_emit_ethernet(0x6e, 0x0, 0x0)
r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
write$selinux_access(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f683a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0)
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

1.316577999s ago: executing program 3 (id=1083):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)

1.25561211s ago: executing program 3 (id=1084):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301)
ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = getpid()
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000000c0)=r6, 0x12)

1.25392391s ago: executing program 1 (id=1085):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0)

1.073924942s ago: executing program 4 (id=1086):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000", @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='svcrdma_qp_error\x00', r0, 0x0, 0x6}, 0x18)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000080000000000"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f0000000180)=r4}, 0x20)
r5 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x104)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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")

948.992644ms ago: executing program 0 (id=1087):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./bus\x00', 0x0, 0x18}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd70000000000001"], 0x24}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x404, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}]}, 0x1, 0x5e6, &(0x7f0000001200)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)

714.637218ms ago: executing program 2 (id=1088):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x9], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40)

632.404039ms ago: executing program 2 (id=1089):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x9], 0x0, 0x0, 0x1, 0x1}}, 0x40)

587.23092ms ago: executing program 2 (id=1090):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x3, &(0x7f00000001c0)=[{0x7, 0x26, 0x3f, 0x8}, {0xf20f, 0x4, 0x5, 0x9}, {0x5, 0xfc, 0x9, 0x6}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0x3, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e8000", 0x7}], 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0)
r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x201080, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x566, &(0x7f00000015c0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0)
lsetxattr$security_ima(&(0x7f00000008c0)='./cgroup/../file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000980)=ANY=[@ANYRES8=r0, @ANYBLOB="01e2889df0c88fda451b737cd9c7a40ee63a8d9e71c872882fecd5c0741b66c85aa0fac055bb7e78b78e5a672c04893ae927b25815c6f32ff2565b428847957c23", @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="087dee486077472a354d7c7e000200", @ANYRES64=r1, @ANYBLOB="7293f208", @ANYRES32=0x0, @ANYBLOB="10000000000000da8328b5d4b8611d761144e300582173d749284509b182d3d25a49a266064db0fad8f66c241bf200a9e8961349a0caccab202fab7b08b63ab34bcaee2a0be11f51a6779297996b6d62dbfdf737743e69355e006ddf368bb44d60b54e2f1bbc1cd3eec41913236b7d8bfebef4b35afba58f383dc427baaf675d055fad9fbc61b17d0eb49abbcd389200cbe6"], 0x44, 0x3)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a0b040000000000000000020000004b0004802c0001800b0001006e756d67656e00001c00028008000240000056af080003400000000008000140000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ac5b8b76cf4aae63cdaca69f8a69b562435fe"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c000000030601010000000000000000020000050900020073797a300000000005000100010000000900020073797a3100000000050001000700000005000100070000000500010007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4880)
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r7 = mq_open(&(0x7f0000000740)='\x00', 0x2, 0x40, &(0x7f0000000780)={0x101, 0x7, 0x81, 0x8})
mq_timedreceive(r7, &(0x7f00000007c0)=""/21, 0x15, 0x25e, 0x0)

352.304114ms ago: executing program 3 (id=1091):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x100}, 0x18)
sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x44008004)

334.963904ms ago: executing program 1 (id=1092):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000c00009616009d000000000000000040000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000))
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800)
lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0)
lsm_get_self_attr(0x64, 0x0, &(0x7f0000000180), 0x1)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="0b00000007000000010001004900000081000500", @ANYRES32, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES16=r1, @ANYRESHEX, @ANYBLOB="259e", @ANYRESDEC=r3, @ANYBLOB="6e816bbbe6b767cb37dbeb49c580f7eb17021baa420e663aabcaedcfa70ed46b6a4ff71d7b52c3281e24d17b4342116295983d954ae60c01921361e553ab9227c8c36c5d7afe46f5ea1f7c2e5d31bbc277e5f061b6a8cc030a3654fc24d6b6c58d4ed4314345209d776102fb9fafb65c4e2eadd3c551e88e04f8f6f2a296b7c2a6ffd34f40a453"], 0x50)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r4, &(0x7f0000006500)=[{{&(0x7f0000000480)={0xa, 0x4e22, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="120000000000000029000000040000000800000000000000180000000000000029000000040000005e00000000000000be6e47906bde5da88744f2da956546d82e433e27cb9d6fd23ecb63f38fd6107830bc015e11af02ab96f87946c0aa8c1d6f65ff76bf5ad708492051e4b28816e5003ac92d479506feeb99727df75301eee3472389f3613f21b280c3485c272dd49949baee4c045ecda499a9aed35318b57a409ded19557f2b8021883e559ac8ae19d47b1c298a5b261b38ddd4b94e57dc9a26d938aec7d51ed6c2c179c0ccdf58f7dfe5"], 0x30}}], 0x1, 0x68004)
getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="6f7332e7b9aca2229e32d1892e73656375726974793e73656c696e757800"], 0x0, 0x0)

325.484814ms ago: executing program 3 (id=1093):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c666c7573682c726f6469722c726f6469722c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c001762a07a915c8f6c3378b924fc250bdae45cd22bb33f29d72cf1c8410df88b83b9710b49374a748455718cc4af5f3ced9aa10632d595e9c8c3a89f41b650b9ebd4886ae65bf02b7c8ea4e76ef2cc241ac9f89f2753df98db0ba9558c753363f296424ec60e703fac2db7e9f31283852e115cf6acb8d77b3e5d68"], 0x97, 0x2a9, &(0x7f0000000500)="$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")
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
getitimer(0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000007c0)={0x5, &(0x7f0000000400)=[{0x9, 0x49, 0x9, 0xc239}, {0x1, 0x6a, 0x4, 0x9}, {0x300, 0x6, 0xdc, 0x7dc5}, {0xe, 0xe, 0x3a, 0x3}, {0x2, 0x7, 0x80, 0x7}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN")
preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0)

307.635965ms ago: executing program 2 (id=1094):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
shmctl$IPC_SET(0x0, 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x200809)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
msgget(0x0, 0x0)

270.492365ms ago: executing program 2 (id=1095):
r0 = geteuid()
r1 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000ac0)={[{@grpjquota}, {@barrier}, {@dax_never}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xdda}}], [{@permit_directio}, {@euid_eq={'euid', 0x3d, r0}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@smackfstransmute={'smackfstransmute', 0x3d, '@/\\:^+^'}}, {@smackfsroot={'smackfsroot', 0x3d, '^@\x8e\xdb\x19('}}, {@smackfsfloor={'smackfsfloor', 0x3d, ',[[$}*:'}}, {@appraise_type}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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")
connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4d7, &(0x7f0000001480)="$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")
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='.\x02\x00')
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000a00)="b77831ba5991c21ae9214bc4bf82066a336c77587a2421f98c794dd7f4553a974218a0dc6f61165e7f086c730b688c82eaf04f18fb92751740bb2aa1514002ce8427d1b24fb57335e8a9949c9c97401b3c3b510fe9969f8adfc3cf572c1d131555041b984db2263c22e60e34f27a8c1bd6e660ce9b1ebe81c7283e042f1c308021f604", 0x83}], 0x1, &(0x7f0000000c00)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0}}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, r4, r5, r1, 0xffffffffffffffff]}}], 0x70, 0x40801}, 0x20008980)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)=<r6=>0x0)
statx(r1, &(0x7f0000000100)='.\x02\x00', 0x1000, 0x10, &(0x7f0000000900))
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRESOCT=0x0, @ANYRES32=r6], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001811000040be52918eee224d56fb21976bddc07f3b0965b556ab87d61926d77a851a9817e9af0349bec29ad84dd3f638efbba1d4b92caec5c2f9f740b8657154729b0d8d9d1d34200d6bd286142965f592248deeb5f5d3fbcf1f94b944244e3f2b0c38adcbf7083be2e547c7e931cea1a1c0e97387f755ae5894e77d538b96da2b6495b1360a94b6a3a4b1229131932987c39e9963641d8a97f6b67756cfb54ecbd49bb4c5d1caa6add97af9c890d33d", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x20000004)
ioprio_set$uid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0)
ioprio_get$pid(0x2, 0x0)
ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000000c0))
dup2(0xffffffffffffffff, 0xffffffffffffffff)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007112920000000000bf200000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

180.559236ms ago: executing program 4 (id=1096):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./bus\x00', 0x0, 0x18}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd70000000000001"], 0x24}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x404, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}]}, 0x1, 0x5e6, &(0x7f0000001200)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
sendfile(r3, r2, 0x0, 0x7ffff000)

33.438279ms ago: executing program 3 (id=1097):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r5, &(0x7f0000000080)=""/1, 0x1)
close(r5)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
socket$tipc(0x1e, 0x5, 0x0)

21.398909ms ago: executing program 0 (id=1098):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=<r3=>r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r3, @ANYRESOCT=r3, @ANYRESHEX=r2, @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r7=>r5, {0x0, 0xee00}}, './bus\x00'})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r8, r8, 0x2f, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB='/\x00\x00\x00\f'], 0x20)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)={0x7c, 0x3, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_NAT_SRC={0x68, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}]}, 0x7c}}, 0x20000010)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000280)={0x4, 0x2, 0x8, 0x6c4}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100000000000000040000000000000011000000000000002000000000000000"], 0x24, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xe0a40, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000100))
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vxcan0\x00'})
mq_unlink(0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x10, 0x9, 0x0, 0x1, [@typed={0xb, 0x0, 0x0, 0x0, @str='{&(/(:\x00'}]}]}, 0x2c}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100))
dup(r11)
socket$nl_netfilter(0x10, 0x3, 0xc)

0s ago: executing program 2 (id=1099):
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x290, 0x140, 0x19, 0x0, 0x140, 0x0, 0x220, 0x1f0, 0x1f0, 0x220, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x2, 0x7e}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x28f5c, 0x6]}, {0xffffffffffffffff, [0x0, 0x0, 0x4, 0x4, 0x1, 0x2], 0x0, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x14, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f0)

kernel console output (not intermixed with test programs):

d instead of data journaling mode
[  124.227328][ T5748] EXT4-fs (loop1): 1 truncate cleaned up
[  124.404940][ T5752] xt_CT: No such helper "pptp"
[  124.677956][ T5767] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.778519][ T5767] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.797797][ T5770] xt_CT: No such helper "pptp"
[  124.858087][ T5767] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.910714][ T5777] loop4: detected capacity change from 0 to 512
[  124.917739][ T5777] EXT4-fs: dax option not supported
[  124.929030][ T5777] loop4: detected capacity change from 0 to 512
[  124.937396][ T5767] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.944263][ T5777] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  124.962728][ T5775] netlink: 'syz.0.614': attribute type 3 has an invalid length.
[  124.973078][ T5780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=5780 comm=syz.1.613
[  124.988294][ T5777] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  124.998277][ T5777] System zones: 0-2, 18-18, 34-34
[  125.012773][ T5767] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.024773][ T5767] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.036879][ T5767] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.039033][ T5777] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.049418][ T5767] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.100494][ T5780] xt_CT: No such helper "pptp"
[  125.135829][   T29] kauditd_printk_skb: 363 callbacks suppressed
[  125.135844][   T29] audit: type=1326 audit(1750091409.187:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b08b2e929 code=0x7ffc0000
[  125.165507][   T29] audit: type=1326 audit(1750091409.187:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f1b08b2e929 code=0x7ffc0000
[  125.189053][   T29] audit: type=1326 audit(1750091409.187:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b08b2e929 code=0x7ffc0000
[  125.212680][   T29] audit: type=1326 audit(1750091409.187:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b08b2e929 code=0x7ffc0000
[  125.282329][   T29] audit: type=1326 audit(1750091409.197:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b08b2e929 code=0x7ffc0000
[  125.306017][   T29] audit: type=1326 audit(1750091409.197:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b08b2e929 code=0x7ffc0000
[  125.329476][   T29] audit: type=1326 audit(1750091409.197:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b08b2e929 code=0x7ffc0000
[  125.329838][ T5785] loop1: detected capacity change from 0 to 512
[  125.352824][   T29] audit: type=1326 audit(1750091409.197:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b08b2e929 code=0x7ffc0000
[  125.352871][   T29] audit: type=1326 audit(1750091409.217:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b08b2e929 code=0x7ffc0000
[  125.405893][   T29] audit: type=1326 audit(1750091409.227:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b08b2e929 code=0x7ffc0000
[  125.493406][ T5785] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.616: bg 0: block 5: invalid block bitmap
[  125.530200][ T5785] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  125.540565][ T5785] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.616: invalid indirect mapped block 3 (level 2)
[  125.554527][ T5785] EXT4-fs (loop1): 2 truncates cleaned up
[  125.604756][ T5801] netlink: 'syz.4.622': attribute type 3 has an invalid length.
[  125.701292][ T5804] loop0: detected capacity change from 0 to 512
[  125.723972][ T5802] lo speed is unknown, defaulting to 1000
[  125.773473][ T5795] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  125.893298][ T5804] EXT4-fs (loop0): 1 orphan inode deleted
[  125.907270][ T4555] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 1
[  125.941834][ T5804] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.017482][ T5804] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  126.036855][ T5816] loop4: detected capacity change from 0 to 512
[  126.045698][ T5816] EXT4-fs: Ignoring removed oldalloc option
[  126.060463][ T5816] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.626: Parent and EA inode have the same ino 15
[  126.073205][ T5816] EXT4-fs (loop4): Remounting filesystem read-only
[  126.079790][ T5816] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  126.090075][ T5816] EXT4-fs (loop4): 1 orphan inode deleted
[  126.122057][ T5819] loop0: detected capacity change from 0 to 512
[  126.170278][ T5822] loop2: detected capacity change from 0 to 512
[  126.175618][ T5824] loop4: detected capacity change from 0 to 1024
[  126.178925][ T5822] EXT4-fs: dax option not supported
[  126.188436][ T5820] loop1: detected capacity change from 0 to 128
[  126.200083][ T5824] EXT4-fs: Ignoring removed nobh option
[  126.205878][ T5824] EXT4-fs: Ignoring removed bh option
[  126.214277][ T5819] EXT4-fs (loop0): 1 orphan inode deleted
[  126.270410][ T5829] loop2: detected capacity change from 0 to 512
[  126.280485][   T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1
[  126.292130][ T5819] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.297918][ T5831] netlink: 48 bytes leftover after parsing attributes in process `syz.3.631'.
[  126.325937][ T5824] netlink: 'syz.4.628': attribute type 1 has an invalid length.
[  126.336392][ T5819] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  126.343571][ T5829] EXT4-fs (loop2): 1 orphan inode deleted
[  126.358994][   T51] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1
[  126.362781][ T5829] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.393048][ T5837] netlink: 'syz.3.632': attribute type 3 has an invalid length.
[  126.397143][ T5819] netlink: 48 bytes leftover after parsing attributes in process `syz.0.627'.
[  126.412261][ T5824] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.628: Allocating blocks 497-513 which overlap fs metadata
[  126.412707][ T5829] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  126.493210][ T5829] netlink: 48 bytes leftover after parsing attributes in process `syz.2.630'.
[  126.565587][ T5842] loop3: detected capacity change from 0 to 1024
[  126.572510][ T5842] EXT4-fs: Ignoring removed orlov option
[  126.578480][ T5842] EXT4-fs: Ignoring removed nomblk_io_submit option
[  126.611060][ T5846] loop2: detected capacity change from 0 to 512
[  126.636288][ T5846] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.634: bg 0: block 5: invalid block bitmap
[  126.770907][ T5852] lo speed is unknown, defaulting to 1000
[  126.870192][ T5852] loop0: detected capacity change from 0 to 512
[  126.876926][ T5852] EXT4-fs: Ignoring removed mblk_io_submit option
[  126.883417][ T5852] EXT4-fs: Ignoring removed bh option
[  126.900568][ T5846] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  126.910249][ T5852] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  127.048355][ T5846] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.634: invalid indirect mapped block 3 (level 2)
[  127.089243][ T5852] EXT4-fs (loop0): 1 truncate cleaned up
[  127.798224][ T5846] EXT4-fs (loop2): 2 truncates cleaned up
[  127.858409][ T5862] loop1: detected capacity change from 0 to 1024
[  127.865358][ T5862] EXT4-fs: Ignoring removed orlov option
[  127.871157][ T5862] EXT4-fs: Ignoring removed nomblk_io_submit option
[  128.028052][ T5867] loop4: detected capacity change from 0 to 1024
[  128.035055][ T5867] EXT4-fs: Ignoring removed nobh option
[  128.040742][ T5867] EXT4-fs: Ignoring removed bh option
[  128.129446][ T5876] loop3: detected capacity change from 0 to 512
[  128.136488][ T5876] EXT4-fs: Ignoring removed i_version option
[  128.175807][ T5872] xt_CT: No such helper "pptp"
[  128.368360][ T5879] bond1: entered promiscuous mode
[  128.373510][ T5879] bond1: entered allmulticast mode
[  128.385231][ T5867] netlink: 'syz.4.641': attribute type 1 has an invalid length.
[  128.499445][ T5881] loop2: detected capacity change from 0 to 1024
[  128.604525][ T5879] 8021q: adding VLAN 0 to HW filter on device bond1
[  128.662641][ T5888] loop0: detected capacity change from 0 to 512
[  128.677464][ T5867] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.641: Allocating blocks 497-513 which overlap fs metadata
[  128.724603][ T5879] bond1 (unregistering): Released all slaves
[  128.799918][ T5890] netlink: 'syz.1.644': attribute type 3 has an invalid length.
[  128.819121][ T5888] EXT4-fs (loop0): 1 orphan inode deleted
[  128.821665][ T5896] netlink: 'syz.3.645': attribute type 3 has an invalid length.
[  128.828844][ T4969] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1
[  128.834440][ T5888] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.857913][ T5888] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  128.882770][ T5888] netlink: 48 bytes leftover after parsing attributes in process `syz.0.643'.
[  128.891828][ T5881] lo speed is unknown, defaulting to 1000
[  129.141286][ T5909] loop3: detected capacity change from 0 to 1024
[  129.152642][ T5902] loop4: detected capacity change from 0 to 512
[  129.156280][ T5909] EXT4-fs: Ignoring removed orlov option
[  129.159322][ T5902] EXT4-fs: Ignoring removed i_version option
[  129.164640][ T5909] EXT4-fs: Ignoring removed nomblk_io_submit option
[  129.266720][ T5914] netlink: 'syz.2.651': attribute type 3 has an invalid length.
[  129.391368][ T5918] loop1: detected capacity change from 0 to 256
[  129.442766][ T5917] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  129.564452][ T5922] netlink: 48 bytes leftover after parsing attributes in process `syz.2.652'.
[  129.581161][ T5918] FAT-fs (loop1): codepage cp1251 not found
[  129.617198][ T5911] lo speed is unknown, defaulting to 1000
[  130.167214][ T5925] loop2: detected capacity change from 0 to 1024
[  130.204164][ T5925] EXT4-fs: Ignoring removed orlov option
[  130.209955][ T5925] EXT4-fs: Ignoring removed nomblk_io_submit option
[  130.322393][ T5931] xt_CT: No such helper "pptp"
[  130.719545][ T5940] loop4: detected capacity change from 0 to 512
[  131.391121][ T5944] loop3: detected capacity change from 0 to 512
[  131.397981][ T5944] EXT4-fs: Ignoring removed i_version option
[  131.477914][ T5947] lo speed is unknown, defaulting to 1000
[  132.377919][ T5940] EXT4-fs (loop4): 1 orphan inode deleted
[  132.397522][   T29] kauditd_printk_skb: 198 callbacks suppressed
[  132.397595][   T29] audit: type=1326 audit(1750091416.457:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5949 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b08b2e929 code=0x7ffc0000
[  132.414101][ T5940] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.427278][   T29] audit: type=1326 audit(1750091416.457:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5949 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f1b08b2e929 code=0x7ffc0000
[  132.437956][ T4969] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  132.461041][   T29] audit: type=1326 audit(1750091416.457:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5949 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b08b2e929 code=0x7ffc0000
[  132.470831][ T4969] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1
[  132.518186][ T5950] loop1: detected capacity change from 0 to 512
[  132.545304][ T5950] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.658: bg 0: block 5: invalid block bitmap
[  132.567451][ T5950] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  132.582253][ T5950] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.658: invalid indirect mapped block 3 (level 2)
[  132.599361][ T5950] EXT4-fs (loop1): 2 truncates cleaned up
[  132.625545][   T29] audit: type=1326 audit(1750091416.567:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5949 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b08b2e929 code=0x7ffc0000
[  132.649338][   T29] audit: type=1326 audit(1750091416.567:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5949 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b08b2e929 code=0x7ffc0000
[  132.672763][   T29] audit: type=1326 audit(1750091416.567:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5949 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b08b2e929 code=0x7ffc0000
[  132.696301][   T29] audit: type=1326 audit(1750091416.567:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5949 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b08b2e929 code=0x7ffc0000
[  132.719697][   T29] audit: type=1326 audit(1750091416.567:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5949 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b08b2e929 code=0x7ffc0000
[  132.743137][   T29] audit: type=1326 audit(1750091416.567:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5949 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b08b2e929 code=0x7ffc0000
[  132.755811][ T5940] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  132.775104][ T5953] netlink: 48 bytes leftover after parsing attributes in process `syz.4.657'.
[  132.799177][ T5956] netlink: 'syz.3.659': attribute type 3 has an invalid length.
[  132.825441][ T5960] loop1: detected capacity change from 0 to 512
[  132.860808][ T5963] loop2: detected capacity change from 0 to 512
[  132.867780][ T5964] netlink: 48 bytes leftover after parsing attributes in process `syz.0.663'.
[  132.899436][ T5960] EXT4-fs (loop1): 1 orphan inode deleted
[  132.914222][ T5960] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.932272][ T5970] netlink: 'syz.0.665': attribute type 3 has an invalid length.
[  132.936721][   T37] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[  132.958629][ T5963] EXT4-fs (loop2): 1 orphan inode deleted
[  132.965059][ T5963] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.976184][ T3454] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1
[  132.977697][ T5960] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  132.997808][ T5960] netlink: 48 bytes leftover after parsing attributes in process `syz.1.660'.
[  133.007574][ T5963] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  133.016123][ T5974] loop4: detected capacity change from 0 to 128
[  133.034058][ T5963] netlink: 48 bytes leftover after parsing attributes in process `syz.2.662'.
[  133.038230][ T5977] loop3: detected capacity change from 0 to 1024
[  133.051106][ T5977] EXT4-fs: Ignoring removed orlov option
[  133.056931][ T5977] EXT4-fs: Ignoring removed nomblk_io_submit option
[  133.197063][ T5989] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.259700][ T5989] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.297310][ T5989] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.370920][ T5996] loop2: detected capacity change from 0 to 512
[  133.377747][ T5996] EXT4-fs: Ignoring removed i_version option
[  133.390444][ T5989] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.456994][ T5989] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.471729][ T5989] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.485152][ T5989] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.499212][ T5989] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.600500][ T5994] xt_CT: No such helper "pptp"
[  133.726636][ T6000] loop3: detected capacity change from 0 to 512
[  133.740529][ T6000] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.672: bg 0: block 5: invalid block bitmap
[  133.755038][ T6000] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  133.768326][ T6000] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.672: invalid indirect mapped block 3 (level 2)
[  133.776388][ T6003] loop4: detected capacity change from 0 to 1024
[  133.783049][ T6000] EXT4-fs (loop3): 2 truncates cleaned up
[  133.791585][ T6003] EXT4-fs: Ignoring removed nobh option
[  133.799523][ T6003] EXT4-fs: Ignoring removed bh option
[  133.823080][ T3308] EXT4-fs unmount: 82 callbacks suppressed
[  133.823095][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.835155][ T6003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.862466][ T6007] loop3: detected capacity change from 0 to 512
[  133.890441][ T6007] EXT4-fs (loop3): 1 orphan inode deleted
[  133.894738][ T6003] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.673: Allocating blocks 497-513 which overlap fs metadata
[  133.900194][ T6007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.912381][ T3454] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1
[  133.935951][ T6007] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.986394][ T6002] EXT4-fs (loop4): pa ffff888106b08380: logic 16, phys. 321, len 12
[  133.994473][ T6002] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  134.033927][ T6007] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  134.055239][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.060581][ T6016] netlink: 'syz.0.676': attribute type 3 has an invalid length.
[  134.066493][ T6012] netlink: 48 bytes leftover after parsing attributes in process `syz.3.674'.
[  134.099834][ T6018] loop2: detected capacity change from 0 to 512
[  134.106713][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.124655][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.135213][ T6018] EXT4-fs: dax option not supported
[  134.170330][ T6022] loop4: detected capacity change from 0 to 512
[  134.180597][ T6018] loop2: detected capacity change from 0 to 512
[  134.196349][ T6020] bond2: entered promiscuous mode
[  134.201462][ T6020] bond2: entered allmulticast mode
[  134.206892][ T6020] 8021q: adding VLAN 0 to HW filter on device bond2
[  134.224025][ T6018] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  134.233107][ T6025] loop3: detected capacity change from 0 to 1024
[  134.234157][ T6020] bond2 (unregistering): Released all slaves
[  134.249841][ T6025] EXT4-fs: Ignoring removed orlov option
[  134.255614][ T6025] EXT4-fs: Ignoring removed nomblk_io_submit option
[  134.269858][ T6022] EXT4-fs (loop4): 1 orphan inode deleted
[  134.276295][ T6022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.289377][   T37] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[  134.310542][ T6022] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.312164][ T6034] loop0: detected capacity change from 0 to 1764
[  134.328211][ T6018] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  134.346986][ T6026] loop1: detected capacity change from 0 to 1024
[  134.358129][ T6018] System zones: 0-2, 18-18, 34-34
[  134.372079][ T6018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.388982][ T6018] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.407608][ T6025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.427173][ T6039] netlink: 48 bytes leftover after parsing attributes in process `syz.4.679'.
[  134.445818][ T6022] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  134.454817][ T6020] lo speed is unknown, defaulting to 1000
[  134.514489][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.524646][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.543310][ T6043] loop0: detected capacity change from 0 to 512
[  134.553579][ T6043] EXT4-fs: Ignoring removed oldalloc option
[  134.608808][ T6043] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.685: Parent and EA inode have the same ino 15
[  134.623033][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.657431][ T6043] EXT4-fs (loop0): Remounting filesystem read-only
[  134.664171][ T6043] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  134.723946][ T6043] EXT4-fs (loop0): 1 orphan inode deleted
[  134.730545][ T6043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.759695][ T6043] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.828208][ T6053] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  134.915561][ T6061] loop2: detected capacity change from 0 to 512
[  134.922578][ T6061] EXT4-fs: Ignoring removed i_version option
[  135.027697][ T6061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.282463][ T6066] loop1: detected capacity change from 0 to 512
[  135.308727][ T6066] EXT4-fs (loop1): 1 orphan inode deleted
[  135.314981][ T6066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.327962][ T4555] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 1
[  135.332174][ T6066] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.353748][ T6066] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  135.362775][ T6066] netlink: 48 bytes leftover after parsing attributes in process `syz.1.691'.
[  135.383287][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.422059][ T6073] loop1: detected capacity change from 0 to 512
[  135.438379][ T6073] EXT4-fs (loop1): 1 orphan inode deleted
[  135.444660][ T6073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.457651][   T37] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[  135.470723][ T6073] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.485642][ T6073] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  135.496902][ T6073] netlink: 48 bytes leftover after parsing attributes in process `syz.1.693'.
[  135.522070][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.554217][ T6078] loop1: detected capacity change from 0 to 1764
[  135.569309][ T6080] loop4: detected capacity change from 0 to 512
[  135.586204][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.588333][ T6080] EXT4-fs: Ignoring removed oldalloc option
[  135.618812][ T6080] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.694: Parent and EA inode have the same ino 15
[  135.634766][ T6082] loop1: detected capacity change from 0 to 512
[  135.645939][ T6080] EXT4-fs (loop4): Remounting filesystem read-only
[  135.652519][ T6080] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  135.689597][ T6080] EXT4-fs (loop4): 1 orphan inode deleted
[  135.696458][ T6080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.739146][ T6082] EXT4-fs (loop1): 1 orphan inode deleted
[  135.754522][ T6080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.766108][ T6082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.795525][ T6094] loop3: detected capacity change from 0 to 512
[  135.804522][ T6094] EXT4-fs: dax option not supported
[  135.819159][ T3454] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1
[  135.838248][ T6082] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.851817][ T6096] bond2: entered promiscuous mode
[  135.856997][ T6096] bond2: entered allmulticast mode
[  135.862679][ T6096] 8021q: adding VLAN 0 to HW filter on device bond2
[  135.903485][ T6094] loop3: detected capacity change from 0 to 512
[  135.926715][ T6098] loop0: detected capacity change from 0 to 1024
[  135.966491][ T6100] netlink: 48 bytes leftover after parsing attributes in process `syz.1.697'.
[  135.998829][ T6094] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  136.030046][ T6096] bond2 (unregistering): Released all slaves
[  136.090448][ T6082] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  136.120838][ T6094] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  136.165717][ T6102] loop4: detected capacity change from 0 to 1764
[  136.179175][ T6094] System zones: 0-2, 18-18, 34-34
[  136.217922][ T6094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.290157][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.341777][ T6094] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.471801][ T6111] loop1: detected capacity change from 0 to 512
[  136.590364][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.611357][ T6117] loop2: detected capacity change from 0 to 1024
[  136.618384][ T6117] EXT4-fs: Ignoring removed nobh option
[  136.623991][ T6117] EXT4-fs: Ignoring removed bh option
[  136.639229][ T6111] EXT4-fs (loop1): 1 orphan inode deleted
[  136.642119][ T3454] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1
[  136.655890][ T6111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.663807][ T6117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.681850][ T6111] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.701422][ T6111] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  136.839367][ T6126] loop4: detected capacity change from 0 to 256
[  136.865670][ T6126] FAT-fs (loop4): codepage cp1251 not found
[  136.899504][ T6126] lo speed is unknown, defaulting to 1000
[  137.082625][ T6111] netlink: 48 bytes leftover after parsing attributes in process `syz.1.703'.
[  137.164732][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.229176][ T6132] loop0: detected capacity change from 0 to 128
[  137.250467][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.736252][ T6137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=6137 comm=syz.2.708
[  138.431280][ T6141] loop1: detected capacity change from 0 to 256
[  138.587166][ T6141] FAT-fs (loop1): codepage cp1251 not found
[  138.619294][ T6141] lo speed is unknown, defaulting to 1000
[  139.110048][ T6137] xt_CT: No such helper "pptp"
[  139.209881][ T6147] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  139.283379][ T6157] netlink: 'syz.2.713': attribute type 3 has an invalid length.
[  139.690391][ T6169] loop4: detected capacity change from 0 to 1024
[  139.716319][ T6169] EXT4-fs: Ignoring removed nobh option
[  139.721949][ T6169] EXT4-fs: Ignoring removed bh option
[  139.768764][ T6169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.950759][ T6177] vhci_hcd: invalid port number 224
[  140.004682][ T6182] loop1: detected capacity change from 0 to 1764
[  140.085025][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.119188][ T6165] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  140.303510][   T29] kauditd_printk_skb: 275 callbacks suppressed
[  140.303524][   T29] audit: type=1400 audit(1750091424.357:4700): avc:  denied  { read write } for  pid=6193 comm="syz.4.726" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  140.334007][   T29] audit: type=1400 audit(1750091424.357:4701): avc:  denied  { open } for  pid=6193 comm="syz.4.726" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  140.422899][ T6198] loop4: detected capacity change from 0 to 512
[  140.456407][ T6198] EXT4-fs: dax option not supported
[  140.491244][   T29] audit: type=1326 audit(1750091424.547:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6b88e929 code=0x7ffc0000
[  140.514687][   T29] audit: type=1326 audit(1750091424.547:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe6b88e929 code=0x7ffc0000
[  140.538093][   T29] audit: type=1326 audit(1750091424.547:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6b88e929 code=0x7ffc0000
[  140.561481][   T29] audit: type=1326 audit(1750091424.547:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbe6b88e929 code=0x7ffc0000
[  140.585074][   T29] audit: type=1326 audit(1750091424.547:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbe6b88e963 code=0x7ffc0000
[  140.608277][   T29] audit: type=1326 audit(1750091424.547:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbe6b88d3df code=0x7ffc0000
[  140.631736][   T29] audit: type=1326 audit(1750091424.547:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbe6b88e9b7 code=0x7ffc0000
[  140.655086][   T29] audit: type=1326 audit(1750091424.547:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe6b88d290 code=0x7ffc0000
[  140.679456][ T6198] loop4: detected capacity change from 0 to 512
[  140.692211][ T6198] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  140.713638][ T6198] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  140.725504][ T6198] System zones: 0-2, 18-18, 34-34
[  140.736027][ T6205] loop3: detected capacity change from 0 to 512
[  140.745932][ T6198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.781596][ T6205] EXT4-fs (loop3): 1 orphan inode deleted
[  140.796398][   T31] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1
[  140.808210][ T6198] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.820325][ T6205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.852172][ T6205] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.863912][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.884224][ T6205] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  140.893618][ T6205] netlink: 48 bytes leftover after parsing attributes in process `syz.3.729'.
[  140.918021][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.930657][ T6213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=6213 comm=syz.0.732
[  140.981416][ T6217] loop3: detected capacity change from 0 to 1764
[  140.999674][ T6213] xt_CT: No such helper "pptp"
[  141.003330][ T6220] loop4: detected capacity change from 0 to 1764
[  141.120367][ T6231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=6231 comm=syz.0.740
[  141.138824][ T6234] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.155257][ T6226] loop2: detected capacity change from 0 to 1024
[  141.208001][ T6237] xt_CT: No such helper "pptp"
[  141.239516][ T6234] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.260789][ T6242] loop0: detected capacity change from 0 to 1024
[  141.267765][ T6242] EXT4-fs: Ignoring removed nobh option
[  141.273374][ T6242] EXT4-fs: Ignoring removed bh option
[  141.298367][ T6242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.315118][ T6234] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.390148][ T6234] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.419089][ T6242] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.744: Allocating blocks 497-513 which overlap fs metadata
[  141.504365][ T6241] EXT4-fs (loop0): pa ffff888106b08310: logic 16, phys. 321, len 12
[  141.512554][ T6241] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  141.525882][ T6234] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.543851][ T6234] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.571500][ T6234] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.590664][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.631591][ T6234] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.700979][ T6257] loop2: detected capacity change from 0 to 1764
[  141.752530][ T6264] FAULT_INJECTION: forcing a failure.
[  141.752530][ T6264] name failslab, interval 1, probability 0, space 0, times 1
[  141.752882][ T6262] process 'syz.0.747' launched '/dev/fd/3' with NULL argv: empty string added
[  141.765321][ T6264] CPU: 0 UID: 0 PID: 6264 Comm: syz.2.751 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(voluntary) 
[  141.765406][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  141.765426][ T6264] Call Trace:
[  141.765434][ T6264]  <TASK>
[  141.765444][ T6264]  __dump_stack+0x1d/0x30
[  141.765467][ T6264]  dump_stack_lvl+0xe8/0x140
[  141.765522][ T6264]  dump_stack+0x15/0x1b
[  141.765545][ T6264]  should_fail_ex+0x265/0x280
[  141.765589][ T6264]  should_failslab+0x8c/0xb0
[  141.765623][ T6264]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  141.765706][ T6264]  ? sidtab_sid2str_get+0xa0/0x130
[  141.765736][ T6264]  ? skb_put+0xa9/0xf0
[  141.765784][ T6264]  kmemdup_noprof+0x2b/0x70
[  141.765816][ T6264]  sidtab_sid2str_get+0xa0/0x130
[  141.765898][ T6264]  security_sid_to_context_core+0x1eb/0x2e0
[  141.765938][ T6264]  security_sid_to_context+0x27/0x40
[  141.766023][ T6264]  avc_audit_post_callback+0x9d/0x520
[  141.766065][ T6264]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  141.766104][ T6264]  common_lsm_audit+0x1b8/0x230
[  141.766208][ T6264]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  141.766248][ T6264]  slow_avc_audit+0x104/0x140
[  141.766290][ T6264]  avc_has_perm+0x128/0x150
[  141.766331][ T6264]  selinux_socket_sendmsg+0x175/0x1b0
[  141.766379][ T6264]  security_socket_sendmsg+0x48/0x80
[  141.766541][ T6264]  __sock_sendmsg+0x30/0x180
[  141.766575][ T6264]  ____sys_sendmsg+0x31e/0x4e0
[  141.766628][ T6264]  ___sys_sendmsg+0x17b/0x1d0
[  141.766671][ T6264]  __x64_sys_sendmsg+0xd4/0x160
[  141.766698][ T6264]  x64_sys_call+0x2999/0x2fb0
[  141.766727][ T6264]  do_syscall_64+0xd2/0x200
[  141.766753][ T6264]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  141.766863][ T6264]  ? clear_bhb_loop+0x40/0x90
[  141.766957][ T6264]  ? clear_bhb_loop+0x40/0x90
[  141.766988][ T6264]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.767016][ T6264] RIP: 0033:0x7f999814e929
[  141.767112][ T6264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.767138][ T6264] RSP: 002b:00007f99967b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  141.767225][ T6264] RAX: ffffffffffffffda RBX: 00007f9998375fa0 RCX: 00007f999814e929
[  141.767242][ T6264] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  141.767259][ T6264] RBP: 00007f99967b7090 R08: 0000000000000000 R09: 0000000000000000
[  141.767276][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  141.767293][ T6264] R13: 0000000000000000 R14: 00007f9998375fa0 R15: 00007ffd3b4aaf48
[  141.767319][ T6264]  </TASK>
[  142.081494][ T6274] loop4: detected capacity change from 0 to 1024
[  142.313799][ T6280] loop2: detected capacity change from 0 to 512
[  142.320921][ T6280] EXT4-fs: Ignoring removed i_version option
[  142.388608][ T6280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.785300][ T6258] syz.0.747 (6258) used greatest stack depth: 9688 bytes left
[  142.806553][ T6291] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.824043][ T6290] bond2: entered promiscuous mode
[  142.829261][ T6290] bond2: entered allmulticast mode
[  142.836228][ T6290] 8021q: adding VLAN 0 to HW filter on device bond2
[  142.849334][ T6290] bond2 (unregistering): Released all slaves
[  142.866633][ T6291] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.890004][ T6294] loop4: detected capacity change from 0 to 1024
[  142.977545][ T6291] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.996629][ T6297] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.012154][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.034996][ T6291] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.054400][ T6299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=6299 comm=syz.2.762
[  143.068037][ T6290] lo speed is unknown, defaulting to 1000
[  143.097421][ T6297] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.114877][ T6299] xt_CT: No such helper "pptp"
[  143.147638][ T6297] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.196787][ T6303] bond1: entered promiscuous mode
[  143.201981][ T6303] bond1: entered allmulticast mode
[  143.208451][ T6303] 8021q: adding VLAN 0 to HW filter on device bond1
[  143.219276][ T6303] bond1 (unregistering): Released all slaves
[  143.230097][ T6297] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.256923][ T6305] loop2: detected capacity change from 0 to 1024
[  143.282810][ T6307] netlink: 48 bytes leftover after parsing attributes in process `syz.4.764'.
[  143.313378][ T6297] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.325902][ T6297] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.339681][ T6297] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.366999][ T6297] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.380676][ T6303] lo speed is unknown, defaulting to 1000
[  143.449550][ T6311] netlink: 'syz.0.766': attribute type 3 has an invalid length.
[  143.516836][ T6316] loop3: detected capacity change from 0 to 1024
[  143.523697][ T6316] EXT4-fs: Ignoring removed orlov option
[  143.529531][ T6316] EXT4-fs: Ignoring removed nomblk_io_submit option
[  143.547220][ T6316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.593335][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.671196][ T6330] loop3: detected capacity change from 0 to 512
[  143.686422][ T6330] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.772: casefold flag without casefold feature
[  143.699377][ T6332] loop2: detected capacity change from 0 to 1764
[  143.711952][ T6330] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.772: couldn't read orphan inode 15 (err -117)
[  143.728009][ T6330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.741456][ T6330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.842800][ T6343] loop3: detected capacity change from 0 to 1764
[  144.248572][ T6351] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.337335][ T6351] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.397589][ T6351] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.437604][ T6353] loop0: detected capacity change from 0 to 512
[  144.468623][ T6353] EXT4-fs (loop0): 1 orphan inode deleted
[  144.474966][ T6353] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.487764][   T37] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[  144.489207][ T6353] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.513026][ T6353] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  144.523218][ T6351] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.536240][ T6353] netlink: 48 bytes leftover after parsing attributes in process `syz.0.780'.
[  144.563027][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.592680][ T6351] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.608908][ T6351] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.622230][ T6351] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.625699][ T6360] loop0: detected capacity change from 0 to 512
[  144.635864][ T6351] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.674358][ T6360] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.782: bg 0: block 5: invalid block bitmap
[  144.689168][ T6360] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  144.699111][ T6360] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.782: invalid indirect mapped block 3 (level 2)
[  144.718007][ T6360] EXT4-fs (loop0): 2 truncates cleaned up
[  144.735039][ T6360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.760777][ T6365] netlink: 'syz.4.784': attribute type 3 has an invalid length.
[  144.802273][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.815429][ T6367] xt_CT: No such helper "pptp"
[  144.883749][ T6374] loop3: detected capacity change from 0 to 1024
[  144.890971][ T6374] EXT4-fs: Ignoring removed nobh option
[  144.896647][ T6374] EXT4-fs: Ignoring removed bh option
[  144.905482][ T6380] netlink: 48 bytes leftover after parsing attributes in process `syz.2.791'.
[  144.929500][ T6374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.963748][ T6386] loop0: detected capacity change from 0 to 1764
[  144.977839][ T6374] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.789: Allocating blocks 497-513 which overlap fs metadata
[  145.022470][ T6373] EXT4-fs (loop3): pa ffff888106b08380: logic 16, phys. 321, len 12
[  145.030603][ T6373] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  145.053269][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.126684][ T6395] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.151330][ T6397] loop2: detected capacity change from 0 to 128
[  145.187221][ T6395] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.237592][ T6395] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.287499][ T6395] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.332254][ T6395] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.344183][ T6395] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.355886][ T6395] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.367721][ T6395] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.531379][ T6291] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.543137][ T6291] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.554823][ T6291] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.566557][ T6291] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.648996][ T6402] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.697015][ T6402] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.747711][ T6402] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.789550][   T29] kauditd_printk_skb: 348 callbacks suppressed
[  145.789569][   T29] audit: type=1400 audit(1750091429.847:5056): avc:  denied  { unmount } for  pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  145.817678][ T6402] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.830872][ T6406] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.907638][ T6406] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.941558][ T6414] netlink: 'syz.0.800': attribute type 3 has an invalid length.
[  145.945689][ T6411] xt_CT: No such helper "pptp"
[  145.961170][ T6406] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.993376][ T6416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=6416 comm=syz.3.801
[  146.017547][ T6406] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.032793][ T6416] xt_CT: No such helper "pptp"
[  146.071295][ T6420] netlink: 48 bytes leftover after parsing attributes in process `syz.3.802'.
[  146.084402][ T6421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=6421 comm=syz.0.803
[  146.118790][ T6421] xt_CT: No such helper "pptp"
[  146.181351][ T6429] loop0: detected capacity change from 0 to 512
[  146.190672][ T6429] EXT4-fs: dax option not supported
[  146.211025][   T29] audit: type=1326 audit(1750091430.267:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f271e929 code=0x7ffc0000
[  146.234767][ T6429] loop0: detected capacity change from 0 to 512
[  146.236734][   T29] audit: type=1326 audit(1750091430.277:5058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43f271e929 code=0x7ffc0000
[  146.249975][ T6429] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  146.264497][   T29] audit: type=1326 audit(1750091430.277:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f271e929 code=0x7ffc0000
[  146.296597][   T29] audit: type=1326 audit(1750091430.277:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f271e929 code=0x7ffc0000
[  146.319952][   T29] audit: type=1326 audit(1750091430.277:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f43f271e929 code=0x7ffc0000
[  146.343401][   T29] audit: type=1326 audit(1750091430.277:5062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f43f271e963 code=0x7ffc0000
[  146.366692][   T29] audit: type=1326 audit(1750091430.277:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f43f271d3df code=0x7ffc0000
[  146.389914][   T29] audit: type=1326 audit(1750091430.277:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f43f271e9b7 code=0x7ffc0000
[  146.407429][ T6429] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  146.413168][   T29] audit: type=1326 audit(1750091430.287:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43f271d290 code=0x7ffc0000
[  146.433872][ T6429] System zones: 0-2, 18-18, 34-34
[  146.452875][ T6429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.467715][ T6429] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.531046][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.802402][ T6443] loop2: detected capacity change from 0 to 1024
[  146.809879][ T6443] EXT4-fs: Ignoring removed nobh option
[  146.815541][ T6443] EXT4-fs: Ignoring removed bh option
[  146.856881][ T6443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.887840][ T6443] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.809: Allocating blocks 497-513 which overlap fs metadata
[  146.924145][ T6442] EXT4-fs (loop2): pa ffff888106a0b620: logic 16, phys. 321, len 12
[  146.932230][ T6442] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  146.962511][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.438527][ T6454] loop3: detected capacity change from 0 to 256
[  147.498941][ T6454] FAT-fs (loop3): codepage cp1251 not found
[  147.532388][ T6454] lo speed is unknown, defaulting to 1000
[  147.764982][ T6460] loop0: detected capacity change from 0 to 128
[  148.197207][ T6460] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  148.205155][ T6460] FAT-fs (loop0): Filesystem has been set read-only
[  148.237105][ T6460] syz.0.812: attempt to access beyond end of device
[  148.237105][ T6460] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  148.271871][ T6460] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  148.279789][ T6460] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  148.359216][ T6462] netlink: 'syz.0.813': attribute type 3 has an invalid length.
[  149.018268][ T6474] loop0: detected capacity change from 0 to 256
[  149.095640][ T6474] FAT-fs (loop0): codepage cp1251 not found
[  149.131176][ T6474] lo speed is unknown, defaulting to 1000
[  149.616740][ T6483] loop2: detected capacity change from 0 to 512
[  149.661605][ T6483] EXT4-fs (loop2): 1 orphan inode deleted
[  149.680641][ T6483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.714736][ T6483] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.787308][ T6488] netlink: 48 bytes leftover after parsing attributes in process `syz.2.820'.
[  149.798104][ T3454] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1
[  149.811561][ T6483] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  149.836794][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.026733][ T6492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=6492 comm=syz.3.822
[  150.052800][ T6492] xt_CT: No such helper "pptp"
[  150.434573][ T6496] xt_CT: No such helper "pptp"
[  150.476237][ T6502] loop3: detected capacity change from 0 to 512
[  150.483212][ T6502] EXT4-fs: dax option not supported
[  150.522688][ T6406] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.534285][ T6406] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.545835][ T6406] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.557634][ T6406] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.617573][ T6510] netlink: 44 bytes leftover after parsing attributes in process `syz.0.829'.
[  150.639846][ T6510] netlink: 'syz.0.829': attribute type 3 has an invalid length.
[  150.825243][   T29] kauditd_printk_skb: 85 callbacks suppressed
[  150.825256][   T29] audit: type=1400 audit(1750091434.877:5150): avc:  denied  { read } for  pid=6521 comm="syz.2.833" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  150.854498][   T29] audit: type=1400 audit(1750091434.877:5151): avc:  denied  { open } for  pid=6521 comm="syz.2.833" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  150.945854][   T29] audit: type=1400 audit(1750091434.997:5152): avc:  denied  { write } for  pid=6521 comm="syz.2.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  151.022624][ T6525] loop4: detected capacity change from 0 to 256
[  151.054055][ T6524] loop2: detected capacity change from 0 to 512
[  151.195607][ T6524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.217561][ T6525] FAT-fs (loop4): codepage cp1251 not found
[  151.252995][ T6523] lo speed is unknown, defaulting to 1000
[  151.763337][ T6524] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  151.796853][   T29] audit: type=1400 audit(1750091435.847:5153): avc:  denied  { read append open } for  pid=6521 comm="syz.2.833" path="/189/bus/pids.current" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  151.859827][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.910563][   T29] audit: type=1400 audit(1750091435.877:5154): avc:  denied  { write } for  pid=6521 comm="syz.2.833" path="/189/bus/bus" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  151.933232][   T29] audit: type=1400 audit(1750091435.887:5155): avc:  denied  { ioctl } for  pid=6521 comm="syz.2.833" path="/189/bus/pids.current" dev="loop2" ino=18 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  151.957916][   T29] audit: type=1400 audit(1750091435.887:5156): avc:  denied  { ioctl } for  pid=6521 comm="syz.2.833" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  151.982750][   T29] audit: type=1326 audit(1750091435.967:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.2.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999814e929 code=0x7ffc0000
[  152.006206][   T29] audit: type=1326 audit(1750091435.967:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.2.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999814e929 code=0x7ffc0000
[  152.098644][ T6536] bond1: entered promiscuous mode
[  152.103774][ T6536] bond1: entered allmulticast mode
[  152.129593][ T6536] 8021q: adding VLAN 0 to HW filter on device bond1
[  152.168298][ T6536] bond1 (unregistering): Released all slaves
[  152.186786][ T6538] loop2: detected capacity change from 0 to 1024
[  152.208427][ T6402] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.220343][ T6402] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.231911][ T6402] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.243343][ T6402] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.333627][ T6536] lo speed is unknown, defaulting to 1000
[  152.344903][   T29] audit: type=1326 audit(1750091436.097:5159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.2.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f999814e929 code=0x7ffc0000
[  152.441365][ T6543] loop1: detected capacity change from 0 to 1764
[  152.806932][ T6564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=6564 comm=syz.0.846
[  152.854231][ T6564] xt_CT: No such helper "pptp"
[  152.888458][ T6567] xt_CT: No such helper "pptp"
[  153.010277][ T6570] loop3: detected capacity change from 0 to 1764
[  153.159484][ T6580] lo speed is unknown, defaulting to 1000
[  153.233188][ T6580] loop0: detected capacity change from 0 to 512
[  153.240724][ T6580] EXT4-fs: Ignoring removed mblk_io_submit option
[  153.247255][ T6580] EXT4-fs: Ignoring removed bh option
[  153.993909][ T6575] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  154.085841][ T6580] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  154.187525][ T6583] lo speed is unknown, defaulting to 1000
[  154.669031][ T6582] loop2: detected capacity change from 0 to 512
[  154.675710][ T6582] EXT4-fs: Ignoring removed mblk_io_submit option
[  154.682259][ T6582] EXT4-fs: Ignoring removed bh option
[  154.770749][ T6582] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  154.786633][ T6580] EXT4-fs (loop0): 1 truncate cleaned up
[  154.793308][ T6580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.819945][ T6582] EXT4-fs (loop2): 1 truncate cleaned up
[  154.826036][ T6582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.119718][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.126325][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.305087][ T6598] loop4: detected capacity change from 0 to 512
[  155.311968][ T6598] EXT4-fs: Ignoring removed mblk_io_submit option
[  155.318468][ T6598] EXT4-fs: Ignoring removed bh option
[  155.329522][ T6598] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  155.341500][ T6598] EXT4-fs (loop4): 1 truncate cleaned up
[  155.347986][ T6598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.437217][ T6595] lo speed is unknown, defaulting to 1000
[  155.728016][ T6608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.857'.
[  155.878475][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.878814][ T6610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=6610 comm=syz.2.858
[  155.926627][ T6610] xt_CT: No such helper "pptp"
[  155.976395][ T6615] loop2: detected capacity change from 0 to 512
[  156.011504][ T6615] EXT4-fs (loop2): 1 orphan inode deleted
[  156.038975][ T3454] __quota_error: 86 callbacks suppressed
[  156.039026][ T3454] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  156.054577][ T3454] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1
[  156.096535][ T6615] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.137286][ T6615] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  156.163333][ T6615] netlink: 48 bytes leftover after parsing attributes in process `syz.2.860'.
[  156.210163][   T29] audit: type=1400 audit(1750091440.267:5246): avc:  denied  { ioctl } for  pid=6619 comm="syz.1.862" path="socket:[16536]" dev="sockfs" ino=16536 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  156.241222][ T6624] loop0: detected capacity change from 0 to 1764
[  156.329630][ T6620] loop1: detected capacity change from 0 to 512
[  156.391811][ T6620] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13
[  156.582201][ T6637] loop2: detected capacity change from 0 to 512
[  156.589182][ T6637] EXT4-fs: Ignoring removed mblk_io_submit option
[  156.595641][ T6637] EXT4-fs: Ignoring removed bh option
[  156.809708][ T6633] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.834772][ T6636] lo speed is unknown, defaulting to 1000
[  156.866922][ T6637] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  156.876066][ T6620] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #13: comm syz.1.862: iget: bad i_size value: 12154757448730
[  156.899095][ T6633] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.910042][ T6620] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.862: couldn't read orphan inode 13 (err -117)
[  156.922655][ T6637] EXT4-fs (loop2): 1 truncate cleaned up
[  156.968429][ T6633] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.984385][   T29] audit: type=1400 audit(1750091441.037:5247): avc:  denied  { create } for  pid=6619 comm="syz.1.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  157.027286][ T6633] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.083983][   T29] audit: type=1400 audit(1750091441.067:5248): avc:  denied  { connect } for  pid=6619 comm="syz.1.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  157.110536][ T6633] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.122328][ T6633] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.133987][ T6633] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.145632][ T6633] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.174042][ T6641] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.207207][ T6641] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.245737][   T29] audit: type=1400 audit(1750091441.297:5249): avc:  denied  { connect } for  pid=6646 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  157.268199][ T6649] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.308302][ T6641] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.327326][ T6649] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.417563][ T6641] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.447318][ T6649] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.492400][ T6659] loop2: detected capacity change from 0 to 128
[  157.517897][ T6649] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.572563][ T6649] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.584346][ T6649] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.596141][ T6649] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.607926][ T6649] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.112249][ T6666] xt_CT: No such helper "pptp"
[  158.168405][   T29] audit: type=1400 audit(1750091442.217:5250): avc:  denied  { ioctl } for  pid=6668 comm="syz.3.876" path="socket:[15312]" dev="sockfs" ino=15312 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  158.218024][   T29] audit: type=1400 audit(1750091442.267:5251): avc:  denied  { connect } for  pid=6671 comm="syz.3.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  158.239225][ T6672] loop3: detected capacity change from 0 to 164
[  158.255730][ T6672] iso9660: Unknown parameter 'c 8wx*a[Æaxed'
[  158.364036][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.880'.
[  158.411159][ T6680] loop2: detected capacity change from 0 to 1024
[  158.453512][ T6684] loop4: detected capacity change from 0 to 1764
[  158.547526][ T6688] lo speed is unknown, defaulting to 1000
[  158.601514][ T6688] loop3: detected capacity change from 0 to 512
[  158.608334][ T6688] EXT4-fs: Ignoring removed mblk_io_submit option
[  158.614837][ T6688] EXT4-fs: Ignoring removed bh option
[  158.621617][ T6688] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  158.806927][ T6688] EXT4-fs (loop3): 1 truncate cleaned up
[  159.131648][ T6697] loop0: detected capacity change from 0 to 1764
[  159.294308][   T29] audit: type=1326 audit(1750091443.337:5252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5296e9e929 code=0x7ffc0000
[  159.317832][   T29] audit: type=1326 audit(1750091443.337:5253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5296e9e929 code=0x7ffc0000
[  159.341380][   T29] audit: type=1326 audit(1750091443.337:5254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f5296e9e929 code=0x7ffc0000
[  159.373194][ T6701] xt_CT: You must specify a L4 protocol and not use inversions on it
[  159.408797][ T6703] loop0: detected capacity change from 0 to 512
[  159.455012][ T6703] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.884: casefold flag without casefold feature
[  159.517315][ T6641] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.528834][ T6641] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.540397][ T6641] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.551989][ T6641] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.585472][ T6703] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.884: couldn't read orphan inode 15 (err -117)
[  159.653182][ T6711] xt_connbytes: Forcing CT accounting to be enabled
[  159.682794][ T6711] Cannot find set identified by id 0 to match
[  159.692595][ T5860] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  159.700913][ T5860] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  159.703286][ T6712] Illegal XDP return value 4294967294 on prog  (id 589) dev N/A, expect packet loss!
[  159.729957][ T6713] xt_CT: No such helper "pptp"
[  159.783483][ T6720] bond1: entered promiscuous mode
[  159.788680][ T6720] bond1: entered allmulticast mode
[  159.795256][ T6715] fido_id[6715]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  159.795686][ T6720] 8021q: adding VLAN 0 to HW filter on device bond1
[  159.826567][ T6720] bond1 (unregistering): Released all slaves
[  159.864347][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'.
[  159.878706][ T6722] loop2: detected capacity change from 0 to 1024
[  159.885714][ T6724] loop3: detected capacity change from 0 to 1764
[  159.890656][ T6729] loop4: detected capacity change from 0 to 512
[  159.902572][ T6729] EXT4-fs: dax option not supported
[  159.909712][ T6712] bridge0: port 3(macvlan2) entered blocking state
[  159.916423][ T6712] bridge0: port 3(macvlan2) entered disabled state
[  159.925331][ T6712] macvlan2: entered allmulticast mode
[  159.930820][ T6712] bridge0: entered allmulticast mode
[  159.942645][ T6712] macvlan2: left allmulticast mode
[  159.947891][ T6712] bridge0: left allmulticast mode
[  159.992124][ T6730] loop1: detected capacity change from 0 to 128
[  160.070786][ T6737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=6737 comm=syz.4.896
[  160.084483][ T6732] loop3: detected capacity change from 0 to 1764
[  160.087307][ T6736] loop0: detected capacity change from 0 to 512
[  160.124194][ T6736] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.895: casefold flag without casefold feature
[  160.167210][ T6736] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.895: couldn't read orphan inode 15 (err -117)
[  160.225041][ T6749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=6749 comm=syz.3.900
[  160.283606][ T6754] xfrm0: entered allmulticast mode
[  160.440490][ T6761] loop4: detected capacity change from 0 to 1764
[  160.616009][ T6766] netlink: 16182 bytes leftover after parsing attributes in process `syz.4.906'.
[  160.629842][ T6766] @: renamed from vlan0 (while UP)
[  160.840656][ T6770] bond2: entered promiscuous mode
[  160.845797][ T6770] bond2: entered allmulticast mode
[  160.851288][ T6770] 8021q: adding VLAN 0 to HW filter on device bond2
[  160.862316][ T6770] bond2 (unregistering): Released all slaves
[  160.905529][ T6772] loop4: detected capacity change from 0 to 1024
[  160.954520][ T6776] loop1: detected capacity change from 0 to 1764
[  160.993792][ T6779] FAULT_INJECTION: forcing a failure.
[  160.993792][ T6779] name failslab, interval 1, probability 0, space 0, times 0
[  161.006557][ T6779] CPU: 1 UID: 0 PID: 6779 Comm: syz.1.910 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(voluntary) 
[  161.006630][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  161.006647][ T6779] Call Trace:
[  161.006655][ T6779]  <TASK>
[  161.006665][ T6779]  __dump_stack+0x1d/0x30
[  161.006759][ T6779]  dump_stack_lvl+0xe8/0x140
[  161.006849][ T6779]  dump_stack+0x15/0x1b
[  161.006952][ T6779]  should_fail_ex+0x265/0x280
[  161.006987][ T6779]  should_failslab+0x8c/0xb0
[  161.007064][ T6779]  __kvmalloc_node_noprof+0x123/0x4e0
[  161.007100][ T6779]  ? xt_alloc_table_info+0x3b/0x80
[  161.007192][ T6779]  ? should_fail_ex+0xdb/0x280
[  161.007222][ T6779]  xt_alloc_table_info+0x3b/0x80
[  161.007269][ T6779]  do_ipt_set_ctl+0x59c/0x820
[  161.007307][ T6779]  ? _raw_spin_unlock_bh+0x36/0x40
[  161.007390][ T6779]  ? tcp_release_cb+0xf1/0x370
[  161.007424][ T6779]  nf_setsockopt+0x199/0x1b0
[  161.007523][ T6779]  ip_setsockopt+0x102/0x110
[  161.007622][ T6779]  tcp_setsockopt+0x95/0xb0
[  161.007659][ T6779]  sock_common_setsockopt+0x66/0x80
[  161.007761][ T6779]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  161.007796][ T6779]  __sys_setsockopt+0x181/0x200
[  161.007901][ T6779]  __x64_sys_setsockopt+0x64/0x80
[  161.007934][ T6779]  x64_sys_call+0x2bd5/0x2fb0
[  161.007959][ T6779]  do_syscall_64+0xd2/0x200
[  161.008008][ T6779]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  161.008098][ T6779]  ? clear_bhb_loop+0x40/0x90
[  161.008126][ T6779]  ? clear_bhb_loop+0x40/0x90
[  161.008154][ T6779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.008240][ T6779] RIP: 0033:0x7f1b08b2e929
[  161.008264][ T6779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.008338][ T6779] RSP: 002b:00007f1b07197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  161.008362][ T6779] RAX: ffffffffffffffda RBX: 00007f1b08d55fa0 RCX: 00007f1b08b2e929
[  161.008445][ T6779] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003
[  161.008460][ T6779] RBP: 00007f1b07197090 R08: 0000000000000410 R09: 0000000000000000
[  161.008476][ T6779] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001
[  161.008489][ T6779] R13: 0000000000000000 R14: 00007f1b08d55fa0 R15: 00007fff1623ba08
[  161.008508][ T6779]  </TASK>
[  161.257054][   T29] kauditd_printk_skb: 228 callbacks suppressed
[  161.257072][   T29] audit: type=1400 audit(1750091445.317:5483): avc:  denied  { relabelfrom } for  pid=6780 comm="syz.2.911" name="NETLINK" dev="sockfs" ino=17105 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  161.287636][   T29] audit: type=1400 audit(1750091445.317:5484): avc:  denied  { relabelto } for  pid=6780 comm="syz.2.911" name="NETLINK" dev="sockfs" ino=17105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1
[  161.312742][   T29] audit: type=1400 audit(1750091445.317:5485): avc:  denied  { write } for  pid=6780 comm="syz.2.911" path="socket:[17105]" dev="sockfs" ino=17105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=sock_file permissive=1
[  161.441575][ T6788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=6788 comm=syz.1.914
[  161.540744][ T6800] loop1: detected capacity change from 0 to 512
[  161.557877][ T6800] EXT4-fs (loop1): 1 orphan inode deleted
[  161.565445][ T6800] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.577838][ T4969] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  161.587663][ T4969] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1
[  161.605907][ T6799] loop2: detected capacity change from 0 to 512
[  161.618759][ T6799] EXT4-fs (loop2): 1 orphan inode deleted
[  161.635916][ T6799] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.641913][   T51] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  161.656444][   T51] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1
[  161.660898][   T29] audit: type=1400 audit(1750091445.717:5486): avc:  denied  { create } for  pid=6791 comm="syz.4.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  161.669629][ T6808] netlink: 48 bytes leftover after parsing attributes in process `syz.1.920'.
[  161.691480][ T6799] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  161.697777][ T6800] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  161.717224][ T6799] netlink: 48 bytes leftover after parsing attributes in process `syz.2.918'.
[  161.811673][ T6812] netlink: 'syz.1.921': attribute type 3 has an invalid length.
[  161.842282][ T6814] loop0: detected capacity change from 0 to 128
[  161.862621][ T6813] lo speed is unknown, defaulting to 1000
[  161.916834][ T6813] loop3: detected capacity change from 0 to 512
[  161.923625][ T6813] EXT4-fs: Ignoring removed mblk_io_submit option
[  161.930105][ T6813] EXT4-fs: Ignoring removed bh option
[  161.936700][ T6813] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  161.957294][ T6813] EXT4-fs (loop3): 1 truncate cleaned up
[  162.209975][   T29] audit: type=1326 audit(1750091446.267:5487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6793 comm="syz.0.917" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43f271e929 code=0x0
[  162.236689][ T6821] FAULT_INJECTION: forcing a failure.
[  162.236689][ T6821] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  162.249982][ T6821] CPU: 1 UID: 0 PID: 6821 Comm: syz.1.923 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(voluntary) 
[  162.250016][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  162.250032][ T6821] Call Trace:
[  162.250040][ T6821]  <TASK>
[  162.250050][ T6821]  __dump_stack+0x1d/0x30
[  162.250081][ T6821]  dump_stack_lvl+0xe8/0x140
[  162.250159][ T6821]  dump_stack+0x15/0x1b
[  162.250180][ T6821]  should_fail_ex+0x265/0x280
[  162.250220][ T6821]  should_fail+0xb/0x20
[  162.250346][ T6821]  should_fail_usercopy+0x1a/0x20
[  162.250384][ T6821]  strncpy_from_user+0x25/0x230
[  162.250407][ T6821]  ? kmem_cache_alloc_noprof+0x186/0x310
[  162.250460][ T6821]  ? getname_flags+0x80/0x3b0
[  162.250564][ T6821]  getname_flags+0xae/0x3b0
[  162.250586][ T6821]  user_path_at+0x28/0x130
[  162.250611][ T6821]  user_statfs+0x4d/0x110
[  162.250638][ T6821]  __x64_sys_statfs+0x65/0xf0
[  162.250687][ T6821]  ? fput+0x8f/0xc0
[  162.250719][ T6821]  ? ksys_write+0x192/0x1a0
[  162.250737][ T6821]  x64_sys_call+0x1edd/0x2fb0
[  162.250761][ T6821]  do_syscall_64+0xd2/0x200
[  162.250783][ T6821]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  162.250814][ T6821]  ? clear_bhb_loop+0x40/0x90
[  162.250854][ T6821]  ? clear_bhb_loop+0x40/0x90
[  162.250946][ T6821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.251083][ T6821] RIP: 0033:0x7f1b08b2e929
[  162.251102][ T6821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.251124][ T6821] RSP: 002b:00007f1b07197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089
[  162.251147][ T6821] RAX: ffffffffffffffda RBX: 00007f1b08d55fa0 RCX: 00007f1b08b2e929
[  162.251162][ T6821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0
[  162.251177][ T6821] RBP: 00007f1b07197090 R08: 0000000000000000 R09: 0000000000000000
[  162.251210][ T6821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  162.251231][ T6821] R13: 0000000000000000 R14: 00007f1b08d55fa0 R15: 00007fff1623ba08
[  162.251313][ T6821]  </TASK>
[  162.512090][   T29] audit: type=1326 audit(1750091446.567:5488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.2.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999814e929 code=0x7ffc0000
[  162.535816][   T29] audit: type=1326 audit(1750091446.567:5489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.2.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999814e929 code=0x7ffc0000
[  162.574896][   T29] audit: type=1326 audit(1750091446.627:5490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.2.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f999814e929 code=0x7ffc0000
[  162.598609][    C0] hrtimer: interrupt took 36716 ns
[  162.632990][ T6826] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  162.774864][ T6835] loop3: detected capacity change from 0 to 512
[  162.813975][ T6835] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.930: casefold flag without casefold feature
[  162.846201][ T6835] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.930: couldn't read orphan inode 15 (err -117)
[  162.907071][ T6842] xt_CT: No such helper "pptp"
[  162.951084][ T6848] loop0: detected capacity change from 0 to 1024
[  162.970971][ T6848] EXT4-fs: Ignoring removed orlov option
[  162.976856][ T6848] EXT4-fs: Ignoring removed nomblk_io_submit option
[  163.100423][ T3417] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  163.118353][ T3417] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  163.174864][ T6864] lo speed is unknown, defaulting to 1000
[  163.226266][ T6864] loop4: detected capacity change from 0 to 512
[  163.233185][ T6864] EXT4-fs: Ignoring removed mblk_io_submit option
[  163.239684][ T6864] EXT4-fs: Ignoring removed bh option
[  163.246065][ T6864] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  163.258807][ T6864] EXT4-fs (loop4): 1 truncate cleaned up
[  163.623025][ T6883] FAULT_INJECTION: forcing a failure.
[  163.623025][ T6883] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  163.636243][ T6883] CPU: 0 UID: 0 PID: 6883 Comm: syz.1.946 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(voluntary) 
[  163.636271][ T6883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  163.636286][ T6883] Call Trace:
[  163.636294][ T6883]  <TASK>
[  163.636302][ T6883]  __dump_stack+0x1d/0x30
[  163.636327][ T6883]  dump_stack_lvl+0xe8/0x140
[  163.636426][ T6883]  dump_stack+0x15/0x1b
[  163.636446][ T6883]  should_fail_ex+0x265/0x280
[  163.636545][ T6883]  should_fail+0xb/0x20
[  163.636579][ T6883]  should_fail_usercopy+0x1a/0x20
[  163.636619][ T6883]  _copy_to_user+0x20/0xa0
[  163.636683][ T6883]  simple_read_from_buffer+0xb5/0x130
[  163.636723][ T6883]  proc_fail_nth_read+0x100/0x140
[  163.636747][ T6883]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  163.636781][ T6883]  vfs_read+0x1a0/0x6f0
[  163.636816][ T6883]  ? __rcu_read_unlock+0x4f/0x70
[  163.636842][ T6883]  ? __fget_files+0x184/0x1c0
[  163.636901][ T6883]  ksys_read+0xda/0x1a0
[  163.636946][ T6883]  __x64_sys_read+0x40/0x50
[  163.636990][ T6883]  x64_sys_call+0x2d77/0x2fb0
[  163.637012][ T6883]  do_syscall_64+0xd2/0x200
[  163.637032][ T6883]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  163.637073][ T6883]  ? clear_bhb_loop+0x40/0x90
[  163.637095][ T6883]  ? clear_bhb_loop+0x40/0x90
[  163.637117][ T6883]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.637142][ T6883] RIP: 0033:0x7f1b08b2d33c
[  163.637158][ T6883] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  163.637187][ T6883] RSP: 002b:00007f1b07176030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  163.637208][ T6883] RAX: ffffffffffffffda RBX: 00007f1b08d56080 RCX: 00007f1b08b2d33c
[  163.637223][ T6883] RDX: 000000000000000f RSI: 00007f1b071760a0 RDI: 0000000000000004
[  163.637237][ T6883] RBP: 00007f1b07176090 R08: 0000000000000000 R09: 0000000000000000
[  163.637251][ T6883] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001
[  163.637263][ T6883] R13: 0000000000000001 R14: 00007f1b08d56080 R15: 00007fff1623ba08
[  163.637281][ T6883]  </TASK>
[  163.716982][ T6889] netlink: 'syz.3.948': attribute type 3 has an invalid length.
[  163.848382][ T6890] loop0: detected capacity change from 0 to 128
[  163.931713][ T3316] EXT4-fs unmount: 25 callbacks suppressed
[  163.931733][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.040483][ T6900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.952'.
[  164.073214][ T6902] loop4: detected capacity change from 0 to 512
[  164.140026][ T6900] loop3: detected capacity change from 0 to 1024
[  164.161567][ T6900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.193797][ T6902] EXT4-fs (loop4): 1 orphan inode deleted
[  164.207580][ T4969] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1
[  164.221384][ T6902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.246316][ T6902] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.273232][ T6902] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  164.304189][ T6902] netlink: 48 bytes leftover after parsing attributes in process `syz.4.953'.
[  164.318420][ T5589] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  164.331718][ T5589] hid-generic 0000:0000:0000.0003: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  164.475055][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.714248][ T6916] bond2: entered promiscuous mode
[  164.719435][ T6916] bond2: entered allmulticast mode
[  164.729823][ T6918] loop4: detected capacity change from 0 to 1024
[  164.736638][ T6916] 8021q: adding VLAN 0 to HW filter on device bond2
[  164.743887][ T6918] EXT4-fs: Ignoring removed nobh option
[  164.749559][ T6918] EXT4-fs: Ignoring removed bh option
[  164.759902][ T6916] bond2 (unregistering): Released all slaves
[  164.798708][ T6918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.824502][ T6921] loop0: detected capacity change from 0 to 1024
[  164.879980][ T6918] netlink: 'syz.4.958': attribute type 1 has an invalid length.
[  164.915043][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.930380][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.932940][ T6921] lo speed is unknown, defaulting to 1000
[  164.980127][ T6926] loop3: detected capacity change from 0 to 512
[  165.032269][ T6928] netlink: 48 bytes leftover after parsing attributes in process `syz.4.959'.
[  165.042987][ T6926] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  165.073734][ T6926] EXT4-fs (loop3): 1 truncate cleaned up
[  165.086950][ T6926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.118987][ T6926] syz.3.960 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  165.137616][ T6926] netlink: 104 bytes leftover after parsing attributes in process `syz.3.960'.
[  165.203040][ T6934] FAULT_INJECTION: forcing a failure.
[  165.203040][ T6934] name failslab, interval 1, probability 0, space 0, times 0
[  165.215820][ T6934] CPU: 1 UID: 0 PID: 6934 Comm: syz.0.961 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(voluntary) 
[  165.215895][ T6934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  165.215907][ T6934] Call Trace:
[  165.215914][ T6934]  <TASK>
[  165.215921][ T6934]  __dump_stack+0x1d/0x30
[  165.215947][ T6934]  dump_stack_lvl+0xe8/0x140
[  165.215971][ T6934]  dump_stack+0x15/0x1b
[  165.216048][ T6934]  should_fail_ex+0x265/0x280
[  165.216079][ T6934]  should_failslab+0x8c/0xb0
[  165.216102][ T6934]  kmem_cache_alloc_noprof+0x50/0x310
[  165.216160][ T6934]  ? skb_clone+0x151/0x1f0
[  165.216186][ T6934]  skb_clone+0x151/0x1f0
[  165.216206][ T6934]  packet_rcv+0x3c0/0x9a0
[  165.216228][ T6934]  packet_rcv_fanout+0x32c/0x3d0
[  165.216366][ T6934]  ? __pfx_packet_rcv_fanout+0x10/0x10
[  165.216401][ T6934]  __netif_receive_skb_core+0x1a48/0x2410
[  165.216432][ T6934]  ? tun_rx_batched+0xc7/0x430
[  165.216458][ T6934]  __netif_receive_skb+0x59/0x270
[  165.216484][ T6934]  ? tun_rx_batched+0xc7/0x430
[  165.216591][ T6934]  netif_receive_skb+0x4b/0x2e0
[  165.216610][ T6934]  ? tun_rx_batched+0xc7/0x430
[  165.216640][ T6934]  tun_rx_batched+0xfc/0x430
[  165.216720][ T6934]  tun_get_user+0x1e5a/0x2500
[  165.216751][ T6934]  ? ref_tracker_alloc+0x1f2/0x2f0
[  165.216800][ T6934]  tun_chr_write_iter+0x15e/0x210
[  165.216827][ T6934]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  165.216857][ T6934]  vfs_write+0x4a0/0x8e0
[  165.216955][ T6934]  ksys_write+0xda/0x1a0
[  165.216973][ T6934]  __x64_sys_write+0x40/0x50
[  165.216991][ T6934]  x64_sys_call+0x2cdd/0x2fb0
[  165.217011][ T6934]  do_syscall_64+0xd2/0x200
[  165.217031][ T6934]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  165.217104][ T6934]  ? clear_bhb_loop+0x40/0x90
[  165.217131][ T6934]  ? clear_bhb_loop+0x40/0x90
[  165.217159][ T6934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.217184][ T6934] RIP: 0033:0x7f43f271d3df
[  165.217273][ T6934] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  165.217313][ T6934] RSP: 002b:00007f43f0d87000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  165.217333][ T6934] RAX: ffffffffffffffda RBX: 00007f43f2945fa0 RCX: 00007f43f271d3df
[  165.217349][ T6934] RDX: 000000000000004e RSI: 0000200000000100 RDI: 00000000000000c8
[  165.217366][ T6934] RBP: 00007f43f0d87090 R08: 0000000000000000 R09: 0000000000000000
[  165.217380][ T6934] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001
[  165.217392][ T6934] R13: 0000000000000000 R14: 00007f43f2945fa0 R15: 00007ffd03d55c08
[  165.217409][ T6934]  </TASK>
[  165.510074][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.540235][ T6941] netlink: 'syz.1.962': attribute type 3 has an invalid length.
[  165.550676][ T6939] xt_CT: No such helper "pptp"
[  165.857599][ T6967] FAULT_INJECTION: forcing a failure.
[  165.857599][ T6967] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  165.870741][ T6967] CPU: 0 UID: 0 PID: 6967 Comm: syz.2.975 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(voluntary) 
[  165.870798][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  165.870865][ T6967] Call Trace:
[  165.870874][ T6967]  <TASK>
[  165.870883][ T6967]  __dump_stack+0x1d/0x30
[  165.870911][ T6967]  dump_stack_lvl+0xe8/0x140
[  165.870936][ T6967]  dump_stack+0x15/0x1b
[  165.870973][ T6967]  should_fail_ex+0x265/0x280
[  165.871014][ T6967]  should_fail+0xb/0x20
[  165.871170][ T6967]  should_fail_usercopy+0x1a/0x20
[  165.871213][ T6967]  _copy_from_user+0x1c/0xb0
[  165.871233][ T6967]  __sys_bpf+0x178/0x790
[  165.871288][ T6967]  __x64_sys_bpf+0x41/0x50
[  165.871323][ T6967]  x64_sys_call+0x2478/0x2fb0
[  165.871350][ T6967]  do_syscall_64+0xd2/0x200
[  165.871367][ T6967]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  165.871395][ T6967]  ? clear_bhb_loop+0x40/0x90
[  165.871476][ T6967]  ? clear_bhb_loop+0x40/0x90
[  165.871504][ T6967]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.871552][ T6967] RIP: 0033:0x7f999814e929
[  165.871571][ T6967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.871596][ T6967] RSP: 002b:00007f99967b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  165.871620][ T6967] RAX: ffffffffffffffda RBX: 00007f9998375fa0 RCX: 00007f999814e929
[  165.871633][ T6967] RDX: 0000000000000040 RSI: 00002000000012c0 RDI: 000000000000001c
[  165.871695][ T6967] RBP: 00007f99967b7090 R08: 0000000000000000 R09: 0000000000000000
[  165.871710][ T6967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  165.871723][ T6967] R13: 0000000000000000 R14: 00007f9998375fa0 R15: 00007ffd3b4aaf48
[  165.871807][ T6967]  </TASK>
[  166.056968][ T6964] loop0: detected capacity change from 0 to 128
[  166.086244][ T6971] netlink: 'syz.4.974': attribute type 1 has an invalid length.
[  166.142899][ T6973] xt_CT: No such helper "pptp"
[  166.299500][ T6984] netlink: 'syz.3.980': attribute type 3 has an invalid length.
[  166.411278][ T6987] lo speed is unknown, defaulting to 1000
[  166.503450][ T6987] loop2: detected capacity change from 0 to 512
[  166.510308][ T6987] EXT4-fs: Ignoring removed mblk_io_submit option
[  166.516798][ T6987] EXT4-fs: Ignoring removed bh option
[  166.523470][ T6987] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  166.564556][ T6987] EXT4-fs (loop2): 1 truncate cleaned up
[  166.571102][ T6987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.627412][ T6990] netlink: 48 bytes leftover after parsing attributes in process `syz.4.982'.
[  166.906303][ T6999] netlink: 44 bytes leftover after parsing attributes in process `syz.4.987'.
[  166.933260][ T7001] FAULT_INJECTION: forcing a failure.
[  166.933260][ T7001] name failslab, interval 1, probability 0, space 0, times 0
[  166.946022][ T7001] CPU: 0 UID: 0 PID: 7001 Comm: syz.3.988 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(voluntary) 
[  166.946056][ T7001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  166.946072][ T7001] Call Trace:
[  166.946080][ T7001]  <TASK>
[  166.946089][ T7001]  __dump_stack+0x1d/0x30
[  166.946114][ T7001]  dump_stack_lvl+0xe8/0x140
[  166.946205][ T7001]  dump_stack+0x15/0x1b
[  166.946294][ T7001]  should_fail_ex+0x265/0x280
[  166.946333][ T7001]  should_failslab+0x8c/0xb0
[  166.946437][ T7001]  kmem_cache_alloc_node_noprof+0x57/0x320
[  166.946464][ T7001]  ? __alloc_skb+0x101/0x320
[  166.946540][ T7001]  __alloc_skb+0x101/0x320
[  166.946578][ T7001]  ? tcp_abort+0x379/0x460
[  166.946664][ T7001]  tcp_send_active_reset+0x5f/0x390
[  166.946743][ T7001]  ? tcp_abort+0x379/0x460
[  166.946780][ T7001]  tcp_abort+0x3d8/0x460
[  166.946797][ T7001]  smc_release+0xf7/0x390
[  166.946815][ T7001]  sock_close+0x6b/0x150
[  166.946840][ T7001]  ? __pfx_sock_close+0x10/0x10
[  166.946908][ T7001]  __fput+0x298/0x650
[  166.946935][ T7001]  fput_close_sync+0x6e/0x120
[  166.946971][ T7001]  __x64_sys_close+0x56/0xf0
[  166.947006][ T7001]  x64_sys_call+0x2747/0x2fb0
[  166.947127][ T7001]  do_syscall_64+0xd2/0x200
[  166.947150][ T7001]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  166.947211][ T7001]  ? clear_bhb_loop+0x40/0x90
[  166.947231][ T7001]  ? clear_bhb_loop+0x40/0x90
[  166.947251][ T7001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.947277][ T7001] RIP: 0033:0x7f5296e9e929
[  166.947296][ T7001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  166.947319][ T7001] RSP: 002b:00007f5295507038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  166.947341][ T7001] RAX: ffffffffffffffda RBX: 00007f52970c5fa0 RCX: 00007f5296e9e929
[  166.947356][ T7001] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  166.947368][ T7001] RBP: 00007f5295507090 R08: 0000000000000000 R09: 0000000000000000
[  166.947384][ T7001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  166.947399][ T7001] R13: 0000000000000000 R14: 00007f52970c5fa0 R15: 00007ffc8cd587d8
[  166.947492][ T7001]  </TASK>
[  167.249512][   T29] kauditd_printk_skb: 156 callbacks suppressed
[  167.249530][   T29] audit: type=1326 audit(1750091451.307:5646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f271e929 code=0x7ffc0000
[  167.318428][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.355530][ T7014] bond2: entered promiscuous mode
[  167.360768][ T7014] bond2: entered allmulticast mode
[  167.369587][   T29] audit: type=1326 audit(1750091451.337:5647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f43f271e929 code=0x7ffc0000
[  167.390628][ T7014] 8021q: adding VLAN 0 to HW filter on device bond2
[  167.392974][   T29] audit: type=1326 audit(1750091451.337:5648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f271e929 code=0x7ffc0000
[  167.422912][   T29] audit: type=1326 audit(1750091451.347:5649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43f271e929 code=0x7ffc0000
[  167.446339][   T29] audit: type=1326 audit(1750091451.347:5650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f271e929 code=0x7ffc0000
[  167.469738][   T29] audit: type=1326 audit(1750091451.347:5651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43f271e929 code=0x7ffc0000
[  167.493013][   T29] audit: type=1326 audit(1750091451.347:5652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f271e929 code=0x7ffc0000
[  167.517131][   T29] audit: type=1326 audit(1750091451.347:5653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f43f271e929 code=0x7ffc0000
[  167.540745][   T29] audit: type=1326 audit(1750091451.407:5654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7012 comm="syz.3.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5296e9e929 code=0x7ffc0000
[  167.564164][   T29] audit: type=1326 audit(1750091451.407:5655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7012 comm="syz.3.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f5296e9e929 code=0x7ffc0000
[  167.572295][ T7032] loop4: detected capacity change from 0 to 1024
[  167.592567][ T7028] loop3: detected capacity change from 0 to 1024
[  167.603895][ T7031] loop0: detected capacity change from 0 to 1024
[  167.612701][ T7014] bond2 (unregistering): Released all slaves
[  167.728027][ T7023] bond1: entered promiscuous mode
[  167.733641][ T7023] bond1: entered allmulticast mode
[  167.749381][ T7023] 8021q: adding VLAN 0 to HW filter on device bond1
[  167.760221][ T7023] bond1 (unregistering): Released all slaves
[  167.775595][ T7030] bond2: entered promiscuous mode
[  167.780908][ T7030] bond2: entered allmulticast mode
[  167.786556][ T7030] 8021q: adding VLAN 0 to HW filter on device bond2
[  167.800705][ T7030] bond2 (unregistering): Released all slaves
[  167.814190][ T7035] netlink: 'syz.2.995': attribute type 3 has an invalid length.
[  167.950028][ T7052] loop0: detected capacity change from 0 to 512
[  167.968280][ T7052] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.1001: casefold flag without casefold feature
[  167.981304][ T7052] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.1001: couldn't read orphan inode 15 (err -117)
[  168.013573][ T7052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.030576][ T7060] loop4: detected capacity change from 0 to 1764
[  168.037902][ T7052] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.039771][ T7058] loop1: detected capacity change from 0 to 1024
[  168.054539][ T7058] EXT4-fs: Ignoring removed orlov option
[  168.060371][ T7058] EXT4-fs: Ignoring removed nomblk_io_submit option
[  168.079015][ T7058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.122545][ T7066] loop3: detected capacity change from 0 to 1024
[  168.131980][ T7066] EXT4-fs: Ignoring removed nobh option
[  168.137712][ T7066] EXT4-fs: Ignoring removed bh option
[  168.175524][ T7069] loop0: detected capacity change from 0 to 512
[  168.188029][ T7066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.195497][ T7070] bond2: entered promiscuous mode
[  168.205355][ T7070] bond2: entered allmulticast mode
[  168.211087][ T7070] 8021q: adding VLAN 0 to HW filter on device bond2
[  168.218733][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.230847][ T7066] netlink: 'syz.3.1006': attribute type 1 has an invalid length.
[  168.240057][ T7070] bond2 (unregistering): Released all slaves
[  168.241062][ T7069] EXT4-fs: dax option not supported
[  168.261361][ T7076] loop4: detected capacity change from 0 to 1024
[  168.286245][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.288269][ T7069] loop0: detected capacity change from 0 to 512
[  168.320767][ T7069] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  168.375167][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1013'.
[  168.384846][ T7069] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  168.399065][ T7069] System zones: 0-2, 18-18, 34-34
[  168.405665][ T7069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.423358][ T7088] loop4: detected capacity change from 0 to 1024
[  168.431065][ T7069] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.464580][ T7088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.616692][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.670684][ T7097] loop1: detected capacity change from 0 to 512
[  168.677438][ T7097] EXT4-fs: Ignoring removed i_version option
[  168.678201][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.696986][ T7097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.721053][ T7099] loop2: detected capacity change from 0 to 1764
[  168.747537][ T7103] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.792882][ T7105] loop4: detected capacity change from 0 to 512
[  168.800816][ T7103] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.835392][ T7105] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.1018: casefold flag without casefold feature
[  168.856889][ T7105] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1018: couldn't read orphan inode 15 (err -117)
[  168.858164][ T7103] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.892085][ T7105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.907172][ T7105] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.967462][ T7103] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.023536][ T7112] loop2: detected capacity change from 0 to 1024
[  169.035690][ T7112] EXT4-fs: Ignoring removed nobh option
[  169.041435][ T7112] EXT4-fs: Ignoring removed bh option
[  169.050947][ T7103] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.062710][ T7103] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.072821][ T7113] loop4: detected capacity change from 0 to 1764
[  169.074457][ T7103] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.093245][ T7103] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.094499][ T7112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.123297][ T7112] netlink: 'syz.2.1020': attribute type 1 has an invalid length.
[  169.148495][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.274102][ T7121] bond1: entered promiscuous mode
[  169.279324][ T7121] bond1: entered allmulticast mode
[  169.284985][ T7121] 8021q: adding VLAN 0 to HW filter on device bond1
[  169.309351][ T7121] bond1 (unregistering): Released all slaves
[  169.362385][ T7127] loop2: detected capacity change from 0 to 1024
[  169.371318][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.467847][ T7125] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  169.517968][ T7135] loop0: detected capacity change from 0 to 512
[  169.540395][ T7135] EXT4-fs (loop0): 1 orphan inode deleted
[  169.553258][ T7135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.566286][   T37] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[  169.586228][ T7135] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.625671][ T7135] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  169.664170][ T7148] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1028'.
[  169.718749][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.849934][ T7157] loop0: detected capacity change from 0 to 128
[  169.910162][ T7159] loop3: detected capacity change from 0 to 512
[  169.932182][ T7159] EXT4-fs: dax option not supported
[  169.953689][ T7160] loop2: detected capacity change from 0 to 256
[  170.006709][ T7157] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  170.014620][ T7157] FAT-fs (loop0): Filesystem has been set read-only
[  170.156888][ T7160] FAT-fs (loop2): codepage cp1251 not found
[  170.187625][ T7155] lo speed is unknown, defaulting to 1000
[  170.369314][ T7157] syz.0.1035: attempt to access beyond end of device
[  170.369314][ T7157] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  170.525603][ T7157] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  170.533640][ T7157] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  170.575979][ T7169] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.682669][ T7176] loop0: detected capacity change from 0 to 512
[  170.708593][ T7176] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.1040: casefold flag without casefold feature
[  170.723704][ T7176] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.1040: couldn't read orphan inode 15 (err -117)
[  170.737493][ T7176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.754323][ T7176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.767380][ T7169] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.819139][ T7169] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.893124][ T7184] loop0: detected capacity change from 0 to 128
[  170.901572][ T7169] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.918916][ T7182] xt_CT: No such helper "pptp"
[  170.931302][ T7184] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  170.939276][ T7184] FAT-fs (loop0): Filesystem has been set read-only
[  170.952420][ T7169] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.964273][ T7169] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.976007][ T7169] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.987869][ T7169] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.025303][ T7184] syz.0.1041: attempt to access beyond end of device
[  171.025303][ T7184] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  171.039526][ T7184] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  171.047498][ T7184] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  171.079560][ T7188] netlink: 'syz.3.1043': attribute type 13 has an invalid length.
[  171.135435][ T7194] bridge0: entered promiscuous mode
[  171.141157][ T7194] macvlan2: entered promiscuous mode
[  171.149632][ T7194] bridge0: port 3(macvlan2) entered blocking state
[  171.156288][ T7194] bridge0: port 3(macvlan2) entered disabled state
[  171.163199][ T7194] macvlan2: entered allmulticast mode
[  171.168777][ T7194] bridge0: entered allmulticast mode
[  171.175168][ T7194] macvlan2: left allmulticast mode
[  171.180402][ T7194] bridge0: left allmulticast mode
[  171.186838][ T7194] bridge0: left promiscuous mode
[  171.205293][ T7198] xt_hashlimit: max too large, truncated to 1048576
[  171.413567][ T7209] loop2: detected capacity change from 0 to 512
[  171.417596][ T7205] bond2: entered promiscuous mode
[  171.425140][ T7205] bond2: entered allmulticast mode
[  171.431196][ T7205] 8021q: adding VLAN 0 to HW filter on device bond2
[  171.441918][ T7205] bond2 (unregistering): Released all slaves
[  171.449134][ T7209] EXT4-fs (loop2): 1 orphan inode deleted
[  171.455469][ T7209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.467249][   T51] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1
[  171.479876][ T7209] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.500426][ T7214] loop1: detected capacity change from 0 to 1024
[  171.528605][ T7209] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  171.542531][ T7209] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1049'.
[  171.563930][ T7218] loop4: detected capacity change from 0 to 512
[  171.575523][ T7218] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.1051: casefold flag without casefold feature
[  171.578718][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.591251][ T7218] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1051: couldn't read orphan inode 15 (err -117)
[  171.610243][ T7218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.623952][ T7218] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.655633][ T7223] netlink: 'syz.1.1053': attribute type 3 has an invalid length.
[  171.741882][ T7229] loop1: detected capacity change from 0 to 1764
[  171.836869][ T7234] loop1: detected capacity change from 0 to 512
[  171.843591][ T7234] EXT4-fs: dax option not supported
[  171.958165][ T7236] bond2: entered promiscuous mode
[  171.963327][ T7236] bond2: entered allmulticast mode
[  171.970386][ T7236] 8021q: adding VLAN 0 to HW filter on device bond2
[  172.007124][ T7240] loop4: detected capacity change from 0 to 512
[  172.014072][ T7240] EXT4-fs: Ignoring removed mblk_io_submit option
[  172.020660][ T7240] EXT4-fs: Ignoring removed bh option
[  172.027373][ T7240] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  172.060594][ T7240] EXT4-fs (loop4): 1 truncate cleaned up
[  172.067176][ T7240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.122778][ T7241] loop1: detected capacity change from 0 to 1024
[  172.173563][ T7236] bond2 (unregistering): Released all slaves
[  172.336248][ T7238] lo speed is unknown, defaulting to 1000
[  172.408244][   T29] kauditd_printk_skb: 421 callbacks suppressed
[  172.408258][   T29] audit: type=1326 audit(1750091456.467:6075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b08b2e929 code=0x7ffc0000
[  172.450742][   T29] audit: type=1326 audit(1750091456.497:6076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b08b2e929 code=0x7ffc0000
[  172.495894][   T29] audit: type=1326 audit(1750091456.547:6077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999814e929 code=0x7ffc0000
[  172.545834][   T29] audit: type=1326 audit(1750091456.557:6078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f999814e929 code=0x7ffc0000
[  172.569386][   T29] audit: type=1326 audit(1750091456.557:6079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999814e929 code=0x7ffc0000
[  172.592950][   T29] audit: type=1326 audit(1750091456.557:6080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f999814e929 code=0x7ffc0000
[  172.614346][ T7253] bond1: entered promiscuous mode
[  172.618266][   T29] audit: type=1326 audit(1750091456.557:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999814e929 code=0x7ffc0000
[  172.622964][ T7253] bond1: entered allmulticast mode
[  172.623829][ T7253] 8021q: adding VLAN 0 to HW filter on device bond1
[  172.647812][   T29] audit: type=1326 audit(1750091456.587:6082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f999814e929 code=0x7ffc0000
[  172.681722][   T29] audit: type=1326 audit(1750091456.587:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999814e929 code=0x7ffc0000
[  172.681805][ T7255] loop2: detected capacity change from 0 to 1024
[  172.705212][   T29] audit: type=1326 audit(1750091456.587:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999814e929 code=0x7ffc0000
[  172.811858][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.823362][ T7253] bond1 (unregistering): Released all slaves
[  172.870015][ T7261] netlink: 'syz.1.1064': attribute type 3 has an invalid length.
[  172.937590][ T7267] loop4: detected capacity change from 0 to 512
[  172.957095][ T7267] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.1065: casefold flag without casefold feature
[  172.980667][ T7255] lo speed is unknown, defaulting to 1000
[  173.002337][ T7267] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1065: couldn't read orphan inode 15 (err -117)
[  173.033894][ T7267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.107596][ T7267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.175915][ T7278] loop1: detected capacity change from 0 to 512
[  173.200313][ T7280] bond0: entered promiscuous mode
[  173.205433][ T7280] bond_slave_0: entered promiscuous mode
[  173.211326][ T7280] bond_slave_1: entered promiscuous mode
[  173.237720][ T7278] EXT4-fs (loop1): 1 orphan inode deleted
[  173.256833][ T7278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.269612][ T4171] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1
[  173.303711][ T7284] loop4: detected capacity change from 0 to 1764
[  173.334443][ T7278] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.398212][ T7278] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  173.427909][ T7290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=7290 comm=syz.4.1073
[  173.441643][ T7278] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1069'.
[  173.497112][ T7290] xt_CT: No such helper "pptp"
[  173.503264][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.516713][ T7294] loop2: detected capacity change from 0 to 1764
[  173.670374][ T7300] FAULT_INJECTION: forcing a failure.
[  173.670374][ T7300] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  173.683561][ T7300] CPU: 0 UID: 0 PID: 7300 Comm: syz.1.1075 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(voluntary) 
[  173.683664][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  173.683677][ T7300] Call Trace:
[  173.683683][ T7300]  <TASK>
[  173.683691][ T7300]  __dump_stack+0x1d/0x30
[  173.683716][ T7300]  dump_stack_lvl+0xe8/0x140
[  173.683740][ T7300]  dump_stack+0x15/0x1b
[  173.683767][ T7300]  should_fail_ex+0x265/0x280
[  173.683807][ T7300]  should_fail+0xb/0x20
[  173.683842][ T7300]  should_fail_usercopy+0x1a/0x20
[  173.683924][ T7300]  _copy_from_iter+0xcf/0xe40
[  173.683981][ T7300]  ? __build_skb_around+0x1a0/0x200
[  173.684011][ T7300]  ? __alloc_skb+0x223/0x320
[  173.684052][ T7300]  netlink_sendmsg+0x471/0x6b0
[  173.684129][ T7300]  ? __pfx_netlink_sendmsg+0x10/0x10
[  173.684147][ T7300]  __sock_sendmsg+0x142/0x180
[  173.684176][ T7300]  ____sys_sendmsg+0x31e/0x4e0
[  173.684221][ T7300]  ___sys_sendmsg+0x17b/0x1d0
[  173.684262][ T7300]  __x64_sys_sendmsg+0xd4/0x160
[  173.684290][ T7300]  x64_sys_call+0x2999/0x2fb0
[  173.684310][ T7300]  do_syscall_64+0xd2/0x200
[  173.684327][ T7300]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  173.684436][ T7300]  ? clear_bhb_loop+0x40/0x90
[  173.684456][ T7300]  ? clear_bhb_loop+0x40/0x90
[  173.684476][ T7300]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.684517][ T7300] RIP: 0033:0x7f1b08b2e929
[  173.684536][ T7300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.684602][ T7300] RSP: 002b:00007f1b07197038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  173.684620][ T7300] RAX: ffffffffffffffda RBX: 00007f1b08d55fa0 RCX: 00007f1b08b2e929
[  173.684633][ T7300] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003
[  173.684648][ T7300] RBP: 00007f1b07197090 R08: 0000000000000000 R09: 0000000000000000
[  173.684660][ T7300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.684673][ T7300] R13: 0000000000000000 R14: 00007f1b08d55fa0 R15: 00007fff1623ba08
[  173.684695][ T7300]  </TASK>
[  173.955054][ T7306] lo speed is unknown, defaulting to 1000
[  174.264536][ T7308] bond2: entered promiscuous mode
[  174.269735][ T7308] bond2: entered allmulticast mode
[  174.407977][ T7309] loop1: detected capacity change from 0 to 1024
[  174.436992][ T7308] 8021q: adding VLAN 0 to HW filter on device bond2
[  174.480331][ T7308] bond2 (unregistering): Released all slaves
[  174.495388][ T7316] loop4: detected capacity change from 0 to 512
[  174.534325][ T7316] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1081: bg 0: block 5: invalid block bitmap
[  174.567051][ T7316] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  174.578675][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1080'.
[  174.593254][ T7316] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1081: invalid indirect mapped block 3 (level 2)
[  174.612510][ T7316] EXT4-fs (loop4): 2 truncates cleaned up
[  174.619178][ T7316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.668791][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.731983][ T7323] loop4: detected capacity change from 0 to 512
[  174.748527][ T7323] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.1082: casefold flag without casefold feature
[  174.775813][ T7323] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1082: couldn't read orphan inode 15 (err -117)
[  174.816413][ T7323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.859823][ T7323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.966285][ T7329] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  175.053742][ T7335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1087'.
[  175.068467][ T7335] loop0: detected capacity change from 0 to 1024
[  175.085645][ T7335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.103017][ T7333] loop4: detected capacity change from 0 to 512
[  175.109871][ T7333] EXT4-fs: Ignoring removed i_version option
[  175.124322][ T7333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.446602][ T7345] bond1: entered promiscuous mode
[  175.451731][ T7345] bond1: entered allmulticast mode
[  175.463697][ T7345] 8021q: adding VLAN 0 to HW filter on device bond1
[  175.516274][ T7345] bond1 (unregistering): Released all slaves
[  175.522570][ T7347] loop2: detected capacity change from 0 to 1024
[  175.693768][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1093'.
[  175.724082][ T7354] loop3: detected capacity change from 0 to 256
[  175.753488][ T7358] loop2: detected capacity change from 0 to 512
[  175.760683][ T7358] EXT4-fs: dax option not supported
[  175.773677][ T7358] loop2: detected capacity change from 0 to 512
[  175.781764][ T7358] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  175.818167][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.843823][ T7358] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  175.844915][ T7363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1096'.
[  175.861291][ T7358] System zones: 0-2, 18-18, 34-34
[  175.890130][ T7363] loop4: detected capacity change from 0 to 1024
[  175.894281][ T7358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.925729][ T7363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.933547][ T7358] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.981777][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.995336][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.087390][ T7363] ==================================================================
[  176.095555][ T7363] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark
[  176.103854][ T7363] 
[  176.106206][ T7363] write to 0xffff88811984f254 of 4 bytes by task 7371 on cpu 0:
[  176.113863][ T7363]  xas_set_mark+0x12b/0x140
[  176.118409][ T7363]  __folio_start_writeback+0x1dd/0x440
[  176.123905][ T7363]  ext4_bio_write_folio+0x5ad/0x9f0
[  176.129130][ T7363]  mpage_submit_folio+0xe4/0x170
[  176.134106][ T7363]  mpage_process_page_bufs+0x39b/0x4a0
[  176.139597][ T7363]  mpage_prepare_extent_to_map+0x741/0xaa0
[  176.145433][ T7363]  ext4_do_writepages+0xa1a/0x21c0
[  176.150654][ T7363]  ext4_writepages+0x176/0x300
[  176.155444][ T7363]  do_writepages+0x1c6/0x310
[  176.160056][ T7363]  file_write_and_wait_range+0x156/0x2c0
[  176.165718][ T7363]  generic_buffers_fsync_noflush+0x45/0x120
[  176.171654][ T7363]  ext4_sync_file+0x1ab/0x690
[  176.176354][ T7363]  vfs_fsync_range+0x10a/0x130
[  176.181135][ T7363]  ext4_buffered_write_iter+0x34f/0x3c0
[  176.186708][ T7363]  ext4_file_write_iter+0xdbf/0xf00
[  176.192103][ T7363]  iter_file_splice_write+0x5ef/0x970
[  176.197506][ T7363]  direct_splice_actor+0x153/0x2a0
[  176.202645][ T7363]  splice_direct_to_actor+0x30f/0x680
[  176.208052][ T7363]  do_splice_direct+0xda/0x150
[  176.212846][ T7363]  do_sendfile+0x380/0x650
[  176.217313][ T7363]  __x64_sys_sendfile64+0x105/0x150
[  176.222533][ T7363]  x64_sys_call+0xb39/0x2fb0
[  176.227142][ T7363]  do_syscall_64+0xd2/0x200
[  176.231663][ T7363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.237577][ T7363] 
[  176.239915][ T7363] read to 0xffff88811984f254 of 4 bytes by task 7363 on cpu 1:
[  176.247473][ T7363]  filemap_write_and_wait_range+0xfc/0x340
[  176.253308][ T7363]  filemap_invalidate_pages+0xa4/0x1a0
[  176.258806][ T7363]  kiocb_invalidate_pages+0x6e/0x80
[  176.264039][ T7363]  __iomap_dio_rw+0x5d4/0x1250
[  176.268831][ T7363]  iomap_dio_rw+0x40/0x90
[  176.273190][ T7363]  ext4_file_write_iter+0xad9/0xf00
[  176.278409][ T7363]  iter_file_splice_write+0x5ef/0x970
[  176.283810][ T7363]  direct_splice_actor+0x153/0x2a0
[  176.289047][ T7363]  splice_direct_to_actor+0x30f/0x680
[  176.294464][ T7363]  do_splice_direct+0xda/0x150
[  176.299353][ T7363]  do_sendfile+0x380/0x650
[  176.303797][ T7363]  __x64_sys_sendfile64+0x105/0x150
[  176.309018][ T7363]  x64_sys_call+0xb39/0x2fb0
[  176.313627][ T7363]  do_syscall_64+0xd2/0x200
[  176.318148][ T7363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.324062][ T7363] 
[  176.326395][ T7363] value changed: 0x0a000021 -> 0x04000021
[  176.332126][ T7363] 
[  176.334459][ T7363] Reported by Kernel Concurrency Sanitizer on:
[  176.340622][ T7363] CPU: 1 UID: 0 PID: 7363 Comm: syz.4.1096 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(voluntary) 
[  176.351336][ T7363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  176.361415][ T7363] ==================================================================
[  176.373698][ T7368] loop0: detected capacity change from 0 to 512
[  176.396931][ T7368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.422880][ T7368] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  176.465576][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.763148][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.