last executing test programs:

7.329351317s ago: executing program 3 (id=564):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000650000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})

1.948512325s ago: executing program 0 (id=637):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000903000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)

1.938792316s ago: executing program 0 (id=638):
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
gettid()
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$unix(0x1, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r2 = dup(0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
linkat(r2, 0x0, r2, 0x0, 0x1000)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0xfffffffffffffffe)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'gretap0\x00', 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
epoll_create1(0x0)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r5)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000ffe40000000000000000ffffe000fd6e08000a0000000004060002000100000014001f"], 0x5c}, 0x1, 0x620b}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, 0x0, 0x4800)

1.200446355s ago: executing program 4 (id=650):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000c1, 0x100000000000000)

1.167693585s ago: executing program 4 (id=651):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1.149797026s ago: executing program 4 (id=652):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86"], 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x9)
syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f900f500180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="601a939be445850200009078"], 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0xfffffffc)
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
write$binfmt_format(r3, &(0x7f0000000000)='0\x00', 0x1)
r4 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x12000, 0x10)
read(r4, &(0x7f0000000380)=""/215, 0xd7)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0db2b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec08647566b1bdd75d6a9a1e600aaf0f42ce94b4725d4c2da80150dc34e5975d6904f061ed9a7608959f2d24ee6ec4f2395d16e02f53c746f74b12013f738d76456c3407188eff97f31ca36e5d79e1f1c7c3b688ee21d37ba5ebf4afc2a61f16"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

1.144466475s ago: executing program 3 (id=653):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r2=>0x0})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x1, 0x4}, 0x1}, 0x18)
sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x18, &(0x7f0000000180)={0x0}}, 0x40058ea)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20)
r5 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
finit_module(r5, 0x0, 0x3)

1.113592686s ago: executing program 1 (id=654):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1000000000000}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = openat(0xffffffffffffff9c, 0x0, 0x2240, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000014c0)={{{@in6=@dev, @in6=@empty}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000940)=0xe8)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250301f2"], 0x114}], 0x1, 0x0, 0x0, 0xc00}, 0x0)

1.048376507s ago: executing program 3 (id=655):
setxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000500)={'U-', 0x200}, 0x16, 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x7}, 0x1100, 0x5dd8, 0x203a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000d125318801538153ac67f2416e00"/33, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x0, 0x101, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d400"/24], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000})
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r9}, 0x10)
connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)
gettid()
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r10}, 0x10)
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)

1.048150137s ago: executing program 1 (id=656):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2)

1.047989687s ago: executing program 4 (id=657):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20008011)
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="24000000290003"], 0x33fe0)

1.035767327s ago: executing program 0 (id=658):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)

1.024274657s ago: executing program 4 (id=659):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000c1, 0x0) (fail_nth: 13)

1.003893767s ago: executing program 3 (id=660):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000000))
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/123, &(0x7f00000000c0)=0x7b)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x40)
r3 = syz_clone(0x2ac000, &(0x7f0000000240)="d6ebb9332733", 0x6, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="eba2277639f9052c2b1257ab88d33e0dd7cfe85ca8c53d121cab17b9fa5fe25f433b28bf435afa76a20aadb8288e91702d102a387818d7acb5fc0a2eddbce1e9b5ab2c3c9ca853caa4d7699e94b399a4acaea78740022b0dad1658885b37c0c490a2ed8df21bc5c141baf5f87e95b5e26709468920f930b274f27a4e06050ec077ff9c893ea055d0a94b3328a5727e4bee3f560becfb54dd0aaf4f44c48cd559aef343a9a0a85b53733fa26dbb40c13fef3f4862adac053ffd86839ed9fd8ebe23ef21e9dc93e5a8497a3325fe5237869583584dfd")
sched_setscheduler(r3, 0x0, &(0x7f0000000400)=0x10)
getcwd(&(0x7f0000000440)=""/246, 0xf6)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000540)={0x0, r0, 0x8, 0x1, 0x7, 0x79a})
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000580)={'erspan0\x00', 0x800})
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0x1, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@newtfilter={0x2c, 0x2c, 0x300, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0x7}, {0x7, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x91}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5edea4ff9cc03677}, 0x4)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000780))
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, '\x00', r5, 0xffffffffffffffff, 0x1, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000b40), 0xc00, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c00)={0x4, <r8=>0x0}, 0x8)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@generic={&(0x7f0000000c40)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000cc0)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x4)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d40)=@generic={&(0x7f0000000d00)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e00)={{0x1, <r12=>0xffffffffffffffff}, &(0x7f0000000d80), &(0x7f0000000dc0)='%pB    \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ec0)={{0x1, <r13=>0xffffffffffffffff}, &(0x7f0000000e40), &(0x7f0000000e80)}, 0x20)
r14 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x12, 0x10, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@alu={0x4, 0x0, 0x8, 0x1, 0x9, 0x1, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a80)='GPL\x00', 0x4, 0x7f, &(0x7f0000000ac0)=""/127, 0x41100, 0x25, '\x00', r5, @fallback=0x30, r7, 0x8, &(0x7f0000000b80)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x4, 0xf, 0x101, 0x7}, 0x10, r8, 0xffffffffffffffff, 0x3, &(0x7f0000000f40)=[r9, r10, r11, r12, r13, r14], &(0x7f0000000f80)=[{0x2, 0x5, 0x7, 0x7}, {0x1, 0x5, 0xf, 0xb}, {0x3, 0x3, 0x3, 0x2}], 0x10, 0xfffffc00, @void, @value}, 0x94)
ioctl$SIOCX25SCAUSEDIAG(r14, 0x89ec, &(0x7f0000001080)={0xfa, 0x2})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000011c0)={'sit0\x00', &(0x7f00000010c0)={'syztnl2\x00', <r15=>r5, 0x700, 0x0, 0xfe6, 0x7f, {{0x2b, 0x4, 0x1, 0x16, 0xac, 0x65, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast, {[@noop, @ssrr={0x89, 0x1f, 0xe7, [@dev={0xac, 0x14, 0x14, 0x16}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @private=0xa010101, @multicast2]}, @generic={0x7, 0xa, "bc541459c0d8271b"}, @lsrr={0x83, 0x1f, 0x17, [@dev={0xac, 0x14, 0x14, 0x31}, @empty, @private=0xa010101, @broadcast, @rand_addr=0x64010100, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1c}]}, @noop, @timestamp_addr={0x44, 0x1c, 0xa5, 0x1, 0x2, [{@multicast1, 0x5}, {@loopback, 0xb}, {@private=0xa010102, 0xd}]}, @timestamp_prespec={0x44, 0x1c, 0x74, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x3}, {@remote, 0x7}, {@multicast1, 0x1}]}, @lsrr={0x83, 0xf, 0x47, [@private=0xa010101, @local, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0xa}]}}}}})
r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001200)={0x1b, 0x0, 0x0, 0xa266cd51, 0x0, r9, 0x482d, '\x00', r15, r14, 0x2, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001280)={<r17=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001300)={r17, 0x1, r16, 0x6, 0x80000})

902.440109ms ago: executing program 0 (id=661):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f00000002c0))

780.95389ms ago: executing program 0 (id=662):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

732.655171ms ago: executing program 0 (id=663):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x52)
syz_emit_ethernet(0x66, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffffff6487a2bed3d608004500005800000000006c907800000000000000000420880b0000000000000800000086dd080088be00000000b17951a131efb5d62140100000000100000000000000080022eb000000002000000002000000000000000000"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x6, r4}, 0x38)
openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x206e41, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x8, &(0x7f00000000c0), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x80000000000}, 0x18)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0xea4, 0x30, 0xb, 0x0, 0x0, {}, [{0xe90, 0x1, [@m_gact={0x3c, 0x1, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xa35}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x1000000}, 0x1}, [{}, {}, {0x5, 0x4}, {}, {0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x400}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x522}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x400000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x28f1, 0x0, 0x0, 0x4}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {0x0, 0x1, 0x0, 0xfffffffe}, {}, {0x4}, {0x0, 0x0, 0x8000, 0x2}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3ff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x2}, {}, {0x1}, {0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0xa4}, {}, {}, {}, {0x0, 0x0, 0x0, 0xbb4}, {0x0, 0x0, 0x0, 0x0, 0x7}], [{}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x3}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea4}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='ext4_request_blocks\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind(r9, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x7, @broadcast}, 0x3, 0x0, 0x1, 0x1}}, 0x80)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50)
r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r10}, 0x10)

692.868482ms ago: executing program 4 (id=664):
perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0xc, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x2804, 0x0, 0xcde, 0x0, 0x400, 0x10001, 0x1, 0x0, 0x0, 0x0, 0x1c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x18)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x7c, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x1}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffa9874a07d62a9e75ffffbbbbbbbbbbbb86dd6012000800083afffe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x88)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040400}, 0x0)
r5 = syz_io_uring_setup(0x22a7, &(0x7f0000000400)={0x0, 0x9763, 0x8, 0xfffffffc, 0x30e}, &(0x7f00000005c0)=<r6=>0x0, &(0x7f0000000600)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0xff39)
shutdown(r2, 0x0)
r8 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req={0x7, 0x8, 0x139, 0x80000000}, 0x10)
recvmmsg$unix(r8, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000002c0)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000700)=""/173, 0xad}], 0x2}}], 0x2, 0x0, 0x0)

692.440891ms ago: executing program 1 (id=665):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000650000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})

588.271223ms ago: executing program 2 (id=667):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
syz_emit_ethernet(0xa2, &(0x7f0000000a00)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@srh={0x2c, 0x0, 0x4, 0x0, 0x3, 0x48}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x3a, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000000000000000ffffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="000000000000007f0000000000850000009500000095000000005270c9000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000003c0))
setns(r4, 0x10000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

566.571963ms ago: executing program 1 (id=668):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='console\x00'}, 0x18)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
socket(0x8, 0xa, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES64=r2], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="fdffffff00000000000000000006000000000000ead9656c79882c39", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f00000002c0)=0x9, 0x4)
mount(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x4014, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0xc0a4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000004002ae504000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000380)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xfe8, &(0x7f0000001e00)=""/4072, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c3a0e4, 0x1, @perf_config_ext={0x20000000000000, 0x1}, 0x11d08, 0x2, 0xe885, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x2}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

484.562324ms ago: executing program 2 (id=669):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20008011)
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) (fail_nth: 4)

437.833145ms ago: executing program 1 (id=670):
setxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000500)={'U-', 0x200}, 0x16, 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x7}, 0x1100, 0x5dd8, 0x203a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000d125318801538153ac67f2416e00"/33, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x0, 0x101, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d400"/24], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000})
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r9}, 0x10)
connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)
gettid()
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)

258.947747ms ago: executing program 2 (id=671):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)

209.723297ms ago: executing program 2 (id=672):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg0\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="7a0a00ff000000007110630000eaafae630545bd910dcf5c4b0000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10)
write$binfmt_misc(r5, &(0x7f0000001280), 0x6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000006c0)={'erspan0\x00', <r7=>0x0, 0x8, 0x7800, 0x10001, 0x4, {{0x21, 0x4, 0x3, 0xb, 0x84, 0x66, 0x0, 0x84, 0x2f, 0x0, @remote, @empty, {[@rr={0x7, 0xb, 0x44, [@private=0xa010100, @empty]}, @timestamp_addr={0x44, 0x3c, 0xd0, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x3b}, 0x4}, {@remote, 0x8}, {@loopback, 0x1ff}, {@broadcast, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@local, 0x4304}]}, @lsrr={0x83, 0x27, 0xcb, [@loopback, @broadcast, @empty, @loopback, @multicast1, @broadcast, @loopback, @broadcast, @broadcast]}]}}}}})
ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000540)=r7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x18)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00')
socket$rds(0x15, 0x5, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})

111.737379ms ago: executing program 3 (id=673):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

111.024089ms ago: executing program 1 (id=674):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0/file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x48f, &(0x7f0000000680)="$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")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095", @ANYRESHEX=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x177}, 0x18)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r3, &(0x7f0000001c80), 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0)
r4 = getpid()
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x216702, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)=0x7ffd)
ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x143, 0x0, 0x2, 0x2208}, {0x6, 0x0, 0x0, 0x100}]})
write$ppp(r5, &(0x7f0000000480)='3I', 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

94.044489ms ago: executing program 3 (id=675):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
writev(r2, &(0x7f0000000300)=[{&(0x7f00000020c0)="3781", 0x2}, {&(0x7f0000000200)="80ba8f4024aef5b27c8e1982b87fb8164a1329e87f49b1ce1edcd046e9e42aaa789107d2744dbc595354d9cf5bacc31c22987e5a90e44665407f012a98aacb35ca86b9cf6becf7593d873b4014db105a9ce78acdadb1465b2048d4d17d52893825cf6103b7000076822330ab707a29fa4bd51079bce8b643f7a69dafbb5bbaf2fb1e1e447da826e1af70318b63688ffc562ea419d3d1ae4e28ca805301091f2e008cb3a241f2c9eeea1646a4acb5a4f160df168751d122ad02", 0xb9}, {&(0x7f0000000380)="4c4985e13dd17e40ba25e132e64bd6b565821b76d5942a5ccadc13f3718f0f22a7efa175590385c78bcfc0b58942d3e8b9e9cb5abda50e0636bdc5eb66d05180f6bb8d5f1820f4a4eca3da81699244840c0656af54fab2682dd837280e206d8f58e6914db1076db27bc5c789fd4ef9af0cd6514bff1d883f9fc9dbac3c0727680e4f8df312d682eda419875aa74cc75ef0765e", 0x93}], 0x3)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r3}, 0x18)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r4, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
sendmsg$tipc(r5, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x0, 0x200000}, 0x4}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000680)=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}, 0x3}}, 0x10, 0x0}, 0x0)
accept4(r4, 0x0, 0x0, 0x400000000000000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000480)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="050000009f6000"/16, @ANYRES64=0x0, @ANYRES64=r7, @ANYRES8=r9, @ANYRES64=0x2710, @ANYBLOB="0200000003", @ANYRESHEX=r2], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
r10 = syz_open_dev$evdev(&(0x7f00000005c0), 0x0, 0x1671c0)
syz_usb_disconnect(r10)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
ioctl$EVIOCGBITSW(r10, 0x40095505, 0x0)

24.49763ms ago: executing program 2 (id=676):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4000050}, 0xc800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x1000000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

0s ago: executing program 2 (id=677):
socket$netlink(0x10, 0x3, 0x10) (async)
r0 = socket$netlink(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async)
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') (async)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002400)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247f83539d324d3b5dc528300b102df1dc7e69e17ea3fd185a6963e454a048ce7b782832d702f95b7061b07bbe902f0e4fcd50f9dbe7cc1492db73715dbb57bb67fa5bff1ece9e22588c48ea0c62a36066e5376665fcb764353f74438a0d973a128bdf07e68309ce80a0f454b0d2fc46bac78bd615f929a336b96e4e5f0f3a8cbd98c1c13dc6a44a9c2234237d086365fe76c34ec416d642670b2e8a0d95e8c3512644cb935d095f2297a40ac58d398b453c1cbfa9111a9d3a05a5ed57b60d551167c7e457c9f3529745c7b296c8ac61d1473b652d48fdb097cba99b42503dd698222993a5413a73812e2b079aef56e3b02a6d0429d4dd1b6fc55c9a18f69d89f3198caddbbb2c51c4b95e263554c9ece731d169743c2109e405bcdb094d35ce918308703549a7d3f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}, {0x81, 0x3, 0x4, 0x6}, {0x6, 0x7f, 0x19, 0x10}]}) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}, {0x81, 0x3, 0x4, 0x6}, {0x6, 0x7f, 0x19, 0x10}]})
r4 = syz_io_uring_setup(0x5914, &(0x7f0000000140)={0x0, 0x7685, 0x200, 0x0, 0x131}, &(0x7f00000001c0), &(0x7f0000000380))
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

kernel console output (not intermixed with test programs):

 cgroup: Unknown subsys name 'net'
[   32.976018][   T29] audit: type=1400 audit(1747042092.278:66): avc:  denied  { mount } for  pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.004764][   T29] audit: type=1400 audit(1747042092.308:67): avc:  denied  { unmount } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.162146][ T3304] cgroup: Unknown subsys name 'cpuset'
[   33.169236][ T3304] cgroup: Unknown subsys name 'rlimit'
[   33.359437][   T29] audit: type=1400 audit(1747042092.678:68): avc:  denied  { setattr } for  pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   33.382739][   T29] audit: type=1400 audit(1747042092.678:69): avc:  denied  { create } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.403408][   T29] audit: type=1400 audit(1747042092.678:70): avc:  denied  { write } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.424008][   T29] audit: type=1400 audit(1747042092.678:71): avc:  denied  { read } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.432325][ T3307] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   33.444728][   T29] audit: type=1400 audit(1747042092.688:72): avc:  denied  { mounton } for  pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   33.478164][   T29] audit: type=1400 audit(1747042092.688:73): avc:  denied  { mount } for  pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   33.502392][   T29] audit: type=1400 audit(1747042092.778:74): avc:  denied  { relabelto } for  pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   33.529304][ T3304] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   34.868793][ T3314] chnl_net:caif_netlink_parms(): no params data found
[   34.905921][ T3320] chnl_net:caif_netlink_parms(): no params data found
[   34.951311][ T3324] chnl_net:caif_netlink_parms(): no params data found
[   35.005831][ T3316] chnl_net:caif_netlink_parms(): no params data found
[   35.015235][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.022371][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.029647][ T3314] bridge_slave_0: entered allmulticast mode
[   35.036468][ T3314] bridge_slave_0: entered promiscuous mode
[   35.059466][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.066688][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.073938][ T3314] bridge_slave_1: entered allmulticast mode
[   35.080492][ T3314] bridge_slave_1: entered promiscuous mode
[   35.121254][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.128405][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.135651][ T3320] bridge_slave_0: entered allmulticast mode
[   35.142259][ T3320] bridge_slave_0: entered promiscuous mode
[   35.155563][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.162944][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.170793][ T3324] bridge_slave_0: entered allmulticast mode
[   35.177652][ T3324] bridge_slave_0: entered promiscuous mode
[   35.185549][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.192979][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.200197][ T3324] bridge_slave_1: entered allmulticast mode
[   35.207353][ T3324] bridge_slave_1: entered promiscuous mode
[   35.213826][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.220997][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.228377][ T3320] bridge_slave_1: entered allmulticast mode
[   35.234888][ T3320] bridge_slave_1: entered promiscuous mode
[   35.245132][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.257392][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.278621][ T3330] chnl_net:caif_netlink_parms(): no params data found
[   35.318448][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.332285][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.343561][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.361371][ T3314] team0: Port device team_slave_0 added
[   35.368329][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.382757][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.389837][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.397185][ T3316] bridge_slave_0: entered allmulticast mode
[   35.403614][ T3316] bridge_slave_0: entered promiscuous mode
[   35.418020][ T3314] team0: Port device team_slave_1 added
[   35.433989][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.441173][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.448477][ T3316] bridge_slave_1: entered allmulticast mode
[   35.455085][ T3316] bridge_slave_1: entered promiscuous mode
[   35.479379][ T3324] team0: Port device team_slave_0 added
[   35.498234][ T3320] team0: Port device team_slave_0 added
[   35.504950][ T3320] team0: Port device team_slave_1 added
[   35.511438][ T3324] team0: Port device team_slave_1 added
[   35.518408][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.533034][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.540001][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.566229][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.592243][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.611508][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.618486][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.644499][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.658465][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.665520][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.691674][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.703257][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.710225][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.736360][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.752425][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.759371][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.785353][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.796272][ T3330] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.803445][ T3330] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.810625][ T3330] bridge_slave_0: entered allmulticast mode
[   35.817295][ T3330] bridge_slave_0: entered promiscuous mode
[   35.824619][ T3330] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.831805][ T3330] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.838936][ T3330] bridge_slave_1: entered allmulticast mode
[   35.845479][ T3330] bridge_slave_1: entered promiscuous mode
[   35.859321][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.866314][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.892795][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.920011][ T3316] team0: Port device team_slave_0 added
[   35.928667][ T3316] team0: Port device team_slave_1 added
[   35.945751][ T3330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.967741][ T3314] hsr_slave_0: entered promiscuous mode
[   35.973781][ T3314] hsr_slave_1: entered promiscuous mode
[   35.980646][ T3330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.999726][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.006740][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.032649][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.050557][ T3320] hsr_slave_0: entered promiscuous mode
[   36.057543][ T3320] hsr_slave_1: entered promiscuous mode
[   36.063615][ T3320] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.071164][ T3320] Cannot create hsr debugfs directory
[   36.095921][ T3324] hsr_slave_0: entered promiscuous mode
[   36.102031][ T3324] hsr_slave_1: entered promiscuous mode
[   36.108048][ T3324] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.115655][ T3324] Cannot create hsr debugfs directory
[   36.121597][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.128568][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.154529][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.177772][ T3330] team0: Port device team_slave_0 added
[   36.184446][ T3330] team0: Port device team_slave_1 added
[   36.230597][ T3330] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.238227][ T3330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.266566][ T3330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.297322][ T3330] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.304439][ T3330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.330813][ T3330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.351226][ T3316] hsr_slave_0: entered promiscuous mode
[   36.357362][ T3316] hsr_slave_1: entered promiscuous mode
[   36.363260][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.371245][ T3316] Cannot create hsr debugfs directory
[   36.451601][ T3330] hsr_slave_0: entered promiscuous mode
[   36.457644][ T3330] hsr_slave_1: entered promiscuous mode
[   36.463610][ T3330] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.471182][ T3330] Cannot create hsr debugfs directory
[   36.508117][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   36.531556][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   36.557884][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   36.578443][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   36.627914][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   36.641108][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   36.651136][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   36.662595][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   36.691514][ T3324] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   36.708273][ T3324] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   36.720810][ T3324] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   36.744996][ T3324] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   36.755938][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.778852][ T3314] 8021q: adding VLAN 0 to HW filter on device team0
[   36.800984][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   36.810637][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   36.819931][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   36.829646][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   36.839413][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.846581][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.857017][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.864114][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.878531][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.891749][ T3320] 8021q: adding VLAN 0 to HW filter on device team0
[   36.935405][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.942517][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.951591][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.958663][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.980471][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   36.990974][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   37.011019][ T3330] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   37.033559][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.040953][ T3330] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   37.050087][ T3330] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   37.064559][ T3330] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   37.085398][ T3324] 8021q: adding VLAN 0 to HW filter on device team0
[   37.109187][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.123342][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.130585][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.140557][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.147690][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.164913][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.173886][ T3316] 8021q: adding VLAN 0 to HW filter on device team0
[   37.208575][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.218914][  T137] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.226075][  T137] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.250696][  T137] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.257844][  T137] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.282377][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   37.292915][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   37.339472][ T3314] veth0_vlan: entered promiscuous mode
[   37.363953][ T3330] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.373525][ T3314] veth1_vlan: entered promiscuous mode
[   37.386594][ T3330] 8021q: adding VLAN 0 to HW filter on device team0
[   37.409533][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.416741][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.432863][ T3314] veth0_macvtap: entered promiscuous mode
[   37.453338][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.464311][ T3314] veth1_macvtap: entered promiscuous mode
[   37.474366][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.481631][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.500456][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.514495][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.540798][ T3330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   37.551412][ T3330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   37.574451][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.593258][ T3320] veth0_vlan: entered promiscuous mode
[   37.599462][ T3314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.608790][ T3314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.618006][ T3314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.626843][ T3314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.639670][ T3320] veth1_vlan: entered promiscuous mode
[   37.691226][ T3320] veth0_macvtap: entered promiscuous mode
[   37.710933][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   37.730954][ T3320] veth1_macvtap: entered promiscuous mode
[   37.750329][ T3324] veth0_vlan: entered promiscuous mode
[   37.758910][ T3448] loop0: detected capacity change from 0 to 512
[   37.765660][ T3330] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.778544][ T3324] veth1_vlan: entered promiscuous mode
[   37.791118][ T3448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.794856][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.807052][ T3448] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   37.814275][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.835820][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.855461][ T3316] veth0_vlan: entered promiscuous mode
[   37.862731][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.874443][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.887314][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.898265][ T3320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.907484][ T3320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.916770][ T3320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.925655][ T3320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.940683][ T3316] veth1_vlan: entered promiscuous mode
[   37.948327][ T3324] veth0_macvtap: entered promiscuous mode
[   37.955527][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.957765][ T3324] veth1_macvtap: entered promiscuous mode
[   38.002410][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.006948][   T29] kauditd_printk_skb: 33 callbacks suppressed
[   38.006967][   T29] audit: type=1400 audit(1747042097.328:108): avc:  denied  { read } for  pid=3455 comm="syz.0.6" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   38.013507][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.041382][   T29] audit: type=1400 audit(1747042097.338:109): avc:  denied  { open } for  pid=3455 comm="syz.0.6" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   38.042418][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.052359][   T29] audit: type=1400 audit(1747042097.338:110): avc:  denied  { ioctl } for  pid=3455 comm="syz.0.6" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   38.075555][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.122912][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.144937][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.155619][   T29] audit: type=1400 audit(1747042097.468:111): avc:  denied  { write } for  pid=3455 comm="syz.0.6" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   38.155629][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.189189][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.200047][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.211020][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.220042][ T3324] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.228958][ T3324] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.237920][ T3324] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.246789][ T3324] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.264232][ T3316] veth0_macvtap: entered promiscuous mode
[   38.285758][ T3330] veth0_vlan: entered promiscuous mode
[   38.298920][ T3316] veth1_macvtap: entered promiscuous mode
[   38.319880][ T3330] veth1_vlan: entered promiscuous mode
[   38.327048][   T29] audit: type=1400 audit(1747042097.658:112): avc:  denied  { unmount } for  pid=3462 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   38.357150][ T3465] loop4: detected capacity change from 0 to 512
[   38.364883][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.375434][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.385392][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.396135][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.406161][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.416663][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.429662][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.445765][ T3330] veth0_macvtap: entered promiscuous mode
[   38.455081][ T3465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.471718][   T29] audit: type=1400 audit(1747042097.788:113): avc:  denied  { prog_run } for  pid=3466 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   38.472206][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.500855][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.510849][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.510891][ T3465] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   38.521379][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.521394][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.521410][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.523085][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.574643][ T3330] veth1_macvtap: entered promiscuous mode
[   38.585952][ T3472] loop3: detected capacity change from 0 to 512
[   38.588549][ T3330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.602975][ T3330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.612996][ T3330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.623515][ T3330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.633428][ T3330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.643986][ T3330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.649816][   T29] audit: type=1400 audit(1747042097.978:114): avc:  denied  { create } for  pid=3466 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   38.653976][ T3330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.684900][ T3330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.689441][ T3472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   38.707052][ T3330] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.721228][   T29] audit: type=1400 audit(1747042098.008:115): avc:  denied  { write } for  pid=3466 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   38.728195][ T3470] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   38.741304][   T29] audit: type=1400 audit(1747042098.008:116): avc:  denied  { read } for  pid=3466 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   38.752338][ T3472] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   38.771576][ T3316] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.789649][ T3316] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.798639][ T3316] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.807705][ T3316] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.833498][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.840086][ T3330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.853163][ T3330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.863175][ T3330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.873631][ T3330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.883814][ T3330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.889214][ T3478] loop0: detected capacity change from 0 to 512
[   38.894316][ T3330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.910612][ T3330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.921142][ T3330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.931541][   T29] audit: type=1400 audit(1747042098.248:117): avc:  denied  { read write open } for  pid=3471 comm="syz.3.4" path="/0/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   38.969160][ T3330] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.969158][ T3478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   38.999024][ T3478] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   38.999098][ T3330] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.018434][ T3330] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.027243][ T3330] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.036026][ T3330] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.056472][ T3482] loop4: detected capacity change from 0 to 512
[   39.095256][ T3482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.122679][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   39.133586][ T3482] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   39.207756][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.228418][ T3488] loop3: detected capacity change from 0 to 512
[   39.245237][ T3490] loop2: detected capacity change from 0 to 1024
[   39.296260][ T3492] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   39.364860][ T3490] EXT4-fs: Ignoring removed orlov option
[   39.370896][ T3490] EXT4-fs: Ignoring removed nomblk_io_submit option
[   39.466624][ T3490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.480995][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   39.496649][ T3490] process 'syz.2.3' launched './file0/file0' with NULL argv: empty string added
[   39.560919][ T3505] blkio.reset_stats is deprecated
[   39.825824][ T3508] tipc: Started in network mode
[   39.830967][ T3508] tipc: Node identity 12f39fb7a207, cluster identity 4711
[   39.838291][ T3508] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   39.894998][ T3507] tipc: Resetting bearer <eth:syzkaller0>
[   39.941479][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.977194][ T3507] tipc: Disabling bearer <eth:syzkaller0>
[   40.020053][ T3514] loop2: detected capacity change from 0 to 512
[   40.059751][ T3514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.068555][ T3512] tipc: Started in network mode
[   40.077811][ T3512] tipc: Node identity ea510e76a0f9, cluster identity 4711
[   40.085253][ T3512] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   40.092731][ T3514] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   40.105358][ T3511] tipc: Resetting bearer <eth:syzkaller0>
[   40.119135][ T3511] tipc: Disabling bearer <eth:syzkaller0>
[   40.233686][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.256353][ T3519] loop1: detected capacity change from 0 to 512
[   40.259878][ T3521] loop3: detected capacity change from 0 to 512
[   40.285543][ T3526] loop2: detected capacity change from 0 to 512
[   40.344658][ T3519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   40.361183][ T3519] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   40.398888][ T3535] loop0: detected capacity change from 0 to 512
[   40.417210][ T3535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.480413][ T3535] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.554335][ T3535] pim6reg1: entered promiscuous mode
[   40.559675][ T3535] pim6reg1: entered allmulticast mode
[   40.776255][ T3548] loop4: detected capacity change from 0 to 512
[   40.905589][ T3550] loop2: detected capacity change from 0 to 1024
[   40.927887][ T3550] EXT4-fs: Ignoring removed orlov option
[   40.933713][ T3550] EXT4-fs: Ignoring removed nomblk_io_submit option
[   40.965240][ T3550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.036077][ T3330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   41.115801][ T3557] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   41.276533][ T3559] loop3: detected capacity change from 0 to 512
[   41.293362][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.293605][ T3559] ext4: Unknown parameter 'noacl'
[   41.370030][ T3565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.29'.
[   41.453327][ T3571] loop3: detected capacity change from 0 to 512
[   41.454146][ T3573] loop4: detected capacity change from 0 to 512
[   41.463163][ T3571] =======================================================
[   41.463163][ T3571] WARNING: The mand mount option has been deprecated and
[   41.463163][ T3571]          and is ignored by this kernel. Remove the mand
[   41.463163][ T3571]          option from the mount to silence this warning.
[   41.463163][ T3571] =======================================================
[   41.507759][ T3571] EXT4-fs (loop3): orphan cleanup on readonly fs
[   41.515826][ T3573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.523494][ T3571] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.32: bad orphan inode 13
[   41.529105][ T3573] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   41.539214][ T3571] ext4_test_bit(bit=12, block=18) = 1
[   41.554720][ T3571] is_bad_inode(inode)=0
[   41.559048][ T3571] NEXT_ORPHAN(inode)=2130706432
[   41.564121][ T3571] max_ino=32
[   41.567510][ T3571] i_nlink=1
[   41.573719][ T3571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   41.587860][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.597993][ T3571] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[   41.613248][ T3571] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   41.628204][ T3578] loop4: detected capacity change from 0 to 512
[   41.639656][ T3578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.640247][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.652575][ T3578] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   41.693355][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.790908][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.923674][    C0] hrtimer: interrupt took 27606 ns
[   42.050736][ T3594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.40'.
[   42.209390][ T3601] loop1: detected capacity change from 0 to 512
[   42.286829][ T3603] loop2: detected capacity change from 0 to 512
[   42.323546][ T3605] loop4: detected capacity change from 0 to 512
[   42.366430][ T3607] tipc: Started in network mode
[   42.371600][ T3607] tipc: Node identity 220438b52ab, cluster identity 4711
[   42.378707][ T3607] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   42.382788][ T3605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.398498][ T3605] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   42.409639][ T3606] tipc: Resetting bearer <eth:syzkaller0>
[   42.428843][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.444396][ T3606] tipc: Disabling bearer <eth:syzkaller0>
[   42.465193][ T3611] loop4: detected capacity change from 0 to 512
[   42.480625][ T3611] EXT4-fs (loop4): orphan cleanup on readonly fs
[   42.489651][ T3611] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.46: bad orphan inode 13
[   42.500269][ T3611] ext4_test_bit(bit=12, block=18) = 1
[   42.505754][ T3611] is_bad_inode(inode)=0
[   42.509957][ T3611] NEXT_ORPHAN(inode)=2130706432
[   42.514877][ T3611] max_ino=32
[   42.518092][ T3611] i_nlink=1
[   42.542592][ T3611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   42.559884][ T3611] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[   42.629842][ T3611] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   42.645189][ T3617] loop3: detected capacity change from 0 to 512
[   42.678644][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.777645][ T3624] loop0: detected capacity change from 0 to 1024
[   42.803063][ T3624] EXT4-fs: Ignoring removed orlov option
[   42.809017][ T3624] EXT4-fs: Ignoring removed nomblk_io_submit option
[   42.823631][ T3624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.949345][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.960110][ T3637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'.
[   42.998179][ T3640] loop0: detected capacity change from 0 to 512
[   43.007702][ T3640] ext4: Unknown parameter 'noacl'
[   43.012972][ T3642] loop3: detected capacity change from 0 to 512
[   43.056556][ T3647] loop1: detected capacity change from 0 to 512
[   43.066488][ T3645] loop3: detected capacity change from 0 to 512
[   43.074015][ T3647] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   43.087189][ T3647] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   43.106042][ T3647] EXT4-fs (loop1): 1 truncate cleaned up
[   43.113767][ T3647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.133088][ T3645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   43.153093][ T3645] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   43.202316][ T3330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.252644][ T3654] loop0: detected capacity change from 0 to 512
[   43.263385][ T3654] EXT4-fs (loop0): orphan cleanup on readonly fs
[   43.293615][ T3654] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.61: bad orphan inode 13
[   43.330641][ T3654] ext4_test_bit(bit=12, block=18) = 1
[   43.334875][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   43.336302][ T3654] is_bad_inode(inode)=0
[   43.349432][ T3654] NEXT_ORPHAN(inode)=2130706432
[   43.354341][ T3654] max_ino=32
[   43.357578][ T3654] i_nlink=1
[   43.363730][ T3654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   43.378159][ T3665] loop1: detected capacity change from 0 to 2048
[   43.392599][ T3654] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[   43.409530][ T3667] loop3: detected capacity change from 0 to 512
[   43.431555][ T3654] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   43.453348][ T3665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.475431][   T29] kauditd_printk_skb: 46 callbacks suppressed
[   43.475444][   T29] audit: type=1400 audit(1747042102.798:164): avc:  denied  { create } for  pid=3664 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   43.477243][ T3667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   43.514613][ T3667] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   43.526872][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.540025][   T29] audit: type=1400 audit(1747042102.858:165): avc:  denied  { write } for  pid=3664 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   43.567513][   T29] audit: type=1400 audit(1747042102.888:166): avc:  denied  { connect } for  pid=3664 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   43.587907][   T29] audit: type=1400 audit(1747042102.888:167): avc:  denied  { name_connect } for  pid=3664 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   43.624726][   T29] audit: type=1400 audit(1747042102.938:168): avc:  denied  { bind } for  pid=3675 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   43.680048][ T3679] SELinux:  Context ¸ is not valid (left unmapped).
[   43.709085][   T29] audit: type=1326 audit(1747042102.988:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d8c7e969 code=0x7ffc0000
[   43.723904][ T3684] loop0: detected capacity change from 0 to 512
[   43.733269][   T29] audit: type=1326 audit(1747042102.988:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d8c7e969 code=0x7ffc0000
[   43.761500][ T3682] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   43.763447][   T29] audit: type=1326 audit(1747042102.998:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25d8c7e969 code=0x7ffc0000
[   43.792999][   T29] audit: type=1326 audit(1747042102.998:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d8c7e969 code=0x7ffc0000
[   43.816303][   T29] audit: type=1326 audit(1747042102.998:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25d8c7e969 code=0x7ffc0000
[   43.861618][ T3681] tipc: Resetting bearer <eth:syzkaller0>
[   43.869425][ T3684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   43.882164][ T3684] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   43.891699][ T3681] tipc: Disabling bearer <eth:syzkaller0>
[   43.914716][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   43.993160][ T3691] loop4: detected capacity change from 0 to 512
[   43.996669][ T3690] sd 0:0:1:0: device reset
[   44.027173][ T3690] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   44.048907][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   44.069882][ T3690] geneve0: entered allmulticast mode
[   44.079635][ T3693] loop0: detected capacity change from 0 to 512
[   44.105330][ T3690] netlink: 28 bytes leftover after parsing attributes in process `+}[@'.
[   44.114015][ T3690] netlink: 28 bytes leftover after parsing attributes in process `+}[@'.
[   44.181996][ T3690] +}[@ (3690) used greatest stack depth: 10872 bytes left
[   44.380380][ T3330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.570318][ T3707] loop1: detected capacity change from 0 to 512
[   44.906124][ T3714] loop4: detected capacity change from 0 to 512
[   44.940874][ T3714] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   45.019991][ T3714] EXT4-fs (loop4): 1 truncate cleaned up
[   45.023937][ T3721] loop0: detected capacity change from 0 to 512
[   45.050003][ T3714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.187340][ T3731] loop3: detected capacity change from 0 to 512
[   45.194552][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.253907][ T3731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.257932][ T3739] loop4: detected capacity change from 0 to 512
[   45.297489][ T3731] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   45.324238][ T3744] loop2: detected capacity change from 0 to 512
[   45.383744][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.716658][ T3768] loop1: detected capacity change from 0 to 512
[   46.171104][ T3777] loop4: detected capacity change from 0 to 512
[   46.190167][ T3779] loop0: detected capacity change from 0 to 512
[   46.231930][ T3777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   46.232104][ T3779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.244856][ T3777] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   46.292699][ T3779] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   46.468383][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   46.469685][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.484142][ T3788] loop1: detected capacity change from 0 to 512
[   46.510826][ T3788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.530665][ T3788] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   46.616285][ T3801] loop0: detected capacity change from 0 to 512
[   46.624026][ T3330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.655778][ T3807] loop3: detected capacity change from 0 to 1024
[   46.681648][ T3807] EXT4-fs: Ignoring removed orlov option
[   46.687421][ T3807] EXT4-fs: Ignoring removed nomblk_io_submit option
[   46.718313][ T3807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.747069][ T3812] loop1: detected capacity change from 0 to 512
[   46.829278][ T3812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.845751][ T3812] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   46.885470][ T3330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.917514][ T3818] loop1: detected capacity change from 0 to 512
[   46.930290][ T3818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.943227][ T3818] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   47.098723][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.173919][ T3330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.599191][ T3827] loop2: detected capacity change from 0 to 512
[   47.634864][ T3829] loop4: detected capacity change from 0 to 512
[   47.683471][ T3829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.696305][ T3829] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   47.708047][ T3834] loop0: detected capacity change from 0 to 512
[   47.723739][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.772084][ T3841] loop1: detected capacity change from 0 to 512
[   47.778670][ T3833] tipc: Started in network mode
[   47.783659][ T3833] tipc: Node identity 0a5799045f0e, cluster identity 4711
[   47.790827][ T3833] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   47.850432][ T3830] tipc: Resetting bearer <eth:syzkaller0>
[   47.893405][ T3830] tipc: Disabling bearer <eth:syzkaller0>
[   47.908312][ T3848] loop4: detected capacity change from 0 to 512
[   47.908350][ T3849] loop1: detected capacity change from 0 to 512
[   47.957355][ T3848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   47.993264][ T3848] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   48.007597][ T3849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.045995][ T3849] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.097435][ T3846] pim6reg1: entered promiscuous mode
[   48.103032][ T3846] pim6reg1: entered allmulticast mode
[   48.304434][ T3872] loop4: detected capacity change from 0 to 512
[   48.387021][ T3872] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   48.455842][ T3881] tipc: Started in network mode
[   48.460970][ T3881] tipc: Node identity a2d8b7a35f64, cluster identity 4711
[   48.468327][ T3881] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   48.521860][ T3880] tipc: Resetting bearer <eth:syzkaller0>
[   48.609252][ T3880] tipc: Disabling bearer <eth:syzkaller0>
[   48.622955][ T3894] loop4: detected capacity change from 0 to 512
[   48.903814][ T3898] loop1: detected capacity change from 0 to 512
[   48.934551][ T3898] EXT4-fs (loop1): orphan cleanup on readonly fs
[   48.973826][ T3898] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.144: bad orphan inode 13
[   48.989715][ T3907] loop0: detected capacity change from 0 to 512
[   49.016686][ T3898] ext4_test_bit(bit=12, block=18) = 1
[   49.022194][ T3898] is_bad_inode(inode)=0
[   49.026476][ T3898] NEXT_ORPHAN(inode)=2130706432
[   49.031377][ T3898] max_ino=32
[   49.034597][ T3898] i_nlink=1
[   49.095902][   T29] kauditd_printk_skb: 31 callbacks suppressed
[   49.095904][ T3898] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[   49.095920][   T29] audit: type=1326 audit(1747042108.418:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0286c3e969 code=0x7ffc0000
[   49.112459][ T3898] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   49.134689][   T29] audit: type=1326 audit(1747042108.418:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0286c3e969 code=0x7ffc0000
[   49.134727][   T29] audit: type=1326 audit(1747042108.418:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0286c3e969 code=0x7ffc0000
[   49.189703][   T29] audit: type=1326 audit(1747042108.418:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0286c3e969 code=0x7ffc0000
[   49.212959][   T29] audit: type=1326 audit(1747042108.418:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0286c3e969 code=0x7ffc0000
[   49.212986][   T29] audit: type=1326 audit(1747042108.418:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0286c3e969 code=0x7ffc0000
[   49.213156][   T29] audit: type=1326 audit(1747042108.418:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0286c3e969 code=0x7ffc0000
[   49.213181][   T29] audit: type=1326 audit(1747042108.418:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f0286c3e969 code=0x7ffc0000
[   49.213204][   T29] audit: type=1326 audit(1747042108.418:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0286c3e969 code=0x7ffc0000
[   49.213272][   T29] audit: type=1326 audit(1747042108.418:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f0286c3e969 code=0x7ffc0000
[   49.214311][ T3913] loop2: detected capacity change from 0 to 512
[   49.316878][ T3913] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   49.354548][ T3924] loop3: detected capacity change from 0 to 512
[   49.398958][ T3924] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   49.566198][ T3935] loop3: detected capacity change from 0 to 512
[   49.585701][ T3935] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   49.594898][ T3935] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   49.608826][ T3935] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[   49.617954][ T3939] loop4: detected capacity change from 0 to 512
[   49.618328][ T3935] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   49.640005][ T3935] System zones: 0-2, 18-18, 34-34
[   49.647126][ T3935] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   49.663731][ T3939] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   49.676383][ T3935] EXT4-fs (loop3): 1 truncate cleaned up
[   49.728533][ T3947] loop1: detected capacity change from 0 to 512
[   49.768320][ T3947] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   49.819543][ T3952] loop1: detected capacity change from 0 to 512
[   49.863280][ T3954] loop3: detected capacity change from 0 to 512
[   49.875312][ T3956] loop4: detected capacity change from 0 to 512
[   49.905526][ T3954] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   49.923512][ T3956] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   50.023343][ T3963] loop3: detected capacity change from 0 to 512
[   50.038855][ T3965] loop4: detected capacity change from 0 to 512
[   50.076971][ T3965] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   50.245780][ T3971] pim6reg1: entered promiscuous mode
[   50.251307][ T3971] pim6reg1: entered allmulticast mode
[   50.506795][ T3978] loop0: detected capacity change from 0 to 512
[   50.532834][ T3980] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   50.540527][ T3979] tipc: Resetting bearer <eth:syzkaller0>
[   50.563302][ T3979] tipc: Disabling bearer <eth:syzkaller0>
[   50.810851][ T3990] loop1: detected capacity change from 0 to 512
[   50.852433][ T3995] loop1: detected capacity change from 0 to 512
[   50.914068][ T4001] loop2: detected capacity change from 0 to 512
[   50.935132][ T4001] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   50.991233][ T4011] loop0: detected capacity change from 0 to 512
[   51.005998][ T4013] loop1: detected capacity change from 0 to 512
[   51.020878][ T4011] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   51.044467][ T4013] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   51.200905][ T4023] loop2: detected capacity change from 0 to 512
[   51.325421][ T4031] loop2: detected capacity change from 0 to 512
[   51.385139][ T4031] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   51.407581][ T4034] loop1: detected capacity change from 0 to 512
[   51.608456][ T4043] loop4: detected capacity change from 0 to 512
[   51.620127][ T4043] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   51.758392][ T4048] loop3: detected capacity change from 0 to 512
[   51.796564][ T4048] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   51.850202][ T4061] loop4: detected capacity change from 0 to 512
[   51.865217][ T4062] loop2: detected capacity change from 0 to 512
[   51.873461][ T4062] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   51.873504][ T4061] EXT4-fs (loop4): orphan cleanup on readonly fs
[   51.874180][ T4061] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.207: bad orphan inode 13
[   51.883034][ T4062] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   51.914533][ T4065] loop1: detected capacity change from 0 to 512
[   51.915811][ T4062] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[   51.937407][ T4061] ext4_test_bit(bit=12, block=18) = 1
[   51.943729][ T4061] is_bad_inode(inode)=0
[   51.948047][ T4061] NEXT_ORPHAN(inode)=2130706432
[   51.953005][ T4061] max_ino=32
[   51.956234][ T4061] i_nlink=1
[   51.962392][ T4062] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   51.970929][ T4062] System zones: 0-2, 18-18, 34-34
[   51.993993][ T4061] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[   52.016253][ T4062] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   52.034185][ T4062] EXT4-fs (loop2): 1 truncate cleaned up
[   52.052083][ T4061] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   52.107332][ T4075] loop4: detected capacity change from 0 to 512
[   52.136377][ T4075] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   52.242132][ T4094] loop4: detected capacity change from 0 to 512
[   52.376118][ T4107] loop1: detected capacity change from 0 to 512
[   52.383847][ T4107] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   52.393130][ T4107] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   52.409063][ T4107] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[   52.418168][ T4107] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   52.426598][ T4107] System zones: 0-2, 18-18, 34-34
[   52.432373][ T4107] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   52.447605][ T4107] EXT4-fs (loop1): 1 truncate cleaned up
[   52.633201][ T4136] loop1: detected capacity change from 0 to 512
[   52.642581][ T4136] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   53.407849][ T4153] loop4: detected capacity change from 0 to 512
[   53.430258][ T4153] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   53.660801][ T4172] loop3: detected capacity change from 0 to 512
[   53.794904][ T4182] loop0: detected capacity change from 0 to 512
[   53.818518][ T4182] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   53.874529][ T4192] loop4: detected capacity change from 0 to 512
[   53.890531][ T4192] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   54.010963][ T4207] loop3: detected capacity change from 0 to 512
[   54.117107][ T4221] loop4: detected capacity change from 0 to 512
[   54.126983][ T4221] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   54.216716][ T4230] loop0: detected capacity change from 0 to 512
[   54.243897][ T4230] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   54.376574][ T4247] loop2: detected capacity change from 0 to 512
[   54.604459][ T4261] loop2: detected capacity change from 0 to 512
[   54.635293][ T4261] EXT4-fs (loop2): orphan cleanup on readonly fs
[   54.642923][   T29] kauditd_printk_skb: 12 callbacks suppressed
[   54.642937][   T29] audit: type=1400 audit(1747042113.958:227): avc:  denied  { ioctl } for  pid=4263 comm="syz.1.290" path="socket:[6644]" dev="sockfs" ino=6644 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   54.684148][ T4261] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.288: bad orphan inode 13
[   54.697173][ T4267] pim6reg1: entered promiscuous mode
[   54.703727][ T4267] pim6reg1: entered allmulticast mode
[   54.705478][ T4261] ext4_test_bit(bit=12, block=18) = 1
[   54.715200][ T4261] is_bad_inode(inode)=0
[   54.719593][ T4261] NEXT_ORPHAN(inode)=2130706432
[   54.724769][ T4261] max_ino=32
[   54.728176][ T4261] i_nlink=1
[   54.739170][   T29] audit: type=1326 audit(1747042114.058:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4260 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96771e969 code=0x7ffc0000
[   54.762884][   T29] audit: type=1326 audit(1747042114.058:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4260 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa96771e969 code=0x7ffc0000
[   54.764116][ T4261] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[   54.786186][   T29] audit: type=1326 audit(1747042114.058:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4260 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96771e969 code=0x7ffc0000
[   54.786296][   T29] audit: type=1326 audit(1747042114.058:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4260 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa96771e969 code=0x7ffc0000
[   54.802041][ T4261] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   54.819187][   T29] audit: type=1326 audit(1747042114.058:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4260 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96771e969 code=0x7ffc0000
[   54.874292][   T29] audit: type=1326 audit(1747042114.058:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4260 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fa96771e969 code=0x7ffc0000
[   54.897596][   T29] audit: type=1326 audit(1747042114.058:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4260 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96771e969 code=0x7ffc0000
[   54.920919][   T29] audit: type=1326 audit(1747042114.058:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4260 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fa96771e969 code=0x7ffc0000
[   54.944521][   T29] audit: type=1326 audit(1747042114.168:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4260 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96771e969 code=0x7ffc0000
[   54.990711][ T4272] netlink: 'syz.4.293': attribute type 3 has an invalid length.
[   55.039106][ T4279] loop2: detected capacity change from 0 to 512
[   55.189799][ T4291] pim6reg1: entered promiscuous mode
[   55.195332][ T4291] pim6reg1: entered allmulticast mode
[   56.203567][ T4304] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.229156][ T4303] tipc: Resetting bearer <eth:syzkaller0>
[   56.259073][ T4303] tipc: Disabling bearer <eth:syzkaller0>
[   56.296234][ T4315] loop1: detected capacity change from 0 to 2048
[   56.499231][ T4326] loop3: detected capacity change from 0 to 512
[   56.544837][ T4328] loop3: detected capacity change from 0 to 512
[   56.566497][ T4328] EXT4-fs (loop3): orphan cleanup on readonly fs
[   56.569405][ T4333] loop0: detected capacity change from 0 to 512
[   56.580833][ T4328] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.311: bad orphan inode 13
[   56.595108][ T4328] ext4_test_bit(bit=12, block=18) = 1
[   56.600554][ T4328] is_bad_inode(inode)=0
[   56.604876][ T4328] NEXT_ORPHAN(inode)=2130706432
[   56.609762][ T4328] max_ino=32
[   56.612289][ T4333] EXT4-fs (loop0): orphan cleanup on readonly fs
[   56.613029][ T4328] i_nlink=1
[   56.643465][ T4336] pim6reg1: entered promiscuous mode
[   56.648836][ T4336] pim6reg1: entered allmulticast mode
[   56.674062][ T4333] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.314: bad orphan inode 13
[   56.684939][ T4333] ext4_test_bit(bit=12, block=18) = 1
[   56.690523][ T4333] is_bad_inode(inode)=0
[   56.694814][ T4333] NEXT_ORPHAN(inode)=2130706432
[   56.699686][ T4333] max_ino=32
[   56.702937][ T4333] i_nlink=1
[   56.732276][ T4328] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[   56.744190][ T4333] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[   56.763322][ T4328] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   56.771988][ T4333] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   57.975837][ T4359] loop0: detected capacity change from 0 to 512
[   58.169000][ T4373] loop1: detected capacity change from 0 to 512
[   58.197258][ T4373] EXT4-fs (loop1): orphan cleanup on readonly fs
[   58.222766][ T4373] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.328: bad orphan inode 13
[   58.285185][ T4373] ext4_test_bit(bit=12, block=18) = 1
[   58.290874][ T4373] is_bad_inode(inode)=0
[   58.295443][ T4373] NEXT_ORPHAN(inode)=2130706432
[   58.300472][ T4373] max_ino=32
[   58.303955][ T4373] i_nlink=1
[   58.357709][ T4380] loop4: detected capacity change from 0 to 1024
[   58.414043][ T4380] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.534345][ T4394] loop1: detected capacity change from 0 to 512
[   58.722871][ T4404] loop1: detected capacity change from 0 to 512
[   58.743775][ T4404] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.773715][ T4417] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   58.802517][ T4417] loop0: detected capacity change from 0 to 512
[   58.837922][ T4417] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.342: bg 0: block 248: padding at end of block bitmap is not set
[   58.854193][ T4417] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.342: Failed to acquire dquot type 1
[   58.868462][ T4425] loop4: detected capacity change from 0 to 512
[   58.890278][ T4417] EXT4-fs (loop0): 1 truncate cleaned up
[   58.906910][ T4417] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.944184][ T4404] syz.1.338 (4404) used greatest stack depth: 10840 bytes left
[   58.966391][ T4417] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.342: Failed to acquire dquot type 1
[   59.024239][ T4417] syz.0.342 (4417) used greatest stack depth: 9360 bytes left
[   59.060112][ T3442] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1
[   59.204429][ T4454] netlink: 'syz.2.356': attribute type 4 has an invalid length.
[   59.212450][ T4454] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.356'.
[   59.228768][ T4457] loop1: detected capacity change from 0 to 512
[   59.406388][ T4465] openvswitch: netlink: Message has 6 unknown bytes.
[   59.652111][   T29] kauditd_printk_skb: 73 callbacks suppressed
[   59.652130][   T29] audit: type=1400 audit(1747042118.978:305): avc:  denied  { create } for  pid=4473 comm="syz.3.364" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   59.684951][ T4474] netlink: 88 bytes leftover after parsing attributes in process `syz.3.364'.
[   59.732450][ T4474] loop3: detected capacity change from 0 to 2048
[   59.763819][ T4474] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.804254][ T4478] pim6reg1: entered promiscuous mode
[   59.809694][ T4478] pim6reg1: entered allmulticast mode
[   60.029117][ T4489] FAULT_INJECTION: forcing a failure.
[   60.029117][ T4489] name failslab, interval 1, probability 0, space 0, times 1
[   60.042625][ T4489] CPU: 1 UID: 0 PID: 4489 Comm: syz.2.368 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   60.042672][ T4489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   60.042687][ T4489] Call Trace:
[   60.042700][ T4489]  <TASK>
[   60.042742][ T4489]  __dump_stack+0x1d/0x30
[   60.042769][ T4489]  dump_stack_lvl+0xe8/0x140
[   60.042792][ T4489]  dump_stack+0x15/0x1b
[   60.042934][ T4489]  should_fail_ex+0x265/0x280
[   60.042972][ T4489]  ? allocate_file_region_entries+0xd2/0x310
[   60.043004][ T4489]  should_failslab+0x8c/0xb0
[   60.043031][ T4489]  __kmalloc_cache_noprof+0x4c/0x320
[   60.043066][ T4489]  allocate_file_region_entries+0xd2/0x310
[   60.043110][ T4489]  region_chg+0x232/0x2d0
[   60.043149][ T4489]  alloc_hugetlb_folio+0x1fc/0xf90
[   60.043180][ T4489]  ? huge_pte_alloc+0x235/0x380
[   60.043252][ T4489]  hugetlb_fault+0xe17/0x1a00
[   60.043292][ T4489]  handle_mm_fault+0x19a6/0x2ae0
[   60.043323][ T4489]  ? __rcu_read_unlock+0x4f/0x70
[   60.043349][ T4489]  ? mt_find+0x200/0x320
[   60.043377][ T4489]  ? try_grab_folio+0x75/0x160
[   60.043484][ T4489]  ? down_read+0x77/0xe0
[   60.043557][ T4489]  __get_user_pages+0xde2/0x1d20
[   60.043688][ T4489]  __mm_populate+0x243/0x3a0
[   60.043721][ T4489]  do_mlock+0x47f/0x520
[   60.043746][ T4489]  ? fput+0x8f/0xc0
[   60.043766][ T4489]  ? ksys_write+0x16e/0x1a0
[   60.043796][ T4489]  __x64_sys_mlock+0x36/0x50
[   60.043813][ T4489]  x64_sys_call+0x28f4/0x2fb0
[   60.043850][ T4489]  do_syscall_64+0xd0/0x1a0
[   60.043877][ T4489]  ? clear_bhb_loop+0x25/0x80
[   60.043904][ T4489]  ? clear_bhb_loop+0x25/0x80
[   60.043958][ T4489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.043979][ T4489] RIP: 0033:0x7fa96771e969
[   60.044001][ T4489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.044022][ T4489] RSP: 002b:00007fa965d87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[   60.044044][ T4489] RAX: ffffffffffffffda RBX: 00007fa967945fa0 RCX: 00007fa96771e969
[   60.044056][ T4489] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 00002000007d8000
[   60.044069][ T4489] RBP: 00007fa965d87090 R08: 0000000000000000 R09: 0000000000000000
[   60.044241][ T4489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   60.044255][ T4489] R13: 0000000000000000 R14: 00007fa967945fa0 R15: 00007ffcd24b5288
[   60.044277][ T4489]  </TASK>
[   60.358282][ T4496] loop0: detected capacity change from 0 to 512
[   60.367233][ T4495] loop2: detected capacity change from 0 to 512
[   60.457039][ T4500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.373'.
[   60.498433][ T4500] hsr_slave_0 (unregistering): left promiscuous mode
[   60.595985][   T29] audit: type=1326 audit(1747042119.908:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96771e969 code=0x7ffc0000
[   60.619375][   T29] audit: type=1326 audit(1747042119.908:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96771e969 code=0x7ffc0000
[   60.642773][   T29] audit: type=1326 audit(1747042119.908:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fa96771e969 code=0x7ffc0000
[   60.666110][   T29] audit: type=1326 audit(1747042119.908:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96771e969 code=0x7ffc0000
[   60.689522][   T29] audit: type=1326 audit(1747042119.908:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96771e969 code=0x7ffc0000
[   60.712791][   T29] audit: type=1326 audit(1747042119.908:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fa96771e969 code=0x7ffc0000
[   60.736082][   T29] audit: type=1400 audit(1747042119.908:312): avc:  denied  { watch } for  pid=4497 comm="syz.2.373" path="/73" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   60.757828][   T29] audit: type=1326 audit(1747042119.908:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96771e969 code=0x7ffc0000
[   60.781087][   T29] audit: type=1326 audit(1747042119.908:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96771e969 code=0x7ffc0000
[   61.156025][ T4474] syz.3.364 (4474) used greatest stack depth: 7000 bytes left
[   61.223595][ T4513] pim6reg1: entered promiscuous mode
[   61.228995][ T4513] pim6reg1: entered allmulticast mode
[   61.325918][ T4521] rdma_op ffff88811d1af180 conn xmit_rdma 0000000000000000
[   61.407709][ T4521] loop3: detected capacity change from 0 to 512
[   61.419509][ T4521] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   61.431074][ T4521] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   61.444594][ T4521] EXT4-fs (loop3): 1 truncate cleaned up
[   61.473989][ T4534] loop3: detected capacity change from 0 to 512
[   61.513208][ T4536] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.526339][ T4536] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   61.560267][ T4539] loop3: detected capacity change from 0 to 2048
[   61.766131][ T4549] loop3: detected capacity change from 0 to 164
[   61.773705][ T4549] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   61.783232][ T4549] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   61.791779][ T4549] Symlink component flag not implemented
[   61.797541][ T4549] Symlink component flag not implemented
[   61.803845][ T4549] Symlink component flag not implemented (7)
[   61.809944][ T4549] Symlink component flag not implemented (116)
[   61.817499][ T4549] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4549 comm=syz.3.387
[   61.883932][ T4551] loop0: detected capacity change from 0 to 512
[   61.946175][ T4556] pim6reg1: entered promiscuous mode
[   61.951726][ T4556] pim6reg1: entered allmulticast mode
[   62.076462][ T4562] pim6reg1: entered promiscuous mode
[   62.081917][ T4562] pim6reg1: entered allmulticast mode
[   62.119260][ T4564] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.127714][ T4563] tipc: Disabling bearer <eth:syzkaller0>
[   62.153999][ T4566] loop3: detected capacity change from 0 to 512
[   62.200555][ T4570] netlink: 96 bytes leftover after parsing attributes in process `syz.3.396'.
[   62.238761][ T4575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.261509][ T4575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.262660][ T4576] loop4: detected capacity change from 0 to 512
[   62.283110][ T4576] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   62.299999][ T4575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.318432][ T4575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.330928][ T4575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.340409][ T4575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.351180][ T4575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.360437][ T4575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.370866][ T4584] pim6reg1: entered promiscuous mode
[   62.376372][ T4584] pim6reg1: entered allmulticast mode
[   62.462538][ T4589] loop1: detected capacity change from 0 to 512
[   62.498153][ T4593] pim6reg1: entered promiscuous mode
[   62.503649][ T4593] pim6reg1: entered allmulticast mode
[   62.530202][ T4595] loop0: detected capacity change from 0 to 512
[   62.579651][ T4598] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.609759][ T4597] tipc: Disabling bearer <eth:syzkaller0>
[   62.670929][ T4605] pim6reg1: entered promiscuous mode
[   62.676504][ T4605] pim6reg1: entered allmulticast mode
[   62.977468][ T4623] loop2: detected capacity change from 0 to 512
[   63.046627][ T4630] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.055473][ T4629] tipc: Disabling bearer <eth:syzkaller0>
[   63.088700][ T3320] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /85/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   63.110654][ T3320] EXT4-fs (loop4): Remounting filesystem read-only
[   63.160925][ T4635] loop0: detected capacity change from 0 to 512
[   63.184765][ T4635] EXT4-fs (loop0): too many log groups per flexible block group
[   63.192561][ T4635] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   63.199553][ T4635] EXT4-fs (loop0): mount failed
[   63.304020][ T4651] loop4: detected capacity change from 0 to 512
[   63.675868][ T4666] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.696663][ T4665] tipc: Disabling bearer <eth:syzkaller0>
[   63.894808][ T4675] FAULT_INJECTION: forcing a failure.
[   63.894808][ T4675] name failslab, interval 1, probability 0, space 0, times 0
[   63.907582][ T4675] CPU: 1 UID: 0 PID: 4675 Comm: syz.3.435 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   63.907617][ T4675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   63.907632][ T4675] Call Trace:
[   63.907649][ T4675]  <TASK>
[   63.907658][ T4675]  __dump_stack+0x1d/0x30
[   63.907735][ T4675]  dump_stack_lvl+0xe8/0x140
[   63.907759][ T4675]  dump_stack+0x15/0x1b
[   63.907779][ T4675]  should_fail_ex+0x265/0x280
[   63.907814][ T4675]  should_failslab+0x8c/0xb0
[   63.907906][ T4675]  kmem_cache_alloc_lru_noprof+0x55/0x310
[   63.907939][ T4675]  ? __d_alloc+0x3d/0x350
[   63.908048][ T4675]  __d_alloc+0x3d/0x350
[   63.908135][ T4675]  d_alloc+0x2e/0x100
[   63.908176][ T4675]  lookup_one_qstr_excl_raw+0x95/0x1b0
[   63.908224][ T4675]  do_renameat2+0x3e0/0xab0
[   63.908304][ T4675]  __x64_sys_rename+0x58/0x70
[   63.908337][ T4675]  x64_sys_call+0x2aee/0x2fb0
[   63.908359][ T4675]  do_syscall_64+0xd0/0x1a0
[   63.908381][ T4675]  ? clear_bhb_loop+0x25/0x80
[   63.908416][ T4675]  ? clear_bhb_loop+0x25/0x80
[   63.908443][ T4675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.908465][ T4675] RIP: 0033:0x7f868ebfe969
[   63.908482][ T4675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   63.908503][ T4675] RSP: 002b:00007f868d267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[   63.908597][ T4675] RAX: ffffffffffffffda RBX: 00007f868ee25fa0 RCX: 00007f868ebfe969
[   63.908610][ T4675] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 00002000000003c0
[   63.908625][ T4675] RBP: 00007f868d267090 R08: 0000000000000000 R09: 0000000000000000
[   63.908639][ T4675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   63.908711][ T4675] R13: 0000000000000000 R14: 00007f868ee25fa0 R15: 00007fff599a3f58
[   63.908733][ T4675]  </TASK>
[   64.250404][ T4685] loop1: detected capacity change from 0 to 512
[   64.358318][ T4695] loop3: detected capacity change from 0 to 1024
[   64.378090][ T4695] EXT4-fs: Ignoring removed orlov option
[   64.489837][ T4703] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.505742][ T4708] pim6reg1: entered promiscuous mode
[   64.511092][ T4708] pim6reg1: entered allmulticast mode
[   64.524191][ T4701] tipc: Disabling bearer <eth:syzkaller0>
[   64.525512][ T4711] loop4: detected capacity change from 0 to 128
[   64.548174][ T4712] Zero length message leads to an empty skb
[   64.572861][ T4711] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.628636][ T4719] loop2: detected capacity change from 0 to 512
[   64.641393][ T4720] netlink: 36 bytes leftover after parsing attributes in process `syz.3.443'.
[   64.655498][ T4720] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.443: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   64.672323][   T29] kauditd_printk_skb: 95 callbacks suppressed
[   64.672338][   T29] audit: type=1326 audit(1747042123.978:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4694 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f868ebfe969 code=0x7ffc0000
[   64.701973][   T29] audit: type=1326 audit(1747042123.978:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4694 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868ebfe969 code=0x7ffc0000
[   64.725321][   T29] audit: type=1326 audit(1747042123.978:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4694 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f868ebfe969 code=0x7ffc0000
[   64.748525][   T29] audit: type=1326 audit(1747042123.978:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4694 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868ebfe969 code=0x7ffc0000
[   64.771980][   T29] audit: type=1326 audit(1747042123.978:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4694 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f868ebfe969 code=0x7ffc0000
[   64.797933][   T29] audit: type=1326 audit(1747042124.118:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4694 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868ebfe969 code=0x7ffc0000
[   64.821276][   T29] audit: type=1326 audit(1747042124.118:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4694 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868ebfe969 code=0x7ffc0000
[   65.255454][ T4733] pim6reg1: entered promiscuous mode
[   65.261077][ T4733] pim6reg1: entered allmulticast mode
[   65.330386][ T4736] loop3: detected capacity change from 0 to 2048
[   65.348059][ T4736] EXT4-fs (loop3): failed to initialize system zone (-117)
[   65.355494][ T4736] EXT4-fs (loop3): mount failed
[   65.381051][ T4736] loop3: detected capacity change from 0 to 164
[   65.477101][ T4749] loop1: detected capacity change from 0 to 512
[   65.501134][   T29] audit: type=1326 audit(1747042124.818:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868ebfe969 code=0x7ffc0000
[   65.524855][   T29] audit: type=1326 audit(1747042124.818:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868ebfe969 code=0x7ffc0000
[   65.548304][   T29] audit: type=1326 audit(1747042124.818:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f868ebfe969 code=0x7ffc0000
[   65.572575][ T4752] FAULT_INJECTION: forcing a failure.
[   65.572575][ T4752] name failslab, interval 1, probability 0, space 0, times 0
[   65.585284][ T4752] CPU: 1 UID: 0 PID: 4752 Comm: syz.3.462 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   65.585390][ T4752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   65.585405][ T4752] Call Trace:
[   65.585413][ T4752]  <TASK>
[   65.585421][ T4752]  __dump_stack+0x1d/0x30
[   65.585443][ T4752]  dump_stack_lvl+0xe8/0x140
[   65.585464][ T4752]  dump_stack+0x15/0x1b
[   65.585489][ T4752]  should_fail_ex+0x265/0x280
[   65.585588][ T4752]  should_failslab+0x8c/0xb0
[   65.585623][ T4752]  kmem_cache_alloc_node_noprof+0x57/0x320
[   65.585732][ T4752]  ? __alloc_skb+0x101/0x320
[   65.585773][ T4752]  __alloc_skb+0x101/0x320
[   65.585811][ T4752]  ? audit_log_start+0x365/0x6c0
[   65.585869][ T4752]  audit_log_start+0x380/0x6c0
[   65.585899][ T4752]  audit_seccomp+0x48/0x100
[   65.585929][ T4752]  ? __seccomp_filter+0x68c/0x10d0
[   65.585971][ T4752]  __seccomp_filter+0x69d/0x10d0
[   65.585997][ T4752]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   65.586040][ T4752]  ? vfs_write+0x75e/0x8d0
[   65.586063][ T4752]  ? __rcu_read_unlock+0x4f/0x70
[   65.586085][ T4752]  ? __fget_files+0x184/0x1c0
[   65.586266][ T4752]  __secure_computing+0x82/0x150
[   65.586290][ T4752]  syscall_trace_enter+0xcf/0x1e0
[   65.586312][ T4752]  do_syscall_64+0xaa/0x1a0
[   65.586410][ T4752]  ? clear_bhb_loop+0x25/0x80
[   65.586432][ T4752]  ? clear_bhb_loop+0x25/0x80
[   65.586457][ T4752]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.586520][ T4752] RIP: 0033:0x7f868ebfe969
[   65.586538][ T4752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   65.586560][ T4752] RSP: 002b:00007f868d267038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[   65.586582][ T4752] RAX: ffffffffffffffda RBX: 00007f868ee25fa0 RCX: 00007f868ebfe969
[   65.586597][ T4752] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000
[   65.586612][ T4752] RBP: 00007f868d267090 R08: 0000000000000000 R09: 0000000000000000
[   65.586651][ T4752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   65.586666][ T4752] R13: 0000000000000000 R14: 00007f868ee25fa0 R15: 00007fff599a3f58
[   65.586738][ T4752]  </TASK>
[   65.589250][ T4749] EXT4-fs (loop1): 1 orphan inode deleted
[   65.705599][ T4763] loop3: detected capacity change from 0 to 512
[   65.710670][ T4749] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.715814][   T31] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1
[   65.952518][ T4777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4777 comm=syz.3.466
[   66.146802][ T4795] loop1: detected capacity change from 0 to 512
[   66.176683][ T4790] loop0: detected capacity change from 0 to 512
[   66.187334][ T4790] ext4: Bad value for 'commit'
[   66.404712][ T4809] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   66.797883][ T4827] loop0: detected capacity change from 0 to 512
[   66.828333][ T4829] loop1: detected capacity change from 0 to 512
[   66.856137][ T4829] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   66.867004][ T4829] EXT4-fs (loop1): 1 truncate cleaned up
[   67.195555][ T4847] FAULT_INJECTION: forcing a failure.
[   67.195555][ T4847] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   67.209053][ T4847] CPU: 0 UID: 0 PID: 4847 Comm: syz.1.489 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   67.209087][ T4847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   67.209102][ T4847] Call Trace:
[   67.209111][ T4847]  <TASK>
[   67.209120][ T4847]  __dump_stack+0x1d/0x30
[   67.209199][ T4847]  dump_stack_lvl+0xe8/0x140
[   67.209223][ T4847]  dump_stack+0x15/0x1b
[   67.209240][ T4847]  should_fail_ex+0x265/0x280
[   67.209326][ T4847]  should_fail_alloc_page+0xf2/0x100
[   67.209425][ T4847]  __alloc_frozen_pages_noprof+0xff/0x360
[   67.209482][ T4847]  alloc_pages_mpol+0xb3/0x250
[   67.209510][ T4847]  folio_alloc_noprof+0x97/0x150
[   67.209537][ T4847]  filemap_alloc_folio_noprof+0x66/0x210
[   67.209564][ T4847]  __filemap_get_folio+0x28f/0x650
[   67.209613][ T4847]  ? ext4_try_to_write_inline_data+0x54/0x90
[   67.209639][ T4847]  ext4_write_begin+0x1b4/0xc30
[   67.209682][ T4847]  ? __ext4_mark_inode_dirty+0x2fe/0x3f0
[   67.209782][ T4847]  ? inode_to_bdi+0x47/0xa0
[   67.209803][ T4847]  ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0
[   67.209846][ T4847]  generic_perform_write+0x181/0x490
[   67.209931][ T4847]  ? file_modified_flags+0x30f/0x350
[   67.210042][ T4847]  ext4_buffered_write_iter+0x1ee/0x3c0
[   67.210080][ T4847]  ext4_file_write_iter+0x383/0xf00
[   67.210143][ T4847]  ? _parse_integer_limit+0x170/0x190
[   67.210193][ T4847]  do_iter_readv_writev+0x41e/0x4c0
[   67.210309][ T4847]  vfs_writev+0x2c9/0x870
[   67.210411][ T4847]  __se_sys_pwritev2+0xfc/0x1c0
[   67.210497][ T4847]  __x64_sys_pwritev2+0x67/0x80
[   67.210558][ T4847]  x64_sys_call+0x1cea/0x2fb0
[   67.210586][ T4847]  do_syscall_64+0xd0/0x1a0
[   67.210616][ T4847]  ? clear_bhb_loop+0x25/0x80
[   67.210741][ T4847]  ? clear_bhb_loop+0x25/0x80
[   67.210777][ T4847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.210825][ T4847] RIP: 0033:0x7f0286c3e969
[   67.210841][ T4847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   67.210860][ T4847] RSP: 002b:00007f0285286038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[   67.210881][ T4847] RAX: ffffffffffffffda RBX: 00007f0286e66080 RCX: 00007f0286c3e969
[   67.210897][ T4847] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004
[   67.210912][ T4847] RBP: 00007f0285286090 R08: 0000000000000000 R09: 0000000000000003
[   67.210927][ T4847] R10: 0000000000007800 R11: 0000000000000246 R12: 0000000000000001
[   67.210942][ T4847] R13: 0000000000000000 R14: 00007f0286e66080 R15: 00007ffc496feea8
[   67.210998][ T4847]  </TASK>
[   67.566202][ T4859] loop3: detected capacity change from 0 to 512
[   67.588993][ T4857] ip6gretap1: entered promiscuous mode
[   67.594668][ T4857] ip6gretap1: entered allmulticast mode
[   67.625567][ T4861] pim6reg1: entered promiscuous mode
[   67.630913][ T4861] pim6reg1: entered allmulticast mode
[   67.674931][ T4863] pim6reg1: entered promiscuous mode
[   67.680364][ T4863] pim6reg1: entered allmulticast mode
[   67.719529][ T4865] vhci_hcd: invalid port number 15
[   67.881195][ T4874] loop3: detected capacity change from 0 to 8192
[   67.930790][ T4881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'.
[   68.090743][ T4890] loop0: detected capacity change from 0 to 512
[   68.138950][ T4888] loop3: detected capacity change from 0 to 1024
[   68.214905][ T4888] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[   68.236947][ T4888] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   68.249101][ T4888] EXT4-fs (loop3): invalid journal inode
[   68.256533][ T4888] EXT4-fs (loop3): can't get journal size
[   68.262869][ T4888] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 17104912: comm syz.3.513: lblock 2 mapped to illegal pblock 17104912 (length 1)
[   68.279860][ T4888] EXT4-fs (loop3): failed to initialize system zone (-117)
[   68.287330][ T4888] EXT4-fs (loop3): mount failed
[   68.329454][ T4896] pim6reg1: entered promiscuous mode
[   68.335137][ T4896] pim6reg1: entered allmulticast mode
[   68.416433][ T4900] pim6reg1: entered promiscuous mode
[   68.421947][ T4900] pim6reg1: entered allmulticast mode
[   68.755797][ T4918] loop3: detected capacity change from 0 to 512
[   68.816067][ T4922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=4922 comm=syz.3.526
[   68.856928][ T4924] loop3: detected capacity change from 0 to 1024
[   68.865099][ T4924] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   68.876513][ T4924] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   68.890036][ T4924] JBD2: no valid journal superblock found
[   68.896234][ T4924] EXT4-fs (loop3): Could not load journal inode
[   68.967902][ T4930] capability: warning: `syz.2.530' uses deprecated v2 capabilities in a way that may be insecure
[   69.055477][ T4936] pim6reg1: entered promiscuous mode
[   69.060878][ T4936] pim6reg1: entered allmulticast mode
[   69.243471][ T4945] loop1: detected capacity change from 0 to 512
[   69.269471][ T4950] FAULT_INJECTION: forcing a failure.
[   69.269471][ T4950] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   69.283298][ T4950] CPU: 0 UID: 0 PID: 4950 Comm: syz.4.537 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   69.283366][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   69.283382][ T4950] Call Trace:
[   69.283390][ T4950]  <TASK>
[   69.283399][ T4950]  __dump_stack+0x1d/0x30
[   69.283423][ T4950]  dump_stack_lvl+0xe8/0x140
[   69.283530][ T4950]  dump_stack+0x15/0x1b
[   69.283546][ T4950]  should_fail_ex+0x265/0x280
[   69.283577][ T4950]  should_fail+0xb/0x20
[   69.283609][ T4950]  should_fail_usercopy+0x1a/0x20
[   69.283632][ T4950]  _copy_from_user+0x1c/0xb0
[   69.283733][ T4950]  __sys_bind+0x106/0x2a0
[   69.283785][ T4950]  __x64_sys_bind+0x3f/0x50
[   69.283876][ T4950]  x64_sys_call+0x2086/0x2fb0
[   69.283903][ T4950]  do_syscall_64+0xd0/0x1a0
[   69.283932][ T4950]  ? clear_bhb_loop+0x25/0x80
[   69.283956][ T4950]  ? clear_bhb_loop+0x25/0x80
[   69.283984][ T4950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.284008][ T4950] RIP: 0033:0x7f25d8c7e969
[   69.284026][ T4950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.284044][ T4950] RSP: 002b:00007f25d72e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[   69.284061][ T4950] RAX: ffffffffffffffda RBX: 00007f25d8ea5fa0 RCX: 00007f25d8c7e969
[   69.284131][ T4950] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003
[   69.284146][ T4950] RBP: 00007f25d72e7090 R08: 0000000000000000 R09: 0000000000000000
[   69.284161][ T4950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   69.284173][ T4950] R13: 0000000000000000 R14: 00007f25d8ea5fa0 R15: 00007ffd5503fad8
[   69.284196][ T4950]  </TASK>
[   69.521933][ T4956] loop1: detected capacity change from 0 to 128
[   69.550454][ T4956] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8)
[   69.559196][ T4956] FAT-fs (loop1): Filesystem has been set read-only
[   69.568020][ T4956] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522)
[   69.650034][ T4964] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   69.673287][ T4964] loop1: detected capacity change from 0 to 512
[   69.680419][ T4964] EXT4-fs (loop1): blocks per group (255) and clusters per group (8192) inconsistent
[   69.693623][ T4964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'.
[   69.704118][ T4964] netlink: 'syz.1.544': attribute type 1 has an invalid length.
[   69.712080][ T4964] netlink: 'syz.1.544': attribute type 2 has an invalid length.
[   69.719917][ T4964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.544'.
[   69.851850][ T4973] pim6reg1: entered promiscuous mode
[   69.857276][ T4973] pim6reg1: entered allmulticast mode
[   69.956093][ T4975] loop3: detected capacity change from 0 to 512
[   70.027566][ T4983] loop3: detected capacity change from 0 to 128
[   70.037537][ T4983] EXT4-fs mount: 82 callbacks suppressed
[   70.037556][ T4983] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   70.056951][ T4983] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.072496][ T4983] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.124471][ T4983] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.184886][ T4983] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.200539][ T4989] FAULT_INJECTION: forcing a failure.
[   70.200539][ T4989] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   70.214540][ T4989] CPU: 0 UID: 0 PID: 4989 Comm: syz.4.554 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   70.214632][ T4989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   70.214644][ T4989] Call Trace:
[   70.214650][ T4989]  <TASK>
[   70.214659][ T4989]  __dump_stack+0x1d/0x30
[   70.214686][ T4989]  dump_stack_lvl+0xe8/0x140
[   70.214741][ T4989]  dump_stack+0x15/0x1b
[   70.214761][ T4989]  should_fail_ex+0x265/0x280
[   70.214821][ T4989]  should_fail+0xb/0x20
[   70.214857][ T4989]  should_fail_usercopy+0x1a/0x20
[   70.214881][ T4989]  copy_fpstate_to_sigframe+0x62b/0x7d0
[   70.214921][ T4989]  ? copy_fpstate_to_sigframe+0xe5/0x7d0
[   70.215033][ T4989]  get_sigframe+0x34d/0x490
[   70.215071][ T4989]  ? get_signal+0xdc8/0xf70
[   70.215144][ T4989]  x64_setup_rt_frame+0xa8/0x580
[   70.215241][ T4989]  arch_do_signal_or_restart+0x26e/0x480
[   70.215283][ T4989]  syscall_exit_to_user_mode+0x68/0xb0
[   70.215331][ T4989]  do_syscall_64+0xdd/0x1a0
[   70.215385][ T4989]  ? clear_bhb_loop+0x25/0x80
[   70.215404][ T4989]  ? clear_bhb_loop+0x25/0x80
[   70.215486][ T4989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.215504][ T4989] RIP: 0033:0x7f25d8c7e967
[   70.215526][ T4989] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[   70.215574][ T4989] RSP: 002b:00007f25d72e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   70.215595][ T4989] RAX: 0000000000000001 RBX: 00007f25d8ea5fa0 RCX: 00007f25d8c7e969
[   70.215606][ T4989] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000003
[   70.215616][ T4989] RBP: 00007f25d72e7090 R08: 0000000000000000 R09: 0000000000000000
[   70.215626][ T4989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   70.215641][ T4989] R13: 0000000000000000 R14: 00007f25d8ea5fa0 R15: 00007ffd5503fad8
[   70.215657][ T4989]  </TASK>
[   70.443181][ T4983] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.466960][   T29] kauditd_printk_skb: 61 callbacks suppressed
[   70.466978][   T29] audit: type=1326 audit(1747042129.788:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d8c7e969 code=0x7ffc0000
[   70.521230][   T29] audit: type=1326 audit(1747042129.788:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25d8c7e969 code=0x7ffc0000
[   70.545409][   T29] audit: type=1326 audit(1747042129.788:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d8c7e969 code=0x7ffc0000
[   70.568763][   T29] audit: type=1326 audit(1747042129.788:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25d8c7e969 code=0x7ffc0000
[   70.592146][   T29] audit: type=1326 audit(1747042129.788:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d8c7e969 code=0x7ffc0000
[   70.615569][   T29] audit: type=1326 audit(1747042129.788:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25d8c7e969 code=0x7ffc0000
[   70.639244][   T29] audit: type=1326 audit(1747042129.788:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d8c7e969 code=0x7ffc0000
[   70.662505][   T29] audit: type=1326 audit(1747042129.788:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25d8c7e969 code=0x7ffc0000
[   70.685844][   T29] audit: type=1326 audit(1747042129.788:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d8c7e969 code=0x7ffc0000
[   70.709187][   T29] audit: type=1326 audit(1747042129.788:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f25d8c7e969 code=0x7ffc0000
[   70.745226][ T4983] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.760645][ T4983] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.775298][ T4983] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.787940][ T4983] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.840002][ T5003] loop1: detected capacity change from 0 to 512
[   70.847014][ T3324] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   70.855525][ T5008] pim6reg1: entered promiscuous mode
[   70.862228][ T5008] pim6reg1: entered allmulticast mode
[   70.920395][ T5012] pim6reg1: entered promiscuous mode
[   70.925869][ T5012] pim6reg1: entered allmulticast mode
[   70.940559][ T5016] FAULT_INJECTION: forcing a failure.
[   70.940559][ T5016] name failslab, interval 1, probability 0, space 0, times 0
[   70.953289][ T5016] CPU: 1 UID: 0 PID: 5016 Comm: syz.1.566 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   70.953338][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   70.953354][ T5016] Call Trace:
[   70.953367][ T5016]  <TASK>
[   70.953377][ T5016]  __dump_stack+0x1d/0x30
[   70.953403][ T5016]  dump_stack_lvl+0xe8/0x140
[   70.953427][ T5016]  dump_stack+0x15/0x1b
[   70.953447][ T5016]  should_fail_ex+0x265/0x280
[   70.953487][ T5016]  should_failslab+0x8c/0xb0
[   70.953523][ T5016]  kmem_cache_alloc_noprof+0x50/0x310
[   70.953565][ T5016]  ? mas_alloc_nodes+0x265/0x520
[   70.953596][ T5016]  mas_alloc_nodes+0x265/0x520
[   70.953627][ T5016]  mas_preallocate+0x456/0x680
[   70.953659][ T5016]  vma_link+0x8b/0x220
[   70.953699][ T5016]  insert_vm_struct+0x177/0x210
[   70.953735][ T5016]  alloc_bprm+0x42c/0x660
[   70.953765][ T5016]  do_execveat_common+0x12e/0x750
[   70.953796][ T5016]  ? getname_flags+0x154/0x3b0
[   70.953833][ T5016]  __x64_sys_execveat+0x73/0x90
[   70.953864][ T5016]  x64_sys_call+0x2dae/0x2fb0
[   70.953890][ T5016]  do_syscall_64+0xd0/0x1a0
[   70.953916][ T5016]  ? clear_bhb_loop+0x25/0x80
[   70.953942][ T5016]  ? clear_bhb_loop+0x25/0x80
[   70.953968][ T5016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.953995][ T5016] RIP: 0033:0x7f0286c3e969
[   70.954012][ T5016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   70.954033][ T5016] RSP: 002b:00007f02852a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[   70.954055][ T5016] RAX: ffffffffffffffda RBX: 00007f0286e65fa0 RCX: 00007f0286c3e969
[   70.954070][ T5016] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[   70.954084][ T5016] RBP: 00007f02852a7090 R08: 0000000000001000 R09: 0000000000000000
[   70.954099][ T5016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   70.954113][ T5016] R13: 0000000000000000 R14: 00007f0286e65fa0 R15: 00007ffc496feea8
[   70.954136][ T5016]  </TASK>
[   71.370874][ T5034] loop2: detected capacity change from 0 to 8192
[   71.384752][ T5034] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   72.475414][ T5052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.577'.
[   72.586471][ T5061] pim6reg1: entered promiscuous mode
[   72.592021][ T5061] pim6reg1: entered allmulticast mode
[   72.810762][ T5071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'.
[   72.819872][ T5071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'.
[   72.989758][ T5076] loop0: detected capacity change from 0 to 128
[   73.005504][ T5076] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   73.035487][ T5076] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   73.132075][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   73.136292][ T5085] loop1: detected capacity change from 0 to 164
[   73.663975][ T5099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   73.667574][ T5095] SELinux: failed to load policy
[   73.671356][ T5099] IPv6: NLM_F_CREATE should be set when creating new route
[   73.671370][ T5099] IPv6: NLM_F_CREATE should be set when creating new route
[   73.696098][ T5099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.593'.
[   73.720833][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.728460][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.735917][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.743784][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.751226][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.758902][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.766447][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.773878][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.781275][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.788823][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.796338][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.803905][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.811379][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.818972][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.828144][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.835757][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.843457][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.850985][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.858576][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.866402][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.874107][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.881826][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.889462][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.896941][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.904367][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.911789][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.919207][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.926743][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.939448][   T23] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   74.060897][ T5111] fido_id[5111]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   74.274365][ T5119] team_slave_0: entered promiscuous mode
[   74.280075][ T5119] team_slave_0: entered allmulticast mode
[   74.315071][ T5121] loop2: detected capacity change from 0 to 164
[   74.323555][ T5121] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   74.336149][ T5121] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   74.344958][ T5121] Symlink component flag not implemented
[   74.350663][ T5121] Symlink component flag not implemented
[   74.356558][ T5121] Symlink component flag not implemented (7)
[   74.362803][ T5121] Symlink component flag not implemented (116)
[   74.641074][ T5147] syz.0.611: attempt to access beyond end of device
[   74.641074][ T5147] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[   74.674912][ T5151] loop0: detected capacity change from 0 to 512
[   74.681930][ T5151] ext4: Unknown parameter 'dont_appraise'
[   74.688295][ T5151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'.
[   74.707053][ T5151] bond1: entered allmulticast mode
[   74.712588][ T5151] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.769692][ T5156] syz.4.614: attempt to access beyond end of device
[   74.769692][ T5156] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[   74.827548][ T5164] loop4: detected capacity change from 0 to 512
[   75.145633][ T5180] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   75.154943][ T5180] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   75.477069][   T29] kauditd_printk_skb: 458 callbacks suppressed
[   75.477084][   T29] audit: type=1326 audit(2000000231.628:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f25d8c1ab39 code=0x7ffc0000
[   75.513666][   T29] audit: type=1326 audit(2000000231.628:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f25d8c1ab39 code=0x7ffc0000
[   75.536957][   T29] audit: type=1326 audit(2000000231.628:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f25d8c1ab39 code=0x7ffc0000
[   75.560164][   T29] audit: type=1326 audit(2000000231.628:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f25d8c1ab39 code=0x7ffc0000
[   75.583488][   T29] audit: type=1326 audit(2000000231.628:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f25d8c1ab39 code=0x7ffc0000
[   75.606729][   T29] audit: type=1326 audit(2000000231.628:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f25d8c1ab39 code=0x7ffc0000
[   75.630148][   T29] audit: type=1326 audit(2000000231.628:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f25d8c1ab39 code=0x7ffc0000
[   75.653682][   T29] audit: type=1326 audit(2000000231.628:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f25d8c1ab39 code=0x7ffc0000
[   75.677233][   T29] audit: type=1326 audit(2000000231.628:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f25d8c1ab39 code=0x7ffc0000
[   75.700585][   T29] audit: type=1326 audit(2000000231.628:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f25d8c1ab39 code=0x7ffc0000
[   75.729875][ T5208] FAULT_INJECTION: forcing a failure.
[   75.729875][ T5208] name failslab, interval 1, probability 0, space 0, times 0
[   75.742616][ T5208] CPU: 1 UID: 0 PID: 5208 Comm: syz.0.631 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   75.742665][ T5208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   75.742681][ T5208] Call Trace:
[   75.742690][ T5208]  <TASK>
[   75.742701][ T5208]  __dump_stack+0x1d/0x30
[   75.742772][ T5208]  dump_stack_lvl+0xe8/0x140
[   75.742798][ T5208]  dump_stack+0x15/0x1b
[   75.742829][ T5208]  should_fail_ex+0x265/0x280
[   75.742867][ T5208]  should_failslab+0x8c/0xb0
[   75.742969][ T5208]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[   75.743000][ T5208]  ? kstrdup_const+0x3e/0x50
[   75.743026][ T5208]  kstrdup+0x3e/0xd0
[   75.743048][ T5208]  kstrdup_const+0x3e/0x50
[   75.743070][ T5208]  __kernfs_new_node+0x3f/0x350
[   75.743139][ T5208]  ? put_dec_trunc8+0x119/0x140
[   75.743198][ T5208]  ? make_kgid+0x13b/0x320
[   75.743220][ T5208]  kernfs_new_node+0xd0/0x140
[   75.743250][ T5208]  kernfs_create_dir_ns+0x44/0xe0
[   75.743282][ T5208]  sysfs_create_dir_ns+0xd4/0x1d0
[   75.743320][ T5208]  kobject_add_internal+0x464/0x760
[   75.743370][ T5208]  kobject_add+0xdb/0x150
[   75.743465][ T5208]  ? device_add+0x88/0x770
[   75.743492][ T5208]  ? device_add+0x2e8/0x770
[   75.743521][ T5208]  device_add+0x2f6/0x770
[   75.743560][ T5208]  netdev_register_kobject+0xe8/0x210
[   75.743657][ T5208]  ? register_netdevice+0x916/0xf10
[   75.743708][ T5208]  register_netdevice+0x931/0xf10
[   75.743752][ T5208]  macvlan_common_newlink+0x9f0/0xbb0
[   75.743801][ T5208]  macvtap_newlink+0xde/0x140
[   75.743864][ T5208]  ? __pfx_macvtap_newlink+0x10/0x10
[   75.743898][ T5208]  rtnl_newlink_create+0x1bf/0x630
[   75.743984][ T5208]  ? security_capable+0x83/0x90
[   75.744146][ T5208]  ? netlink_ns_capable+0x86/0xa0
[   75.744261][ T5208]  rtnl_newlink+0xf29/0x12d0
[   75.744299][ T5208]  ? cgroup_rstat_updated+0xa3/0x510
[   75.744395][ T5208]  ? try_charge_memcg+0x174/0x870
[   75.744426][ T5208]  ? xas_load+0x413/0x430
[   75.744452][ T5208]  ? __memcg_slab_free_hook+0xb7/0x1c0
[   75.744507][ T5208]  ? __kfree_skb+0x109/0x150
[   75.744546][ T5208]  ? __rcu_read_unlock+0x4f/0x70
[   75.744571][ T5208]  ? avc_has_perm_noaudit+0x1b1/0x200
[   75.744621][ T5208]  ? selinux_capable+0x1f9/0x270
[   75.744652][ T5208]  ? security_capable+0x83/0x90
[   75.744707][ T5208]  ? ns_capable+0x7d/0xb0
[   75.744725][ T5208]  ? __pfx_rtnl_newlink+0x10/0x10
[   75.744747][ T5208]  rtnetlink_rcv_msg+0x5fb/0x6d0
[   75.744823][ T5208]  netlink_rcv_skb+0x120/0x220
[   75.744859][ T5208]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   75.744899][ T5208]  rtnetlink_rcv+0x1c/0x30
[   75.745022][ T5208]  netlink_unicast+0x59e/0x670
[   75.745063][ T5208]  netlink_sendmsg+0x58b/0x6b0
[   75.745135][ T5208]  ? __pfx_netlink_sendmsg+0x10/0x10
[   75.745175][ T5208]  __sock_sendmsg+0x142/0x180
[   75.745281][ T5208]  ____sys_sendmsg+0x31e/0x4e0
[   75.745348][ T5208]  ___sys_sendmsg+0x17b/0x1d0
[   75.745394][ T5208]  __x64_sys_sendmsg+0xd4/0x160
[   75.745423][ T5208]  x64_sys_call+0x2999/0x2fb0
[   75.745453][ T5208]  do_syscall_64+0xd0/0x1a0
[   75.745531][ T5208]  ? clear_bhb_loop+0x25/0x80
[   75.745559][ T5208]  ? clear_bhb_loop+0x25/0x80
[   75.745585][ T5208]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.745618][ T5208] RIP: 0033:0x7fd570f8e969
[   75.745635][ T5208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.745703][ T5208] RSP: 002b:00007fd56f5f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   75.745725][ T5208] RAX: ffffffffffffffda RBX: 00007fd5711b5fa0 RCX: 00007fd570f8e969
[   75.745740][ T5208] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[   75.745753][ T5208] RBP: 00007fd56f5f7090 R08: 0000000000000000 R09: 0000000000000000
[   75.745768][ T5208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   75.745829][ T5208] R13: 0000000000000000 R14: 00007fd5711b5fa0 R15: 00007ffd133be108
[   75.745853][ T5208]  </TASK>
[   75.745864][ T5208] kobject: kobject_add_internal failed for macvtap1 (error: -12 parent: net)
[   76.195723][ T5219] 9pnet_fd: p9_fd_create_unix (5219): problem connecting socket: ./file0: -2
[   76.436263][ T5237] loop2: detected capacity change from 0 to 512
[   76.712161][ T5250] loop2: detected capacity change from 0 to 128
[   76.720272][ T5250] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[   76.743791][ T5250] FAT-fs (loop2): FAT read failed (blocknr 128)
[   76.877388][ T5261] netlink: 3 bytes leftover after parsing attributes in process `syz.4.649'.
[   76.877556][ T5260] netlink: 3 bytes leftover after parsing attributes in process `syz.4.649'.
[   76.887853][ T5261] 0ªX¹¦À: renamed from caif0
[   76.901861][ T5261] 0ªX¹¦À: entered allmulticast mode
[   76.907190][ T5261] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[   76.923051][ T5260] 1ªX¹¦À: renamed from 
60ªX¹¦À
[   76.929633][ T5260] A link change request failed with some changes committed already. Interface 
61ªX¹¦À may have been left with an inconsistent configuration, please check.
[   76.962973][ T5263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'.
[   76.971873][ T5263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.650'.
[   76.983247][ T5263] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.992203][ T5263] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   77.000952][ T5263] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   77.009787][ T5263] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   77.077801][ T5269] Invalid ELF header magic: != ELF
[   77.193996][ T5281] FAULT_INJECTION: forcing a failure.
[   77.193996][ T5281] name failslab, interval 1, probability 0, space 0, times 0
[   77.206749][ T5281] CPU: 0 UID: 0 PID: 5281 Comm: syz.4.659 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   77.206780][ T5281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   77.206793][ T5281] Call Trace:
[   77.206801][ T5281]  <TASK>
[   77.206809][ T5281]  __dump_stack+0x1d/0x30
[   77.206833][ T5281]  dump_stack_lvl+0xe8/0x140
[   77.206905][ T5281]  dump_stack+0x15/0x1b
[   77.206922][ T5281]  should_fail_ex+0x265/0x280
[   77.206955][ T5281]  should_failslab+0x8c/0xb0
[   77.206985][ T5281]  kmem_cache_alloc_noprof+0x50/0x310
[   77.207066][ T5281]  ? skb_clone+0x151/0x1f0
[   77.207106][ T5281]  skb_clone+0x151/0x1f0
[   77.207136][ T5281]  __netlink_deliver_tap+0x2c9/0x500
[   77.207178][ T5281]  netlink_unicast+0x64c/0x670
[   77.207301][ T5281]  netlink_sendmsg+0x58b/0x6b0
[   77.207336][ T5281]  ? __pfx_netlink_sendmsg+0x10/0x10
[   77.207376][ T5281]  __sock_sendmsg+0x142/0x180
[   77.207427][ T5281]  ____sys_sendmsg+0x345/0x4e0
[   77.207454][ T5281]  ___sys_sendmsg+0x17b/0x1d0
[   77.207487][ T5281]  __sys_sendmmsg+0x178/0x300
[   77.207527][ T5281]  __x64_sys_sendmmsg+0x57/0x70
[   77.207591][ T5281]  x64_sys_call+0x2f2f/0x2fb0
[   77.207613][ T5281]  do_syscall_64+0xd0/0x1a0
[   77.207642][ T5281]  ? clear_bhb_loop+0x25/0x80
[   77.207669][ T5281]  ? clear_bhb_loop+0x25/0x80
[   77.207693][ T5281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.207788][ T5281] RIP: 0033:0x7f25d8c7e969
[   77.207807][ T5281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.207824][ T5281] RSP: 002b:00007f25d72e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   77.207841][ T5281] RAX: ffffffffffffffda RBX: 00007f25d8ea5fa0 RCX: 00007f25d8c7e969
[   77.207852][ T5281] RDX: 04000000000000c1 RSI: 00002000000002c0 RDI: 0000000000000006
[   77.207911][ T5281] RBP: 00007f25d72e7090 R08: 0000000000000000 R09: 0000000000000000
[   77.207925][ T5281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   77.207950][ T5281] R13: 0000000000000000 R14: 00007f25d8ea5fa0 R15: 00007ffd5503fad8
[   77.207972][ T5281]  </TASK>
[   77.214511][ T5281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'.
[   77.434257][ T5281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.659'.
[   77.524169][ T5296] pim6reg1: entered promiscuous mode
[   77.529522][ T5296] pim6reg1: entered allmulticast mode
[   77.649566][ T5304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.668'.
[   77.681279][ T5307] FAULT_INJECTION: forcing a failure.
[   77.681279][ T5307] name failslab, interval 1, probability 0, space 0, times 0
[   77.694075][ T5307] CPU: 1 UID: 0 PID: 5307 Comm: syz.2.669 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   77.694108][ T5307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   77.694120][ T5307] Call Trace:
[   77.694128][ T5307]  <TASK>
[   77.694199][ T5307]  __dump_stack+0x1d/0x30
[   77.694225][ T5307]  dump_stack_lvl+0xe8/0x140
[   77.694249][ T5307]  dump_stack+0x15/0x1b
[   77.694268][ T5307]  should_fail_ex+0x265/0x280
[   77.694366][ T5307]  should_failslab+0x8c/0xb0
[   77.694395][ T5307]  kmem_cache_alloc_noprof+0x50/0x310
[   77.694476][ T5307]  ? skb_clone+0x151/0x1f0
[   77.694502][ T5307]  skb_clone+0x151/0x1f0
[   77.694526][ T5307]  __netlink_deliver_tap+0x2c9/0x500
[   77.694635][ T5307]  netlink_unicast+0x64c/0x670
[   77.694708][ T5307]  netlink_sendmsg+0x58b/0x6b0
[   77.694752][ T5307]  ? __pfx_netlink_sendmsg+0x10/0x10
[   77.694797][ T5307]  __sock_sendmsg+0x142/0x180
[   77.694824][ T5307]  sock_write_iter+0x165/0x1b0
[   77.694898][ T5307]  ? __pfx_sock_write_iter+0x10/0x10
[   77.694921][ T5307]  vfs_write+0x49d/0x8d0
[   77.694949][ T5307]  ksys_write+0xda/0x1a0
[   77.695030][ T5307]  __x64_sys_write+0x40/0x50
[   77.695057][ T5307]  x64_sys_call+0x2cdd/0x2fb0
[   77.695180][ T5307]  do_syscall_64+0xd0/0x1a0
[   77.695258][ T5307]  ? clear_bhb_loop+0x25/0x80
[   77.695279][ T5307]  ? clear_bhb_loop+0x25/0x80
[   77.695440][ T5307]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.695463][ T5307] RIP: 0033:0x7fa96771e969
[   77.695482][ T5307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.695541][ T5307] RSP: 002b:00007fa965d87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   77.695565][ T5307] RAX: ffffffffffffffda RBX: 00007fa967945fa0 RCX: 00007fa96771e969
[   77.695591][ T5307] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000003
[   77.695606][ T5307] RBP: 00007fa965d87090 R08: 0000000000000000 R09: 0000000000000000
[   77.695620][ T5307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   77.695634][ T5307] R13: 0000000000000000 R14: 00007fa967945fa0 R15: 00007ffcd24b5288
[   77.695658][ T5307]  </TASK>
[   77.696976][ T5307] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.669'.
[   78.111429][ T5317] loop1: detected capacity change from 0 to 512
[   78.227854][ T5324] ==================================================================
[   78.236004][ T5324] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter
[   78.243406][ T5324] 
[   78.245741][ T5324] write to 0xffff888136e8a000 of 4096 bytes by task 5325 on cpu 1:
[   78.253636][ T5324]  _copy_from_iter+0x130/0xdd0
[   78.258413][ T5324]  copy_page_from_iter+0x15a/0x290
[   78.263532][ T5324]  process_vm_rw+0x659/0x950
[   78.268146][ T5324]  __x64_sys_process_vm_writev+0x78/0x90
[   78.273813][ T5324]  x64_sys_call+0xe80/0x2fb0
[   78.278415][ T5324]  do_syscall_64+0xd0/0x1a0
[   78.282943][ T5324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.288904][ T5324] 
[   78.291246][ T5324] write to 0xffff888136e8a000 of 4096 bytes by task 5324 on cpu 0:
[   78.299144][ T5324]  _copy_from_iter+0x130/0xdd0
[   78.303926][ T5324]  copy_page_from_iter+0x15a/0x290
[   78.309046][ T5324]  process_vm_rw+0x659/0x950
[   78.313641][ T5324]  __x64_sys_process_vm_writev+0x78/0x90
[   78.319300][ T5324]  x64_sys_call+0xe80/0x2fb0
[   78.323899][ T5324]  do_syscall_64+0xd0/0x1a0
[   78.328414][ T5324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.334323][ T5324] 
[   78.336660][ T5324] Reported by Kernel Concurrency Sanitizer on:
[   78.342824][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.2.677 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   78.355162][ T5324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   78.365226][ T5324] ==================================================================
[   78.390572][ T5322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.410580][ T5322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.485556][ T5324] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.536503][ T5324] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.584767][ T5324] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.657590][ T5324] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.699387][ T5324] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.711525][ T5324] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.723451][ T5324] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.735361][ T5324] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0