last executing test programs:

2m37.931373966s ago: executing program 0 (id=152):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0x9}}, './file0\x00'})
ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x1, 0x6, 0xc0f0, 0x5, 0x14, "6c2cb856d0e33a22ada7f98ea5677e5daee86a"})
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0xa, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000077070000b79de24f5741a9308da09742580786d84c6000001008", @ANYRES32, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0xa0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10)
io_pgetevents(0x0, 0x6, 0x0, 0x0, 0x0, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000000)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="0203000210000000002000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000002000100000000000000fb000000ff8005000500000000000a00000000000000fc00000000000000000000000000000000000000000000000100080000000000010014"], 0x80}, 0x1, 0x7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10)
mkdir(&(0x7f0000000300)='./bus\x00', 0x290)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x1000)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r1, 0x13, 0x0, @val=@perf_event={0x2}}, 0x18)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1e}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0)
close(r0)

2m37.671235821s ago: executing program 0 (id=157):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)

2m37.595582852s ago: executing program 0 (id=160):
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
acct(&(0x7f00000001c0)='./file0\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x4, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40001, 0x1, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0xffffffff, 0x3a65, 0x5, 0x4, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c)
listen(r0, 0x20000005)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r3 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c)
r4 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0)
sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x7fee, 0x0}}], 0x500, 0x0)

2m37.516987633s ago: executing program 0 (id=162):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000009c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f00000002c0)=ANY=[], 0x835, 0x2)
setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
chmod(&(0x7f0000000000)='./file0/file0\x00', 0x130)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'batadv_slave_1\x00', &(0x7f00000003c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x4, 0x6, 0x7, 0x7fff, 0x6, 0xb, 0x1, 0x65, 0x8, 0x8, 0x0, 0xffffffff, 0x2, 0x2, 0x7775, 0x2c, 0xfff, 0x2, 0x5e1e, 0x2, 0x0, 0x2, 0x6f, 0xfffffffe, 0x10000, 0x1ff, 0x2, 0x401, 0x73, 0x0, 0xa4d, 0x3ff, 0xa0, 0x2, 0x4364, 0x8001, 0x7, 0x0, 0x0, 0x0, 0x9, 0xe40, 0x6, 0x2, 0x6, 0x7, 0x2, 0xd, 0x5, 0x9, 0x5, 0x3, 0x6, 0x7, 0x4, 0xdbb, 0x7, 0x7, 0x1, 0x401, 0x8001, 0x8, 0x80000000, 0x7, 0xffffc374, 0x1000, 0xefa, 0x1, 0x3, 0xffff, 0x1, 0x0, 0x1, 0x4, 0x5, 0x7ff, 0x3ff, 0xfffffffc, 0x5, 0xc, 0x4, 0x400, 0x8, 0x5, 0xfff, 0x2, 0x9, 0x9, 0xd8, 0x3, 0x6, 0x0, 0x200, 0x3da, 0xc5, 0x1c79, 0xffff, 0xffffffff, 0x5d, 0xdf4, 0x3, 0xffffffff, 0x6, 0x2, 0x4, 0x8, 0xad8, 0xffffffff, 0xbd82, 0xc978, 0xde6, 0x9, 0x5, 0x80, 0x3, 0x4, 0x9, 0xa16, 0x1ff, 0x0, 0x9, 0x1, 0x8001, 0x6, 0x8, 0x9, 0x4, 0x7f], "311127a7b9025519f203011cc4112030011bb96d4d9b81a94438812749f5077d20e3ad22e9b72ffacd63a5e6c21ea3631259eb7233d0d6c867883e9a0d1a157462fd0bb3eaad2c772bb1aeae0001b33c1cec207781b6d58d355e07180b841c3930ecb5469b45acc557138042cfe536f9f8b31392a309a14112cb98f18b39ccdbbf64d048243e7e3fe35a10b431d782c8be11238286e0c3fc2adf9554176dc769310192c9615b6a4eb31d1889452ef42b4065c86c5738f33311b7f5aff9"}})
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x2ddb, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000002640)=ANY=[], 0x859, 0x0)

2m37.237434348s ago: executing program 0 (id=172):
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
acct(&(0x7f00000001c0)='./file0\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x4, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40001, 0x1, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0xffffffff, 0x3a65, 0x5, 0x4, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c)
listen(r0, 0x20000005)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r3 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c)
r4 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0)
sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x7fee, 0x0}}], 0x500, 0x0)

2m36.924571383s ago: executing program 0 (id=181):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x8000c2, &(0x7f00000005c0)={[{@grpid}]}, 0x1, 0x5c4, &(0x7f0000000700)="$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")
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x2}}, './file2\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x54}}, 0x2000000)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xd4, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x401, @private2, 0xffffff80}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4054080)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x8000c2, &(0x7f00000005c0)={[{@grpid}]}, 0x1, 0x5c4, &(0x7f0000000700)="$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") (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file2\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x54}}, 0x2000000) (async)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xd4, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x401, @private2, 0xffffff80}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4054080) (async)

2m36.895216023s ago: executing program 32 (id=181):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x8000c2, &(0x7f00000005c0)={[{@grpid}]}, 0x1, 0x5c4, &(0x7f0000000700)="$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")
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x2}}, './file2\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x54}}, 0x2000000)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xd4, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x401, @private2, 0xffffff80}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4054080)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x8000c2, &(0x7f00000005c0)={[{@grpid}]}, 0x1, 0x5c4, &(0x7f0000000700)="$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") (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file2\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x54}}, 0x2000000) (async)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xd4, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x401, @private2, 0xffffff80}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4054080) (async)

3.730936788s ago: executing program 3 (id=2179):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80700a, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x5, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)=""/225, 0xe1}, {&(0x7f00000003c0)=""/95, 0x5f}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000500)=""/12, 0xc}, {&(0x7f0000000740)=""/182, 0xb6}], &(0x7f0000000800)=[0x300000000, 0x7fff, 0x0, 0x6], 0x5}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r3, 0x0, 0xc7ad}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=@delchain={0x24, 0x65, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x6}, {0xfffe, 0x8}, {0x8, 0x3}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0x9}}}, 0x24}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
rt_sigqueueinfo(0x0, 0x33, 0x0)
recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a80)="04e98406cc", 0x5}], 0x1}, 0x1)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000c80), 0x202, 0x0)
ioctl$TIOCGPTLCK(r6, 0x80045439, 0xfffffffffffffffd)
r7 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8)
open_tree(r8, &(0x7f0000000380)='./file0/file0\x00', 0x8000)
fchdir(r7)

2.821628683s ago: executing program 3 (id=2186):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xef, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000600a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)

2.522673468s ago: executing program 3 (id=2189):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x10000000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x20}, 0x18)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_0\x00'}}, 0x1e)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x2, @empty, 'erspan0\x00'}}, 0x1e)
close(r3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d5)
sendfile(r6, r6, 0x0, 0xfffe80)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000000, &(0x7f0000000200)={[{@nobarrier}, {@dioread_nolock}]}, 0x1, 0x527, &(0x7f0000019580)="$eJzs3W1rZFcdAPD/vZPZZndTM1WRtWBbbGW36M5sGttGkXYF0RdSUOv7NSaTEDLJhMykbkLRLH4AQUSFfgDfCH4AQfoRRCjoe1FRRLf6UnvlztyxeZhJhjzN7uT3g5M55z6c/zmXzJ37cLg3gEvruYi4GxGliHgxIqaL6WmRYreb8uXef/j2Qp6SyLI3/5FEUkzr1ZWXJyLierHaZER862sR300Ox21t76zONxr1zaJca69t1FrbO7dX1uaX68v19dnZmVfmXp17ee5OVjhVPysR8dpX/vLTH/3iq6/95nPf++O9v936ft6sL32i2+6IWDhVgAG6dZc726In30ab5xFsRPL+lEujbgUAAMPIj/E/GhGf7hz/T0epczQHAAAAjJPs9an4TxKRAQAAAGMrjYipSNJqMRZgKtK0Wu2O4f14XEsbzVb7s0vNrfXFfF5EJcrp0kqjfqcYK1yJcpKXZ4oxtr3ySwfKsxHxVET8ZPpqp1xdaDYWR33xAwAAAC6J68/uP///93TayQMAAABjpjKwAAAAAIwLp/wAAAAw/pz/AwAAwFj7xhtv5Cnrvcd78a3trdXmW7cX663V6trWQnWhublRXW42lzvP7Fs7rr5Gs7nx+Vjful9r11vtWmt7595ac2u9fW9l3yuwAQAAgAv01LPv/iGJiN0vXu2kKJ4DCFwWX78y1GJ/PveGABeoNOoGACMzMeoGACNTPnYJewgYd8kx8w8P3uleK4zfnk97AACAs3fzk3vv/7/Tmda7GXj8tQHgcWasDwBcPu7uweVVjtKDE61448ybAozIR7ofTwyaP/DhHUPc/+9eY8iyEzUMAAA4M1OdlKTV4jh9KtK0Wo14svNagHKytNKo3ynOD34/XX4iL8901kyOHTMMAAAAAAAAAAAAAAAAAAAAAAAAAHRlWRJZX1G8Fbz/XAAAAODxEZH+NSnO9G9OvzC1/+rAgbd+vfPmz+7Pt9ubMxFXkn9O55OuRET758X0lzKvBAAAAIBHQPc8vficGXVrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg37z98e6GXLjLu378cEZV+8SdisvM5GeWIuPavJCb2rJdEROkM4u8+iIgb/eIn8UGWZZWiFf3iXz3n+JXOpukfP42I62cQHy6zd/P9z91+3780nut89v/+TRTptAbv/9L/7/9KA/Y/Tx4oD/L0e7+qDYz/IOLpif77n178pBt/X4i88PyQffzOt3d2+s7YU2W/+Htj1dprG7XW9s7tlbX55fpyfX12duaVuVfnXp67U1taadSLv33D/PhTv/7gqP5fGxC/sr//h7b/C0P1Pov/vnf/4ce6hXK/+Lee7//7e2NA/LT47ftMkc/n3+zld7v5vZ755e+eOar/iwP6P3lM/28N1f/4wovf/OGf+s45tDUAgIvQ2t5ZnW806ptHZCaHWOaCM68/Gs04w0w8Gs0YVSb7Qff/8XT1nHL1Q5nsNKtPxBk048qh72kpTlphErGb1zXkPyQAADBmPjzoP+oOEgAAAAAAAAAAAAAAAAAAAHCeTvhYssmIOHKZu3tqPhhzdzRdBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA40v8CAAD//+SZylA=")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

2.299906412s ago: executing program 1 (id=2192):
r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000580), 0xfe, 0x507, &(0x7f0000001780)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0), 0x13f}}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=<r4=>r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000013c0)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000000)=0xea, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=<r6=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x400)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x1, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffd, 0xffffffff, 0x6, 0x40, 0x0, 0x0, 0x0, 0x10000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
r10 = gettid()
process_vm_writev(r10, 0x0, 0x0, 0x0, 0x0, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYRES64=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000700)=ANY=[@ANYRESDEC, @ANYRES8=r6, @ANYRES16=0x0, @ANYRES16=r4, @ANYRES64=r0, @ANYBLOB="d7805986105175354a936c6fbc8cddfe1ffdf49ab9fcd4f41b8c7fe20cf58aa8101bd4cd64e9e383f7ba71c2f3bdefc3032eb53e6e87df1c33a2ff29742e64ea4d9119547098fe9bb1f2", @ANYRES64=r7, @ANYRESHEX=r2], &(0x7f0000000240)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r13 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="600000000314010016000000fbdbdf250900020051797a3100000000080041007369770014003300627269646765300000000000000000000900020073797a32000000000800410089121da204"], 0x60}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='sched_switch\x00', r12, 0x0, 0x8000}, 0x18)
r14 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r15 = fcntl$dupfd(r14, 0x0, r14)
ioctl$SCSI_IOCTL_STOP_UNIT(r15, 0x6)

2.281549312s ago: executing program 4 (id=2193):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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")
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x400000000000000, 0x1}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000500080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b8008000900"], 0x184}}, 0x0)

1.962487428s ago: executing program 5 (id=2196):
perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x80, 0x81, 0x8, 0x4, 0x8, 0x0, 0x2, 0x40000, 0x56c717451f3297d2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xdc5, 0x0, @perf_config_ext={0x1af, 0x307}, 0x10000, 0xd, 0x4eeea2ac, 0x3, 0x2, 0x8, 0x4, 0x0, 0x80000000, 0x0, 0xf0d}, 0xffffffffffffffff, 0x13, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000020000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0)

1.862583069s ago: executing program 5 (id=2197):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r4, 0x0)
syz_open_procfs(r4, &(0x7f00000000c0)='net/vlan/vlan1\x00')
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r3}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x20, 0x1, 0x0, &(0x7f0000000600))
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)

1.626486094s ago: executing program 1 (id=2199):
socket$xdp(0x2c, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0xe501, 0x3, 0x538, 0x0, 0x6affffff, 0x3403000b, 0x3a0, 0x7, 0x4a0, 0x230, 0x230, 0x4a0, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x358, 0x3a0, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x2900}, {}, {0x0, 0x1}, {0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x1}, {}, {0x0, 0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x338}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x7, 0x0, 0x6}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0xa1}]}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0xffffff, 0x1000100, 0xffffffff, 0xff], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xff000000, 0xffffffff, 0xff], @ipv6=@mcast1, [0xffffff00, 0xff000000, 0xffffff00, 0xff], @ipv4=@dev={0xac, 0x14, 0x14, 0x22}, [0xff, 0xffffffff, 0xff0000ff], 0x75, 0x10, 0x2f, 0x4e23, 0x4e20, 0x4e24, 0x4e20}, 0xc1, 0xd2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x598)

1.626293274s ago: executing program 4 (id=2200):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1.508390095s ago: executing program 2 (id=2201):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc010000000000000000000000000001000400000000000a0000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0)

1.269485859s ago: executing program 5 (id=2202):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200e2f7ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet(0x2, 0x2, 0x1)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010)
sendmsg$inet(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000100000008"], 0x40}, 0x20000004)

1.2490295s ago: executing program 1 (id=2203):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009180)=@newsa={0x138, 0x10, 0x713, 0x2, 0x0, {{@in6=@local, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0xffffffffffffffff}, {0x0, 0x0, 0x200000000}, {0x0, 0x0, 0x1}, 0x0, 0x3504, 0x2, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'cmac(aes)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.24435522s ago: executing program 4 (id=2204):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x7d}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbd6f}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0xd2, &(0x7f00000005c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "b3c916", 0x9c, 0x11, 0x0, @remote, @empty, {[], {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "cec946952b9311b09e06d689410cad085fec1a0a4e39487fd9e0372ee451ecfd", "dfd75649c77b94c8b87bcce8acfae9fba4588b5bd3a6284fba6556d693b0424f741bc68b879b333cf342fc04fcd55a19", "38e98c1f0e830f41b45685361cf252d91ab13684f7da3344cf291b5a", {"d86d99dde112d33694ddd5731788dc55", "97a5bb21650100"}}}}}}}}, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='block_bio_remap\x00', r0}, 0x18) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xc, 0x14e, &(0x7f0000000900)="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"}) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @private=0xa010101}, 0x4, 0x1}}, 0x26)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x16, &(0x7f00000008c0)={@local, @multicast, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x3, 0x1, 0x3}}, {@generic={0x4305}}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000008000a40000000040c00024000000000000000030900010073797a30000000004c000000060a0104000000000000000001000000240001800700010072740000140002800800014000000009080002400000000208000b40000000000900010073797a30000000001400000011000100000000000000001b0000000a"], 0xc8}}, 0x0) (async)
r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000400)=@usbdevfs_driver={0xffffffff, 0x8, 0x0})

1.012159094s ago: executing program 1 (id=2205):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304f500"/20, @ANYRES32=0x0, @ANYBLOB="ef050000000000003000128009000100766c616e00000000200002800c0002000a0000001f000000060001000000000006000500"], 0x60}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000000)

974.901484ms ago: executing program 2 (id=2206):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet6(0xa, 0x802, 0x88)
setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f00000003c0)=0x2, 0x56)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{}, &(0x7f00000001c0), &(0x7f0000000700)='%pI4   \x00'}, 0x20)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x8001, 0x80000001, 0x0)
add_key(&(0x7f0000000540)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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")
lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000740))

955.961934ms ago: executing program 1 (id=2207):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[A\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x840)

864.702846ms ago: executing program 5 (id=2208):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0)

788.166937ms ago: executing program 4 (id=2209):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0)

697.763839ms ago: executing program 3 (id=2210):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000f8000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)

668.252449ms ago: executing program 1 (id=2211):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x3, 0x0, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000002010000006d11c4ed44fee80043b3ba1beaf505e3ae88c68e88f27ab21fb700075c314ad202ca9baa583da208485e58d9877b2e1530cc7c593c5bc899cec1823ca548bdb911005496d0122b2b8879801db38da4289a14b6094f41b3626c7bb9a558fe1c7c5a0bc73eaf7ae2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
dup3(r1, r0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000007f00000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
r8 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_context(r8, &(0x7f0000000340)='system_u:object_r:devlog_t:s0\x00', 0x1e)

649.00828ms ago: executing program 5 (id=2212):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
splice(r0, 0x0, r4, 0x0, 0x80, 0x6)
write(r2, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r6, 0x0, 0x6}, 0x18)
r7 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=<r8=>0x0, &(0x7f00000000c0)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r7, 0x47f8, 0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r11, 0x0, &(0x7f0000000480)='posixacl\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x0, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x0, 0x0, 0xfffffffc}, {}]}, [{}, {}, {0x0, 0x40}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3000000}, {}, {}, {}, {0x0, 0x0, 0x80000000}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xd88d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x994}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x4}, {}, {}, {}, {}, {}, {0x1000000}, {}, {}, {0x100000}, {}, {0xffffffff}, {0xfffffffe}, {}, {0xd5, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x40000000}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x800}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x9}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x8000000}, {}, {0x6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x4000}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)

556.189091ms ago: executing program 2 (id=2213):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x3000000, 0x0, 0x4010}, 0x0)

537.696672ms ago: executing program 4 (id=2214):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008002900", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804)

501.971722ms ago: executing program 3 (id=2215):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc02000000ffffffffffffff800000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ff010000000000000000000000000001400000006c0000000000000000000000000000000000ffff000000000000000000000000000000000000000000000000fc020000000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002010000ac1414bb000000000000000000000000000000000100"], 0x23c}, 0x1, 0x0, 0x0, 0x800}, 0x4004000)

347.961095ms ago: executing program 3 (id=2216):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94)
getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
socket$packet(0x11, 0xa, 0x300)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
rename(&(0x7f0000000780)='./file1\x00', &(0x7f00000002c0)='./file0/file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

346.738775ms ago: executing program 4 (id=2217):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
recvmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x24, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
close(r0)
readv(r3, &(0x7f0000000380)=[{&(0x7f0000000280)=""/183, 0xb7}, {&(0x7f0000000340)=""/35, 0x23}], 0x2)

309.082775ms ago: executing program 2 (id=2218):
syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x24, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x4, "4eb8"}, {0x0, 0xd, "9606053d0006ff00800000"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0)

175.939967ms ago: executing program 2 (id=2219):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0xa0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000008", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0)

31.95417ms ago: executing program 5 (id=2220):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
umount2(0x0, 0x5)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socket$inet6_sctp(0xa, 0x5, 0x84)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}) (async)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc})
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280)="120183008000", 0x0, 0x0, 0x4, 0x0, 0x0})
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async)
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000240))
r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000010000)='./file0\x00', 0x3000046, &(0x7f00000005c0)={[{@delalloc}, {@usrjquota}, {@nobarrier}, {@dioread_lock}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@delalloc}, {@bsdgroups}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x141042, 0x0)
pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1)
r4 = socket$key(0xf, 0x3, 0x2)
fstat(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setreuid(0x0, r5) (async)
setreuid(0x0, r5)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000680)={{{@in=@dev, @in6}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8) (async)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000680)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8)
r7 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) (async)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, <r8=>0x0}, &(0x7f00000000c0)=0xc)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000040000000c00088008000c00", @ANYRES32=r8, @ANYBLOB="66e2f1e3cf4c61030100df02e08ef1377d516ee8add414a4b01f3fdb72590000b31329350c50b7b9690efa626251c00cb205ac790253637f4cae43e380"], 0x28}}, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) (async)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200)={0x0, <r9=>0x0}, &(0x7f0000000240)=0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, <r10=>0x0}}, './file2\x00'})
lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r11=>0x0, <r12=>0x0})
chown(&(0x7f0000000840)='./file2\x00', r11, r12) (async)
chown(&(0x7f0000000840)='./file2\x00', r11, r12)
r13 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async)
getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r14=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r14)
stat(&(0x7f0000000340)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0})
statx(r3, &(0x7f00000003c0)='./file0\x00', 0x6000, 0x800, &(0x7f0000000c00)) (async)
statx(r3, &(0x7f00000003c0)='./file0\x00', 0x6000, 0x800, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0})
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="02000000010004000000000002000200", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0xee01, @ANYBLOB="02000300", @ANYRES32=r5, @ANYBLOB="02000000", @ANYRES32=r6, @ANYBLOB="02000100", @ANYRES32=r8, @ANYBLOB="02000300", @ANYRES32=r9, @ANYBLOB="040003000000000008000100", @ANYRES32=r10, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="82cd020039c262a72f7f70712196f3efba3bd878b5bd2aacd405d13b60fd71d1001f32f900cdf3a36c070067", @ANYRES32=r15, @ANYBLOB="08000300", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000400000000002000070000000000"], 0x84, 0x0) (async)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="02000000010004000000000002000200", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0xee01, @ANYBLOB="02000300", @ANYRES32=r5, @ANYBLOB="02000000", @ANYRES32=r6, @ANYBLOB="02000100", @ANYRES32=r8, @ANYBLOB="02000300", @ANYRES32=r9, @ANYBLOB="040003000000000008000100", @ANYRES32=r10, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="82cd020039c262a72f7f70712196f3efba3bd878b5bd2aacd405d13b60fd71d1001f32f900cdf3a36c070067", @ANYRES32=r15, @ANYBLOB="08000300", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000400000000002000070000000000"], 0x84, 0x0)

0s ago: executing program 2 (id=2221):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@empty, @in=@private}, {@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x500}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_val={0x10}]}, 0x148}}, 0x0)

kernel console output (not intermixed with test programs):

aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  135.902076][   T29] kauditd_printk_skb: 1205 callbacks suppressed
[  135.902090][   T29] audit: type=1400 audit(1745421354.075:13888): avc:  denied  { mount } for  pid=8136 comm="syz.5.1534" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  135.964353][   T29] audit: type=1400 audit(1745421354.115:13889): avc:  denied  { read } for  pid=2987 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  135.986579][   T29] audit: type=1400 audit(1745421354.115:13890): avc:  denied  { search } for  pid=2987 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  136.008260][   T29] audit: type=1400 audit(1745421354.115:13891): avc:  denied  { append } for  pid=2987 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  136.030794][   T29] audit: type=1400 audit(1745421354.115:13892): avc:  denied  { append open } for  pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  136.054106][   T29] audit: type=1400 audit(1745421354.115:13893): avc:  denied  { getattr } for  pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  136.123647][ T8139] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1534'.
[  136.172664][   T29] audit: type=1400 audit(1745421354.155:13894): avc:  denied  { read write } for  pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  136.197065][   T29] audit: type=1400 audit(1745421354.155:13895): avc:  denied  { read write open } for  pid=3316 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  136.222292][   T29] audit: type=1400 audit(1745421354.155:13896): avc:  denied  { ioctl } for  pid=3316 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  136.248066][   T29] audit: type=1400 audit(1745421354.205:13897): avc:  denied  { read write } for  pid=3307 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  136.350031][ T8148] loop3: detected capacity change from 0 to 512
[  136.379594][ T8149] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  136.418317][ T8148] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  136.471176][ T8148] EXT4-fs (loop3): orphan cleanup on readonly fs
[  136.479967][ T8148] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1536: Failed to acquire dquot type 1
[  136.502301][ T8148] EXT4-fs (loop3): 1 truncate cleaned up
[  136.510615][ T3949] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  136.521631][ T8148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  136.622182][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.036792][ T8174] FAULT_INJECTION: forcing a failure.
[  137.036792][ T8174] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  137.050057][ T8174] CPU: 1 UID: 0 PID: 8174 Comm: syz.3.1542 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) 
[  137.050088][ T8174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  137.050103][ T8174] Call Trace:
[  137.050111][ T8174]  <TASK>
[  137.050119][ T8174]  dump_stack_lvl+0xf6/0x150
[  137.050141][ T8174]  dump_stack+0x15/0x1a
[  137.050160][ T8174]  should_fail_ex+0x261/0x270
[  137.050188][ T8174]  should_fail_alloc_page+0xfd/0x110
[  137.050215][ T8174]  __alloc_frozen_pages_noprof+0x11d/0x360
[  137.050242][ T8174]  alloc_pages_mpol+0xb6/0x260
[  137.050270][ T8174]  alloc_pages_noprof+0xe8/0x130
[  137.050297][ T8174]  pte_alloc_one+0x2f/0x110
[  137.050324][ T8174]  ? __rcu_read_lock+0x36/0x50
[  137.050348][ T8174]  __pte_alloc+0x36/0x2b0
[  137.050387][ T8174]  copy_page_range+0x33f9/0x3a20
[  137.050416][ T8174]  ? mas_wr_store_type+0x6da/0xb50
[  137.050455][ T8174]  ? vma_interval_tree_insert_after+0x198/0x1b0
[  137.050481][ T8174]  copy_mm+0xabc/0x1360
[  137.050508][ T8174]  copy_process+0xcfc/0x1f60
[  137.050533][ T8174]  ? copy_clone_args_from_user+0x413/0x4b0
[  137.050571][ T8174]  kernel_clone+0x168/0x5d0
[  137.050602][ T8174]  __se_sys_clone3+0x1c6/0x200
[  137.050642][ T8174]  __x64_sys_clone3+0x31/0x40
[  137.050668][ T8174]  x64_sys_call+0x11e9/0x2e10
[  137.050693][ T8174]  do_syscall_64+0xc9/0x1a0
[  137.050718][ T8174]  ? clear_bhb_loop+0x25/0x80
[  137.050737][ T8174]  ? clear_bhb_loop+0x25/0x80
[  137.050761][ T8174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.050784][ T8174] RIP: 0033:0x7ff48954e169
[  137.050801][ T8174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.050822][ T8174] RSP: 002b:00007ff487b74f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  137.050843][ T8174] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007ff48954e169
[  137.050856][ T8174] RDX: 00007ff487b74f20 RSI: 0000000000000058 RDI: 00007ff487b74f20
[  137.050866][ T8174] RBP: 00007ff487b75090 R08: 0000000000000000 R09: 0000000000000058
[  137.050876][ T8174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  137.050886][ T8174] R13: 0000000000000000 R14: 00007ff489776160 R15: 00007ffee5510c38
[  137.050903][ T8174]  </TASK>
[  137.495731][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1543'.
[  137.533906][ T8176] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  137.687135][ T8182] netlink: 'syz.4.1544': attribute type 1 has an invalid length.
[  137.694953][ T8182] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1544'.
[  137.749216][ T8184] xt_hashlimit: Unknown mode mask 21000000, kernel too old?
[  137.813564][ T8190] loop2: detected capacity change from 0 to 1024
[  137.847616][ T8190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.925190][ T8193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8193 comm=syz.5.1547
[  137.940763][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.110844][ T8197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1549'.
[  138.162420][ T8197] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  138.184312][ T8200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8200 comm=syz.3.1549
[  138.210582][ T8201] netlink: 'syz.2.1550': attribute type 3 has an invalid length.
[  138.728377][ T8209] netlink: 'syz.1.1553': attribute type 4 has an invalid length.
[  139.117304][ T8222] loop2: detected capacity change from 0 to 512
[  139.139896][ T8222] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  139.190685][ T8222] EXT4-fs (loop2): 1 truncate cleaned up
[  139.198959][ T8222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.253676][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.911137][ T8238] loop2: detected capacity change from 0 to 512
[  140.165295][ T8238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.186245][ T8238] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.190370][ T8249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1566'.
[  140.196886][ T8247] blktrace: Concurrent blktraces are not allowed on loop11
[  140.267621][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.401305][ T8251] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1567'.
[  140.410383][ T8251] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1567'.
[  140.419422][ T8251] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1567'.
[  140.471428][ T8255] batman_adv: batadv0: Interface deactivated: veth0_macvtap
[  140.478817][ T8255] batman_adv: batadv0: Removing interface: veth0_macvtap
[  140.569499][ T8259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1571'.
[  140.620953][ T8259] can0: slcan on ttyS3.
[  140.622458][ T8251] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1567'.
[  140.634211][ T8251] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1567'.
[  140.643225][ T8251] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1567'.
[  140.751685][ T8259] loop4: detected capacity change from 0 to 2048
[  140.835658][ T8266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8266 comm=syz.5.1570
[  140.835705][ T8259] EXT4-fs: Ignoring removed bh option
[  140.897372][ T8251] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1567'.
[  140.897513][ T8259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.906446][ T8251] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1567'.
[  140.933378][   T29] kauditd_printk_skb: 1536 callbacks suppressed
[  140.933396][   T29] audit: type=1400 audit(1745421359.105:15432): avc:  denied  { mount } for  pid=8253 comm="kfree" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  141.012072][   T29] audit: type=1400 audit(1745421359.135:15433): avc:  denied  { read write } for  pid=8253 comm="kfree" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  141.035859][   T29] audit: type=1400 audit(1745421359.135:15434): avc:  denied  { read write open } for  pid=8253 comm="kfree" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  141.060562][   T29] audit: type=1400 audit(1745421359.155:15435): avc:  denied  { read write } for  pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  141.085496][   T29] audit: type=1400 audit(1745421359.155:15436): avc:  denied  { read write open } for  pid=3316 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  141.110830][   T29] audit: type=1400 audit(1745421359.155:15437): avc:  denied  { ioctl } for  pid=3316 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  141.136548][   T29] audit: type=1400 audit(1745421359.165:15438): avc:  denied  { write } for  pid=8253 comm="kfree" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  141.157917][   T29] audit: type=1400 audit(1745421359.165:15439): avc:  denied  { add_name } for  pid=8253 comm="kfree" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  141.178372][   T29] audit: type=1400 audit(1745421359.165:15440): avc:  denied  { create } for  pid=8253 comm="kfree" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  141.198475][   T29] audit: type=1400 audit(1745421359.165:15441): avc:  denied  { read write } for  pid=8253 comm="kfree" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  141.371195][ T8280] netlink: 'syz.1.1578': attribute type 9 has an invalid length.
[  141.543676][ T8253] can0 (unregistered): slcan off ttyS3.
[  141.611069][ T8289] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  141.633982][ T2180] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  141.662401][ T8290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8290 comm=syz.3.1577
[  141.668568][ T2180] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  141.687418][ T2180] EXT4-fs (loop4): This should not happen!! Data will be lost
[  141.687418][ T2180] 
[  141.697209][ T2180] EXT4-fs (loop4): Total free blocks count 0
[  141.703339][ T2180] EXT4-fs (loop4): Free/Dirty block details
[  141.709251][ T2180] EXT4-fs (loop4): free_blocks=2415919104
[  141.715077][ T2180] EXT4-fs (loop4): dirty_blocks=2288
[  141.720461][ T2180] EXT4-fs (loop4): Block reservation details
[  141.726515][ T2180] EXT4-fs (loop4): i_reserved_data_blocks=143
[  141.872684][ T2180] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  142.265470][ T8296] blktrace: Concurrent blktraces are not allowed on loop9
[  142.406523][ T8303] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.441601][ T8303] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.510818][ T8303] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.578649][ T8306] netlink: 'syz.1.1583': attribute type 1 has an invalid length.
[  142.611962][ T8303] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.666036][ T8310] bridge0: entered allmulticast mode
[  142.732433][ T8303] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.786302][ T8303] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.813740][ T8309] netlink: 'syz.2.1585': attribute type 10 has an invalid length.
[  142.825579][ T8303] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.881980][ T8303] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.071224][ T8318] netlink: 'syz.4.1589': attribute type 9 has an invalid length.
[  143.255590][ T8325] loop4: detected capacity change from 0 to 512
[  143.296796][ T8325] EXT4-fs (loop4): orphan cleanup on readonly fs
[  143.315369][ T8325] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.1593: bad orphan inode 13
[  143.367528][ T8325] ext4_test_bit(bit=12, block=18) = 1
[  143.373015][ T8325] is_bad_inode(inode)=0
[  143.377177][ T8325] NEXT_ORPHAN(inode)=2130706432
[  143.382097][ T8325] max_ino=32
[  143.385313][ T8325] i_nlink=1
[  143.389077][ T8325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  143.594994][ T8321] netlink: 'syz.1.1590': attribute type 29 has an invalid length.
[  143.639022][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.982928][ T8353] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.035010][ T8357] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  144.052262][ T8353] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.135106][ T8353] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.152665][ T8358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8358 comm=syz.4.1598
[  144.184139][ T8362] netlink: 'syz.1.1600': attribute type 1 has an invalid length.
[  144.205624][ T8365] loop5: detected capacity change from 0 to 2048
[  144.241307][ T8353] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.255942][ T8365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.284504][ T8365] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.451249][ T3949] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.557570][ T8372] bond1: entered promiscuous mode
[  144.562693][ T8372] bond1: entered allmulticast mode
[  144.568070][ T8372] 8021q: adding VLAN 0 to HW filter on device bond1
[  144.578735][ T8372] bond1 (unregistering): Released all slaves
[  144.703332][ T8378] loop2: detected capacity change from 0 to 512
[  145.412212][ T8390] netlink: 'syz.2.1611': attribute type 29 has an invalid length.
[  145.435588][ T8392] loop9: detected capacity change from 0 to 7
[  145.469476][ T8392] buffer_io_error: 179 callbacks suppressed
[  145.469492][ T8392] Buffer I/O error on dev loop9, logical block 0, async page read
[  145.489408][ T8395] lo speed is unknown, defaulting to 1000
[  145.495263][ T8392] Buffer I/O error on dev loop9, logical block 0, async page read
[  145.503263][ T8392]  loop9: unable to read partition table
[  145.505492][ T8395] lo speed is unknown, defaulting to 1000
[  145.543030][ T8395] lo speed is unknown, defaulting to 1000
[  145.570692][ T8392] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  145.570692][ T8392] 
Uªÿÿÿÿÿÿ) failed (rc=-5)
[  145.571260][ T8395] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  145.662192][ T8395] lo speed is unknown, defaulting to 1000
[  145.685021][ T8395] lo speed is unknown, defaulting to 1000
[  145.695104][ T8395] lo speed is unknown, defaulting to 1000
[  145.714464][ T8395] lo speed is unknown, defaulting to 1000
[  145.725745][ T8395] lo speed is unknown, defaulting to 1000
[  145.971122][   T29] kauditd_printk_skb: 1182 callbacks suppressed
[  145.971206][   T29] audit: type=1400 audit(1745421364.105:16624): avc:  denied  { prog_load } for  pid=8402 comm="syz.5.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  145.996698][   T29] audit: type=1400 audit(1745421364.115:16625): avc:  denied  { bpf } for  pid=8402 comm="syz.5.1620" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  146.017453][   T29] audit: type=1400 audit(1745421364.115:16626): avc:  denied  { perfmon } for  pid=8402 comm="syz.5.1620" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  146.038642][   T29] audit: type=1400 audit(1745421364.115:16627): avc:  denied  { perfmon } for  pid=8402 comm="syz.5.1620" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  146.059695][   T29] audit: type=1400 audit(1745421364.115:16628): avc:  denied  { perfmon } for  pid=8402 comm="syz.5.1620" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  146.080708][   T29] audit: type=1400 audit(1745421364.115:16629): avc:  denied  { perfmon } for  pid=8402 comm="syz.5.1620" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  146.101792][   T29] audit: type=1400 audit(1745421364.115:16630): avc:  denied  { perfmon } for  pid=8402 comm="syz.5.1620" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  146.122823][   T29] audit: type=1400 audit(1745421364.115:16631): avc:  denied  { bpf } for  pid=8402 comm="syz.5.1620" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  146.144121][   T29] audit: type=1326 audit(1745421364.145:16632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.3.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48954e169 code=0x7ffc0000
[  146.167676][   T29] audit: type=1326 audit(1745421364.145:16633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.3.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48954e169 code=0x7ffc0000
[  146.221569][ T8410] loop2: detected capacity change from 0 to 512
[  146.233299][ T8410] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  146.253261][ T8413] __nla_validate_parse: 19 callbacks suppressed
[  146.253276][ T8413] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1623'.
[  146.257510][ T8412] syzkaller1: entered promiscuous mode
[  146.274129][ T8412] syzkaller1: entered allmulticast mode
[  146.284175][ T8410] EXT4-fs (loop2): 1 truncate cleaned up
[  146.290392][ T8410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.305331][ T8410] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.465465][ T8419] bridge0: entered allmulticast mode
[  146.570971][ T8417] loop5: detected capacity change from 0 to 512
[  146.622900][ T8417] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  146.647951][ T8417] EXT4-fs (loop5): mount failed
[  146.705008][ T8429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1629'.
[  146.880620][ T8353] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.915015][ T8353] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.940974][ T8353] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.952990][ T8353] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.253294][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1633'.
[  147.714215][ T8445] loop1: detected capacity change from 0 to 128
[  147.755978][ T8445] FAT-fs (loop1): error, invalid access to FAT (entry 0x0ffffff6)
[  147.874650][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1638'.
[  147.883751][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1638'.
[  147.920922][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1638'.
[  147.951178][ T8450] loop4: detected capacity change from 0 to 512
[  147.984296][ T8453] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  148.018730][ T8450] EXT4-fs (loop4): orphan cleanup on readonly fs
[  148.026109][ T8450] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.1637: bad orphan inode 13
[  148.040367][ T8450] ext4_test_bit(bit=12, block=18) = 1
[  148.045821][ T8450] is_bad_inode(inode)=0
[  148.050040][ T8450] NEXT_ORPHAN(inode)=2130706432
[  148.054938][ T8450] max_ino=32
[  148.058135][ T8450] i_nlink=1
[  148.130145][ T8450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  148.233019][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1638'.
[  148.242028][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1638'.
[  148.257114][ T8450] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  148.259369][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1638'.
[  148.294384][ T8450] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  148.354890][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.496804][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1638'.
[  148.534999][ T8469] bridge0: entered allmulticast mode
[  148.796498][ T8474] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  148.803048][ T8474] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  148.810710][ T8474] vhci_hcd vhci_hcd.0: Device attached
[  148.849606][ T8477] vhci_hcd: connection closed
[  148.849774][  T168] vhci_hcd: stop threads
[  148.858744][  T168] vhci_hcd: release socket
[  148.863230][  T168] vhci_hcd: disconnect device
[  149.120280][ T8488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8488 comm=syz.4.1650
[  149.205949][ T8493] netlink: 'syz.3.1649': attribute type 1 has an invalid length.
[  149.290383][ T8496] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  149.572596][ T8500] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  149.640933][ T8502] syzkaller1: entered promiscuous mode
[  149.646478][ T8502] syzkaller1: entered allmulticast mode
[  149.812911][ T8507] vlan2: entered allmulticast mode
[  149.878725][ T8510] netlink: 'syz.5.1658': attribute type 3 has an invalid length.
[  150.216052][ T8518] netlink: 'syz.3.1663': attribute type 27 has an invalid length.
[  150.225497][ T8518] bridge0: left allmulticast mode
[  150.255575][ T3382] kernel write not supported for file /842/attr/exec (pid: 3382 comm: kworker/1:4)
[  150.340482][ T8518] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.356623][ T8518] 8021q: adding VLAN 0 to HW filter on device team0
[  150.398219][ T8526] loop1: detected capacity change from 0 to 1024
[  150.427698][ T8518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  150.443408][ T6825] lo speed is unknown, defaulting to 1000
[  150.449160][ T6825] syz0: Port: 1 Link ACTIVE
[  150.461013][ T8526] EXT4-fs: Ignoring removed orlov option
[  150.480458][ T8526] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  150.495720][ T8527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8527 comm=syz.5.1665
[  150.540908][ T8526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.697962][ T8533] EXT4-fs error (device loop1): ext4_check_all_de:659: inode #12: block 7: comm syz.1.1664: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0
[  150.714416][ T8535] loop3: detected capacity change from 0 to 512
[  150.731116][ T8533] EXT4-fs (loop1): Remounting filesystem read-only
[  150.758000][ T8535] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  150.768193][ T8535] EXT4-fs (loop3): orphan cleanup on readonly fs
[  150.781419][ T8535] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.1668: corrupted in-inode xattr: overlapping e_value 
[  150.828782][ T8535] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.1668: couldn't read orphan inode 15 (err -117)
[  150.852016][ T8535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  150.909679][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.051505][   T29] kauditd_printk_skb: 1286 callbacks suppressed
[  151.051523][   T29] audit: type=1400 audit(1745421368.221:17916): avc:  denied  { prog_load } for  pid=8539 comm="syz.2.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  151.077150][   T29] audit: type=1400 audit(1745421368.221:17917): avc:  denied  { bpf } for  pid=8539 comm="syz.2.1669" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  151.097815][   T29] audit: type=1400 audit(1745421368.221:17918): avc:  denied  { perfmon } for  pid=8539 comm="syz.2.1669" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  151.129038][   T29] audit: type=1400 audit(1745421368.251:17919): avc:  denied  { perfmon } for  pid=8539 comm="syz.2.1669" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  151.150200][   T29] audit: type=1400 audit(1745421368.251:17920): avc:  denied  { perfmon } for  pid=8539 comm="syz.2.1669" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  151.171623][   T29] audit: type=1400 audit(1745421368.251:17921): avc:  denied  { perfmon } for  pid=8539 comm="syz.2.1669" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  151.192720][   T29] audit: type=1400 audit(1745421368.251:17922): avc:  denied  { perfmon } for  pid=8539 comm="syz.2.1669" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  151.213756][   T29] audit: type=1400 audit(1745421368.251:17923): avc:  denied  { bpf } for  pid=8539 comm="syz.2.1669" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  151.234422][   T29] audit: type=1400 audit(1745421368.261:17924): avc:  denied  { prog_load } for  pid=8539 comm="syz.2.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  151.253605][   T29] audit: type=1400 audit(1745421368.261:17925): avc:  denied  { bpf } for  pid=8539 comm="syz.2.1669" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  151.410281][ T7195] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.964287][ T8562] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.030768][ T8562] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.103179][ T8565] netlink: 'syz.1.1678': attribute type 1 has an invalid length.
[  152.111061][ T8565] __nla_validate_parse: 5 callbacks suppressed
[  152.111073][ T8565] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1678'.
[  152.128362][ T8562] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.204133][ T8568] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1680'.
[  152.216319][ T8562] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.309946][ T8562] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.325017][ T8562] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.337427][ T8562] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.349874][ T8562] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.610941][ T3380] hid-generic 0000:0D44:0200.0002: unknown main item tag 0x0
[  152.618448][ T3380] hid-generic 0000:0D44:0200.0002: unknown main item tag 0x0
[  152.625936][ T3380] hid-generic 0000:0D44:0200.0002: unknown main item tag 0x0
[  152.646076][ T3380] hid-generic 0000:0D44:0200.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  152.666517][ T8583] xt_hashlimit: max too large, truncated to 1048576
[  153.511859][ T8599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1693'.
[  153.566364][ T8602] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.601712][ T8592] 
: renamed from vlan0
[  153.628647][ T8606] netlink: 'syz.1.1690': attribute type 1 has an invalid length.
[  153.636517][ T8606] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1690'.
[  153.672812][ T8602] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.715863][ T8602] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.752166][ T8607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8607 comm=syz.5.1692
[  153.801848][ T8602] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.994946][ T8615] batman_adv: batadv0: Adding interface: ip6gretap1
[  154.001708][ T8615] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.070488][ T8615] batman_adv: batadv0: Interface activated: ip6gretap1
[  154.993030][ T8620] xt_CT: You must specify a L4 protocol and not use inversions on it
[  155.336913][ T8630] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1699'.
[  155.366755][ T8632] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1701'.
[  155.380038][ T8631] sch_tbf: burst 3092 is lower than device lo mtu (520093714) !
[  155.394754][ T8627] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1699'.
[  155.853744][ T8645] loop5: detected capacity change from 0 to 164
[  155.872384][ T8645] syz.5.1706: attempt to access beyond end of device
[  155.872384][ T8645] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  155.902787][ T8645] syz.5.1706: attempt to access beyond end of device
[  155.902787][ T8645] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164
[  156.060768][   T29] kauditd_printk_skb: 1112 callbacks suppressed
[  156.060814][   T29] audit: type=1400 audit(1745421373.221:19038): avc:  denied  { prog_load } for  pid=8651 comm="syz.2.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  156.086242][   T29] audit: type=1400 audit(1745421373.231:19039): avc:  denied  { bpf } for  pid=8651 comm="syz.2.1708" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  156.106986][   T29] audit: type=1400 audit(1745421373.231:19040): avc:  denied  { perfmon } for  pid=8651 comm="syz.2.1708" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  156.129235][   T29] audit: type=1400 audit(1745421373.241:19041): avc:  denied  { perfmon } for  pid=8651 comm="syz.2.1708" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  156.150377][   T29] audit: type=1400 audit(1745421373.241:19042): avc:  denied  { perfmon } for  pid=8651 comm="syz.2.1708" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  156.171390][   T29] audit: type=1400 audit(1745421373.241:19043): avc:  denied  { perfmon } for  pid=8651 comm="syz.2.1708" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  156.192456][   T29] audit: type=1400 audit(1745421373.241:19044): avc:  denied  { perfmon } for  pid=8651 comm="syz.2.1708" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  156.213482][   T29] audit: type=1400 audit(1745421373.241:19045): avc:  denied  { bpf } for  pid=8651 comm="syz.2.1708" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  156.234166][   T29] audit: type=1400 audit(1745421373.241:19046): avc:  denied  { bpf } for  pid=8651 comm="syz.2.1708" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  156.254793][   T29] audit: type=1400 audit(1745421373.241:19047): avc:  denied  { prog_run } for  pid=8651 comm="syz.2.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  156.304767][ T8654] loop2: detected capacity change from 0 to 512
[  156.321677][ T8661] netlink: 'syz.3.1709': attribute type 1 has an invalid length.
[  156.329551][ T8661] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1709'.
[  156.341428][ T8654] EXT4-fs: Ignoring removed oldalloc option
[  156.353574][ T8654] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal
[  156.372435][ T8663] vlan0: entered allmulticast mode
[  156.424954][ T8668] netlink: 192 bytes leftover after parsing attributes in process `syz.5.1712'.
[  156.510884][ T8602] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.537781][ T8602] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.551402][ T8602] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.573086][ T8602] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.851299][ T8684] netlink: 'syz.3.1719': attribute type 27 has an invalid length.
[  156.892167][ T6824] lo speed is unknown, defaulting to 1000
[  156.898056][ T6824] syz0: Port: 1 Link DOWN
[  157.145694][ T8690] loop3: detected capacity change from 0 to 2048
[  157.191298][ T8690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.296465][ T8700] netlink: 'syz.1.1722': attribute type 26 has an invalid length.
[  157.391598][ T8702] loop5: detected capacity change from 0 to 128
[  157.437694][ T8705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1723'.
[  157.446719][ T8705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1723'.
[  157.461436][ T8702] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  157.485596][ T8702] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  157.641208][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.710763][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1726'.
[  157.838011][ T8716] netlink: 'syz.4.1727': attribute type 1 has an invalid length.
[  157.845945][ T8716] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1727'.
[  157.953715][ T8724] bpf: Bad value for 'gid'
[  157.974178][ T8722] loop1: detected capacity change from 0 to 1024
[  158.049392][ T8722] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  158.455061][ T8740] netlink: 'syz.4.1736': attribute type 10 has an invalid length.
[  158.463426][ T8740] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1736'.
[  158.500785][ T8740] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.502092][ T8742] loop1: detected capacity change from 0 to 128
[  158.510312][ T8740] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.526126][ T8740] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.534795][ T8740] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.536983][ T8742] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  158.586641][ T8742] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  158.597425][ T8740] team0: Port device geneve1 added
[  158.611733][ T8744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1738'.
[  158.620963][ T8744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1738'.
[  158.629737][ T8736] loop3: detected capacity change from 0 to 1024
[  158.878200][ T8752] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  158.899078][ T8736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.123662][ T8763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1744'.
[  159.172517][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.354615][ T8770] loop5: detected capacity change from 0 to 512
[  159.362367][ T8769] loop2: detected capacity change from 0 to 512
[  159.394231][ T8770] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1746: Invalid inode bitmap blk 4 in block_group 0
[  159.418014][ T8769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.431223][ T8770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.446489][ T8778] loop4: detected capacity change from 0 to 1024
[  159.453519][ T8769] ext4 filesystem being mounted at /358/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.465538][ T8778] EXT4-fs: Ignoring removed nobh option
[  159.471203][ T8778] EXT4-fs: Ignoring removed bh option
[  159.512933][ T8778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.533424][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.538097][ T8773] xt_CT: No such helper "snmp_trap"
[  159.551314][ T3949] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.582616][ T8778] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1749: Allocating blocks 385-513 which overlap fs metadata
[  159.625060][ T8784] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1750'.
[  159.680419][ T8778] EXT4-fs (loop4): pa ffff8881065a0310: logic 16, phys. 129, len 24
[  159.688638][ T8778] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[  159.735298][ T8778] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28
[  159.735866][ T8789] vlan2: entered allmulticast mode
[  159.747605][ T8778] EXT4-fs (loop4): This should not happen!! Data will be lost
[  159.747605][ T8778] 
[  159.762426][ T8778] EXT4-fs (loop4): Total free blocks count 0
[  159.768450][ T8778] EXT4-fs (loop4): Free/Dirty block details
[  159.774365][ T8778] EXT4-fs (loop4): free_blocks=128
[  159.779515][ T8778] EXT4-fs (loop4): dirty_blocks=0
[  159.784556][ T8778] EXT4-fs (loop4): Block reservation details
[  159.790561][ T8778] EXT4-fs (loop4): i_reserved_data_blocks=0
[  159.811316][ T8791] netlink: 'syz.2.1753': attribute type 21 has an invalid length.
[  159.819192][ T8791] netlink: 'syz.2.1753': attribute type 4 has an invalid length.
[  159.826966][ T8791] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1753'.
[  159.971100][ T8798] loop2: detected capacity change from 0 to 128
[  160.087297][ T8802] loop4: detected capacity change from 0 to 2048
[  160.128927][ T8805] loop5: detected capacity change from 0 to 764
[  160.147300][ T8802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.184226][ T8802] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.208321][ T8805] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  160.256448][ T8802] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1756: bg 0: block 345: padding at end of block bitmap is not set
[  160.277087][ T8802] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117
[  160.289596][ T8802] EXT4-fs (loop4): This should not happen!! Data will be lost
[  160.289596][ T8802] 
[  160.351568][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.020399][ T8838] vlan0: entered allmulticast mode
[  161.025672][ T8838] bond0: entered allmulticast mode
[  161.070221][   T29] kauditd_printk_skb: 1530 callbacks suppressed
[  161.070238][   T29] audit: type=1400 audit(1745421378.231:20578): avc:  denied  { perfmon } for  pid=8836 comm="syz.3.1773" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  161.097609][   T29] audit: type=1400 audit(1745421378.231:20579): avc:  denied  { perfmon } for  pid=8836 comm="syz.3.1773" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  161.118679][   T29] audit: type=1400 audit(1745421378.231:20580): avc:  denied  { perfmon } for  pid=8836 comm="syz.3.1773" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  161.139831][   T29] audit: type=1400 audit(1745421378.231:20581): avc:  denied  { perfmon } for  pid=8836 comm="syz.3.1773" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  161.161344][   T29] audit: type=1400 audit(1745421378.241:20582): avc:  denied  { bpf } for  pid=8836 comm="syz.3.1773" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  161.215524][ T8842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38416 sclass=netlink_route_socket pid=8842 comm=syz.3.1773
[  161.436685][ T8842] audit: audit_backlog=65 > audit_backlog_limit=64
[  161.443354][ T8842] audit: audit_lost=99 audit_rate_limit=0 audit_backlog_limit=64
[  161.451182][ T8842] audit: backlog limit exceeded
[  161.458652][ T8850] audit: audit_backlog=65 > audit_backlog_limit=64
[  161.465230][ T8850] audit: audit_lost=100 audit_rate_limit=0 audit_backlog_limit=64
[  161.735431][ T8847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8847 comm=syz.5.1771
[  162.506013][ T8878] hsr0: left allmulticast mode
[  162.510876][ T8878] hsr_slave_0: left allmulticast mode
[  162.516300][ T8878] hsr_slave_1: left allmulticast mode
[  162.521835][ T8878] hsr0: left promiscuous mode
[  162.526605][ T8878] bridge0: port 3(hsr0) entered disabled state
[  162.553035][ T8878] bridge_slave_1: left allmulticast mode
[  162.558728][ T8878] bridge_slave_1: left promiscuous mode
[  162.564524][ T8878] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.595015][ T8878] bridge_slave_0: left promiscuous mode
[  162.600725][ T8878] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.611661][ T8886] __nla_validate_parse: 5 callbacks suppressed
[  162.611677][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1789'.
[  162.626942][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1789'.
[  162.635844][ T8886] netlink: 'syz.4.1789': attribute type 15 has an invalid length.
[  162.643789][ T8886] netlink: 'syz.4.1789': attribute type 18 has an invalid length.
[  162.697525][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1791'.
[  162.812407][ T8894] loop3: detected capacity change from 0 to 512
[  162.841318][ T8894] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  162.850445][ T8894] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  162.906193][ T8894] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  162.939338][ T8894] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  162.950541][ T8894] System zones: 0-2, 18-18, 34-35
[  162.966413][ T8894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.095164][ T8903] vxcan1 speed is unknown, defaulting to 1000
[  163.142753][ T8902] SELinux:  Context system_u:object_r:usbtty_device_t:s0 is not valid (left unmapped).
[  163.260744][ T8903] hsr0 speed is unknown, defaulting to 1000
[  163.267058][ T8903] lo speed is unknown, defaulting to 1000
[  163.411172][ T8912] loop4: detected capacity change from 0 to 512
[  163.427397][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.441575][ T8912] EXT4-fs (loop4): too many log groups per flexible block group
[  163.449271][ T8912] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  163.460624][ T8912] EXT4-fs (loop4): mount failed
[  163.508654][ T8912] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1796'.
[  163.517890][ T8912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1796'.
[  163.526892][ T8912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1796'.
[  163.798247][ T8924] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1801'.
[  164.058096][ T8930] loop4: detected capacity change from 0 to 1024
[  164.102241][ T8932] bridge0: entered allmulticast mode
[  164.102710][ T8930] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  164.169780][ T8934] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1804'.
[  164.380860][ T8936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=8936 comm=syz.2.1805
[  164.597015][ T8952] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1808'.
[  164.867327][ T8960] loop1: detected capacity change from 0 to 8192
[  164.886936][ T8963] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1812'.
[  164.901287][ T8963] loop2: detected capacity change from 0 to 164
[  164.913096][ T8960] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  164.921786][ T8960] FAT-fs (loop1): Filesystem has been set read-only
[  164.922017][ T8963] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  165.252893][ T8973] loop2: detected capacity change from 0 to 512
[  165.261475][ T8973] ext4: Unknown parameter 'fsuuid'
[  165.534671][ T8983] loop4: detected capacity change from 0 to 512
[  165.588856][ T8983] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  165.597999][ T8983] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  165.679852][ T8983] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  165.733222][ T8983] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  165.780356][ T8983] System zones: 0-2, 18-18, 34-35
[  165.796585][ T8983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.893858][ T8998] loop3: detected capacity change from 0 to 512
[  165.977897][ T8998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.032117][ T8998] ext4 filesystem being mounted at /413/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  166.080151][   T29] kauditd_printk_skb: 1480 callbacks suppressed
[  166.080168][   T29] audit: type=1400 audit(1745421383.251:21984): avc:  denied  { bind } for  pid=8976 comm="syz.4.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  166.110151][   T29] audit: type=1400 audit(1745421383.251:21985): avc:  denied  { name_bind } for  pid=8976 comm="syz.4.1818" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  166.132082][   T29] audit: type=1400 audit(1745421383.251:21986): avc:  denied  { node_bind } for  pid=8976 comm="syz.4.1818" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  166.153963][   T29] audit: type=1400 audit(1745421383.281:21987): avc:  denied  { write } for  pid=8976 comm="syz.4.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  166.173609][   T29] audit: type=1400 audit(1745421383.281:21988): avc:  denied  { connect } for  pid=8976 comm="syz.4.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  166.193331][   T29] audit: type=1400 audit(1745421383.281:21989): avc:  denied  { name_connect } for  pid=8976 comm="syz.4.1818" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  166.280016][   T29] audit: type=1400 audit(1745421383.401:21990): avc:  denied  { read write } for  pid=7195 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  166.304656][   T29] audit: type=1400 audit(1745421383.401:21991): avc:  denied  { read write open } for  pid=7195 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  166.329969][   T29] audit: type=1400 audit(1745421383.401:21992): avc:  denied  { ioctl } for  pid=7195 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  166.355680][   T29] audit: type=1400 audit(1745421383.421:21993): avc:  denied  { read write } for  pid=3949 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  166.381159][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.389491][ T9006] FAULT_INJECTION: forcing a failure.
[  166.389491][ T9006] name failslab, interval 1, probability 0, space 0, times 0
[  166.402886][ T9006] CPU: 0 UID: 0 PID: 9006 Comm: syz.1.1827 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) 
[  166.402972][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  166.402985][ T9006] Call Trace:
[  166.402993][ T9006]  <TASK>
[  166.403002][ T9006]  dump_stack_lvl+0xf6/0x150
[  166.403030][ T9006]  dump_stack+0x15/0x1a
[  166.403070][ T9006]  should_fail_ex+0x261/0x270
[  166.403094][ T9006]  should_failslab+0x8f/0xb0
[  166.403152][ T9006]  kmem_cache_alloc_noprof+0x59/0x340
[  166.403185][ T9006]  ? getname_flags+0x81/0x3b0
[  166.403212][ T9006]  ? should_fail_ex+0xd7/0x270
[  166.403286][ T9006]  getname_flags+0x81/0x3b0
[  166.403311][ T9006]  user_path_at+0x26/0x140
[  166.403377][ T9006]  __se_sys_mount+0x25e/0x2e0
[  166.403400][ T9006]  ? fput+0x99/0xd0
[  166.403447][ T9006]  __x64_sys_mount+0x67/0x80
[  166.403469][ T9006]  x64_sys_call+0xd11/0x2e10
[  166.403533][ T9006]  do_syscall_64+0xc9/0x1a0
[  166.403564][ T9006]  ? clear_bhb_loop+0x25/0x80
[  166.403588][ T9006]  ? clear_bhb_loop+0x25/0x80
[  166.403638][ T9006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.403716][ T9006] RIP: 0033:0x7fb5c7f4e169
[  166.403786][ T9006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  166.403807][ T9006] RSP: 002b:00007fb5c65b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  166.403833][ T9006] RAX: ffffffffffffffda RBX: 00007fb5c8175fa0 RCX: 00007fb5c7f4e169
[  166.403847][ T9006] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000000
[  166.403858][ T9006] RBP: 00007fb5c65b7090 R08: 0000000000000000 R09: 0000000000000000
[  166.403869][ T9006] R10: 0000000000075809 R11: 0000000000000246 R12: 0000000000000001
[  166.403883][ T9006] R13: 0000000000000000 R14: 00007fb5c8175fa0 R15: 00007ffe2fff89e8
[  166.403907][ T9006]  </TASK>
[  166.630856][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.870659][ T9021] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  167.104103][ T9032] loop5: detected capacity change from 0 to 512
[  167.143973][ T9032] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.1835: Failed to acquire dquot type 0
[  167.191397][ T9029] IPVS: Error joining to the multicast group
[  167.228016][ T9032] EXT4-fs (loop5): Remounting filesystem read-only
[  167.238807][ T9025] wg2: entered promiscuous mode
[  167.243727][ T9025] wg2: entered allmulticast mode
[  167.262935][ T9032] EXT4-fs (loop5): 1 orphan inode deleted
[  167.296109][ T9032] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.341707][ T9032] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.457845][ T3949] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.457915][ T9038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9038 comm=syz.3.1838
[  167.504610][ T9041] loop4: detected capacity change from 0 to 164
[  168.212627][ T9044] __nla_validate_parse: 4 callbacks suppressed
[  168.212748][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1842'.
[  168.401397][ T9056] xt_CT: You must specify a L4 protocol and not use inversions on it
[  168.493298][ T9058] loop2: detected capacity change from 0 to 1024
[  168.541926][ T9058] EXT4-fs: Invalid want_extra_isize 125
[  168.586615][ T9062] SELinux: syz.4.1847 (9062) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  168.874412][ T9075] loop2: detected capacity change from 0 to 2048
[  168.882995][ T9075] EXT4-fs: Ignoring removed bh option
[  168.920200][ T9075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.047638][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.107158][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1852'.
[  169.116148][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1852'.
[  169.149392][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1852'.
[  169.282205][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1852'.
[  169.291344][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1852'.
[  169.301897][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1852'.
[  169.341586][ T9092] netlink: 'syz.2.1853': attribute type 1 has an invalid length.
[  169.349475][ T9092] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1853'.
[  169.541717][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1852'.
[  169.550823][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1852'.
[  169.630942][ T9100] IPVS: Error connecting to the multicast addr
[  169.729544][ T9095] netlink: 'syz.1.1854': attribute type 10 has an invalid length.
[  169.823836][ T9095] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.891756][ T9095] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  169.895557][ T9105] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  170.337635][ T9120] loop9: detected capacity change from 0 to 6
[  170.406069][ T9120] loop1: detected capacity change from 0 to 2048
[  170.476683][ T9125] netlink: 'syz.5.1867': attribute type 1 has an invalid length.
[  170.494542][ T9120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.554031][ T9131] loop3: detected capacity change from 0 to 1024
[  170.560025][ T9120] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.572158][ T9131] EXT4-fs (loop3): Can't support bigalloc feature without extents feature
[  170.572158][ T9131] 
[  170.582956][ T9131] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  170.623653][ T9120] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.709967][ T9133] netlink: 'syz.2.1871': attribute type 1 has an invalid length.
[  170.789220][ T9139] loop4: detected capacity change from 0 to 512
[  170.830104][ T9139] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  170.882845][ T9139] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  170.890942][ T9139] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e128, mo2=0002]
[  170.930045][ T9139] System zones: 0-1, 15-15, 18-18, 34-34
[  170.936082][ T9139] EXT4-fs (loop4): orphan cleanup on readonly fs
[  170.942696][ T9139] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  170.957300][ T9139] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  170.985842][ T9139] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1869: bg 0: block 40: padding at end of block bitmap is not set
[  171.018555][ T9139] EXT4-fs (loop4): Remounting filesystem read-only
[  171.029494][ T9139] EXT4-fs (loop4): 1 truncate cleaned up
[  171.035793][ T9139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  171.093862][   T29] kauditd_printk_skb: 1532 callbacks suppressed
[  171.093880][   T29] audit: type=1400 audit(1745421388.261:23523): avc:  denied  { mount } for  pid=9134 comm="syz.4.1869" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  171.169608][   T29] audit: type=1400 audit(1745421388.261:23524): avc:  denied  { read write } for  pid=9134 comm="syz.4.1869" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  171.193873][   T29] audit: type=1400 audit(1745421388.261:23525): avc:  denied  { read write open } for  pid=9134 comm="syz.4.1869" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  171.218848][   T29] audit: type=1400 audit(1745421388.271:23526): avc:  denied  { prog_load } for  pid=9155 comm="syz.3.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  171.238057][   T29] audit: type=1400 audit(1745421388.281:23527): avc:  denied  { bpf } for  pid=9155 comm="syz.3.1875" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  171.241214][ T9160] vxcan1 speed is unknown, defaulting to 1000
[  171.258801][   T29] audit: type=1400 audit(1745421388.291:23528): avc:  denied  { perfmon } for  pid=9155 comm="syz.3.1875" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  171.285963][   T29] audit: type=1400 audit(1745421388.291:23529): avc:  denied  { prog_load } for  pid=9156 comm="syz.2.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  171.305159][   T29] audit: type=1400 audit(1745421388.291:23530): avc:  denied  { bpf } for  pid=9156 comm="syz.2.1876" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  171.325987][   T29] audit: type=1400 audit(1745421388.301:23531): avc:  denied  { prog_load } for  pid=9156 comm="syz.2.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  171.345148][   T29] audit: type=1400 audit(1745421388.301:23532): avc:  denied  { bpf } for  pid=9156 comm="syz.2.1876" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  171.366956][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.407937][ T9163] SELinux: failed to load policy
[  171.457195][ T9160] hsr0 speed is unknown, defaulting to 1000
[  171.499838][ T9160] lo speed is unknown, defaulting to 1000
[  171.601598][ T9171] netlink: 'syz.4.1880': attribute type 1 has an invalid length.
[  171.843109][ T9183] xt_hashlimit: max too large, truncated to 1048576
[  172.183046][ T9196] loop4: detected capacity change from 0 to 1024
[  172.231355][ T9191] loop1: detected capacity change from 0 to 8192
[  172.338647][ T9201] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.372518][ T9202] siw: device registration error -23
[  172.400641][ T9201] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.481255][ T9201] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.564691][ T9209] netlink: 'syz.3.1893': attribute type 10 has an invalid length.
[  172.574516][ T9201] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.586115][ T9209] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.594538][ T9209] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.602823][ T9209] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.621125][ T9209] team0: Failed to send port change of device geneve1 via netlink (err -105)
[  172.631151][ T9209] team0: Failed to send options change via netlink (err -105)
[  172.638662][ T9209] team0: Port device geneve1 added
[  172.648156][ T9207] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.721530][ T9201] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.734051][ T9201] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.745811][ T9201] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.757561][ T9201] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.769571][ T9207] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.831371][ T9207] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.899275][ T9207] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.922463][ T9207] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.939817][ T9207] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.952884][ T9207] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.958899][ T9218] xt_connbytes: Forcing CT accounting to be enabled
[  172.972387][ T9218] set match dimension is over the limit!
[  173.063989][ T9220] vlan2: entered allmulticast mode
[  173.304948][ T9227] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.312331][ T9227] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.334169][ T9227] bridge0: entered allmulticast mode
[  173.660639][ T9240] loop4: detected capacity change from 0 to 512
[  173.669089][ T9240] EXT4-fs: Ignoring removed bh option
[  173.693090][ T9240] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  173.706522][ T9240] EXT4-fs (loop4): 1 truncate cleaned up
[  173.713074][ T9240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.437322][ T9257] FAULT_INJECTION: forcing a failure.
[  174.437322][ T9257] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  174.450633][ T9257] CPU: 1 UID: 0 PID: 9257 Comm: syz.3.1908 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) 
[  174.450660][ T9257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  174.450671][ T9257] Call Trace:
[  174.450700][ T9257]  <TASK>
[  174.450762][ T9257]  dump_stack_lvl+0xf6/0x150
[  174.450806][ T9257]  dump_stack+0x15/0x1a
[  174.450850][ T9257]  should_fail_ex+0x261/0x270
[  174.450939][ T9257]  should_fail+0xb/0x10
[  174.451040][ T9257]  should_fail_usercopy+0x1a/0x20
[  174.451071][ T9257]  _copy_from_user+0x1c/0xa0
[  174.451170][ T9257]  copy_msghdr_from_user+0x54/0x2b0
[  174.451202][ T9257]  ? __fget_files+0x186/0x1c0
[  174.451229][ T9257]  __sys_sendmsg+0x141/0x240
[  174.451267][ T9257]  __x64_sys_sendmsg+0x46/0x50
[  174.451307][ T9257]  x64_sys_call+0x26f3/0x2e10
[  174.451334][ T9257]  do_syscall_64+0xc9/0x1a0
[  174.451422][ T9257]  ? clear_bhb_loop+0x25/0x80
[  174.451503][ T9257]  ? clear_bhb_loop+0x25/0x80
[  174.451580][ T9257]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.451601][ T9257] RIP: 0033:0x7ff48954e169
[  174.451669][ T9257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.451685][ T9257] RSP: 002b:00007ff487bb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  174.451702][ T9257] RAX: ffffffffffffffda RBX: 00007ff489775fa0 RCX: 00007ff48954e169
[  174.451714][ T9257] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[  174.451747][ T9257] RBP: 00007ff487bb7090 R08: 0000000000000000 R09: 0000000000000000
[  174.451760][ T9257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  174.451775][ T9257] R13: 0000000000000000 R14: 00007ff489775fa0 R15: 00007ffee5510c38
[  174.451798][ T9257]  </TASK>
[  174.755883][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.030411][ T9281] __nla_validate_parse: 7 callbacks suppressed
[  175.030428][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1914'.
[  175.060384][ T9284] vlan0: entered allmulticast mode
[  175.249190][ T9290] netlink: 'syz.3.1917': attribute type 1 has an invalid length.
[  175.257042][ T9290] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1917'.
[  175.488392][ T9298] netlink: 'syz.4.1919': attribute type 1 has an invalid length.
[  175.496194][ T9298] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1919'.
[  175.517182][ T9301] No such timeout policy "syz1"
[  175.831045][ T9310] loop4: detected capacity change from 0 to 512
[  175.861668][ T9309] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1922'.
[  175.939875][ T9310] EXT4-fs (loop4): 1 orphan inode deleted
[  175.948309][ T6825] IPVS: starting estimator thread 0...
[  175.956193][ T9310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.969098][ T3405] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1
[  175.977551][ T9309] vxcan1 speed is unknown, defaulting to 1000
[  175.982317][ T9314] netlink: 24 bytes leftover after parsing attributes in process `kfree'.
[  176.002069][ T9310] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.049345][ T9318] IPVS: using max 2064 ests per chain, 103200 per kthread
[  176.053297][ T9310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1923'.
[  176.067563][ T9309] hsr0 speed is unknown, defaulting to 1000
[  176.074054][ T9309] lo speed is unknown, defaulting to 1000
[  176.110610][   T29] kauditd_printk_skb: 1153 callbacks suppressed
[  176.110623][   T29] audit: type=1400 audit(1745421392.271:24685): avc:  denied  { bpf } for  pid=9312 comm="syz.1.1924" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  176.119920][ T9310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9310 comm=syz.4.1923
[  176.137591][   T29] audit: type=1400 audit(1745421392.271:24686): avc:  denied  { prog_run } for  pid=9312 comm="syz.1.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  176.169155][   T29] audit: type=1400 audit(1745421392.271:24687): avc:  denied  { write } for  pid=9312 comm="syz.1.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  176.289389][   T29] audit: type=1400 audit(1745421392.321:24688): avc:  denied  { read write } for  pid=3949 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  176.313720][   T29] audit: type=1400 audit(1745421392.321:24689): avc:  denied  { read write open } for  pid=3949 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  176.339009][   T29] audit: type=1400 audit(1745421392.321:24690): avc:  denied  { ioctl } for  pid=3949 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  176.364858][   T29] audit: type=1400 audit(1745421392.321:24691): avc:  denied  { read write } for  pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  176.389166][   T29] audit: type=1400 audit(1745421392.321:24692): avc:  denied  { read write open } for  pid=3316 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  176.414396][   T29] audit: type=1400 audit(1745421392.321:24693): avc:  denied  { ioctl } for  pid=3316 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  176.440137][   T29] audit: type=1326 audit(1745421392.371:24694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.3.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48954e169 code=0x7ffc0000
[  176.475351][ T9325] loop1: detected capacity change from 0 to 512
[  176.486952][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.518066][ T9327] FAULT_INJECTION: forcing a failure.
[  176.518066][ T9327] name failslab, interval 1, probability 0, space 0, times 0
[  176.530826][ T9327] CPU: 1 UID: 0 PID: 9327 Comm: +}[@ Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) 
[  176.530921][ T9327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  176.530932][ T9327] Call Trace:
[  176.530938][ T9327]  <TASK>
[  176.530946][ T9327]  dump_stack_lvl+0xf6/0x150
[  176.530972][ T9327]  dump_stack+0x15/0x1a
[  176.530991][ T9327]  should_fail_ex+0x261/0x270
[  176.531059][ T9327]  should_failslab+0x8f/0xb0
[  176.531166][ T9327]  kmem_cache_alloc_noprof+0x59/0x340
[  176.531192][ T9327]  ? getname_flags+0x81/0x3b0
[  176.531218][ T9327]  getname_flags+0x81/0x3b0
[  176.531277][ T9327]  do_sys_openat2+0x65/0x110
[  176.531383][ T9327]  __x64_sys_creat+0x6a/0x90
[  176.531418][ T9327]  x64_sys_call+0x10b4/0x2e10
[  176.531440][ T9327]  do_syscall_64+0xc9/0x1a0
[  176.531463][ T9327]  ? clear_bhb_loop+0x25/0x80
[  176.531561][ T9327]  ? clear_bhb_loop+0x25/0x80
[  176.531636][ T9327]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.531655][ T9327] RIP: 0033:0x7f592a74e169
[  176.531668][ T9327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.531715][ T9327] RSP: 002b:00007f5928db7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  176.531737][ T9327] RAX: ffffffffffffffda RBX: 00007f592a975fa0 RCX: 00007f592a74e169
[  176.531751][ T9327] RDX: 0000000000000000 RSI: 00000000000000d4 RDI: 00002000000000c0
[  176.531765][ T9327] RBP: 00007f5928db7090 R08: 0000000000000000 R09: 0000000000000000
[  176.531778][ T9327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  176.531791][ T9327] R13: 0000000000000000 R14: 00007f592a975fa0 R15: 00007ffdd79e6f58
[  176.531813][ T9327]  </TASK>
[  176.534004][ T9325] EXT4-fs (loop1): orphan cleanup on readonly fs
[  176.712419][ T9325] EXT4-fs error (device loop1): ext4_orphan_get:1416: comm syz.1.1928: bad orphan inode 13
[  176.789382][ T9325] ext4_test_bit(bit=12, block=18) = 1
[  176.794930][ T9325] is_bad_inode(inode)=0
[  176.799088][ T9325] NEXT_ORPHAN(inode)=2130706432
[  176.803986][ T9325] max_ino=32
[  176.807269][ T9325] i_nlink=1
[  176.826937][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1930'.
[  176.835825][ T9325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  176.908166][ T9338] netlink: 372 bytes leftover after parsing attributes in process `syz.4.1930'.
[  176.964832][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1931'.
[  177.235543][ T7195] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.796382][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1934'.
[  177.881424][ T9351] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9351 comm=syz.3.1935
[  178.232533][ T9359] loop4: detected capacity change from 0 to 2048
[  178.251509][ T9359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.286458][ T9359] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.323736][ T9359] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1937: bg 0: block 345: padding at end of block bitmap is not set
[  178.412614][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.814262][ T9373] vxcan1 speed is unknown, defaulting to 1000
[  178.848631][ T9373] hsr0 speed is unknown, defaulting to 1000
[  178.855149][ T9373] lo speed is unknown, defaulting to 1000
[  179.472698][ T9373] netlink: 'syz.3.1941': attribute type 13 has an invalid length.
[  179.585376][ T9383] netlink: 'syz.4.1939': attribute type 1 has an invalid length.
[  179.608810][ T9373] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.671649][ T9373] 8021q: adding VLAN 0 to HW filter on device team0
[  179.724885][ T9373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  179.740388][ T6825] lo speed is unknown, defaulting to 1000
[  179.746144][ T6825] syz0: Port: 1 Link ACTIVE
[  179.920215][ T9394] netlink: 'syz.5.1947': attribute type 1 has an invalid length.
[  179.983273][ T9395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9395 comm=syz.1.1945
[  180.048626][ T9393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=9393 comm=syz.4.1946
[  180.104760][ T9402] __nla_validate_parse: 2 callbacks suppressed
[  180.104778][ T9402] netlink: 64 bytes leftover after parsing attributes in process `+}[@'.
[  180.369177][ T9412] loop2: detected capacity change from 0 to 512
[  180.407502][ T9412] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  180.416598][ T9412] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  180.429404][ T9414] FAULT_INJECTION: forcing a failure.
[  180.429404][ T9414] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  180.442568][ T9414] CPU: 1 UID: 0 PID: 9414 Comm: syz.3.1953 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) 
[  180.442600][ T9414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  180.442701][ T9414] Call Trace:
[  180.442707][ T9414]  <TASK>
[  180.442730][ T9414]  dump_stack_lvl+0xf6/0x150
[  180.442759][ T9414]  dump_stack+0x15/0x1a
[  180.442778][ T9414]  should_fail_ex+0x261/0x270
[  180.442801][ T9414]  should_fail+0xb/0x10
[  180.442822][ T9414]  should_fail_usercopy+0x1a/0x20
[  180.442850][ T9414]  strncpy_from_user+0x25/0x230
[  180.442929][ T9414]  ? getname_flags+0x81/0x3b0
[  180.442960][ T9414]  getname_flags+0xb0/0x3b0
[  180.442982][ T9414]  user_path_at+0x26/0x140
[  180.443020][ T9414]  __se_sys_mount+0x25e/0x2e0
[  180.443042][ T9414]  ? fput+0x99/0xd0
[  180.443081][ T9414]  __x64_sys_mount+0x67/0x80
[  180.443101][ T9414]  x64_sys_call+0xd11/0x2e10
[  180.443197][ T9414]  do_syscall_64+0xc9/0x1a0
[  180.443223][ T9414]  ? clear_bhb_loop+0x25/0x80
[  180.443242][ T9414]  ? clear_bhb_loop+0x25/0x80
[  180.443347][ T9414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.443373][ T9414] RIP: 0033:0x7ff48954e169
[  180.443391][ T9414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  180.443473][ T9414] RSP: 002b:00007ff487bb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  180.443490][ T9414] RAX: ffffffffffffffda RBX: 00007ff489775fa0 RCX: 00007ff48954e169
[  180.443501][ T9414] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000000
[  180.443516][ T9414] RBP: 00007ff487bb7090 R08: 0000000000000000 R09: 0000000000000000
[  180.443529][ T9414] R10: 0000000000075809 R11: 0000000000000246 R12: 0000000000000001
[  180.443543][ T9414] R13: 0000000000000000 R14: 00007ff489775fa0 R15: 00007ffee5510c38
[  180.443567][ T9414]  </TASK>
[  180.652595][ T9412] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  180.663823][ T9412] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  180.671950][ T9412] System zones: 0-2, 18-18, 34-35
[  180.693011][ T9412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.842848][ T9424] loop5: detected capacity change from 0 to 164
[  181.120935][   T29] kauditd_printk_skb: 897 callbacks suppressed
[  181.120953][   T29] audit: type=1400 audit(1745421397.291:25592): avc:  denied  { read write open } for  pid=7195 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  181.409431][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1961'.
[  181.418363][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1961'.
[  181.506596][   T29] audit: type=1400 audit(1745421397.321:25593): avc:  denied  { ioctl } for  pid=7195 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  181.529184][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1961'.
[  181.532531][   T29] audit: type=1400 audit(1745421397.451:25594): avc:  denied  { read write } for  pid=3307 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  181.567331][   T29] audit: type=1400 audit(1745421397.461:25595): avc:  denied  { read write open } for  pid=3307 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  181.592896][   T29] audit: type=1400 audit(1745421397.461:25596): avc:  denied  { ioctl } for  pid=3307 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  181.618941][   T29] audit: type=1400 audit(1745421397.551:25597): avc:  denied  { create } for  pid=9431 comm="syz.1.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  181.639754][   T29] audit: type=1400 audit(1745421397.571:25598): avc:  denied  { write } for  pid=9431 comm="syz.1.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  181.670853][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.681174][   T29] audit: type=1400 audit(1745421397.681:25599): avc:  denied  { unmount } for  pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  181.700999][   T29] audit: type=1400 audit(1745421397.721:25600): avc:  denied  { map_create } for  pid=9433 comm="syz.3.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  181.720350][   T29] audit: type=1400 audit(1745421397.721:25601): avc:  denied  { bpf } for  pid=9433 comm="syz.3.1962" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  181.918778][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1961'.
[  181.927882][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1961'.
[  181.958681][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1961'.
[  182.228438][ T9449] loop5: detected capacity change from 0 to 512
[  182.292215][ T9449] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  182.301416][ T9449] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  182.348966][ T9449] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  182.359428][ T9449] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  182.367450][ T9449] System zones: 0-2, 18-18, 34-35
[  182.374519][ T9449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.490753][ T9454] loop1: detected capacity change from 0 to 512
[  182.508415][ T9454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.579383][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'.
[  182.621828][ T9461] netlink: 'syz.3.1970': attribute type 27 has an invalid length.
[  182.692254][ T9461] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.700714][ T9461] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.709059][ T9461] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.717529][ T9461] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.739510][ T3382] lo speed is unknown, defaulting to 1000
[  182.755651][ T9467] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.764962][ T9467] 8021q: adding VLAN 0 to HW filter on device team0
[  182.775280][ T9467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  182.803369][ T9458] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1969'.
[  182.812475][ T6824] lo speed is unknown, defaulting to 1000
[  182.855067][ T3949] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.899878][ T7195] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.075627][ T9473] loop2: detected capacity change from 0 to 1024
[  183.101730][ T9474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9474 comm=syz.4.1975
[  183.198862][ T9480] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1973'.
[  183.364906][ T9486] FAULT_INJECTION: forcing a failure.
[  183.364906][ T9486] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  183.378015][ T9486] CPU: 0 UID: 0 PID: 9486 Comm: syz.3.1978 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) 
[  183.378109][ T9486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  183.378121][ T9486] Call Trace:
[  183.378126][ T9486]  <TASK>
[  183.378132][ T9486]  dump_stack_lvl+0xf6/0x150
[  183.378153][ T9486]  dump_stack+0x15/0x1a
[  183.378204][ T9486]  should_fail_ex+0x261/0x270
[  183.378326][ T9486]  should_fail+0xb/0x10
[  183.378344][ T9486]  should_fail_usercopy+0x1a/0x20
[  183.378365][ T9486]  _copy_to_user+0x20/0xa0
[  183.378469][ T9486]  do_pagemap_cmd+0x935/0x9b0
[  183.378518][ T9486]  ? __pfx_do_pagemap_cmd+0x10/0x10
[  183.378554][ T9486]  __se_sys_ioctl+0xc9/0x140
[  183.378581][ T9486]  __x64_sys_ioctl+0x43/0x50
[  183.378675][ T9486]  x64_sys_call+0x168d/0x2e10
[  183.378749][ T9486]  do_syscall_64+0xc9/0x1a0
[  183.378831][ T9486]  ? clear_bhb_loop+0x25/0x80
[  183.378850][ T9486]  ? clear_bhb_loop+0x25/0x80
[  183.378920][ T9486]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.378944][ T9486] RIP: 0033:0x7ff48954e169
[  183.378960][ T9486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.378982][ T9486] RSP: 002b:00007ff487bb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  183.379003][ T9486] RAX: ffffffffffffffda RBX: 00007ff489775fa0 RCX: 00007ff48954e169
[  183.379017][ T9486] RDX: 00002000000001c0 RSI: 00000000c0606610 RDI: 0000000000000003
[  183.379029][ T9486] RBP: 00007ff487bb7090 R08: 0000000000000000 R09: 0000000000000000
[  183.379062][ T9486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  183.379133][ T9486] R13: 0000000000000000 R14: 00007ff489775fa0 R15: 00007ffee5510c38
[  183.379153][ T9486]  </TASK>
[  183.857116][ T9500] loop3: detected capacity change from 0 to 2048
[  183.904427][ T9500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.919736][ T9500] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.027876][ T9504] netlink: 'syz.4.1983': attribute type 1 has an invalid length.
[  184.052050][ T9511] netlink: 'syz.1.1982': attribute type 1 has an invalid length.
[  184.257509][ T9516] netlink: 'syz.5.1986': attribute type 10 has an invalid length.
[  184.274584][ T9516] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.284563][ T9516] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.295780][ T9516] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.304852][ T9516] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.319941][ T9519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9519 comm=syz.1.1987
[  184.338127][ T9516] team0: Port device geneve1 added
[  184.510759][ T9526] SELinux:  Context Ü is not valid (left unmapped).
[  184.556965][ T9531] loop1: detected capacity change from 0 to 1024
[  184.603087][ T9531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.741134][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.935085][ T9548] loop5: detected capacity change from 0 to 128
[  184.960752][ T9548] EXT4-fs: Ignoring removed nomblk_io_submit option
[  184.984248][ T9548] EXT4-fs error (device loop5): __ext4_fill_super:5502: inode #2: comm syz.5.1998: iget: checksum invalid
[  184.996878][ T9548] EXT4-fs (loop5): get root inode failed
[  185.002558][ T9548] EXT4-fs (loop5): mount failed
[  185.057572][ T9550] netlink: 'syz.2.1997': attribute type 3 has an invalid length.
[  185.093645][ T9553] loop3: detected capacity change from 0 to 128
[  185.197116][ T9553] syz.3.1996: attempt to access beyond end of device
[  185.197116][ T9553] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128
[  185.226243][ T9553] syz.3.1996: attempt to access beyond end of device
[  185.226243][ T9553] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128
[  185.261513][ T9553] syz.3.1996: attempt to access beyond end of device
[  185.261513][ T9553] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128
[  185.307489][ T9553] syz.3.1996: attempt to access beyond end of device
[  185.307489][ T9553] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128
[  185.354143][ T9553] syz.3.1996: attempt to access beyond end of device
[  185.354143][ T9553] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128
[  185.374595][ T9553] syz.3.1996: attempt to access beyond end of device
[  185.374595][ T9553] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128
[  185.390302][ T9553] syz.3.1996: attempt to access beyond end of device
[  185.390302][ T9553] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128
[  185.403925][ T9553] syz.3.1996: attempt to access beyond end of device
[  185.403925][ T9553] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128
[  185.417547][ T9553] syz.3.1996: attempt to access beyond end of device
[  185.417547][ T9553] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128
[  185.431264][ T9553] syz.3.1996: attempt to access beyond end of device
[  185.431264][ T9553] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128
[  185.456438][ T9553] Buffer I/O error on dev loop3, logical block 353, lost async page write
[  185.465294][ T9553] Buffer I/O error on dev loop3, logical block 354, lost async page write
[  185.474849][ T9553] Buffer I/O error on dev loop3, logical block 355, lost async page write
[  185.483837][ T9553] Buffer I/O error on dev loop3, logical block 356, lost async page write
[  185.492738][ T9553] Buffer I/O error on dev loop3, logical block 357, lost async page write
[  185.519003][ T7195] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.523866][ T9553] Buffer I/O error on dev loop3, logical block 358, lost async page write
[  185.555160][ T9553] Buffer I/O error on dev loop3, logical block 359, lost async page write
[  185.694724][ T9563] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  186.129672][   T29] kauditd_printk_skb: 1375 callbacks suppressed
[  186.129685][   T29] audit: type=1400 audit(1745421402.291:26977): avc:  denied  { bpf } for  pid=9587 comm="+}[@" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  186.156155][   T29] audit: type=1400 audit(1745421402.301:26978): avc:  denied  { prog_run } for  pid=9587 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  186.180958][   T29] audit: type=1400 audit(1745421402.341:26979): avc:  denied  { prog_load } for  pid=9592 comm="syz.5.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  186.200226][   T29] audit: type=1400 audit(1745421402.351:26980): avc:  denied  { bpf } for  pid=9592 comm="syz.5.2010" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  186.220877][   T29] audit: type=1400 audit(1745421402.351:26981): avc:  denied  { bpf } for  pid=9591 comm="syz.4.2008" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  186.241543][   T29] audit: type=1400 audit(1745421402.351:26982): avc:  denied  { perfmon } for  pid=9592 comm="syz.5.2010" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  186.261767][ T9600] loop1: detected capacity change from 0 to 1024
[  186.262503][   T29] audit: type=1400 audit(1745421402.351:26983): avc:  denied  { prog_run } for  pid=9591 comm="syz.4.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  186.277822][ T9600] EXT4-fs: Ignoring removed bh option
[  186.291228][   T29] audit: type=1400 audit(1745421402.361:26984): avc:  denied  { perfmon } for  pid=9592 comm="syz.5.2010" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  186.314361][   T29] audit: type=1400 audit(1745421402.361:26985): avc:  denied  { perfmon } for  pid=9592 comm="syz.5.2010" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  186.324091][ T9599] audit: audit_backlog=65 > audit_backlog_limit=64
[  186.353465][ T9600] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  186.361961][ T9600] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  186.629015][ T9609] loop3: detected capacity change from 0 to 512
[  186.684726][ T9609] EXT4-fs (loop3): too many log groups per flexible block group
[  186.692470][ T9609] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  186.720406][ T9609] EXT4-fs (loop3): mount failed
[  186.791932][ T9609] __nla_validate_parse: 3 callbacks suppressed
[  186.791946][ T9609] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2013'.
[  186.807184][ T9609] netlink: 'syz.3.2013': attribute type 9 has an invalid length.
[  186.910879][ T9622] netlink: 'syz.2.2018': attribute type 1 has an invalid length.
[  186.918633][ T9622] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2018'.
[  187.049429][ T9624] netlink: 'syz.4.2019': attribute type 1 has an invalid length.
[  187.057224][ T9624] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2019'.
[  187.476018][ T9643] vxcan1 speed is unknown, defaulting to 1000
[  187.640689][ T9643] hsr0 speed is unknown, defaulting to 1000
[  187.647077][ T9643] lo speed is unknown, defaulting to 1000
[  187.912721][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2036'.
[  188.202151][ T9673] vxcan1 speed is unknown, defaulting to 1000
[  188.310259][ T9673] hsr0 speed is unknown, defaulting to 1000
[  188.329760][ T9673] lo speed is unknown, defaulting to 1000
[  189.345031][ T9692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2041'.
[  189.544551][ T9707] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  189.627109][ T9714] loop3: detected capacity change from 0 to 1024
[  189.649681][ T9714] EXT4-fs: Ignoring removed bh option
[  189.691672][ T9714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.745030][ T9714] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  189.850369][ T9723] loop4: detected capacity change from 0 to 1024
[  189.872742][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.890882][ T9723] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2050: Failed to acquire dquot type 0
[  189.925784][ T9723] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  189.984272][ T9723] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.2050: corrupted inode contents
[  190.024932][ T9723] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.2050: mark_inode_dirty error
[  190.072902][ T9723] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.2050: corrupted inode contents
[  190.090963][ T9723] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.2050: mark_inode_dirty error
[  190.120653][ T9723] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.2050: corrupted inode contents
[  190.169916][ T9723] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  190.190790][ T9723] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.2050: corrupted inode contents
[  190.193265][ T9731] netlink: 'syz.3.2052': attribute type 27 has an invalid length.
[  190.213467][ T9723] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.2050: mark_inode_dirty error
[  190.229197][ T9723] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  190.282804][ T9723] EXT4-fs (loop4): 1 truncate cleaned up
[  190.288968][ T9723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.331039][ T6824] lo speed is unknown, defaulting to 1000
[  190.336797][ T6824] syz0: Port: 1 Link DOWN
[  190.394663][ T9734] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.401548][ T9723] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  190.423636][ T9734] 8021q: adding VLAN 0 to HW filter on device team0
[  190.434253][ T9734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  190.455051][ T3380] lo speed is unknown, defaulting to 1000
[  190.460909][ T3380] syz0: Port: 1 Link ACTIVE
[  190.561020][ T9740] netlink: 'syz.2.2056': attribute type 1 has an invalid length.
[  190.568847][ T9740] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2056'.
[  190.760807][ T9750] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  190.876244][ T9749] loop5: detected capacity change from 0 to 8192
[  190.890516][ T9749] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  190.920636][ T9753] loop2: detected capacity change from 0 to 512
[  190.967350][ T9749] vxcan1 speed is unknown, defaulting to 1000
[  190.977417][ T9753] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  191.015020][ T9753] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2062: invalid indirect mapped block 2683928664 (level 1)
[  191.066184][ T9761] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  191.077237][ T9749] hsr0 speed is unknown, defaulting to 1000
[  191.084215][ T9749] lo speed is unknown, defaulting to 1000
[  191.091246][ T9753] EXT4-fs (loop2): Remounting filesystem read-only
[  191.107078][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.140945][   T29] kauditd_printk_skb: 1554 callbacks suppressed
[  191.140963][   T29] audit: type=1400 audit(1745421407.311:28536): avc:  denied  { read write } for  pid=3314 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  191.161338][ T9753] EXT4-fs (loop2): 1 truncate cleaned up
[  191.209044][   T29] audit: type=1400 audit(1745421407.311:28537): avc:  denied  { read write open } for  pid=3314 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  191.234270][   T29] audit: type=1400 audit(1745421407.311:28538): avc:  denied  { ioctl } for  pid=3314 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  191.236095][ T9753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.280525][   T29] audit: type=1400 audit(1745421407.451:28539): avc:  denied  { read write } for  pid=9743 comm="syz.5.2060" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  191.305445][   T29] audit: type=1400 audit(1745421407.451:28540): avc:  denied  { read write open } for  pid=9743 comm="syz.5.2060" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  191.338638][   T29] audit: type=1400 audit(1745421407.481:28541): avc:  denied  { create } for  pid=9743 comm="syz.5.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  191.352245][ T9766] set match dimension is over the limit!
[  191.358987][   T29] audit: type=1400 audit(1745421407.481:28542): avc:  denied  { map_create } for  pid=9743 comm="syz.5.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  191.383913][   T29] audit: type=1400 audit(1745421407.481:28543): avc:  denied  { prog_load } for  pid=9743 comm="syz.5.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  191.403137][   T29] audit: type=1400 audit(1745421407.481:28544): avc:  denied  { bpf } for  pid=9743 comm="syz.5.2060" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  191.423996][   T29] audit: type=1400 audit(1745421407.481:28545): avc:  denied  { perfmon } for  pid=9743 comm="syz.5.2060" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  191.446397][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.734644][ T9775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2069'.
[  192.235229][ T9800] netlink: 'syz.3.2075': attribute type 10 has an invalid length.
[  192.244775][ T9800] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2075'.
[  192.530362][ T9809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38416 sclass=netlink_route_socket pid=9809 comm=syz.2.2080
[  192.734377][ T9815] loop1: detected capacity change from 0 to 1024
[  192.795765][ T9815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.819169][ T9825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2086'.
[  192.871157][ T9824] FAULT_INJECTION: forcing a failure.
[  192.871157][ T9824] name failslab, interval 1, probability 0, space 0, times 0
[  192.883976][ T9824] CPU: 0 UID: 0 PID: 9824 Comm: +}[@ Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) 
[  192.884030][ T9824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  192.884056][ T9824] Call Trace:
[  192.884067][ T9824]  <TASK>
[  192.884076][ T9824]  dump_stack_lvl+0xf6/0x150
[  192.884101][ T9824]  dump_stack+0x15/0x1a
[  192.884116][ T9824]  should_fail_ex+0x261/0x270
[  192.884137][ T9824]  should_failslab+0x8f/0xb0
[  192.884158][ T9824]  kmem_cache_alloc_noprof+0x59/0x340
[  192.884254][ T9824]  ? alloc_empty_file+0x78/0x200
[  192.884286][ T9824]  alloc_empty_file+0x78/0x200
[  192.884314][ T9824]  path_openat+0x6f/0x2000
[  192.884344][ T9824]  ? _parse_integer_limit+0x167/0x180
[  192.884366][ T9824]  ? _parse_integer+0x27/0x30
[  192.884420][ T9824]  ? kstrtoull+0x115/0x140
[  192.884444][ T9824]  ? kstrtouint+0x7b/0xc0
[  192.884466][ T9824]  ? kstrtouint_from_user+0xbf/0x100
[  192.884494][ T9824]  do_filp_open+0x115/0x240
[  192.884550][ T9824]  do_sys_openat2+0xaa/0x110
[  192.884627][ T9824]  __x64_sys_creat+0x6a/0x90
[  192.884662][ T9824]  x64_sys_call+0x10b4/0x2e10
[  192.884692][ T9824]  do_syscall_64+0xc9/0x1a0
[  192.884795][ T9824]  ? clear_bhb_loop+0x25/0x80
[  192.884888][ T9824]  ? clear_bhb_loop+0x25/0x80
[  192.884911][ T9824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.884934][ T9824] RIP: 0033:0x7f592a74e169
[  192.884949][ T9824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.884968][ T9824] RSP: 002b:00007f5928db7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  192.884996][ T9824] RAX: ffffffffffffffda RBX: 00007f592a975fa0 RCX: 00007f592a74e169
[  192.885030][ T9824] RDX: 0000000000000000 RSI: 00000000000000d4 RDI: 00002000000000c0
[  192.885060][ T9824] RBP: 00007f5928db7090 R08: 0000000000000000 R09: 0000000000000000
[  192.885072][ T9824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  192.885082][ T9824] R13: 0000000000000000 R14: 00007f592a975fa0 R15: 00007ffdd79e6f58
[  192.885099][ T9824]  </TASK>
[  193.106991][ T9819] blktrace: Concurrent blktraces are not allowed on loop7
[  193.154106][ T9828] loop5: detected capacity change from 0 to 512
[  193.262138][ T9828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.299747][ T9828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.786550][ T9846] netlink: 572 bytes leftover after parsing attributes in process `syz.2.2095'.
[  193.997190][ T7195] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.075119][ T9859] loop5: detected capacity change from 0 to 1024
[  194.085184][ T9857] netlink: 'syz.3.2099': attribute type 1 has an invalid length.
[  194.092968][ T9857] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2099'.
[  194.104345][ T9863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2098'.
[  194.133522][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2100'.
[  194.150823][ T9853] netlink: 12 bytes leftover after parsing attributes in process `'.
[  194.170350][ T9858] IPVS: Error joining to the multicast group
[  194.218646][ T9865] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2102'.
[  194.271931][ T9867] loop3: detected capacity change from 0 to 512
[  194.311931][ T9867] EXT4-fs (loop3): too many log groups per flexible block group
[  194.319663][ T9867] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  194.330395][ T9867] EXT4-fs (loop3): mount failed
[  194.402787][ T9867] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2104'.
[  194.412109][ T9867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2104'.
[  194.804014][ T9890] xt_hashlimit: max too large, truncated to 1048576
[  194.980269][ T9897] loop1: detected capacity change from 0 to 512
[  194.998738][ T9897] EXT4-fs: Ignoring removed orlov option
[  195.017258][ T9897] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  195.108804][ T9897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.172991][ T9905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9905 comm=syz.5.2120
[  195.301642][ T9897] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.470897][ T9911] netlink: 'syz.5.2122': attribute type 1 has an invalid length.
[  195.537115][ T7195] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.626601][ T9916] netlink: 'syz.3.2123': attribute type 1 has an invalid length.
[  195.762023][ T9922] IPVS: Error joining to the multicast group
[  196.149483][   T29] kauditd_printk_skb: 1664 callbacks suppressed
[  196.149500][   T29] audit: type=1400 audit(1745421411.311:30210): avc:  denied  { read } for  pid=9939 comm="syz.2.2132" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  196.193748][   T29] audit: type=1400 audit(1745421411.321:30211): avc:  denied  { read open } for  pid=9939 comm="syz.2.2132" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  196.218010][   T29] audit: type=1400 audit(1745421411.321:30212): avc:  denied  { prog_load } for  pid=9939 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  196.236736][   T29] audit: type=1400 audit(1745421411.321:30213): avc:  denied  { bpf } for  pid=9939 comm="+}[@" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  196.253325][ T9941] audit: audit_lost=128 audit_rate_limit=0 audit_backlog_limit=64
[  196.256865][   T29] audit: type=1400 audit(1745421411.321:30214): avc:  denied  { perfmon } for  pid=9939 comm="+}[@" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  196.264626][ T9941] audit: out of memory in audit_log_start
[  196.285023][   T29] audit: type=1400 audit(1745421411.321:30215): avc:  denied  { perfmon } for  pid=9939 comm="+}[@" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  196.311307][   T29] audit: type=1400 audit(1745421411.321:30216): avc:  denied  { perfmon } for  pid=9939 comm="+}[@" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  196.331954][   T29] audit: type=1400 audit(1745421411.321:30217): avc:  denied  { perfmon } for  pid=9939 comm="+}[@" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  196.524254][ T9951] netlink: 'syz.5.2134': attribute type 1 has an invalid length.
[  196.535540][ T9952] loop1: detected capacity change from 0 to 1024
[  196.558064][ T9952] EXT4-fs: Ignoring removed nobh option
[  196.563772][ T9952] EXT4-fs: Ignoring removed bh option
[  196.596493][ T9952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.806403][ T7195] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.509242][ T9989] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  197.691556][ T9994] bond0: entered promiscuous mode
[  197.696656][ T9994] bond_slave_0: entered promiscuous mode
[  197.702456][ T9994] bond_slave_1: entered promiscuous mode
[  197.967354][ T9998] pim6reg: entered allmulticast mode
[  198.000317][T10003] pim6reg: left allmulticast mode
[  198.117791][T10006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.156352][T10006] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.226477][T10011] vxcan1 speed is unknown, defaulting to 1000
[  198.278516][T10011] hsr0 speed is unknown, defaulting to 1000
[  198.285152][T10011] lo speed is unknown, defaulting to 1000
[  198.560124][T10013] loop1: detected capacity change from 0 to 512
[  198.686702][T10013] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  198.698890][T10002] loop4: detected capacity change from 0 to 512
[  198.731959][T10013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.745181][T10013] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.820203][T10002] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002]
[  198.828988][T10002] System zones: 0-2, 18-18, 34-35
[  198.840075][T10002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.885037][T10002] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.930774][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.020280][ T7195] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.186224][T10027] loop5: detected capacity change from 0 to 512
[  199.196385][T10027] EXT4-fs: Ignoring removed nomblk_io_submit option
[  199.225354][T10027] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  199.226015][T10030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10030 comm=syz.4.2158
[  199.233326][T10027] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102]
[  199.254086][T10027] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80)
[  199.263653][T10027] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features
[  199.272831][T10027] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  199.345408][T10027] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80)
[  199.423185][T10034] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  199.431099][ T3949] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.515571][T10038] loop2: detected capacity change from 0 to 1024
[  199.556645][T10038] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2163: Failed to acquire dquot type 0
[  199.580091][T10038] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  199.587478][T10041] loop5: detected capacity change from 0 to 2048
[  199.603895][T10038] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2163: corrupted inode contents
[  199.617449][T10038] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.2163: mark_inode_dirty error
[  199.638299][T10038] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2163: corrupted inode contents
[  199.653790][T10038] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.2163: mark_inode_dirty error
[  199.666269][T10041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.681129][T10038] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2163: corrupted inode contents
[  199.693331][T10038] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  199.703106][T10038] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2163: corrupted inode contents
[  199.715337][T10038] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.2163: mark_inode_dirty error
[  199.729203][T10038] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  199.738689][T10038] EXT4-fs (loop2): 1 truncate cleaned up
[  199.745833][T10038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.781166][T10038] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  199.841495][T10049] FAULT_INJECTION: forcing a failure.
[  199.841495][T10049] name failslab, interval 1, probability 0, space 0, times 0
[  199.854214][T10049] CPU: 0 UID: 0 PID: 10049 Comm: +}[@ Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) 
[  199.854242][T10049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  199.854310][T10049] Call Trace:
[  199.854317][T10049]  <TASK>
[  199.854326][T10049]  dump_stack_lvl+0xf6/0x150
[  199.854350][T10049]  dump_stack+0x15/0x1a
[  199.854365][T10049]  should_fail_ex+0x261/0x270
[  199.854432][T10049]  should_failslab+0x8f/0xb0
[  199.854504][T10049]  kmem_cache_alloc_noprof+0x59/0x340
[  199.854532][T10049]  ? security_file_alloc+0x32/0x100
[  199.854643][T10049]  security_file_alloc+0x32/0x100
[  199.854758][T10049]  init_file+0x5e/0x1e0
[  199.854789][T10049]  alloc_empty_file+0x8e/0x200
[  199.854838][T10049]  path_openat+0x6f/0x2000
[  199.854864][T10049]  ? _parse_integer_limit+0x167/0x180
[  199.854889][T10049]  ? _parse_integer+0x27/0x30
[  199.854919][T10049]  ? kstrtoull+0x115/0x140
[  199.854936][T10049]  ? kstrtouint+0x7b/0xc0
[  199.854954][T10049]  ? kstrtouint_from_user+0xbf/0x100
[  199.855045][T10049]  do_filp_open+0x115/0x240
[  199.855087][T10049]  do_sys_openat2+0xaa/0x110
[  199.855137][T10049]  __x64_sys_creat+0x6a/0x90
[  199.855169][T10049]  x64_sys_call+0x10b4/0x2e10
[  199.855203][T10049]  do_syscall_64+0xc9/0x1a0
[  199.855225][T10049]  ? clear_bhb_loop+0x25/0x80
[  199.855243][T10049]  ? clear_bhb_loop+0x25/0x80
[  199.855338][T10049]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.855356][T10049] RIP: 0033:0x7fe9e541e169
[  199.855373][T10049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.855440][T10049] RSP: 002b:00007fe9e3a87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  199.855460][T10049] RAX: ffffffffffffffda RBX: 00007fe9e5645fa0 RCX: 00007fe9e541e169
[  199.855510][T10049] RDX: 0000000000000000 RSI: 00000000000000d4 RDI: 00002000000000c0
[  199.855522][T10049] RBP: 00007fe9e3a87090 R08: 0000000000000000 R09: 0000000000000000
[  199.855534][T10049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.855545][T10049] R13: 0000000000000000 R14: 00007fe9e5645fa0 R15: 00007ffd32a33f18
[  199.855566][T10049]  </TASK>
[  199.889283][T10051] bpf: Bad value for 'gid'
[  200.113909][ T3949] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.218122][T10055] __nla_validate_parse: 11 callbacks suppressed
[  200.218150][T10055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2170'.
[  200.254530][T10058] siw: device registration error -23
[  200.279627][T10058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2171'.
[  200.333248][T10062] loop4: detected capacity change from 0 to 2048
[  200.356174][T10062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.407765][T10062] SELinux: syz.4.2173 (10062) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  200.475663][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.616456][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.682274][T10074] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2177'.
[  200.810455][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2180'.
[  201.160501][   T29] kauditd_printk_skb: 1643 callbacks suppressed
[  201.160517][   T29] audit: type=1400 audit(1745421416.331:31859): avc:  denied  { create } for  pid=10081 comm="syz.1.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  201.172823][T10087] netlink: 'syz.1.2181': attribute type 3 has an invalid length.
[  201.196287][   T29] audit: type=1400 audit(1745421416.341:31860): avc:  denied  { write } for  pid=10081 comm="syz.1.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  201.220486][T10087] netlink: 'syz.1.2181': attribute type 3 has an invalid length.
[  201.229620][   T29] audit: type=1400 audit(1745421416.401:31861): avc:  denied  { read write } for  pid=10086 comm="syz.5.2183" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  201.261025][T10089] loop5: detected capacity change from 0 to 512
[  201.267389][   T29] audit: type=1400 audit(1745421416.431:31862): avc:  denied  { read write open } for  pid=10086 comm="syz.5.2183" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  201.292518][   T29] audit: type=1400 audit(1745421416.431:31863): avc:  denied  { ioctl } for  pid=10086 comm="syz.5.2183" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  201.451172][   T29] audit: type=1326 audit(1745421416.491:31864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10085 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592a74e169 code=0x7ffc0000
[  201.474922][   T29] audit: type=1326 audit(1745421416.491:31865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10085 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f592a74e169 code=0x7ffc0000
[  201.498444][   T29] audit: type=1400 audit(1745421416.491:31866): avc:  denied  { create } for  pid=10085 comm="syz.2.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  201.502483][T10090] vxcan1 speed is unknown, defaulting to 1000
[  201.518299][   T29] audit: type=1326 audit(1745421416.491:31867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10085 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592a74e169 code=0x7ffc0000
[  201.547858][   T29] audit: type=1326 audit(1745421416.491:31868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10085 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f592a74e169 code=0x7ffc0000
[  201.556840][T10090] hsr0 speed is unknown, defaulting to 1000
[  201.588766][T10096] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2185'.
[  201.590714][T10089] EXT4-fs (loop5): 1 orphan inode deleted
[  201.598552][T10090] lo speed is unknown, defaulting to 1000
[  201.609730][T10089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.609764][   T31] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1
[  201.634675][T10089] ext4 filesystem being mounted at /386/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  201.689717][ T3949] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.823092][T10100] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2188'.
[  202.123219][T10112] loop1: detected capacity change from 0 to 512
[  202.217105][T10117] loop4: detected capacity change from 0 to 512
[  202.246241][T10112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.309708][T10117] EXT4-fs (loop4): too many log groups per flexible block group
[  202.317421][T10117] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  202.326061][T10112] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.361215][T10117] EXT4-fs (loop4): mount failed
[  202.367096][T10122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10122 comm=syz.2.2194
[  202.487418][T10117] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2193'.
[  202.496530][T10117] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2193'.
[  202.505533][T10117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2193'.
[  202.551067][T10112] program syz.1.2192 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  202.565175][T10112] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  202.607007][ T7195] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.774447][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2197'.
[  202.912437][T10138] netlink: 'syz.4.2200': attribute type 1 has an invalid length.
[  202.955850][T10141] xt_CT: You must specify a L4 protocol and not use inversions on it
[  203.007945][T10105] loop3: detected capacity change from 0 to 512
[  203.128262][T10105] EXT4-fs (loop3): 1 orphan inode deleted
[  203.145894][T10105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.186429][   T56] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1
[  203.219638][T10105] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.277589][T10105] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.543080][T10161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10161 comm=syz.5.2208
[  203.595295][T10163] loop2: detected capacity change from 0 to 4096
[  203.621903][T10163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.659398][T10165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10165 comm=syz.4.2209
[  203.682737][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.337337][T10193] ==================================================================
[  204.345460][T10193] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter
[  204.352860][T10193] 
[  204.355204][T10193] write to 0xffff888156a3c000 of 4096 bytes by task 10194 on cpu 1:
[  204.363193][T10193]  _copy_from_iter+0x136/0xd10
[  204.367980][T10193]  copy_page_from_iter+0x14f/0x280
[  204.373110][T10193]  process_vm_rw+0x558/0x840
[  204.377716][T10193]  __x64_sys_process_vm_writev+0x7a/0x90
[  204.383363][T10193]  x64_sys_call+0xaf3/0x2e10
[  204.387977][T10193]  do_syscall_64+0xc9/0x1a0
[  204.392505][T10193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.398405][T10193] 
[  204.400736][T10193] write to 0xffff888156a3c000 of 4096 bytes by task 10193 on cpu 0:
[  204.408722][T10193]  _copy_from_iter+0x136/0xd10
[  204.413506][T10193]  copy_page_from_iter+0x14f/0x280
[  204.418647][T10193]  process_vm_rw+0x558/0x840
[  204.423271][T10193]  __x64_sys_process_vm_writev+0x7a/0x90
[  204.428923][T10193]  x64_sys_call+0xaf3/0x2e10
[  204.433521][T10193]  do_syscall_64+0xc9/0x1a0
[  204.438035][T10193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.443940][T10193] 
[  204.446292][T10193] Reported by Kernel Concurrency Sanitizer on:
[  204.452472][T10193] CPU: 0 UID: 0 PID: 10193 Comm: syz.5.2220 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) 
[  204.464978][T10193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  204.475053][T10193] ==================================================================
[  204.496357][T10193] loop5: detected capacity change from 0 to 1024
[  208.039340][ T3382] page_pool_release_retry() stalled pool shutdown: id 42, 1 inflight 60 sec